$ rpki-client -vvf repo-rpki.idnic.net/repo/0463ae7c-a6ff-4fd8-96f2-0ba1880133c7/0/B7959E04EF090801395CE53E099D09F7AF2EF81B.mft File: B7959E04EF090801395CE53E099D09F7AF2EF81B.mft (raw, json) Hash identifier: QbNcsXUZnhElATcIB3GwQbzdLf2Vl1HG/N2szz6U9Kc= Subject key identifier: 36:D9:AE:75:59:81:93:B2:E2:0B:FF:9D:32:28:57:A6:B2:F2:55:66 Authority key identifier: B7:95:9E:04:EF:09:08:01:39:5C:E5:3E:09:9D:09:F7:AF:2E:F8:1B Certificate issuer: /CN=B7959E04EF090801395CE53E099D09F7AF2EF81B Certificate serial: 536104B528616A55CE65710B7FC7D0E6F8D4DBFE Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B7959E04EF090801395CE53E099D09F7AF2EF81B.cer Subject info access: rsync://repo-rpki.idnic.net/repo/0463ae7c-a6ff-4fd8-96f2-0ba1880133c7/0/B7959E04EF090801395CE53E099D09F7AF2EF81B.mft Manifest number: 020A Signing time: Mon 20 Oct 2025 07:50:59 +0000 Manifest this update: Mon 20 Oct 2025 07:45:59 +0000 Manifest next update: Thu 23 Oct 2025 10:13:59 +0000 Files and hashes: 1: 3230332e3131342e3232362e302f32332d3233203d3e203435373033.roa (hash: 6Ec3PjRbQ83AgMPSDqdSdFcRTMZUzCno6pS4ublkNCA=) 2: 3230332e3131342e3232362e302f32342d3234203d3e203435373033.roa (hash: 1cX8i6kVHz142LzobmEyC/+1K1VM1wldny1qyaPLfIA=) 3: 3230332e3131342e3232372e302f32342d3234203d3e203435373033.roa (hash: S8koCw5Zpdz9WUfwrWHvdyG3BqQzOLzzd7o5WN4coH4=) 4: B7959E04EF090801395CE53E099D09F7AF2EF81B.crl (hash: LmwHy9UUM+B4cc4+U4etsTPj6fs2KZfKon0Aak/LPsY=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/0463ae7c-a6ff-4fd8-96f2-0ba1880133c7/0/B7959E04EF090801395CE53E099D09F7AF2EF81B.crl rsync://repo-rpki.idnic.net/repo/0463ae7c-a6ff-4fd8-96f2-0ba1880133c7/0/B7959E04EF090801395CE53E099D09F7AF2EF81B.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B7959E04EF090801395CE53E099D09F7AF2EF81B.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 Oct 2025 10:13:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 53:61:04:b5:28:61:6a:55:ce:65:71:0b:7f:c7:d0:e6:f8:d4:db:fe Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B7959E04EF090801395CE53E099D09F7AF2EF81B Validity Not Before: Oct 20 07:45:59 2025 GMT Not After : Oct 23 10:13:59 2025 GMT Subject: CN=36D9AE75598193B2E20BFF9D322857A6B2F25566 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:41:29:a3:43:0f:30:31:db:86:c1:47:90:79: e6:92:93:f3:08:8e:22:1e:3d:95:5a:7e:ed:05:a3: bf:fc:5d:3c:df:62:59:63:64:0d:9c:36:13:50:9b: 4f:42:a8:3a:fd:3c:88:06:7f:47:a1:b7:3c:46:06: 16:55:27:3b:7b:0a:16:30:80:37:b3:d3:b0:01:af: ae:20:e6:f8:b7:63:f8:a0:40:22:8d:04:1e:84:27: 6b:89:6c:b1:ee:da:10:72:b9:4c:09:4d:91:9d:21: 01:c3:a7:7e:ce:de:c7:53:a1:73:f0:68:06:38:25: a4:20:24:d2:97:9b:61:0e:70:69:5f:9e:72:2a:af: 74:9f:29:39:da:bb:16:bb:64:42:e1:d4:1c:5e:3f: 78:be:4e:0f:9f:8f:2d:c5:61:fc:3c:35:84:72:ed: a4:b1:08:05:39:7b:b9:db:5c:b0:34:69:a5:b0:27: 86:6e:77:2e:df:9f:4d:46:ee:2a:85:a0:a1:82:11: db:79:88:1e:43:6f:3d:40:87:4b:24:96:03:c2:36: 07:1d:ef:cc:6a:f2:5e:66:5c:ad:92:89:74:f6:71: 00:1f:41:e6:a4:56:e7:7b:5f:0f:5f:e4:cc:42:d3: ff:1b:5a:46:a5:1b:fd:c1:76:d3:5e:a2:b0:28:75: 34:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 36:D9:AE:75:59:81:93:B2:E2:0B:FF:9D:32:28:57:A6:B2:F2:55:66 X509v3 Authority Key Identifier: keyid:B7:95:9E:04:EF:09:08:01:39:5C:E5:3E:09:9D:09:F7:AF:2E:F8:1B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/0463ae7c-a6ff-4fd8-96f2-0ba1880133c7/0/B7959E04EF090801395CE53E099D09F7AF2EF81B.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B7959E04EF090801395CE53E099D09F7AF2EF81B.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/0463ae7c-a6ff-4fd8-96f2-0ba1880133c7/0/B7959E04EF090801395CE53E099D09F7AF2EF81B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2f:18:13:2d:2b:c0:17:34:15:40:bd:49:57:71:a7:db:3f:1f: aa:0e:7b:8e:d9:06:7b:1a:75:bd:85:99:71:fc:89:18:39:8d: 3a:f9:3e:fe:8e:0b:c9:ca:c6:92:ff:a2:f3:f7:0e:ec:8f:a9: da:f4:55:57:91:4f:2e:8d:4a:3e:1d:8c:2e:36:49:4e:dd:02: f5:25:53:2e:53:cf:d9:31:da:47:f9:8b:46:8a:52:8e:55:1b: 54:c6:6e:f7:85:d4:57:8b:73:12:36:37:24:ad:d0:71:25:f5: 86:46:4e:5e:46:61:d7:7f:00:82:3e:6a:12:ea:89:93:d2:80: f1:d9:d7:10:1f:42:7e:1b:16:1b:b0:bb:89:cd:9d:7f:48:5f: 1c:d5:8a:da:6e:40:8b:f2:2a:92:5c:2f:a2:b6:b1:2e:80:78: 17:28:5e:ea:f1:60:ef:1d:7e:e4:7a:6f:26:ee:8c:00:d2:88: 59:3b:cf:92:eb:3f:b8:0d:98:cc:c9:a5:3d:9a:9c:d7:98:30: 3c:3d:2a:3b:0e:ee:be:3b:0c:5e:76:40:60:8d:81:55:25:4a: 58:f7:c6:27:2d:cd:55:ef:17:ba:8e:94:8f:bd:47:44:ef:c1: 43:20:aa:0e:05:6b:25:54:35:27:51:5f:43:d3:20:24:9a:ce: 21:22:67:f4 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUU2EEtShhalXOZXELf8fQ5vjU2/4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjc5NTlFMDRFRjA5MDgwMTM5NUNFNTNFMDk5RDA5RjdB RjJFRjgxQjAeFw0yNTEwMjAwNzQ1NTlaFw0yNTEwMjMxMDEzNTlaMDMxMTAvBgNV BAMTKDM2RDlBRTc1NTk4MTkzQjJFMjBCRkY5RDMyMjg1N0E2QjJGMjU1NjYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDYQSmjQw8wMduGwUeQeeaSk/MI jiIePZVafu0Fo7/8XTzfYlljZA2cNhNQm09CqDr9PIgGf0ehtzxGBhZVJzt7ChYw gDez07ABr64g5vi3Y/igQCKNBB6EJ2uJbLHu2hByuUwJTZGdIQHDp37O3sdToXPw aAY4JaQgJNKXm2EOcGlfnnIqr3SfKTnauxa7ZELh1BxeP3i+Tg+fjy3FYfw8NYRy 7aSxCAU5e7nbXLA0aaWwJ4Zudy7fn01G7iqFoKGCEdt5iB5Dbz1Ah0sklgPCNgcd 78xq8l5mXK2SiXT2cQAfQeakVud7Xw9f5MxC0/8bWkalG/3BdtNeorAodTSFAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUNtmudVmBk7LiC/+dMihXprLyVWYwHwYDVR0j BBgwFoAUt5WeBO8JCAE5XOU+CZ0J968u+BswDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w NDYzYWU3Yy1hNmZmLTRmZDgtOTZmMi0wYmExODgwMTMzYzcvMC9CNzk1OUUwNEVG MDkwODAxMzk1Q0U1M0UwOTlEMDlGN0FGMkVGODFCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQjc5NTlFMDRFRjA5MDgwMTM5NUNFNTNFMDk5RDA5RjdBRjJF RjgxQi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMDQ2M2FlN2MtYTZmZi00ZmQ4LTk2 ZjItMGJhMTg4MDEzM2M3LzAvQjc5NTlFMDRFRjA5MDgwMTM5NUNFNTNFMDk5RDA5 RjdBRjJFRjgxQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAC8YEy0rwBc0FUC9SVdxp9s/H6oOe47ZBnsa db2FmXH8iRg5jTr5Pv6OC8nKxpL/ovP3DuyPqdr0VVeRTy6NSj4djC42SU7dAvUl Uy5Tz9kx2kf5i0aKUo5VG1TGbveF1FeLcxI2NySt0HEl9YZGTl5GYdd/AII+ahLq iZPSgPHZ1xAfQn4bFhuwu4nNnX9IXxzVitpuQIvyKpJcL6K2sS6AeBcoXurxYO8d fuR6bybujADSiFk7z5LrP7gNmMzJpT2anNeYMDw9KjsO7r47DF52QGCNgVUlSlj3 xictzVXvF7qOlI+9R0TvwUMgqg4FayVUNSdRX0PTICSaziEiZ/Q= -----END CERTIFICATE-----Generated at Mon Oct 20 22:42:00 2025 by rpki-client