$ rpki-client -vvf repo-rpki.idnic.net/repo/1f2f64ca-fa54-499e-bc33-4862dca794f7/0/B9A55DD123C2F224C4E245856905F78F2F354D92.mft File: B9A55DD123C2F224C4E245856905F78F2F354D92.mft (raw, json) Hash identifier: FBG/2sdcryF/7P3ip6jo1VE4hqttwBrmWkOchvsoWIo= Subject key identifier: 3C:48:9C:9C:65:82:CA:FC:1E:F0:61:1A:59:3E:B1:6D:07:2E:B9:C6 Authority key identifier: B9:A5:5D:D1:23:C2:F2:24:C4:E2:45:85:69:05:F7:8F:2F:35:4D:92 Certificate issuer: /CN=B9A55DD123C2F224C4E245856905F78F2F354D92 Certificate serial: 56EEF6620C7448E2FA91C7ADB49D2115CBF4D353 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/B9A55DD123C2F224C4E245856905F78F2F354D92.cer Subject info access: rsync://repo-rpki.idnic.net/repo/1f2f64ca-fa54-499e-bc33-4862dca794f7/0/B9A55DD123C2F224C4E245856905F78F2F354D92.mft Manifest number: EC Signing time: Mon 27 Oct 2025 01:20:59 +0000 Manifest this update: Mon 27 Oct 2025 01:15:59 +0000 Manifest next update: Thu 30 Oct 2025 08:24:59 +0000 Files and hashes: 1: B9A55DD123C2F224C4E245856905F78F2F354D92.crl (hash: uxxTPTe+F/3jsV+RrGgms7q7fzFSV5OOTOeZArKbiVQ=) 2: 3135372e31302e39372e302f32342d3234203d3e203538383231.roa (hash: UPR5y8V0jVDX7lorT6sk4sYb0YCh+EKPNMakCdOkBwI=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/1f2f64ca-fa54-499e-bc33-4862dca794f7/0/B9A55DD123C2F224C4E245856905F78F2F354D92.crl rsync://repo-rpki.idnic.net/repo/1f2f64ca-fa54-499e-bc33-4862dca794f7/0/B9A55DD123C2F224C4E245856905F78F2F354D92.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/B9A55DD123C2F224C4E245856905F78F2F354D92.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 30 Oct 2025 08:24:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 56:ee:f6:62:0c:74:48:e2:fa:91:c7:ad:b4:9d:21:15:cb:f4:d3:53 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B9A55DD123C2F224C4E245856905F78F2F354D92 Validity Not Before: Oct 27 01:15:59 2025 GMT Not After : Oct 30 08:24:59 2025 GMT Subject: CN=3C489C9C6582CAFC1EF0611A593EB16D072EB9C6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:52:a9:49:39:ec:22:51:f3:e4:30:4f:99:a2: da:84:c2:77:45:01:98:6b:21:d1:83:70:24:25:63: 20:27:43:1a:ca:e4:9d:aa:12:5f:b3:89:ba:39:f0: b7:f2:71:bd:c9:27:cb:85:bd:fe:e7:9b:81:17:50: 56:cd:9f:93:1f:47:f0:aa:70:5d:cb:8c:f6:cd:47: 45:4a:d6:ad:a3:a1:12:77:2d:9b:70:50:14:c7:36: 0e:65:e1:d5:7a:af:7a:be:b8:8e:9f:b2:52:3d:90: 9d:4e:8e:3d:72:65:93:c0:9e:2a:a6:8a:51:46:ed: 40:9b:42:2c:5a:c8:18:b0:1d:d6:fb:a4:a7:5a:39: 3c:85:8d:b2:0b:08:28:12:ff:ea:70:4b:b4:a9:85: 1b:ef:42:e2:81:42:1b:45:cb:45:49:28:00:3d:f4: af:76:70:43:56:be:96:b0:23:3d:eb:5a:cd:7f:76: b4:d7:8e:87:bd:69:6b:6c:f7:84:ea:e5:73:3e:9a: c5:f3:5e:6b:9f:5f:12:69:7c:55:76:aa:fe:04:f3: 96:58:61:2a:6c:11:c2:54:8d:4b:19:76:36:3a:f1: fd:54:56:27:a6:58:80:1b:fd:a8:58:bb:62:37:db: ab:1b:61:02:1c:bd:44:44:16:8a:ba:ab:b8:41:86: e1:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:48:9C:9C:65:82:CA:FC:1E:F0:61:1A:59:3E:B1:6D:07:2E:B9:C6 X509v3 Authority Key Identifier: keyid:B9:A5:5D:D1:23:C2:F2:24:C4:E2:45:85:69:05:F7:8F:2F:35:4D:92 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/1f2f64ca-fa54-499e-bc33-4862dca794f7/0/B9A55DD123C2F224C4E245856905F78F2F354D92.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/B9A55DD123C2F224C4E245856905F78F2F354D92.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/1f2f64ca-fa54-499e-bc33-4862dca794f7/0/B9A55DD123C2F224C4E245856905F78F2F354D92.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ce:b5:30:bd:6a:0d:7c:8e:b0:7b:db:a8:7b:4f:5b:19:0f:94: 5c:f7:a7:43:15:c5:8b:e6:7d:d3:d3:ec:a7:6c:43:e6:3b:4d: 9c:22:4d:53:1f:9b:27:ee:ae:64:e0:0d:c1:6d:b2:b3:f3:f5: ca:d1:d8:4b:e9:97:a0:22:ae:94:8b:6b:80:7c:b9:5f:9f:84: d4:28:c7:fe:bd:35:13:a5:a9:2c:69:32:69:d9:a4:31:23:af: 54:c2:9b:0c:72:35:9d:9a:cb:20:32:11:0d:6a:19:d9:91:ec: 6c:cd:e0:0b:6f:ac:93:a0:7b:2c:17:14:a0:ed:3d:8a:dc:95: d7:cf:28:dc:ef:77:ed:07:6e:8e:49:44:ef:f9:b4:e7:66:14: 49:21:f5:62:1c:6d:3e:98:7e:bc:38:ab:ee:ea:93:0b:30:2b: 39:ef:2d:25:89:a4:22:71:8c:22:7e:73:40:cf:49:53:31:54: 02:a7:57:7d:03:e1:0f:71:f2:cc:c6:c9:4a:3e:54:b4:ab:2e: 57:a3:9e:34:3a:31:2c:75:ce:24:4d:d4:f8:63:d9:6a:c6:61: 63:b8:70:d9:35:06:4e:6e:83:8a:c6:6b:78:79:34:06:44:43: 77:30:78:b4:cc:ff:4a:b7:7b:05:ff:38:9f:82:fd:7d:0f:1d: 9e:de:b7:9b -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUVu72Ygx0SOL6kcettJ0hFcv001MwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjlBNTVERDEyM0MyRjIyNEM0RTI0NTg1NjkwNUY3OEYy RjM1NEQ5MjAeFw0yNTEwMjcwMTE1NTlaFw0yNTEwMzAwODI0NTlaMDMxMTAvBgNV BAMTKDNDNDg5QzlDNjU4MkNBRkMxRUYwNjExQTU5M0VCMTZEMDcyRUI5QzYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDEUqlJOewiUfPkME+ZotqEwndF AZhrIdGDcCQlYyAnQxrK5J2qEl+zibo58Lfycb3JJ8uFvf7nm4EXUFbNn5MfR/Cq cF3LjPbNR0VK1q2joRJ3LZtwUBTHNg5l4dV6r3q+uI6fslI9kJ1Ojj1yZZPAniqm ilFG7UCbQixayBiwHdb7pKdaOTyFjbILCCgS/+pwS7SphRvvQuKBQhtFy0VJKAA9 9K92cENWvpawIz3rWs1/drTXjoe9aWts94Tq5XM+msXzXmufXxJpfFV2qv4E85ZY YSpsEcJUjUsZdjY68f1UViemWIAb/ahYu2I326sbYQIcvUREFoq6q7hBhuHzAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUPEicnGWCyvwe8GEaWT6xbQcuucYwHwYDVR0j BBgwFoAUuaVd0SPC8iTE4kWFaQX3jy81TZIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x ZjJmNjRjYS1mYTU0LTQ5OWUtYmMzMy00ODYyZGNhNzk0ZjcvMC9COUE1NUREMTIz QzJGMjI0QzRFMjQ1ODU2OTA1Rjc4RjJGMzU0RDkyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvQjlBNTVERDEyM0MyRjIyNEM0RTI0NTg1NjkwNUY3OEYyRjM1 NEQ5Mi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMWYyZjY0Y2EtZmE1NC00OTllLWJj MzMtNDg2MmRjYTc5NGY3LzAvQjlBNTVERDEyM0MyRjIyNEM0RTI0NTg1NjkwNUY3 OEYyRjM1NEQ5Mi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAM61ML1qDXyOsHvbqHtPWxkPlFz3p0MVxYvm fdPT7KdsQ+Y7TZwiTVMfmyfurmTgDcFtsrPz9crR2Evpl6AirpSLa4B8uV+fhNQo x/69NROlqSxpMmnZpDEjr1TCmwxyNZ2ayyAyEQ1qGdmR7GzN4AtvrJOgeywXFKDt PYrcldfPKNzvd+0Hbo5JRO/5tOdmFEkh9WIcbT6Yfrw4q+7qkwswKznvLSWJpCJx jCJ+c0DPSVMxVAKnV30D4Q9x8szGyUo+VLSrLlejnjQ6MSx1ziRN1Phj2WrGYWO4 cNk1Bk5ug4rGa3h5NAZEQ3cweLTM/0q3ewX/OJ+C/X0PHZ7et5s= -----END CERTIFICATE-----Generated at Tue Oct 28 15:56:30 2025 by rpki-client