$ rpki-client -vvf repo-rpki.idnic.net/repo/46a84de5-61d1-4618-9fb4-43f631a1289a/0/B911D34F2E80140D63AE02F4CBE719E7D972C6F6.mft File: B911D34F2E80140D63AE02F4CBE719E7D972C6F6.mft (raw, json) Hash identifier: HwTgb/av7RcjxPTmYRJF1Hr3Va1SvKamd66sX3LiVEk= Subject key identifier: 27:D3:DC:BB:62:2E:33:F6:50:A0:D5:10:E2:6A:A9:F6:B5:2F:D8:B1 Authority key identifier: B9:11:D3:4F:2E:80:14:0D:63:AE:02:F4:CB:E7:19:E7:D9:72:C6:F6 Certificate issuer: /CN=B911D34F2E80140D63AE02F4CBE719E7D972C6F6 Certificate serial: 23D131D90E827851F5A5F762362AF55FF14DA8F3 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B911D34F2E80140D63AE02F4CBE719E7D972C6F6.cer Subject info access: rsync://repo-rpki.idnic.net/repo/46a84de5-61d1-4618-9fb4-43f631a1289a/0/B911D34F2E80140D63AE02F4CBE719E7D972C6F6.mft Manifest number: CD Signing time: Sat 18 Oct 2025 22:11:10 +0000 Manifest this update: Sat 18 Oct 2025 22:06:10 +0000 Manifest next update: Wed 22 Oct 2025 06:46:10 +0000 Files and hashes: 1: B911D34F2E80140D63AE02F4CBE719E7D972C6F6.crl (hash: Ubje5XKLtBPyjZa0kxqApqCWHe5TsCf2Nk2OGwDq8po=) 2: 3130332e3135302e32322e302f32342d3234203d3e20313430333938.roa (hash: obby+PvQrLWYC3NU3QI0xYtZDC2hJcWlETHv+KWDEWM=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/46a84de5-61d1-4618-9fb4-43f631a1289a/0/B911D34F2E80140D63AE02F4CBE719E7D972C6F6.crl rsync://repo-rpki.idnic.net/repo/46a84de5-61d1-4618-9fb4-43f631a1289a/0/B911D34F2E80140D63AE02F4CBE719E7D972C6F6.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B911D34F2E80140D63AE02F4CBE719E7D972C6F6.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 Oct 2025 06:46:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 23:d1:31:d9:0e:82:78:51:f5:a5:f7:62:36:2a:f5:5f:f1:4d:a8:f3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B911D34F2E80140D63AE02F4CBE719E7D972C6F6 Validity Not Before: Oct 18 22:06:10 2025 GMT Not After : Oct 22 06:46:10 2025 GMT Subject: CN=27D3DCBB622E33F650A0D510E26AA9F6B52FD8B1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:a4:69:a3:aa:81:1b:c4:05:68:17:b2:7a:ff: 8a:a6:b9:0f:ae:31:45:a8:79:42:9e:d7:f6:0a:36: b8:fc:97:07:31:eb:a0:87:8f:a7:08:be:6c:fa:95: 43:4d:b9:9a:53:40:16:49:75:2f:0c:50:6f:a6:b1: ce:f4:9b:5c:14:57:d5:d4:af:55:aa:55:db:ab:48: 01:39:83:0c:18:8e:50:7b:de:b0:0c:d6:a1:8e:47: fc:0a:79:64:e0:c2:f7:12:83:92:59:94:7f:53:26: 4f:ef:25:21:1f:b8:c8:09:e7:17:90:40:df:eb:c4: 71:41:2d:ee:dc:01:c5:49:b8:e8:fd:60:6a:01:f1: 6f:6f:4e:40:98:f3:26:c7:90:d5:ee:f7:be:6c:29: 22:4c:fa:ec:e8:01:90:ab:83:17:5d:e3:3f:bd:52: ae:58:e3:01:e2:57:b7:ec:72:14:93:e8:fb:95:04: f8:5b:9b:fb:f9:91:52:76:7a:6f:c1:bf:ca:2a:18: cb:28:d8:73:db:a6:19:dc:8d:6f:c8:98:c7:31:8f: ef:3a:01:1f:56:b4:fa:77:06:80:f7:a5:0b:92:6c: 91:95:8d:14:4c:52:b9:8e:9f:ec:39:cd:2a:bb:d8: b6:e3:41:78:f1:2f:11:04:f5:43:e4:15:ef:5c:00: 88:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 27:D3:DC:BB:62:2E:33:F6:50:A0:D5:10:E2:6A:A9:F6:B5:2F:D8:B1 X509v3 Authority Key Identifier: keyid:B9:11:D3:4F:2E:80:14:0D:63:AE:02:F4:CB:E7:19:E7:D9:72:C6:F6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/46a84de5-61d1-4618-9fb4-43f631a1289a/0/B911D34F2E80140D63AE02F4CBE719E7D972C6F6.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B911D34F2E80140D63AE02F4CBE719E7D972C6F6.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/46a84de5-61d1-4618-9fb4-43f631a1289a/0/B911D34F2E80140D63AE02F4CBE719E7D972C6F6.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 58:d8:4c:93:50:45:98:8f:b5:5c:94:75:e8:72:52:a5:02:ce: ed:13:58:42:c1:c7:5e:ee:2d:9d:6b:75:c3:b8:b9:42:71:55: 9c:16:77:b3:20:d0:2f:06:e2:47:54:2c:2e:41:4b:22:f4:a7: 38:4e:36:10:5e:9c:c5:17:2c:75:ed:ee:f2:91:d3:c6:8a:9b: c3:61:7c:ee:97:e3:b4:5b:6f:4f:e4:e8:3c:9d:f0:12:5e:30: e8:fd:68:99:23:05:2e:a9:b0:6a:f8:0f:70:ce:68:68:7c:09: ab:22:9a:35:e1:b3:d6:c6:9f:8d:cf:60:ed:ac:8c:9c:c7:88: 09:81:0a:24:82:44:86:cd:76:34:3a:7f:b9:d2:c8:9c:01:b5: 3b:c4:3c:e2:5d:6a:95:3d:59:72:08:6f:81:9e:1e:4f:88:65: a2:0e:60:cc:d7:15:17:85:71:e8:7c:a4:ce:d9:2a:22:20:6f: 68:0f:5c:27:29:d1:fe:24:3f:50:75:2c:9f:8e:7d:16:54:9e: 28:54:97:80:bd:cb:31:cd:dd:9c:ef:84:5b:e1:0e:b3:82:9a: fc:4d:fe:2c:0e:9c:a1:11:73:b2:bf:4e:f2:43:58:e0:82:76: d3:6a:23:f2:87:c3:76:0a:75:7c:49:8f:21:aa:ac:88:7b:39: 7e:16:ac:32 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUI9Ex2Q6CeFH1pfdiNir1X/FNqPMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjkxMUQzNEYyRTgwMTQwRDYzQUUwMkY0Q0JFNzE5RTdE OTcyQzZGNjAeFw0yNTEwMTgyMjA2MTBaFw0yNTEwMjIwNjQ2MTBaMDMxMTAvBgNV BAMTKDI3RDNEQ0JCNjIyRTMzRjY1MEEwRDUxMEUyNkFBOUY2QjUyRkQ4QjEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDTpGmjqoEbxAVoF7J6/4qmuQ+u MUWoeUKe1/YKNrj8lwcx66CHj6cIvmz6lUNNuZpTQBZJdS8MUG+msc70m1wUV9XU r1WqVdurSAE5gwwYjlB73rAM1qGOR/wKeWTgwvcSg5JZlH9TJk/vJSEfuMgJ5xeQ QN/rxHFBLe7cAcVJuOj9YGoB8W9vTkCY8ybHkNXu975sKSJM+uzoAZCrgxdd4z+9 Uq5Y4wHiV7fschST6PuVBPhbm/v5kVJ2em/Bv8oqGMso2HPbphncjW/ImMcxj+86 AR9WtPp3BoD3pQuSbJGVjRRMUrmOn+w5zSq72LbjQXjxLxEE9UPkFe9cAIhBAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUJ9Pcu2IuM/ZQoNUQ4mqp9rUv2LEwHwYDVR0j BBgwFoAUuRHTTy6AFA1jrgL0y+cZ59lyxvYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 NmE4NGRlNS02MWQxLTQ2MTgtOWZiNC00M2Y2MzFhMTI4OWEvMC9COTExRDM0RjJF ODAxNDBENjNBRTAyRjRDQkU3MTlFN0Q5NzJDNkY2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQjkxMUQzNEYyRTgwMTQwRDYzQUUwMkY0Q0JFNzE5RTdEOTcy QzZGNi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNDZhODRkZTUtNjFkMS00NjE4LTlm YjQtNDNmNjMxYTEyODlhLzAvQjkxMUQzNEYyRTgwMTQwRDYzQUUwMkY0Q0JFNzE5 RTdEOTcyQzZGNi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFjYTJNQRZiPtVyUdehyUqUCzu0TWELBx17u LZ1rdcO4uUJxVZwWd7Mg0C8G4kdULC5BSyL0pzhONhBenMUXLHXt7vKR08aKm8Nh fO6X47Rbb0/k6Dyd8BJeMOj9aJkjBS6psGr4D3DOaGh8CasimjXhs9bGn43PYO2s jJzHiAmBCiSCRIbNdjQ6f7nSyJwBtTvEPOJdapU9WXIIb4GeHk+IZaIOYMzXFReF ceh8pM7ZKiIgb2gPXCcp0f4kP1B1LJ+OfRZUnihUl4C9yzHN3ZzvhFvhDrOCmvxN /iwOnKERc7K/TvJDWOCCdtNqI/KHw3YKdXxJjyGqrIh7OX4WrDI= -----END CERTIFICATE-----Generated at Mon Oct 20 11:06:07 2025 by rpki-client