$ rpki-client -vvf repo-rpki.idnic.net/repo/29b3be62-3597-4fe8-a795-fc9ba1202344/0/B4381C63674B5D9A9B8C44C13CF19E7DD321F7C0.mft File: B4381C63674B5D9A9B8C44C13CF19E7DD321F7C0.mft (raw, json) Hash identifier: Ppm2xRFl35A6TGU6fmDy6uz99azKH+/oFutLKt3/5kA= Subject key identifier: 45:36:21:19:C0:F9:A1:B5:35:25:82:13:18:6D:B0:BE:61:FC:F4:9C Authority key identifier: B4:38:1C:63:67:4B:5D:9A:9B:8C:44:C1:3C:F1:9E:7D:D3:21:F7:C0 Certificate issuer: /CN=B4381C63674B5D9A9B8C44C13CF19E7DD321F7C0 Certificate serial: 25DA5E393D10697C3EDE47991F5C3736918E500F Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B4381C63674B5D9A9B8C44C13CF19E7DD321F7C0.cer Subject info access: rsync://repo-rpki.idnic.net/repo/29b3be62-3597-4fe8-a795-fc9ba1202344/0/B4381C63674B5D9A9B8C44C13CF19E7DD321F7C0.mft Manifest number: 01B4 Signing time: Sun 19 Oct 2025 01:33:15 +0000 Manifest this update: Sun 19 Oct 2025 01:28:15 +0000 Manifest next update: Wed 22 Oct 2025 11:07:15 +0000 Files and hashes: 1: B4381C63674B5D9A9B8C44C13CF19E7DD321F7C0.crl (hash: YuuqPVyPNG6msUefDxP9p32Y9eWqdhuFs14tmvBeo2g=) 2: 3130332e32302e3231392e302f32342d3234203d3e20313439393638.roa (hash: O7tUFKX21rX6gYwZ1ZrwxitGOTUDY0G4VWaDfkWzuZ4=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/29b3be62-3597-4fe8-a795-fc9ba1202344/0/B4381C63674B5D9A9B8C44C13CF19E7DD321F7C0.crl rsync://repo-rpki.idnic.net/repo/29b3be62-3597-4fe8-a795-fc9ba1202344/0/B4381C63674B5D9A9B8C44C13CF19E7DD321F7C0.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B4381C63674B5D9A9B8C44C13CF19E7DD321F7C0.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 Oct 2025 11:07:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 25:da:5e:39:3d:10:69:7c:3e:de:47:99:1f:5c:37:36:91:8e:50:0f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B4381C63674B5D9A9B8C44C13CF19E7DD321F7C0 Validity Not Before: Oct 19 01:28:15 2025 GMT Not After : Oct 22 11:07:15 2025 GMT Subject: CN=45362119C0F9A1B535258213186DB0BE61FCF49C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:6c:e2:77:89:56:b2:df:6d:93:ef:cf:f3:a6: 60:5c:d5:6c:74:f7:76:f4:48:2d:fd:d3:b8:b9:ff: ae:7b:a3:a8:c3:be:e8:c5:15:dd:74:8d:64:80:35: c8:81:86:e4:6c:ef:52:60:28:03:0a:a6:76:41:0c: 0e:27:76:20:12:07:d8:f3:96:02:a8:44:c7:4f:3a: 53:65:2e:48:aa:f2:2c:ce:25:c9:ee:02:13:82:1d: 0e:b9:21:13:32:32:61:a8:20:7b:2a:85:a3:a2:b1: 95:7c:f0:c8:ed:bb:fb:e6:e2:25:7e:d6:6e:18:e3: 91:ab:f9:42:75:bd:4a:c3:37:af:a2:c1:51:11:95: ae:90:d8:c4:d0:10:7b:98:1a:2d:91:1c:38:32:78: b7:b2:ac:ad:e1:05:c8:34:51:aa:ae:fa:3d:7e:98: 8e:1c:59:1f:73:42:83:df:62:4f:35:f6:8e:9d:3e: 7c:f4:c1:98:7b:55:aa:ae:f4:59:f7:b6:ef:e8:95: 7b:22:34:a9:a2:c4:14:22:78:23:15:f8:9c:bd:97: 29:68:f6:e5:42:f8:d9:f4:b8:73:af:71:1d:05:07: ac:57:18:5b:33:59:80:2b:9b:75:d5:a1:3c:ef:7b: 28:12:c7:f7:b4:e5:a6:50:3e:30:d9:50:64:07:06: 6c:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 45:36:21:19:C0:F9:A1:B5:35:25:82:13:18:6D:B0:BE:61:FC:F4:9C X509v3 Authority Key Identifier: keyid:B4:38:1C:63:67:4B:5D:9A:9B:8C:44:C1:3C:F1:9E:7D:D3:21:F7:C0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/29b3be62-3597-4fe8-a795-fc9ba1202344/0/B4381C63674B5D9A9B8C44C13CF19E7DD321F7C0.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B4381C63674B5D9A9B8C44C13CF19E7DD321F7C0.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/29b3be62-3597-4fe8-a795-fc9ba1202344/0/B4381C63674B5D9A9B8C44C13CF19E7DD321F7C0.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 37:dd:db:07:52:a1:48:1b:d0:fe:a1:c3:98:76:c6:f4:fe:dd: 63:6d:76:23:22:bb:4b:c1:0c:a1:7a:15:80:c8:9a:93:14:ca: 99:3f:a2:3e:d2:f3:41:74:7f:0a:1a:5e:df:15:3a:ad:78:de: 1a:a5:4e:c5:0d:c2:d8:73:5f:a8:8a:b7:84:fa:dc:e2:a0:72: 41:c9:f6:32:27:1b:1b:ce:3f:a7:45:d4:44:ac:f3:c8:8b:c0: 47:51:f9:fd:72:f0:b0:50:2d:7f:91:fe:88:2c:a9:6b:cf:95: 21:37:07:a1:ff:6a:53:49:4f:3a:a0:3c:4a:22:05:31:19:15: ab:e2:8e:86:ee:f4:01:94:37:b2:07:7c:ac:5a:2a:9c:c6:3d: b0:f6:ad:f3:3e:f3:81:11:7f:aa:d4:cc:d1:b7:76:28:7f:77: 6d:7c:ec:80:2c:95:bc:d5:26:7b:af:c5:8e:b8:fe:4a:3b:3f: a4:4d:fd:db:b1:cc:74:b3:69:16:5f:a5:8a:e8:e1:87:24:0c: d9:23:fc:04:a1:e5:06:cd:db:af:f7:1e:88:f7:5e:0a:8d:07: 37:c7:b1:6a:09:1d:d9:f9:4e:ea:72:f7:9f:96:7a:fc:c5:0b: 47:e8:3c:dd:a0:f2:c4:dd:d3:69:cc:24:5c:6d:36:f4:44:85: 55:e3:f8:16 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUJdpeOT0QaXw+3keZH1w3NpGOUA8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjQzODFDNjM2NzRCNUQ5QTlCOEM0NEMxM0NGMTlFN0RE MzIxRjdDMDAeFw0yNTEwMTkwMTI4MTVaFw0yNTEwMjIxMTA3MTVaMDMxMTAvBgNV BAMTKDQ1MzYyMTE5QzBGOUExQjUzNTI1ODIxMzE4NkRCMEJFNjFGQ0Y0OUMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDVbOJ3iVay322T78/zpmBc1Wx0 93b0SC3907i5/657o6jDvujFFd10jWSANciBhuRs71JgKAMKpnZBDA4ndiASB9jz lgKoRMdPOlNlLkiq8izOJcnuAhOCHQ65IRMyMmGoIHsqhaOisZV88Mjtu/vm4iV+ 1m4Y45Gr+UJ1vUrDN6+iwVERla6Q2MTQEHuYGi2RHDgyeLeyrK3hBcg0Uaqu+j1+ mI4cWR9zQoPfYk819o6dPnz0wZh7Vaqu9Fn3tu/olXsiNKmixBQieCMV+Jy9lylo 9uVC+Nn0uHOvcR0FB6xXGFszWYArm3XVoTzveygSx/e05aZQPjDZUGQHBmyxAgMB AAGjggI8MIICODAdBgNVHQ4EFgQURTYhGcD5obU1JYITGG2wvmH89JwwHwYDVR0j BBgwFoAUtDgcY2dLXZqbjETBPPGefdMh98AwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y OWIzYmU2Mi0zNTk3LTRmZTgtYTc5NS1mYzliYTEyMDIzNDQvMC9CNDM4MUM2MzY3 NEI1RDlBOUI4QzQ0QzEzQ0YxOUU3REQzMjFGN0MwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQjQzODFDNjM2NzRCNUQ5QTlCOEM0NEMxM0NGMTlFN0REMzIx RjdDMC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMjliM2JlNjItMzU5Ny00ZmU4LWE3 OTUtZmM5YmExMjAyMzQ0LzAvQjQzODFDNjM2NzRCNUQ5QTlCOEM0NEMxM0NGMTlF N0REMzIxRjdDMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADfd2wdSoUgb0P6hw5h2xvT+3WNtdiMiu0vB DKF6FYDImpMUypk/oj7S80F0fwoaXt8VOq143hqlTsUNwthzX6iKt4T63OKgckHJ 9jInGxvOP6dF1ESs88iLwEdR+f1y8LBQLX+R/ogsqWvPlSE3B6H/alNJTzqgPEoi BTEZFavijobu9AGUN7IHfKxaKpzGPbD2rfM+84ERf6rUzNG3dih/d2187IAslbzV JnuvxY64/ko7P6RN/duxzHSzaRZfpYro4YckDNkj/ASh5QbN26/3Hoj3XgqNBzfH sWoJHdn5Tupy95+WevzFC0foPN2g8sTd02nMJFxtNvREhVXj+BY= -----END CERTIFICATE-----Generated at Mon Oct 20 14:40:40 2025 by rpki-client