$ rpki-client -vvf repo-rpki.idnic.net/repo/c846f422-c302-4462-b584-700e9346ca09/0/B2B2F42BF1978AD094186480A7DA0086FD7C2919.mft File: B2B2F42BF1978AD094186480A7DA0086FD7C2919.mft (raw, json) Hash identifier: 4w7QI8ubEvRZrbhjsNy56181CTmU04FqZsk2ufIdcCw= Subject key identifier: 5A:89:D6:B2:08:9F:4A:71:57:6A:DC:AB:33:63:71:6E:70:1E:C0:6C Authority key identifier: B2:B2:F4:2B:F1:97:8A:D0:94:18:64:80:A7:DA:00:86:FD:7C:29:19 Certificate issuer: /CN=B2B2F42BF1978AD094186480A7DA0086FD7C2919 Certificate serial: 71C21449C3A360819BB9762C1AA6BAAE1F5BC3C7 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B2B2F42BF1978AD094186480A7DA0086FD7C2919.cer Subject info access: rsync://repo-rpki.idnic.net/repo/c846f422-c302-4462-b584-700e9346ca09/0/B2B2F42BF1978AD094186480A7DA0086FD7C2919.mft Manifest number: 01A3 Signing time: Sat 06 Sep 2025 17:01:32 +0000 Manifest this update: Sat 06 Sep 2025 16:56:32 +0000 Manifest next update: Tue 09 Sep 2025 18:55:32 +0000 Files and hashes: 1: 3130332e32332e39392e302f32342d3234203d3e20313530323435.roa (hash: 7tXNJtByPVAUWKN7rPTJrICa1r391Ty+571rFNCuCe4=) 2: 3130332e32332e39382e302f32332d3233203d3e20313530323435.roa (hash: 4vMfmSE2Nr1Jh9euWzmJY0IXJeyMyzfrb4vovMJmB9A=) 3: 3130332e32332e39382e302f32342d3234203d3e20313530323435.roa (hash: zfWwMyIyfYFsLYce6cLTwp+3PWwf0vu9ehqN4lOZ8SU=) 4: B2B2F42BF1978AD094186480A7DA0086FD7C2919.crl (hash: t0ecSWkLo4ckrlpJn1kMIuMGgTPv/p4HR2wZTnDnu3w=) 5: 323030313a6466313a653034303a3a2f34382d3438203d3e20313530323435.roa (hash: gtOr9NwzW8Aa7fZGd03VkoCWA9Dhf88Ryc02CpBSPGY=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/c846f422-c302-4462-b584-700e9346ca09/0/B2B2F42BF1978AD094186480A7DA0086FD7C2919.crl rsync://repo-rpki.idnic.net/repo/c846f422-c302-4462-b584-700e9346ca09/0/B2B2F42BF1978AD094186480A7DA0086FD7C2919.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B2B2F42BF1978AD094186480A7DA0086FD7C2919.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 09 Sep 2025 18:55:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 71:c2:14:49:c3:a3:60:81:9b:b9:76:2c:1a:a6:ba:ae:1f:5b:c3:c7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B2B2F42BF1978AD094186480A7DA0086FD7C2919 Validity Not Before: Sep 6 16:56:32 2025 GMT Not After : Sep 9 18:55:32 2025 GMT Subject: CN=5A89D6B2089F4A71576ADCAB3363716E701EC06C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:dd:e9:87:32:bf:08:41:22:b0:97:ff:41:d0: f1:3d:28:92:db:e8:5e:86:34:95:fb:1a:64:8d:6c: 70:d3:73:b6:cf:69:e3:22:ef:f7:13:00:0c:76:f8: 53:ab:e2:02:d9:c3:c7:24:ec:a8:f8:a8:49:65:c5: 66:58:af:17:4e:e2:48:bb:7f:5c:e9:dc:28:cb:25: 68:16:81:84:0f:be:ea:30:1b:8b:9d:d6:59:f1:80: 21:7a:c5:43:86:58:32:55:07:39:5d:44:13:68:8d: d5:4b:28:64:42:16:d1:c0:dd:86:69:f7:cc:87:71: de:7f:87:65:f0:de:da:fd:f8:1d:17:da:b5:26:b9: 15:3d:dd:cc:ae:f0:a6:66:bf:a6:30:6d:d2:a0:e5: ec:1a:20:7b:dd:6c:b0:48:d5:89:9e:53:01:51:98: 41:0d:3e:8b:46:05:e5:c5:e4:05:2e:c1:21:61:2c: 7c:c3:c2:95:d8:3b:d2:ac:1e:ac:ed:88:24:1f:dd: 93:cb:b6:cd:eb:1d:48:12:83:b1:97:2d:fd:e2:57: 4d:69:9e:5b:7a:03:63:19:74:7c:4c:7a:be:78:48: 07:d6:da:52:f8:36:89:0c:77:c5:29:f6:90:44:bf: 36:8c:3f:9b:51:d4:62:12:08:b4:73:6a:40:a5:c8: 4c:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:89:D6:B2:08:9F:4A:71:57:6A:DC:AB:33:63:71:6E:70:1E:C0:6C X509v3 Authority Key Identifier: keyid:B2:B2:F4:2B:F1:97:8A:D0:94:18:64:80:A7:DA:00:86:FD:7C:29:19 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/c846f422-c302-4462-b584-700e9346ca09/0/B2B2F42BF1978AD094186480A7DA0086FD7C2919.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B2B2F42BF1978AD094186480A7DA0086FD7C2919.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c846f422-c302-4462-b584-700e9346ca09/0/B2B2F42BF1978AD094186480A7DA0086FD7C2919.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 55:f6:d3:1c:96:ae:a5:58:47:3f:4a:dc:08:41:e9:a8:61:32: 31:14:af:8a:6d:db:6f:03:0a:84:5d:ab:0e:dd:83:f1:7b:54: b4:ae:56:6c:54:ff:84:4c:57:12:48:85:11:23:c6:27:7c:1e: 61:83:8e:ab:5c:2f:0b:8a:00:9e:06:39:aa:86:a4:c6:0c:8a: 0e:b8:16:3b:ac:ef:36:14:b6:c1:15:02:e9:31:8d:c2:83:85: fa:76:89:98:e5:d9:47:fb:6f:f3:b8:1b:f3:b8:d3:76:b9:5c: e7:3a:f5:07:63:9f:c2:43:a0:81:34:82:0d:27:9c:7c:8e:74: ac:97:83:54:a9:ea:0c:f7:99:d3:47:11:c1:38:ef:3a:71:04: ba:57:84:f0:e3:22:99:dd:54:4f:eb:50:bc:c7:2b:86:9c:97: 2c:46:8a:46:1f:85:58:af:58:ef:b1:b6:5c:1d:c7:85:62:49: 64:83:f4:a5:b5:6e:06:1e:06:68:9d:e7:c3:63:d7:d7:3b:8e: 83:e4:bb:41:d2:f6:a3:67:07:d6:03:c0:9e:9a:c6:b2:53:3f: 37:df:5e:26:52:ac:77:b3:85:57:80:6e:bc:a5:3c:f4:a0:30: ba:44:74:d3:e3:bb:c9:21:45:89:58:12:32:87:98:54:56:1b: 9b:15:59:02 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUccIUScOjYIGbuXYsGqa6rh9bw8cwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjJCMkY0MkJGMTk3OEFEMDk0MTg2NDgwQTdEQTAwODZG RDdDMjkxOTAeFw0yNTA5MDYxNjU2MzJaFw0yNTA5MDkxODU1MzJaMDMxMTAvBgNV BAMTKDVBODlENkIyMDg5RjRBNzE1NzZBRENBQjMzNjM3MTZFNzAxRUMwNkMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCi3emHMr8IQSKwl/9B0PE9KJLb 6F6GNJX7GmSNbHDTc7bPaeMi7/cTAAx2+FOr4gLZw8ck7Kj4qEllxWZYrxdO4ki7 f1zp3CjLJWgWgYQPvuowG4ud1lnxgCF6xUOGWDJVBzldRBNojdVLKGRCFtHA3YZp 98yHcd5/h2Xw3tr9+B0X2rUmuRU93cyu8KZmv6YwbdKg5ewaIHvdbLBI1YmeUwFR mEENPotGBeXF5AUuwSFhLHzDwpXYO9KsHqztiCQf3ZPLts3rHUgSg7GXLf3iV01p nlt6A2MZdHxMer54SAfW2lL4NokMd8Up9pBEvzaMP5tR1GISCLRzakClyExbAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUWonWsgifSnFXatyrM2NxbnAewGwwHwYDVR0j BBgwFoAUsrL0K/GXitCUGGSAp9oAhv18KRkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j ODQ2ZjQyMi1jMzAyLTQ0NjItYjU4NC03MDBlOTM0NmNhMDkvMC9CMkIyRjQyQkYx OTc4QUQwOTQxODY0ODBBN0RBMDA4NkZEN0MyOTE5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQjJCMkY0MkJGMTk3OEFEMDk0MTg2NDgwQTdEQTAwODZGRDdD MjkxOS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYzg0NmY0MjItYzMwMi00NDYyLWI1 ODQtNzAwZTkzNDZjYTA5LzAvQjJCMkY0MkJGMTk3OEFEMDk0MTg2NDgwQTdEQTAw ODZGRDdDMjkxOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFX20xyWrqVYRz9K3AhB6ahhMjEUr4pt228D CoRdqw7dg/F7VLSuVmxU/4RMVxJIhREjxid8HmGDjqtcLwuKAJ4GOaqGpMYMig64 Fjus7zYUtsEVAukxjcKDhfp2iZjl2Uf7b/O4G/O403a5XOc69Qdjn8JDoIE0gg0n nHyOdKyXg1Sp6gz3mdNHEcE47zpxBLpXhPDjIpndVE/rULzHK4aclyxGikYfhViv WO+xtlwdx4ViSWSD9KW1bgYeBmid58Nj19c7joPku0HS9qNnB9YDwJ6axrJTPzff XiZSrHezhVeAbrylPPSgMLpEdNPju8khRYlYEjKHmFRWG5sVWQI= -----END CERTIFICATE-----Generated at Sun Sep 7 14:02:13 2025 by rpki-client