$ rpki-client -vvf repo-rpki.idnic.net/repo/7f4b53d8-b2ff-4973-b1ac-6f85faeadbe5/0/B8D444C5B3184A4F8C8F199A432242C44E19EACB.mft File: B8D444C5B3184A4F8C8F199A432242C44E19EACB.mft (raw, json) Hash identifier: LUr9IpI0cOrQHgseQnP3DKzSIPhTLEDRpxGqCEQgt0A= Subject key identifier: 10:E3:68:82:CA:21:A4:44:85:97:5B:43:67:9C:B4:AC:6B:13:DB:7E Authority key identifier: B8:D4:44:C5:B3:18:4A:4F:8C:8F:19:9A:43:22:42:C4:4E:19:EA:CB Certificate issuer: /CN=B8D444C5B3184A4F8C8F199A432242C44E19EACB Certificate serial: 408067F5975D781916250F5E481B371EB2DBAAE5 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/B8D444C5B3184A4F8C8F199A432242C44E19EACB.cer Subject info access: rsync://repo-rpki.idnic.net/repo/7f4b53d8-b2ff-4973-b1ac-6f85faeadbe5/0/B8D444C5B3184A4F8C8F199A432242C44E19EACB.mft Manifest number: D2 Signing time: Mon 20 Oct 2025 19:11:57 +0000 Manifest this update: Mon 20 Oct 2025 19:06:57 +0000 Manifest next update: Thu 23 Oct 2025 19:55:57 +0000 Files and hashes: 1: 3136302e32352e33362e302f32342d3234203d3e20313532383332.roa (hash: 1SJ9LA44FkXb29+CiOLplkV9zxTaWTCw2H5Ki5oako8=) 2: 3136302e32352e33362e302f32332d3234203d3e20313532383332.roa (hash: 9wCzZBokUdgA6nDZL9CPWVnRmT/IcfmN/N7BSRO44UA=) 3: B8D444C5B3184A4F8C8F199A432242C44E19EACB.crl (hash: OImrQyNNAalzOfEItDW7xNI8JAEs9uox9U1paNfuTYM=) 4: 3136302e32352e33372e302f32342d3234203d3e20313532383332.roa (hash: 2EK7G4yp/ra7lqC0aFCR3YZxswSuxrQQ2ZJJKEPHMZg=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/7f4b53d8-b2ff-4973-b1ac-6f85faeadbe5/0/B8D444C5B3184A4F8C8F199A432242C44E19EACB.crl rsync://repo-rpki.idnic.net/repo/7f4b53d8-b2ff-4973-b1ac-6f85faeadbe5/0/B8D444C5B3184A4F8C8F199A432242C44E19EACB.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/B8D444C5B3184A4F8C8F199A432242C44E19EACB.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 Oct 2025 03:04:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 40:80:67:f5:97:5d:78:19:16:25:0f:5e:48:1b:37:1e:b2:db:aa:e5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B8D444C5B3184A4F8C8F199A432242C44E19EACB Validity Not Before: Oct 20 19:06:57 2025 GMT Not After : Oct 23 19:55:57 2025 GMT Subject: CN=10E36882CA21A44485975B43679CB4AC6B13DB7E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:38:b8:21:c0:8f:32:1b:61:c5:9c:e5:67:16: a9:c0:88:71:d1:dc:3b:aa:96:00:67:30:ce:dc:55: 70:bd:25:60:6e:f7:f4:20:38:bd:a5:1a:dc:5b:32: e2:e0:e2:f2:0b:c1:65:cb:60:97:8f:83:f2:9f:91: 5b:dd:43:8d:29:b1:8e:9e:6b:e7:02:a0:48:e6:7f: 6a:d1:64:93:2d:ee:99:e8:69:b6:3d:9d:77:29:3f: 0e:46:3e:63:1e:7e:11:2a:62:f4:9b:3f:12:3c:23: da:fb:2f:2c:16:3c:75:62:ae:85:8f:c9:b4:ad:3e: 32:c9:d7:09:af:81:ed:f0:74:19:d2:35:b4:c7:73: ec:b4:bf:4c:9f:48:aa:5d:7e:c0:8c:dd:26:9c:7c: 4f:b4:88:d1:ad:de:1b:36:b2:f2:76:39:3e:dc:97: e9:3d:32:aa:08:94:fb:c9:84:bd:e9:3f:8b:5d:08: a7:0f:7e:ad:aa:0f:b9:2e:9e:fd:39:ee:7d:de:92: 24:17:94:74:9f:35:96:f5:58:d0:a0:0e:aa:c3:5b: 97:bd:a8:78:65:a0:ff:18:25:8b:5c:37:be:7d:b4: 1d:01:69:a7:32:66:c6:71:b1:dc:48:4a:86:29:bc: 9b:2b:34:9b:be:c2:75:3f:a9:a2:06:49:5c:68:8a: 8b:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:E3:68:82:CA:21:A4:44:85:97:5B:43:67:9C:B4:AC:6B:13:DB:7E X509v3 Authority Key Identifier: keyid:B8:D4:44:C5:B3:18:4A:4F:8C:8F:19:9A:43:22:42:C4:4E:19:EA:CB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/7f4b53d8-b2ff-4973-b1ac-6f85faeadbe5/0/B8D444C5B3184A4F8C8F199A432242C44E19EACB.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/B8D444C5B3184A4F8C8F199A432242C44E19EACB.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/7f4b53d8-b2ff-4973-b1ac-6f85faeadbe5/0/B8D444C5B3184A4F8C8F199A432242C44E19EACB.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b5:45:04:32:ad:51:44:9f:2b:49:44:ec:47:c9:13:e7:9d:7f: 84:b9:b5:0a:04:0f:67:8e:09:7e:1f:40:5b:87:71:bf:ee:12: c8:72:35:29:21:44:da:0b:67:59:0b:8d:80:e1:3b:e8:1c:de: f8:cc:85:13:f8:43:3e:81:ba:5a:a4:2f:c5:c5:71:1f:ee:2e: b3:a0:85:da:7a:4f:e5:8f:55:55:b6:8f:51:d3:6b:30:30:46: 2b:b9:d8:97:fd:c4:50:fc:b3:f4:9e:1a:d5:e7:0e:b3:59:7f: 77:d0:97:35:ba:cf:38:f9:86:8a:e6:58:b0:d3:01:b3:fe:f4: 22:f3:9d:50:09:a8:02:bc:0c:99:21:7f:22:8d:7e:50:a4:6c: c7:f6:12:c7:91:a8:d5:17:90:0e:d3:84:66:3a:92:f8:b7:9d: 2e:ea:ab:3c:25:16:c1:21:93:da:68:95:eb:0b:e5:6c:d1:1e: 9b:a5:4e:f1:85:6a:ca:f7:b2:91:8e:82:c4:1d:f2:a5:49:a3: bd:f3:ec:ca:8a:a7:6e:72:00:a3:46:e4:fc:61:8b:f4:92:56: 7d:46:ad:37:8d:79:c4:69:83:b0:0d:ca:cf:b4:25:ca:15:14: 88:ea:b8:86:8f:d3:98:b9:4d:d3:fb:17:e7:92:e7:ce:e3:e5: c4:29:55:9a -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUQIBn9ZddeBkWJQ9eSBs3HrLbquUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjhENDQ0QzVCMzE4NEE0RjhDOEYxOTlBNDMyMjQyQzQ0 RTE5RUFDQjAeFw0yNTEwMjAxOTA2NTdaFw0yNTEwMjMxOTU1NTdaMDMxMTAvBgNV BAMTKDEwRTM2ODgyQ0EyMUE0NDQ4NTk3NUI0MzY3OUNCNEFDNkIxM0RCN0UwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC9OLghwI8yG2HFnOVnFqnAiHHR 3DuqlgBnMM7cVXC9JWBu9/QgOL2lGtxbMuLg4vILwWXLYJePg/KfkVvdQ40psY6e a+cCoEjmf2rRZJMt7pnoabY9nXcpPw5GPmMefhEqYvSbPxI8I9r7LywWPHViroWP ybStPjLJ1wmvge3wdBnSNbTHc+y0v0yfSKpdfsCM3SacfE+0iNGt3hs2svJ2OT7c l+k9MqoIlPvJhL3pP4tdCKcPfq2qD7kunv057n3ekiQXlHSfNZb1WNCgDqrDW5e9 qHhloP8YJYtcN759tB0BaacyZsZxsdxISoYpvJsrNJu+wnU/qaIGSVxoiospAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUEONogsohpESFl1tDZ5y0rGsT234wHwYDVR0j BBgwFoAUuNRExbMYSk+MjxmaQyJCxE4Z6sswDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 ZjRiNTNkOC1iMmZmLTQ5NzMtYjFhYy02Zjg1ZmFlYWRiZTUvMC9COEQ0NDRDNUIz MTg0QTRGOEM4RjE5OUE0MzIyNDJDNDRFMTlFQUNCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvQjhENDQ0QzVCMzE4NEE0RjhDOEYxOTlBNDMyMjQyQzQ0RTE5 RUFDQi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vN2Y0YjUzZDgtYjJmZi00OTczLWIx YWMtNmY4NWZhZWFkYmU1LzAvQjhENDQ0QzVCMzE4NEE0RjhDOEYxOTlBNDMyMjQy QzQ0RTE5RUFDQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALVFBDKtUUSfK0lE7EfJE+edf4S5tQoED2eO CX4fQFuHcb/uEshyNSkhRNoLZ1kLjYDhO+gc3vjMhRP4Qz6BulqkL8XFcR/uLrOg hdp6T+WPVVW2j1HTazAwRiu52Jf9xFD8s/SeGtXnDrNZf3fQlzW6zzj5hormWLDT AbP+9CLznVAJqAK8DJkhfyKNflCkbMf2EseRqNUXkA7ThGY6kvi3nS7qqzwlFsEh k9polesL5WzRHpulTvGFasr3spGOgsQd8qVJo73z7MqKp25yAKNG5Pxhi/SSVn1G rTeNecRpg7ANys+0JcoVFIjquIaP05i5TdP7F+eS587j5cQpVZo= -----END CERTIFICATE-----Generated at Tue Oct 21 07:04:59 2025 by rpki-client