$ rpki-client -vvf repo-rpki.idnic.net/repo/ca124e6a-f51b-46d0-8ea3-76b2744558a6/0/B178402BEDE3EC5A5EE2E0E71F736A1360C06AF6.mft File: B178402BEDE3EC5A5EE2E0E71F736A1360C06AF6.mft (raw, json) Hash identifier: uEaq1Fy2zS5jDGyFy3iE8BTzn6gZhesPzQNCXB+vVlo= Subject key identifier: 73:8C:6B:3D:8D:0E:C8:A7:48:E3:93:0F:78:7E:05:56:E1:60:98:29 Authority key identifier: B1:78:40:2B:ED:E3:EC:5A:5E:E2:E0:E7:1F:73:6A:13:60:C0:6A:F6 Certificate issuer: /CN=B178402BEDE3EC5A5EE2E0E71F736A1360C06AF6 Certificate serial: 752E4DDF56D3C1722F24B435D54E5F3E58B60C95 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B178402BEDE3EC5A5EE2E0E71F736A1360C06AF6.cer Subject info access: rsync://repo-rpki.idnic.net/repo/ca124e6a-f51b-46d0-8ea3-76b2744558a6/0/B178402BEDE3EC5A5EE2E0E71F736A1360C06AF6.mft Manifest number: EC Signing time: Sat 18 Oct 2025 01:51:57 +0000 Manifest this update: Sat 18 Oct 2025 01:46:57 +0000 Manifest next update: Tue 21 Oct 2025 08:45:57 +0000 Files and hashes: 1: B178402BEDE3EC5A5EE2E0E71F736A1360C06AF6.crl (hash: 120A93kJxm/JC6220VsyRK86ODeGA+iaqxEV5AFnQ+M=) 2: 3130332e372e3130362e302f32332d3233203d3e20313531353939.roa (hash: gKuzS0cjEmgd3PQlr3qETih9wH6v1uECgkfmF5qpn9s=) 3: 3130332e372e3130372e302f32342d3234203d3e20313531353939.roa (hash: ZOp7UUJVVpn+HE+2CW6AOz2wc15ptx3FxJXIlhX1FTo=) 4: 3130332e372e3130362e302f32342d3234203d3e20313531353939.roa (hash: 0rbZlrsZPTaqVhI90ea5Mcg8UbhZvU1fUTVZXNAKo74=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/ca124e6a-f51b-46d0-8ea3-76b2744558a6/0/B178402BEDE3EC5A5EE2E0E71F736A1360C06AF6.crl rsync://repo-rpki.idnic.net/repo/ca124e6a-f51b-46d0-8ea3-76b2744558a6/0/B178402BEDE3EC5A5EE2E0E71F736A1360C06AF6.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B178402BEDE3EC5A5EE2E0E71F736A1360C06AF6.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 21 Oct 2025 08:45:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 75:2e:4d:df:56:d3:c1:72:2f:24:b4:35:d5:4e:5f:3e:58:b6:0c:95 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B178402BEDE3EC5A5EE2E0E71F736A1360C06AF6 Validity Not Before: Oct 18 01:46:57 2025 GMT Not After : Oct 21 08:45:57 2025 GMT Subject: CN=738C6B3D8D0EC8A748E3930F787E0556E1609829 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:27:aa:3e:4e:6e:98:55:71:7f:ad:2d:45:fd: f3:97:26:e7:da:78:3e:ee:78:74:e5:85:45:3d:25: be:bd:d4:62:a3:57:fc:63:e2:be:29:fa:c5:f6:fd: f5:2f:aa:a1:fd:da:a0:4f:06:97:d3:72:cc:63:8f: 99:42:8d:2f:9d:a2:ba:05:4a:ff:00:1c:3b:55:70: e6:91:11:15:d9:bd:d7:4d:52:18:1c:d7:ee:d4:20: c0:c5:84:11:ce:14:5d:56:cb:03:ac:05:bb:3c:30: 0a:02:34:c6:29:d9:71:7f:c5:83:4b:4c:77:ed:c8: 9a:ea:c1:b9:56:fb:ac:dc:11:1e:56:3c:51:dc:87: 46:cb:e3:4d:7f:58:8e:21:b5:f6:fa:8b:72:79:e8: 10:04:ba:fd:09:d6:9d:6c:1b:2e:7a:6c:b9:44:d6: 24:bb:2d:59:5c:a9:34:dd:4d:68:a1:1a:9f:75:51: de:e5:b8:b6:ea:fe:82:18:fa:fc:e2:54:2b:1a:55: ee:6c:8c:e9:98:40:31:ca:0a:4d:80:2d:b5:4c:45: 6d:8e:fe:88:2b:e3:71:95:44:72:9c:8d:60:47:03: 07:e0:2b:23:5e:38:f3:dc:1b:f8:0b:6b:8d:79:2c: 07:15:a7:ce:5e:08:f5:8f:11:8b:00:3b:67:ed:90: cf:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 73:8C:6B:3D:8D:0E:C8:A7:48:E3:93:0F:78:7E:05:56:E1:60:98:29 X509v3 Authority Key Identifier: keyid:B1:78:40:2B:ED:E3:EC:5A:5E:E2:E0:E7:1F:73:6A:13:60:C0:6A:F6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/ca124e6a-f51b-46d0-8ea3-76b2744558a6/0/B178402BEDE3EC5A5EE2E0E71F736A1360C06AF6.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B178402BEDE3EC5A5EE2E0E71F736A1360C06AF6.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ca124e6a-f51b-46d0-8ea3-76b2744558a6/0/B178402BEDE3EC5A5EE2E0E71F736A1360C06AF6.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ae:7f:fc:ce:b1:1b:e9:ef:b6:c3:97:2d:73:09:6f:8d:4f:93: 69:b6:1f:d9:ec:ae:0d:3d:ea:53:cd:18:ad:77:ea:27:76:f3: b5:b9:03:6f:f9:76:c3:b5:f2:bd:67:4e:92:08:9c:ee:95:ec: 2c:bb:0d:81:cf:03:9e:e2:84:14:fa:63:63:08:a7:2c:94:26: ad:25:1e:68:40:d5:c5:6e:c8:5b:37:b4:a3:83:62:cb:b1:a6: bf:cb:39:21:2b:1e:1a:c2:00:9d:b2:29:9f:94:9a:cc:75:3c: 91:d4:3f:e9:17:2c:3a:1a:c7:02:a6:44:c9:8a:7a:5a:e0:ec: 4c:bf:f4:13:bf:c2:09:b2:9f:fa:b6:69:af:2d:93:85:1c:11: e3:67:3c:78:5b:23:56:df:b8:00:94:f6:24:26:ce:43:0e:13: ce:ae:72:d4:2f:b8:ee:f6:9e:61:2e:0f:85:51:36:af:a4:18: 01:17:d4:3a:71:43:42:82:e3:51:22:46:7b:c5:ad:28:df:36: 91:9b:2d:97:20:4c:af:2a:72:64:80:f8:be:83:52:3b:b9:4c: 9a:ce:e6:93:dd:ad:54:90:d9:b2:10:81:47:98:2a:ab:b7:05: 85:53:ec:96:45:11:d6:cd:28:4c:5a:f6:62:47:b4:f0:9d:71: b0:6c:e2:62 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUdS5N31bTwXIvJLQ11U5fPli2DJUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjE3ODQwMkJFREUzRUM1QTVFRTJFMEU3MUY3MzZBMTM2 MEMwNkFGNjAeFw0yNTEwMTgwMTQ2NTdaFw0yNTEwMjEwODQ1NTdaMDMxMTAvBgNV BAMTKDczOEM2QjNEOEQwRUM4QTc0OEUzOTMwRjc4N0UwNTU2RTE2MDk4MjkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDdJ6o+Tm6YVXF/rS1F/fOXJufa eD7ueHTlhUU9Jb691GKjV/xj4r4p+sX2/fUvqqH92qBPBpfTcsxjj5lCjS+doroF Sv8AHDtVcOaRERXZvddNUhgc1+7UIMDFhBHOFF1WywOsBbs8MAoCNMYp2XF/xYNL THftyJrqwblW+6zcER5WPFHch0bL401/WI4htfb6i3J56BAEuv0J1p1sGy56bLlE 1iS7LVlcqTTdTWihGp91Ud7luLbq/oIY+vziVCsaVe5sjOmYQDHKCk2ALbVMRW2O /ogr43GVRHKcjWBHAwfgKyNeOPPcG/gLa415LAcVp85eCPWPEYsAO2ftkM/PAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUc4xrPY0OyKdI45MPeH4FVuFgmCkwHwYDVR0j BBgwFoAUsXhAK+3j7Fpe4uDnH3NqE2DAavYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j YTEyNGU2YS1mNTFiLTQ2ZDAtOGVhMy03NmIyNzQ0NTU4YTYvMC9CMTc4NDAyQkVE RTNFQzVBNUVFMkUwRTcxRjczNkExMzYwQzA2QUY2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQjE3ODQwMkJFREUzRUM1QTVFRTJFMEU3MUY3MzZBMTM2MEMw NkFGNi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vY2ExMjRlNmEtZjUxYi00NmQwLThl YTMtNzZiMjc0NDU1OGE2LzAvQjE3ODQwMkJFREUzRUM1QTVFRTJFMEU3MUY3MzZB MTM2MEMwNkFGNi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAK5//M6xG+nvtsOXLXMJb41Pk2m2H9nsrg09 6lPNGK136id287W5A2/5dsO18r1nTpIInO6V7Cy7DYHPA57ihBT6Y2MIpyyUJq0l HmhA1cVuyFs3tKODYsuxpr/LOSErHhrCAJ2yKZ+Umsx1PJHUP+kXLDoaxwKmRMmK elrg7Ey/9BO/wgmyn/q2aa8tk4UcEeNnPHhbI1bfuACU9iQmzkMOE86uctQvuO72 nmEuD4VRNq+kGAEX1DpxQ0KC41EiRnvFrSjfNpGbLZcgTK8qcmSA+L6DUju5TJrO 5pPdrVSQ2bIQgUeYKqu3BYVT7JZFEdbNKExa9mJHtPCdcbBs4mI= -----END CERTIFICATE-----Generated at Mon Oct 20 09:45:02 2025 by rpki-client