$ rpki-client -vvf repo-rpki.idnic.net/repo/9036e07c-8283-43d3-9164-3e0e6cacf499/0/B563D708A094B24FC361EDD11C91EE7979AB0471.mft File: B563D708A094B24FC361EDD11C91EE7979AB0471.mft (raw, json) Hash identifier: nqAeXdftyzh9izpSrUU4tTQ36UGTcBn9WDGZgGBtM9A= Subject key identifier: 71:23:C1:7D:91:1E:A0:0A:87:2B:F5:E5:F2:E0:A3:D8:CA:0C:EE:3A Authority key identifier: B5:63:D7:08:A0:94:B2:4F:C3:61:ED:D1:1C:91:EE:79:79:AB:04:71 Certificate issuer: /CN=B563D708A094B24FC361EDD11C91EE7979AB0471 Certificate serial: 28919EEF8990975187FCF872DAE806D2E2ABAE9D Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B563D708A094B24FC361EDD11C91EE7979AB0471.cer Subject info access: rsync://repo-rpki.idnic.net/repo/9036e07c-8283-43d3-9164-3e0e6cacf499/0/B563D708A094B24FC361EDD11C91EE7979AB0471.mft Manifest number: 049B Signing time: Mon 20 Oct 2025 06:11:08 +0000 Manifest this update: Mon 20 Oct 2025 06:06:08 +0000 Manifest next update: Thu 23 Oct 2025 14:22:08 +0000 Files and hashes: 1: B563D708A094B24FC361EDD11C91EE7979AB0471.crl (hash: LtTjyee38a+kO68Lek1IS8dSXmxi94JrXed+IyVoE6s=) 2: 3130332e3135382e3233352e302f32342d3234203d3e20313431313332.roa (hash: kpMxQvSYLU76Gm9LQAAGgZvfd3otWzRiAJhO9y4zBsk=) 3: 3130332e3135382e3233342e302f32332d3233203d3e20313431383938.roa (hash: ubs3KFRcbUrpRgNw8QOw+os2JdUl6qStS3zNmN6w2iE=) 4: 3130332e3135382e3233352e302f32342d3234203d3e20313431383938.roa (hash: RkBfllGvEefotMCbBX+M6tjX7qjYPoT7phVfnxdgKbU=) 5: 3130332e3135382e3233342e302f32342d3234203d3e20313431313332.roa (hash: LFN1lWDxbZdPzNeB6sbVhDvJLLQcsJmGzjZZihSsn1w=) 6: 3130332e3135382e3233342e302f32342d3234203d3e20313431383938.roa (hash: D2U2OhiX4JpcmakIWdkjvlLoKPGy8UFmuSAMLEyoyEQ=) 7: 3130332e3135382e3233342e302f32332d3233203d3e20313431313332.roa (hash: VerBshfKSbDiG4ilBKzo2++FEnDv7+7VU/P4UtUMaSI=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/9036e07c-8283-43d3-9164-3e0e6cacf499/0/B563D708A094B24FC361EDD11C91EE7979AB0471.crl rsync://repo-rpki.idnic.net/repo/9036e07c-8283-43d3-9164-3e0e6cacf499/0/B563D708A094B24FC361EDD11C91EE7979AB0471.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B563D708A094B24FC361EDD11C91EE7979AB0471.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 Oct 2025 11:48:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 28:91:9e:ef:89:90:97:51:87:fc:f8:72:da:e8:06:d2:e2:ab:ae:9d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B563D708A094B24FC361EDD11C91EE7979AB0471 Validity Not Before: Oct 20 06:06:08 2025 GMT Not After : Oct 23 14:22:08 2025 GMT Subject: CN=7123C17D911EA00A872BF5E5F2E0A3D8CA0CEE3A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:89:07:24:4a:b9:69:0e:ad:0b:b7:3c:7d:6c: 99:8f:49:b2:44:a1:dd:5b:66:ad:a2:18:50:c5:3a: 3e:22:8e:92:ba:c2:1f:31:0c:17:1d:04:6a:1b:d7: 12:84:3f:6f:8c:f8:7f:0a:e0:83:9d:78:66:3a:3b: 2f:52:71:0c:d9:f5:e9:21:c9:9f:d8:d5:eb:dd:93: 37:98:f2:70:64:36:ee:4e:e5:5c:a0:22:97:bb:18: 80:44:a4:8e:bd:a4:55:f0:38:63:3c:60:87:69:28: d7:46:5e:03:12:c6:ef:7c:83:40:14:0e:8e:59:2e: 54:af:ab:94:5b:53:1a:46:ce:b6:1f:18:73:53:c7: 7b:d7:f2:1c:e6:47:a5:9a:0b:08:59:c3:c1:95:27: 7f:70:8e:02:6c:21:dd:e0:66:54:9c:6b:cd:45:1a: b7:50:4a:f7:6c:3d:32:d0:34:05:6f:24:3d:79:3a: d0:88:8e:52:3c:61:3d:34:cd:27:d6:71:52:e5:dd: c0:1f:8f:d0:d9:11:6e:8b:a8:90:c2:03:8a:8e:d7: 3f:74:d7:60:95:16:f9:37:f1:d7:c2:a8:3d:3f:e8: cd:ff:9a:51:b7:b2:01:14:5b:94:60:d4:3e:32:53: 4b:4c:33:5a:60:e5:65:f9:ee:3f:4c:46:6c:f6:c7: 7e:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:23:C1:7D:91:1E:A0:0A:87:2B:F5:E5:F2:E0:A3:D8:CA:0C:EE:3A X509v3 Authority Key Identifier: keyid:B5:63:D7:08:A0:94:B2:4F:C3:61:ED:D1:1C:91:EE:79:79:AB:04:71 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/9036e07c-8283-43d3-9164-3e0e6cacf499/0/B563D708A094B24FC361EDD11C91EE7979AB0471.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B563D708A094B24FC361EDD11C91EE7979AB0471.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/9036e07c-8283-43d3-9164-3e0e6cacf499/0/B563D708A094B24FC361EDD11C91EE7979AB0471.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1e:a4:24:d5:aa:94:cb:61:8e:8c:b4:4a:9c:08:79:82:84:7d: bb:2b:9b:9c:eb:b4:3b:e3:44:fe:f6:08:11:ad:39:30:d6:8c: 6b:2c:88:bb:63:50:32:4f:cd:1a:f9:40:fb:26:bb:46:b0:a7: ca:d7:b5:f0:bd:6a:34:8e:03:a2:4e:dc:d0:31:7e:9a:93:b5: e0:27:63:90:4b:cc:53:74:69:c2:75:d9:1b:26:5c:01:69:84: 97:da:18:da:19:75:29:48:e9:c8:ce:c3:46:b6:69:da:25:43: 51:2a:66:61:5d:3a:c3:d2:af:72:c4:13:3d:cc:c9:16:6d:f8: c7:0c:97:7b:03:b0:21:21:15:4c:e7:21:94:0c:3d:1a:fa:3d: 6e:c8:b4:71:14:65:a1:07:c8:e8:f4:cd:1a:62:53:02:1d:b6: 14:27:4f:ad:d7:38:37:69:ab:9f:02:84:f6:e5:a5:a6:a4:30: 0f:cb:2a:c6:07:4b:04:fd:9a:07:df:1a:b0:dc:2f:d0:12:8c: 7f:ce:a3:8d:06:77:a7:77:f9:97:d7:9b:98:0e:52:0f:f6:d1: dd:66:ba:02:8d:12:41:52:f0:ce:20:78:fa:97:55:33:a9:03: 9f:35:1f:c5:15:d8:1c:3e:73:ef:cf:b5:b3:e2:c9:68:60:86: f8:22:08:52 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUKJGe74mQl1GH/Phy2ugG0uKrrp0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjU2M0Q3MDhBMDk0QjI0RkMzNjFFREQxMUM5MUVFNzk3 OUFCMDQ3MTAeFw0yNTEwMjAwNjA2MDhaFw0yNTEwMjMxNDIyMDhaMDMxMTAvBgNV BAMTKDcxMjNDMTdEOTExRUEwMEE4NzJCRjVFNUYyRTBBM0Q4Q0EwQ0VFM0EwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDLiQckSrlpDq0Ltzx9bJmPSbJE od1bZq2iGFDFOj4ijpK6wh8xDBcdBGob1xKEP2+M+H8K4IOdeGY6Oy9ScQzZ9ekh yZ/Y1evdkzeY8nBkNu5O5VygIpe7GIBEpI69pFXwOGM8YIdpKNdGXgMSxu98g0AU Do5ZLlSvq5RbUxpGzrYfGHNTx3vX8hzmR6WaCwhZw8GVJ39wjgJsId3gZlSca81F GrdQSvdsPTLQNAVvJD15OtCIjlI8YT00zSfWcVLl3cAfj9DZEW6LqJDCA4qO1z90 12CVFvk38dfCqD0/6M3/mlG3sgEUW5Rg1D4yU0tMM1pg5WX57j9MRmz2x34FAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUcSPBfZEeoAqHK/Xl8uCj2MoM7jowHwYDVR0j BBgwFoAUtWPXCKCUsk/DYe3RHJHueXmrBHEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 MDM2ZTA3Yy04MjgzLTQzZDMtOTE2NC0zZTBlNmNhY2Y0OTkvMC9CNTYzRDcwOEEw OTRCMjRGQzM2MUVERDExQzkxRUU3OTc5QUIwNDcxLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQjU2M0Q3MDhBMDk0QjI0RkMzNjFFREQxMUM5MUVFNzk3OUFC MDQ3MS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOTAzNmUwN2MtODI4My00M2QzLTkx NjQtM2UwZTZjYWNmNDk5LzAvQjU2M0Q3MDhBMDk0QjI0RkMzNjFFREQxMUM5MUVF Nzk3OUFCMDQ3MS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAB6kJNWqlMthjoy0SpwIeYKEfbsrm5zrtDvj RP72CBGtOTDWjGssiLtjUDJPzRr5QPsmu0awp8rXtfC9ajSOA6JO3NAxfpqTteAn Y5BLzFN0acJ12RsmXAFphJfaGNoZdSlI6cjOw0a2adolQ1EqZmFdOsPSr3LEEz3M yRZt+McMl3sDsCEhFUznIZQMPRr6PW7ItHEUZaEHyOj0zRpiUwIdthQnT63XODdp q58ChPblpaakMA/LKsYHSwT9mgffGrDcL9ASjH/Oo40Gd6d3+ZfXm5gOUg/20d1m ugKNEkFS8M4gePqXVTOpA581H8UV2Bw+c+/PtbPiyWhghvgiCFI= -----END CERTIFICATE-----Generated at Mon Oct 20 21:09:11 2025 by rpki-client