$ rpki-client -vvf repo-rpki.idnic.net/repo/5bf2cf03-f9f9-4bca-8c2c-6073280dfea8/0/B392381083372148D0977D0066CFF38FD5A32CDB.mft File: B392381083372148D0977D0066CFF38FD5A32CDB.mft (raw, json) Hash identifier: J1J0TqyxguPQQfCBjRDzYkQEEv/FxAm0f1KLc4Ay4p4= Subject key identifier: A3:CF:9D:01:A6:9C:A6:C3:92:33:C8:A0:C9:CB:6E:A2:E7:93:F6:C9 Authority key identifier: B3:92:38:10:83:37:21:48:D0:97:7D:00:66:CF:F3:8F:D5:A3:2C:DB Certificate issuer: /CN=B392381083372148D0977D0066CFF38FD5A32CDB Certificate serial: 6B43F6C43CB29B29A7FE392858EF1EA39817A7B6 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B392381083372148D0977D0066CFF38FD5A32CDB.cer Subject info access: rsync://repo-rpki.idnic.net/repo/5bf2cf03-f9f9-4bca-8c2c-6073280dfea8/0/B392381083372148D0977D0066CFF38FD5A32CDB.mft Manifest number: 0248 Signing time: Fri 31 Oct 2025 02:32:02 +0000 Manifest this update: Fri 31 Oct 2025 02:27:02 +0000 Manifest next update: Mon 03 Nov 2025 08:31:02 +0000 Files and hashes: 1: 3130332e3138352e38322e302f32332d3234203d3e203538383230.roa (hash: HSEFfxxLTR9pPfTqUIYx4lI4vavTZEpGUjc26Y26XRA=) 2: B392381083372148D0977D0066CFF38FD5A32CDB.crl (hash: da/dx3GUleFNyjEpbRiFd9pC1jDingBkt+bQ4YfRvbE=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/5bf2cf03-f9f9-4bca-8c2c-6073280dfea8/0/B392381083372148D0977D0066CFF38FD5A32CDB.crl rsync://repo-rpki.idnic.net/repo/5bf2cf03-f9f9-4bca-8c2c-6073280dfea8/0/B392381083372148D0977D0066CFF38FD5A32CDB.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B392381083372148D0977D0066CFF38FD5A32CDB.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 03 Nov 2025 08:31:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6b:43:f6:c4:3c:b2:9b:29:a7:fe:39:28:58:ef:1e:a3:98:17:a7:b6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B392381083372148D0977D0066CFF38FD5A32CDB Validity Not Before: Oct 31 02:27:02 2025 GMT Not After : Nov 3 08:31:02 2025 GMT Subject: CN=A3CF9D01A69CA6C39233C8A0C9CB6EA2E793F6C9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:0f:c0:e7:78:0e:ab:c9:6d:48:7d:ca:bc:8c: 04:38:a8:98:77:f0:11:65:70:d6:1f:6a:d5:95:0a: e7:2f:22:84:74:23:07:98:ed:c2:c5:7d:16:af:5c: 4d:b9:ca:df:ea:ce:51:7f:48:e5:fa:81:30:07:86: 67:48:58:6a:f9:8a:b0:19:9e:d9:d9:c7:b3:f7:b3: f5:cd:be:17:78:58:cb:ee:c9:23:d2:a1:c0:bb:16: 24:b5:29:6e:66:46:22:ed:12:1d:3e:8c:6b:8c:4a: 53:d7:94:04:24:34:fd:8b:31:74:8a:07:74:75:0f: e6:9c:a8:e2:f9:96:bf:9f:88:06:a7:54:13:45:e8: f4:8c:06:a4:18:78:49:ce:b4:1e:b2:f3:f8:40:02: 95:d6:c7:d8:91:2c:a2:02:a5:c0:0e:39:42:73:0c: f2:ee:e9:c0:55:ac:57:f1:96:40:30:fb:a1:a7:72: 24:bc:44:f9:bd:50:cc:92:9a:b9:c8:11:66:5d:c2: 4c:79:40:b5:13:4d:ed:e8:81:0a:90:e4:2b:e1:52: c4:3e:89:8e:46:29:9d:83:fb:ac:df:80:43:e9:52: 84:82:db:94:34:57:b7:2c:ec:2f:06:c5:54:73:9a: 48:05:2f:47:7f:7a:9a:98:21:09:0e:89:7e:fb:f8: 88:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:CF:9D:01:A6:9C:A6:C3:92:33:C8:A0:C9:CB:6E:A2:E7:93:F6:C9 X509v3 Authority Key Identifier: keyid:B3:92:38:10:83:37:21:48:D0:97:7D:00:66:CF:F3:8F:D5:A3:2C:DB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/5bf2cf03-f9f9-4bca-8c2c-6073280dfea8/0/B392381083372148D0977D0066CFF38FD5A32CDB.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B392381083372148D0977D0066CFF38FD5A32CDB.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/5bf2cf03-f9f9-4bca-8c2c-6073280dfea8/0/B392381083372148D0977D0066CFF38FD5A32CDB.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9a:86:99:4e:de:85:e5:41:d5:d9:0b:e0:ef:c6:3a:f0:66:19: 43:a8:0d:dc:ba:cd:ca:88:e0:fb:50:f7:0e:62:5e:3b:8c:2b: 46:e7:cd:80:69:d9:f0:d3:bc:4a:c4:12:52:5d:a8:00:f9:42: 4c:48:a3:4f:e5:45:91:1b:3d:50:a8:d4:cd:6e:12:6b:1f:f4: 4f:7b:f2:68:03:50:84:98:b6:19:4c:85:b3:dd:be:a5:61:ae: c4:ad:bd:95:e6:6f:0c:f5:57:78:3c:00:3b:9e:70:15:4c:65: f8:2f:70:a4:a0:b5:0f:9a:b2:82:0a:1f:48:74:85:22:af:d9: ee:b0:ad:0d:a7:29:60:49:ad:ae:88:c6:b6:de:ab:ea:ed:60: 16:e2:ff:20:53:8b:80:89:d0:03:55:7b:45:d9:c2:51:dc:fb: c5:fc:d6:f4:b9:8a:5c:48:e4:27:20:63:61:f1:aa:b3:fc:67: 6a:d3:01:4b:62:18:8d:1f:ec:dd:de:1a:7f:10:eb:6e:00:45: 3e:5e:71:cb:ff:8c:06:4c:15:27:b9:1b:fb:d3:d3:03:72:10: 1c:c8:34:b3:05:8c:de:45:41:7a:54:b1:0c:15:42:d1:24:03: 59:de:af:2a:36:df:25:fb:5e:0d:c2:cf:ec:03:cb:d4:64:70: 95:c3:01:58 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUa0P2xDyymymn/jkoWO8eo5gXp7YwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjM5MjM4MTA4MzM3MjE0OEQwOTc3RDAwNjZDRkYzOEZE NUEzMkNEQjAeFw0yNTEwMzEwMjI3MDJaFw0yNTExMDMwODMxMDJaMDMxMTAvBgNV BAMTKEEzQ0Y5RDAxQTY5Q0E2QzM5MjMzQzhBMEM5Q0I2RUEyRTc5M0Y2QzkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDqD8DneA6ryW1Ifcq8jAQ4qJh3 8BFlcNYfatWVCucvIoR0IweY7cLFfRavXE25yt/qzlF/SOX6gTAHhmdIWGr5irAZ ntnZx7P3s/XNvhd4WMvuySPSocC7FiS1KW5mRiLtEh0+jGuMSlPXlAQkNP2LMXSK B3R1D+acqOL5lr+fiAanVBNF6PSMBqQYeEnOtB6y8/hAApXWx9iRLKICpcAOOUJz DPLu6cBVrFfxlkAw+6GnciS8RPm9UMySmrnIEWZdwkx5QLUTTe3ogQqQ5CvhUsQ+ iY5GKZ2D+6zfgEPpUoSC25Q0V7cs7C8GxVRzmkgFL0d/epqYIQkOiX77+IgvAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUo8+dAaacpsOSM8igyctuoueT9skwHwYDVR0j BBgwFoAUs5I4EIM3IUjQl30AZs/zj9WjLNswDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 YmYyY2YwMy1mOWY5LTRiY2EtOGMyYy02MDczMjgwZGZlYTgvMC9CMzkyMzgxMDgz MzcyMTQ4RDA5NzdEMDA2NkNGRjM4RkQ1QTMyQ0RCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQjM5MjM4MTA4MzM3MjE0OEQwOTc3RDAwNjZDRkYzOEZENUEz MkNEQi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNWJmMmNmMDMtZjlmOS00YmNhLThj MmMtNjA3MzI4MGRmZWE4LzAvQjM5MjM4MTA4MzM3MjE0OEQwOTc3RDAwNjZDRkYz OEZENUEzMkNEQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJqGmU7eheVB1dkL4O/GOvBmGUOoDdy6zcqI 4PtQ9w5iXjuMK0bnzYBp2fDTvErEElJdqAD5QkxIo0/lRZEbPVCo1M1uEmsf9E97 8mgDUISYthlMhbPdvqVhrsStvZXmbwz1V3g8ADuecBVMZfgvcKSgtQ+asoIKH0h0 hSKv2e6wrQ2nKWBJra6Ixrbeq+rtYBbi/yBTi4CJ0ANVe0XZwlHc+8X81vS5ilxI 5CcgY2HxqrP8Z2rTAUtiGI0f7N3eGn8Q624ART5eccv/jAZMFSe5G/vT0wNyEBzI NLMFjN5FQXpUsQwVQtEkA1neryo23yX7Xg3Cz+wDy9RkcJXDAVg= -----END CERTIFICATE-----Generated at Sun Nov 2 06:18:11 2025 by rpki-client