$ rpki-client -vvf repo-rpki.idnic.net/repo/78e78ee0-0002-4a67-a739-3033d5b5ba61/0/B1D4F5495BE4F9D995EA9C1545469CA2B98334F1.mft File: B1D4F5495BE4F9D995EA9C1545469CA2B98334F1.mft (raw, json) Hash identifier: ztsol2CmJaRsXlnNDJa8zsjlXUsi7ZeRiqykOBljQxk= Subject key identifier: F8:DB:62:BC:C5:0B:AD:36:F6:0A:B3:7D:CE:D9:E3:25:AD:9B:CE:DB Authority key identifier: B1:D4:F5:49:5B:E4:F9:D9:95:EA:9C:15:45:46:9C:A2:B9:83:34:F1 Certificate issuer: /CN=B1D4F5495BE4F9D995EA9C1545469CA2B98334F1 Certificate serial: 573C79DF6AD4C7BAE4BD5CB35651A931C3F8B841 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B1D4F5495BE4F9D995EA9C1545469CA2B98334F1.cer Subject info access: rsync://repo-rpki.idnic.net/repo/78e78ee0-0002-4a67-a739-3033d5b5ba61/0/B1D4F5495BE4F9D995EA9C1545469CA2B98334F1.mft Manifest number: 0258 Signing time: Sat 25 Oct 2025 23:22:21 +0000 Manifest this update: Sat 25 Oct 2025 23:17:21 +0000 Manifest next update: Wed 29 Oct 2025 03:38:21 +0000 Files and hashes: 1: B1D4F5495BE4F9D995EA9C1545469CA2B98334F1.crl (hash: /OMB8WAea83zfKZQROBHE4wuYn4Qfd2cdcBXI+Os2cs=) 2: 3130332e3136382e3138352e302f32342d3234203d3e203438343635.roa (hash: hum6PwDa+tJlyU75JQFBXd7LlyucqEnCFxIhwk7g/uE=) 3: 3130332e3136382e3138352e302f32342d3234203d3e20313432333231.roa (hash: KAd16ldutYh48OLbDnroVNt1O/HTzAA/aCmbtAP1Odw=) 4: 3130332e3136382e3138342e302f32332d3233203d3e20313432333231.roa (hash: WwW9nUa1rmjUn7BCAW+1oX9KPadjU43XCXkkj1toOfQ=) 5: 3130332e3136382e3138342e302f32342d3234203d3e20313432333231.roa (hash: YwiS5nlm2sACVNb5Xfq0EOTBtueDgKIv6RAnbgfUwRk=) 6: 3130332e3136382e3138342e302f32342d3234203d3e203438343635.roa (hash: 1UJAHonWaadwHYuLef8BFUV8SSyJkucgr+FB5CesNHg=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/78e78ee0-0002-4a67-a739-3033d5b5ba61/0/B1D4F5495BE4F9D995EA9C1545469CA2B98334F1.crl rsync://repo-rpki.idnic.net/repo/78e78ee0-0002-4a67-a739-3033d5b5ba61/0/B1D4F5495BE4F9D995EA9C1545469CA2B98334F1.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B1D4F5495BE4F9D995EA9C1545469CA2B98334F1.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 29 Oct 2025 03:38:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 57:3c:79:df:6a:d4:c7:ba:e4:bd:5c:b3:56:51:a9:31:c3:f8:b8:41 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B1D4F5495BE4F9D995EA9C1545469CA2B98334F1 Validity Not Before: Oct 25 23:17:21 2025 GMT Not After : Oct 29 03:38:21 2025 GMT Subject: CN=F8DB62BCC50BAD36F60AB37DCED9E325AD9BCEDB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:91:d6:dd:c7:00:fd:a7:52:01:48:f7:37:6a: 70:e8:3a:5c:6a:e0:0f:32:2f:74:a8:69:6c:0f:f5: a6:2b:2c:6a:df:40:f6:b4:d8:77:3f:6f:f6:e7:53: ed:d3:1e:5e:cb:8d:72:d7:9f:0d:ad:65:3f:d1:e0: 81:7d:b5:fb:3d:e5:7a:a9:34:17:71:6e:f3:9c:7c: 2b:b5:92:d4:92:67:3e:be:3a:24:b0:1f:78:af:47: 06:6d:b4:41:0e:3a:1b:da:45:df:81:b2:e8:ec:ed: 36:85:12:e5:ea:8f:29:a4:4f:f7:20:3d:ae:80:b2: 0e:10:2a:cb:45:f6:3a:be:19:cb:e3:d5:9a:c9:24: 83:01:e7:83:23:3a:b9:8e:05:d9:0a:f0:40:57:08: 2f:bc:fe:f7:4e:46:9c:6f:22:e6:56:22:49:11:f1: 64:0c:0c:4d:7f:1e:26:f2:15:87:3c:07:1d:d0:f2: 81:85:91:52:2b:7f:c8:ec:3d:15:50:f8:e8:1c:64: ca:d4:34:e1:2a:d3:f1:6f:86:7d:52:d5:25:c2:22: e7:a7:06:30:c5:a4:82:a0:31:a2:3a:6b:b3:4f:f8: 27:34:3d:97:4c:d3:ce:a8:93:02:bc:8c:03:1e:a8: bf:a0:fe:43:4f:f0:9d:03:64:84:5e:a0:15:2b:f7: 07:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F8:DB:62:BC:C5:0B:AD:36:F6:0A:B3:7D:CE:D9:E3:25:AD:9B:CE:DB X509v3 Authority Key Identifier: keyid:B1:D4:F5:49:5B:E4:F9:D9:95:EA:9C:15:45:46:9C:A2:B9:83:34:F1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/78e78ee0-0002-4a67-a739-3033d5b5ba61/0/B1D4F5495BE4F9D995EA9C1545469CA2B98334F1.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B1D4F5495BE4F9D995EA9C1545469CA2B98334F1.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/78e78ee0-0002-4a67-a739-3033d5b5ba61/0/B1D4F5495BE4F9D995EA9C1545469CA2B98334F1.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption cf:46:f3:e3:fc:50:96:9e:75:e4:40:7d:82:27:2a:af:c4:83: e2:4e:d6:5b:1e:65:01:f9:24:e6:31:a3:ba:2a:6c:6f:70:ed: 90:6e:0c:21:c4:8e:06:7d:4f:9a:2f:93:c9:b9:aa:cd:94:91: 1f:27:52:5d:80:06:06:10:81:ad:23:7b:fb:d5:f0:83:33:1c: 6a:83:c9:ea:12:71:fd:5c:33:e1:ec:76:ff:13:ab:9c:22:c8: 42:00:d4:39:eb:bf:1d:e4:2a:e1:37:de:63:82:93:6f:56:df: 50:70:a1:3b:ae:a4:23:ee:69:5f:20:36:7b:05:95:65:e1:38: e7:4f:e1:8d:a5:38:8b:29:4f:2b:d4:42:8e:4b:8e:0b:c4:e6: af:36:2c:f3:ad:b7:a2:86:08:3b:50:6f:a2:bc:22:2c:bb:af: 53:6a:d0:1e:b2:8e:59:78:3b:55:d8:cf:15:13:77:8b:3f:a3: 04:b8:e4:e0:d7:2d:3e:e0:e4:4a:f6:db:0a:b7:0b:3a:79:9e: be:45:fa:b8:63:52:ca:0e:3a:d4:48:70:29:3c:7f:a3:f6:40: 28:63:0f:f9:fc:87:d1:34:b9:5b:9b:53:77:24:de:19:5e:02: 8e:02:dc:93:9e:e7:e7:f2:23:4b:58:76:e2:ba:a9:f3:ed:fe: e3:da:f8:d9 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUVzx532rUx7rkvVyzVlGpMcP4uEEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjFENEY1NDk1QkU0RjlEOTk1RUE5QzE1NDU0NjlDQTJC OTgzMzRGMTAeFw0yNTEwMjUyMzE3MjFaFw0yNTEwMjkwMzM4MjFaMDMxMTAvBgNV BAMTKEY4REI2MkJDQzUwQkFEMzZGNjBBQjM3RENFRDlFMzI1QUQ5QkNFREIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC8kdbdxwD9p1IBSPc3anDoOlxq 4A8yL3SoaWwP9aYrLGrfQPa02Hc/b/bnU+3THl7LjXLXnw2tZT/R4IF9tfs95Xqp NBdxbvOcfCu1ktSSZz6+OiSwH3ivRwZttEEOOhvaRd+Bsujs7TaFEuXqjymkT/cg Pa6Asg4QKstF9jq+Gcvj1ZrJJIMB54MjOrmOBdkK8EBXCC+8/vdORpxvIuZWIkkR 8WQMDE1/HibyFYc8Bx3Q8oGFkVIrf8jsPRVQ+OgcZMrUNOEq0/Fvhn1S1SXCIuen BjDFpIKgMaI6a7NP+Cc0PZdM086okwK8jAMeqL+g/kNP8J0DZIReoBUr9wcDAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU+NtivMULrTb2CrN9ztnjJa2bztswHwYDVR0j BBgwFoAUsdT1SVvk+dmV6pwVRUacormDNPEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 OGU3OGVlMC0wMDAyLTRhNjctYTczOS0zMDMzZDViNWJhNjEvMC9CMUQ0RjU0OTVC RTRGOUQ5OTVFQTlDMTU0NTQ2OUNBMkI5ODMzNEYxLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQjFENEY1NDk1QkU0RjlEOTk1RUE5QzE1NDU0NjlDQTJCOTgz MzRGMS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNzhlNzhlZTAtMDAwMi00YTY3LWE3 MzktMzAzM2Q1YjViYTYxLzAvQjFENEY1NDk1QkU0RjlEOTk1RUE5QzE1NDU0NjlD QTJCOTgzMzRGMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAM9G8+P8UJaedeRAfYInKq/Eg+JO1lseZQH5 JOYxo7oqbG9w7ZBuDCHEjgZ9T5ovk8m5qs2UkR8nUl2ABgYQga0je/vV8IMzHGqD yeoScf1cM+Hsdv8Tq5wiyEIA1Dnrvx3kKuE33mOCk29W31BwoTuupCPuaV8gNnsF lWXhOOdP4Y2lOIspTyvUQo5LjgvE5q82LPOtt6KGCDtQb6K8Iiy7r1Nq0B6yjll4 O1XYzxUTd4s/owS45ODXLT7g5Er22wq3Czp5nr5F+rhjUsoOOtRIcCk8f6P2QChj D/n8h9E0uVubU3ck3hleAo4C3JOe5+fyI0tYduK6qfPt/uPa+Nk= -----END CERTIFICATE-----Generated at Mon Oct 27 09:28:58 2025 by rpki-client