$ rpki-client -vvf repo-rpki.idnic.net/repo/cf7b7677-6204-405f-8ba2-e714324c15d7/0/B76CEE66CD329E4EDD33E6D3452A33FBBE00D741.mft File: B76CEE66CD329E4EDD33E6D3452A33FBBE00D741.mft (raw, json) Hash identifier: eeYv0Cb4nch9q8mRdhJ4rsS3FzXwUXZdznbXBcRrW/M= Subject key identifier: 3B:43:D9:EE:12:66:EC:17:B5:4F:37:91:B5:2D:A5:AF:C9:80:67:36 Authority key identifier: B7:6C:EE:66:CD:32:9E:4E:DD:33:E6:D3:45:2A:33:FB:BE:00:D7:41 Certificate issuer: /CN=B76CEE66CD329E4EDD33E6D3452A33FBBE00D741 Certificate serial: 30B0F5589CAF2DC90F6A4C83F25101C0B0CBF318 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B76CEE66CD329E4EDD33E6D3452A33FBBE00D741.cer Subject info access: rsync://repo-rpki.idnic.net/repo/cf7b7677-6204-405f-8ba2-e714324c15d7/0/B76CEE66CD329E4EDD33E6D3452A33FBBE00D741.mft Manifest number: 0220 Signing time: Sat 06 Sep 2025 08:20:52 +0000 Manifest this update: Sat 06 Sep 2025 08:15:52 +0000 Manifest next update: Tue 09 Sep 2025 18:39:52 +0000 Files and hashes: 1: 3130332e3138362e39342e302f32332d3234203d3e20313439373430.roa (hash: 36f1oVCDIma5/edGeBmPtM2U4zeHtnBlVDsNRr5sez8=) 2: B76CEE66CD329E4EDD33E6D3452A33FBBE00D741.crl (hash: 6AnZZpHmKK6CxkY16OvEuouoFn6jcigLR5gh3BYpIOI=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/cf7b7677-6204-405f-8ba2-e714324c15d7/0/B76CEE66CD329E4EDD33E6D3452A33FBBE00D741.crl rsync://repo-rpki.idnic.net/repo/cf7b7677-6204-405f-8ba2-e714324c15d7/0/B76CEE66CD329E4EDD33E6D3452A33FBBE00D741.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B76CEE66CD329E4EDD33E6D3452A33FBBE00D741.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 09 Sep 2025 18:39:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 30:b0:f5:58:9c:af:2d:c9:0f:6a:4c:83:f2:51:01:c0:b0:cb:f3:18 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B76CEE66CD329E4EDD33E6D3452A33FBBE00D741 Validity Not Before: Sep 6 08:15:52 2025 GMT Not After : Sep 9 18:39:52 2025 GMT Subject: CN=3B43D9EE1266EC17B54F3791B52DA5AFC9806736 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:25:87:4a:3e:9f:db:fe:03:77:94:79:20:f0: 37:49:ce:53:1f:7d:3b:ff:c6:d8:12:8e:52:ff:50: 00:be:d0:84:99:8e:0b:8f:12:26:d7:0a:50:20:79: 25:e5:30:c2:6f:d5:d0:04:59:f7:8d:52:da:b1:24: 75:f1:37:a6:19:f1:5a:52:ae:31:34:18:3b:07:9a: 95:9a:fc:5e:3b:e5:34:20:39:f5:79:52:fa:a4:7f: ec:1a:bf:fe:90:dc:d9:cf:43:9c:09:1e:f4:7d:85: f8:44:18:c0:fe:3a:8a:68:5c:9a:7e:a8:c4:75:74: 34:c5:47:8a:73:d5:7b:b7:b1:28:01:34:37:15:e0: cb:43:1a:95:20:8d:4f:e1:ec:17:71:64:16:68:0a: d0:4c:54:62:24:0e:32:8a:4f:69:b7:a8:be:ae:04: 69:38:af:4b:21:e4:d8:0a:e5:d8:2f:34:d8:c8:a6: 1a:98:8f:e1:78:18:46:53:b5:a5:ce:84:01:6b:e8: be:44:12:3a:15:11:b3:7d:50:35:aa:ea:15:18:23: ba:cf:71:96:6b:bb:21:5a:db:88:ba:3f:e0:eb:36: b6:6b:99:f5:d5:7f:87:97:5c:08:5c:3d:fc:9f:35: 87:b2:dd:a0:44:d2:38:87:8e:96:6c:b2:f3:0b:01: 64:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3B:43:D9:EE:12:66:EC:17:B5:4F:37:91:B5:2D:A5:AF:C9:80:67:36 X509v3 Authority Key Identifier: keyid:B7:6C:EE:66:CD:32:9E:4E:DD:33:E6:D3:45:2A:33:FB:BE:00:D7:41 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/cf7b7677-6204-405f-8ba2-e714324c15d7/0/B76CEE66CD329E4EDD33E6D3452A33FBBE00D741.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B76CEE66CD329E4EDD33E6D3452A33FBBE00D741.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/cf7b7677-6204-405f-8ba2-e714324c15d7/0/B76CEE66CD329E4EDD33E6D3452A33FBBE00D741.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 92:7e:a0:22:2a:b4:4d:31:c4:72:ae:bb:23:ec:ed:3a:e8:8a: 2b:7a:d0:27:26:d6:32:68:95:be:ad:57:a2:7c:ac:47:28:dd: ab:10:96:d1:b2:5f:6a:d3:3d:39:ab:9d:86:bf:d9:d3:1d:10: 2d:d6:bf:02:4c:65:8b:a2:66:3d:f7:aa:72:f2:c5:10:a1:c6: b6:30:ed:25:c7:90:1f:43:c4:a8:c6:66:a3:6b:01:53:73:03: 5b:d4:91:0e:95:ce:84:f3:9d:81:7b:a3:ed:69:0d:03:e6:d3: b7:b4:ad:04:41:46:ec:d2:c6:5d:c1:5a:68:9f:a2:65:7f:57: 00:3b:35:d8:6c:bb:24:66:f7:f9:ec:7e:c9:5c:4b:76:8f:21: 84:76:62:fd:02:15:69:7c:77:db:ac:25:ad:34:a3:b4:54:6d: 7d:aa:b7:97:2e:83:25:8a:c9:ca:56:5d:a3:97:9f:6e:03:b5: 5b:8f:3e:30:9d:09:9d:d7:5e:9e:06:70:34:dc:a3:cb:05:48: da:db:41:34:92:31:4e:42:f5:1a:3f:96:68:fd:cc:fe:e2:0e: 4b:c5:46:10:98:70:74:b1:0b:f7:24:ff:ca:fe:f1:48:8c:dc: 16:8d:b9:ea:0e:6f:6c:48:b0:8a:27:53:9c:a2:f4:40:f8:a5: a4:5b:81:93 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUMLD1WJyvLckPakyD8lEBwLDL8xgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjc2Q0VFNjZDRDMyOUU0RUREMzNFNkQzNDUyQTMzRkJC RTAwRDc0MTAeFw0yNTA5MDYwODE1NTJaFw0yNTA5MDkxODM5NTJaMDMxMTAvBgNV BAMTKDNCNDNEOUVFMTI2NkVDMTdCNTRGMzc5MUI1MkRBNUFGQzk4MDY3MzYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC5JYdKPp/b/gN3lHkg8DdJzlMf fTv/xtgSjlL/UAC+0ISZjguPEibXClAgeSXlMMJv1dAEWfeNUtqxJHXxN6YZ8VpS rjE0GDsHmpWa/F475TQgOfV5Uvqkf+wav/6Q3NnPQ5wJHvR9hfhEGMD+OopoXJp+ qMR1dDTFR4pz1Xu3sSgBNDcV4MtDGpUgjU/h7BdxZBZoCtBMVGIkDjKKT2m3qL6u BGk4r0sh5NgK5dgvNNjIphqYj+F4GEZTtaXOhAFr6L5EEjoVEbN9UDWq6hUYI7rP cZZruyFa24i6P+DrNrZrmfXVf4eXXAhcPfyfNYey3aBE0jiHjpZssvMLAWQFAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUO0PZ7hJm7Be1TzeRtS2lr8mAZzYwHwYDVR0j BBgwFoAUt2zuZs0ynk7dM+bTRSoz+74A10EwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j ZjdiNzY3Ny02MjA0LTQwNWYtOGJhMi1lNzE0MzI0YzE1ZDcvMC9CNzZDRUU2NkNE MzI5RTRFREQzM0U2RDM0NTJBMzNGQkJFMDBENzQxLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQjc2Q0VFNjZDRDMyOUU0RUREMzNFNkQzNDUyQTMzRkJCRTAw RDc0MS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vY2Y3Yjc2NzctNjIwNC00MDVmLThi YTItZTcxNDMyNGMxNWQ3LzAvQjc2Q0VFNjZDRDMyOUU0RUREMzNFNkQzNDUyQTMz RkJCRTAwRDc0MS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJJ+oCIqtE0xxHKuuyPs7Troiit60Ccm1jJo lb6tV6J8rEco3asQltGyX2rTPTmrnYa/2dMdEC3WvwJMZYuiZj33qnLyxRChxrYw 7SXHkB9DxKjGZqNrAVNzA1vUkQ6VzoTznYF7o+1pDQPm07e0rQRBRuzSxl3BWmif omV/VwA7NdhsuyRm9/nsfslcS3aPIYR2Yv0CFWl8d9usJa00o7RUbX2qt5cugyWK ycpWXaOXn24DtVuPPjCdCZ3XXp4GcDTco8sFSNrbQTSSMU5C9Ro/lmj9zP7iDkvF RhCYcHSxC/ck/8r+8UiM3BaNueoOb2xIsIonU5yi9ED4paRbgZM= -----END CERTIFICATE-----Generated at Sun Sep 7 15:27:03 2025 by rpki-client