$ rpki-client -vvf repo-rpki.idnic.net/repo/5bf2cf03-f9f9-4bca-8c2c-6073280dfea8/0/B392381083372148D0977D0066CFF38FD5A32CDB.mft File: B392381083372148D0977D0066CFF38FD5A32CDB.mft (raw, json) Hash identifier: j4U28e6xEKAvH2Wm0LpyuOr6nCYS1RApNIZjTP+GiMs= Subject key identifier: 48:34:45:FD:70:F5:B3:04:23:3B:CC:76:23:12:CE:8F:54:3D:A9:C1 Authority key identifier: B3:92:38:10:83:37:21:48:D0:97:7D:00:66:CF:F3:8F:D5:A3:2C:DB Certificate issuer: /CN=B392381083372148D0977D0066CFF38FD5A32CDB Certificate serial: 714B981A3532EB9A5704B886DC1F8566719CBCFC Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B392381083372148D0977D0066CFF38FD5A32CDB.cer Subject info access: rsync://repo-rpki.idnic.net/repo/5bf2cf03-f9f9-4bca-8c2c-6073280dfea8/0/B392381083372148D0977D0066CFF38FD5A32CDB.mft Manifest number: 0243 Signing time: Mon 20 Oct 2025 02:42:00 +0000 Manifest this update: Mon 20 Oct 2025 02:37:00 +0000 Manifest next update: Thu 23 Oct 2025 04:25:00 +0000 Files and hashes: 1: B392381083372148D0977D0066CFF38FD5A32CDB.crl (hash: UgImq4hH5JcV/Rq2nRVA9xa1egJL54f7ohT6IZZg4KE=) 2: 3130332e3138352e38322e302f32332d3234203d3e203538383230.roa (hash: HSEFfxxLTR9pPfTqUIYx4lI4vavTZEpGUjc26Y26XRA=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/5bf2cf03-f9f9-4bca-8c2c-6073280dfea8/0/B392381083372148D0977D0066CFF38FD5A32CDB.crl rsync://repo-rpki.idnic.net/repo/5bf2cf03-f9f9-4bca-8c2c-6073280dfea8/0/B392381083372148D0977D0066CFF38FD5A32CDB.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B392381083372148D0977D0066CFF38FD5A32CDB.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 Oct 2025 04:25:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 71:4b:98:1a:35:32:eb:9a:57:04:b8:86:dc:1f:85:66:71:9c:bc:fc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B392381083372148D0977D0066CFF38FD5A32CDB Validity Not Before: Oct 20 02:37:00 2025 GMT Not After : Oct 23 04:25:00 2025 GMT Subject: CN=483445FD70F5B304233BCC762312CE8F543DA9C1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:3a:8f:5c:16:87:b2:de:da:31:ef:cd:f8:b7: e1:3d:b0:15:a4:1d:0b:fc:1a:53:a1:de:38:fb:86: c3:c9:3f:6a:b7:6b:67:22:55:a5:5b:17:91:28:38: 9c:90:bf:00:b9:be:0b:1c:77:46:f7:a6:d2:ba:28: 9f:88:77:9d:c8:2c:50:66:c6:18:28:6a:13:05:97: 70:0e:56:5e:cb:e1:71:a6:70:a5:62:b9:ad:2b:43: 26:d8:37:fe:46:1a:5f:c0:56:69:80:c2:5f:26:de: 62:76:dc:65:5d:be:ee:6b:2a:95:02:99:63:0c:4c: 53:06:e5:3e:23:bd:6e:d3:0d:2f:b8:15:48:fb:1b: 33:33:e4:20:35:32:40:52:4f:ea:47:12:86:07:bd: 9a:6f:73:9c:03:37:87:ae:2e:4b:83:df:01:fe:a2: 7c:5f:fa:2c:77:5e:2a:24:86:d1:fe:76:df:a3:6f: 7f:7f:d1:7f:56:5e:d7:55:67:52:35:e7:3d:74:be: 66:e4:1c:2e:89:f9:62:ce:22:ed:98:81:3a:e8:b2: d1:25:8b:b1:ad:58:45:5c:ac:b0:89:9b:2c:b0:88: 40:ea:3f:71:10:db:3b:6d:b3:01:38:a5:94:bc:c0: d7:8b:d2:a3:2f:3b:ed:d2:64:61:bb:77:15:8e:9a: cc:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 48:34:45:FD:70:F5:B3:04:23:3B:CC:76:23:12:CE:8F:54:3D:A9:C1 X509v3 Authority Key Identifier: keyid:B3:92:38:10:83:37:21:48:D0:97:7D:00:66:CF:F3:8F:D5:A3:2C:DB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/5bf2cf03-f9f9-4bca-8c2c-6073280dfea8/0/B392381083372148D0977D0066CFF38FD5A32CDB.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B392381083372148D0977D0066CFF38FD5A32CDB.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/5bf2cf03-f9f9-4bca-8c2c-6073280dfea8/0/B392381083372148D0977D0066CFF38FD5A32CDB.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 97:aa:25:63:cf:89:65:10:dc:75:47:2e:af:ef:21:65:a6:e5: c6:13:e8:0c:49:57:63:69:b9:92:9d:65:d8:a2:94:82:91:f7: 8c:9c:bd:92:12:99:25:1f:f2:e0:db:4d:f3:80:4c:a6:53:42: bd:58:ac:07:e8:67:19:c4:4e:a9:4d:e9:38:53:9c:98:51:ea: 10:9e:e9:ff:c9:7b:ab:2a:03:bb:2b:7c:91:68:b2:00:13:10: d9:96:ac:19:a9:05:76:3e:fe:70:30:1d:d1:c2:ff:0f:8e:d4: 21:b7:b5:f7:b4:91:29:08:68:b1:23:6d:3c:48:c1:e7:78:9c: 57:86:2b:4a:d7:e1:38:57:57:5a:c8:5e:e8:02:42:44:89:16: fb:1a:1e:e1:2c:8f:72:22:4e:3b:5c:c4:4c:4c:7a:f7:6f:23: b5:96:8d:88:c3:54:c8:b3:27:23:22:22:ee:a4:4a:7e:40:35: 94:8f:29:8b:81:53:d9:c0:1a:0c:69:62:62:79:ac:40:1f:e4: 35:34:ab:31:ce:83:7f:05:8b:0c:b7:2b:78:59:53:26:92:09: 53:9b:c9:71:04:69:64:c2:d9:2a:a5:80:84:f0:e9:34:28:55: 0e:dc:50:39:ca:26:d0:31:b9:d7:a4:b4:cb:df:eb:40:48:ed: 6b:4f:d1:aa -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUcUuYGjUy65pXBLiG3B+FZnGcvPwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjM5MjM4MTA4MzM3MjE0OEQwOTc3RDAwNjZDRkYzOEZE NUEzMkNEQjAeFw0yNTEwMjAwMjM3MDBaFw0yNTEwMjMwNDI1MDBaMDMxMTAvBgNV BAMTKDQ4MzQ0NUZENzBGNUIzMDQyMzNCQ0M3NjIzMTJDRThGNTQzREE5QzEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC0Oo9cFoey3tox7834t+E9sBWk HQv8GlOh3jj7hsPJP2q3a2ciVaVbF5EoOJyQvwC5vgscd0b3ptK6KJ+Id53ILFBm xhgoahMFl3AOVl7L4XGmcKViua0rQybYN/5GGl/AVmmAwl8m3mJ23GVdvu5rKpUC mWMMTFMG5T4jvW7TDS+4FUj7GzMz5CA1MkBST+pHEoYHvZpvc5wDN4euLkuD3wH+ onxf+ix3XiokhtH+dt+jb39/0X9WXtdVZ1I15z10vmbkHC6J+WLOIu2YgTrostEl i7GtWEVcrLCJmyywiEDqP3EQ2zttswE4pZS8wNeL0qMvO+3SZGG7dxWOmswlAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUSDRF/XD1swQjO8x2IxLOj1Q9qcEwHwYDVR0j BBgwFoAUs5I4EIM3IUjQl30AZs/zj9WjLNswDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 YmYyY2YwMy1mOWY5LTRiY2EtOGMyYy02MDczMjgwZGZlYTgvMC9CMzkyMzgxMDgz MzcyMTQ4RDA5NzdEMDA2NkNGRjM4RkQ1QTMyQ0RCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQjM5MjM4MTA4MzM3MjE0OEQwOTc3RDAwNjZDRkYzOEZENUEz MkNEQi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNWJmMmNmMDMtZjlmOS00YmNhLThj MmMtNjA3MzI4MGRmZWE4LzAvQjM5MjM4MTA4MzM3MjE0OEQwOTc3RDAwNjZDRkYz OEZENUEzMkNEQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJeqJWPPiWUQ3HVHLq/vIWWm5cYT6AxJV2Np uZKdZdiilIKR94ycvZISmSUf8uDbTfOATKZTQr1YrAfoZxnETqlN6ThTnJhR6hCe 6f/Je6sqA7srfJFosgATENmWrBmpBXY+/nAwHdHC/w+O1CG3tfe0kSkIaLEjbTxI wed4nFeGK0rX4ThXV1rIXugCQkSJFvsaHuEsj3IiTjtcxExMevdvI7WWjYjDVMiz JyMiIu6kSn5ANZSPKYuBU9nAGgxpYmJ5rEAf5DU0qzHOg38Fiwy3K3hZUyaSCVOb yXEEaWTC2SqlgITw6TQoVQ7cUDnKJtAxudektMvf60BI7WtP0ao= -----END CERTIFICATE-----Generated at Mon Oct 20 09:44:38 2025 by rpki-client