$ rpki-client -vvf repo-rpki.idnic.net/repo/7cd323be-837d-4244-846c-7d2393a9a009/0/B0928A45D014D8D5FAD50314E828086F12B15610.mft File: B0928A45D014D8D5FAD50314E828086F12B15610.mft (raw, json) Hash identifier: YjXDuvyYczYvuDzci8imFImckBOWi3szfoGvPq74Jk0= Subject key identifier: 09:FD:F0:D4:C5:1D:DD:5A:42:68:A0:35:04:12:8A:B8:65:A7:CE:2F Authority key identifier: B0:92:8A:45:D0:14:D8:D5:FA:D5:03:14:E8:28:08:6F:12:B1:56:10 Certificate issuer: /CN=B0928A45D014D8D5FAD50314E828086F12B15610 Certificate serial: 3FAB00AB90FB7B58D7B5FFE940BC8BA5054EE481 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B0928A45D014D8D5FAD50314E828086F12B15610.cer Subject info access: rsync://repo-rpki.idnic.net/repo/7cd323be-837d-4244-846c-7d2393a9a009/0/B0928A45D014D8D5FAD50314E828086F12B15610.mft Manifest number: 031B Signing time: Sat 18 Oct 2025 18:11:15 +0000 Manifest this update: Sat 18 Oct 2025 18:06:15 +0000 Manifest next update: Wed 22 Oct 2025 04:28:15 +0000 Files and hashes: 1: 3230322e3132352e38322e302f32332d3233203d3e20313430343433.roa (hash: g4b6/Xa0b41J+1gc8Xz+JaVY6mTt5QNosbt82K9ZCLY=) 2: 3230322e3132352e38332e302f32342d3234203d3e20313430343433.roa (hash: Ky8MrLU9AvVMvZfrLkoaRO/9X/2qSweH3weFbcGoV3c=) 3: B0928A45D014D8D5FAD50314E828086F12B15610.crl (hash: 9KHf10MvLuX3vXcVXdHft7XS8tbfzwr0q6BSJcX1/zc=) 4: 3230322e37302e3133322e302f32342d3234203d3e20313430343433.roa (hash: hnSe2L9heULKYvVeefFY6CeCDXE6iTWu+s4r/qCo/4o=) 5: 3230322e37302e3133322e302f32332d3233203d3e20313430343433.roa (hash: unxNSSNtfbW/QtJSHv1+Jppsd16Z88+qlZSg2ZXLUc0=) 6: 3230322e3132352e38322e302f32342d3234203d3e20313430343433.roa (hash: svi5IuXnIA+13Wc0eQrV3WQdaOBiVClli1PIWM+ewGc=) 7: 3230322e37302e3133332e302f32342d3234203d3e20313430343433.roa (hash: wdtK/qmLPSYK98usl8We2OAmclE1Y5QskILTtOqsrh0=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/7cd323be-837d-4244-846c-7d2393a9a009/0/B0928A45D014D8D5FAD50314E828086F12B15610.crl rsync://repo-rpki.idnic.net/repo/7cd323be-837d-4244-846c-7d2393a9a009/0/B0928A45D014D8D5FAD50314E828086F12B15610.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B0928A45D014D8D5FAD50314E828086F12B15610.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 Oct 2025 04:28:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3f:ab:00:ab:90:fb:7b:58:d7:b5:ff:e9:40:bc:8b:a5:05:4e:e4:81 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B0928A45D014D8D5FAD50314E828086F12B15610 Validity Not Before: Oct 18 18:06:15 2025 GMT Not After : Oct 22 04:28:15 2025 GMT Subject: CN=09FDF0D4C51DDD5A4268A03504128AB865A7CE2F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:cb:28:f0:48:32:23:ca:2b:3d:79:4f:ea:bf: f4:06:0c:fa:30:2f:a7:ee:de:0d:4c:3c:e3:ce:24: b8:4a:ce:4c:d3:06:78:30:3b:69:22:e7:6a:3f:b9: 7a:ba:50:0b:63:97:ba:57:36:e0:ff:5b:18:46:e5: 1b:d8:fd:ee:e9:70:8b:fa:4f:5a:3b:22:1f:58:d8: cc:b8:bc:89:1b:66:9c:71:f2:59:90:1a:f2:25:1c: 13:38:36:f1:08:a3:18:e6:31:eb:48:f4:02:ac:00: 37:49:6b:f4:57:4c:9d:88:46:a5:fd:65:f4:b6:4b: 14:48:c8:d3:7b:22:28:96:61:cb:0e:ae:b9:22:a0: c1:62:ce:80:d2:19:33:64:56:f4:d3:b9:32:5a:60: 4d:95:e4:72:e3:b5:65:eb:ad:09:7c:9a:77:63:a1: b9:89:36:19:17:2d:b7:26:dd:f3:2e:10:83:1e:4d: 42:ff:d9:3f:13:bb:48:77:5a:50:de:85:c4:1d:c7: 86:4d:0a:7c:b0:21:59:93:f1:1c:2f:03:89:31:1e: 67:9a:5b:6c:be:14:64:6a:92:92:23:31:8d:3b:9b: ca:6f:d9:d8:49:5f:6f:c9:42:6f:a5:5a:60:b4:dc: db:8a:e5:62:75:42:e2:8e:40:f4:53:41:0b:b6:7d: d4:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:FD:F0:D4:C5:1D:DD:5A:42:68:A0:35:04:12:8A:B8:65:A7:CE:2F X509v3 Authority Key Identifier: keyid:B0:92:8A:45:D0:14:D8:D5:FA:D5:03:14:E8:28:08:6F:12:B1:56:10 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/7cd323be-837d-4244-846c-7d2393a9a009/0/B0928A45D014D8D5FAD50314E828086F12B15610.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B0928A45D014D8D5FAD50314E828086F12B15610.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/7cd323be-837d-4244-846c-7d2393a9a009/0/B0928A45D014D8D5FAD50314E828086F12B15610.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 79:68:c2:53:86:ec:b7:bf:08:57:fc:7f:63:b9:24:1d:6a:d1: 55:51:bc:4c:6e:9e:aa:82:0e:e3:73:fa:80:fc:cd:0a:4f:73: 63:76:9f:dd:57:26:3b:a4:ec:db:3b:a1:63:40:1f:4e:bb:39: ef:6b:c0:59:74:5f:47:53:5e:1e:25:97:3f:92:9d:5c:24:7e: 6b:f5:29:b2:23:f9:76:f1:30:ac:0c:5b:94:17:7d:5f:04:89: 9b:83:e9:01:67:da:17:ff:29:69:31:bb:f1:9a:1f:2d:5c:82: 8e:c5:87:f6:3a:b9:10:bb:94:fa:4c:5e:55:1f:3f:4c:c3:02: 3c:ec:d8:fc:ef:75:ae:42:9d:e2:43:09:fc:2f:15:52:9d:12: 2f:9f:59:ed:8b:1f:b0:44:4e:a6:1c:df:07:7f:fa:c4:48:cd: 3a:c6:bf:de:63:46:9c:8f:a2:c9:73:23:05:d6:7a:9c:d9:44: f2:c4:a0:fd:6d:16:5f:9a:12:3f:2e:9c:32:70:c5:67:3a:1d: 2d:0c:4a:af:25:1e:83:83:3d:f5:9e:c3:94:ed:2f:c7:22:25: 51:49:82:c0:c8:7e:41:5d:fe:bf:e7:29:8c:e8:6c:c6:d4:b3: 45:6f:4b:4a:30:66:e8:29:ad:d6:f8:e8:b0:7e:07:fb:ee:43: 15:ec:2f:8c -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUP6sAq5D7e1jXtf/pQLyLpQVO5IEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjA5MjhBNDVEMDE0RDhENUZBRDUwMzE0RTgyODA4NkYx MkIxNTYxMDAeFw0yNTEwMTgxODA2MTVaFw0yNTEwMjIwNDI4MTVaMDMxMTAvBgNV BAMTKDA5RkRGMEQ0QzUxRERENUE0MjY4QTAzNTA0MTI4QUI4NjVBN0NFMkYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCayyjwSDIjyis9eU/qv/QGDPow L6fu3g1MPOPOJLhKzkzTBngwO2ki52o/uXq6UAtjl7pXNuD/WxhG5RvY/e7pcIv6 T1o7Ih9Y2My4vIkbZpxx8lmQGvIlHBM4NvEIoxjmMetI9AKsADdJa/RXTJ2IRqX9 ZfS2SxRIyNN7IiiWYcsOrrkioMFizoDSGTNkVvTTuTJaYE2V5HLjtWXrrQl8mndj obmJNhkXLbcm3fMuEIMeTUL/2T8Tu0h3WlDehcQdx4ZNCnywIVmT8RwvA4kxHmea W2y+FGRqkpIjMY07m8pv2dhJX2/JQm+lWmC03NuK5WJ1QuKOQPRTQQu2fdTRAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUCf3w1MUd3VpCaKA1BBKKuGWnzi8wHwYDVR0j BBgwFoAUsJKKRdAU2NX61QMU6CgIbxKxVhAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 Y2QzMjNiZS04MzdkLTQyNDQtODQ2Yy03ZDIzOTNhOWEwMDkvMC9CMDkyOEE0NUQw MTREOEQ1RkFENTAzMTRFODI4MDg2RjEyQjE1NjEwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQjA5MjhBNDVEMDE0RDhENUZBRDUwMzE0RTgyODA4NkYxMkIx NTYxMC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vN2NkMzIzYmUtODM3ZC00MjQ0LTg0 NmMtN2QyMzkzYTlhMDA5LzAvQjA5MjhBNDVEMDE0RDhENUZBRDUwMzE0RTgyODA4 NkYxMkIxNTYxMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHlowlOG7Le/CFf8f2O5JB1q0VVRvExunqqC DuNz+oD8zQpPc2N2n91XJjuk7Ns7oWNAH067Oe9rwFl0X0dTXh4llz+SnVwkfmv1 KbIj+XbxMKwMW5QXfV8EiZuD6QFn2hf/KWkxu/GaHy1cgo7Fh/Y6uRC7lPpMXlUf P0zDAjzs2Pzvda5CneJDCfwvFVKdEi+fWe2LH7BETqYc3wd/+sRIzTrGv95jRpyP oslzIwXWepzZRPLEoP1tFl+aEj8unDJwxWc6HS0MSq8lHoODPfWew5TtL8ciJVFJ gsDIfkFd/r/nKYzobMbUs0VvS0owZugprdb46LB+B/vuQxXsL4w= -----END CERTIFICATE-----Generated at Tue Oct 21 01:57:55 2025 by rpki-client