$ rpki-client -vvf repo-rpki.idnic.net/repo/b2a0a771-62d2-4238-a406-7999f224849c/0/B2BCF7264F89246583B384F354CB350DF3B6AADB.mft File: B2BCF7264F89246583B384F354CB350DF3B6AADB.mft (raw, json) Hash identifier: qeBRW4nCsskALK5jE4KBnMEGvs+2rxN8a7uHU3qdiXA= Subject key identifier: 79:DB:41:2A:AA:11:96:87:0D:D5:71:D0:61:3A:B0:A6:50:98:09:85 Authority key identifier: B2:BC:F7:26:4F:89:24:65:83:B3:84:F3:54:CB:35:0D:F3:B6:AA:DB Certificate issuer: /CN=B2BCF7264F89246583B384F354CB350DF3B6AADB Certificate serial: 34C43D26D061DCDB242AFEAA08EBE774262F830F Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B2BCF7264F89246583B384F354CB350DF3B6AADB.cer Subject info access: rsync://repo-rpki.idnic.net/repo/b2a0a771-62d2-4238-a406-7999f224849c/0/B2BCF7264F89246583B384F354CB350DF3B6AADB.mft Manifest number: 0517 Signing time: Sun 19 Oct 2025 02:22:04 +0000 Manifest this update: Sun 19 Oct 2025 02:17:04 +0000 Manifest next update: Wed 22 Oct 2025 11:09:04 +0000 Files and hashes: 1: B2BCF7264F89246583B384F354CB350DF3B6AADB.crl (hash: KQVkPdD+65wfAhezXYyuMAz5h11WmCS3Uy8EpUHJqRc=) 2: 3230322e34372e39302e302f32332d3234203d3e203436303230.roa (hash: f31WSeSw8w1qVqSz7UZlMp3AZocd9nv655saAh7fViI=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/b2a0a771-62d2-4238-a406-7999f224849c/0/B2BCF7264F89246583B384F354CB350DF3B6AADB.crl rsync://repo-rpki.idnic.net/repo/b2a0a771-62d2-4238-a406-7999f224849c/0/B2BCF7264F89246583B384F354CB350DF3B6AADB.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B2BCF7264F89246583B384F354CB350DF3B6AADB.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 Oct 2025 11:09:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 34:c4:3d:26:d0:61:dc:db:24:2a:fe:aa:08:eb:e7:74:26:2f:83:0f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B2BCF7264F89246583B384F354CB350DF3B6AADB Validity Not Before: Oct 19 02:17:04 2025 GMT Not After : Oct 22 11:09:04 2025 GMT Subject: CN=79DB412AAA1196870DD571D0613AB0A650980985 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:e5:3b:a4:5e:2a:3a:a8:d8:83:67:60:2e:9f: 94:8b:82:ac:92:6a:8e:b2:ff:1b:4b:40:9c:de:b7: c5:21:e9:3e:a7:cd:07:87:c9:6d:eb:fe:d0:0e:12: 6c:16:80:d4:bf:aa:3c:e3:aa:d6:d1:98:26:ab:9e: d0:6a:cf:7b:02:2f:79:a2:40:66:b7:c8:41:5b:19: c8:c0:b9:32:58:56:62:6a:d6:39:02:26:91:05:fe: f0:72:fa:f1:cf:ce:88:78:7a:4f:e9:1f:65:ff:39: 47:e7:eb:8b:21:bd:3a:dd:ab:bb:a2:b5:48:3f:89: c1:27:5e:06:cd:5b:66:a1:c8:eb:a3:2a:8d:54:33: 5a:f3:66:e6:94:d2:d7:b9:4e:52:77:7f:3b:14:12: 20:2e:8a:85:18:1b:03:c6:5c:f7:ee:16:ff:70:18: 05:61:42:e5:d9:98:d4:ac:f3:3b:cc:0e:66:39:4a: 60:fd:3a:e3:10:17:c9:71:14:dc:2b:ec:56:1c:09: ab:60:e3:41:c2:ff:c7:1d:07:db:2c:cb:15:b6:2e: c4:ad:d1:7d:4b:c0:f1:5f:78:c8:0a:53:04:5a:03: b0:4a:ee:31:23:91:d5:13:ed:24:d9:a2:be:bf:b7: 40:c0:ad:b6:f1:0d:85:c9:31:69:57:47:6e:50:ca: 9d:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 79:DB:41:2A:AA:11:96:87:0D:D5:71:D0:61:3A:B0:A6:50:98:09:85 X509v3 Authority Key Identifier: keyid:B2:BC:F7:26:4F:89:24:65:83:B3:84:F3:54:CB:35:0D:F3:B6:AA:DB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/b2a0a771-62d2-4238-a406-7999f224849c/0/B2BCF7264F89246583B384F354CB350DF3B6AADB.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B2BCF7264F89246583B384F354CB350DF3B6AADB.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/b2a0a771-62d2-4238-a406-7999f224849c/0/B2BCF7264F89246583B384F354CB350DF3B6AADB.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8d:e9:4c:93:bb:5d:65:19:4e:6c:df:b6:a7:6d:4c:1f:43:fc: 52:09:84:b4:fd:92:3e:a3:42:79:25:9d:01:f3:cc:31:2c:44: f3:5a:df:9b:05:d8:83:8e:40:61:dc:82:c4:f3:a9:3f:5e:9b: 63:10:b1:60:5b:8f:a3:4b:67:b0:71:03:55:33:a9:5e:2d:c8: c7:76:72:61:52:dd:d5:a6:5e:56:0d:6e:76:c9:ba:b0:32:c8: fb:ee:65:a7:fd:58:3d:74:d9:f8:52:30:da:ca:c8:8c:9e:39: 31:7e:42:33:70:d1:78:56:e5:0f:c8:c2:8a:97:59:d3:d0:c2: 82:f5:56:b3:f8:cd:fa:3e:fb:87:5b:e5:6a:80:e9:be:91:4e: f2:c4:b7:ea:c0:63:21:78:ea:0c:b4:7f:7c:36:04:99:aa:18: 3f:23:7c:01:01:50:fd:d9:0c:11:20:d8:cf:e8:30:04:55:9d: 67:82:df:0d:49:fb:18:fd:56:d6:fe:84:4d:93:79:9d:30:8e: ab:ff:20:1a:46:2e:e7:a4:16:e2:ae:c6:d9:1c:5f:e7:f1:55: 77:43:0d:b5:cf:2d:f1:6e:b0:c5:e3:39:9f:20:62:03:e5:92: e9:f7:ed:25:b9:bb:9b:d3:f6:af:cf:41:da:48:b8:1c:2a:9e: e1:5f:94:89 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUNMQ9JtBh3NskKv6qCOvndCYvgw8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjJCQ0Y3MjY0Rjg5MjQ2NTgzQjM4NEYzNTRDQjM1MERG M0I2QUFEQjAeFw0yNTEwMTkwMjE3MDRaFw0yNTEwMjIxMTA5MDRaMDMxMTAvBgNV BAMTKDc5REI0MTJBQUExMTk2ODcwREQ1NzFEMDYxM0FCMEE2NTA5ODA5ODUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCY5TukXio6qNiDZ2Aun5SLgqyS ao6y/xtLQJzet8Uh6T6nzQeHyW3r/tAOEmwWgNS/qjzjqtbRmCarntBqz3sCL3mi QGa3yEFbGcjAuTJYVmJq1jkCJpEF/vBy+vHPzoh4ek/pH2X/OUfn64shvTrdq7ui tUg/icEnXgbNW2ahyOujKo1UM1rzZuaU0te5TlJ3fzsUEiAuioUYGwPGXPfuFv9w GAVhQuXZmNSs8zvMDmY5SmD9OuMQF8lxFNwr7FYcCatg40HC/8cdB9ssyxW2LsSt 0X1LwPFfeMgKUwRaA7BK7jEjkdUT7STZor6/t0DArbbxDYXJMWlXR25Qyp1zAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUedtBKqoRlocN1XHQYTqwplCYCYUwHwYDVR0j BBgwFoAUsrz3Jk+JJGWDs4TzVMs1DfO2qtswDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i MmEwYTc3MS02MmQyLTQyMzgtYTQwNi03OTk5ZjIyNDg0OWMvMC9CMkJDRjcyNjRG ODkyNDY1ODNCMzg0RjM1NENCMzUwREYzQjZBQURCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQjJCQ0Y3MjY0Rjg5MjQ2NTgzQjM4NEYzNTRDQjM1MERGM0I2 QUFEQi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYjJhMGE3NzEtNjJkMi00MjM4LWE0 MDYtNzk5OWYyMjQ4NDljLzAvQjJCQ0Y3MjY0Rjg5MjQ2NTgzQjM4NEYzNTRDQjM1 MERGM0I2QUFEQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAI3pTJO7XWUZTmzftqdtTB9D/FIJhLT9kj6j QnklnQHzzDEsRPNa35sF2IOOQGHcgsTzqT9em2MQsWBbj6NLZ7BxA1UzqV4tyMd2 cmFS3dWmXlYNbnbJurAyyPvuZaf9WD102fhSMNrKyIyeOTF+QjNw0XhW5Q/IwoqX WdPQwoL1VrP4zfo++4db5WqA6b6RTvLEt+rAYyF46gy0f3w2BJmqGD8jfAEBUP3Z DBEg2M/oMARVnWeC3w1J+xj9Vtb+hE2TeZ0wjqv/IBpGLuekFuKuxtkcX+fxVXdD DbXPLfFusMXjOZ8gYgPlkun37SW5u5vT9q/PQdpIuBwqnuFflIk= -----END CERTIFICATE-----Generated at Mon Oct 20 23:36:32 2025 by rpki-client