$ rpki-client -vvf repo-rpki.idnic.net/repo/cafcbfbb-ba3f-4d53-a04f-14d6f4be0cb1/1/B92F0FB3E141D52ED2A71FA483ED3C6D723F60E2.mft File: B92F0FB3E141D52ED2A71FA483ED3C6D723F60E2.mft (raw, json) Hash identifier: 3K8fwI/1LgsEfKi6Ge1/s3RDtbv5VUKP/E9bvbwaUhg= Subject key identifier: 14:31:F9:CE:7D:DB:4A:E8:89:20:4D:D7:81:67:67:AF:34:DB:16:D8 Authority key identifier: B9:2F:0F:B3:E1:41:D5:2E:D2:A7:1F:A4:83:ED:3C:6D:72:3F:60:E2 Certificate issuer: /CN=B92F0FB3E141D52ED2A71FA483ED3C6D723F60E2 Certificate serial: 32610FE468C496E63D22926BC4418C51C3E45619 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B92F0FB3E141D52ED2A71FA483ED3C6D723F60E2.cer Subject info access: rsync://repo-rpki.idnic.net/repo/cafcbfbb-ba3f-4d53-a04f-14d6f4be0cb1/1/B92F0FB3E141D52ED2A71FA483ED3C6D723F60E2.mft Manifest number: 7E Signing time: Fri 05 Sep 2025 18:01:32 +0000 Manifest this update: Fri 05 Sep 2025 17:56:32 +0000 Manifest next update: Tue 09 Sep 2025 05:24:32 +0000 Files and hashes: 1: 323030313a6466343a363463303a3a2f34382d3438203d3e20313533313430.roa (hash: yyzmdDb8FTjdC+THNvwdhgAOOXsuzFTHgJxxHYpFD6k=) 2: B92F0FB3E141D52ED2A71FA483ED3C6D723F60E2.crl (hash: +Aj/Ph2nU6+JgRmQYFNPrxNAEciWU4MtMNBak8V9EH0=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/cafcbfbb-ba3f-4d53-a04f-14d6f4be0cb1/1/B92F0FB3E141D52ED2A71FA483ED3C6D723F60E2.crl rsync://repo-rpki.idnic.net/repo/cafcbfbb-ba3f-4d53-a04f-14d6f4be0cb1/1/B92F0FB3E141D52ED2A71FA483ED3C6D723F60E2.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B92F0FB3E141D52ED2A71FA483ED3C6D723F60E2.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 09 Sep 2025 05:24:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 32:61:0f:e4:68:c4:96:e6:3d:22:92:6b:c4:41:8c:51:c3:e4:56:19 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B92F0FB3E141D52ED2A71FA483ED3C6D723F60E2 Validity Not Before: Sep 5 17:56:32 2025 GMT Not After : Sep 9 05:24:32 2025 GMT Subject: CN=1431F9CE7DDB4AE889204DD7816767AF34DB16D8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:da:0b:9a:25:0f:98:16:a4:02:0e:7b:ba:63: 25:b8:7a:45:12:66:88:a5:9c:33:cc:b2:80:63:d3: 02:e5:59:ce:69:5d:ee:98:50:8a:bc:f7:a9:63:23: 17:75:72:b2:07:f6:ff:77:9c:e9:b7:26:62:64:66: 07:b8:16:78:e2:fb:df:3f:8b:c0:2d:cb:e9:67:7f: 76:65:0b:81:15:11:50:07:92:d1:ef:8b:07:c5:fc: 4c:a0:e4:0f:78:50:13:aa:d1:fb:e8:d6:e9:0e:e7: b7:4d:01:81:e3:82:c9:c8:b7:07:00:37:44:b9:b9: 98:4c:59:90:dc:19:99:dd:e6:4f:6c:69:d7:ed:34: 45:25:16:d0:ab:c8:44:fe:3a:e8:2e:68:c8:15:57: 81:83:4d:fe:6d:03:a6:4b:2f:c9:7e:60:e4:f8:d6: 19:e0:e8:8f:60:df:c1:d4:59:84:3b:1e:d8:1d:79: 06:ca:a1:4e:bc:0f:17:ff:0f:5c:28:6e:f0:de:ba: d5:7c:ae:b6:15:a3:dd:ac:15:33:56:55:05:de:93: b8:54:f7:b3:f7:f6:21:41:24:75:5a:16:7c:29:0d: 6f:f2:f7:27:20:8b:f0:27:21:ca:9b:6a:7b:de:5a: 15:e9:95:2a:20:dd:1a:81:65:12:d5:4d:fc:30:c2: 3d:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:31:F9:CE:7D:DB:4A:E8:89:20:4D:D7:81:67:67:AF:34:DB:16:D8 X509v3 Authority Key Identifier: keyid:B9:2F:0F:B3:E1:41:D5:2E:D2:A7:1F:A4:83:ED:3C:6D:72:3F:60:E2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/cafcbfbb-ba3f-4d53-a04f-14d6f4be0cb1/1/B92F0FB3E141D52ED2A71FA483ED3C6D723F60E2.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B92F0FB3E141D52ED2A71FA483ED3C6D723F60E2.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/cafcbfbb-ba3f-4d53-a04f-14d6f4be0cb1/1/B92F0FB3E141D52ED2A71FA483ED3C6D723F60E2.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 38:3f:38:db:7b:7d:df:fd:c6:2f:96:f6:d7:8b:29:71:1e:f4: 6a:67:be:07:c0:6d:20:0e:05:7f:52:19:64:6e:90:d3:bd:d5: 31:3d:e7:ce:d6:a2:07:df:55:24:f9:97:98:9d:52:63:4c:2e: b7:33:61:a3:76:a4:c5:f3:8f:e2:89:50:44:14:98:fe:d2:bd: 99:9d:2f:6f:e9:cd:de:c9:d6:93:ce:66:47:b2:b1:a5:b7:0b: 9b:08:81:d2:14:88:f1:9e:71:7a:d2:0b:fa:65:38:ed:46:78: 42:72:04:ca:ff:43:ea:7c:d9:c3:4b:5a:65:5e:89:d5:9b:4c: 54:ea:17:f8:63:da:aa:68:56:b3:1a:0f:86:86:d5:ac:94:8d: 2b:60:38:c4:6b:ab:74:3e:5d:67:1b:bc:55:aa:67:b8:b6:80: eb:ef:04:bc:b8:ba:42:36:69:04:0a:7e:06:4c:3e:a3:ca:2f: 58:94:d3:84:e4:96:ba:02:ff:43:97:a7:22:d8:e8:4d:0b:7a: 89:b6:99:77:0a:8a:ac:df:55:d5:5e:b8:88:e6:74:a8:53:34: 29:36:ce:26:dd:e4:88:1b:9a:d5:d2:84:7a:8b:db:dc:7d:d1: b0:6e:89:5b:61:34:7d:db:86:46:2e:ef:6c:c2:32:b6:66:16: 58:11:e3:1a -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUMmEP5GjEluY9IpJrxEGMUcPkVhkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjkyRjBGQjNFMTQxRDUyRUQyQTcxRkE0ODNFRDNDNkQ3 MjNGNjBFMjAeFw0yNTA5MDUxNzU2MzJaFw0yNTA5MDkwNTI0MzJaMDMxMTAvBgNV BAMTKDE0MzFGOUNFN0REQjRBRTg4OTIwNERENzgxNjc2N0FGMzREQjE2RDgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCc2guaJQ+YFqQCDnu6YyW4ekUS ZoilnDPMsoBj0wLlWc5pXe6YUIq896ljIxd1crIH9v93nOm3JmJkZge4Fnji+98/ i8Aty+lnf3ZlC4EVEVAHktHviwfF/Eyg5A94UBOq0fvo1ukO57dNAYHjgsnItwcA N0S5uZhMWZDcGZnd5k9sadftNEUlFtCryET+OuguaMgVV4GDTf5tA6ZLL8l+YOT4 1hng6I9g38HUWYQ7HtgdeQbKoU68Dxf/D1wobvDeutV8rrYVo92sFTNWVQXek7hU 97P39iFBJHVaFnwpDW/y9ycgi/AnIcqbanveWhXplSog3RqBZRLVTfwwwj0fAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUFDH5zn3bSuiJIE3XgWdnrzTbFtgwHwYDVR0j BBgwFoAUuS8Ps+FB1S7Spx+kg+08bXI/YOIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j YWZjYmZiYi1iYTNmLTRkNTMtYTA0Zi0xNGQ2ZjRiZTBjYjEvMS9COTJGMEZCM0Ux NDFENTJFRDJBNzFGQTQ4M0VEM0M2RDcyM0Y2MEUyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQjkyRjBGQjNFMTQxRDUyRUQyQTcxRkE0ODNFRDNDNkQ3MjNG NjBFMi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vY2FmY2JmYmItYmEzZi00ZDUzLWEw NGYtMTRkNmY0YmUwY2IxLzEvQjkyRjBGQjNFMTQxRDUyRUQyQTcxRkE0ODNFRDND NkQ3MjNGNjBFMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADg/ONt7fd/9xi+W9teLKXEe9GpnvgfAbSAO BX9SGWRukNO91TE9587WogffVST5l5idUmNMLrczYaN2pMXzj+KJUEQUmP7SvZmd L2/pzd7J1pPOZkeysaW3C5sIgdIUiPGecXrSC/plOO1GeEJyBMr/Q+p82cNLWmVe idWbTFTqF/hj2qpoVrMaD4aG1ayUjStgOMRrq3Q+XWcbvFWqZ7i2gOvvBLy4ukI2 aQQKfgZMPqPKL1iU04TklroC/0OXpyLY6E0Leom2mXcKiqzfVdVeuIjmdKhTNCk2 zibd5IgbmtXShHqL29x90bBuiVthNH3bhkYu72zCMrZmFlgR4xo= -----END CERTIFICATE-----Generated at Sun Sep 7 15:13:21 2025 by rpki-client