$ rpki-client -vvf repo-rpki.idnic.net/repo/42713a32-fada-484e-a68d-0cac0fffa33c/0/B0FA6C3ED4780E032B0A3F161E018A7C8FA82B45.mft File: B0FA6C3ED4780E032B0A3F161E018A7C8FA82B45.mft (raw, json) Hash identifier: 9/ij694MHs/J8b/vV1bJftS4sKvERSLpS9eqWLxhf20= Subject key identifier: 76:55:D4:AF:0F:13:E8:63:DE:6E:C0:28:D5:8F:CF:26:69:23:70:83 Authority key identifier: B0:FA:6C:3E:D4:78:0E:03:2B:0A:3F:16:1E:01:8A:7C:8F:A8:2B:45 Certificate issuer: /CN=B0FA6C3ED4780E032B0A3F161E018A7C8FA82B45 Certificate serial: 2E3138D87326AA34FEED973124CB9622FCA82290 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B0FA6C3ED4780E032B0A3F161E018A7C8FA82B45.cer Subject info access: rsync://repo-rpki.idnic.net/repo/42713a32-fada-484e-a68d-0cac0fffa33c/0/B0FA6C3ED4780E032B0A3F161E018A7C8FA82B45.mft Manifest number: 0232 Signing time: Sat 18 Oct 2025 11:52:11 +0000 Manifest this update: Sat 18 Oct 2025 11:47:11 +0000 Manifest next update: Tue 21 Oct 2025 12:00:11 +0000 Files and hashes: 1: 3130332e3138362e3136382e302f32332d3233203d3e20313439333135.roa (hash: 0o9IBgjEwrH3ZJGqMXSmtJgW+TONR3n1c/K3AjhSCz0=) 2: 3130332e3138362e3136392e302f32342d3234203d3e20313439333135.roa (hash: k0YtTjCvRfHkKBkEOTB9msrr0NImtoiaOd/b0Un02oI=) 3: 3130332e3138362e3136382e302f32342d3234203d3e20313439333135.roa (hash: cA/IXkQfExxLqkZklRIGA4Iq/8wfMruGPEzuyZnNgNM=) 4: B0FA6C3ED4780E032B0A3F161E018A7C8FA82B45.crl (hash: 49+Yk+kgO84MIXAwMjGnWZTHXOFoTQtqPiMruEX9pNQ=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/42713a32-fada-484e-a68d-0cac0fffa33c/0/B0FA6C3ED4780E032B0A3F161E018A7C8FA82B45.crl rsync://repo-rpki.idnic.net/repo/42713a32-fada-484e-a68d-0cac0fffa33c/0/B0FA6C3ED4780E032B0A3F161E018A7C8FA82B45.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B0FA6C3ED4780E032B0A3F161E018A7C8FA82B45.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 21 Oct 2025 12:00:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2e:31:38:d8:73:26:aa:34:fe:ed:97:31:24:cb:96:22:fc:a8:22:90 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B0FA6C3ED4780E032B0A3F161E018A7C8FA82B45 Validity Not Before: Oct 18 11:47:11 2025 GMT Not After : Oct 21 12:00:11 2025 GMT Subject: CN=7655D4AF0F13E863DE6EC028D58FCF2669237083 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:af:69:e1:3c:00:11:04:ae:91:e9:f4:5f:9d: 87:48:47:d0:aa:a2:dd:69:6d:9e:72:ca:af:44:c9: 39:d5:fc:17:7e:39:07:1c:96:d1:50:54:0d:43:0a: cb:d5:34:a1:44:cf:93:5e:43:63:92:ff:cf:11:8b: 84:b5:b1:b9:9b:71:5d:84:d0:96:53:94:9b:10:4b: e0:b3:6f:bf:42:05:2f:ff:b0:21:45:37:a6:61:d0: bf:b1:50:6c:83:dc:32:4d:55:04:ed:6c:e1:18:40: 00:f7:40:e7:7f:db:3f:f1:bf:12:92:b4:41:35:87: 7b:03:15:0f:b7:d5:6e:db:3c:38:24:b1:e8:29:c1: 07:a9:bc:8f:10:22:50:4d:4b:63:7c:71:df:8a:e5: b8:99:f6:f3:e1:78:16:7d:5d:e2:4e:ec:4f:91:69: 25:e9:8d:eb:29:af:02:d7:bb:5b:b8:5d:f8:48:e4: 70:aa:fc:8e:fc:6e:ce:79:63:32:79:81:53:f2:e3: b7:a9:3f:59:98:24:83:29:b7:09:06:91:6b:59:6b: 6d:13:f1:58:b0:6b:30:e7:c9:4e:cb:e8:25:7b:61: d1:7a:26:6a:8c:b2:3e:ae:5e:27:88:d7:84:85:1b: 31:15:75:45:b5:02:96:23:8b:2b:9d:ea:f1:23:ad: a5:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 76:55:D4:AF:0F:13:E8:63:DE:6E:C0:28:D5:8F:CF:26:69:23:70:83 X509v3 Authority Key Identifier: keyid:B0:FA:6C:3E:D4:78:0E:03:2B:0A:3F:16:1E:01:8A:7C:8F:A8:2B:45 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/42713a32-fada-484e-a68d-0cac0fffa33c/0/B0FA6C3ED4780E032B0A3F161E018A7C8FA82B45.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B0FA6C3ED4780E032B0A3F161E018A7C8FA82B45.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/42713a32-fada-484e-a68d-0cac0fffa33c/0/B0FA6C3ED4780E032B0A3F161E018A7C8FA82B45.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 99:2c:43:67:d7:98:f9:e2:bf:ad:67:a9:ea:d5:45:db:6d:5d: e0:df:7b:e6:8d:ce:35:62:b1:fe:b8:a9:5b:3e:ec:84:68:c8: 63:58:6a:2e:49:86:ef:c0:fb:63:69:6b:24:25:c1:4f:e0:ae: 64:0d:b7:da:a4:db:e2:f8:50:9b:9d:9d:e7:cd:96:2e:78:e6: 32:4d:0c:3b:25:4b:6b:ff:68:d2:8f:94:d0:64:02:d5:c5:86: a3:e7:75:30:84:54:a7:0d:4e:d1:de:28:44:c5:9e:33:80:d2: 95:a4:b6:18:15:f0:88:02:f2:4b:66:d2:93:cc:52:b3:da:ca: e4:66:d1:79:1a:89:24:2d:4c:65:64:03:a3:74:2b:1f:00:13: c6:09:be:71:11:bb:4b:15:9f:a7:b1:07:d8:dc:ba:b9:b8:bf: 00:01:b2:9d:8b:f4:0b:a7:03:8d:5b:cb:dd:72:fa:d5:b0:c8: 87:1b:d5:59:3b:54:51:8d:c9:08:22:0e:7b:18:5d:05:cc:38: 7a:eb:ca:b5:82:97:fa:36:bc:c0:66:34:e1:25:b4:b9:1f:75: 91:31:88:10:b2:91:e8:f1:6d:71:59:06:da:e8:80:83:db:5f: 97:be:be:5f:f1:21:d0:a3:f1:1a:d5:20:bc:6a:59:ac:9c:05: 84:ad:07:02 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIULjE42HMmqjT+7ZcxJMuWIvyoIpAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjBGQTZDM0VENDc4MEUwMzJCMEEzRjE2MUUwMThBN0M4 RkE4MkI0NTAeFw0yNTEwMTgxMTQ3MTFaFw0yNTEwMjExMjAwMTFaMDMxMTAvBgNV BAMTKDc2NTVENEFGMEYxM0U4NjNERTZFQzAyOEQ1OEZDRjI2NjkyMzcwODMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC2r2nhPAARBK6R6fRfnYdIR9Cq ot1pbZ5yyq9EyTnV/Bd+OQccltFQVA1DCsvVNKFEz5NeQ2OS/88Ri4S1sbmbcV2E 0JZTlJsQS+Czb79CBS//sCFFN6Zh0L+xUGyD3DJNVQTtbOEYQAD3QOd/2z/xvxKS tEE1h3sDFQ+31W7bPDgksegpwQepvI8QIlBNS2N8cd+K5biZ9vPheBZ9XeJO7E+R aSXpjesprwLXu1u4XfhI5HCq/I78bs55YzJ5gVPy47epP1mYJIMptwkGkWtZa20T 8ViwazDnyU7L6CV7YdF6JmqMsj6uXieI14SFGzEVdUW1ApYjiyud6vEjraXvAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUdlXUrw8T6GPebsAo1Y/PJmkjcIMwHwYDVR0j BBgwFoAUsPpsPtR4DgMrCj8WHgGKfI+oK0UwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 MjcxM2EzMi1mYWRhLTQ4NGUtYTY4ZC0wY2FjMGZmZmEzM2MvMC9CMEZBNkMzRUQ0 NzgwRTAzMkIwQTNGMTYxRTAxOEE3QzhGQTgyQjQ1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQjBGQTZDM0VENDc4MEUwMzJCMEEzRjE2MUUwMThBN0M4RkE4 MkI0NS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNDI3MTNhMzItZmFkYS00ODRlLWE2 OGQtMGNhYzBmZmZhMzNjLzAvQjBGQTZDM0VENDc4MEUwMzJCMEEzRjE2MUUwMThB N0M4RkE4MkI0NS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJksQ2fXmPniv61nqerVRdttXeDfe+aNzjVi sf64qVs+7IRoyGNYai5Jhu/A+2NpayQlwU/grmQNt9qk2+L4UJudnefNli545jJN DDslS2v/aNKPlNBkAtXFhqPndTCEVKcNTtHeKETFnjOA0pWkthgV8IgC8ktm0pPM UrPayuRm0XkaiSQtTGVkA6N0Kx8AE8YJvnERu0sVn6exB9jcurm4vwABsp2L9Aun A41by91y+tWwyIcb1Vk7VFGNyQgiDnsYXQXMOHrryrWCl/o2vMBmNOEltLkfdZEx iBCykejxbXFZBtrogIPbX5e+vl/xIdCj8RrVILxqWaycBYStBwI= -----END CERTIFICATE-----Generated at Sun Oct 19 15:28:01 2025 by rpki-client