$ rpki-client -vvf repo-rpki.idnic.net/repo/57cd511f-afff-4fec-8724-d4119f891df2/0/B0B4D0A5FD4E58D80534977B027C8BC68222070F.mft File: B0B4D0A5FD4E58D80534977B027C8BC68222070F.mft (raw, json) Hash identifier: MStpnfjME+jQzmmfMM+4YNnmXve3pEaK1wDauz0B8lo= Subject key identifier: F2:B7:FC:32:E4:20:9E:16:44:F3:97:E8:98:6A:13:7F:B7:F7:99:67 Authority key identifier: B0:B4:D0:A5:FD:4E:58:D8:05:34:97:7B:02:7C:8B:C6:82:22:07:0F Certificate issuer: /CN=B0B4D0A5FD4E58D80534977B027C8BC68222070F Certificate serial: 4B2F52E5331434D646B4D500527DAA8AC890BE75 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B0B4D0A5FD4E58D80534977B027C8BC68222070F.cer Subject info access: rsync://repo-rpki.idnic.net/repo/57cd511f-afff-4fec-8724-d4119f891df2/0/B0B4D0A5FD4E58D80534977B027C8BC68222070F.mft Manifest number: 0393 Signing time: Sat 18 Oct 2025 18:01:23 +0000 Manifest this update: Sat 18 Oct 2025 17:56:23 +0000 Manifest next update: Tue 21 Oct 2025 19:34:23 +0000 Files and hashes: 1: B0B4D0A5FD4E58D80534977B027C8BC68222070F.crl (hash: odT+TI80UcBI2lTc/wS6y4BkCf2OqqVO9lLt+uehBbM=) 2: 3130332e3136342e35362e302f32332d3233203d3e20313431393033.roa (hash: lmDaoh03D9rTDqDSAuHtSlsBls3g0dB3bSo5aCMqbVU=) 3: 3130332e3136342e35372e302f32342d3234203d3e20313431393033.roa (hash: QHTzNtrA62lCbap5pnLy6Afc1/3RNfZE7wu74tOUQBg=) 4: 3130332e3136342e35362e302f32342d3234203d3e20313431393033.roa (hash: BZ7IxyZHQ1xzeEJa2EscxaRyrE0WSeLJOeD3hu5iHH8=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/57cd511f-afff-4fec-8724-d4119f891df2/0/B0B4D0A5FD4E58D80534977B027C8BC68222070F.crl rsync://repo-rpki.idnic.net/repo/57cd511f-afff-4fec-8724-d4119f891df2/0/B0B4D0A5FD4E58D80534977B027C8BC68222070F.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B0B4D0A5FD4E58D80534977B027C8BC68222070F.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 21 Oct 2025 19:34:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4b:2f:52:e5:33:14:34:d6:46:b4:d5:00:52:7d:aa:8a:c8:90:be:75 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B0B4D0A5FD4E58D80534977B027C8BC68222070F Validity Not Before: Oct 18 17:56:23 2025 GMT Not After : Oct 21 19:34:23 2025 GMT Subject: CN=F2B7FC32E4209E1644F397E8986A137FB7F79967 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:db:6b:71:e5:b5:f7:c5:22:a0:20:aa:b3:a0: 02:df:1a:39:2b:ee:aa:34:68:4a:01:50:62:4d:d9: db:e2:5f:48:bc:1b:4f:cf:5e:a7:86:90:2a:0d:2f: df:42:bf:40:75:ef:9c:66:2a:ca:e4:f8:d2:9e:55: c7:8e:f9:ca:f5:10:6a:1c:a1:ed:78:74:b4:8d:cb: a2:0e:9e:c0:0c:28:a9:96:00:36:22:e5:51:1d:c7: 82:60:83:db:ad:ce:fe:8e:ae:fd:1d:f3:46:46:e5: 16:68:ef:89:db:72:c1:67:a4:ce:b0:40:db:c3:b6: 0f:62:83:de:7b:b6:8e:eb:e3:2e:50:18:96:2d:fa: be:71:4f:8b:aa:b7:68:c2:62:1f:bc:68:27:46:51: 0d:1d:09:b6:1c:04:9b:08:02:93:56:86:d1:f2:0e: 60:5a:29:b4:23:df:c2:ac:97:35:ba:d5:a5:a8:e5: 5b:98:7b:7a:b0:74:4b:f0:c0:62:e2:d3:d3:fd:7d: 06:75:e1:90:3b:4e:57:b4:f1:2e:87:81:53:5c:cb: 87:f7:ce:de:68:03:35:68:04:38:48:77:1f:ce:aa: 30:0d:fd:1c:3a:85:17:11:cd:9b:ef:06:9f:a4:93: 9f:0d:ea:c7:d1:39:46:cc:f2:4e:83:10:fa:09:68: e8:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F2:B7:FC:32:E4:20:9E:16:44:F3:97:E8:98:6A:13:7F:B7:F7:99:67 X509v3 Authority Key Identifier: keyid:B0:B4:D0:A5:FD:4E:58:D8:05:34:97:7B:02:7C:8B:C6:82:22:07:0F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/57cd511f-afff-4fec-8724-d4119f891df2/0/B0B4D0A5FD4E58D80534977B027C8BC68222070F.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B0B4D0A5FD4E58D80534977B027C8BC68222070F.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/57cd511f-afff-4fec-8724-d4119f891df2/0/B0B4D0A5FD4E58D80534977B027C8BC68222070F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a6:f9:0a:8a:84:26:2f:83:ee:67:44:7b:b3:21:3c:03:74:fe: c3:42:64:d4:f3:78:1b:7a:0a:a1:e6:d2:8e:50:2b:c2:85:ad: 3a:0c:cd:55:83:e8:83:53:bb:ec:09:3b:d0:8f:c2:8a:e5:7d: 8e:df:cf:57:94:08:1a:a6:1c:31:1e:e9:76:a6:f1:47:cb:61: 12:4b:c4:45:00:72:ca:7e:6c:7a:7c:27:8c:61:59:5f:3e:0d: a6:15:72:b3:62:77:41:18:7b:9c:75:35:9b:80:5d:41:00:80: eb:d3:10:16:8b:40:1e:3d:7e:5b:9e:8b:7c:e0:fb:7e:d0:99: 9d:b6:12:de:c0:39:dd:9b:7a:46:f6:49:f5:6b:93:26:63:c9: ac:48:f7:21:b8:95:f3:34:ef:76:96:61:39:17:79:8b:a4:6b: 36:05:99:8f:6e:b6:4f:d6:a4:d4:d0:71:b9:69:29:aa:f2:8f: 25:c9:4f:7e:9e:3e:d2:5c:9b:76:4e:21:64:d6:ef:82:4b:1c: bf:e8:90:5a:ba:7e:8c:03:28:b5:6d:c5:e3:a7:86:c8:f6:fb: d4:70:c1:c1:ec:fe:67:5f:62:44:1d:9a:ea:17:e7:53:c5:2b: f2:6c:77:71:24:a3:f5:b3:ea:d3:8f:33:43:ac:3b:8b:6e:45: 1a:5f:a4:4c -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUSy9S5TMUNNZGtNUAUn2qisiQvnUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjBCNEQwQTVGRDRFNThEODA1MzQ5NzdCMDI3QzhCQzY4 MjIyMDcwRjAeFw0yNTEwMTgxNzU2MjNaFw0yNTEwMjExOTM0MjNaMDMxMTAvBgNV BAMTKEYyQjdGQzMyRTQyMDlFMTY0NEYzOTdFODk4NkExMzdGQjdGNzk5NjcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDN22tx5bX3xSKgIKqzoALfGjkr 7qo0aEoBUGJN2dviX0i8G0/PXqeGkCoNL99Cv0B175xmKsrk+NKeVceO+cr1EGoc oe14dLSNy6IOnsAMKKmWADYi5VEdx4Jgg9utzv6Orv0d80ZG5RZo74nbcsFnpM6w QNvDtg9ig957to7r4y5QGJYt+r5xT4uqt2jCYh+8aCdGUQ0dCbYcBJsIApNWhtHy DmBaKbQj38KslzW61aWo5VuYe3qwdEvwwGLi09P9fQZ14ZA7Tle08S6HgVNcy4f3 zt5oAzVoBDhIdx/OqjAN/Rw6hRcRzZvvBp+kk58N6sfROUbM8k6DEPoJaOhVAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU8rf8MuQgnhZE85fomGoTf7f3mWcwHwYDVR0j BBgwFoAUsLTQpf1OWNgFNJd7AnyLxoIiBw8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 N2NkNTExZi1hZmZmLTRmZWMtODcyNC1kNDExOWY4OTFkZjIvMC9CMEI0RDBBNUZE NEU1OEQ4MDUzNDk3N0IwMjdDOEJDNjgyMjIwNzBGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQjBCNEQwQTVGRDRFNThEODA1MzQ5NzdCMDI3QzhCQzY4MjIy MDcwRi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNTdjZDUxMWYtYWZmZi00ZmVjLTg3 MjQtZDQxMTlmODkxZGYyLzAvQjBCNEQwQTVGRDRFNThEODA1MzQ5NzdCMDI3QzhC QzY4MjIyMDcwRi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKb5CoqEJi+D7mdEe7MhPAN0/sNCZNTzeBt6 CqHm0o5QK8KFrToMzVWD6INTu+wJO9CPworlfY7fz1eUCBqmHDEe6Xam8UfLYRJL xEUAcsp+bHp8J4xhWV8+DaYVcrNid0EYe5x1NZuAXUEAgOvTEBaLQB49fluei3zg +37QmZ22Et7AOd2bekb2SfVrkyZjyaxI9yG4lfM073aWYTkXeYukazYFmY9utk/W pNTQcblpKaryjyXJT36ePtJcm3ZOIWTW74JLHL/okFq6fowDKLVtxeOnhsj2+9Rw wcHs/mdfYkQdmuoX51PFK/Jsd3Eko/Wz6tOPM0OsO4tuRRpfpEw= -----END CERTIFICATE-----Generated at Mon Oct 20 15:54:25 2025 by rpki-client