$ rpki-client -vvf repo-rpki.idnic.net/repo/cafcbfbb-ba3f-4d53-a04f-14d6f4be0cb1/1/B92F0FB3E141D52ED2A71FA483ED3C6D723F60E2.mft File: B92F0FB3E141D52ED2A71FA483ED3C6D723F60E2.mft (raw, json) Hash identifier: MK71/el3gh5dnicrd7txM1sK2de9hJOmwLp6ONXgZvA= Subject key identifier: 6E:4D:71:BD:C7:67:44:6A:D4:57:5D:40:68:3F:00:27:2F:B4:ED:35 Authority key identifier: B9:2F:0F:B3:E1:41:D5:2E:D2:A7:1F:A4:83:ED:3C:6D:72:3F:60:E2 Certificate issuer: /CN=B92F0FB3E141D52ED2A71FA483ED3C6D723F60E2 Certificate serial: 67BE05A6936453F7CF0FE2E2E8464DE69E2A86B6 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B92F0FB3E141D52ED2A71FA483ED3C6D723F60E2.cer Subject info access: rsync://repo-rpki.idnic.net/repo/cafcbfbb-ba3f-4d53-a04f-14d6f4be0cb1/1/B92F0FB3E141D52ED2A71FA483ED3C6D723F60E2.mft Manifest number: 91 Signing time: Sat 18 Oct 2025 13:41:32 +0000 Manifest this update: Sat 18 Oct 2025 13:36:32 +0000 Manifest next update: Tue 21 Oct 2025 21:48:32 +0000 Files and hashes: 1: B92F0FB3E141D52ED2A71FA483ED3C6D723F60E2.crl (hash: 5MQLrOX66OMURwoisTBVONTJkV1r4DtqJ2PA0S1y1ZQ=) 2: 323030313a6466343a363463303a3a2f34382d3438203d3e20313533313430.roa (hash: yyzmdDb8FTjdC+THNvwdhgAOOXsuzFTHgJxxHYpFD6k=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/cafcbfbb-ba3f-4d53-a04f-14d6f4be0cb1/1/B92F0FB3E141D52ED2A71FA483ED3C6D723F60E2.crl rsync://repo-rpki.idnic.net/repo/cafcbfbb-ba3f-4d53-a04f-14d6f4be0cb1/1/B92F0FB3E141D52ED2A71FA483ED3C6D723F60E2.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B92F0FB3E141D52ED2A71FA483ED3C6D723F60E2.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 21 Oct 2025 21:48:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 67:be:05:a6:93:64:53:f7:cf:0f:e2:e2:e8:46:4d:e6:9e:2a:86:b6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B92F0FB3E141D52ED2A71FA483ED3C6D723F60E2 Validity Not Before: Oct 18 13:36:32 2025 GMT Not After : Oct 21 21:48:32 2025 GMT Subject: CN=6E4D71BDC767446AD4575D40683F00272FB4ED35 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:8c:c9:35:69:53:08:b6:03:fc:da:79:db:df: 5e:21:7b:77:73:97:97:4a:50:21:99:1e:7c:ab:06: 74:59:b2:e9:5e:aa:3a:98:b6:0a:34:08:8c:f2:7f: fa:f2:54:26:f2:78:9d:51:17:58:5d:e4:11:e1:ed: b8:09:4e:83:c8:74:73:f1:4e:b1:62:56:14:b6:cc: 84:ba:0d:22:c3:69:9b:c6:77:cc:e4:82:0c:30:ac: f3:70:33:ef:d2:24:dc:89:3f:f0:08:d8:f6:82:a4: cf:66:65:c4:71:d9:5c:81:ea:64:a2:e5:aa:1c:12: 77:8c:b1:89:f0:60:2c:2a:dc:ef:75:38:f2:ab:4d: b4:75:d5:2f:71:3f:c3:44:48:d5:ca:29:00:86:29: 0a:42:39:13:17:79:b7:14:32:7a:b6:c2:80:eb:7e: 59:a3:7a:18:fa:94:c6:43:a0:13:c1:fb:ea:19:3f: 9e:db:3f:4b:19:c8:00:86:9e:7f:c9:cf:b7:8d:dd: a6:a4:59:35:84:4a:35:82:f4:d5:66:26:c9:37:40: 55:1f:cb:49:46:24:78:da:88:47:df:f3:e6:96:62: 5f:c2:9b:a6:99:c1:49:3f:36:5e:e4:52:df:93:af: 8c:11:55:be:df:89:fe:0e:3a:7d:2e:80:b9:4a:32: c5:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6E:4D:71:BD:C7:67:44:6A:D4:57:5D:40:68:3F:00:27:2F:B4:ED:35 X509v3 Authority Key Identifier: keyid:B9:2F:0F:B3:E1:41:D5:2E:D2:A7:1F:A4:83:ED:3C:6D:72:3F:60:E2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/cafcbfbb-ba3f-4d53-a04f-14d6f4be0cb1/1/B92F0FB3E141D52ED2A71FA483ED3C6D723F60E2.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B92F0FB3E141D52ED2A71FA483ED3C6D723F60E2.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/cafcbfbb-ba3f-4d53-a04f-14d6f4be0cb1/1/B92F0FB3E141D52ED2A71FA483ED3C6D723F60E2.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption cb:48:6c:f2:b5:1c:42:8a:0c:47:eb:e9:81:e5:9d:8d:fc:71: 8c:30:c7:c4:a8:21:03:74:24:a5:5a:cb:74:a8:3d:03:56:0a: 80:01:f3:15:9b:b1:1e:59:75:fb:cb:33:4d:e6:b1:cd:1c:0f: eb:d4:da:b7:bd:dd:fa:16:74:6a:cd:b9:99:56:74:49:dc:76: 61:e2:3c:2e:32:d1:be:76:55:46:c0:1c:60:18:45:ca:b1:22: a1:f2:0a:75:56:e3:1d:69:c0:ef:65:c6:09:de:d5:e8:97:1f: 4d:0f:0d:30:99:ea:d9:6d:9d:93:3a:b2:fb:72:02:e8:78:4a: 50:35:48:9b:11:ac:bc:0e:61:93:8a:31:71:9b:92:fe:df:36: aa:ec:5a:f9:7f:40:80:8b:9a:05:a8:dd:0a:fa:ad:40:bc:4b: c5:67:36:cd:46:56:c6:f5:48:5b:c6:fa:6b:7e:8c:11:76:ba: 0b:d9:3f:54:29:db:8a:a3:9d:f4:b0:ca:62:c0:8a:90:f9:e4: 9d:43:1d:3d:67:c6:90:25:52:b7:17:0e:28:c7:5f:51:1a:ef: c1:98:11:4f:bc:49:d9:e6:d2:c2:9a:27:b2:1e:bd:30:41:90: 39:10:b6:d7:ba:e7:3c:1c:34:9f:62:f7:07:dc:07:d4:60:b9: cb:6a:49:2f -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUZ74FppNkU/fPD+Li6EZN5p4qhrYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjkyRjBGQjNFMTQxRDUyRUQyQTcxRkE0ODNFRDNDNkQ3 MjNGNjBFMjAeFw0yNTEwMTgxMzM2MzJaFw0yNTEwMjEyMTQ4MzJaMDMxMTAvBgNV BAMTKDZFNEQ3MUJEQzc2NzQ0NkFENDU3NUQ0MDY4M0YwMDI3MkZCNEVEMzUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCXjMk1aVMItgP82nnb314he3dz l5dKUCGZHnyrBnRZsuleqjqYtgo0CIzyf/ryVCbyeJ1RF1hd5BHh7bgJToPIdHPx TrFiVhS2zIS6DSLDaZvGd8zkggwwrPNwM+/SJNyJP/AI2PaCpM9mZcRx2VyB6mSi 5aocEneMsYnwYCwq3O91OPKrTbR11S9xP8NESNXKKQCGKQpCORMXebcUMnq2woDr flmjehj6lMZDoBPB++oZP57bP0sZyACGnn/Jz7eN3aakWTWESjWC9NVmJsk3QFUf y0lGJHjaiEff8+aWYl/Cm6aZwUk/Nl7kUt+Tr4wRVb7fif4OOn0ugLlKMsVRAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUbk1xvcdnRGrUV11AaD8AJy+07TUwHwYDVR0j BBgwFoAUuS8Ps+FB1S7Spx+kg+08bXI/YOIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j YWZjYmZiYi1iYTNmLTRkNTMtYTA0Zi0xNGQ2ZjRiZTBjYjEvMS9COTJGMEZCM0Ux NDFENTJFRDJBNzFGQTQ4M0VEM0M2RDcyM0Y2MEUyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQjkyRjBGQjNFMTQxRDUyRUQyQTcxRkE0ODNFRDNDNkQ3MjNG NjBFMi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vY2FmY2JmYmItYmEzZi00ZDUzLWEw NGYtMTRkNmY0YmUwY2IxLzEvQjkyRjBGQjNFMTQxRDUyRUQyQTcxRkE0ODNFRDND NkQ3MjNGNjBFMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAMtIbPK1HEKKDEfr6YHlnY38cYwwx8SoIQN0 JKVay3SoPQNWCoAB8xWbsR5ZdfvLM03msc0cD+vU2re93foWdGrNuZlWdEncdmHi PC4y0b52VUbAHGAYRcqxIqHyCnVW4x1pwO9lxgne1eiXH00PDTCZ6tltnZM6svty Auh4SlA1SJsRrLwOYZOKMXGbkv7fNqrsWvl/QICLmgWo3Qr6rUC8S8VnNs1GVsb1 SFvG+mt+jBF2ugvZP1Qp24qjnfSwymLAipD55J1DHT1nxpAlUrcXDijHX1Ea78GY EU+8Sdnm0sKaJ7IevTBBkDkQtte65zwcNJ9i9wfcB9RguctqSS8= -----END CERTIFICATE-----Generated at Mon Oct 20 20:28:30 2025 by rpki-client