$ rpki-client -vvf repo-rpki.idnic.net/repo/d044f918-9332-4257-b510-381c8590ff54/0/B126A372835801BBB738696C56DCF255D032D42F.mft File: B126A372835801BBB738696C56DCF255D032D42F.mft (raw, json) Hash identifier: h+T1wDUQSYpox6pBjo5clt3qD7zvKXY7xTCkGp3RfRY= Subject key identifier: 2F:DF:17:FB:54:08:EF:AC:8C:D0:C4:14:84:4F:6B:BB:F9:AD:E7:A4 Authority key identifier: B1:26:A3:72:83:58:01:BB:B7:38:69:6C:56:DC:F2:55:D0:32:D4:2F Certificate issuer: /CN=B126A372835801BBB738696C56DCF255D032D42F Certificate serial: 413F75D90BD62D57E1482AB2B165444A67C695EA Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B126A372835801BBB738696C56DCF255D032D42F.cer Subject info access: rsync://repo-rpki.idnic.net/repo/d044f918-9332-4257-b510-381c8590ff54/0/B126A372835801BBB738696C56DCF255D032D42F.mft Manifest number: 0398 Signing time: Tue 21 Oct 2025 08:41:55 +0000 Manifest this update: Tue 21 Oct 2025 08:36:55 +0000 Manifest next update: Fri 24 Oct 2025 10:13:55 +0000 Files and hashes: 1: B126A372835801BBB738696C56DCF255D032D42F.crl (hash: I2GBTXSqygNttN7vdkKRlG1LGeujfSxTaYRrjRDTwxQ=) 2: 3130332e3136362e33342e302f32332d3234203d3e203137393935.roa (hash: Nmtn3LlfweyxwcAEh/9aYsa4vVfStr8hvIJSQMmS8CI=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/d044f918-9332-4257-b510-381c8590ff54/0/B126A372835801BBB738696C56DCF255D032D42F.crl rsync://repo-rpki.idnic.net/repo/d044f918-9332-4257-b510-381c8590ff54/0/B126A372835801BBB738696C56DCF255D032D42F.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B126A372835801BBB738696C56DCF255D032D42F.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Oct 2025 10:13:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 41:3f:75:d9:0b:d6:2d:57:e1:48:2a:b2:b1:65:44:4a:67:c6:95:ea Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B126A372835801BBB738696C56DCF255D032D42F Validity Not Before: Oct 21 08:36:55 2025 GMT Not After : Oct 24 10:13:55 2025 GMT Subject: CN=2FDF17FB5408EFAC8CD0C414844F6BBBF9ADE7A4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:c0:ba:83:bf:3d:be:7b:bd:42:a4:07:95:9c: 95:b8:a2:8a:f1:90:58:c9:fd:12:ae:f4:a7:49:8e: 59:75:a5:e2:ff:0f:43:4a:a6:fd:14:e0:f5:d0:0c: 82:ef:f4:bd:d8:2a:5a:82:42:2e:24:b2:66:c8:b3: 0b:b1:07:59:cb:76:56:28:13:79:e2:c7:bd:c5:99: 51:b4:aa:a5:a4:74:3e:c3:75:60:95:bb:6a:a1:c5: 6e:6a:68:d3:e2:04:a4:72:b8:ba:10:d6:3a:ed:c6: 56:da:17:5a:0d:72:31:53:37:c4:dc:ae:d7:87:2c: 30:81:32:43:bf:ae:6b:8d:80:0a:c2:a6:d0:ad:9d: 20:4b:80:62:06:69:d4:e9:40:e0:b9:3e:02:68:95: c4:c4:30:0d:52:8e:64:60:fa:53:4d:39:c6:e1:c4: 59:73:66:f2:c9:62:77:05:5a:b4:59:16:04:5a:a6: e3:1d:fa:31:c1:4c:ae:03:8c:0f:0d:4b:8c:94:9f: 23:d5:d7:91:bd:42:e2:91:e3:53:24:75:97:4d:e0: 8b:b8:89:ec:1d:25:35:24:54:2d:9a:0a:ba:ae:65: 5d:9d:a1:ad:61:a7:3a:82:19:92:e2:1b:7f:1b:ef: 5d:63:a5:c6:bb:f5:0d:dd:fd:2d:88:dc:7f:79:d5: 9e:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2F:DF:17:FB:54:08:EF:AC:8C:D0:C4:14:84:4F:6B:BB:F9:AD:E7:A4 X509v3 Authority Key Identifier: keyid:B1:26:A3:72:83:58:01:BB:B7:38:69:6C:56:DC:F2:55:D0:32:D4:2F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/d044f918-9332-4257-b510-381c8590ff54/0/B126A372835801BBB738696C56DCF255D032D42F.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B126A372835801BBB738696C56DCF255D032D42F.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d044f918-9332-4257-b510-381c8590ff54/0/B126A372835801BBB738696C56DCF255D032D42F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 76:90:5b:eb:a7:11:26:dc:47:de:e0:4d:d5:d7:ba:cb:2a:9e: f7:a4:c2:d0:f6:1d:84:21:4c:b0:6a:8a:49:08:0b:4e:6f:ad: 05:6c:3f:dc:db:07:2d:3a:34:ae:6b:04:a4:cd:1b:f8:a4:4d: 38:a7:fd:60:44:bb:15:c3:03:c5:34:d3:8c:06:7a:54:65:29: 33:22:5b:76:d7:c4:bf:0a:0f:93:13:6f:1b:7f:22:79:b0:8e: ca:6d:81:8e:a9:fb:b3:2b:32:63:bf:54:62:df:ab:97:ed:cf: 6b:1e:dc:ab:0d:ad:95:41:8a:d6:04:ea:d9:83:78:2e:72:79: d6:25:29:ed:9e:3b:cf:d2:8c:89:9b:6a:e4:33:af:91:dc:de: bb:62:b3:76:d9:f9:67:c4:3f:b1:74:98:ea:91:3c:f0:22:14: 7d:f9:f9:f4:a3:cc:1d:e0:e4:6c:3e:5a:b7:4b:b2:df:2a:ee: 08:54:c6:b5:fb:f6:a1:f6:e6:43:ff:90:df:76:97:2e:eb:f8: 1d:b5:64:3a:5e:c0:af:f4:46:b0:1f:16:fa:4d:d2:a6:70:c0: cd:a2:1a:9a:37:3d:87:e8:01:26:1d:a1:75:d6:9a:0d:12:69: cb:8f:c7:96:20:e2:e0:31:05:26:d1:9d:fa:82:78:22:d4:2c: 89:67:c8:37 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUQT912QvWLVfhSCqysWVESmfGleowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjEyNkEzNzI4MzU4MDFCQkI3Mzg2OTZDNTZEQ0YyNTVE MDMyRDQyRjAeFw0yNTEwMjEwODM2NTVaFw0yNTEwMjQxMDEzNTVaMDMxMTAvBgNV BAMTKDJGREYxN0ZCNTQwOEVGQUM4Q0QwQzQxNDg0NEY2QkJCRjlBREU3QTQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDPwLqDvz2+e71CpAeVnJW4oorx kFjJ/RKu9KdJjll1peL/D0NKpv0U4PXQDILv9L3YKlqCQi4ksmbIswuxB1nLdlYo E3nix73FmVG0qqWkdD7DdWCVu2qhxW5qaNPiBKRyuLoQ1jrtxlbaF1oNcjFTN8Tc rteHLDCBMkO/rmuNgArCptCtnSBLgGIGadTpQOC5PgJolcTEMA1SjmRg+lNNOcbh xFlzZvLJYncFWrRZFgRapuMd+jHBTK4DjA8NS4yUnyPV15G9QuKR41MkdZdN4Iu4 iewdJTUkVC2aCrquZV2doa1hpzqCGZLiG38b711jpca79Q3d/S2I3H951Z6dAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUL98X+1QI76yM0MQUhE9ru/mt56QwHwYDVR0j BBgwFoAUsSajcoNYAbu3OGlsVtzyVdAy1C8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k MDQ0ZjkxOC05MzMyLTQyNTctYjUxMC0zODFjODU5MGZmNTQvMC9CMTI2QTM3Mjgz NTgwMUJCQjczODY5NkM1NkRDRjI1NUQwMzJENDJGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQjEyNkEzNzI4MzU4MDFCQkI3Mzg2OTZDNTZEQ0YyNTVEMDMy RDQyRi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZDA0NGY5MTgtOTMzMi00MjU3LWI1 MTAtMzgxYzg1OTBmZjU0LzAvQjEyNkEzNzI4MzU4MDFCQkI3Mzg2OTZDNTZEQ0Yy NTVEMDMyRDQyRi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHaQW+unESbcR97gTdXXussqnvekwtD2HYQh TLBqikkIC05vrQVsP9zbBy06NK5rBKTNG/ikTTin/WBEuxXDA8U004wGelRlKTMi W3bXxL8KD5MTbxt/InmwjsptgY6p+7MrMmO/VGLfq5ftz2se3KsNrZVBitYE6tmD eC5yedYlKe2eO8/SjImbauQzr5Hc3rtis3bZ+WfEP7F0mOqRPPAiFH35+fSjzB3g 5Gw+WrdLst8q7ghUxrX79qH25kP/kN92ly7r+B21ZDpewK/0RrAfFvpN0qZwwM2i Gpo3PYfoASYdoXXWmg0SacuPx5Yg4uAxBSbRnfqCeCLULIlnyDc= -----END CERTIFICATE-----Generated at Thu Oct 23 05:24:47 2025 by rpki-client