$ rpki-client -vvf repo-rpki.idnic.net/repo/fa674668-0613-4a64-9323-547636b7d8b0/0/B8B47DE574D44D4CC9A3E4E2E1F7AC9CB0AEA0B5.mft File: B8B47DE574D44D4CC9A3E4E2E1F7AC9CB0AEA0B5.mft (raw, json) Hash identifier: 2YNr3UDLsnOWML4/DO1bhyuPBfv89aNSF8Z0RW99bJo= Subject key identifier: CA:17:E8:7D:D4:50:74:E2:85:51:37:75:64:36:54:1A:64:8A:57:7A Authority key identifier: B8:B4:7D:E5:74:D4:4D:4C:C9:A3:E4:E2:E1:F7:AC:9C:B0:AE:A0:B5 Certificate issuer: /CN=B8B47DE574D44D4CC9A3E4E2E1F7AC9CB0AEA0B5 Certificate serial: 0941DF7D94E2DC1FBBA117A122EC3391E1CE741A Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B8B47DE574D44D4CC9A3E4E2E1F7AC9CB0AEA0B5.cer Subject info access: rsync://repo-rpki.idnic.net/repo/fa674668-0613-4a64-9323-547636b7d8b0/0/B8B47DE574D44D4CC9A3E4E2E1F7AC9CB0AEA0B5.mft Manifest number: 01A2 Signing time: Fri 17 Oct 2025 13:42:14 +0000 Manifest this update: Fri 17 Oct 2025 13:37:14 +0000 Manifest next update: Mon 20 Oct 2025 14:46:14 +0000 Files and hashes: 1: B8B47DE574D44D4CC9A3E4E2E1F7AC9CB0AEA0B5.crl (hash: rIc86tFkb1rW9OtkWZQ8OQaCEl7UXL/bGd3v2CdUs8I=) 2: 3130332e3131372e35362e302f32332d3234203d3e20313336303532.roa (hash: BAM070FvjGLMXJWAH9pbtiKqBzEQlvrgCYvemvA5CUw=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/fa674668-0613-4a64-9323-547636b7d8b0/0/B8B47DE574D44D4CC9A3E4E2E1F7AC9CB0AEA0B5.crl rsync://repo-rpki.idnic.net/repo/fa674668-0613-4a64-9323-547636b7d8b0/0/B8B47DE574D44D4CC9A3E4E2E1F7AC9CB0AEA0B5.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B8B47DE574D44D4CC9A3E4E2E1F7AC9CB0AEA0B5.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 20 Oct 2025 14:46:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 09:41:df:7d:94:e2:dc:1f:bb:a1:17:a1:22:ec:33:91:e1:ce:74:1a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B8B47DE574D44D4CC9A3E4E2E1F7AC9CB0AEA0B5 Validity Not Before: Oct 17 13:37:14 2025 GMT Not After : Oct 20 14:46:14 2025 GMT Subject: CN=CA17E87DD45074E2855137756436541A648A577A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:64:1d:d8:3a:aa:89:3c:22:71:4e:d8:b9:d3: 1f:79:95:d0:1b:e4:fc:a3:b4:7e:50:4e:db:f0:4c: 18:e4:5d:86:2f:37:85:8b:71:c6:ee:e4:26:fe:94: e7:7d:26:89:e1:fa:ed:13:9a:1f:8c:0a:96:9f:f4: b6:90:42:84:96:2c:ab:1e:01:75:4e:97:ec:b2:ac: 62:89:ec:03:32:91:59:fb:51:8a:eb:f3:44:57:dc: f6:61:6d:4d:af:5f:ff:62:dd:ef:ef:28:2b:66:4d: 75:79:25:fb:3d:c8:2c:47:f6:1b:41:0f:06:f1:7f: 95:ea:6d:33:23:3d:e3:4e:b9:14:80:7d:41:7e:12: 7e:f3:36:8b:77:dc:c4:86:ac:e1:a2:26:9a:e9:f8: cf:e1:21:5b:a3:be:7e:e5:e7:37:88:d5:9e:fc:86: 2d:80:dd:08:63:fd:ef:e4:01:cf:6c:50:b7:90:42: 5a:80:b2:cc:04:cf:57:eb:a6:67:38:14:bc:c3:57: b5:37:f0:6c:0b:8e:2a:f5:0c:08:8e:9a:74:05:d5: 63:69:7b:79:53:ee:71:21:c4:74:10:73:b4:a8:98: 6c:e4:e1:76:1a:22:bf:2c:aa:b6:32:f7:36:88:2a: 4c:ec:34:fc:3c:b9:03:48:5f:0d:bb:e5:cb:50:3b: ad:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:17:E8:7D:D4:50:74:E2:85:51:37:75:64:36:54:1A:64:8A:57:7A X509v3 Authority Key Identifier: keyid:B8:B4:7D:E5:74:D4:4D:4C:C9:A3:E4:E2:E1:F7:AC:9C:B0:AE:A0:B5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/fa674668-0613-4a64-9323-547636b7d8b0/0/B8B47DE574D44D4CC9A3E4E2E1F7AC9CB0AEA0B5.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B8B47DE574D44D4CC9A3E4E2E1F7AC9CB0AEA0B5.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/fa674668-0613-4a64-9323-547636b7d8b0/0/B8B47DE574D44D4CC9A3E4E2E1F7AC9CB0AEA0B5.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9a:58:62:28:eb:29:bb:39:d2:06:ed:95:0a:f9:96:10:b4:39: 57:e7:f8:4d:72:50:8d:5b:55:c4:2d:bf:7e:f7:52:20:35:ac: 25:cc:ca:4c:1a:f5:a2:74:35:a2:11:d5:fb:b0:a9:82:2e:47: 71:05:04:93:b7:60:55:13:41:48:11:fd:5e:e1:07:42:48:1c: 68:25:6b:df:ba:04:ef:f5:75:eb:23:cf:8e:ca:ac:94:f1:bc: 67:9f:fe:ca:7c:c7:c7:44:76:f8:b7:ce:9e:53:04:92:bb:76: b4:d2:f2:04:13:c1:15:02:82:c9:5a:e3:d0:1a:c0:fe:46:5f: dd:1e:2e:4a:22:3b:90:71:5e:9f:b9:5b:7e:92:38:ee:15:54: 0b:93:81:69:4f:4a:6b:7a:d6:da:f7:6a:71:95:f0:67:49:5b: 19:c6:26:9f:9d:c7:fd:24:9a:47:91:4e:e1:54:4b:0e:9f:af: 50:84:1b:69:bf:77:6b:e8:ed:64:c1:9a:d5:f0:83:2a:e1:df: 76:34:fc:e1:2b:90:74:d3:98:65:68:21:cc:54:9a:30:64:9a: 97:cc:aa:d6:bc:f8:12:0c:95:ed:3e:07:7d:84:87:93:bf:97: b3:85:79:71:ff:15:3c:90:d6:a6:2e:96:16:e3:a8:56:b0:13: 43:b6:a8:82 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUCUHffZTi3B+7oRehIuwzkeHOdBowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjhCNDdERTU3NEQ0NEQ0Q0M5QTNFNEUyRTFGN0FDOUNC MEFFQTBCNTAeFw0yNTEwMTcxMzM3MTRaFw0yNTEwMjAxNDQ2MTRaMDMxMTAvBgNV BAMTKENBMTdFODdERDQ1MDc0RTI4NTUxMzc3NTY0MzY1NDFBNjQ4QTU3N0EwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCoZB3YOqqJPCJxTti50x95ldAb 5PyjtH5QTtvwTBjkXYYvN4WLccbu5Cb+lOd9Jonh+u0Tmh+MCpaf9LaQQoSWLKse AXVOl+yyrGKJ7AMykVn7UYrr80RX3PZhbU2vX/9i3e/vKCtmTXV5Jfs9yCxH9htB Dwbxf5XqbTMjPeNOuRSAfUF+En7zNot33MSGrOGiJprp+M/hIVujvn7l5zeI1Z78 hi2A3Qhj/e/kAc9sULeQQlqAsswEz1frpmc4FLzDV7U38GwLjir1DAiOmnQF1WNp e3lT7nEhxHQQc7SomGzk4XYaIr8sqrYy9zaIKkzsNPw8uQNIXw275ctQO611AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUyhfofdRQdOKFUTd1ZDZUGmSKV3owHwYDVR0j BBgwFoAUuLR95XTUTUzJo+Ti4fesnLCuoLUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m YTY3NDY2OC0wNjEzLTRhNjQtOTMyMy01NDc2MzZiN2Q4YjAvMC9COEI0N0RFNTc0 RDQ0RDRDQzlBM0U0RTJFMUY3QUM5Q0IwQUVBMEI1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQjhCNDdERTU3NEQ0NEQ0Q0M5QTNFNEUyRTFGN0FDOUNCMEFF QTBCNS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZmE2NzQ2NjgtMDYxMy00YTY0LTkz MjMtNTQ3NjM2YjdkOGIwLzAvQjhCNDdERTU3NEQ0NEQ0Q0M5QTNFNEUyRTFGN0FD OUNCMEFFQTBCNS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJpYYijrKbs50gbtlQr5lhC0OVfn+E1yUI1b VcQtv373UiA1rCXMykwa9aJ0NaIR1fuwqYIuR3EFBJO3YFUTQUgR/V7hB0JIHGgl a9+6BO/1desjz47KrJTxvGef/sp8x8dEdvi3zp5TBJK7drTS8gQTwRUCgsla49Aa wP5GX90eLkoiO5BxXp+5W36SOO4VVAuTgWlPSmt61tr3anGV8GdJWxnGJp+dx/0k mkeRTuFUSw6fr1CEG2m/d2vo7WTBmtXwgyrh33Y0/OErkHTTmGVoIcxUmjBkmpfM qta8+BIMle0+B32Eh5O/l7OFeXH/FTyQ1qYulhbjqFawE0O2qII= -----END CERTIFICATE-----Generated at Sun Oct 19 15:20:56 2025 by rpki-client