$ rpki-client -vvf repo-rpki.idnic.net/repo/b1f87f5a-f6f9-468d-895e-314487f5e25e/0/B9BEB60CD6224D41F333A07E1820F0AF3A81FFF7.mft File: B9BEB60CD6224D41F333A07E1820F0AF3A81FFF7.mft (raw, json) Hash identifier: DIidOrA64THeGfjJSA/m1IBYUxRlNrpVFTEUp3ALXHE= Subject key identifier: 9E:A8:52:A5:1E:FC:BF:23:9C:8C:49:89:FF:92:AB:FD:89:E6:6A:89 Authority key identifier: B9:BE:B6:0C:D6:22:4D:41:F3:33:A0:7E:18:20:F0:AF:3A:81:FF:F7 Certificate issuer: /CN=B9BEB60CD6224D41F333A07E1820F0AF3A81FFF7 Certificate serial: 582DE5E8D567CDC4984DF27FDAEF645D001A444D Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B9BEB60CD6224D41F333A07E1820F0AF3A81FFF7.cer Subject info access: rsync://repo-rpki.idnic.net/repo/b1f87f5a-f6f9-468d-895e-314487f5e25e/0/B9BEB60CD6224D41F333A07E1820F0AF3A81FFF7.mft Manifest number: 01A6 Signing time: Mon 20 Oct 2025 22:50:43 +0000 Manifest this update: Mon 20 Oct 2025 22:45:43 +0000 Manifest next update: Fri 24 Oct 2025 03:13:43 +0000 Files and hashes: 1: 3130332e3230392e3133312e302f32342d3234203d3e20313333333535.roa (hash: j+U4AErtYzwumrbJ7yEuFWr2i7wA+4c75xZyRtRhbQ4=) 2: 3130332e3138352e3139372e302f32342d3234203d3e20313333333535.roa (hash: PjJ5xaEmVECnvYiFxtFmdeDestY/+54rJNs+3F7mqcY=) 3: B9BEB60CD6224D41F333A07E1820F0AF3A81FFF7.crl (hash: lXf6eskYqb3EYqiGGqhHfzLUczDtlrpp6lsJ18Q6dXk=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/b1f87f5a-f6f9-468d-895e-314487f5e25e/0/B9BEB60CD6224D41F333A07E1820F0AF3A81FFF7.crl rsync://repo-rpki.idnic.net/repo/b1f87f5a-f6f9-468d-895e-314487f5e25e/0/B9BEB60CD6224D41F333A07E1820F0AF3A81FFF7.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B9BEB60CD6224D41F333A07E1820F0AF3A81FFF7.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 Oct 2025 11:48:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 58:2d:e5:e8:d5:67:cd:c4:98:4d:f2:7f:da:ef:64:5d:00:1a:44:4d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B9BEB60CD6224D41F333A07E1820F0AF3A81FFF7 Validity Not Before: Oct 20 22:45:43 2025 GMT Not After : Oct 24 03:13:43 2025 GMT Subject: CN=9EA852A51EFCBF239C8C4989FF92ABFD89E66A89 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:cf:2b:c1:c6:f3:c5:a0:b5:0f:c3:88:0c:5a: 74:23:11:f5:48:4a:16:53:fd:45:a9:0d:e3:69:0c: aa:57:d5:17:71:be:c7:d0:4e:1d:9c:61:29:c2:7a: 5c:cf:68:3c:75:b5:83:36:db:f0:56:71:e9:ac:8f: f2:3a:3b:88:64:43:ad:5e:52:a9:c4:9a:78:bc:8e: 00:9a:cc:60:7f:ae:94:43:59:78:22:d0:fa:97:e1: c0:76:96:d8:58:9f:ac:2a:c7:27:b2:61:5e:77:94: 37:35:b6:c5:eb:4a:4c:9d:12:ad:44:da:b3:58:1c: f6:97:61:d4:2c:d9:62:56:bd:e0:c8:b7:5f:17:bf: 1a:12:9e:d1:81:c9:1c:27:af:c7:44:d8:fd:2b:41: 9c:04:98:71:81:a0:e7:c6:04:69:eb:ec:62:57:45: c3:94:e8:d9:59:54:b0:be:00:13:f1:ff:ed:db:42: c8:df:21:b0:9c:8a:39:d2:a2:1b:09:d7:bc:79:39: 8c:42:ac:69:9c:34:7a:f4:0d:49:a7:64:42:dc:35: eb:81:4a:a8:5c:47:10:b6:31:f8:59:e3:fa:23:78: 6a:d4:88:15:34:a7:20:07:11:a4:5f:a8:66:9f:ca: 52:28:59:7a:13:49:a3:c4:65:f0:e3:e7:fa:66:49: d3:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9E:A8:52:A5:1E:FC:BF:23:9C:8C:49:89:FF:92:AB:FD:89:E6:6A:89 X509v3 Authority Key Identifier: keyid:B9:BE:B6:0C:D6:22:4D:41:F3:33:A0:7E:18:20:F0:AF:3A:81:FF:F7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/b1f87f5a-f6f9-468d-895e-314487f5e25e/0/B9BEB60CD6224D41F333A07E1820F0AF3A81FFF7.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B9BEB60CD6224D41F333A07E1820F0AF3A81FFF7.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/b1f87f5a-f6f9-468d-895e-314487f5e25e/0/B9BEB60CD6224D41F333A07E1820F0AF3A81FFF7.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 24:57:c1:d0:c2:c9:6a:a5:c8:26:8e:49:bf:a8:b4:f3:bc:43: e9:99:b3:2e:54:c9:3b:55:e3:a8:3b:fd:d9:5b:a5:6e:3e:d1: 52:c4:6a:38:81:c9:5a:21:40:6c:64:dd:7f:be:0b:09:00:7c: c8:c1:58:76:97:7e:2f:22:a8:83:2f:73:37:47:b0:97:35:dd: 96:25:ea:d8:24:f7:3c:6c:53:e4:9c:1a:78:16:1f:07:fe:96: 58:e3:fe:c4:d1:43:89:79:f9:df:82:4d:77:77:b4:28:45:1f: 18:17:3f:1a:87:6a:3a:02:83:d0:23:d9:17:0d:65:ab:c0:56: fc:45:0a:11:69:c5:c7:b8:9d:75:4e:e5:d1:17:ce:57:57:e3: 2f:6d:77:c8:fc:81:a9:b8:b3:84:06:ca:f7:26:ad:07:21:a3: 04:82:bc:1f:cb:bd:54:ac:ae:8b:98:18:99:75:e4:4c:0b:fe: fb:6a:27:49:87:61:02:f5:0c:1e:ad:50:dd:9d:98:34:30:f9: ba:6b:85:d9:5b:ac:63:1f:61:0f:c0:0f:88:ad:76:95:f2:6e: 8e:d4:0a:8f:04:c7:58:c7:c3:7b:8f:01:c3:15:79:8e:a6:18: ed:86:8e:43:ac:2b:bd:37:ca:01:37:db:00:c5:e5:cb:9a:0b: eb:c7:fd:75 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUWC3l6NVnzcSYTfJ/2u9kXQAaRE0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjlCRUI2MENENjIyNEQ0MUYzMzNBMDdFMTgyMEYwQUYz QTgxRkZGNzAeFw0yNTEwMjAyMjQ1NDNaFw0yNTEwMjQwMzEzNDNaMDMxMTAvBgNV BAMTKDlFQTg1MkE1MUVGQ0JGMjM5QzhDNDk4OUZGOTJBQkZEODlFNjZBODkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDgzyvBxvPFoLUPw4gMWnQjEfVI ShZT/UWpDeNpDKpX1RdxvsfQTh2cYSnCelzPaDx1tYM22/BWcemsj/I6O4hkQ61e UqnEmni8jgCazGB/rpRDWXgi0PqX4cB2lthYn6wqxyeyYV53lDc1tsXrSkydEq1E 2rNYHPaXYdQs2WJWveDIt18XvxoSntGByRwnr8dE2P0rQZwEmHGBoOfGBGnr7GJX RcOU6NlZVLC+ABPx/+3bQsjfIbCcijnSohsJ17x5OYxCrGmcNHr0DUmnZELcNeuB SqhcRxC2MfhZ4/ojeGrUiBU0pyAHEaRfqGafylIoWXoTSaPEZfDj5/pmSdNPAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUnqhSpR78vyOcjEmJ/5Kr/YnmaokwHwYDVR0j BBgwFoAUub62DNYiTUHzM6B+GCDwrzqB//cwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i MWY4N2Y1YS1mNmY5LTQ2OGQtODk1ZS0zMTQ0ODdmNWUyNWUvMC9COUJFQjYwQ0Q2 MjI0RDQxRjMzM0EwN0UxODIwRjBBRjNBODFGRkY3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQjlCRUI2MENENjIyNEQ0MUYzMzNBMDdFMTgyMEYwQUYzQTgx RkZGNy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYjFmODdmNWEtZjZmOS00NjhkLTg5 NWUtMzE0NDg3ZjVlMjVlLzAvQjlCRUI2MENENjIyNEQ0MUYzMzNBMDdFMTgyMEYw QUYzQTgxRkZGNy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACRXwdDCyWqlyCaOSb+otPO8Q+mZsy5UyTtV 46g7/dlbpW4+0VLEajiByVohQGxk3X++CwkAfMjBWHaXfi8iqIMvczdHsJc13ZYl 6tgk9zxsU+ScGngWHwf+lljj/sTRQ4l5+d+CTXd3tChFHxgXPxqHajoCg9Aj2RcN ZavAVvxFChFpxce4nXVO5dEXzldX4y9td8j8gam4s4QGyvcmrQchowSCvB/LvVSs rouYGJl15EwL/vtqJ0mHYQL1DB6tUN2dmDQw+bprhdlbrGMfYQ/AD4itdpXybo7U Co8Ex1jHw3uPAcMVeY6mGO2GjkOsK703ygE32wDF5cuaC+vH/XU= -----END CERTIFICATE-----Generated at Tue Oct 21 02:14:39 2025 by rpki-client