$ rpki-client -vvf repo-rpki.idnic.net/repo/93dc1b05-2a69-45b0-8c44-626772276bd9/0/B2C18E11C8530BDF4EE333F5DEBD0B055F9DA416.mft File: B2C18E11C8530BDF4EE333F5DEBD0B055F9DA416.mft (raw, json) Hash identifier: eMYvrb06/RdGUaVIiCyGa1aQm15gczmcHTzH+uX1qEo= Subject key identifier: EA:A2:54:E4:D5:9C:EA:71:BE:33:6B:62:3F:AB:E8:27:16:B6:F3:EC Authority key identifier: B2:C1:8E:11:C8:53:0B:DF:4E:E3:33:F5:DE:BD:0B:05:5F:9D:A4:16 Certificate issuer: /CN=B2C18E11C8530BDF4EE333F5DEBD0B055F9DA416 Certificate serial: 4FCB1E87FCC287E82A2EA9111BCD81E4BF0E39A2 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B2C18E11C8530BDF4EE333F5DEBD0B055F9DA416.cer Subject info access: rsync://repo-rpki.idnic.net/repo/93dc1b05-2a69-45b0-8c44-626772276bd9/0/B2C18E11C8530BDF4EE333F5DEBD0B055F9DA416.mft Manifest number: 0229 Signing time: Sun 19 Oct 2025 13:40:49 +0000 Manifest this update: Sun 19 Oct 2025 13:35:49 +0000 Manifest next update: Wed 22 Oct 2025 21:16:49 +0000 Files and hashes: 1: B2C18E11C8530BDF4EE333F5DEBD0B055F9DA416.crl (hash: NLPV06SeZQAmfkTHomWYNYvEqw6g5cQ6WrD8cBSbPT8=) 2: 3130332e36382e3133372e302f32342d3234203d3e20313335343535.roa (hash: B/Oe9y1prQPdwN9dHWS523CLyIs4euOM6VNMTv5PS6I=) 3: 3130332e36382e3133362e302f32332d3234203d3e20313335343535.roa (hash: 3shwJ2AKcESaufbVwJ1tBPOkyd6LqDrGvkFRzpot0c8=) 4: 3130332e36382e3133362e302f32332d3233203d3e203338353131.roa (hash: Xfgb/bosimr9cD6CvubfYOrFF8ltCqJCXBNQnnNDr+E=) 5: 3130332e36382e3133362e302f32342d3234203d3e20313335343535.roa (hash: Vqh39P+3nWLH6GpYM+8FhU68z1hzASxU3wAlgsuT274=) 6: 323030313a6466333a313230303a3a2f34382d3438203d3e20313335343535.roa (hash: PbwEzJXRFcDlg8qq7i8GVSnaGAPkcyZUmZy35AgEFf0=) 7: 3130332e36382e3133362e302f32342d3234203d3e203338353131.roa (hash: ef8K/s+loJfcDNcQd9jMxXM6ibzQu1hDbe8Y7AKrwdI=) 8: 3130332e36382e3133372e302f32342d3234203d3e203338353131.roa (hash: kW0dkbVl3axDrA3JYmOP/J+VOWaOXAqel6hQB21C0fo=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/93dc1b05-2a69-45b0-8c44-626772276bd9/0/B2C18E11C8530BDF4EE333F5DEBD0B055F9DA416.crl rsync://repo-rpki.idnic.net/repo/93dc1b05-2a69-45b0-8c44-626772276bd9/0/B2C18E11C8530BDF4EE333F5DEBD0B055F9DA416.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B2C18E11C8530BDF4EE333F5DEBD0B055F9DA416.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 Oct 2025 21:16:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4f:cb:1e:87:fc:c2:87:e8:2a:2e:a9:11:1b:cd:81:e4:bf:0e:39:a2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B2C18E11C8530BDF4EE333F5DEBD0B055F9DA416 Validity Not Before: Oct 19 13:35:49 2025 GMT Not After : Oct 22 21:16:49 2025 GMT Subject: CN=EAA254E4D59CEA71BE336B623FABE82716B6F3EC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:ef:e3:c5:b8:98:9b:d2:7f:26:a0:6c:56:87: b6:72:22:bf:56:b2:82:b2:44:0b:5b:58:9d:77:65: a5:78:56:7d:76:d8:27:0e:71:a5:f1:52:a9:bc:02: 6c:c3:6e:09:cd:45:fb:15:97:90:8f:30:3e:dc:06: 7b:c2:6f:45:2b:6a:07:08:c2:a9:5a:c2:3c:e1:60: 44:a8:b0:88:a6:47:81:83:73:5b:0b:16:b6:1a:a0: bb:6d:8a:7b:87:14:b9:16:f2:1a:63:4e:e5:54:4e: 6a:fa:0b:6e:94:75:dd:8b:f8:d7:cc:5e:51:b4:1e: d3:6c:a6:da:b8:92:57:f5:12:30:19:21:d8:55:2c: 39:71:24:66:99:b2:64:7c:fd:26:0f:df:ec:b5:47: f1:ed:88:c4:26:3a:90:14:f9:a9:c9:8a:73:b5:99: 67:44:15:c7:1a:c3:23:04:26:55:2a:0c:a6:d9:9e: 5f:00:a9:5e:d4:b0:4e:e6:4e:db:98:fe:96:46:65: 1e:c6:9b:40:d5:ee:13:cd:b2:c0:f5:b8:40:b5:20: 1a:fd:56:70:6f:5a:f5:07:55:5f:f2:1c:b4:38:59: 0a:21:bb:e9:2c:2f:3b:02:04:74:45:fb:62:af:33: 5a:dc:48:5d:55:b2:63:c9:ef:15:36:67:fd:16:2c: 76:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EA:A2:54:E4:D5:9C:EA:71:BE:33:6B:62:3F:AB:E8:27:16:B6:F3:EC X509v3 Authority Key Identifier: keyid:B2:C1:8E:11:C8:53:0B:DF:4E:E3:33:F5:DE:BD:0B:05:5F:9D:A4:16 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/93dc1b05-2a69-45b0-8c44-626772276bd9/0/B2C18E11C8530BDF4EE333F5DEBD0B055F9DA416.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B2C18E11C8530BDF4EE333F5DEBD0B055F9DA416.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/93dc1b05-2a69-45b0-8c44-626772276bd9/0/B2C18E11C8530BDF4EE333F5DEBD0B055F9DA416.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 68:e6:e6:92:72:cb:76:09:ed:b3:78:d3:e9:c3:06:5f:c8:82: c2:6c:84:15:ac:8e:c2:c3:d3:c4:a7:73:d4:60:45:f2:6f:cf: a7:6e:b5:b0:87:e4:a1:f5:a4:3e:9f:a6:91:de:82:e4:d4:a5: c5:44:73:d7:97:e1:3b:4e:a0:7f:bd:0a:d7:d6:52:2e:34:3d: ee:9c:29:90:83:76:d9:86:fc:8b:71:8c:e2:ec:0b:1a:17:57: d6:4f:77:0b:ca:83:4f:f6:af:52:01:51:1f:bb:22:4e:41:4f: 3a:11:6a:80:09:5a:98:0d:18:21:00:cf:17:ac:00:12:dd:4a: d0:d4:a5:55:4f:a3:f6:3b:ab:9b:c3:db:fd:33:68:62:ba:fb: 68:10:2a:22:73:ae:8a:47:b7:95:7e:9c:c5:b8:38:52:87:36: ab:e0:54:d6:4c:5d:74:99:b1:0e:6b:5f:ac:35:9a:9c:34:3d: 17:6a:80:e5:a7:62:2b:6c:d1:56:49:64:bf:e9:91:f7:9c:df: ca:91:1f:f7:c3:a8:ca:82:0e:53:24:81:81:24:ed:2b:08:f2: 0c:13:06:8e:2f:f9:64:a9:7c:f8:58:63:67:38:d0:17:bd:6d: 36:9a:6d:ed:c7:a9:01:6a:d2:2a:a2:e4:0f:ca:f8:9b:bb:c3: c6:2f:5b:0e -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUT8seh/zCh+gqLqkRG82B5L8OOaIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjJDMThFMTFDODUzMEJERjRFRTMzM0Y1REVCRDBCMDU1 RjlEQTQxNjAeFw0yNTEwMTkxMzM1NDlaFw0yNTEwMjIyMTE2NDlaMDMxMTAvBgNV BAMTKEVBQTI1NEU0RDU5Q0VBNzFCRTMzNkI2MjNGQUJFODI3MTZCNkYzRUMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC87+PFuJib0n8moGxWh7ZyIr9W soKyRAtbWJ13ZaV4Vn122CcOcaXxUqm8AmzDbgnNRfsVl5CPMD7cBnvCb0UragcI wqlawjzhYESosIimR4GDc1sLFrYaoLttinuHFLkW8hpjTuVUTmr6C26Udd2L+NfM XlG0HtNsptq4klf1EjAZIdhVLDlxJGaZsmR8/SYP3+y1R/HtiMQmOpAU+anJinO1 mWdEFccawyMEJlUqDKbZnl8AqV7UsE7mTtuY/pZGZR7Gm0DV7hPNssD1uEC1IBr9 VnBvWvUHVV/yHLQ4WQohu+ksLzsCBHRF+2KvM1rcSF1VsmPJ7xU2Z/0WLHZbAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU6qJU5NWc6nG+M2tiP6voJxa28+wwHwYDVR0j BBgwFoAUssGOEchTC99O4zP13r0LBV+dpBYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 M2RjMWIwNS0yYTY5LTQ1YjAtOGM0NC02MjY3NzIyNzZiZDkvMC9CMkMxOEUxMUM4 NTMwQkRGNEVFMzMzRjVERUJEMEIwNTVGOURBNDE2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQjJDMThFMTFDODUzMEJERjRFRTMzM0Y1REVCRDBCMDU1RjlE QTQxNi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOTNkYzFiMDUtMmE2OS00NWIwLThj NDQtNjI2NzcyMjc2YmQ5LzAvQjJDMThFMTFDODUzMEJERjRFRTMzM0Y1REVCRDBC MDU1RjlEQTQxNi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGjm5pJyy3YJ7bN40+nDBl/IgsJshBWsjsLD 08Snc9RgRfJvz6dutbCH5KH1pD6fppHeguTUpcVEc9eX4TtOoH+9CtfWUi40Pe6c KZCDdtmG/ItxjOLsCxoXV9ZPdwvKg0/2r1IBUR+7Ik5BTzoRaoAJWpgNGCEAzxes ABLdStDUpVVPo/Y7q5vD2/0zaGK6+2gQKiJzropHt5V+nMW4OFKHNqvgVNZMXXSZ sQ5rX6w1mpw0PRdqgOWnYits0VZJZL/pkfec38qRH/fDqMqCDlMkgYEk7SsI8gwT Bo4v+WSpfPhYY2c40Be9bTaabe3HqQFq0iqi5A/K+Ju7w8YvWw4= -----END CERTIFICATE-----Generated at Mon Oct 20 15:20:28 2025 by rpki-client