$ rpki-client -vvf repo-rpki.idnic.net/repo/bba97b0b-39ae-4c2c-b13b-01e395b7a24b/0/B2A761D61CBF024F24CD3A18BE96E58F7ED6C909.mft File: B2A761D61CBF024F24CD3A18BE96E58F7ED6C909.mft (raw, json) Hash identifier: eQnFU/QHCfsi8d00AcNJzrLjbH2aiE9D/SovqcuSTSU= Subject key identifier: 03:8D:3B:0D:B2:40:6D:BD:31:7E:B2:83:62:14:EE:C2:20:E7:43:22 Authority key identifier: B2:A7:61:D6:1C:BF:02:4F:24:CD:3A:18:BE:96:E5:8F:7E:D6:C9:09 Certificate issuer: /CN=B2A761D61CBF024F24CD3A18BE96E58F7ED6C909 Certificate serial: 322FCF7831F809E7C9EFEB5B0EE6D095A8D08814 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B2A761D61CBF024F24CD3A18BE96E58F7ED6C909.cer Subject info access: rsync://repo-rpki.idnic.net/repo/bba97b0b-39ae-4c2c-b13b-01e395b7a24b/0/B2A761D61CBF024F24CD3A18BE96E58F7ED6C909.mft Manifest number: 04E0 Signing time: Sun 19 Oct 2025 13:01:12 +0000 Manifest this update: Sun 19 Oct 2025 12:56:12 +0000 Manifest next update: Wed 22 Oct 2025 17:44:12 +0000 Files and hashes: 1: B2A761D61CBF024F24CD3A18BE96E58F7ED6C909.crl (hash: J+2C5vFsWYAiKYnw5fLL/AboXWzwh48sgX6yw669t0o=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/bba97b0b-39ae-4c2c-b13b-01e395b7a24b/0/B2A761D61CBF024F24CD3A18BE96E58F7ED6C909.crl rsync://repo-rpki.idnic.net/repo/bba97b0b-39ae-4c2c-b13b-01e395b7a24b/0/B2A761D61CBF024F24CD3A18BE96E58F7ED6C909.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B2A761D61CBF024F24CD3A18BE96E58F7ED6C909.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 Oct 2025 17:44:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 32:2f:cf:78:31:f8:09:e7:c9:ef:eb:5b:0e:e6:d0:95:a8:d0:88:14 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B2A761D61CBF024F24CD3A18BE96E58F7ED6C909 Validity Not Before: Oct 19 12:56:12 2025 GMT Not After : Oct 22 17:44:12 2025 GMT Subject: CN=038D3B0DB2406DBD317EB2836214EEC220E74322 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:f2:ac:d5:c9:d1:aa:7a:55:7f:ca:0e:7a:0b: f2:09:1c:0e:33:b4:7a:f0:ca:fa:27:f3:61:1f:b8: b4:67:a1:66:fd:31:21:f6:f1:73:a9:b3:39:74:f5: e7:01:28:82:40:33:21:30:c9:16:1a:d0:d1:92:35: 58:99:02:ac:d1:30:68:1c:78:d0:ff:e3:b5:69:48: f6:ad:ba:b4:80:ad:7d:8e:f2:16:af:7a:4b:c2:06: d4:66:92:7d:3d:c7:33:e7:e5:4d:db:ad:4f:83:5d: a4:db:11:8a:65:67:a5:74:b5:ba:e7:cb:26:4f:29: 06:23:75:9f:e2:7a:38:43:f9:3c:d3:5a:00:18:cf: 34:f2:38:99:d6:70:37:9d:a7:cb:1b:36:29:2a:a3: 02:6c:5a:d9:c7:9b:fa:76:12:ce:9b:e5:f7:40:6d: 99:d2:15:61:45:66:8b:f1:ee:df:9c:84:9f:d0:bc: 8c:e0:d4:cb:78:39:6e:2e:1d:76:d9:bd:d0:6f:0f: 3e:0c:9c:57:30:13:0a:0a:fa:13:07:d5:d0:c0:06: 9c:50:19:26:4f:ab:e3:f9:d6:f3:4e:6c:1e:6c:f4: b5:ed:7e:f5:0b:7d:93:0c:5a:46:e1:0e:97:0f:a7: 45:4a:83:2d:5a:9c:03:42:08:12:fd:b1:75:69:fa: 6e:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 03:8D:3B:0D:B2:40:6D:BD:31:7E:B2:83:62:14:EE:C2:20:E7:43:22 X509v3 Authority Key Identifier: keyid:B2:A7:61:D6:1C:BF:02:4F:24:CD:3A:18:BE:96:E5:8F:7E:D6:C9:09 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/bba97b0b-39ae-4c2c-b13b-01e395b7a24b/0/B2A761D61CBF024F24CD3A18BE96E58F7ED6C909.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B2A761D61CBF024F24CD3A18BE96E58F7ED6C909.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/bba97b0b-39ae-4c2c-b13b-01e395b7a24b/0/B2A761D61CBF024F24CD3A18BE96E58F7ED6C909.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 70:0d:f5:4c:95:44:6c:6c:de:a9:ea:e6:fd:05:64:ad:90:95: e5:3b:dd:80:4d:2a:1d:74:0e:b3:84:08:bf:1e:0e:c6:22:ee: 3a:ec:4c:2b:57:f3:1c:d3:a8:a8:95:7e:86:34:fd:74:db:ea: 07:28:f1:47:ea:64:a2:3c:d2:1f:a6:68:f2:6a:b1:87:6d:ee: 2a:dd:b6:68:c4:5f:0d:0a:1c:53:f4:a2:e8:ae:e4:44:a7:22: 2e:2c:e5:34:a9:d9:64:b3:60:c9:97:36:12:54:1a:d1:cd:83: 24:4b:84:50:97:15:eb:52:4f:95:4f:ce:a0:77:df:24:bf:df: c0:45:1f:f6:56:d2:9e:73:13:74:4f:88:d3:60:88:c7:9c:29: 04:63:31:e3:5c:55:19:c4:35:61:d6:88:ae:3f:a1:90:75:5a: 35:cd:f8:a6:bc:40:e8:2d:40:bb:2b:c8:30:eb:97:7d:36:d5: e5:69:8f:62:58:44:10:09:68:9d:ac:6c:d6:c7:b1:aa:e0:b5: 74:a8:aa:1d:d3:8c:e7:0e:42:22:c8:eb:b5:81:05:d7:3b:38: 23:fa:5b:12:e0:2e:6e:1e:b3:15:b6:d3:1c:1c:98:c4:91:f6: a5:78:03:7a:69:c2:da:26:07:bf:b8:b2:42:0b:63:d8:bd:4d: af:aa:59:b9 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUMi/PeDH4CefJ7+tbDubQlajQiBQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjJBNzYxRDYxQ0JGMDI0RjI0Q0QzQTE4QkU5NkU1OEY3 RUQ2QzkwOTAeFw0yNTEwMTkxMjU2MTJaFw0yNTEwMjIxNzQ0MTJaMDMxMTAvBgNV BAMTKDAzOEQzQjBEQjI0MDZEQkQzMTdFQjI4MzYyMTRFRUMyMjBFNzQzMjIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDH8qzVydGqelV/yg56C/IJHA4z tHrwyvon82EfuLRnoWb9MSH28XOpszl09ecBKIJAMyEwyRYa0NGSNViZAqzRMGgc eND/47VpSPaturSArX2O8havekvCBtRmkn09xzPn5U3brU+DXaTbEYplZ6V0tbrn yyZPKQYjdZ/iejhD+TzTWgAYzzTyOJnWcDedp8sbNikqowJsWtnHm/p2Es6b5fdA bZnSFWFFZovx7t+chJ/QvIzg1Mt4OW4uHXbZvdBvDz4MnFcwEwoK+hMH1dDABpxQ GSZPq+P51vNObB5s9LXtfvULfZMMWkbhDpcPp0VKgy1anANCCBL9sXVp+m5vAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUA407DbJAbb0xfrKDYhTuwiDnQyIwHwYDVR0j BBgwFoAUsqdh1hy/Ak8kzToYvpblj37WyQkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i YmE5N2IwYi0zOWFlLTRjMmMtYjEzYi0wMWUzOTViN2EyNGIvMC9CMkE3NjFENjFD QkYwMjRGMjRDRDNBMThCRTk2RTU4RjdFRDZDOTA5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQjJBNzYxRDYxQ0JGMDI0RjI0Q0QzQTE4QkU5NkU1OEY3RUQ2 QzkwOS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYmJhOTdiMGItMzlhZS00YzJjLWIx M2ItMDFlMzk1YjdhMjRiLzAvQjJBNzYxRDYxQ0JGMDI0RjI0Q0QzQTE4QkU5NkU1 OEY3RUQ2QzkwOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHAN9UyVRGxs3qnq5v0FZK2QleU73YBNKh10 DrOECL8eDsYi7jrsTCtX8xzTqKiVfoY0/XTb6gco8UfqZKI80h+maPJqsYdt7ird tmjEXw0KHFP0ouiu5ESnIi4s5TSp2WSzYMmXNhJUGtHNgyRLhFCXFetST5VPzqB3 3yS/38BFH/ZW0p5zE3RPiNNgiMecKQRjMeNcVRnENWHWiK4/oZB1WjXN+Ka8QOgt QLsryDDrl3021eVpj2JYRBAJaJ2sbNbHsargtXSoqh3TjOcOQiLI67WBBdc7OCP6 WxLgLm4esxW20xwcmMSR9qV4A3ppwtomB7+4skILY9i9Ta+qWbk= -----END CERTIFICATE-----Generated at Mon Oct 20 14:56:46 2025 by rpki-client