$ rpki-client -vvf repo-rpki.idnic.net/repo/0e05a1ce-849f-417c-b673-fdd33f0d7447/0/B0AAB728B88975526C1741CCA8673CBC88F7697C.mft File: B0AAB728B88975526C1741CCA8673CBC88F7697C.mft (raw, json) Hash identifier: HxbZKmUcYY01mpsbw1ngkOOdyldchpdweD/EKY/j7Ak= Subject key identifier: C9:8A:3B:C4:CD:0E:33:66:20:4D:DF:DD:6D:67:5C:5E:86:78:A7:22 Authority key identifier: B0:AA:B7:28:B8:89:75:52:6C:17:41:CC:A8:67:3C:BC:88:F7:69:7C Certificate issuer: /CN=B0AAB728B88975526C1741CCA8673CBC88F7697C Certificate serial: 60316EB49609D3A82F3DED333AAB3DB3F07CCF8C Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B0AAB728B88975526C1741CCA8673CBC88F7697C.cer Subject info access: rsync://repo-rpki.idnic.net/repo/0e05a1ce-849f-417c-b673-fdd33f0d7447/0/B0AAB728B88975526C1741CCA8673CBC88F7697C.mft Manifest number: 039A Signing time: Sun 19 Oct 2025 14:01:13 +0000 Manifest this update: Sun 19 Oct 2025 13:56:13 +0000 Manifest next update: Wed 22 Oct 2025 15:11:13 +0000 Files and hashes: 1: B0AAB728B88975526C1741CCA8673CBC88F7697C.crl (hash: 3BMaXlVWkiMy4J+sgWgnsAFfQVkv6N0aWLZAJHR9Lgo=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/0e05a1ce-849f-417c-b673-fdd33f0d7447/0/B0AAB728B88975526C1741CCA8673CBC88F7697C.crl rsync://repo-rpki.idnic.net/repo/0e05a1ce-849f-417c-b673-fdd33f0d7447/0/B0AAB728B88975526C1741CCA8673CBC88F7697C.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B0AAB728B88975526C1741CCA8673CBC88F7697C.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 Oct 2025 15:11:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 60:31:6e:b4:96:09:d3:a8:2f:3d:ed:33:3a:ab:3d:b3:f0:7c:cf:8c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B0AAB728B88975526C1741CCA8673CBC88F7697C Validity Not Before: Oct 19 13:56:13 2025 GMT Not After : Oct 22 15:11:13 2025 GMT Subject: CN=C98A3BC4CD0E3366204DDFDD6D675C5E8678A722 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:33:66:77:c1:0d:36:b9:d9:f8:29:7e:68:9e: ef:ac:44:fb:49:7f:4e:d1:af:09:06:e6:11:3a:27: 0e:b7:aa:77:a1:b3:9e:24:da:d6:b8:c7:b6:b4:7d: d3:8a:75:d1:64:5c:cb:39:9a:3a:3e:b3:5e:dc:64: d1:ce:bc:c5:94:09:5a:82:a8:90:f3:cd:b4:58:2e: 02:fb:11:1b:b1:cc:b2:87:94:39:d4:ea:68:b4:86: 78:e7:6b:9e:8c:f8:67:04:8c:59:0f:1a:60:96:1f: 40:2e:ad:09:87:f8:90:31:5e:58:15:fe:ab:82:65: a2:bb:82:df:e1:1b:51:db:2a:f4:4b:5d:3d:aa:5e: 0a:1f:44:07:64:ea:53:1d:2a:25:51:54:24:66:76: f1:13:33:2b:8a:4e:3e:af:5e:e2:56:f0:ad:84:c9: 7c:de:25:6e:3a:75:e3:2c:47:af:b7:58:f8:61:64: f7:40:c5:0f:3a:c9:8f:a4:b4:d6:40:d6:3f:13:92: e0:70:af:02:4d:6f:21:af:70:91:1e:1c:d8:6c:db: f9:3d:a5:bf:df:6d:ab:ec:d1:18:ea:5d:19:67:05: 98:b0:2d:d0:79:3f:89:48:c6:d2:21:c0:2d:89:59: a6:38:06:ba:fe:09:2e:82:31:e7:06:89:10:f8:e0: 9e:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C9:8A:3B:C4:CD:0E:33:66:20:4D:DF:DD:6D:67:5C:5E:86:78:A7:22 X509v3 Authority Key Identifier: keyid:B0:AA:B7:28:B8:89:75:52:6C:17:41:CC:A8:67:3C:BC:88:F7:69:7C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/0e05a1ce-849f-417c-b673-fdd33f0d7447/0/B0AAB728B88975526C1741CCA8673CBC88F7697C.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B0AAB728B88975526C1741CCA8673CBC88F7697C.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/0e05a1ce-849f-417c-b673-fdd33f0d7447/0/B0AAB728B88975526C1741CCA8673CBC88F7697C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a8:ad:ef:77:95:f0:9e:0b:2a:2a:56:0b:07:8d:c8:03:cd:d9: 70:18:43:3d:84:19:1e:9b:c3:bb:c0:7e:33:b7:ef:6a:97:f1: 18:a4:dc:78:3b:a2:40:fb:a0:0a:37:e1:0c:a6:0c:ed:af:ce: f3:a1:aa:95:98:04:ed:49:32:28:df:2a:05:08:e4:7d:b6:03: 19:be:ad:41:12:9c:be:9f:b9:b7:00:15:af:be:af:56:6d:92: 20:47:ed:18:d1:b7:f4:91:ea:bf:d9:f7:a5:62:91:9f:66:17: fe:c9:24:29:07:73:b0:22:5f:4b:fe:8e:38:6a:34:35:4d:6d: 5b:ba:3d:91:6d:3a:19:54:e4:93:5d:e6:c7:34:a1:92:13:53: 2f:8a:9f:5e:5e:63:e9:02:8a:1f:20:e0:88:63:a9:09:2f:b1: 39:b0:1d:c3:a6:b4:87:23:25:fd:e8:5d:c7:0b:49:9c:48:67: a2:49:3c:46:33:92:52:8c:a9:9e:de:70:ce:d0:0e:c7:2f:74: 97:ab:de:7f:ca:8e:48:93:69:21:93:c4:c8:92:35:85:85:8f: a7:c9:ac:c1:d2:ab:24:13:fc:05:aa:8c:3d:a9:1e:28:a1:42: 9b:a2:6c:20:6e:82:6b:23:9d:11:3b:7c:4a:71:4d:57:34:73: b5:25:cd:56 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUYDFutJYJ06gvPe0zOqs9s/B8z4wwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjBBQUI3MjhCODg5NzU1MjZDMTc0MUNDQTg2NzNDQkM4 OEY3Njk3QzAeFw0yNTEwMTkxMzU2MTNaFw0yNTEwMjIxNTExMTNaMDMxMTAvBgNV BAMTKEM5OEEzQkM0Q0QwRTMzNjYyMDREREZERDZENjc1QzVFODY3OEE3MjIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDVM2Z3wQ02udn4KX5onu+sRPtJ f07RrwkG5hE6Jw63qnehs54k2ta4x7a0fdOKddFkXMs5mjo+s17cZNHOvMWUCVqC qJDzzbRYLgL7ERuxzLKHlDnU6mi0hnjna56M+GcEjFkPGmCWH0AurQmH+JAxXlgV /quCZaK7gt/hG1HbKvRLXT2qXgofRAdk6lMdKiVRVCRmdvETMyuKTj6vXuJW8K2E yXzeJW46deMsR6+3WPhhZPdAxQ86yY+ktNZA1j8TkuBwrwJNbyGvcJEeHNhs2/k9 pb/fbavs0RjqXRlnBZiwLdB5P4lIxtIhwC2JWaY4Brr+CS6CMecGiRD44J5hAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUyYo7xM0OM2YgTd/dbWdcXoZ4pyIwHwYDVR0j BBgwFoAUsKq3KLiJdVJsF0HMqGc8vIj3aXwwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w ZTA1YTFjZS04NDlmLTQxN2MtYjY3My1mZGQzM2YwZDc0NDcvMC9CMEFBQjcyOEI4 ODk3NTUyNkMxNzQxQ0NBODY3M0NCQzg4Rjc2OTdDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQjBBQUI3MjhCODg5NzU1MjZDMTc0MUNDQTg2NzNDQkM4OEY3 Njk3Qy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMGUwNWExY2UtODQ5Zi00MTdjLWI2 NzMtZmRkMzNmMGQ3NDQ3LzAvQjBBQUI3MjhCODg5NzU1MjZDMTc0MUNDQTg2NzND QkM4OEY3Njk3Qy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKit73eV8J4LKipWCweNyAPN2XAYQz2EGR6b w7vAfjO372qX8Rik3Hg7okD7oAo34QymDO2vzvOhqpWYBO1JMijfKgUI5H22Axm+ rUESnL6fubcAFa++r1ZtkiBH7RjRt/SR6r/Z96VikZ9mF/7JJCkHc7AiX0v+jjhq NDVNbVu6PZFtOhlU5JNd5sc0oZITUy+Kn15eY+kCih8g4IhjqQkvsTmwHcOmtIcj Jf3oXccLSZxIZ6JJPEYzklKMqZ7ecM7QDscvdJer3n/KjkiTaSGTxMiSNYWFj6fJ rMHSqyQT/AWqjD2pHiihQpuibCBugmsjnRE7fEpxTVc0c7UlzVY= -----END CERTIFICATE-----Generated at Mon Oct 20 09:46:59 2025 by rpki-client