$ rpki-client -vvf repo-rpki.idnic.net/repo/ca631d77-f805-439c-98f4-b0da60fe8dd1/0/B3032084B1211BBB522E01AB56EC94BFBD1C91BB.mft File: B3032084B1211BBB522E01AB56EC94BFBD1C91BB.mft (raw, json) Hash identifier: iIkgh1e1PuJnd+X+1869LM/mLOX9dZwC/wSjRy8oKv0= Subject key identifier: 1E:79:D0:34:CB:F1:DC:BA:E6:8B:38:AB:D2:26:F2:41:50:7C:C5:0C Authority key identifier: B3:03:20:84:B1:21:1B:BB:52:2E:01:AB:56:EC:94:BF:BD:1C:91:BB Certificate issuer: /CN=B3032084B1211BBB522E01AB56EC94BFBD1C91BB Certificate serial: 7A925A752EE0E42749FE329EFCC09F2919E1E4B6 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B3032084B1211BBB522E01AB56EC94BFBD1C91BB.cer Subject info access: rsync://repo-rpki.idnic.net/repo/ca631d77-f805-439c-98f4-b0da60fe8dd1/0/B3032084B1211BBB522E01AB56EC94BFBD1C91BB.mft Manifest number: 0239 Signing time: Mon 20 Oct 2025 11:52:06 +0000 Manifest this update: Mon 20 Oct 2025 11:47:06 +0000 Manifest next update: Thu 23 Oct 2025 16:37:06 +0000 Files and hashes: 1: 3130332e31302e3137302e302f32342d3234203d3e203536323535.roa (hash: oyYL/ZrPIXcKrR/gCu+KLuQHBsbf7zO4u+0wSABNiSw=) 2: B3032084B1211BBB522E01AB56EC94BFBD1C91BB.crl (hash: DxGfAbj8DPYQ5aS3QlGFkL6p36hDzZrpHLX+bulgEAY=) 3: 3130332e31302e3137312e302f32342d3234203d3e203536323535.roa (hash: AIOs31+uc6Pf39KqIrmoIMFECvqIwvPghHjhEcSTbxg=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/ca631d77-f805-439c-98f4-b0da60fe8dd1/0/B3032084B1211BBB522E01AB56EC94BFBD1C91BB.crl rsync://repo-rpki.idnic.net/repo/ca631d77-f805-439c-98f4-b0da60fe8dd1/0/B3032084B1211BBB522E01AB56EC94BFBD1C91BB.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B3032084B1211BBB522E01AB56EC94BFBD1C91BB.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 Oct 2025 11:48:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7a:92:5a:75:2e:e0:e4:27:49:fe:32:9e:fc:c0:9f:29:19:e1:e4:b6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B3032084B1211BBB522E01AB56EC94BFBD1C91BB Validity Not Before: Oct 20 11:47:06 2025 GMT Not After : Oct 23 16:37:06 2025 GMT Subject: CN=1E79D034CBF1DCBAE68B38ABD226F241507CC50C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:9e:5d:01:14:7d:9e:ea:c7:6b:93:13:82:7d: 70:33:f6:08:45:62:8a:40:93:91:59:4d:0b:38:37: a8:73:29:ff:54:b9:b3:d8:8c:5f:c1:7a:db:7e:e8: 2a:2d:20:2b:00:e2:74:46:29:dc:14:a9:60:e4:9f: 9c:86:cc:ae:fa:b3:c5:67:f9:00:79:2e:ab:ae:39: 82:04:c0:fe:c5:10:2e:fd:f8:f1:19:c7:e5:5b:4e: be:c1:d3:eb:b4:c9:37:35:73:5d:28:2f:5f:13:da: a0:c5:ee:92:49:77:64:99:d8:d1:33:95:86:9f:92: 36:fa:d5:1d:a1:1e:25:46:1a:65:78:a9:69:9d:79: 67:5a:96:43:cb:db:e2:f2:8f:ec:8b:0b:b9:87:e1: 45:fe:da:4e:fc:3c:a0:4b:89:14:44:de:1d:b5:d6: 2a:ce:4f:bd:23:58:5a:34:f9:fa:e3:af:70:36:0a: 17:ab:6b:88:a7:70:e8:e2:96:06:cc:8f:a8:3e:c8: f5:9d:eb:24:be:13:41:f0:3d:08:fe:b1:a9:ad:94: cb:e4:1b:c1:89:80:f3:8f:bf:66:91:ff:3b:5f:a8: 31:53:d3:e9:5c:a8:6a:23:8c:2b:23:13:8d:29:09: 2a:2f:8e:ef:16:84:f7:ff:25:23:bc:d3:4c:d6:59: a2:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1E:79:D0:34:CB:F1:DC:BA:E6:8B:38:AB:D2:26:F2:41:50:7C:C5:0C X509v3 Authority Key Identifier: keyid:B3:03:20:84:B1:21:1B:BB:52:2E:01:AB:56:EC:94:BF:BD:1C:91:BB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/ca631d77-f805-439c-98f4-b0da60fe8dd1/0/B3032084B1211BBB522E01AB56EC94BFBD1C91BB.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B3032084B1211BBB522E01AB56EC94BFBD1C91BB.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ca631d77-f805-439c-98f4-b0da60fe8dd1/0/B3032084B1211BBB522E01AB56EC94BFBD1C91BB.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2d:ad:2d:e1:e6:9a:2e:98:47:5b:e3:d3:64:ff:61:98:ce:8f: 18:07:ba:01:fa:61:22:31:ad:79:6f:6a:fb:a5:d1:77:5d:bd: 70:4e:06:b5:9b:e4:bb:ee:e1:7d:01:fe:7c:49:4e:db:64:82: 2b:27:85:ee:7e:ee:b9:59:49:7b:d8:f0:e8:17:ff:57:eb:bd: 10:f5:d7:cc:34:8e:a4:c1:d1:ba:e3:a8:be:2c:cf:71:68:8b: 2b:41:cb:ec:26:c7:f4:49:b9:fc:b9:0a:83:34:2a:dd:99:3a: a6:06:57:34:00:f2:42:96:34:44:7f:07:ae:d9:69:c4:f9:cb: 55:0f:fc:4f:32:58:34:2b:82:e6:ed:fa:4d:e9:25:bc:18:c9: 26:2a:ee:a4:7f:da:b9:d4:6b:08:5b:e7:fe:c2:8e:a8:35:96: fc:7c:05:58:8e:03:25:ad:3c:b8:f5:0b:5c:3a:10:06:35:15: d7:f7:80:46:e3:91:53:21:c6:5e:04:a3:14:e1:e2:c1:22:30: 69:2d:aa:18:48:7e:f7:a0:68:50:a8:f2:9a:f4:90:c7:ce:fc: c8:c1:61:db:47:cd:5d:73:d1:74:9f:de:09:7f:fa:22:dd:43: ea:b2:aa:2d:ac:eb:5b:f3:33:0a:b3:ce:12:15:25:07:04:36: 69:10:3c:13 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUepJadS7g5CdJ/jKe/MCfKRnh5LYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjMwMzIwODRCMTIxMUJCQjUyMkUwMUFCNTZFQzk0QkZC RDFDOTFCQjAeFw0yNTEwMjAxMTQ3MDZaFw0yNTEwMjMxNjM3MDZaMDMxMTAvBgNV BAMTKDFFNzlEMDM0Q0JGMURDQkFFNjhCMzhBQkQyMjZGMjQxNTA3Q0M1MEMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCpnl0BFH2e6sdrkxOCfXAz9ghF YopAk5FZTQs4N6hzKf9UubPYjF/Bett+6CotICsA4nRGKdwUqWDkn5yGzK76s8Vn +QB5LquuOYIEwP7FEC79+PEZx+VbTr7B0+u0yTc1c10oL18T2qDF7pJJd2SZ2NEz lYafkjb61R2hHiVGGmV4qWmdeWdalkPL2+Lyj+yLC7mH4UX+2k78PKBLiRRE3h21 1irOT70jWFo0+frjr3A2Chera4incOjilgbMj6g+yPWd6yS+E0HwPQj+samtlMvk G8GJgPOPv2aR/ztfqDFT0+lcqGojjCsjE40pCSovju8WhPf/JSO800zWWaLTAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUHnnQNMvx3Lrmizir0ibyQVB8xQwwHwYDVR0j BBgwFoAUswMghLEhG7tSLgGrVuyUv70ckbswDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j YTYzMWQ3Ny1mODA1LTQzOWMtOThmNC1iMGRhNjBmZThkZDEvMC9CMzAzMjA4NEIx MjExQkJCNTIyRTAxQUI1NkVDOTRCRkJEMUM5MUJCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQjMwMzIwODRCMTIxMUJCQjUyMkUwMUFCNTZFQzk0QkZCRDFD OTFCQi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vY2E2MzFkNzctZjgwNS00MzljLTk4 ZjQtYjBkYTYwZmU4ZGQxLzAvQjMwMzIwODRCMTIxMUJCQjUyMkUwMUFCNTZFQzk0 QkZCRDFDOTFCQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAC2tLeHmmi6YR1vj02T/YZjOjxgHugH6YSIx rXlvavul0XddvXBOBrWb5Lvu4X0B/nxJTttkgisnhe5+7rlZSXvY8OgX/1frvRD1 18w0jqTB0brjqL4sz3FoiytBy+wmx/RJufy5CoM0Kt2ZOqYGVzQA8kKWNER/B67Z acT5y1UP/E8yWDQrgubt+k3pJbwYySYq7qR/2rnUawhb5/7Cjqg1lvx8BViOAyWt PLj1C1w6EAY1Fdf3gEbjkVMhxl4EoxTh4sEiMGktqhhIfvegaFCo8pr0kMfO/MjB YdtHzV1z0XSf3gl/+iLdQ+qyqi2s61vzMwqzzhIVJQcENmkQPBM= -----END CERTIFICATE-----Generated at Mon Oct 20 18:08:09 2025 by rpki-client