$ rpki-client -vvf repo-rpki.idnic.net/repo/3360f078-8a20-48d1-82b8-e1f50a155201/0/B93759B19E4C1F8FFB6E9D1E2E674E4E317D7E94.mft File: B93759B19E4C1F8FFB6E9D1E2E674E4E317D7E94.mft (raw, json) Hash identifier: 7MpnS+orBLNx+E478e5QQQMLhoqvSmTwMXzep8Y/TMc= Subject key identifier: FD:76:90:B8:95:D5:16:3C:1D:76:E1:8D:E3:20:53:06:17:BD:8C:65 Authority key identifier: B9:37:59:B1:9E:4C:1F:8F:FB:6E:9D:1E:2E:67:4E:4E:31:7D:7E:94 Certificate issuer: /CN=B93759B19E4C1F8FFB6E9D1E2E674E4E317D7E94 Certificate serial: 38B11EC94AB3F1DBC357AE1862719D8D056ED55D Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B93759B19E4C1F8FFB6E9D1E2E674E4E317D7E94.cer Subject info access: rsync://repo-rpki.idnic.net/repo/3360f078-8a20-48d1-82b8-e1f50a155201/0/B93759B19E4C1F8FFB6E9D1E2E674E4E317D7E94.mft Manifest number: 020E Signing time: Mon 20 Oct 2025 06:02:21 +0000 Manifest this update: Mon 20 Oct 2025 05:57:21 +0000 Manifest next update: Thu 23 Oct 2025 06:41:21 +0000 Files and hashes: 1: 3130332e3135302e3135382e302f32342d3234203d3e20313430333937.roa (hash: XFDD1vzbK3fH2oVTZT7/I8pF/szQ/Q1UsEfrzMZOTGI=) 2: B93759B19E4C1F8FFB6E9D1E2E674E4E317D7E94.crl (hash: d01fLy6LHklJzXFEsbEO/bFsbr6Iy6cvoDPam9cPSSk=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/3360f078-8a20-48d1-82b8-e1f50a155201/0/B93759B19E4C1F8FFB6E9D1E2E674E4E317D7E94.crl rsync://repo-rpki.idnic.net/repo/3360f078-8a20-48d1-82b8-e1f50a155201/0/B93759B19E4C1F8FFB6E9D1E2E674E4E317D7E94.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B93759B19E4C1F8FFB6E9D1E2E674E4E317D7E94.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 Oct 2025 06:41:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 38:b1:1e:c9:4a:b3:f1:db:c3:57:ae:18:62:71:9d:8d:05:6e:d5:5d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B93759B19E4C1F8FFB6E9D1E2E674E4E317D7E94 Validity Not Before: Oct 20 05:57:21 2025 GMT Not After : Oct 23 06:41:21 2025 GMT Subject: CN=FD7690B895D5163C1D76E18DE320530617BD8C65 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:67:16:da:bd:8d:d2:49:2c:59:5a:0d:c2:42: fc:e8:45:bd:5f:7e:a1:46:db:7c:f1:43:f8:a2:90: 21:70:4e:e5:c4:e5:b6:99:24:d3:75:1a:ef:10:62: 49:48:b8:3b:70:2b:52:be:4d:33:09:80:39:9a:8b: 47:fa:5d:ff:fe:d0:e7:f6:32:b4:05:28:07:f9:f9: c5:4b:6b:87:c4:33:22:ad:d4:6d:91:f7:51:13:00: ec:55:e5:89:95:06:c9:48:ad:b1:37:b8:21:8c:54: a6:45:cb:08:a5:16:c4:35:e3:4f:28:9b:87:aa:a4: af:77:3e:39:9a:88:a7:a5:37:ff:49:b4:c9:fe:c1: 90:5e:71:d9:20:84:49:ed:4e:69:28:cf:2a:a0:5c: 63:73:87:4f:a0:eb:e6:64:32:01:db:2e:f3:6f:11: c9:69:e4:89:94:2c:e5:60:7b:0a:49:d7:1b:c6:d8: 35:25:21:57:00:f2:71:04:47:1a:76:7b:7b:65:8f: a8:7f:af:78:0b:28:25:d6:78:c4:ef:6a:61:29:7f: e7:d2:d8:bd:c5:48:2d:f0:0d:d0:f4:1a:7f:04:0a: 48:8a:76:e4:37:d9:da:59:de:c2:a8:15:5d:eb:f0: 0b:21:85:61:da:2d:c9:6b:ca:3e:43:a5:1d:ae:36: a2:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FD:76:90:B8:95:D5:16:3C:1D:76:E1:8D:E3:20:53:06:17:BD:8C:65 X509v3 Authority Key Identifier: keyid:B9:37:59:B1:9E:4C:1F:8F:FB:6E:9D:1E:2E:67:4E:4E:31:7D:7E:94 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/3360f078-8a20-48d1-82b8-e1f50a155201/0/B93759B19E4C1F8FFB6E9D1E2E674E4E317D7E94.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B93759B19E4C1F8FFB6E9D1E2E674E4E317D7E94.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3360f078-8a20-48d1-82b8-e1f50a155201/0/B93759B19E4C1F8FFB6E9D1E2E674E4E317D7E94.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 82:5e:32:f2:d8:f8:f0:68:78:18:2d:8d:ef:4a:42:e0:fa:1d: 68:93:ca:f4:c8:25:cb:03:a2:2c:6b:c4:9d:d3:c5:bb:2f:df: 06:e7:17:df:e5:f1:18:18:78:22:ab:79:40:09:47:52:06:45: 0d:dc:4c:87:17:6b:fb:e4:cb:75:8f:1c:9f:9d:3e:ec:a4:d1: d7:57:0d:6e:61:3e:0f:88:1f:ac:f1:05:44:4d:57:07:01:31: 5b:0b:b8:24:f5:57:f8:44:f5:74:ed:54:a6:e7:85:05:20:e9: 1b:a2:13:51:5a:b5:ed:e8:27:58:59:6d:3e:2b:4c:4b:15:c6: c7:1e:34:3d:d0:28:ec:14:a5:30:ef:b4:b4:63:f7:6b:41:86: aa:17:09:7e:3d:6e:36:a8:20:3d:c2:9f:b7:7d:27:e4:75:24: 36:40:2b:06:93:5f:7b:60:f5:1d:fb:98:98:3e:36:31:e0:7e: 6d:ea:a1:8c:aa:26:7d:cb:6c:ff:ab:3e:82:45:d8:94:89:db: 6d:5e:da:6a:72:a1:5e:ca:a5:93:24:d3:79:0d:4b:51:47:c5: cd:fd:d0:35:71:29:a1:e1:e1:17:82:09:fc:8d:96:7e:3b:4d: ea:b2:03:69:ab:c5:1f:66:e2:86:c5:0b:a8:d4:15:52:ad:52: 9b:75:f7:80 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUOLEeyUqz8dvDV64YYnGdjQVu1V0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjkzNzU5QjE5RTRDMUY4RkZCNkU5RDFFMkU2NzRFNEUz MTdEN0U5NDAeFw0yNTEwMjAwNTU3MjFaFw0yNTEwMjMwNjQxMjFaMDMxMTAvBgNV BAMTKEZENzY5MEI4OTVENTE2M0MxRDc2RTE4REUzMjA1MzA2MTdCRDhDNjUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDQZxbavY3SSSxZWg3CQvzoRb1f fqFG23zxQ/iikCFwTuXE5baZJNN1Gu8QYklIuDtwK1K+TTMJgDmai0f6Xf/+0Of2 MrQFKAf5+cVLa4fEMyKt1G2R91ETAOxV5YmVBslIrbE3uCGMVKZFywilFsQ1408o m4eqpK93PjmaiKelN/9JtMn+wZBecdkghEntTmkozyqgXGNzh0+g6+ZkMgHbLvNv Eclp5ImULOVgewpJ1xvG2DUlIVcA8nEERxp2e3tlj6h/r3gLKCXWeMTvamEpf+fS 2L3FSC3wDdD0Gn8ECkiKduQ32dpZ3sKoFV3r8AshhWHaLclryj5DpR2uNqLfAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU/XaQuJXVFjwdduGN4yBTBhe9jGUwHwYDVR0j BBgwFoAUuTdZsZ5MH4/7bp0eLmdOTjF9fpQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z MzYwZjA3OC04YTIwLTQ4ZDEtODJiOC1lMWY1MGExNTUyMDEvMC9COTM3NTlCMTlF NEMxRjhGRkI2RTlEMUUyRTY3NEU0RTMxN0Q3RTk0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQjkzNzU5QjE5RTRDMUY4RkZCNkU5RDFFMkU2NzRFNEUzMTdE N0U5NC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMzM2MGYwNzgtOGEyMC00OGQxLTgy YjgtZTFmNTBhMTU1MjAxLzAvQjkzNzU5QjE5RTRDMUY4RkZCNkU5RDFFMkU2NzRF NEUzMTdEN0U5NC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIJeMvLY+PBoeBgtje9KQuD6HWiTyvTIJcsD oixrxJ3Txbsv3wbnF9/l8RgYeCKreUAJR1IGRQ3cTIcXa/vky3WPHJ+dPuyk0ddX DW5hPg+IH6zxBURNVwcBMVsLuCT1V/hE9XTtVKbnhQUg6RuiE1Fate3oJ1hZbT4r TEsVxsceND3QKOwUpTDvtLRj92tBhqoXCX49bjaoID3Cn7d9J+R1JDZAKwaTX3tg 9R37mJg+NjHgfm3qoYyqJn3LbP+rPoJF2JSJ221e2mpyoV7KpZMk03kNS1FHxc39 0DVxKaHh4ReCCfyNln47TeqyA2mrxR9m4obFC6jUFVKtUpt194A= -----END CERTIFICATE-----Generated at Mon Oct 20 13:53:52 2025 by rpki-client