$ rpki-client -vvf repo-rpki.idnic.net/repo/9036e07c-8283-43d3-9164-3e0e6cacf499/0/B563D708A094B24FC361EDD11C91EE7979AB0471.mft File: B563D708A094B24FC361EDD11C91EE7979AB0471.mft (raw, json) Hash identifier: SCyYVcHcSQma83r2ciGdq8X3LpMxqMa8jJQ44bPvtJE= Subject key identifier: 49:A0:D6:FC:86:E0:A9:64:61:78:54:5C:DB:BA:08:56:08:BB:68:6D Authority key identifier: B5:63:D7:08:A0:94:B2:4F:C3:61:ED:D1:1C:91:EE:79:79:AB:04:71 Certificate issuer: /CN=B563D708A094B24FC361EDD11C91EE7979AB0471 Certificate serial: 60624952557E7E448DD6176D2BBE67630F84F176 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B563D708A094B24FC361EDD11C91EE7979AB0471.cer Subject info access: rsync://repo-rpki.idnic.net/repo/9036e07c-8283-43d3-9164-3e0e6cacf499/0/B563D708A094B24FC361EDD11C91EE7979AB0471.mft Manifest number: 049A Signing time: Fri 17 Oct 2025 20:01:11 +0000 Manifest this update: Fri 17 Oct 2025 19:56:11 +0000 Manifest next update: Tue 21 Oct 2025 06:05:11 +0000 Files and hashes: 1: 3130332e3135382e3233352e302f32342d3234203d3e20313431383938.roa (hash: RkBfllGvEefotMCbBX+M6tjX7qjYPoT7phVfnxdgKbU=) 2: 3130332e3135382e3233352e302f32342d3234203d3e20313431313332.roa (hash: kpMxQvSYLU76Gm9LQAAGgZvfd3otWzRiAJhO9y4zBsk=) 3: 3130332e3135382e3233342e302f32342d3234203d3e20313431313332.roa (hash: LFN1lWDxbZdPzNeB6sbVhDvJLLQcsJmGzjZZihSsn1w=) 4: 3130332e3135382e3233342e302f32342d3234203d3e20313431383938.roa (hash: D2U2OhiX4JpcmakIWdkjvlLoKPGy8UFmuSAMLEyoyEQ=) 5: 3130332e3135382e3233342e302f32332d3233203d3e20313431313332.roa (hash: VerBshfKSbDiG4ilBKzo2++FEnDv7+7VU/P4UtUMaSI=) 6: B563D708A094B24FC361EDD11C91EE7979AB0471.crl (hash: P3vCAr/bCeflP7mv+VUPTE6/fUrUFECOcshsyDTBYJI=) 7: 3130332e3135382e3233342e302f32332d3233203d3e20313431383938.roa (hash: ubs3KFRcbUrpRgNw8QOw+os2JdUl6qStS3zNmN6w2iE=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/9036e07c-8283-43d3-9164-3e0e6cacf499/0/B563D708A094B24FC361EDD11C91EE7979AB0471.crl rsync://repo-rpki.idnic.net/repo/9036e07c-8283-43d3-9164-3e0e6cacf499/0/B563D708A094B24FC361EDD11C91EE7979AB0471.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B563D708A094B24FC361EDD11C91EE7979AB0471.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 21 Oct 2025 06:05:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 60:62:49:52:55:7e:7e:44:8d:d6:17:6d:2b:be:67:63:0f:84:f1:76 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B563D708A094B24FC361EDD11C91EE7979AB0471 Validity Not Before: Oct 17 19:56:11 2025 GMT Not After : Oct 21 06:05:11 2025 GMT Subject: CN=49A0D6FC86E0A9646178545CDBBA085608BB686D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:5a:d0:6d:3c:9e:02:02:80:71:08:9c:6f:28: 8c:bc:08:71:e5:38:55:74:0c:b9:78:ea:bd:42:ba: 00:8b:14:52:83:55:9e:19:6c:fe:cc:11:e5:fa:9e: 5d:09:86:f5:2e:5e:fc:c2:b6:17:e7:6c:8e:dd:8a: 31:a1:e9:ab:f9:65:cc:b5:bc:51:af:72:2c:50:e6: 05:dd:a2:fd:3f:f4:84:45:67:b6:52:19:7b:57:f8: 74:c5:6a:e3:3b:13:8e:53:b7:95:2e:96:59:f9:1a: 26:80:81:67:11:23:58:d9:69:ab:21:13:6c:eb:0b: 55:c7:d2:8f:7a:1a:51:5f:51:19:b9:d1:aa:91:fe: 34:a4:c8:c0:30:00:8c:3a:a5:8b:43:fb:0c:35:02: 92:69:f8:cb:34:58:1e:54:a4:3a:6f:0d:ca:f9:34: cf:7c:62:82:40:d7:0d:16:be:be:5f:ea:c6:77:b2: b2:ca:71:c7:f2:b2:66:66:65:eb:d8:92:aa:cd:96: 9d:f6:e9:75:53:e8:b2:2d:da:21:e9:33:30:b3:a4: 77:67:9b:d2:8d:b8:34:24:1c:5a:ea:7f:3c:53:bc: f7:55:48:54:c7:08:5c:e6:c4:1a:97:ea:01:8f:eb: f1:04:f1:38:1c:39:12:f2:e8:2d:dd:9b:f3:3e:df: be:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:A0:D6:FC:86:E0:A9:64:61:78:54:5C:DB:BA:08:56:08:BB:68:6D X509v3 Authority Key Identifier: keyid:B5:63:D7:08:A0:94:B2:4F:C3:61:ED:D1:1C:91:EE:79:79:AB:04:71 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/9036e07c-8283-43d3-9164-3e0e6cacf499/0/B563D708A094B24FC361EDD11C91EE7979AB0471.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B563D708A094B24FC361EDD11C91EE7979AB0471.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/9036e07c-8283-43d3-9164-3e0e6cacf499/0/B563D708A094B24FC361EDD11C91EE7979AB0471.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 86:ac:17:b7:16:87:83:e6:eb:cf:85:b2:7d:1f:86:9c:db:a4: e4:0c:ff:5b:cb:75:58:2d:59:6d:e2:f5:61:1b:25:9b:6c:2b: e4:b2:6c:c7:e1:e3:f4:57:4a:73:05:96:22:2b:70:68:44:e1: 80:72:1a:0c:ce:1f:91:ef:4d:ec:8d:3f:3c:e2:56:be:27:16: 84:9f:ca:4b:75:fe:d7:85:02:b1:ae:22:22:a4:a8:2b:c8:f0: f1:b3:4c:4e:88:4e:fd:9e:d1:bc:75:9d:f7:a5:a1:f4:34:a5: 58:d9:e7:0b:d3:b4:00:ef:8d:15:64:cc:13:e0:57:fa:e9:e4: 42:96:4b:a5:2f:e1:ab:a9:a1:66:5e:72:2b:71:67:18:bd:7e: 28:47:6c:b9:a6:28:b7:1e:ef:d1:24:8e:81:b0:36:6e:07:be: b2:68:3d:5f:f7:1f:0a:66:86:d0:47:5e:bb:f8:dc:5c:22:c8: b4:37:9e:7e:6f:82:5e:d2:b1:ae:06:dd:b6:16:38:97:60:a8: 2b:af:09:17:4a:98:40:3a:98:9c:03:2b:27:46:11:4e:10:08: 9b:61:57:1b:e1:0c:d6:78:ce:b9:4e:ad:47:8c:30:de:01:c2: 39:8a:48:e2:53:c5:e2:05:a5:a4:f2:50:ef:a9:c0:49:4b:66: 67:24:db:ba -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUYGJJUlV+fkSN1hdtK75nYw+E8XYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjU2M0Q3MDhBMDk0QjI0RkMzNjFFREQxMUM5MUVFNzk3 OUFCMDQ3MTAeFw0yNTEwMTcxOTU2MTFaFw0yNTEwMjEwNjA1MTFaMDMxMTAvBgNV BAMTKDQ5QTBENkZDODZFMEE5NjQ2MTc4NTQ1Q0RCQkEwODU2MDhCQjY4NkQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC8WtBtPJ4CAoBxCJxvKIy8CHHl OFV0DLl46r1CugCLFFKDVZ4ZbP7MEeX6nl0JhvUuXvzCthfnbI7dijGh6av5Zcy1 vFGvcixQ5gXdov0/9IRFZ7ZSGXtX+HTFauM7E45Tt5Uulln5GiaAgWcRI1jZaash E2zrC1XH0o96GlFfURm50aqR/jSkyMAwAIw6pYtD+ww1ApJp+Ms0WB5UpDpvDcr5 NM98YoJA1w0Wvr5f6sZ3srLKccfysmZmZevYkqrNlp326XVT6LIt2iHpMzCzpHdn m9KNuDQkHFrqfzxTvPdVSFTHCFzmxBqX6gGP6/EE8TgcORLy6C3dm/M+375BAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUSaDW/IbgqWRheFRc27oIVgi7aG0wHwYDVR0j BBgwFoAUtWPXCKCUsk/DYe3RHJHueXmrBHEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 MDM2ZTA3Yy04MjgzLTQzZDMtOTE2NC0zZTBlNmNhY2Y0OTkvMC9CNTYzRDcwOEEw OTRCMjRGQzM2MUVERDExQzkxRUU3OTc5QUIwNDcxLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQjU2M0Q3MDhBMDk0QjI0RkMzNjFFREQxMUM5MUVFNzk3OUFC MDQ3MS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOTAzNmUwN2MtODI4My00M2QzLTkx NjQtM2UwZTZjYWNmNDk5LzAvQjU2M0Q3MDhBMDk0QjI0RkMzNjFFREQxMUM5MUVF Nzk3OUFCMDQ3MS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIasF7cWh4Pm68+Fsn0fhpzbpOQM/1vLdVgt WW3i9WEbJZtsK+SybMfh4/RXSnMFliIrcGhE4YByGgzOH5HvTeyNPzziVr4nFoSf ykt1/teFArGuIiKkqCvI8PGzTE6ITv2e0bx1nfelofQ0pVjZ5wvTtADvjRVkzBPg V/rp5EKWS6Uv4aupoWZecitxZxi9fihHbLmmKLce79EkjoGwNm4HvrJoPV/3Hwpm htBHXrv43FwiyLQ3nn5vgl7Ssa4G3bYWOJdgqCuvCRdKmEA6mJwDKydGEU4QCJth VxvhDNZ4zrlOrUeMMN4BwjmKSOJTxeIFpaTyUO+pwElLZmck27o= -----END CERTIFICATE-----Generated at Sun Oct 19 17:59:52 2025 by rpki-client