$ rpki-client -vvf repo-rpki.idnic.net/repo/a990da49-9862-41de-833e-b304f0c1ae57/0/B70932ED6C688D58897E32E1D5C990B20910FF02.mft File: B70932ED6C688D58897E32E1D5C990B20910FF02.mft (raw, json) Hash identifier: WBpsre4/bSifsI5HSU1kq3KptiXo2YZFLA1yiT2j2Ds= Subject key identifier: 06:A9:D5:EE:79:A2:E4:EB:50:70:AD:85:23:F7:51:8C:08:67:68:6A Authority key identifier: B7:09:32:ED:6C:68:8D:58:89:7E:32:E1:D5:C9:90:B2:09:10:FF:02 Certificate issuer: /CN=B70932ED6C688D58897E32E1D5C990B20910FF02 Certificate serial: 36BB550F57B68D46471A85F5466677EAB9B2B1C6 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B70932ED6C688D58897E32E1D5C990B20910FF02.cer Subject info access: rsync://repo-rpki.idnic.net/repo/a990da49-9862-41de-833e-b304f0c1ae57/0/B70932ED6C688D58897E32E1D5C990B20910FF02.mft Manifest number: 01BA Signing time: Sun 19 Oct 2025 19:02:17 +0000 Manifest this update: Sun 19 Oct 2025 18:57:17 +0000 Manifest next update: Thu 23 Oct 2025 04:33:17 +0000 Files and hashes: 1: 3130332e3132392e34322e302f32332d3234203d3e20313335343738.roa (hash: D7YG7GtU8OdbibrqJfPY6iiVpoIqqq1mmvO/Oo1ZWAQ=) 2: 3130332e3132392e34302e302f32332d3234203d3e20313335343738.roa (hash: b+1ENA1CQV0UHypRXPMfHhHTGiVgtOzzvTXY/wFcyPw=) 3: B70932ED6C688D58897E32E1D5C990B20910FF02.crl (hash: 2xoA/aQ5qJgWVVAgLN26kWVTrSzk1ekz3bzr9RG3veo=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/a990da49-9862-41de-833e-b304f0c1ae57/0/B70932ED6C688D58897E32E1D5C990B20910FF02.crl rsync://repo-rpki.idnic.net/repo/a990da49-9862-41de-833e-b304f0c1ae57/0/B70932ED6C688D58897E32E1D5C990B20910FF02.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B70932ED6C688D58897E32E1D5C990B20910FF02.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 Oct 2025 04:33:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 36:bb:55:0f:57:b6:8d:46:47:1a:85:f5:46:66:77:ea:b9:b2:b1:c6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B70932ED6C688D58897E32E1D5C990B20910FF02 Validity Not Before: Oct 19 18:57:17 2025 GMT Not After : Oct 23 04:33:17 2025 GMT Subject: CN=06A9D5EE79A2E4EB5070AD8523F7518C0867686A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:4c:d6:1e:f6:e3:46:d4:ef:c4:60:71:9e:5d: a9:f6:fa:c5:c5:8a:20:67:fd:95:42:da:f0:e0:8a: ca:0f:e0:81:cb:fe:be:3b:ca:bf:4e:c4:b2:ab:6b: 9d:7f:34:c0:d6:c0:96:29:be:27:9b:cf:7f:10:9d: 00:8c:bd:b0:7d:27:3e:9f:a6:c6:e0:88:79:cd:d0: 11:52:e1:a2:52:4c:79:90:52:86:b1:2c:09:c3:d5: 78:02:4d:80:0d:d2:33:6f:1c:9a:33:51:eb:63:89: 2e:dd:a0:3c:0f:9a:04:6a:b3:6f:f4:34:6d:d3:0f: 65:bd:ba:e6:ac:c6:10:6a:72:21:89:5d:c6:78:bb: 77:19:75:1c:b8:b6:06:d0:bc:0d:18:84:ef:b4:0b: 64:39:56:2b:92:7c:b4:9e:5a:44:c2:2d:09:a5:14: 4a:26:89:3f:16:a4:ee:8f:b1:82:51:37:fe:c0:93: f7:cb:5a:2e:cf:dd:c7:cc:40:19:fb:09:cf:50:d6: 8e:0d:39:51:18:2f:4a:69:f3:93:05:ba:ff:63:1e: 65:a7:c7:69:ca:86:48:d9:e4:ba:17:e7:92:66:1a: a0:6f:66:a8:e4:63:2e:3c:db:ab:f1:8c:a8:19:6b: b8:16:c4:90:a9:3e:09:c2:96:c0:28:73:e3:df:cd: a0:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 06:A9:D5:EE:79:A2:E4:EB:50:70:AD:85:23:F7:51:8C:08:67:68:6A X509v3 Authority Key Identifier: keyid:B7:09:32:ED:6C:68:8D:58:89:7E:32:E1:D5:C9:90:B2:09:10:FF:02 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/a990da49-9862-41de-833e-b304f0c1ae57/0/B70932ED6C688D58897E32E1D5C990B20910FF02.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B70932ED6C688D58897E32E1D5C990B20910FF02.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a990da49-9862-41de-833e-b304f0c1ae57/0/B70932ED6C688D58897E32E1D5C990B20910FF02.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 54:95:e7:8d:a6:ee:55:5a:75:d9:df:c3:9f:4b:e4:1d:f5:19: 24:d2:28:ca:1d:47:ed:1d:51:d1:8d:b9:4b:4d:95:fc:f8:9c: e8:7b:b9:48:4b:d9:9a:82:49:07:aa:57:a9:61:60:35:f6:f0: c1:35:d5:c2:1c:4f:35:c0:70:86:1c:e7:da:4b:4d:82:6a:12: 26:6e:bd:4a:d9:07:71:7d:fc:cc:36:89:cb:f2:90:04:c0:29: 12:b4:99:42:56:1a:a5:91:af:87:35:c5:25:57:78:ea:f2:0b: 54:17:63:24:60:89:98:9f:e1:f1:19:ad:d7:7c:61:e5:68:d0: ab:3d:aa:37:2e:4c:ca:48:bf:b7:f6:6f:d1:a4:c1:45:70:f3: 4c:5c:22:19:10:d3:22:75:51:e0:81:52:29:04:e7:4f:3e:e1: 59:8e:eb:3c:cb:9d:a2:8a:3f:84:8f:2f:5c:14:45:88:3f:fd: e0:ed:81:ea:37:08:20:f8:7f:12:8e:1d:6b:91:52:d0:c0:0d: 03:0b:80:15:f4:95:eb:2a:59:fd:d9:89:08:a3:7e:d9:d0:b1: fd:53:37:ac:5b:82:a5:26:2d:35:2c:c9:41:a7:48:9a:f7:d6: 6e:ab:08:5b:f5:c0:14:d8:3d:c5:d8:64:20:55:f6:04:b4:4a: d3:e4:51:0a -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUNrtVD1e2jUZHGoX1RmZ36rmyscYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjcwOTMyRUQ2QzY4OEQ1ODg5N0UzMkUxRDVDOTkwQjIw OTEwRkYwMjAeFw0yNTEwMTkxODU3MTdaFw0yNTEwMjMwNDMzMTdaMDMxMTAvBgNV BAMTKDA2QTlENUVFNzlBMkU0RUI1MDcwQUQ4NTIzRjc1MThDMDg2NzY4NkEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDbTNYe9uNG1O/EYHGeXan2+sXF iiBn/ZVC2vDgisoP4IHL/r47yr9OxLKra51/NMDWwJYpviebz38QnQCMvbB9Jz6f psbgiHnN0BFS4aJSTHmQUoaxLAnD1XgCTYAN0jNvHJozUetjiS7doDwPmgRqs2/0 NG3TD2W9uuasxhBqciGJXcZ4u3cZdRy4tgbQvA0YhO+0C2Q5ViuSfLSeWkTCLQml FEomiT8WpO6PsYJRN/7Ak/fLWi7P3cfMQBn7Cc9Q1o4NOVEYL0pp85MFuv9jHmWn x2nKhkjZ5LoX55JmGqBvZqjkYy4826vxjKgZa7gWxJCpPgnClsAoc+PfzaBvAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUBqnV7nmi5OtQcK2FI/dRjAhnaGowHwYDVR0j BBgwFoAUtwky7WxojViJfjLh1cmQsgkQ/wIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h OTkwZGE0OS05ODYyLTQxZGUtODMzZS1iMzA0ZjBjMWFlNTcvMC9CNzA5MzJFRDZD Njg4RDU4ODk3RTMyRTFENUM5OTBCMjA5MTBGRjAyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQjcwOTMyRUQ2QzY4OEQ1ODg5N0UzMkUxRDVDOTkwQjIwOTEw RkYwMi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYTk5MGRhNDktOTg2Mi00MWRlLTgz M2UtYjMwNGYwYzFhZTU3LzAvQjcwOTMyRUQ2QzY4OEQ1ODg5N0UzMkUxRDVDOTkw QjIwOTEwRkYwMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFSV542m7lVaddnfw59L5B31GSTSKModR+0d UdGNuUtNlfz4nOh7uUhL2ZqCSQeqV6lhYDX28ME11cIcTzXAcIYc59pLTYJqEiZu vUrZB3F9/Mw2icvykATAKRK0mUJWGqWRr4c1xSVXeOryC1QXYyRgiZif4fEZrdd8 YeVo0Ks9qjcuTMpIv7f2b9GkwUVw80xcIhkQ0yJ1UeCBUikE508+4VmO6zzLnaKK P4SPL1wURYg//eDtgeo3CCD4fxKOHWuRUtDADQMLgBX0lesqWf3ZiQijftnQsf1T N6xbgqUmLTUsyUGnSJr31m6rCFv1wBTYPcXYZCBV9gS0StPkUQo= -----END CERTIFICATE-----Generated at Mon Oct 20 10:13:54 2025 by rpki-client