$ rpki-client -vvf repo-rpki.idnic.net/repo/d9106827-866e-4ac3-8f79-a6e320b20de7/0/B347BBA6BD11BFC5E55F7FF334C165E9FD21FA5C.mft File: B347BBA6BD11BFC5E55F7FF334C165E9FD21FA5C.mft (raw, json) Hash identifier: lGzgiFCfI70pNR0SqBQkk8wamEqDT9KBcm+bB+YB+zE= Subject key identifier: CC:0D:15:E1:20:D9:BE:A6:34:24:64:87:4F:AD:95:31:A9:C1:96:69 Authority key identifier: B3:47:BB:A6:BD:11:BF:C5:E5:5F:7F:F3:34:C1:65:E9:FD:21:FA:5C Certificate issuer: /CN=B347BBA6BD11BFC5E55F7FF334C165E9FD21FA5C Certificate serial: 298CE8A66E1674EC1BC78DB6988E1FC916B9C5B3 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B347BBA6BD11BFC5E55F7FF334C165E9FD21FA5C.cer Subject info access: rsync://repo-rpki.idnic.net/repo/d9106827-866e-4ac3-8f79-a6e320b20de7/0/B347BBA6BD11BFC5E55F7FF334C165E9FD21FA5C.mft Manifest number: 0215 Signing time: Sat 06 Sep 2025 06:22:09 +0000 Manifest this update: Sat 06 Sep 2025 06:17:09 +0000 Manifest next update: Tue 09 Sep 2025 13:36:09 +0000 Files and hashes: 1: 3130332e3138362e3230322e302f32332d3233203d3e20313439373036.roa (hash: YXcPTV7LyiaT/dlRqQiGxAGyQ4A0Km1DyhqBZdphgGs=) 2: 3130332e3138362e3230332e302f32342d3234203d3e20313439373036.roa (hash: JgDdJ0VL4u8D8+wDznKBSlTRQ0p6opMwZGoPzapaaX4=) 3: B347BBA6BD11BFC5E55F7FF334C165E9FD21FA5C.crl (hash: ZQy5T1yPq0njF9gEMNW5vT1KM3lGJl2JjP4jfPpp0VE=) 4: 3130332e3138362e3230322e302f32342d3234203d3e20313439373036.roa (hash: k4Wn7QjCevaLRtjzpZzU9aujDNZ1W8N1HpzN16+qakY=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/d9106827-866e-4ac3-8f79-a6e320b20de7/0/B347BBA6BD11BFC5E55F7FF334C165E9FD21FA5C.crl rsync://repo-rpki.idnic.net/repo/d9106827-866e-4ac3-8f79-a6e320b20de7/0/B347BBA6BD11BFC5E55F7FF334C165E9FD21FA5C.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B347BBA6BD11BFC5E55F7FF334C165E9FD21FA5C.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 09 Sep 2025 13:36:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 29:8c:e8:a6:6e:16:74:ec:1b:c7:8d:b6:98:8e:1f:c9:16:b9:c5:b3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B347BBA6BD11BFC5E55F7FF334C165E9FD21FA5C Validity Not Before: Sep 6 06:17:09 2025 GMT Not After : Sep 9 13:36:09 2025 GMT Subject: CN=CC0D15E120D9BEA6342464874FAD9531A9C19669 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:10:a4:4f:dd:31:d0:c4:b1:09:4b:69:ad:79: c4:ea:9d:37:6f:34:a2:c7:58:de:a5:f3:b2:f0:bd: dd:b4:d5:db:54:85:44:c9:d1:1d:d6:b6:8c:79:36: 11:0f:74:f3:d8:6c:00:c7:e3:54:a2:1b:e5:4b:48: ae:1d:1b:8f:6b:a0:27:ff:47:3e:c5:e2:5c:ee:40: 66:4b:9d:40:92:77:1d:e7:d9:55:4e:65:ba:d0:cf: fc:4f:d0:2b:2b:d5:db:41:24:27:50:96:96:24:9b: ff:05:13:d9:b1:ad:a2:92:2f:e2:bd:28:6f:55:50: d1:50:54:22:e7:b3:fe:35:e4:37:20:ee:0c:72:75: 36:d7:94:87:93:0e:98:fa:3b:6e:7e:89:45:70:41: 3a:67:b5:52:fa:6b:2f:0c:b1:c5:7e:7d:eb:b2:74: a1:4e:98:ec:95:0a:e4:3a:11:5c:f6:98:32:49:86: 47:57:11:c8:fe:aa:5d:7c:94:c0:4e:fa:8c:af:4a: d8:56:52:75:18:7b:32:42:96:fa:f0:92:29:c2:d2: c6:47:e1:4f:dc:29:91:1a:3b:5b:25:9b:c0:96:80: 90:14:eb:cd:7c:59:e4:8c:d0:d6:52:ef:b5:5e:06: da:4d:fc:c9:33:b1:39:60:8e:03:b0:ae:c9:82:c7: 52:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CC:0D:15:E1:20:D9:BE:A6:34:24:64:87:4F:AD:95:31:A9:C1:96:69 X509v3 Authority Key Identifier: keyid:B3:47:BB:A6:BD:11:BF:C5:E5:5F:7F:F3:34:C1:65:E9:FD:21:FA:5C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/d9106827-866e-4ac3-8f79-a6e320b20de7/0/B347BBA6BD11BFC5E55F7FF334C165E9FD21FA5C.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B347BBA6BD11BFC5E55F7FF334C165E9FD21FA5C.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d9106827-866e-4ac3-8f79-a6e320b20de7/0/B347BBA6BD11BFC5E55F7FF334C165E9FD21FA5C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4a:6a:1d:12:45:24:e9:f3:42:dd:f8:7c:4d:b6:a0:be:73:77: 03:5b:0d:bd:5c:bb:a2:b4:14:68:9c:ac:58:48:1e:d3:02:6d: fc:fc:e8:3f:dd:2f:22:73:a8:d9:4b:53:ff:0f:b0:50:bc:ed: 0e:b9:6c:76:2f:30:6f:e0:c4:31:3a:f9:cc:af:82:0f:b5:96: b1:5b:a2:3e:93:92:88:e2:ac:a6:d3:d0:6e:3c:5b:c0:7d:34: e4:3f:c6:d1:7c:20:b1:6b:bf:15:ac:97:45:f7:35:5d:67:4e: 65:4e:b0:8b:2d:12:d3:ce:07:e1:74:0f:ed:b0:ad:13:7b:47: 90:5c:fd:c9:10:b1:5e:09:64:8e:3c:6d:01:f3:53:0d:6e:e6: 02:81:20:99:8d:f3:b7:27:56:62:4f:5c:b2:bf:fa:a8:22:93: 34:ea:66:55:ab:fc:da:c8:25:31:83:5c:f3:ec:00:cf:c5:e5: 2d:6c:79:29:66:d0:b6:c6:d0:3c:8e:52:13:7f:30:fc:88:08: 31:15:6d:83:3c:c8:a5:6e:80:16:72:04:13:ad:60:aa:6c:fe: 55:35:9d:de:2b:11:09:8c:90:38:58:21:11:6a:4d:0b:b6:c7: 5e:76:a7:13:5e:6b:22:17:55:37:8a:9a:81:bf:3e:bb:fb:ef: ff:58:61:fd -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUKYzopm4WdOwbx422mI4fyRa5xbMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjM0N0JCQTZCRDExQkZDNUU1NUY3RkYzMzRDMTY1RTlG RDIxRkE1QzAeFw0yNTA5MDYwNjE3MDlaFw0yNTA5MDkxMzM2MDlaMDMxMTAvBgNV BAMTKENDMEQxNUUxMjBEOUJFQTYzNDI0NjQ4NzRGQUQ5NTMxQTlDMTk2NjkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCsEKRP3THQxLEJS2mtecTqnTdv NKLHWN6l87Lwvd201dtUhUTJ0R3Wtox5NhEPdPPYbADH41SiG+VLSK4dG49roCf/ Rz7F4lzuQGZLnUCSdx3n2VVOZbrQz/xP0Csr1dtBJCdQlpYkm/8FE9mxraKSL+K9 KG9VUNFQVCLns/415Dcg7gxydTbXlIeTDpj6O25+iUVwQTpntVL6ay8MscV+feuy dKFOmOyVCuQ6EVz2mDJJhkdXEcj+ql18lMBO+oyvSthWUnUYezJClvrwkinC0sZH 4U/cKZEaO1slm8CWgJAU6818WeSM0NZS77VeBtpN/MkzsTlgjgOwrsmCx1L1AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUzA0V4SDZvqY0JGSHT62VManBlmkwHwYDVR0j BBgwFoAUs0e7pr0Rv8XlX3/zNMFl6f0h+lwwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k OTEwNjgyNy04NjZlLTRhYzMtOGY3OS1hNmUzMjBiMjBkZTcvMC9CMzQ3QkJBNkJE MTFCRkM1RTU1RjdGRjMzNEMxNjVFOUZEMjFGQTVDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQjM0N0JCQTZCRDExQkZDNUU1NUY3RkYzMzRDMTY1RTlGRDIx RkE1Qy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZDkxMDY4MjctODY2ZS00YWMzLThm NzktYTZlMzIwYjIwZGU3LzAvQjM0N0JCQTZCRDExQkZDNUU1NUY3RkYzMzRDMTY1 RTlGRDIxRkE1Qy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEpqHRJFJOnzQt34fE22oL5zdwNbDb1cu6K0 FGicrFhIHtMCbfz86D/dLyJzqNlLU/8PsFC87Q65bHYvMG/gxDE6+cyvgg+1lrFb oj6TkojirKbT0G48W8B9NOQ/xtF8ILFrvxWsl0X3NV1nTmVOsIstEtPOB+F0D+2w rRN7R5Bc/ckQsV4JZI48bQHzUw1u5gKBIJmN87cnVmJPXLK/+qgikzTqZlWr/NrI JTGDXPPsAM/F5S1seSlm0LbG0DyOUhN/MPyICDEVbYM8yKVugBZyBBOtYKps/lU1 nd4rEQmMkDhYIRFqTQu2x152pxNeayIXVTeKmoG/Prv77/9YYf0= -----END CERTIFICATE-----Generated at Sun Sep 7 17:01:55 2025 by rpki-client