$ rpki-client -vvf repo-rpki.idnic.net/repo/7794da40-b37e-4fe6-8f40-73b3b0be019f/0/B4A42192F8CDBE935CE5927E5AD3C63C8196152D.mft File: B4A42192F8CDBE935CE5927E5AD3C63C8196152D.mft (raw, json) Hash identifier: 6XQV9/JGoMl4BMDzRMBVR3YAMuHOtYjej95wwWSOt4Y= Subject key identifier: 8F:E3:0D:8D:A3:A8:6D:CA:41:E2:97:31:B8:8A:D7:C4:8E:40:5E:F2 Authority key identifier: B4:A4:21:92:F8:CD:BE:93:5C:E5:92:7E:5A:D3:C6:3C:81:96:15:2D Certificate issuer: /CN=B4A42192F8CDBE935CE5927E5AD3C63C8196152D Certificate serial: 1134285AEE19F20FFC87FD5E0572AE3CD6E407F9 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B4A42192F8CDBE935CE5927E5AD3C63C8196152D.cer Subject info access: rsync://repo-rpki.idnic.net/repo/7794da40-b37e-4fe6-8f40-73b3b0be019f/0/B4A42192F8CDBE935CE5927E5AD3C63C8196152D.mft Manifest number: 01B6 Signing time: Mon 20 Oct 2025 06:10:56 +0000 Manifest this update: Mon 20 Oct 2025 06:05:56 +0000 Manifest next update: Thu 23 Oct 2025 16:44:56 +0000 Files and hashes: 1: B4A42192F8CDBE935CE5927E5AD3C63C8196152D.crl (hash: nyICh3yb6D5hS9oBz/KcQJ2iOYdxXEM+XETHk+MeZ5I=) 2: 3130332e35352e32322e302f32332d3234203d3e20313530343930.roa (hash: qiaxwvksmM66atpVD6z5NciBUAyVEKleM/kHb9VhlSw=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/7794da40-b37e-4fe6-8f40-73b3b0be019f/0/B4A42192F8CDBE935CE5927E5AD3C63C8196152D.crl rsync://repo-rpki.idnic.net/repo/7794da40-b37e-4fe6-8f40-73b3b0be019f/0/B4A42192F8CDBE935CE5927E5AD3C63C8196152D.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B4A42192F8CDBE935CE5927E5AD3C63C8196152D.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 Oct 2025 11:48:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 11:34:28:5a:ee:19:f2:0f:fc:87:fd:5e:05:72:ae:3c:d6:e4:07:f9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B4A42192F8CDBE935CE5927E5AD3C63C8196152D Validity Not Before: Oct 20 06:05:56 2025 GMT Not After : Oct 23 16:44:56 2025 GMT Subject: CN=8FE30D8DA3A86DCA41E29731B88AD7C48E405EF2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:fa:43:10:ab:6c:68:49:eb:f9:f7:85:d0:5f: bd:cc:e2:d5:22:f8:1f:09:ab:d2:7b:9e:a9:c9:40: 4a:97:c0:a0:4c:3b:b3:18:14:ff:71:d2:b1:17:eb: 5b:8f:15:39:bd:75:22:23:06:fa:63:3b:d6:01:1e: 98:78:f6:56:da:a7:ac:29:42:20:82:43:26:b1:e7: 41:29:0c:22:df:91:df:38:10:84:85:d7:0a:23:51: cc:91:bd:4a:65:e3:a9:7c:94:c7:c3:4a:9b:eb:15: de:dc:6d:42:d5:50:eb:bf:73:0d:64:c7:d4:07:4d: 52:b8:17:73:46:02:54:6f:4b:83:2a:57:75:5f:b1: 8c:29:11:24:82:21:c2:9a:86:5a:b4:0a:0c:38:2d: 7c:ff:0b:a0:5f:92:27:aa:17:f1:9e:90:17:1a:a2: 30:98:5f:ac:9a:aa:3c:7d:9f:bb:13:b9:54:d0:bc: 06:47:ee:83:0e:a4:9a:49:be:0a:fe:92:fd:6d:82: f7:2b:60:38:a6:67:79:d2:0f:74:57:8e:74:a8:93: 92:4a:35:a7:35:be:d9:be:94:25:aa:d0:b9:56:be: 40:63:6c:48:ad:86:20:e6:45:d4:64:cf:4b:46:de: 99:2d:29:eb:33:ca:1e:75:cd:73:47:ed:fc:c5:f4: 7a:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8F:E3:0D:8D:A3:A8:6D:CA:41:E2:97:31:B8:8A:D7:C4:8E:40:5E:F2 X509v3 Authority Key Identifier: keyid:B4:A4:21:92:F8:CD:BE:93:5C:E5:92:7E:5A:D3:C6:3C:81:96:15:2D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/7794da40-b37e-4fe6-8f40-73b3b0be019f/0/B4A42192F8CDBE935CE5927E5AD3C63C8196152D.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B4A42192F8CDBE935CE5927E5AD3C63C8196152D.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/7794da40-b37e-4fe6-8f40-73b3b0be019f/0/B4A42192F8CDBE935CE5927E5AD3C63C8196152D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 70:bc:1a:60:7f:31:92:81:1a:b4:76:62:53:c5:4a:e6:1f:35: 4d:27:5c:31:8a:70:c7:02:3f:0e:2b:1c:ca:bc:8f:62:30:6f: cd:1b:a7:76:51:21:ef:7c:f8:bd:67:9b:9b:4c:41:b4:d7:76: 60:ab:ce:ec:b1:7b:f2:a6:0c:62:de:87:5a:2e:24:47:3b:3a: ed:64:3c:a6:db:4d:4e:b6:d0:cd:a2:cf:2e:04:e6:34:b5:c8: 60:a5:5e:2a:5b:23:26:91:72:db:48:99:d4:7a:0b:da:08:83: d4:81:ba:2d:bb:17:08:af:c1:af:f7:19:8f:dc:9b:1a:d6:71: ed:5a:00:18:87:e0:9e:3e:b2:bb:8e:cc:72:52:bb:03:61:a3: 9a:0f:9d:91:d9:43:b5:88:99:cf:b8:35:ef:34:8d:96:65:8e: b3:cc:a3:fe:12:2a:4a:ad:ef:1d:d2:05:6f:22:6b:15:af:69: ed:05:af:14:ee:c1:e3:63:0a:06:f0:9b:ee:61:e1:c1:90:57: 10:6a:21:15:ab:98:a6:f2:17:8a:09:00:df:a8:7a:3d:c2:c1: 47:9a:34:1a:37:74:e7:61:ad:d6:23:e7:43:e1:40:f2:09:f9: 5b:59:21:49:d6:e9:c1:2b:30:25:f5:e3:5b:83:2f:7d:a7:88: fb:e3:65:9d -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUETQoWu4Z8g/8h/1eBXKuPNbkB/kwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjRBNDIxOTJGOENEQkU5MzVDRTU5MjdFNUFEM0M2M0M4 MTk2MTUyRDAeFw0yNTEwMjAwNjA1NTZaFw0yNTEwMjMxNjQ0NTZaMDMxMTAvBgNV BAMTKDhGRTMwRDhEQTNBODZEQ0E0MUUyOTczMUI4OEFEN0M0OEU0MDVFRjIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCV+kMQq2xoSev594XQX73M4tUi +B8Jq9J7nqnJQEqXwKBMO7MYFP9x0rEX61uPFTm9dSIjBvpjO9YBHph49lbap6wp QiCCQyax50EpDCLfkd84EISF1wojUcyRvUpl46l8lMfDSpvrFd7cbULVUOu/cw1k x9QHTVK4F3NGAlRvS4MqV3VfsYwpESSCIcKahlq0Cgw4LXz/C6BfkieqF/GekBca ojCYX6yaqjx9n7sTuVTQvAZH7oMOpJpJvgr+kv1tgvcrYDimZ3nSD3RXjnSok5JK Nac1vtm+lCWq0LlWvkBjbEithiDmRdRkz0tG3pktKeszyh51zXNH7fzF9HprAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUj+MNjaOobcpB4pcxuIrXxI5AXvIwHwYDVR0j BBgwFoAUtKQhkvjNvpNc5ZJ+WtPGPIGWFS0wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 Nzk0ZGE0MC1iMzdlLTRmZTYtOGY0MC03M2IzYjBiZTAxOWYvMC9CNEE0MjE5MkY4 Q0RCRTkzNUNFNTkyN0U1QUQzQzYzQzgxOTYxNTJELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQjRBNDIxOTJGOENEQkU5MzVDRTU5MjdFNUFEM0M2M0M4MTk2 MTUyRC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNzc5NGRhNDAtYjM3ZS00ZmU2LThm NDAtNzNiM2IwYmUwMTlmLzAvQjRBNDIxOTJGOENEQkU5MzVDRTU5MjdFNUFEM0M2 M0M4MTk2MTUyRC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHC8GmB/MZKBGrR2YlPFSuYfNU0nXDGKcMcC Pw4rHMq8j2Iwb80bp3ZRIe98+L1nm5tMQbTXdmCrzuyxe/KmDGLeh1ouJEc7Ou1k PKbbTU620M2izy4E5jS1yGClXipbIyaRcttImdR6C9oIg9SBui27Fwivwa/3GY/c mxrWce1aABiH4J4+sruOzHJSuwNho5oPnZHZQ7WImc+4Ne80jZZljrPMo/4SKkqt 7x3SBW8iaxWvae0FrxTuweNjCgbwm+5h4cGQVxBqIRWrmKbyF4oJAN+oej3CwUea NBo3dOdhrdYj50PhQPIJ+VtZIUnW6cErMCX141uDL32niPvjZZ0= -----END CERTIFICATE-----Generated at Mon Oct 20 20:28:21 2025 by rpki-client