$ rpki-client -vvf repo-rpki.idnic.net/repo/9d1619cb-c01c-4614-863e-ce288d7ba765/0/B972F073B8AF26B8533E97AAFBAEC17FCEFD6F8C.mft File: B972F073B8AF26B8533E97AAFBAEC17FCEFD6F8C.mft (raw, json) Hash identifier: SI1pgg/eWAwn/1otrBN31OBFxQMqfCZFuPkzQgKkdhE= Subject key identifier: 06:50:9B:62:48:BE:83:9E:09:2F:7B:7A:75:1A:10:AD:AD:3B:B3:0F Authority key identifier: B9:72:F0:73:B8:AF:26:B8:53:3E:97:AA:FB:AE:C1:7F:CE:FD:6F:8C Certificate issuer: /CN=B972F073B8AF26B8533E97AAFBAEC17FCEFD6F8C Certificate serial: 28FF7D9798B5A061FFCA236AB2D951A3FF6B8BCC Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B972F073B8AF26B8533E97AAFBAEC17FCEFD6F8C.cer Subject info access: rsync://repo-rpki.idnic.net/repo/9d1619cb-c01c-4614-863e-ce288d7ba765/0/B972F073B8AF26B8533E97AAFBAEC17FCEFD6F8C.mft Manifest number: 038E Signing time: Sun 19 Oct 2025 04:02:00 +0000 Manifest this update: Sun 19 Oct 2025 03:57:00 +0000 Manifest next update: Wed 22 Oct 2025 04:06:00 +0000 Files and hashes: 1: 3130332e3135352e3135362e302f32342d3234203d3e20313431303632.roa (hash: neE3zrlksOzJV8H0qe9TgTIuCvuChMBCqnrQKxlvrQU=) 2: 3130332e3135352e3135372e302f32342d3234203d3e20313431303632.roa (hash: 0/uMdmxlRYv0BxLj1kLNukE06046JVFdcxHugW59xeM=) 3: B972F073B8AF26B8533E97AAFBAEC17FCEFD6F8C.crl (hash: 4xsRQ/XULYIbyK/oudRvccWstdCNhi6GI0XqRDuLq/k=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/9d1619cb-c01c-4614-863e-ce288d7ba765/0/B972F073B8AF26B8533E97AAFBAEC17FCEFD6F8C.crl rsync://repo-rpki.idnic.net/repo/9d1619cb-c01c-4614-863e-ce288d7ba765/0/B972F073B8AF26B8533E97AAFBAEC17FCEFD6F8C.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B972F073B8AF26B8533E97AAFBAEC17FCEFD6F8C.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 Oct 2025 04:06:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 28:ff:7d:97:98:b5:a0:61:ff:ca:23:6a:b2:d9:51:a3:ff:6b:8b:cc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B972F073B8AF26B8533E97AAFBAEC17FCEFD6F8C Validity Not Before: Oct 19 03:57:00 2025 GMT Not After : Oct 22 04:06:00 2025 GMT Subject: CN=06509B6248BE839E092F7B7A751A10ADAD3BB30F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:08:a1:34:6a:fe:b2:4a:4b:2c:29:7c:5d:92: 62:17:db:31:f3:55:4a:b0:f5:62:06:aa:7e:a7:63: d2:48:e6:35:c5:eb:c7:79:7b:3a:a7:a9:ca:5d:23: 9c:78:9d:70:e7:63:42:04:64:6e:cf:95:f3:0b:1c: f3:ee:ed:56:04:0a:d0:7d:74:a6:91:c1:b1:b7:57: 36:74:b5:78:bc:af:1b:0a:d5:62:83:f3:95:ec:a1: 86:e3:77:83:b2:13:17:5e:ec:b0:e8:cc:12:d6:b2: 1a:40:92:a4:5f:37:e8:e5:61:e2:e6:cf:c0:04:cb: 71:fc:b2:97:44:9e:b4:51:80:86:db:16:7b:33:f5: 8d:d1:cd:c0:a1:52:08:70:96:de:ac:45:f5:bb:4a: 52:93:f3:09:d9:7c:e9:4e:24:e2:91:86:27:e9:9e: 90:a3:d4:d9:bc:b0:59:8c:e0:a9:c6:3c:03:b8:e5: 27:c1:b4:09:0d:7d:40:47:59:b0:95:15:64:58:21: 70:f7:8d:26:ef:3b:3d:6f:08:04:2d:bd:d4:f3:b3: 0a:b0:41:e0:7b:ec:f9:55:cc:13:44:49:a6:4f:79: df:82:c5:6e:9d:1f:6f:ec:91:87:1a:e4:55:2e:8f: b2:43:a9:73:cf:2a:a4:12:65:e4:35:b0:ad:60:4f: 1b:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 06:50:9B:62:48:BE:83:9E:09:2F:7B:7A:75:1A:10:AD:AD:3B:B3:0F X509v3 Authority Key Identifier: keyid:B9:72:F0:73:B8:AF:26:B8:53:3E:97:AA:FB:AE:C1:7F:CE:FD:6F:8C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/9d1619cb-c01c-4614-863e-ce288d7ba765/0/B972F073B8AF26B8533E97AAFBAEC17FCEFD6F8C.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B972F073B8AF26B8533E97AAFBAEC17FCEFD6F8C.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/9d1619cb-c01c-4614-863e-ce288d7ba765/0/B972F073B8AF26B8533E97AAFBAEC17FCEFD6F8C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption aa:3f:9f:e8:7e:3a:9b:ae:46:c3:23:a0:d3:4e:35:3c:46:41: 1c:52:ae:e9:92:f8:ba:79:44:4c:25:53:f5:b6:88:f0:47:76: 92:c0:96:c6:6d:d8:fc:bd:0e:2e:ca:3d:ab:67:92:d7:3e:4e: 2e:ea:bf:a3:f6:02:54:28:db:71:6a:26:d3:fd:43:44:bd:8a: a4:9d:3c:38:1e:60:2c:1c:86:bd:88:ca:86:b4:8f:e7:52:b1: bc:2d:47:d4:9f:6d:a3:51:8b:ab:e9:1b:bc:c7:3e:48:2b:c7: e9:f2:1f:5d:84:f9:7a:6f:a3:4a:02:09:38:5d:85:09:ff:5c: d3:56:46:46:7d:c6:ad:0c:d3:c3:6a:eb:4e:6a:4f:cd:54:1f: 85:2e:28:24:d2:7d:70:60:8c:fb:ab:9a:2e:59:c7:ec:f0:42: f6:85:2f:cf:d1:8a:a2:9b:76:62:93:2c:fd:93:b9:6d:7a:70: a2:e1:2d:1f:85:8d:ed:84:3f:e9:12:6b:80:70:9b:1a:92:00: 85:c5:11:fd:fd:d4:d0:a3:8e:17:a7:3a:ae:e5:3d:53:e9:1e: db:6e:0f:6e:60:43:0e:ef:f4:c6:ff:86:85:47:5c:1b:1f:b4: 5b:4f:f3:cb:dd:38:8e:6f:38:2d:cc:5d:fb:4d:50:96:f4:d4: 1d:ee:52:03 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUKP99l5i1oGH/yiNqstlRo/9ri8wwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjk3MkYwNzNCOEFGMjZCODUzM0U5N0FBRkJBRUMxN0ZD RUZENkY4QzAeFw0yNTEwMTkwMzU3MDBaFw0yNTEwMjIwNDA2MDBaMDMxMTAvBgNV BAMTKDA2NTA5QjYyNDhCRTgzOUUwOTJGN0I3QTc1MUExMEFEQUQzQkIzMEYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/CKE0av6ySkssKXxdkmIX2zHz VUqw9WIGqn6nY9JI5jXF68d5ezqnqcpdI5x4nXDnY0IEZG7PlfMLHPPu7VYECtB9 dKaRwbG3VzZ0tXi8rxsK1WKD85XsoYbjd4OyExde7LDozBLWshpAkqRfN+jlYeLm z8AEy3H8spdEnrRRgIbbFnsz9Y3RzcChUghwlt6sRfW7SlKT8wnZfOlOJOKRhifp npCj1Nm8sFmM4KnGPAO45SfBtAkNfUBHWbCVFWRYIXD3jSbvOz1vCAQtvdTzswqw QeB77PlVzBNESaZPed+CxW6dH2/skYca5FUuj7JDqXPPKqQSZeQ1sK1gTxv5AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUBlCbYki+g54JL3t6dRoQra07sw8wHwYDVR0j BBgwFoAUuXLwc7ivJrhTPpeq+67Bf879b4wwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 ZDE2MTljYi1jMDFjLTQ2MTQtODYzZS1jZTI4OGQ3YmE3NjUvMC9COTcyRjA3M0I4 QUYyNkI4NTMzRTk3QUFGQkFFQzE3RkNFRkQ2RjhDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQjk3MkYwNzNCOEFGMjZCODUzM0U5N0FBRkJBRUMxN0ZDRUZE NkY4Qy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOWQxNjE5Y2ItYzAxYy00NjE0LTg2 M2UtY2UyODhkN2JhNzY1LzAvQjk3MkYwNzNCOEFGMjZCODUzM0U5N0FBRkJBRUMx N0ZDRUZENkY4Qy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKo/n+h+OpuuRsMjoNNONTxGQRxSrumS+Lp5 REwlU/W2iPBHdpLAlsZt2Py9Di7KPatnktc+Ti7qv6P2AlQo23FqJtP9Q0S9iqSd PDgeYCwchr2Iyoa0j+dSsbwtR9SfbaNRi6vpG7zHPkgrx+nyH12E+Xpvo0oCCThd hQn/XNNWRkZ9xq0M08Nq605qT81UH4UuKCTSfXBgjPurmi5Zx+zwQvaFL8/RiqKb dmKTLP2TuW16cKLhLR+Fje2EP+kSa4BwmxqSAIXFEf391NCjjhenOq7lPVPpHttu D25gQw7v9Mb/hoVHXBsftFtP88vdOI5vOC3MXftNUJb01B3uUgM= -----END CERTIFICATE-----Generated at Mon Oct 20 09:44:33 2025 by rpki-client