$ rpki-client -vvf repo-rpki.idnic.net/repo/38913893-5f64-4a5e-a8d2-5d51ebde473f/0/B1F0A7585ED1882783C6AF802B826607ABB92671.mft File: B1F0A7585ED1882783C6AF802B826607ABB92671.mft (raw, json) Hash identifier: kScUO3knSUJBcHwGCsqxu7YzYaSeFsHiO1Z/bTGq/V4= Subject key identifier: 0A:56:0B:FB:2E:57:AB:08:84:1F:1F:17:F5:08:D7:72:53:37:AD:B6 Authority key identifier: B1:F0:A7:58:5E:D1:88:27:83:C6:AF:80:2B:82:66:07:AB:B9:26:71 Certificate issuer: /CN=B1F0A7585ED1882783C6AF802B826607ABB92671 Certificate serial: 2E31CDD056FAC2B11E1DEFDD568C5A52B79A88C3 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/B1F0A7585ED1882783C6AF802B826607ABB92671.cer Subject info access: rsync://repo-rpki.idnic.net/repo/38913893-5f64-4a5e-a8d2-5d51ebde473f/0/B1F0A7585ED1882783C6AF802B826607ABB92671.mft Manifest number: B5 Signing time: Mon 20 Oct 2025 05:12:21 +0000 Manifest this update: Mon 20 Oct 2025 05:07:21 +0000 Manifest next update: Thu 23 Oct 2025 14:13:21 +0000 Files and hashes: 1: 3136302e3138372e33372e302f32342d3234203d3e20313533333237.roa (hash: HwU0+K4pKIjqZ0rwzIAxU1cLuPfwooIJjDIs7VIOPKk=) 2: B1F0A7585ED1882783C6AF802B826607ABB92671.crl (hash: t7Q2IaO05V0P/Ua4Vje16JEKhUQGU9ZdDYH2RkgTtTg=) 3: 3136302e3138372e33362e302f32342d3234203d3e20313533333237.roa (hash: W6x4NYRtAG+Mf6fIyPCm/XsF8bO9fqqOCjC78Il5Kyw=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/38913893-5f64-4a5e-a8d2-5d51ebde473f/0/B1F0A7585ED1882783C6AF802B826607ABB92671.crl rsync://repo-rpki.idnic.net/repo/38913893-5f64-4a5e-a8d2-5d51ebde473f/0/B1F0A7585ED1882783C6AF802B826607ABB92671.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/B1F0A7585ED1882783C6AF802B826607ABB92671.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 Oct 2025 03:04:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2e:31:cd:d0:56:fa:c2:b1:1e:1d:ef:dd:56:8c:5a:52:b7:9a:88:c3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B1F0A7585ED1882783C6AF802B826607ABB92671 Validity Not Before: Oct 20 05:07:21 2025 GMT Not After : Oct 23 14:13:21 2025 GMT Subject: CN=0A560BFB2E57AB08841F1F17F508D7725337ADB6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:d7:6c:11:1b:92:87:38:a3:66:a9:c0:3f:7d: 8a:c3:40:2f:ae:d1:51:08:f2:cd:6e:02:69:1c:1c: 4d:53:6a:2f:6f:29:c2:82:82:d2:b1:9a:e9:ec:02: a2:2a:39:54:20:f7:80:01:78:bc:46:70:f0:95:d9: 90:d3:1f:73:16:7c:a7:60:80:b5:bd:b3:8b:7b:f1: 88:b3:a2:75:73:e1:92:5b:73:42:ad:2a:1c:df:80: 03:53:2f:28:37:01:0a:2d:ba:41:4b:ee:2a:ac:cc: 9c:6c:59:98:6f:2a:a3:f6:61:67:3a:cc:c0:d6:84: cc:1b:aa:7f:8f:4e:23:5f:c5:97:75:2e:72:93:a5: d6:7c:97:a4:60:19:26:b6:0c:6d:20:24:29:47:68: 41:65:47:13:7d:8c:78:f2:c3:99:d5:b9:b8:50:69: fe:12:a1:22:fb:47:3f:db:97:0d:e7:de:bd:b0:cc: cb:c4:90:fb:8f:7f:c2:b8:93:8f:93:d5:22:86:56: fb:f7:1a:b2:28:52:b3:d8:d0:3b:30:0a:b1:37:16: a5:d2:42:e9:38:d2:94:4c:91:e8:5c:7e:a1:bc:d5: 90:95:fe:2d:15:9a:90:e6:a0:a4:f8:b1:fa:a8:5a: c2:14:70:a7:16:13:95:fb:ce:45:11:60:1f:e7:6e: 2e:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0A:56:0B:FB:2E:57:AB:08:84:1F:1F:17:F5:08:D7:72:53:37:AD:B6 X509v3 Authority Key Identifier: keyid:B1:F0:A7:58:5E:D1:88:27:83:C6:AF:80:2B:82:66:07:AB:B9:26:71 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/38913893-5f64-4a5e-a8d2-5d51ebde473f/0/B1F0A7585ED1882783C6AF802B826607ABB92671.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/B1F0A7585ED1882783C6AF802B826607ABB92671.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/38913893-5f64-4a5e-a8d2-5d51ebde473f/0/B1F0A7585ED1882783C6AF802B826607ABB92671.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption d4:8e:0f:83:48:74:a3:6c:a0:c7:87:95:c4:2c:0a:c2:84:32: e2:44:42:53:c3:cd:41:b0:c2:e8:73:d9:51:1e:3c:2d:65:80: a0:f9:50:0b:de:fa:59:aa:a5:a1:d3:54:5f:fd:13:a4:4e:d9: 6e:aa:22:2c:cb:da:4d:33:bb:22:76:48:9d:be:b9:90:e3:19: 35:40:8f:50:90:5f:6e:ff:d4:6f:9a:a3:48:b4:96:9b:bf:f0: f4:c4:3f:9f:0f:32:f7:68:74:af:74:b5:8b:e8:4d:e1:41:88: 91:68:4d:24:e8:7d:43:86:6f:5e:44:77:92:c8:84:21:96:98: 97:1d:36:22:1c:af:33:26:56:78:98:eb:03:de:36:df:01:5d: 9c:8d:56:23:de:35:0b:c3:2b:d5:0e:44:42:d6:da:c2:ba:f0: 8e:25:94:18:01:1c:80:81:58:ca:26:cc:e8:e4:0e:af:40:30: cb:00:79:f9:34:49:e5:8e:85:f7:0d:5a:31:d6:8f:2c:68:8f: 3d:63:11:7b:28:82:a2:cc:f6:88:5f:c3:83:82:3b:97:64:e8: d2:76:46:7d:3b:f2:ce:27:38:5a:86:d6:18:fe:9e:c0:f7:55: ec:26:63:25:25:c4:b5:77:53:28:59:7f:db:1d:f1:78:af:f9: b8:a5:3f:59 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIULjHN0Fb6wrEeHe/dVoxaUreaiMMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjFGMEE3NTg1RUQxODgyNzgzQzZBRjgwMkI4MjY2MDdB QkI5MjY3MTAeFw0yNTEwMjAwNTA3MjFaFw0yNTEwMjMxNDEzMjFaMDMxMTAvBgNV BAMTKDBBNTYwQkZCMkU1N0FCMDg4NDFGMUYxN0Y1MDhENzcyNTMzN0FEQjYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC312wRG5KHOKNmqcA/fYrDQC+u 0VEI8s1uAmkcHE1Tai9vKcKCgtKxmunsAqIqOVQg94ABeLxGcPCV2ZDTH3MWfKdg gLW9s4t78YizonVz4ZJbc0KtKhzfgANTLyg3AQotukFL7iqszJxsWZhvKqP2YWc6 zMDWhMwbqn+PTiNfxZd1LnKTpdZ8l6RgGSa2DG0gJClHaEFlRxN9jHjyw5nVubhQ af4SoSL7Rz/blw3n3r2wzMvEkPuPf8K4k4+T1SKGVvv3GrIoUrPY0DswCrE3FqXS Quk40pRMkehcfqG81ZCV/i0VmpDmoKT4sfqoWsIUcKcWE5X7zkURYB/nbi7fAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUClYL+y5XqwiEHx8X9QjXclM3rbYwHwYDVR0j BBgwFoAUsfCnWF7RiCeDxq+AK4JmB6u5JnEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z ODkxMzg5My01ZjY0LTRhNWUtYThkMi01ZDUxZWJkZTQ3M2YvMC9CMUYwQTc1ODVF RDE4ODI3ODNDNkFGODAyQjgyNjYwN0FCQjkyNjcxLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvQjFGMEE3NTg1RUQxODgyNzgzQzZBRjgwMkI4MjY2MDdBQkI5 MjY3MS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMzg5MTM4OTMtNWY2NC00YTVlLWE4 ZDItNWQ1MWViZGU0NzNmLzAvQjFGMEE3NTg1RUQxODgyNzgzQzZBRjgwMkI4MjY2 MDdBQkI5MjY3MS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBANSOD4NIdKNsoMeHlcQsCsKEMuJEQlPDzUGw wuhz2VEePC1lgKD5UAve+lmqpaHTVF/9E6RO2W6qIizL2k0zuyJ2SJ2+uZDjGTVA j1CQX27/1G+ao0i0lpu/8PTEP58PMvdodK90tYvoTeFBiJFoTSTofUOGb15Ed5LI hCGWmJcdNiIcrzMmVniY6wPeNt8BXZyNViPeNQvDK9UORELW2sK68I4llBgBHICB WMomzOjkDq9AMMsAefk0SeWOhfcNWjHWjyxojz1jEXsogqLM9ohfw4OCO5dk6NJ2 Rn078s4nOFqG1hj+nsD3VewmYyUlxLV3UyhZf9sd8Xiv+bilP1k= -----END CERTIFICATE-----Generated at Mon Oct 20 15:50:58 2025 by rpki-client