$ rpki-client -vvf repo-rpki.idnic.net/repo/defe8f9b-8c34-4342-a0fe-ca1075fba5ff/0/B605E2C01C5BDC6CEE49545C80501360234DC910.mft File: B605E2C01C5BDC6CEE49545C80501360234DC910.mft (raw, json) Hash identifier: aQTyax0sS5AKibxPHbQPB4zvnd/EVUBYDixDkCBFM9U= Subject key identifier: AC:55:16:52:1E:9D:51:62:50:BD:B2:59:AB:76:42:62:BD:E1:E0:08 Authority key identifier: B6:05:E2:C0:1C:5B:DC:6C:EE:49:54:5C:80:50:13:60:23:4D:C9:10 Certificate issuer: /CN=B605E2C01C5BDC6CEE49545C80501360234DC910 Certificate serial: 0F7E12B618C1C5B70B4C5A80F61916715B1BD3F6 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B605E2C01C5BDC6CEE49545C80501360234DC910.cer Subject info access: rsync://repo-rpki.idnic.net/repo/defe8f9b-8c34-4342-a0fe-ca1075fba5ff/0/B605E2C01C5BDC6CEE49545C80501360234DC910.mft Manifest number: 0523 Signing time: Sat 25 Oct 2025 05:40:04 +0000 Manifest this update: Sat 25 Oct 2025 05:35:04 +0000 Manifest next update: Tue 28 Oct 2025 11:03:04 +0000 Files and hashes: 1: B605E2C01C5BDC6CEE49545C80501360234DC910.crl (hash: zt/hEIAPTFYGmwY3qtSTykscssSRAYu6Yy2pqL9E9A0=) 2: 3131352e3137382e35312e302f32342d3234203d3e20313331373137.roa (hash: tZJdaYJ4K7yW2v2tBg39Lb9tz4r7Kf6sn+VE2gvdsHw=) 3: 3131352e3137382e35352e302f32342d3234203d3e203338373833.roa (hash: L3ZzIiAydRdMLY3ej77+q1So7IkWU5tA3zvtMa14wvQ=) 4: 3131352e3137382e34382e302f32342d3234203d3e203338373833.roa (hash: /bgLX80Id13xkunC59CvIZtu8KOfj3mxVa1lG5ZXF/0=) 5: 3131352e3137382e34392e302f32342d3234203d3e203338373833.roa (hash: isINXQLKIC1dEiiAoWDEseWdjl997XY6+RtHzF8UKMk=) 6: 3131352e3137382e35332e302f32342d3234203d3e20313331373137.roa (hash: 5Br8jzUfiBL0O6Kopm71gWMUaniCVXm/uXqyIID9rs0=) 7: 3131352e3137382e35342e302f32342d3234203d3e20313331373137.roa (hash: 4R3cIWzWFlBnUOjDtKgjITkNYaOCw4Tx4+7Vb5ietQo=) 8: 3131352e3137382e35322e302f32342d3234203d3e20313331373137.roa (hash: NtqkwrlUwIEQ1zhmOPelG6/o7YZq6aMqPrp+f2CJ/tw=) 9: 3131352e3137382e35302e302f32342d3234203d3e203338373833.roa (hash: AVHUuCu/pWOfGEGbs7pgdGUZzNAVfi/HDMj4JakhRSI=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/defe8f9b-8c34-4342-a0fe-ca1075fba5ff/0/B605E2C01C5BDC6CEE49545C80501360234DC910.crl rsync://repo-rpki.idnic.net/repo/defe8f9b-8c34-4342-a0fe-ca1075fba5ff/0/B605E2C01C5BDC6CEE49545C80501360234DC910.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B605E2C01C5BDC6CEE49545C80501360234DC910.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 28 Oct 2025 11:03:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0f:7e:12:b6:18:c1:c5:b7:0b:4c:5a:80:f6:19:16:71:5b:1b:d3:f6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B605E2C01C5BDC6CEE49545C80501360234DC910 Validity Not Before: Oct 25 05:35:04 2025 GMT Not After : Oct 28 11:03:04 2025 GMT Subject: CN=AC5516521E9D516250BDB259AB764262BDE1E008 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:ff:2c:86:fe:64:7d:3b:78:ad:7f:85:c0:86: c6:e2:75:40:4f:e2:27:ea:f6:23:95:d0:e8:d4:5c: 11:da:be:78:e2:47:8c:d4:68:24:8b:37:8c:f6:b2: 94:ac:64:19:6b:50:90:c3:b5:6f:c2:76:ca:dc:cd: 30:5d:94:2e:f3:dc:5d:27:fd:48:57:ee:2d:18:00: 77:a0:d3:2a:7f:d9:ae:16:5b:5e:e7:c4:96:e1:cf: 09:43:16:06:ab:2f:8f:0f:25:25:8b:19:bb:f8:79: b6:1f:d8:60:5c:34:7e:02:23:28:54:b7:8d:16:8c: f6:db:95:1f:af:f7:cf:12:0a:bc:4a:5b:45:e8:06: 58:50:cb:60:9f:a3:81:cf:89:df:e3:a3:0a:f9:23: 15:0f:39:9e:a1:85:8c:cc:a9:e9:7a:4d:25:a4:1b: e7:18:68:75:45:d1:bd:ae:55:0c:59:83:f2:df:ed: 65:ad:e2:de:8c:da:89:83:b8:ca:38:93:1c:ab:85: 30:3b:d9:ca:73:76:46:66:39:9e:6e:db:1d:8c:16: f1:2b:2e:3f:f1:99:b9:94:e8:6d:8a:48:4d:f6:d5: 7d:d7:8f:11:3d:ba:33:4e:32:c3:c5:b5:43:a4:d6: 22:38:69:6d:c7:63:e5:0d:89:44:8d:7c:03:cd:5b: af:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AC:55:16:52:1E:9D:51:62:50:BD:B2:59:AB:76:42:62:BD:E1:E0:08 X509v3 Authority Key Identifier: keyid:B6:05:E2:C0:1C:5B:DC:6C:EE:49:54:5C:80:50:13:60:23:4D:C9:10 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/defe8f9b-8c34-4342-a0fe-ca1075fba5ff/0/B605E2C01C5BDC6CEE49545C80501360234DC910.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B605E2C01C5BDC6CEE49545C80501360234DC910.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/defe8f9b-8c34-4342-a0fe-ca1075fba5ff/0/B605E2C01C5BDC6CEE49545C80501360234DC910.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 21:d5:00:f2:54:2d:98:e0:84:42:b3:9a:58:cb:66:a8:81:c4: e0:db:0a:78:58:48:5a:e2:bb:48:d3:a4:d3:a6:ce:ff:76:b3: 21:2e:a7:b2:fc:3b:27:d1:90:22:61:69:1a:ae:33:50:c0:3d: 16:d5:15:e0:d9:7c:a8:96:7c:af:a2:33:0d:a6:99:fb:c2:16: c9:1e:a7:48:d0:7f:bd:a1:d1:56:b1:c1:b9:1a:bd:96:05:ec: e2:cc:4d:ad:5b:bf:c5:c4:93:17:e6:7a:3c:78:0f:0c:e1:87: 34:57:84:49:95:11:a4:7f:dc:30:b7:05:00:00:75:95:8d:e0: 21:76:41:b8:03:36:06:5d:4d:3c:4d:a1:84:49:47:4d:5c:3a: f6:28:3a:60:5b:33:9f:75:af:d8:4d:01:a2:77:b5:56:c3:42: be:63:3b:85:96:d5:86:2b:69:c1:51:ab:17:9e:bd:0b:64:dc: c0:e0:79:9e:36:a6:03:37:4e:30:99:d0:7f:2f:33:39:60:17: 38:c5:7f:71:f8:1e:7a:b6:18:3b:a8:51:98:21:2c:03:cb:a6: f5:3c:b4:69:d0:af:4f:77:13:e2:b8:61:a1:08:a1:db:29:59: d3:a6:f9:0e:ec:bf:ae:d2:d8:ff:f2:58:60:4b:da:ea:89:de: 48:35:f4:a9 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUD34SthjBxbcLTFqA9hkWcVsb0/YwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjYwNUUyQzAxQzVCREM2Q0VFNDk1NDVDODA1MDEzNjAy MzREQzkxMDAeFw0yNTEwMjUwNTM1MDRaFw0yNTEwMjgxMTAzMDRaMDMxMTAvBgNV BAMTKEFDNTUxNjUyMUU5RDUxNjI1MEJEQjI1OUFCNzY0MjYyQkRFMUUwMDgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCw/yyG/mR9O3itf4XAhsbidUBP 4ifq9iOV0OjUXBHavnjiR4zUaCSLN4z2spSsZBlrUJDDtW/CdsrczTBdlC7z3F0n /UhX7i0YAHeg0yp/2a4WW17nxJbhzwlDFgarL48PJSWLGbv4ebYf2GBcNH4CIyhU t40WjPbblR+v988SCrxKW0XoBlhQy2Cfo4HPid/jowr5IxUPOZ6hhYzMqel6TSWk G+cYaHVF0b2uVQxZg/Lf7WWt4t6M2omDuMo4kxyrhTA72cpzdkZmOZ5u2x2MFvEr Lj/xmbmU6G2KSE321X3XjxE9ujNOMsPFtUOk1iI4aW3HY+UNiUSNfAPNW6/vAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUrFUWUh6dUWJQvbJZq3ZCYr3h4AgwHwYDVR0j BBgwFoAUtgXiwBxb3GzuSVRcgFATYCNNyRAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k ZWZlOGY5Yi04YzM0LTQzNDItYTBmZS1jYTEwNzVmYmE1ZmYvMC9CNjA1RTJDMDFD NUJEQzZDRUU0OTU0NUM4MDUwMTM2MDIzNERDOTEwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQjYwNUUyQzAxQzVCREM2Q0VFNDk1NDVDODA1MDEzNjAyMzRE QzkxMC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZGVmZThmOWItOGMzNC00MzQyLWEw ZmUtY2ExMDc1ZmJhNWZmLzAvQjYwNUUyQzAxQzVCREM2Q0VFNDk1NDVDODA1MDEz NjAyMzREQzkxMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACHVAPJULZjghEKzmljLZqiBxODbCnhYSFri u0jTpNOmzv92syEup7L8OyfRkCJhaRquM1DAPRbVFeDZfKiWfK+iMw2mmfvCFske p0jQf72h0VaxwbkavZYF7OLMTa1bv8XEkxfmejx4DwzhhzRXhEmVEaR/3DC3BQAA dZWN4CF2QbgDNgZdTTxNoYRJR01cOvYoOmBbM591r9hNAaJ3tVbDQr5jO4WW1YYr acFRqxeevQtk3MDgeZ42pgM3TjCZ0H8vMzlgFzjFf3H4Hnq2GDuoUZghLAPLpvU8 tGnQr093E+K4YaEIodspWdOm+Q7sv67S2P/yWGBL2uqJ3kg19Kk= -----END CERTIFICATE-----Generated at Sat Oct 25 13:10:08 2025 by rpki-client