$ rpki-client -vvf repo-rpki.idnic.net/repo/b1f87f5a-f6f9-468d-895e-314487f5e25e/0/B9BEB60CD6224D41F333A07E1820F0AF3A81FFF7.mft File: B9BEB60CD6224D41F333A07E1820F0AF3A81FFF7.mft (raw, json) Hash identifier: HdrNHtc7D7Lp5VtBAAruoA/aIwsT9NCaV3RbTdbWDvw= Subject key identifier: 37:AD:F4:91:4E:5E:96:EF:4C:3D:66:74:FE:45:87:3D:05:27:23:0A Authority key identifier: B9:BE:B6:0C:D6:22:4D:41:F3:33:A0:7E:18:20:F0:AF:3A:81:FF:F7 Certificate issuer: /CN=B9BEB60CD6224D41F333A07E1820F0AF3A81FFF7 Certificate serial: 5596A5940CE1A5EE7CA6B94728C4C29497C43900 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B9BEB60CD6224D41F333A07E1820F0AF3A81FFF7.cer Subject info access: rsync://repo-rpki.idnic.net/repo/b1f87f5a-f6f9-468d-895e-314487f5e25e/0/B9BEB60CD6224D41F333A07E1820F0AF3A81FFF7.mft Manifest number: 01A5 Signing time: Sat 18 Oct 2025 14:50:37 +0000 Manifest this update: Sat 18 Oct 2025 14:45:37 +0000 Manifest next update: Tue 21 Oct 2025 22:48:37 +0000 Files and hashes: 1: 3130332e3138352e3139372e302f32342d3234203d3e20313333333535.roa (hash: PjJ5xaEmVECnvYiFxtFmdeDestY/+54rJNs+3F7mqcY=) 2: B9BEB60CD6224D41F333A07E1820F0AF3A81FFF7.crl (hash: 2D4YpFv7DGaafc8XQXAPARVK3ODuMSzNmzYzxxxTioQ=) 3: 3130332e3230392e3133312e302f32342d3234203d3e20313333333535.roa (hash: j+U4AErtYzwumrbJ7yEuFWr2i7wA+4c75xZyRtRhbQ4=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/b1f87f5a-f6f9-468d-895e-314487f5e25e/0/B9BEB60CD6224D41F333A07E1820F0AF3A81FFF7.crl rsync://repo-rpki.idnic.net/repo/b1f87f5a-f6f9-468d-895e-314487f5e25e/0/B9BEB60CD6224D41F333A07E1820F0AF3A81FFF7.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B9BEB60CD6224D41F333A07E1820F0AF3A81FFF7.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 21 Oct 2025 22:48:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 55:96:a5:94:0c:e1:a5:ee:7c:a6:b9:47:28:c4:c2:94:97:c4:39:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B9BEB60CD6224D41F333A07E1820F0AF3A81FFF7 Validity Not Before: Oct 18 14:45:37 2025 GMT Not After : Oct 21 22:48:37 2025 GMT Subject: CN=37ADF4914E5E96EF4C3D6674FE45873D0527230A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f2:a9:52:3b:da:ce:ec:2e:e5:26:2c:40:ad:da: 81:02:67:4e:33:31:25:10:6a:2b:b9:1e:f0:12:24: 1c:e9:2b:1a:ee:41:ea:42:45:30:e2:e5:df:f4:e4: f9:81:0b:6a:ef:b0:a6:12:da:b3:9a:ae:34:ce:3e: c2:cb:11:b9:af:ae:c4:b1:50:b1:f1:08:f4:e2:fc: 5c:fe:58:9c:06:90:ff:b1:a2:0b:80:d5:d4:c8:d8: d8:d0:eb:46:86:a7:e8:d1:f4:71:1d:65:a3:62:94: 82:95:ef:e7:28:6f:61:8d:c1:cf:21:e2:94:e7:5d: 90:ec:eb:df:8f:8b:87:0f:00:ca:62:e8:e1:18:c4: 0e:d2:2c:1a:81:38:92:72:c9:6f:8e:92:ca:2b:ec: 7e:f5:93:d0:32:02:28:62:8d:27:ec:a3:03:5f:2d: 78:43:83:eb:7e:35:87:6b:75:70:95:7c:df:14:27: dc:65:47:83:24:64:ce:35:44:6d:a6:7e:3a:71:02: bf:3f:98:ac:f8:c9:16:99:f3:c5:bd:f6:88:fb:c1: f6:4e:75:78:14:7e:e3:36:dc:68:23:39:1e:07:47: 2d:9a:81:04:05:bc:a0:78:af:d2:aa:b8:f2:20:94: 27:7b:60:ef:ca:5f:a7:40:f3:76:c3:01:13:d8:17: e2:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 37:AD:F4:91:4E:5E:96:EF:4C:3D:66:74:FE:45:87:3D:05:27:23:0A X509v3 Authority Key Identifier: keyid:B9:BE:B6:0C:D6:22:4D:41:F3:33:A0:7E:18:20:F0:AF:3A:81:FF:F7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/b1f87f5a-f6f9-468d-895e-314487f5e25e/0/B9BEB60CD6224D41F333A07E1820F0AF3A81FFF7.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B9BEB60CD6224D41F333A07E1820F0AF3A81FFF7.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/b1f87f5a-f6f9-468d-895e-314487f5e25e/0/B9BEB60CD6224D41F333A07E1820F0AF3A81FFF7.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 91:dc:76:4b:ba:87:2a:c9:3c:55:c0:b4:bb:d5:2e:f5:86:98: d1:ad:b1:b8:11:65:43:36:9a:34:46:17:c2:97:ff:27:48:3c: 71:9a:e7:92:f5:1b:b0:53:60:17:f2:2d:e0:18:a3:ce:49:96: b6:b1:a4:c9:9a:45:e7:d4:87:a7:48:60:47:2a:e9:8b:bd:da: dc:2a:8e:61:e1:e7:98:02:0b:bc:2d:7f:bd:6f:0a:64:dc:b9: 63:9a:88:ca:88:d2:0e:f6:1c:3e:78:09:0d:d3:31:64:09:21: f5:12:86:03:a4:51:b2:ef:cf:8a:dc:31:36:98:55:9f:c9:99: af:9a:a4:9b:9a:10:bd:87:df:bb:1e:c9:d6:e9:d6:09:51:f3: 0f:92:22:5a:1d:b9:30:e3:73:6a:d7:d2:b4:73:07:73:46:8b: c9:ac:38:19:85:7b:01:96:21:b5:67:3e:1e:08:73:34:20:48: e1:a9:d2:1b:8d:6b:8b:46:17:d7:e7:fd:55:bc:a0:c7:16:b5: 62:9c:35:05:2d:9d:08:1a:4a:bb:d6:c4:68:5d:ef:db:ed:25: e8:56:b3:2e:6f:8e:77:04:98:cf:51:bd:a5:f5:d9:bf:66:bf: e5:1a:bf:69:d9:d8:7c:e4:74:40:ba:c3:3e:38:99:d6:63:b6: c2:e6:f8:84 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUVZallAzhpe58prlHKMTClJfEOQAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjlCRUI2MENENjIyNEQ0MUYzMzNBMDdFMTgyMEYwQUYz QTgxRkZGNzAeFw0yNTEwMTgxNDQ1MzdaFw0yNTEwMjEyMjQ4MzdaMDMxMTAvBgNV BAMTKDM3QURGNDkxNEU1RTk2RUY0QzNENjY3NEZFNDU4NzNEMDUyNzIzMEEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDyqVI72s7sLuUmLECt2oECZ04z MSUQaiu5HvASJBzpKxruQepCRTDi5d/05PmBC2rvsKYS2rOarjTOPsLLEbmvrsSx ULHxCPTi/Fz+WJwGkP+xoguA1dTI2NjQ60aGp+jR9HEdZaNilIKV7+cob2GNwc8h 4pTnXZDs69+Pi4cPAMpi6OEYxA7SLBqBOJJyyW+Oksor7H71k9AyAihijSfsowNf LXhDg+t+NYdrdXCVfN8UJ9xlR4MkZM41RG2mfjpxAr8/mKz4yRaZ88W99oj7wfZO dXgUfuM23GgjOR4HRy2agQQFvKB4r9KquPIglCd7YO/KX6dA83bDARPYF+JtAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUN630kU5elu9MPWZ0/kWHPQUnIwowHwYDVR0j BBgwFoAUub62DNYiTUHzM6B+GCDwrzqB//cwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i MWY4N2Y1YS1mNmY5LTQ2OGQtODk1ZS0zMTQ0ODdmNWUyNWUvMC9COUJFQjYwQ0Q2 MjI0RDQxRjMzM0EwN0UxODIwRjBBRjNBODFGRkY3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQjlCRUI2MENENjIyNEQ0MUYzMzNBMDdFMTgyMEYwQUYzQTgx RkZGNy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYjFmODdmNWEtZjZmOS00NjhkLTg5 NWUtMzE0NDg3ZjVlMjVlLzAvQjlCRUI2MENENjIyNEQ0MUYzMzNBMDdFMTgyMEYw QUYzQTgxRkZGNy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJHcdku6hyrJPFXAtLvVLvWGmNGtsbgRZUM2 mjRGF8KX/ydIPHGa55L1G7BTYBfyLeAYo85JlraxpMmaRefUh6dIYEcq6Yu92twq jmHh55gCC7wtf71vCmTcuWOaiMqI0g72HD54CQ3TMWQJIfUShgOkUbLvz4rcMTaY VZ/Jma+apJuaEL2H37seydbp1glR8w+SIloduTDjc2rX0rRzB3NGi8msOBmFewGW IbVnPh4IczQgSOGp0huNa4tGF9fn/VW8oMcWtWKcNQUtnQgaSrvWxGhd79vtJehW sy5vjncEmM9RvaX12b9mv+Uav2nZ2HzkdEC6wz44mdZjtsLm+IQ= -----END CERTIFICATE-----Generated at Mon Oct 20 22:40:48 2025 by rpki-client