$ rpki-client -vvf repo-rpki.idnic.net/repo/db8be905-f296-45d1-a879-4a4de52cb2d6/0/B2D1CBD015A419010845E6F56D8385C8647B5390.mft File: B2D1CBD015A419010845E6F56D8385C8647B5390.mft (raw, json) Hash identifier: WidXx2Dv0Bs9fHhLJVkm7tvb5Dn/NgyZNsVp2CPaaek= Subject key identifier: 72:37:2B:6A:54:C7:BB:52:24:DD:96:37:39:1B:04:96:A3:BD:C3:75 Authority key identifier: B2:D1:CB:D0:15:A4:19:01:08:45:E6:F5:6D:83:85:C8:64:7B:53:90 Certificate issuer: /CN=B2D1CBD015A419010845E6F56D8385C8647B5390 Certificate serial: 18D54A097BBE33932143EEE1593653500CE8A141 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B2D1CBD015A419010845E6F56D8385C8647B5390.cer Subject info access: rsync://repo-rpki.idnic.net/repo/db8be905-f296-45d1-a879-4a4de52cb2d6/0/B2D1CBD015A419010845E6F56D8385C8647B5390.mft Manifest number: 02B5 Signing time: Wed 03 Sep 2025 20:32:09 +0000 Manifest this update: Wed 03 Sep 2025 20:27:09 +0000 Manifest next update: Sat 06 Sep 2025 21:29:09 +0000 Files and hashes: 1: 323430363a343534303a3a2f33322d3332203d3e20313430343634.roa (hash: fW6me2gng7+RFAgwfv3lcoF9Ov98BB9yIZ6/btVVKsw=) 2: 3130332e3135332e3133342e302f32342d3234203d3e20313430343634.roa (hash: cn1hAJHYGCMSOghgviiiSzFiPXYh8mLQKkzicGhK/aE=) 3: 3130332e3135332e3133342e302f32332d3233203d3e20313430343634.roa (hash: bAHbnIP0Wicgt74YcQMMyo48qnOQtogRe4ndD6XNQrg=) 4: B2D1CBD015A419010845E6F56D8385C8647B5390.crl (hash: U464M/xVz8KFARrR2G2winWMPg/ANq+pQNmoBMkuuv8=) 5: 3130332e3135332e3133352e302f32342d3234203d3e20313430343634.roa (hash: oUlQyF3I0zLJjLl9EcH8NBVRAz863HrDlDUllspbny0=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/db8be905-f296-45d1-a879-4a4de52cb2d6/0/B2D1CBD015A419010845E6F56D8385C8647B5390.crl rsync://repo-rpki.idnic.net/repo/db8be905-f296-45d1-a879-4a4de52cb2d6/0/B2D1CBD015A419010845E6F56D8385C8647B5390.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B2D1CBD015A419010845E6F56D8385C8647B5390.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 06 Sep 2025 21:29:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 18:d5:4a:09:7b:be:33:93:21:43:ee:e1:59:36:53:50:0c:e8:a1:41 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B2D1CBD015A419010845E6F56D8385C8647B5390 Validity Not Before: Sep 3 20:27:09 2025 GMT Not After : Sep 6 21:29:09 2025 GMT Subject: CN=72372B6A54C7BB5224DD9637391B0496A3BDC375 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:eb:3e:04:9c:15:a3:5a:e8:65:b4:05:51:70:5d: 34:6e:89:38:02:87:25:bc:26:89:42:40:f5:37:a2: 19:a1:bf:e5:f3:42:c2:11:1d:62:fc:c9:65:dc:18: f0:a0:c1:d7:d0:5c:0f:e8:7d:71:00:24:36:4e:72: 9f:f9:2d:25:e5:b0:f0:47:a4:df:fb:f4:1a:e3:94: d2:28:68:41:28:a4:6c:c0:5f:5b:47:58:26:ae:5d: 53:13:d9:bf:1e:ca:8c:26:e9:1e:40:b8:af:04:55: 35:1d:2e:e4:7e:b4:29:0b:ff:c4:91:c8:5f:90:b2: a5:c0:e5:9d:cd:8e:b8:64:aa:3f:16:6f:a5:f8:da: 36:d5:a0:c5:62:e6:34:6f:5d:e9:00:4c:68:97:17: e8:28:fd:c4:63:97:a0:9b:2e:43:6f:6d:0b:aa:d0: b0:1e:2f:b9:40:81:a7:4a:5c:23:67:e4:f1:c9:f0: 5c:b6:84:c6:c1:49:55:07:5a:a2:ac:0e:d5:e0:b6: 80:aa:ff:f2:2a:7d:e3:ad:3d:18:b3:b8:d6:9a:08: d6:1b:2e:3c:a3:09:5f:c5:a3:3b:24:a1:89:aa:2d: d2:aa:d4:ac:23:ba:70:1d:c0:16:34:9d:8a:36:5c: 1d:9b:07:ff:e2:c7:9c:ea:6e:65:1c:a6:68:5d:79: c7:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 72:37:2B:6A:54:C7:BB:52:24:DD:96:37:39:1B:04:96:A3:BD:C3:75 X509v3 Authority Key Identifier: keyid:B2:D1:CB:D0:15:A4:19:01:08:45:E6:F5:6D:83:85:C8:64:7B:53:90 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/db8be905-f296-45d1-a879-4a4de52cb2d6/0/B2D1CBD015A419010845E6F56D8385C8647B5390.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B2D1CBD015A419010845E6F56D8385C8647B5390.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/db8be905-f296-45d1-a879-4a4de52cb2d6/0/B2D1CBD015A419010845E6F56D8385C8647B5390.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6a:f5:03:0f:8b:53:dc:f3:d8:33:13:c6:54:eb:a9:b5:3e:3e: 93:27:61:ea:b3:ee:0d:39:e5:72:58:46:71:81:2c:26:d9:fb: 08:47:de:43:9d:40:47:f2:0f:1c:d6:5d:8b:6f:4c:f6:70:27: af:32:d2:83:a0:dd:c1:a7:62:7c:21:45:84:2f:f0:6f:4d:b8: c3:d6:62:85:e5:31:f1:d3:c8:b4:50:65:d4:e0:42:33:56:3c: bc:9f:83:12:33:69:1d:db:74:b1:c6:ea:86:2c:40:99:36:d4: 0a:60:8a:b3:96:7d:66:17:3d:c1:3c:5a:7e:c3:9b:88:c3:46: 7e:41:ca:97:e6:91:f3:da:d1:26:d3:b5:98:51:a3:10:2b:d5: f5:81:04:3d:2e:36:13:02:f6:67:9f:3a:f0:f8:75:0d:20:05: 2f:4e:fe:64:96:74:a6:ee:11:1c:c6:ef:27:f1:44:4b:e7:d7: 7c:13:22:e7:00:2d:57:a9:b1:1b:34:bf:c7:fa:83:30:39:85: 76:ae:52:5b:d9:b3:03:1c:50:03:16:8f:3d:22:6d:bb:4a:43: 16:64:c5:31:bb:81:1b:18:a6:c2:80:48:46:40:d1:20:03:1a: be:4d:60:5a:15:bf:fb:8b:80:63:38:c6:61:e1:97:93:a1:1c: 36:bc:11:2f -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUGNVKCXu+M5MhQ+7hWTZTUAzooUEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjJEMUNCRDAxNUE0MTkwMTA4NDVFNkY1NkQ4Mzg1Qzg2 NDdCNTM5MDAeFw0yNTA5MDMyMDI3MDlaFw0yNTA5MDYyMTI5MDlaMDMxMTAvBgNV BAMTKDcyMzcyQjZBNTRDN0JCNTIyNEREOTYzNzM5MUIwNDk2QTNCREMzNzUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDrPgScFaNa6GW0BVFwXTRuiTgC hyW8JolCQPU3ohmhv+XzQsIRHWL8yWXcGPCgwdfQXA/ofXEAJDZOcp/5LSXlsPBH pN/79BrjlNIoaEEopGzAX1tHWCauXVMT2b8eyowm6R5AuK8EVTUdLuR+tCkL/8SR yF+QsqXA5Z3Njrhkqj8Wb6X42jbVoMVi5jRvXekATGiXF+go/cRjl6CbLkNvbQuq 0LAeL7lAgadKXCNn5PHJ8Fy2hMbBSVUHWqKsDtXgtoCq//IqfeOtPRizuNaaCNYb LjyjCV/FozskoYmqLdKq1KwjunAdwBY0nYo2XB2bB//ix5zqbmUcpmhdecfpAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUcjcralTHu1Ik3ZY3ORsElqO9w3UwHwYDVR0j BBgwFoAUstHL0BWkGQEIReb1bYOFyGR7U5AwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k YjhiZTkwNS1mMjk2LTQ1ZDEtYTg3OS00YTRkZTUyY2IyZDYvMC9CMkQxQ0JEMDE1 QTQxOTAxMDg0NUU2RjU2RDgzODVDODY0N0I1MzkwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQjJEMUNCRDAxNUE0MTkwMTA4NDVFNkY1NkQ4Mzg1Qzg2NDdC NTM5MC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZGI4YmU5MDUtZjI5Ni00NWQxLWE4 NzktNGE0ZGU1MmNiMmQ2LzAvQjJEMUNCRDAxNUE0MTkwMTA4NDVFNkY1NkQ4Mzg1 Qzg2NDdCNTM5MC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGr1Aw+LU9zz2DMTxlTrqbU+PpMnYeqz7g05 5XJYRnGBLCbZ+whH3kOdQEfyDxzWXYtvTPZwJ68y0oOg3cGnYnwhRYQv8G9NuMPW YoXlMfHTyLRQZdTgQjNWPLyfgxIzaR3bdLHG6oYsQJk21ApgirOWfWYXPcE8Wn7D m4jDRn5BypfmkfPa0SbTtZhRoxAr1fWBBD0uNhMC9mefOvD4dQ0gBS9O/mSWdKbu ERzG7yfxREvn13wTIucALVepsRs0v8f6gzA5hXauUlvZswMcUAMWjz0ibbtKQxZk xTG7gRsYpsKASEZA0SADGr5NYFoVv/uLgGM4xmHhl5OhHDa8ES8= -----END CERTIFICATE-----Generated at Fri Sep 5 12:41:12 2025 by rpki-client