$ rpki-client -vvf repo-rpki.idnic.net/repo/c846f422-c302-4462-b584-700e9346ca09/0/B2B2F42BF1978AD094186480A7DA0086FD7C2919.mft File: B2B2F42BF1978AD094186480A7DA0086FD7C2919.mft (raw, json) Hash identifier: cv3KdbMbA+3eyHsUQJDGrpzUmdwGhcVvmUJh1MlEqnc= Subject key identifier: 05:E0:F9:8B:B5:DE:D0:66:21:BF:32:AA:34:E1:DB:12:4D:C0:19:3D Authority key identifier: B2:B2:F4:2B:F1:97:8A:D0:94:18:64:80:A7:DA:00:86:FD:7C:29:19 Certificate issuer: /CN=B2B2F42BF1978AD094186480A7DA0086FD7C2919 Certificate serial: 77DEF8A8A37B64FF71995F506A4E6D36695DAADF Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B2B2F42BF1978AD094186480A7DA0086FD7C2919.cer Subject info access: rsync://repo-rpki.idnic.net/repo/c846f422-c302-4462-b584-700e9346ca09/0/B2B2F42BF1978AD094186480A7DA0086FD7C2919.mft Manifest number: 01B6 Signing time: Sun 19 Oct 2025 10:41:32 +0000 Manifest this update: Sun 19 Oct 2025 10:36:32 +0000 Manifest next update: Wed 22 Oct 2025 12:25:32 +0000 Files and hashes: 1: 323030313a6466313a653034303a3a2f34382d3438203d3e20313530323435.roa (hash: gtOr9NwzW8Aa7fZGd03VkoCWA9Dhf88Ryc02CpBSPGY=) 2: 3130332e32332e39392e302f32342d3234203d3e20313530323435.roa (hash: 7tXNJtByPVAUWKN7rPTJrICa1r391Ty+571rFNCuCe4=) 3: 3130332e32332e39382e302f32332d3233203d3e20313530323435.roa (hash: 4vMfmSE2Nr1Jh9euWzmJY0IXJeyMyzfrb4vovMJmB9A=) 4: 3130332e32332e39382e302f32342d3234203d3e20313530323435.roa (hash: zfWwMyIyfYFsLYce6cLTwp+3PWwf0vu9ehqN4lOZ8SU=) 5: B2B2F42BF1978AD094186480A7DA0086FD7C2919.crl (hash: T3OPCG3AnoMewQMlOlmNfw3eokTiMx3YBG5P60ifi30=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/c846f422-c302-4462-b584-700e9346ca09/0/B2B2F42BF1978AD094186480A7DA0086FD7C2919.crl rsync://repo-rpki.idnic.net/repo/c846f422-c302-4462-b584-700e9346ca09/0/B2B2F42BF1978AD094186480A7DA0086FD7C2919.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B2B2F42BF1978AD094186480A7DA0086FD7C2919.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 Oct 2025 12:25:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 77:de:f8:a8:a3:7b:64:ff:71:99:5f:50:6a:4e:6d:36:69:5d:aa:df Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B2B2F42BF1978AD094186480A7DA0086FD7C2919 Validity Not Before: Oct 19 10:36:32 2025 GMT Not After : Oct 22 12:25:32 2025 GMT Subject: CN=05E0F98BB5DED06621BF32AA34E1DB124DC0193D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:78:a7:f7:fd:e2:47:42:79:dc:c8:32:bc:7d: a6:22:8c:0c:53:31:5e:03:0f:94:5d:ed:54:be:21: f3:80:52:f1:9e:de:8b:69:a6:50:22:fb:f7:d8:cf: a5:4f:ac:e4:05:eb:0b:59:08:b1:1f:d1:84:c6:4a: a9:d2:af:56:54:57:17:2b:71:c1:72:05:82:99:41: 91:31:2b:40:d2:89:c1:4a:2b:e2:a9:8d:51:92:31: 34:68:f3:95:82:83:3a:e0:97:5d:7c:61:bd:df:f9: 63:21:b7:0f:6b:b5:50:78:ff:98:d3:05:64:b3:73: 0e:80:7d:8f:b1:38:c9:58:0f:28:b8:91:3f:d3:16: 2c:3d:ba:ea:d0:f0:b8:3d:61:f8:0c:c5:c5:50:45: 8a:90:a6:c2:9d:27:51:d2:c5:99:52:8e:be:40:9b: 07:2c:d4:c2:24:fd:88:7f:5a:8f:7c:09:9b:f5:9c: 52:11:ae:a0:c2:d9:87:cf:0b:82:79:8c:14:b6:fa: 30:92:71:8e:c6:97:45:8a:3f:28:32:4b:45:42:19: 2b:b9:68:c2:8b:ec:ea:5e:24:fe:5f:28:93:83:ba: 0a:7b:aa:ea:37:c3:0e:ce:13:ba:aa:74:2b:89:5b: 11:36:27:8f:d2:fb:f3:ae:71:97:3f:2a:1b:01:ce: f1:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 05:E0:F9:8B:B5:DE:D0:66:21:BF:32:AA:34:E1:DB:12:4D:C0:19:3D X509v3 Authority Key Identifier: keyid:B2:B2:F4:2B:F1:97:8A:D0:94:18:64:80:A7:DA:00:86:FD:7C:29:19 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/c846f422-c302-4462-b584-700e9346ca09/0/B2B2F42BF1978AD094186480A7DA0086FD7C2919.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B2B2F42BF1978AD094186480A7DA0086FD7C2919.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c846f422-c302-4462-b584-700e9346ca09/0/B2B2F42BF1978AD094186480A7DA0086FD7C2919.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b2:32:ab:22:15:d8:57:07:10:54:6b:7c:b3:99:5c:de:b0:d2: 61:96:f3:13:91:a1:d6:98:98:6e:38:d2:8f:c3:c4:b2:cb:fd: 2c:f3:76:7d:5b:f3:9c:de:c6:b1:80:ba:f4:70:b5:34:7c:ba: ab:24:14:a5:30:38:6e:88:5b:aa:01:00:9f:da:e4:8e:7a:e7: 97:71:f4:0b:0a:66:eb:25:67:0f:82:35:4d:dd:3a:e5:f0:97: da:d2:64:ad:8d:86:b4:6c:62:c9:05:7b:25:b7:38:47:29:88: 75:32:20:da:17:bd:90:1b:3d:d7:a3:8b:bd:4a:85:a6:2f:f5: 96:7f:c2:63:2e:fa:e0:97:94:87:6b:d7:65:eb:25:1f:0c:c1: b2:1b:44:c9:c2:80:fa:84:52:95:0e:4b:a4:13:83:8b:36:a4: 84:3f:e9:30:d9:83:78:6f:49:e5:19:da:75:be:ad:f5:e9:61: 8d:85:21:ac:48:c9:dd:b1:01:06:4f:60:d5:54:5f:d7:3a:6a: 95:14:cf:25:48:c4:a4:be:de:1b:53:c4:73:aa:a3:95:2c:6a: 53:cf:90:fa:0d:de:c3:17:3e:cb:4b:a1:21:aa:f8:98:0a:a1: 2e:75:c0:d0:b6:c5:df:10:39:ad:d2:a3:fd:3a:fd:86:75:6c: 5c:77:18:b3 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUd974qKN7ZP9xmV9Qak5tNmldqt8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjJCMkY0MkJGMTk3OEFEMDk0MTg2NDgwQTdEQTAwODZG RDdDMjkxOTAeFw0yNTEwMTkxMDM2MzJaFw0yNTEwMjIxMjI1MzJaMDMxMTAvBgNV BAMTKDA1RTBGOThCQjVERUQwNjYyMUJGMzJBQTM0RTFEQjEyNERDMDE5M0QwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC5eKf3/eJHQnncyDK8faYijAxT MV4DD5Rd7VS+IfOAUvGe3otpplAi+/fYz6VPrOQF6wtZCLEf0YTGSqnSr1ZUVxcr ccFyBYKZQZExK0DSicFKK+KpjVGSMTRo85WCgzrgl118Yb3f+WMhtw9rtVB4/5jT BWSzcw6AfY+xOMlYDyi4kT/TFiw9uurQ8Lg9YfgMxcVQRYqQpsKdJ1HSxZlSjr5A mwcs1MIk/Yh/Wo98CZv1nFIRrqDC2YfPC4J5jBS2+jCScY7Gl0WKPygyS0VCGSu5 aMKL7OpeJP5fKJODugp7quo3ww7OE7qqdCuJWxE2J4/S+/OucZc/KhsBzvFlAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUBeD5i7Xe0GYhvzKqNOHbEk3AGT0wHwYDVR0j BBgwFoAUsrL0K/GXitCUGGSAp9oAhv18KRkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j ODQ2ZjQyMi1jMzAyLTQ0NjItYjU4NC03MDBlOTM0NmNhMDkvMC9CMkIyRjQyQkYx OTc4QUQwOTQxODY0ODBBN0RBMDA4NkZEN0MyOTE5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQjJCMkY0MkJGMTk3OEFEMDk0MTg2NDgwQTdEQTAwODZGRDdD MjkxOS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYzg0NmY0MjItYzMwMi00NDYyLWI1 ODQtNzAwZTkzNDZjYTA5LzAvQjJCMkY0MkJGMTk3OEFEMDk0MTg2NDgwQTdEQTAw ODZGRDdDMjkxOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALIyqyIV2FcHEFRrfLOZXN6w0mGW8xORodaY mG440o/DxLLL/Szzdn1b85zexrGAuvRwtTR8uqskFKUwOG6IW6oBAJ/a5I5655dx 9AsKZuslZw+CNU3dOuXwl9rSZK2NhrRsYskFeyW3OEcpiHUyINoXvZAbPdeji71K haYv9ZZ/wmMu+uCXlIdr12XrJR8MwbIbRMnCgPqEUpUOS6QTg4s2pIQ/6TDZg3hv SeUZ2nW+rfXpYY2FIaxIyd2xAQZPYNVUX9c6apUUzyVIxKS+3htTxHOqo5UsalPP kPoN3sMXPstLoSGq+JgKoS51wNC2xd8QOa3So/06/YZ1bFx3GLM= -----END CERTIFICATE-----Generated at Mon Oct 20 17:53:58 2025 by rpki-client