$ rpki-client -vvf repo-rpki.idnic.net/repo/d044f918-9332-4257-b510-381c8590ff54/0/B126A372835801BBB738696C56DCF255D032D42F.mft File: B126A372835801BBB738696C56DCF255D032D42F.mft (raw, json) Hash identifier: 0lq7kq6Iv7kAxVEVWcS97dkgbLV16wONuozyDGC8VJI= Subject key identifier: 2D:D1:48:EB:C3:FA:3F:64:B5:73:9C:91:57:1D:A5:58:C1:F8:61:99 Authority key identifier: B1:26:A3:72:83:58:01:BB:B7:38:69:6C:56:DC:F2:55:D0:32:D4:2F Certificate issuer: /CN=B126A372835801BBB738696C56DCF255D032D42F Certificate serial: 5361AD6CF38F51BCB0C73F82FF3F6E4AC7B77190 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B126A372835801BBB738696C56DCF255D032D42F.cer Subject info access: rsync://repo-rpki.idnic.net/repo/d044f918-9332-4257-b510-381c8590ff54/0/B126A372835801BBB738696C56DCF255D032D42F.mft Manifest number: 0397 Signing time: Sun 19 Oct 2025 00:31:54 +0000 Manifest this update: Sun 19 Oct 2025 00:26:54 +0000 Manifest next update: Wed 22 Oct 2025 08:40:54 +0000 Files and hashes: 1: B126A372835801BBB738696C56DCF255D032D42F.crl (hash: 4CeQ9T8d5gcCwgRshZTHqSKzSXbPzB9s/LLXiPqM+a8=) 2: 3130332e3136362e33342e302f32332d3234203d3e203137393935.roa (hash: Nmtn3LlfweyxwcAEh/9aYsa4vVfStr8hvIJSQMmS8CI=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/d044f918-9332-4257-b510-381c8590ff54/0/B126A372835801BBB738696C56DCF255D032D42F.crl rsync://repo-rpki.idnic.net/repo/d044f918-9332-4257-b510-381c8590ff54/0/B126A372835801BBB738696C56DCF255D032D42F.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B126A372835801BBB738696C56DCF255D032D42F.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 Oct 2025 08:40:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 53:61:ad:6c:f3:8f:51:bc:b0:c7:3f:82:ff:3f:6e:4a:c7:b7:71:90 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B126A372835801BBB738696C56DCF255D032D42F Validity Not Before: Oct 19 00:26:54 2025 GMT Not After : Oct 22 08:40:54 2025 GMT Subject: CN=2DD148EBC3FA3F64B5739C91571DA558C1F86199 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f4:be:b7:4d:cf:7a:57:00:a8:4c:2e:4d:b3:0e: ae:ab:77:ce:f4:e9:65:78:8f:d3:38:ec:59:f6:18: c0:a7:26:e8:55:66:ec:1a:31:ac:84:f4:66:04:36: a8:a8:66:a1:3f:a6:b9:ef:9b:d2:2c:2f:7c:ff:e4: 38:bf:d0:88:08:48:86:aa:0a:3e:ad:33:5a:5d:47: 00:d9:4d:02:ba:4f:3e:cb:70:75:77:d7:65:a4:3a: 89:39:6e:18:a8:8f:7c:de:49:d7:f0:a5:13:a0:e0: a0:3d:35:58:9c:da:9f:e8:0c:6d:32:23:97:43:f2: 55:25:72:70:1b:41:9d:55:dd:21:0b:49:96:9f:4d: ab:e9:cf:f2:01:fc:7c:c5:86:00:02:a2:eb:10:52: 6a:9d:73:18:33:8b:b6:3f:bd:a3:ee:53:66:2a:b6: 9d:79:70:21:7a:ca:99:a2:7f:1c:fa:2e:96:62:06: 97:76:15:7d:db:9a:08:c9:35:59:97:fc:0a:8d:4b: d4:6b:12:6d:9a:8d:67:c2:68:05:70:3f:4a:56:55: f6:a3:30:15:d1:32:34:eb:a3:bf:90:d6:08:52:9f: 9d:33:7c:9b:aa:fd:c3:f9:14:71:57:a1:0d:ce:48: f1:b7:c4:88:1c:a9:08:93:b2:a3:5d:f4:57:d6:32: 47:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:D1:48:EB:C3:FA:3F:64:B5:73:9C:91:57:1D:A5:58:C1:F8:61:99 X509v3 Authority Key Identifier: keyid:B1:26:A3:72:83:58:01:BB:B7:38:69:6C:56:DC:F2:55:D0:32:D4:2F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/d044f918-9332-4257-b510-381c8590ff54/0/B126A372835801BBB738696C56DCF255D032D42F.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B126A372835801BBB738696C56DCF255D032D42F.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d044f918-9332-4257-b510-381c8590ff54/0/B126A372835801BBB738696C56DCF255D032D42F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 55:08:8e:46:ea:b4:5e:3f:0d:ec:f2:31:c3:45:d8:4b:9d:f5: f5:f4:c1:85:64:bf:2d:5e:ba:d8:80:b0:85:20:e4:15:2e:6c: 87:7a:17:9b:4b:54:47:be:a0:91:fd:8c:51:c1:48:52:72:f7: f0:62:75:52:79:69:8b:a2:be:ad:93:4f:5d:eb:e8:eb:a8:d6: 8b:ba:47:f9:dd:92:d9:b0:e7:13:9d:b2:c0:de:72:47:1f:01: db:79:9c:f2:35:ed:f3:76:88:3a:c7:4d:c4:e2:dd:8a:e1:a7: ef:ce:16:24:28:31:b5:27:ba:d2:d1:e2:df:4a:b1:cc:c6:c5: 0f:02:54:8e:aa:b8:0a:71:8a:c0:46:c3:64:56:74:38:99:9c: 01:35:64:82:05:95:e7:6a:fc:6a:fb:bd:ac:35:57:e2:6c:26: 20:6b:c8:21:15:3e:0e:fb:11:d9:b1:6b:46:12:c5:14:e3:45: ec:79:5f:1b:7e:15:74:02:60:9a:a5:28:0d:f2:84:c4:30:84: 5c:7e:81:4e:b3:fd:17:a1:0d:74:ea:d9:dd:a2:75:f7:20:f0: b5:bc:03:77:47:ad:0f:62:9d:b8:a0:d8:ac:8c:b6:99:fc:02: 26:c5:a0:cf:c1:33:dc:d6:18:95:56:89:99:24:01:4e:1d:75: 58:aa:50:ab -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUU2GtbPOPUbywxz+C/z9uSse3cZAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjEyNkEzNzI4MzU4MDFCQkI3Mzg2OTZDNTZEQ0YyNTVE MDMyRDQyRjAeFw0yNTEwMTkwMDI2NTRaFw0yNTEwMjIwODQwNTRaMDMxMTAvBgNV BAMTKDJERDE0OEVCQzNGQTNGNjRCNTczOUM5MTU3MURBNTU4QzFGODYxOTkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD0vrdNz3pXAKhMLk2zDq6rd870 6WV4j9M47Fn2GMCnJuhVZuwaMayE9GYENqioZqE/prnvm9IsL3z/5Di/0IgISIaq Cj6tM1pdRwDZTQK6Tz7LcHV312WkOok5bhioj3zeSdfwpROg4KA9NVic2p/oDG0y I5dD8lUlcnAbQZ1V3SELSZafTavpz/IB/HzFhgACousQUmqdcxgzi7Y/vaPuU2Yq tp15cCF6ypmifxz6LpZiBpd2FX3bmgjJNVmX/AqNS9RrEm2ajWfCaAVwP0pWVfaj MBXRMjTro7+Q1ghSn50zfJuq/cP5FHFXoQ3OSPG3xIgcqQiTsqNd9FfWMkdxAgMB AAGjggI8MIICODAdBgNVHQ4EFgQULdFI68P6P2S1c5yRVx2lWMH4YZkwHwYDVR0j BBgwFoAUsSajcoNYAbu3OGlsVtzyVdAy1C8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k MDQ0ZjkxOC05MzMyLTQyNTctYjUxMC0zODFjODU5MGZmNTQvMC9CMTI2QTM3Mjgz NTgwMUJCQjczODY5NkM1NkRDRjI1NUQwMzJENDJGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQjEyNkEzNzI4MzU4MDFCQkI3Mzg2OTZDNTZEQ0YyNTVEMDMy RDQyRi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZDA0NGY5MTgtOTMzMi00MjU3LWI1 MTAtMzgxYzg1OTBmZjU0LzAvQjEyNkEzNzI4MzU4MDFCQkI3Mzg2OTZDNTZEQ0Yy NTVEMDMyRDQyRi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFUIjkbqtF4/DezyMcNF2Eud9fX0wYVkvy1e utiAsIUg5BUubId6F5tLVEe+oJH9jFHBSFJy9/BidVJ5aYuivq2TT13r6Ouo1ou6 R/ndktmw5xOdssDeckcfAdt5nPI17fN2iDrHTcTi3Yrhp+/OFiQoMbUnutLR4t9K sczGxQ8CVI6quApxisBGw2RWdDiZnAE1ZIIFledq/Gr7vaw1V+JsJiBryCEVPg77 Edmxa0YSxRTjRex5Xxt+FXQCYJqlKA3yhMQwhFx+gU6z/RehDXTq2d2idfcg8LW8 A3dHrQ9inbig2KyMtpn8AibFoM/BM9zWGJVWiZkkAU4ddViqUKs= -----END CERTIFICATE-----Generated at Mon Oct 20 21:07:34 2025 by rpki-client