$ rpki-client -vvf repo-rpki.idnic.net/repo/6a9e2898-023b-4741-8735-a0718cc6cf2b/0/B152586AE46FCAB640629D941147319E05FCF34B.mft File: B152586AE46FCAB640629D941147319E05FCF34B.mft (raw, json) Hash identifier: lByIazcrtqZhQTolI1fQU/qBriMTd4mJbNvtI11pGnY= Subject key identifier: 04:CA:52:41:67:A7:D8:A9:7C:74:31:1C:F7:CB:58:E3:37:40:43:4A Authority key identifier: B1:52:58:6A:E4:6F:CA:B6:40:62:9D:94:11:47:31:9E:05:FC:F3:4B Certificate issuer: /CN=B152586AE46FCAB640629D941147319E05FCF34B Certificate serial: 178D3584E87CE878DE55123EB64AA3D0C1762B58 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B152586AE46FCAB640629D941147319E05FCF34B.cer Subject info access: rsync://repo-rpki.idnic.net/repo/6a9e2898-023b-4741-8735-a0718cc6cf2b/0/B152586AE46FCAB640629D941147319E05FCF34B.mft Manifest number: 024A Signing time: Sun 19 Oct 2025 11:11:01 +0000 Manifest this update: Sun 19 Oct 2025 11:06:01 +0000 Manifest next update: Wed 22 Oct 2025 20:57:01 +0000 Files and hashes: 1: 3130332e3137362e3232372e302f32342d3234203d3e20313437313534.roa (hash: 6c26JZWNMMIKbz8QiOgDDGQqpXGJuiNocLMDMSpKyVk=) 2: 323030313a6466303a376334303a3a2f34382d3438203d3e20313437313534.roa (hash: y0s8YGn9mHg2T9EeIiu21b9Ye25qY26dsfL13en5ZUs=) 3: B152586AE46FCAB640629D941147319E05FCF34B.crl (hash: UI/5AvEDo/BtRNxKCGC8+cDUvkDF3R1lAij5dykr/ZY=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/6a9e2898-023b-4741-8735-a0718cc6cf2b/0/B152586AE46FCAB640629D941147319E05FCF34B.crl rsync://repo-rpki.idnic.net/repo/6a9e2898-023b-4741-8735-a0718cc6cf2b/0/B152586AE46FCAB640629D941147319E05FCF34B.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B152586AE46FCAB640629D941147319E05FCF34B.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 Oct 2025 20:57:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 17:8d:35:84:e8:7c:e8:78:de:55:12:3e:b6:4a:a3:d0:c1:76:2b:58 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B152586AE46FCAB640629D941147319E05FCF34B Validity Not Before: Oct 19 11:06:01 2025 GMT Not After : Oct 22 20:57:01 2025 GMT Subject: CN=04CA524167A7D8A97C74311CF7CB58E33740434A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:fd:a5:b0:5a:d1:94:e5:ac:1b:75:50:6a:a9: 75:4e:36:4b:e4:9a:3a:61:52:25:8e:97:54:63:ff: b9:90:7b:f8:b3:81:85:76:f1:0c:e5:ea:3b:28:cd: ff:e5:27:5b:b2:d7:b5:8c:5f:32:3c:ed:59:ca:e0: 62:88:04:a1:24:5a:96:28:22:b7:f8:85:81:8a:1c: 9a:73:b5:0d:ac:79:ff:16:02:a9:81:c3:ce:43:4e: 0f:bf:5a:5c:3d:9b:eb:6a:10:97:06:39:f0:a0:84: 0c:6d:c1:8f:08:1e:58:37:47:bb:44:a1:a4:d6:18: 7c:19:1e:1d:1b:50:88:1d:3e:8a:14:67:91:c0:4d: a5:40:9e:ef:9e:01:62:7f:d0:cf:dc:a7:14:85:94: 63:6d:07:5f:4e:d0:7e:d3:30:64:31:49:19:ca:43: db:c4:f6:57:68:e1:66:ab:d7:9a:64:57:e4:6d:a0: 16:37:f7:fa:d8:08:07:ea:42:d1:c1:d3:a1:73:84: 91:e9:e0:0e:72:85:fc:dc:d2:6a:3e:97:e6:8e:ce: d2:02:26:84:80:ce:45:93:17:18:dc:d5:c9:2f:8f: fe:a1:44:d3:e4:9b:81:bd:3d:88:83:f0:9b:bb:40: 6a:26:f6:58:48:f8:c4:88:1e:ed:27:a2:9c:6d:0e: 74:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 04:CA:52:41:67:A7:D8:A9:7C:74:31:1C:F7:CB:58:E3:37:40:43:4A X509v3 Authority Key Identifier: keyid:B1:52:58:6A:E4:6F:CA:B6:40:62:9D:94:11:47:31:9E:05:FC:F3:4B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/6a9e2898-023b-4741-8735-a0718cc6cf2b/0/B152586AE46FCAB640629D941147319E05FCF34B.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B152586AE46FCAB640629D941147319E05FCF34B.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/6a9e2898-023b-4741-8735-a0718cc6cf2b/0/B152586AE46FCAB640629D941147319E05FCF34B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 83:3e:31:88:7a:a8:a9:6e:0f:b8:85:ce:41:01:ba:8d:22:63: 58:2e:e9:a1:b3:4d:3f:93:f5:d0:68:4a:72:28:d2:3d:7f:9d: 21:fd:34:2e:34:c8:d6:d8:64:bd:5d:13:b7:60:72:9b:ae:47: 4b:0d:70:6f:94:1f:04:e1:01:cd:77:d1:cd:27:85:e4:83:8a: 19:b9:0c:68:f8:00:81:02:6e:19:2e:69:8d:a2:c1:44:23:15: 07:d3:ac:38:8f:77:ff:cb:eb:84:7a:7d:22:9c:72:95:f2:97: a0:76:5d:83:30:eb:e5:e4:a5:a2:4a:32:47:0e:2b:58:d6:67: 0d:f1:e9:18:ac:ad:74:80:da:0e:a9:7a:86:3b:44:46:97:60: c0:95:8e:61:95:9b:39:90:a5:2b:86:68:20:b6:b7:8c:82:1a: 7d:7a:f9:29:a7:a1:94:f9:73:bb:7c:03:1d:16:51:e1:39:6c: 3e:75:64:f0:47:6f:af:7f:63:92:51:3d:9c:6e:8b:68:aa:33: 7b:cf:19:e6:dc:23:14:c8:e6:df:01:46:b1:ab:0b:3a:4d:6b: 35:4f:ed:d4:d1:75:58:46:1a:ce:8a:d9:19:ea:1e:f6:96:ae: aa:87:33:19:59:f7:83:50:61:98:a3:a1:0e:cc:d1:e3:5c:33: bc:b9:6c:70 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUF401hOh86HjeVRI+tkqj0MF2K1gwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjE1MjU4NkFFNDZGQ0FCNjQwNjI5RDk0MTE0NzMxOUUw NUZDRjM0QjAeFw0yNTEwMTkxMTA2MDFaFw0yNTEwMjIyMDU3MDFaMDMxMTAvBgNV BAMTKDA0Q0E1MjQxNjdBN0Q4QTk3Qzc0MzExQ0Y3Q0I1OEUzMzc0MDQzNEEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC0/aWwWtGU5awbdVBqqXVONkvk mjphUiWOl1Rj/7mQe/izgYV28Qzl6jsozf/lJ1uy17WMXzI87VnK4GKIBKEkWpYo Irf4hYGKHJpztQ2sef8WAqmBw85DTg+/Wlw9m+tqEJcGOfCghAxtwY8IHlg3R7tE oaTWGHwZHh0bUIgdPooUZ5HATaVAnu+eAWJ/0M/cpxSFlGNtB19O0H7TMGQxSRnK Q9vE9ldo4War15pkV+RtoBY39/rYCAfqQtHB06FzhJHp4A5yhfzc0mo+l+aOztIC JoSAzkWTFxjc1ckvj/6hRNPkm4G9PYiD8Ju7QGom9lhI+MSIHu0nopxtDnRTAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUBMpSQWen2Kl8dDEc98tY4zdAQ0owHwYDVR0j BBgwFoAUsVJYauRvyrZAYp2UEUcxngX880swDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 YTllMjg5OC0wMjNiLTQ3NDEtODczNS1hMDcxOGNjNmNmMmIvMC9CMTUyNTg2QUU0 NkZDQUI2NDA2MjlEOTQxMTQ3MzE5RTA1RkNGMzRCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQjE1MjU4NkFFNDZGQ0FCNjQwNjI5RDk0MTE0NzMxOUUwNUZD RjM0Qi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNmE5ZTI4OTgtMDIzYi00NzQxLTg3 MzUtYTA3MThjYzZjZjJiLzAvQjE1MjU4NkFFNDZGQ0FCNjQwNjI5RDk0MTE0NzMx OUUwNUZDRjM0Qi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIM+MYh6qKluD7iFzkEBuo0iY1gu6aGzTT+T 9dBoSnIo0j1/nSH9NC40yNbYZL1dE7dgcpuuR0sNcG+UHwThAc130c0nheSDihm5 DGj4AIECbhkuaY2iwUQjFQfTrDiPd//L64R6fSKccpXyl6B2XYMw6+XkpaJKMkcO K1jWZw3x6RisrXSA2g6peoY7REaXYMCVjmGVmzmQpSuGaCC2t4yCGn16+SmnoZT5 c7t8Ax0WUeE5bD51ZPBHb69/Y5JRPZxui2iqM3vPGebcIxTI5t8BRrGrCzpNazVP 7dTRdVhGGs6K2RnqHvaWrqqHMxlZ94NQYZijoQ7M0eNcM7y5bHA= -----END CERTIFICATE-----Generated at Mon Oct 20 21:36:53 2025 by rpki-client