$ rpki-client -vvf repo-rpki.idnic.net/repo/42dab46a-085e-4432-9833-71b8db144d94/0/B0D726419FBF35E7C6EB437E238F3D2A3F063B4C.mft File: B0D726419FBF35E7C6EB437E238F3D2A3F063B4C.mft (raw, json) Hash identifier: bI/J6CIzTfu3fFcEMwP99Axc3zV+pgf73OOwolxRmAE= Subject key identifier: 32:A2:E8:65:F9:87:54:A4:6C:85:E6:8A:7D:8B:34:F6:DB:AD:6F:1C Authority key identifier: B0:D7:26:41:9F:BF:35:E7:C6:EB:43:7E:23:8F:3D:2A:3F:06:3B:4C Certificate issuer: /CN=B0D726419FBF35E7C6EB437E238F3D2A3F063B4C Certificate serial: 399C5CCA307F492008EB2CC875B2E3B004DF8EE1 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/B0D726419FBF35E7C6EB437E238F3D2A3F063B4C.cer Subject info access: rsync://repo-rpki.idnic.net/repo/42dab46a-085e-4432-9833-71b8db144d94/0/B0D726419FBF35E7C6EB437E238F3D2A3F063B4C.mft Manifest number: CD Signing time: Sat 18 Oct 2025 21:20:05 +0000 Manifest this update: Sat 18 Oct 2025 21:15:05 +0000 Manifest next update: Wed 22 Oct 2025 07:32:05 +0000 Files and hashes: 1: 3136302e32352e35382e302f32332d3234203d3e20313532383333.roa (hash: 7IuV0NhxXlp455EXe3FaAoXVfJrAOl6E2yru0xUglkI=) 2: B0D726419FBF35E7C6EB437E238F3D2A3F063B4C.crl (hash: an7hVHnX2Z42+DHs820AOjpUuA1eBKp/uyoMMGdPiEQ=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/42dab46a-085e-4432-9833-71b8db144d94/0/B0D726419FBF35E7C6EB437E238F3D2A3F063B4C.crl rsync://repo-rpki.idnic.net/repo/42dab46a-085e-4432-9833-71b8db144d94/0/B0D726419FBF35E7C6EB437E238F3D2A3F063B4C.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/B0D726419FBF35E7C6EB437E238F3D2A3F063B4C.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 Oct 2025 07:32:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 39:9c:5c:ca:30:7f:49:20:08:eb:2c:c8:75:b2:e3:b0:04:df:8e:e1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B0D726419FBF35E7C6EB437E238F3D2A3F063B4C Validity Not Before: Oct 18 21:15:05 2025 GMT Not After : Oct 22 07:32:05 2025 GMT Subject: CN=32A2E865F98754A46C85E68A7D8B34F6DBAD6F1C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:4e:3c:03:40:70:d8:35:1d:b0:77:9e:e2:65: 3a:71:c4:83:94:3f:c4:1f:68:21:8f:c7:24:c6:c4: b2:4b:22:46:51:79:3f:ff:0c:86:6b:a4:4c:2d:3d: 3e:6e:39:d8:67:bc:f2:8c:eb:4d:3d:94:13:69:f7: 16:8e:13:ef:53:e7:f0:c0:61:b1:66:5f:f2:9f:5b: b3:97:f0:39:8d:bf:59:1b:3d:6b:4e:4d:30:fb:d5: 9a:34:77:05:71:7e:65:dd:04:fc:ec:3e:6b:c7:99: b0:1d:09:12:31:ac:5d:b1:0f:39:bb:ba:39:4b:bd: a9:ea:ea:34:6e:99:51:44:87:ff:0a:30:89:13:e9: 0c:6f:ae:e3:b6:44:13:a5:14:02:c7:3d:a9:a6:17: de:3b:3e:17:17:94:19:17:38:9f:18:dc:4c:95:32: ba:a2:55:79:e1:a2:30:70:78:86:9b:a9:18:c5:f0: e7:4c:98:10:39:c4:b9:2d:e4:52:33:8e:a3:ea:5b: c2:8b:93:61:82:08:f2:76:bc:f5:84:f5:93:a3:3d: fc:a7:53:22:a4:3e:3d:63:27:a5:c5:d6:05:6e:b2: e3:c3:6c:3c:96:e6:c3:68:06:a4:9f:be:35:f7:df: 7c:64:72:be:43:4c:67:f8:5b:37:84:63:70:d5:91: 1d:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:A2:E8:65:F9:87:54:A4:6C:85:E6:8A:7D:8B:34:F6:DB:AD:6F:1C X509v3 Authority Key Identifier: keyid:B0:D7:26:41:9F:BF:35:E7:C6:EB:43:7E:23:8F:3D:2A:3F:06:3B:4C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/42dab46a-085e-4432-9833-71b8db144d94/0/B0D726419FBF35E7C6EB437E238F3D2A3F063B4C.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/B0D726419FBF35E7C6EB437E238F3D2A3F063B4C.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/42dab46a-085e-4432-9833-71b8db144d94/0/B0D726419FBF35E7C6EB437E238F3D2A3F063B4C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c3:78:44:f4:16:b4:c4:c9:87:61:02:e3:f1:35:9e:d0:bd:7b: 7d:84:93:d3:41:ed:48:74:14:ce:71:cc:0f:a6:7b:1d:42:48: 09:e2:86:36:79:12:ab:72:82:93:3d:c5:03:63:c0:17:77:0f: f9:da:21:30:b3:8b:bd:9a:b8:18:af:6b:d7:72:39:9e:14:e9: ed:87:41:91:0a:a6:1f:81:12:5d:f8:e1:71:e6:f6:88:08:22: 13:2d:1c:2e:23:c1:76:93:82:3c:b5:91:42:59:06:5c:c5:1e: b3:c6:bd:30:ca:84:c4:e6:fb:56:8d:ce:69:d2:0b:67:04:9e: f8:d1:6e:70:03:8d:e4:5b:42:de:20:e8:e0:62:68:89:25:ba: 4b:cd:e9:62:9e:60:e6:73:ce:95:db:b0:86:bd:b7:cb:93:fc: 10:70:7b:82:f4:35:00:70:c3:a4:3f:7b:95:9f:36:f5:3c:b5: ba:ec:b5:90:c6:48:ca:ed:15:7f:9e:01:18:db:76:4a:5a:b8: c0:f5:60:d2:0b:c1:a4:99:e6:65:f0:5e:bf:0c:96:d5:ad:6b: ec:71:ee:49:c8:95:59:dc:50:a7:a0:13:19:d9:7f:9c:ef:9c: 6c:d2:39:3e:36:26:02:80:c2:a3:6a:c8:f1:87:53:e4:a6:b0: a6:10:54:08 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUOZxcyjB/SSAI6yzIdbLjsATfjuEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjBENzI2NDE5RkJGMzVFN0M2RUI0MzdFMjM4RjNEMkEz RjA2M0I0QzAeFw0yNTEwMTgyMTE1MDVaFw0yNTEwMjIwNzMyMDVaMDMxMTAvBgNV BAMTKDMyQTJFODY1Rjk4NzU0QTQ2Qzg1RTY4QTdEOEIzNEY2REJBRDZGMUMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDkTjwDQHDYNR2wd57iZTpxxIOU P8QfaCGPxyTGxLJLIkZReT//DIZrpEwtPT5uOdhnvPKM6009lBNp9xaOE+9T5/DA YbFmX/KfW7OX8DmNv1kbPWtOTTD71Zo0dwVxfmXdBPzsPmvHmbAdCRIxrF2xDzm7 ujlLvanq6jRumVFEh/8KMIkT6QxvruO2RBOlFALHPammF947PhcXlBkXOJ8Y3EyV MrqiVXnhojBweIabqRjF8OdMmBA5xLkt5FIzjqPqW8KLk2GCCPJ2vPWE9ZOjPfyn UyKkPj1jJ6XF1gVusuPDbDyW5sNoBqSfvjX333xkcr5DTGf4WzeEY3DVkR35AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUMqLoZfmHVKRsheaKfYs09tutbxwwHwYDVR0j BBgwFoAUsNcmQZ+/NefG60N+I489Kj8GO0wwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 MmRhYjQ2YS0wODVlLTQ0MzItOTgzMy03MWI4ZGIxNDRkOTQvMC9CMEQ3MjY0MTlG QkYzNUU3QzZFQjQzN0UyMzhGM0QyQTNGMDYzQjRDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvQjBENzI2NDE5RkJGMzVFN0M2RUI0MzdFMjM4RjNEMkEzRjA2 M0I0Qy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNDJkYWI0NmEtMDg1ZS00NDMyLTk4 MzMtNzFiOGRiMTQ0ZDk0LzAvQjBENzI2NDE5RkJGMzVFN0M2RUI0MzdFMjM4RjNE MkEzRjA2M0I0Qy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAMN4RPQWtMTJh2EC4/E1ntC9e32Ek9NB7Uh0 FM5xzA+mex1CSAnihjZ5EqtygpM9xQNjwBd3D/naITCzi72auBiva9dyOZ4U6e2H QZEKph+BEl344XHm9ogIIhMtHC4jwXaTgjy1kUJZBlzFHrPGvTDKhMTm+1aNzmnS C2cEnvjRbnADjeRbQt4g6OBiaIklukvN6WKeYOZzzpXbsIa9t8uT/BBwe4L0NQBw w6Q/e5WfNvU8tbrstZDGSMrtFX+eARjbdkpauMD1YNILwaSZ5mXwXr8MltWta+xx 7knIlVncUKegExnZf5zvnGzSOT42JgKAwqNqyPGHU+SmsKYQVAg= -----END CERTIFICATE-----Generated at Mon Oct 20 16:47:03 2025 by rpki-client