$ rpki-client -vvf repo-rpki.idnic.net/repo/cf7b7677-6204-405f-8ba2-e714324c15d7/0/B76CEE66CD329E4EDD33E6D3452A33FBBE00D741.mft File: B76CEE66CD329E4EDD33E6D3452A33FBBE00D741.mft (raw, json) Hash identifier: 0dGSGIj/f1tuywaG4+NdlIJvYNTkZgrx86Os8+FKUEU= Subject key identifier: B9:83:6A:C4:7E:1E:F9:8E:26:88:0F:3E:D4:D7:81:1C:80:D4:BE:25 Authority key identifier: B7:6C:EE:66:CD:32:9E:4E:DD:33:E6:D3:45:2A:33:FB:BE:00:D7:41 Certificate issuer: /CN=B76CEE66CD329E4EDD33E6D3452A33FBBE00D741 Certificate serial: 38DEDB4A9507A8B798B03902B50C8E6A1D2EF0E0 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B76CEE66CD329E4EDD33E6D3452A33FBBE00D741.cer Subject info access: rsync://repo-rpki.idnic.net/repo/cf7b7677-6204-405f-8ba2-e714324c15d7/0/B76CEE66CD329E4EDD33E6D3452A33FBBE00D741.mft Manifest number: 0233 Signing time: Sat 18 Oct 2025 13:20:54 +0000 Manifest this update: Sat 18 Oct 2025 13:15:54 +0000 Manifest next update: Tue 21 Oct 2025 20:23:54 +0000 Files and hashes: 1: 3130332e3138362e39342e302f32332d3234203d3e20313439373430.roa (hash: 36f1oVCDIma5/edGeBmPtM2U4zeHtnBlVDsNRr5sez8=) 2: B76CEE66CD329E4EDD33E6D3452A33FBBE00D741.crl (hash: 984Jv9u2Mfn782hWZPEgiJSC5czzgUFdiAdKnFtFPbI=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/cf7b7677-6204-405f-8ba2-e714324c15d7/0/B76CEE66CD329E4EDD33E6D3452A33FBBE00D741.crl rsync://repo-rpki.idnic.net/repo/cf7b7677-6204-405f-8ba2-e714324c15d7/0/B76CEE66CD329E4EDD33E6D3452A33FBBE00D741.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B76CEE66CD329E4EDD33E6D3452A33FBBE00D741.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 21 Oct 2025 20:23:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 38:de:db:4a:95:07:a8:b7:98:b0:39:02:b5:0c:8e:6a:1d:2e:f0:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B76CEE66CD329E4EDD33E6D3452A33FBBE00D741 Validity Not Before: Oct 18 13:15:54 2025 GMT Not After : Oct 21 20:23:54 2025 GMT Subject: CN=B9836AC47E1EF98E26880F3ED4D7811C80D4BE25 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:db:a7:e5:c0:23:5a:a9:7f:a6:f0:7b:76:be: 9f:b4:a9:c9:c5:83:2d:5f:8f:0a:be:83:f5:0c:8b: e9:ed:42:64:6a:97:cb:b0:e0:1f:1c:6c:db:20:83: 90:c2:97:ff:61:78:26:5c:e2:5a:95:b6:7b:49:98: 6b:59:55:f3:e3:40:9a:8e:31:4d:4b:bf:78:c1:37: 9f:a4:fc:65:ff:33:a2:d1:2b:4f:d3:43:57:cb:3b: c3:bd:d6:91:39:f0:c4:87:e8:c6:fe:42:6f:d2:94: c9:a0:40:ac:45:65:4d:49:5a:2f:a2:7b:05:96:6c: db:d6:01:b0:98:f1:cb:b7:2b:98:c3:ed:33:eb:be: 86:81:49:d6:12:48:35:64:a3:bf:5c:84:f0:60:ba: d8:45:b7:3b:58:03:29:cd:67:26:f9:1b:2c:5b:25: 60:00:b4:18:39:19:ec:c8:ba:d4:b2:7a:29:75:bc: f2:26:93:4e:2c:d1:e1:32:32:dd:d3:03:ae:c7:0e: 07:c4:e2:b8:7c:98:cc:cc:f8:af:e0:f3:49:34:06: 2e:0f:2f:b7:72:87:c4:92:75:e9:10:50:8f:81:5c: ba:6a:c7:2b:9f:55:c2:9e:3c:10:84:19:2e:06:53: a9:07:81:42:f5:54:06:3b:27:6c:06:a3:11:81:5e: 18:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:83:6A:C4:7E:1E:F9:8E:26:88:0F:3E:D4:D7:81:1C:80:D4:BE:25 X509v3 Authority Key Identifier: keyid:B7:6C:EE:66:CD:32:9E:4E:DD:33:E6:D3:45:2A:33:FB:BE:00:D7:41 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/cf7b7677-6204-405f-8ba2-e714324c15d7/0/B76CEE66CD329E4EDD33E6D3452A33FBBE00D741.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B76CEE66CD329E4EDD33E6D3452A33FBBE00D741.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/cf7b7677-6204-405f-8ba2-e714324c15d7/0/B76CEE66CD329E4EDD33E6D3452A33FBBE00D741.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption d9:bc:7f:a6:8d:d7:26:d6:09:9e:02:6c:b1:34:d3:71:4f:a9: e7:27:ac:a0:a2:5c:5b:dd:d5:58:61:fe:0b:13:b0:93:44:12: 81:eb:24:57:74:7f:6c:76:b7:ae:07:ad:09:6a:83:72:5b:03: 28:88:11:8d:04:9f:65:9e:7a:a4:37:51:35:49:5a:de:e2:78: f6:0e:d8:ec:b4:a2:07:8f:77:6c:ed:71:48:f0:8d:09:60:02: f0:3c:08:57:09:0e:87:4e:e7:f7:e8:82:79:bf:e2:83:93:27: fe:dc:1c:b2:bb:a2:bf:f9:9d:a1:c7:3f:0a:4d:7b:19:c6:ec: 56:a8:3e:23:7e:91:5a:a4:37:d0:ca:02:2f:fc:01:b4:27:7d: 02:e3:d7:76:f0:97:a3:1b:29:69:e9:09:aa:3e:81:1e:2a:4e: d9:04:d9:37:1e:da:4a:f1:16:44:9d:4d:62:23:10:28:45:b5: 8a:aa:8a:43:c3:26:e3:7b:aa:28:71:7e:25:d1:75:f5:40:4b: f8:a9:27:ce:44:c9:ce:37:8c:b0:9b:c9:cd:1d:a4:c3:2d:a2: 86:52:7a:95:54:9e:b6:b7:cd:3b:89:37:81:e2:05:80:5e:1f: aa:3c:13:13:4a:52:48:59:53:11:71:dc:b4:e3:4e:09:39:de: ef:1c:93:78 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUON7bSpUHqLeYsDkCtQyOah0u8OAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjc2Q0VFNjZDRDMyOUU0RUREMzNFNkQzNDUyQTMzRkJC RTAwRDc0MTAeFw0yNTEwMTgxMzE1NTRaFw0yNTEwMjEyMDIzNTRaMDMxMTAvBgNV BAMTKEI5ODM2QUM0N0UxRUY5OEUyNjg4MEYzRUQ0RDc4MTFDODBENEJFMjUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC726flwCNaqX+m8Ht2vp+0qcnF gy1fjwq+g/UMi+ntQmRql8uw4B8cbNsgg5DCl/9heCZc4lqVtntJmGtZVfPjQJqO MU1Lv3jBN5+k/GX/M6LRK0/TQ1fLO8O91pE58MSH6Mb+Qm/SlMmgQKxFZU1JWi+i ewWWbNvWAbCY8cu3K5jD7TPrvoaBSdYSSDVko79chPBguthFtztYAynNZyb5Gyxb JWAAtBg5GezIutSyeil1vPImk04s0eEyMt3TA67HDgfE4rh8mMzM+K/g80k0Bi4P L7dyh8SSdekQUI+BXLpqxyufVcKePBCEGS4GU6kHgUL1VAY7J2wGoxGBXhhfAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUuYNqxH4e+Y4miA8+1NeBHIDUviUwHwYDVR0j BBgwFoAUt2zuZs0ynk7dM+bTRSoz+74A10EwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j ZjdiNzY3Ny02MjA0LTQwNWYtOGJhMi1lNzE0MzI0YzE1ZDcvMC9CNzZDRUU2NkNE MzI5RTRFREQzM0U2RDM0NTJBMzNGQkJFMDBENzQxLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQjc2Q0VFNjZDRDMyOUU0RUREMzNFNkQzNDUyQTMzRkJCRTAw RDc0MS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vY2Y3Yjc2NzctNjIwNC00MDVmLThi YTItZTcxNDMyNGMxNWQ3LzAvQjc2Q0VFNjZDRDMyOUU0RUREMzNFNkQzNDUyQTMz RkJCRTAwRDc0MS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBANm8f6aN1ybWCZ4CbLE003FPqecnrKCiXFvd 1Vhh/gsTsJNEEoHrJFd0f2x2t64HrQlqg3JbAyiIEY0En2WeeqQ3UTVJWt7iePYO 2Oy0ogePd2ztcUjwjQlgAvA8CFcJDodO5/fognm/4oOTJ/7cHLK7or/5naHHPwpN exnG7FaoPiN+kVqkN9DKAi/8AbQnfQLj13bwl6MbKWnpCao+gR4qTtkE2Tce2krx FkSdTWIjEChFtYqqikPDJuN7qihxfiXRdfVAS/ipJ85Eyc43jLCbyc0dpMMtooZS epVUnra3zTuJN4HiBYBeH6o8ExNKUkhZUxFx3LTjTgk53u8ck3g= -----END CERTIFICATE-----Generated at Mon Oct 20 15:40:15 2025 by rpki-client