$ rpki-client -vvf repo-rpki.idnic.net/repo/8dcf4067-a69d-4908-bee8-b4655bdc15f8/0/B197F427572524588487CFDB163A9E512FAE4DF2.mft File: B197F427572524588487CFDB163A9E512FAE4DF2.mft (raw, json) Hash identifier: P/g6JZmLQRzX8Wcj3pdXDSHv3bbSrphzyAE4h4azjwc= Subject key identifier: 06:1E:F3:53:DA:BB:77:7A:AA:02:2C:5F:69:F4:FC:C5:64:3F:7B:E1 Authority key identifier: B1:97:F4:27:57:25:24:58:84:87:CF:DB:16:3A:9E:51:2F:AE:4D:F2 Certificate issuer: /CN=B197F427572524588487CFDB163A9E512FAE4DF2 Certificate serial: 05B70E979651EF6AEA52DD25320C3E3BFCA8DD77 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B197F427572524588487CFDB163A9E512FAE4DF2.cer Subject info access: rsync://repo-rpki.idnic.net/repo/8dcf4067-a69d-4908-bee8-b4655bdc15f8/0/B197F427572524588487CFDB163A9E512FAE4DF2.mft Manifest number: 023F Signing time: Sat 01 Nov 2025 07:22:49 +0000 Manifest this update: Sat 01 Nov 2025 07:17:49 +0000 Manifest next update: Tue 04 Nov 2025 13:21:49 +0000 Files and hashes: 1: 3130332e3135332e3234362e302f32342d3234203d3e20313430343735.roa (hash: BU1Q0ryHM0MlXG1Q7vZvhi4oAbOwc3sWBEiOeckA5Ms=) 2: 323430363a346563303a3a2f33322d3332203d3e20313430343735.roa (hash: sqH8mgq0fr+XiznMLTzogmtodA1+q341U0FlkHOzY5k=) 3: B197F427572524588487CFDB163A9E512FAE4DF2.crl (hash: 9glh7mlTgm2XjiJbnPBi/exN3Iq+aqk2N9bsFS+/APQ=) 4: 3130332e3135332e3234372e302f32342d3234203d3e20313430343735.roa (hash: IlIKis9hrjcqU4gajZ2m+r4qTrp6BInf4S11M61jB+A=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/8dcf4067-a69d-4908-bee8-b4655bdc15f8/0/B197F427572524588487CFDB163A9E512FAE4DF2.crl rsync://repo-rpki.idnic.net/repo/8dcf4067-a69d-4908-bee8-b4655bdc15f8/0/B197F427572524588487CFDB163A9E512FAE4DF2.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B197F427572524588487CFDB163A9E512FAE4DF2.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 04 Nov 2025 09:50:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 05:b7:0e:97:96:51:ef:6a:ea:52:dd:25:32:0c:3e:3b:fc:a8:dd:77 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B197F427572524588487CFDB163A9E512FAE4DF2 Validity Not Before: Nov 1 07:17:49 2025 GMT Not After : Nov 4 13:21:49 2025 GMT Subject: CN=061EF353DABB777AAA022C5F69F4FCC5643F7BE1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ee:a4:3e:0b:76:d1:1c:23:c2:e3:40:6f:4b:c1: bf:2f:44:41:20:c7:df:bd:71:ca:0d:97:82:c3:57: 78:45:a1:5b:35:26:c2:5d:c6:11:29:a5:86:08:66: 9a:e3:0f:b7:e3:5d:95:06:e6:11:a4:50:89:b2:84: 32:6c:3e:31:9f:b7:f0:78:2c:4b:5f:92:ab:fd:78: cf:8d:e0:ec:d0:f5:f1:e9:5e:d8:24:51:9b:95:58: 74:f4:cc:6b:25:60:df:a5:05:4f:c4:ea:8d:c8:99: 5b:13:b4:71:0f:b8:71:ce:65:62:79:58:f5:e0:77: 65:ee:9e:80:37:78:36:d4:d5:6a:a7:66:61:3b:71: cb:2d:f6:b7:a3:08:e5:19:f7:03:fb:31:7b:5f:fc: 7b:b8:f5:2e:4f:3e:84:73:11:31:12:91:5b:4e:6f: f0:13:f2:4c:40:62:a3:e1:0f:8c:ff:c9:ee:c2:16: 0b:77:36:7a:fe:2f:58:e8:cd:03:fb:68:f9:e3:c3: 52:11:aa:af:41:0f:e0:6a:7b:02:bb:3a:bc:7f:aa: fa:64:c7:fa:6d:71:ee:66:18:ac:21:30:e9:7d:27: ac:d2:3d:af:34:60:50:26:50:9a:11:fc:1c:3c:bb: a4:96:e3:86:39:35:ca:a5:2e:87:6f:b2:0c:0f:c0: 1d:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 06:1E:F3:53:DA:BB:77:7A:AA:02:2C:5F:69:F4:FC:C5:64:3F:7B:E1 X509v3 Authority Key Identifier: keyid:B1:97:F4:27:57:25:24:58:84:87:CF:DB:16:3A:9E:51:2F:AE:4D:F2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/8dcf4067-a69d-4908-bee8-b4655bdc15f8/0/B197F427572524588487CFDB163A9E512FAE4DF2.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B197F427572524588487CFDB163A9E512FAE4DF2.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/8dcf4067-a69d-4908-bee8-b4655bdc15f8/0/B197F427572524588487CFDB163A9E512FAE4DF2.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 90:fb:1e:13:04:a9:13:23:46:da:19:98:c9:46:24:21:4f:25: a4:e8:c5:b9:be:4f:46:c2:00:61:fb:4a:59:fa:62:74:e6:35: 4f:2e:1a:fa:e0:22:34:fe:ce:e6:00:2b:64:03:58:af:3b:d2: f5:a3:79:cb:ff:4b:ae:66:e1:14:1e:4d:6b:0f:ac:34:b2:9d: d5:3f:9a:21:c5:ac:25:2a:59:d6:88:76:51:a9:6e:0f:93:1d: 44:52:a8:61:47:3f:82:f4:59:69:21:a7:75:7b:cd:81:51:45: 67:d9:63:fc:1f:6a:ed:58:4d:f6:b7:5a:ba:36:2e:b6:e4:7a: 6c:6f:e1:08:73:48:ce:ee:5a:6f:3e:54:d2:5f:30:21:9e:84: 8a:16:9c:cd:ee:60:d4:07:4c:f1:22:d0:4e:f2:04:fd:83:66: 04:0e:0d:34:4e:c1:4a:aa:c0:93:fb:46:2e:34:8c:72:de:a9: 01:8d:e9:11:a8:cd:c8:38:31:53:ea:1b:d6:7e:5a:b9:f1:e8: 9c:00:2a:10:f1:9b:57:f6:ee:3e:f4:a8:53:05:b9:1b:b6:00: a5:c5:30:c9:a0:f6:7b:47:38:f1:3c:2d:32:a0:02:42:bd:17: 50:e0:bc:9c:5a:94:e8:33:86:5b:31:96:b1:2c:29:5d:11:1a: da:d6:2f:cc -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUBbcOl5ZR72rqUt0lMgw+O/yo3XcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjE5N0Y0Mjc1NzI1MjQ1ODg0ODdDRkRCMTYzQTlFNTEy RkFFNERGMjAeFw0yNTExMDEwNzE3NDlaFw0yNTExMDQxMzIxNDlaMDMxMTAvBgNV BAMTKDA2MUVGMzUzREFCQjc3N0FBQTAyMkM1RjY5RjRGQ0M1NjQzRjdCRTEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDupD4LdtEcI8LjQG9Lwb8vREEg x9+9ccoNl4LDV3hFoVs1JsJdxhEppYYIZprjD7fjXZUG5hGkUImyhDJsPjGft/B4 LEtfkqv9eM+N4OzQ9fHpXtgkUZuVWHT0zGslYN+lBU/E6o3ImVsTtHEPuHHOZWJ5 WPXgd2XunoA3eDbU1WqnZmE7ccst9rejCOUZ9wP7MXtf/Hu49S5PPoRzETESkVtO b/AT8kxAYqPhD4z/ye7CFgt3Nnr+L1jozQP7aPnjw1IRqq9BD+BqewK7Orx/qvpk x/ptce5mGKwhMOl9J6zSPa80YFAmUJoR/Bw8u6SW44Y5NcqlLodvsgwPwB1ZAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUBh7zU9q7d3qqAixfafT8xWQ/e+EwHwYDVR0j BBgwFoAUsZf0J1clJFiEh8/bFjqeUS+uTfIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 ZGNmNDA2Ny1hNjlkLTQ5MDgtYmVlOC1iNDY1NWJkYzE1ZjgvMC9CMTk3RjQyNzU3 MjUyNDU4ODQ4N0NGREIxNjNBOUU1MTJGQUU0REYyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQjE5N0Y0Mjc1NzI1MjQ1ODg0ODdDRkRCMTYzQTlFNTEyRkFF NERGMi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOGRjZjQwNjctYTY5ZC00OTA4LWJl ZTgtYjQ2NTViZGMxNWY4LzAvQjE5N0Y0Mjc1NzI1MjQ1ODg0ODdDRkRCMTYzQTlF NTEyRkFFNERGMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJD7HhMEqRMjRtoZmMlGJCFPJaToxbm+T0bC AGH7Sln6YnTmNU8uGvrgIjT+zuYAK2QDWK870vWjecv/S65m4RQeTWsPrDSyndU/ miHFrCUqWdaIdlGpbg+THURSqGFHP4L0WWkhp3V7zYFRRWfZY/wfau1YTfa3Wro2 Lrbkemxv4QhzSM7uWm8+VNJfMCGehIoWnM3uYNQHTPEi0E7yBP2DZgQODTROwUqq wJP7Ri40jHLeqQGN6RGozcg4MVPqG9Z+Wrnx6JwAKhDxm1f27j70qFMFuRu2AKXF MMmg9ntHOPE8LTKgAkK9F1DgvJxalOgzhlsxlrEsKV0RGtrWL8w= -----END CERTIFICATE-----Generated at Sat Nov 1 13:34:36 2025 by rpki-client