$ rpki-client -vvf repo-rpki.idnic.net/repo/d3925388-35c6-41d7-9dc4-db4d118d135a/0/B891A45840F824B9F116CBEAA3574A68343F5538.mft File: B891A45840F824B9F116CBEAA3574A68343F5538.mft (raw, json) Hash identifier: 9cEOCzT95OCGV61vSePoG7Jcv9/3qVnmZzUbs5B15VY= Subject key identifier: FA:FB:68:52:C4:C5:92:63:67:F2:FF:41:D1:F2:56:7D:9B:5E:1D:58 Authority key identifier: B8:91:A4:58:40:F8:24:B9:F1:16:CB:EA:A3:57:4A:68:34:3F:55:38 Certificate issuer: /CN=B891A45840F824B9F116CBEAA3574A68343F5538 Certificate serial: 44BC6A91729BAC1C99F49638540F5114D2B993B3 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B891A45840F824B9F116CBEAA3574A68343F5538.cer Subject info access: rsync://repo-rpki.idnic.net/repo/d3925388-35c6-41d7-9dc4-db4d118d135a/0/B891A45840F824B9F116CBEAA3574A68343F5538.mft Manifest number: 78 Signing time: Fri 05 Sep 2025 23:42:10 +0000 Manifest this update: Fri 05 Sep 2025 23:37:10 +0000 Manifest next update: Tue 09 Sep 2025 05:48:10 +0000 Files and hashes: 1: 3130332e32382e3231382e302f32342d3234203d3e203538333835.roa (hash: cMJACG+wJYTKnGt0rpeqO/b7Kbn+Qvg12TrUivh9cCk=) 2: 3131302e39322e37342e302f32332d3234203d3e203538333835.roa (hash: XgxFmfrvLr/HS422k6dRWPfIUiiCoQbGouQtaJJQX4Y=) 3: 3130332e32332e3131362e302f32332d3234203d3e203538333835.roa (hash: 5UewkM1pAbLnP65YZLTVxzSYU/L1g1J84e5HTrwnd3M=) 4: 3130332e3234362e3136392e302f32342d3234203d3e203538333835.roa (hash: 8meh4qssPriL64kBvXs5YtBumf6ArWnflJaVktjo3Fo=) 5: B891A45840F824B9F116CBEAA3574A68343F5538.crl (hash: CisZqFRZ5kYVkdKlif0KU3UVeK3XuNvaq1iUFVFkvIs=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/d3925388-35c6-41d7-9dc4-db4d118d135a/0/B891A45840F824B9F116CBEAA3574A68343F5538.crl rsync://repo-rpki.idnic.net/repo/d3925388-35c6-41d7-9dc4-db4d118d135a/0/B891A45840F824B9F116CBEAA3574A68343F5538.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B891A45840F824B9F116CBEAA3574A68343F5538.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 09 Sep 2025 05:48:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 44:bc:6a:91:72:9b:ac:1c:99:f4:96:38:54:0f:51:14:d2:b9:93:b3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B891A45840F824B9F116CBEAA3574A68343F5538 Validity Not Before: Sep 5 23:37:10 2025 GMT Not After : Sep 9 05:48:10 2025 GMT Subject: CN=FAFB6852C4C5926367F2FF41D1F2567D9B5E1D58 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:dd:30:6f:ee:fd:55:8c:d6:4b:01:54:20:bd: 8b:9e:1e:9a:b7:a2:11:8d:15:67:1c:ed:ad:01:c9: 2f:88:a8:b1:1d:bd:6f:c1:84:12:9d:be:08:01:b7: 50:2e:82:b0:43:49:32:aa:00:35:73:56:19:03:03: 54:94:f1:a8:1f:b3:de:b2:06:ed:d1:88:aa:8c:e0: 14:a5:64:34:ca:97:aa:6f:d7:ba:27:56:c0:07:d6: ef:9b:a9:7f:ee:24:68:08:a2:09:00:4d:e3:3e:b3: ed:21:5f:c1:be:56:6f:d4:16:ab:1c:fa:e3:71:2c: 88:37:5f:41:5a:b5:67:a4:0f:13:50:bd:03:2e:29: ac:36:da:8e:74:59:d8:5b:b8:0a:87:cc:86:da:80: de:b5:fe:99:0d:6a:3c:25:34:c2:a6:07:35:35:34: 1f:b4:d7:49:a8:b5:f0:e8:72:11:45:de:5a:40:54: 63:4b:a7:fc:d5:f2:4f:af:04:2a:e1:b8:27:60:f8: 80:6c:9e:62:c1:12:31:0a:b4:ca:0e:dc:c8:4e:34: a3:bc:3a:79:f6:de:c2:f1:08:13:85:75:b6:80:53: ac:e4:b4:ec:1d:18:17:ed:b2:1b:e5:47:e1:e6:f9: 4f:b8:f7:d4:27:9c:5e:c9:75:fc:36:19:1b:9f:0c: 81:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FA:FB:68:52:C4:C5:92:63:67:F2:FF:41:D1:F2:56:7D:9B:5E:1D:58 X509v3 Authority Key Identifier: keyid:B8:91:A4:58:40:F8:24:B9:F1:16:CB:EA:A3:57:4A:68:34:3F:55:38 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/d3925388-35c6-41d7-9dc4-db4d118d135a/0/B891A45840F824B9F116CBEAA3574A68343F5538.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B891A45840F824B9F116CBEAA3574A68343F5538.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d3925388-35c6-41d7-9dc4-db4d118d135a/0/B891A45840F824B9F116CBEAA3574A68343F5538.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5b:ce:0f:25:78:5b:0b:7a:d9:f8:f4:08:b6:6b:c9:0f:67:00: 94:ae:c6:63:eb:a3:54:92:a8:b4:22:79:6f:20:aa:a5:61:94: bd:1c:42:0b:bc:c0:a8:c4:17:e1:09:1c:a8:74:76:f7:9a:60: 68:85:c0:e1:7a:9f:3c:f6:e8:ae:a5:87:a7:cf:06:d8:3d:4a: 62:92:71:b2:f9:d4:f5:20:ee:2b:35:8e:dd:f7:69:81:ce:f2: 86:3f:90:43:49:f9:f0:0f:e1:53:05:b2:72:fd:16:e6:12:0b: e8:47:3f:05:21:15:51:09:c8:2f:ca:ac:57:69:1c:9e:99:9f: b2:36:65:1a:de:6c:75:3b:4c:ed:1d:ef:d0:ee:c7:38:86:58: e6:e5:3d:81:74:70:df:21:2b:14:ba:ae:a5:5f:20:a2:a1:17: fc:af:a9:1a:d4:7a:12:7e:76:68:7e:a8:25:b4:0f:2d:39:5b: b5:82:59:d1:e1:b0:95:33:96:6b:4f:05:ae:25:48:6e:10:ab: dd:ba:2e:1b:50:67:64:e2:2f:96:27:74:01:2c:c0:fd:32:25: f2:06:2e:bf:35:6d:e6:e6:d2:cd:5f:a9:18:d3:ce:b6:5d:e9: 15:80:be:af:b7:95:02:d8:e7:f5:c7:bd:73:48:4a:1f:da:9a: c3:62:e9:ff -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIURLxqkXKbrByZ9JY4VA9RFNK5k7MwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjg5MUE0NTg0MEY4MjRCOUYxMTZDQkVBQTM1NzRBNjgz NDNGNTUzODAeFw0yNTA5MDUyMzM3MTBaFw0yNTA5MDkwNTQ4MTBaMDMxMTAvBgNV BAMTKEZBRkI2ODUyQzRDNTkyNjM2N0YyRkY0MUQxRjI1NjdEOUI1RTFENTgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDm3TBv7v1VjNZLAVQgvYueHpq3 ohGNFWcc7a0ByS+IqLEdvW/BhBKdvggBt1AugrBDSTKqADVzVhkDA1SU8agfs96y Bu3RiKqM4BSlZDTKl6pv17onVsAH1u+bqX/uJGgIogkATeM+s+0hX8G+Vm/UFqsc +uNxLIg3X0FatWekDxNQvQMuKaw22o50WdhbuAqHzIbagN61/pkNajwlNMKmBzU1 NB+010motfDochFF3lpAVGNLp/zV8k+vBCrhuCdg+IBsnmLBEjEKtMoO3MhONKO8 Onn23sLxCBOFdbaAU6zktOwdGBftshvlR+Hm+U+499QnnF7Jdfw2GRufDIGdAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU+vtoUsTFkmNn8v9B0fJWfZteHVgwHwYDVR0j BBgwFoAUuJGkWED4JLnxFsvqo1dKaDQ/VTgwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k MzkyNTM4OC0zNWM2LTQxZDctOWRjNC1kYjRkMTE4ZDEzNWEvMC9CODkxQTQ1ODQw RjgyNEI5RjExNkNCRUFBMzU3NEE2ODM0M0Y1NTM4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQjg5MUE0NTg0MEY4MjRCOUYxMTZDQkVBQTM1NzRBNjgzNDNG NTUzOC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZDM5MjUzODgtMzVjNi00MWQ3LTlk YzQtZGI0ZDExOGQxMzVhLzAvQjg5MUE0NTg0MEY4MjRCOUYxMTZDQkVBQTM1NzRB NjgzNDNGNTUzOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFvODyV4Wwt62fj0CLZryQ9nAJSuxmPro1SS qLQieW8gqqVhlL0cQgu8wKjEF+EJHKh0dveaYGiFwOF6nzz26K6lh6fPBtg9SmKS cbL51PUg7is1jt33aYHO8oY/kENJ+fAP4VMFsnL9FuYSC+hHPwUhFVEJyC/KrFdp HJ6Zn7I2ZRrebHU7TO0d79DuxziGWOblPYF0cN8hKxS6rqVfIKKhF/yvqRrUehJ+ dmh+qCW0Dy05W7WCWdHhsJUzlmtPBa4lSG4Qq926LhtQZ2TiL5YndAEswP0yJfIG Lr81bebm0s1fqRjTzrZd6RWAvq+3lQLY5/XHvXNISh/amsNi6f8= -----END CERTIFICATE-----Generated at Sun Sep 7 13:59:13 2025 by rpki-client