$ rpki-client -vvf repo-rpki.idnic.net/repo/85dd4f16-570e-4c8c-a992-db89ea3bad36/0/B2077B9BAF0BF3E5FCB84513B1D7445E30CE6582.mft File: B2077B9BAF0BF3E5FCB84513B1D7445E30CE6582.mft (raw, json) Hash identifier: rTbxMxxYz+vuXNTVs5e74hyjD7Z2GHDzWYR6HLYzmDg= Subject key identifier: DC:D7:D3:D7:29:FD:33:6E:5F:ED:3C:58:D7:0D:89:8B:3C:0A:26:FE Authority key identifier: B2:07:7B:9B:AF:0B:F3:E5:FC:B8:45:13:B1:D7:44:5E:30:CE:65:82 Certificate issuer: /CN=B2077B9BAF0BF3E5FCB84513B1D7445E30CE6582 Certificate serial: 16DA85463F7B915567235A07AA8AFAACDD3A7BA3 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B2077B9BAF0BF3E5FCB84513B1D7445E30CE6582.cer Subject info access: rsync://repo-rpki.idnic.net/repo/85dd4f16-570e-4c8c-a992-db89ea3bad36/0/B2077B9BAF0BF3E5FCB84513B1D7445E30CE6582.mft Manifest number: 048E Signing time: Sun 19 Oct 2025 21:12:03 +0000 Manifest this update: Sun 19 Oct 2025 21:07:03 +0000 Manifest next update: Wed 22 Oct 2025 22:29:03 +0000 Files and hashes: 1: B2077B9BAF0BF3E5FCB84513B1D7445E30CE6582.crl (hash: r8KOjY3fMbmIt12X7OFbCrFNL/ev6tfHNHJ/PSP4EY0=) 2: 3130332e3135372e362e302f32342d3234203d3e20313431313036.roa (hash: 2XQOc628Et0oqO8CO0VRKDq3/7F6VNJ+Q07NK/QPZuc=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/85dd4f16-570e-4c8c-a992-db89ea3bad36/0/B2077B9BAF0BF3E5FCB84513B1D7445E30CE6582.crl rsync://repo-rpki.idnic.net/repo/85dd4f16-570e-4c8c-a992-db89ea3bad36/0/B2077B9BAF0BF3E5FCB84513B1D7445E30CE6582.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B2077B9BAF0BF3E5FCB84513B1D7445E30CE6582.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 Oct 2025 22:29:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 16:da:85:46:3f:7b:91:55:67:23:5a:07:aa:8a:fa:ac:dd:3a:7b:a3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B2077B9BAF0BF3E5FCB84513B1D7445E30CE6582 Validity Not Before: Oct 19 21:07:03 2025 GMT Not After : Oct 22 22:29:03 2025 GMT Subject: CN=DCD7D3D729FD336E5FED3C58D70D898B3C0A26FE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:3d:45:67:62:90:8d:5c:99:b9:c9:58:f7:29: df:f0:00:67:7b:ea:6d:cc:fe:71:dc:64:70:29:43: 1e:2c:7d:47:9a:ab:58:d5:7e:12:84:b3:2d:9c:5b: 44:54:e9:37:a9:9f:f9:21:75:cd:4b:76:24:25:ee: eb:4f:18:92:52:be:4c:ee:ae:a2:fe:68:cf:b6:b1: 6b:12:80:ad:e8:94:8c:b2:66:59:56:b4:1a:cf:c5: 85:53:d5:43:82:b3:d3:cc:96:9a:15:50:c6:69:0b: 5d:e2:bf:58:e3:38:76:c8:e9:b4:71:10:20:fc:ed: 81:db:49:59:89:33:6a:99:00:69:eb:c5:16:88:9a: 84:c5:5d:ef:6c:55:42:ce:25:61:21:b6:0e:ef:62: 3f:80:76:99:98:d9:22:90:a7:1c:3a:f6:db:4b:f8: d3:c1:75:57:7a:7c:68:3b:70:e7:75:90:70:64:07: 01:10:a8:97:a6:3a:13:05:7c:59:22:6f:1a:01:62: 4f:60:8d:4f:9e:8d:99:54:95:61:b2:fd:53:f0:d6: dd:c6:d7:98:6e:56:1d:e5:a1:44:2c:2b:4e:83:bc: 25:75:24:97:28:d9:00:52:46:1b:e1:7a:96:7b:38: 05:e1:9b:cb:ef:9e:b8:fe:e8:ec:91:18:11:ad:32: 4e:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DC:D7:D3:D7:29:FD:33:6E:5F:ED:3C:58:D7:0D:89:8B:3C:0A:26:FE X509v3 Authority Key Identifier: keyid:B2:07:7B:9B:AF:0B:F3:E5:FC:B8:45:13:B1:D7:44:5E:30:CE:65:82 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/85dd4f16-570e-4c8c-a992-db89ea3bad36/0/B2077B9BAF0BF3E5FCB84513B1D7445E30CE6582.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B2077B9BAF0BF3E5FCB84513B1D7445E30CE6582.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/85dd4f16-570e-4c8c-a992-db89ea3bad36/0/B2077B9BAF0BF3E5FCB84513B1D7445E30CE6582.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 86:d6:31:00:63:42:71:4c:bf:eb:5c:fa:41:45:cc:65:45:4d: 55:5e:1a:ea:f8:2c:35:b9:84:4e:4a:71:ac:a1:75:5d:23:30: ce:c9:c5:3c:21:3e:be:a9:02:94:7b:e1:c8:7d:30:a6:e8:bb: 7b:71:ab:54:e4:23:38:2d:ed:ba:b9:0f:c4:2d:81:34:99:49: 63:4a:dd:e7:8a:c1:20:16:9a:8f:09:70:7b:60:a2:c9:6a:d8: 28:72:d7:1e:e9:12:d9:e5:15:16:75:5d:fb:1f:b4:86:19:48: 34:e5:d3:9f:51:b3:b4:40:07:ba:32:22:2d:be:0a:d9:d0:dc: 1b:7b:2e:f1:67:b1:fc:03:f0:d9:56:a8:dc:25:34:a8:0e:4b: 69:9d:23:3c:0d:62:96:ca:39:ce:1c:02:87:93:7b:f2:99:f8: 6c:04:df:0c:0b:75:75:e3:66:47:9a:a2:8e:f1:26:fd:38:4d: 35:2a:c1:62:e9:4c:0f:07:85:03:1f:cb:42:f8:b4:49:d3:a2: 1c:e4:a8:9e:05:05:1e:48:36:2a:37:8a:57:61:8e:31:45:2a: 61:e1:62:2b:55:16:e9:45:88:49:74:08:d2:4b:0b:54:6a:02: be:51:16:43:9b:d8:e7:a0:86:ec:93:4a:b9:dd:11:75:f1:d3: 79:39:24:d7 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUFtqFRj97kVVnI1oHqor6rN06e6MwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjIwNzdCOUJBRjBCRjNFNUZDQjg0NTEzQjFENzQ0NUUz MENFNjU4MjAeFw0yNTEwMTkyMTA3MDNaFw0yNTEwMjIyMjI5MDNaMDMxMTAvBgNV BAMTKERDRDdEM0Q3MjlGRDMzNkU1RkVEM0M1OEQ3MEQ4OThCM0MwQTI2RkUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC1PUVnYpCNXJm5yVj3Kd/wAGd7 6m3M/nHcZHApQx4sfUeaq1jVfhKEsy2cW0RU6Tepn/khdc1LdiQl7utPGJJSvkzu rqL+aM+2sWsSgK3olIyyZllWtBrPxYVT1UOCs9PMlpoVUMZpC13iv1jjOHbI6bRx ECD87YHbSVmJM2qZAGnrxRaImoTFXe9sVULOJWEhtg7vYj+AdpmY2SKQpxw69ttL +NPBdVd6fGg7cOd1kHBkBwEQqJemOhMFfFkibxoBYk9gjU+ejZlUlWGy/VPw1t3G 15huVh3loUQsK06DvCV1JJco2QBSRhvhepZ7OAXhm8vvnrj+6OyRGBGtMk4NAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU3NfT1yn9M25f7TxY1w2JizwKJv4wHwYDVR0j BBgwFoAUsgd7m68L8+X8uEUTsddEXjDOZYIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 NWRkNGYxNi01NzBlLTRjOGMtYTk5Mi1kYjg5ZWEzYmFkMzYvMC9CMjA3N0I5QkFG MEJGM0U1RkNCODQ1MTNCMUQ3NDQ1RTMwQ0U2NTgyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQjIwNzdCOUJBRjBCRjNFNUZDQjg0NTEzQjFENzQ0NUUzMENF NjU4Mi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vODVkZDRmMTYtNTcwZS00YzhjLWE5 OTItZGI4OWVhM2JhZDM2LzAvQjIwNzdCOUJBRjBCRjNFNUZDQjg0NTEzQjFENzQ0 NUUzMENFNjU4Mi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIbWMQBjQnFMv+tc+kFFzGVFTVVeGur4LDW5 hE5KcayhdV0jMM7JxTwhPr6pApR74ch9MKbou3txq1TkIzgt7bq5D8QtgTSZSWNK 3eeKwSAWmo8JcHtgoslq2Chy1x7pEtnlFRZ1XfsftIYZSDTl059Rs7RAB7oyIi2+ CtnQ3Bt7LvFnsfwD8NlWqNwlNKgOS2mdIzwNYpbKOc4cAoeTe/KZ+GwE3wwLdXXj Zkeaoo7xJv04TTUqwWLpTA8HhQMfy0L4tEnTohzkqJ4FBR5INio3ildhjjFFKmHh YitVFulFiEl0CNJLC1RqAr5RFkOb2OeghuyTSrndEXXx03k5JNc= -----END CERTIFICATE-----Generated at Mon Oct 20 12:08:20 2025 by rpki-client