$ rpki-client -vvf repo-rpki.idnic.net/repo/4bdb1e0a-a4ec-49db-be89-8d7e7fc2c227/0/B493A5CEBF09E10BC35D9AC2211DAFD2095687DA.mft File: B493A5CEBF09E10BC35D9AC2211DAFD2095687DA.mft (raw, json) Hash identifier: XALGmqEPCRoinJHu3svVX1blbmnrCjn432q3agM7tHg= Subject key identifier: 57:6E:09:9B:13:E3:A0:9F:EC:1A:39:12:FB:9E:0E:D7:97:9A:7C:42 Authority key identifier: B4:93:A5:CE:BF:09:E1:0B:C3:5D:9A:C2:21:1D:AF:D2:09:56:87:DA Certificate issuer: /CN=B493A5CEBF09E10BC35D9AC2211DAFD2095687DA Certificate serial: 03257D1F0B8EE37BCD5FDB41E372593FD91A4CCD Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B493A5CEBF09E10BC35D9AC2211DAFD2095687DA.cer Subject info access: rsync://repo-rpki.idnic.net/repo/4bdb1e0a-a4ec-49db-be89-8d7e7fc2c227/0/B493A5CEBF09E10BC35D9AC2211DAFD2095687DA.mft Manifest number: 0713 Signing time: Sun 19 Oct 2025 11:00:03 +0000 Manifest this update: Sun 19 Oct 2025 10:55:03 +0000 Manifest next update: Wed 22 Oct 2025 18:18:03 +0000 Files and hashes: 1: AS139994.roa (hash: mQEJNXJ3XVh/s4Uqn72Xq0FcwJo74FkotAw0eOv4kCI=) 2: AS17885.roa (hash: RX8oo/DiJqJzJBqmubTqeGmmpOVT1csa63gvxFqyKec=) 3: B493A5CEBF09E10BC35D9AC2211DAFD2095687DA.crl (hash: HZ+7/LI9+mVql4o2tp/ANvZ5Th3c8UIRKFoAxKOFwho=) 4: AS24203.roa (hash: C68gmTP9H6AGgXibFFHApE8cuP0Li5Pg7Pn1ljOTa6g=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/4bdb1e0a-a4ec-49db-be89-8d7e7fc2c227/0/B493A5CEBF09E10BC35D9AC2211DAFD2095687DA.crl rsync://repo-rpki.idnic.net/repo/4bdb1e0a-a4ec-49db-be89-8d7e7fc2c227/0/B493A5CEBF09E10BC35D9AC2211DAFD2095687DA.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B493A5CEBF09E10BC35D9AC2211DAFD2095687DA.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 Oct 2025 18:18:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 03:25:7d:1f:0b:8e:e3:7b:cd:5f:db:41:e3:72:59:3f:d9:1a:4c:cd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B493A5CEBF09E10BC35D9AC2211DAFD2095687DA Validity Not Before: Oct 19 10:55:03 2025 GMT Not After : Oct 22 18:18:03 2025 GMT Subject: CN=576E099B13E3A09FEC1A3912FB9E0ED7979A7C42 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:6d:de:b1:b9:ff:19:a4:a8:52:ad:e3:52:05: 03:fb:07:61:60:c4:25:3b:fc:37:53:0f:88:8f:1c: da:1d:50:60:2c:44:9e:59:90:f3:7a:b6:0c:82:ef: 3c:73:a2:02:b2:24:7f:bd:3b:70:0a:e0:96:3e:2e: 65:ea:27:f6:cd:2c:3b:6d:66:a9:1e:bb:ca:38:51: ff:d6:a4:b6:c8:d8:b7:03:56:39:b8:85:18:64:b6: 05:91:7f:0c:d0:f0:8d:54:c0:3c:6b:f8:a0:8e:94: 55:25:30:35:1f:78:c5:c7:11:cd:ae:5b:30:48:5e: ec:af:a0:b6:9a:f0:8f:70:b6:c9:0b:6a:cc:4a:d0: 23:e5:f9:17:75:0d:f3:42:6a:15:4c:1f:c6:8b:c8: 2b:ad:1d:65:64:28:5c:50:fb:1f:7e:88:e4:5e:cb: 58:6a:8c:3f:a1:27:28:f3:55:1b:6c:45:9c:a7:07: 15:09:75:68:11:32:19:2c:b9:3c:4d:b4:d8:07:f7: da:93:94:54:32:8c:05:6b:5d:a6:3a:d5:c5:c0:8e: bc:89:01:a4:60:7a:a6:20:a3:4d:af:68:2d:e9:90: 05:f9:b4:2c:dc:b5:3e:9a:99:aa:6c:02:7b:8f:8d: b3:1c:bb:40:16:3d:43:0e:24:cc:1e:82:50:dd:89: 41:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 57:6E:09:9B:13:E3:A0:9F:EC:1A:39:12:FB:9E:0E:D7:97:9A:7C:42 X509v3 Authority Key Identifier: keyid:B4:93:A5:CE:BF:09:E1:0B:C3:5D:9A:C2:21:1D:AF:D2:09:56:87:DA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/4bdb1e0a-a4ec-49db-be89-8d7e7fc2c227/0/B493A5CEBF09E10BC35D9AC2211DAFD2095687DA.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B493A5CEBF09E10BC35D9AC2211DAFD2095687DA.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/4bdb1e0a-a4ec-49db-be89-8d7e7fc2c227/0/B493A5CEBF09E10BC35D9AC2211DAFD2095687DA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 70:bf:d8:5e:59:3f:19:c7:f1:88:d2:58:ec:9a:a7:72:bf:db: a1:8a:5d:b3:8c:40:96:50:1d:34:b1:3c:1c:4b:8c:c8:9e:4f: 11:13:c5:7d:b9:a6:0a:e5:19:ff:32:bc:41:f2:4f:08:dd:c7: 5c:25:c9:70:be:b2:e0:7f:86:ca:88:9e:a8:bc:00:04:85:3c: be:c5:9a:ed:f3:28:0a:3a:50:33:be:c4:17:88:58:6b:2b:8d: f3:33:df:14:81:83:4c:70:a8:47:6a:ac:94:bf:d6:8d:5a:c4: 41:e7:29:dd:71:f2:25:a5:35:0b:40:00:59:76:04:d1:e8:66: f5:76:95:8e:2c:f9:75:8d:5a:37:aa:b2:35:be:39:ad:2b:64: 99:9b:d9:bc:82:a1:0b:09:a4:68:3e:c1:24:79:d1:79:1a:86: 19:0b:9c:91:d1:55:41:85:51:cd:82:a0:ed:95:38:e1:cc:ca: 46:79:43:d2:17:e7:f1:d6:8e:a6:a0:02:55:09:2c:ca:41:f9: e1:37:bd:46:a4:c1:f5:31:84:d2:df:61:17:75:f2:41:af:e9: e6:62:8a:08:bb:6f:7e:26:e9:4b:18:ac:dc:cc:b8:ab:17:aa: 54:ea:9a:f5:ca:db:33:3d:db:2b:56:d6:39:fb:2b:bc:c1:d6: 8d:4e:c9:cb -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUAyV9HwuO43vNX9tB43JZP9kaTM0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjQ5M0E1Q0VCRjA5RTEwQkMzNUQ5QUMyMjExREFGRDIw OTU2ODdEQTAeFw0yNTEwMTkxMDU1MDNaFw0yNTEwMjIxODE4MDNaMDMxMTAvBgNV BAMTKDU3NkUwOTlCMTNFM0EwOUZFQzFBMzkxMkZCOUUwRUQ3OTc5QTdDNDIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQChbd6xuf8ZpKhSreNSBQP7B2Fg xCU7/DdTD4iPHNodUGAsRJ5ZkPN6tgyC7zxzogKyJH+9O3AK4JY+LmXqJ/bNLDtt Zqkeu8o4Uf/WpLbI2LcDVjm4hRhktgWRfwzQ8I1UwDxr+KCOlFUlMDUfeMXHEc2u WzBIXuyvoLaa8I9wtskLasxK0CPl+Rd1DfNCahVMH8aLyCutHWVkKFxQ+x9+iORe y1hqjD+hJyjzVRtsRZynBxUJdWgRMhksuTxNtNgH99qTlFQyjAVrXaY61cXAjryJ AaRgeqYgo02vaC3pkAX5tCzctT6amapsAnuPjbMcu0AWPUMOJMweglDdiUFtAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUV24JmxPjoJ/sGjkS+54O15eafEIwHwYDVR0j BBgwFoAUtJOlzr8J4QvDXZrCIR2v0glWh9owDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 YmRiMWUwYS1hNGVjLTQ5ZGItYmU4OS04ZDdlN2ZjMmMyMjcvMC9CNDkzQTVDRUJG MDlFMTBCQzM1RDlBQzIyMTFEQUZEMjA5NTY4N0RBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQjQ5M0E1Q0VCRjA5RTEwQkMzNUQ5QUMyMjExREFGRDIwOTU2 ODdEQS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNGJkYjFlMGEtYTRlYy00OWRiLWJl ODktOGQ3ZTdmYzJjMjI3LzAvQjQ5M0E1Q0VCRjA5RTEwQkMzNUQ5QUMyMjExREFG RDIwOTU2ODdEQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHC/2F5ZPxnH8YjSWOyap3K/26GKXbOMQJZQ HTSxPBxLjMieTxETxX25pgrlGf8yvEHyTwjdx1wlyXC+suB/hsqInqi8AASFPL7F mu3zKAo6UDO+xBeIWGsrjfMz3xSBg0xwqEdqrJS/1o1axEHnKd1x8iWlNQtAAFl2 BNHoZvV2lY4s+XWNWjeqsjW+Oa0rZJmb2byCoQsJpGg+wSR50XkahhkLnJHRVUGF Uc2CoO2VOOHMykZ5Q9IX5/HWjqagAlUJLMpB+eE3vUakwfUxhNLfYRd18kGv6eZi igi7b34m6UsYrNzMuKsXqlTqmvXK2zM92ytW1jn7K7zB1o1Oycs= -----END CERTIFICATE-----Generated at Mon Oct 20 09:23:17 2025 by rpki-client