$ rpki-client -vvf repo-rpki.idnic.net/repo/ca124e6a-f51b-46d0-8ea3-76b2744558a6/0/B178402BEDE3EC5A5EE2E0E71F736A1360C06AF6.mft File: B178402BEDE3EC5A5EE2E0E71F736A1360C06AF6.mft (raw, json) Hash identifier: 5HQ/C/Q/puT7D83jChINIJPDKKVz/ZnAN1ZZlpy8VeM= Subject key identifier: 67:B6:09:07:A1:F2:3B:FC:1E:BA:AD:AC:A8:94:8B:93:E8:22:45:4E Authority key identifier: B1:78:40:2B:ED:E3:EC:5A:5E:E2:E0:E7:1F:73:6A:13:60:C0:6A:F6 Certificate issuer: /CN=B178402BEDE3EC5A5EE2E0E71F736A1360C06AF6 Certificate serial: 32ECB09C9BA9C2763C22D98BF2A8A4BF98D1FDCE Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B178402BEDE3EC5A5EE2E0E71F736A1360C06AF6.cer Subject info access: rsync://repo-rpki.idnic.net/repo/ca124e6a-f51b-46d0-8ea3-76b2744558a6/0/B178402BEDE3EC5A5EE2E0E71F736A1360C06AF6.mft Manifest number: D9 Signing time: Fri 05 Sep 2025 17:21:56 +0000 Manifest this update: Fri 05 Sep 2025 17:16:56 +0000 Manifest next update: Tue 09 Sep 2025 05:19:56 +0000 Files and hashes: 1: B178402BEDE3EC5A5EE2E0E71F736A1360C06AF6.crl (hash: lgoesqe7anwBboQNT2AZjqI80BwEEoR+PFySscbZAiQ=) 2: 3130332e372e3130362e302f32332d3233203d3e20313531353939.roa (hash: gKuzS0cjEmgd3PQlr3qETih9wH6v1uECgkfmF5qpn9s=) 3: 3130332e372e3130372e302f32342d3234203d3e20313531353939.roa (hash: ZOp7UUJVVpn+HE+2CW6AOz2wc15ptx3FxJXIlhX1FTo=) 4: 3130332e372e3130362e302f32342d3234203d3e20313531353939.roa (hash: 0rbZlrsZPTaqVhI90ea5Mcg8UbhZvU1fUTVZXNAKo74=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/ca124e6a-f51b-46d0-8ea3-76b2744558a6/0/B178402BEDE3EC5A5EE2E0E71F736A1360C06AF6.crl rsync://repo-rpki.idnic.net/repo/ca124e6a-f51b-46d0-8ea3-76b2744558a6/0/B178402BEDE3EC5A5EE2E0E71F736A1360C06AF6.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B178402BEDE3EC5A5EE2E0E71F736A1360C06AF6.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 09 Sep 2025 05:19:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 32:ec:b0:9c:9b:a9:c2:76:3c:22:d9:8b:f2:a8:a4:bf:98:d1:fd:ce Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B178402BEDE3EC5A5EE2E0E71F736A1360C06AF6 Validity Not Before: Sep 5 17:16:56 2025 GMT Not After : Sep 9 05:19:56 2025 GMT Subject: CN=67B60907A1F23BFC1EBAADACA8948B93E822454E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:ff:39:2d:d8:69:1b:7b:c5:70:9d:55:87:01: 21:40:b3:e8:04:79:b8:da:ab:6d:cb:6b:e8:d3:b3: d9:b6:09:cb:a3:6f:8b:31:30:1f:54:54:b3:aa:68: 86:ee:42:ea:57:9d:d2:5c:ab:77:0e:4a:84:13:bf: 68:28:1e:7f:af:b6:35:f9:4d:37:33:5a:d5:62:ae: 1c:50:01:0f:65:59:c3:40:ee:e9:83:d6:78:32:b4: cc:9c:83:b9:7d:c8:ba:87:67:b5:b5:39:31:f3:b8: 6b:7b:ed:f8:49:85:73:f5:73:f0:89:d0:fe:3b:a1: a7:5e:5d:26:06:c6:05:9f:56:6d:a5:e0:d3:df:07: b6:63:40:b8:f5:b0:8e:94:cd:61:66:fd:29:74:45: 22:48:2a:e0:20:6b:1c:0b:3f:b9:5a:5b:c8:8d:40: f5:23:be:98:50:df:82:26:33:62:f9:66:a0:78:82: c7:bd:04:14:7e:39:9f:bd:df:6d:7e:32:9a:40:2e: f2:5f:48:34:ad:5c:c3:07:0c:5e:0c:e6:2d:4a:af: 2c:69:e7:be:2a:5d:bc:3b:05:aa:82:fb:97:bd:26: 49:14:0f:e0:75:0e:2f:fd:d1:64:98:5b:cf:e6:b4: 2e:af:2b:fe:3c:48:cb:22:5e:75:a8:5c:01:10:8b: 78:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:B6:09:07:A1:F2:3B:FC:1E:BA:AD:AC:A8:94:8B:93:E8:22:45:4E X509v3 Authority Key Identifier: keyid:B1:78:40:2B:ED:E3:EC:5A:5E:E2:E0:E7:1F:73:6A:13:60:C0:6A:F6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/ca124e6a-f51b-46d0-8ea3-76b2744558a6/0/B178402BEDE3EC5A5EE2E0E71F736A1360C06AF6.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B178402BEDE3EC5A5EE2E0E71F736A1360C06AF6.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ca124e6a-f51b-46d0-8ea3-76b2744558a6/0/B178402BEDE3EC5A5EE2E0E71F736A1360C06AF6.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9f:00:aa:b4:2a:aa:74:9a:c2:06:31:cc:33:f7:1a:9d:1b:4b: 2d:68:75:98:89:a1:05:ce:93:54:fe:99:c8:99:cb:45:ec:ba: 0d:74:df:2d:ca:0a:2c:34:40:a5:41:4c:c2:f0:02:ea:23:b6: 42:fd:39:05:57:c2:5a:fa:1f:31:9b:20:8e:69:22:e5:c8:e4: 12:c0:97:30:30:d4:02:e5:e0:50:ba:8b:61:55:d6:08:54:7d: 35:1c:26:9b:92:44:c9:18:56:af:a5:09:e4:28:d7:47:d6:36: 48:73:d3:8c:07:86:90:cb:be:db:72:ac:a9:aa:d9:47:4f:7f: d9:32:e2:49:99:64:07:14:0a:02:e0:46:26:e2:3e:06:54:e5: 66:4b:26:30:3f:23:f8:13:a6:d3:89:98:52:4d:f1:f4:0e:c6: 86:6a:9a:cd:2a:3d:a1:d9:9c:f7:47:94:4f:40:1e:f1:1a:34: d2:44:b6:a3:10:7a:b4:74:b5:54:7b:da:d3:ca:3e:45:6c:84: 9d:73:46:bc:5b:f5:fb:3c:aa:94:d2:aa:07:cc:4a:3a:e9:37: c0:d5:c2:0a:ef:98:ae:76:87:fe:7f:82:20:d6:c3:b0:41:3b: ca:3a:53:1e:ed:93:e0:d3:11:50:79:4f:69:e3:ba:76:3c:68: 8e:a4:93:36 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUMuywnJupwnY8ItmL8qikv5jR/c4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjE3ODQwMkJFREUzRUM1QTVFRTJFMEU3MUY3MzZBMTM2 MEMwNkFGNjAeFw0yNTA5MDUxNzE2NTZaFw0yNTA5MDkwNTE5NTZaMDMxMTAvBgNV BAMTKDY3QjYwOTA3QTFGMjNCRkMxRUJBQURBQ0E4OTQ4QjkzRTgyMjQ1NEUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC3/zkt2Gkbe8VwnVWHASFAs+gE ebjaq23La+jTs9m2Ccujb4sxMB9UVLOqaIbuQupXndJcq3cOSoQTv2goHn+vtjX5 TTczWtVirhxQAQ9lWcNA7umD1ngytMycg7l9yLqHZ7W1OTHzuGt77fhJhXP1c/CJ 0P47oadeXSYGxgWfVm2l4NPfB7ZjQLj1sI6UzWFm/Sl0RSJIKuAgaxwLP7laW8iN QPUjvphQ34ImM2L5ZqB4gse9BBR+OZ+9321+MppALvJfSDStXMMHDF4M5i1Kryxp 574qXbw7BaqC+5e9JkkUD+B1Di/90WSYW8/mtC6vK/48SMsiXnWoXAEQi3jxAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUZ7YJB6HyO/weuq2sqJSLk+giRU4wHwYDVR0j BBgwFoAUsXhAK+3j7Fpe4uDnH3NqE2DAavYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j YTEyNGU2YS1mNTFiLTQ2ZDAtOGVhMy03NmIyNzQ0NTU4YTYvMC9CMTc4NDAyQkVE RTNFQzVBNUVFMkUwRTcxRjczNkExMzYwQzA2QUY2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQjE3ODQwMkJFREUzRUM1QTVFRTJFMEU3MUY3MzZBMTM2MEMw NkFGNi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vY2ExMjRlNmEtZjUxYi00NmQwLThl YTMtNzZiMjc0NDU1OGE2LzAvQjE3ODQwMkJFREUzRUM1QTVFRTJFMEU3MUY3MzZB MTM2MEMwNkFGNi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJ8AqrQqqnSawgYxzDP3Gp0bSy1odZiJoQXO k1T+mciZy0Xsug103y3KCiw0QKVBTMLwAuojtkL9OQVXwlr6HzGbII5pIuXI5BLA lzAw1ALl4FC6i2FV1ghUfTUcJpuSRMkYVq+lCeQo10fWNkhz04wHhpDLvttyrKmq 2UdPf9ky4kmZZAcUCgLgRibiPgZU5WZLJjA/I/gTptOJmFJN8fQOxoZqms0qPaHZ nPdHlE9AHvEaNNJEtqMQerR0tVR72tPKPkVshJ1zRrxb9fs8qpTSqgfMSjrpN8DV wgrvmK52h/5/giDWw7BBO8o6Ux7tk+DTEVB5T2njunY8aI6kkzY= -----END CERTIFICATE-----Generated at Sun Sep 7 15:27:12 2025 by rpki-client