$ rpki-client -vvf repo-rpki.idnic.net/repo/d5908b83-7f44-46e0-8535-6fb84b59d58a/0/0BB3D1874063172B5374865233070332233FB7B3.mft File: 0BB3D1874063172B5374865233070332233FB7B3.mft (raw, json) Hash identifier: n4p9xv6s2lGUTP281k832NMCF7N0MP03XcuJ1hXQyNo= Subject key identifier: 64:03:C3:69:AF:8D:B0:E2:C6:D6:5D:4D:4F:2C:A8:A9:2B:C0:BF:03 Authority key identifier: 0B:B3:D1:87:40:63:17:2B:53:74:86:52:33:07:03:32:23:3F:B7:B3 Certificate issuer: /CN=0BB3D1874063172B5374865233070332233FB7B3 Certificate serial: 5B9E9FFC014E76B47353FEBF8AAD794B7087BADA Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0BB3D1874063172B5374865233070332233FB7B3.cer Subject info access: rsync://repo-rpki.idnic.net/repo/d5908b83-7f44-46e0-8535-6fb84b59d58a/0/0BB3D1874063172B5374865233070332233FB7B3.mft Manifest number: 0515 Signing time: Mon 20 Oct 2025 12:51:26 +0000 Manifest this update: Mon 20 Oct 2025 12:46:26 +0000 Manifest next update: Thu 23 Oct 2025 23:36:26 +0000 Files and hashes: 1: 3131372e3130342e3139322e302f31392d3234203d3e203233363636.roa (hash: zCm8uejNjkpY+DjdGXgrEnekcPvtN86UHanFShqlM6g=) 2: 3230322e3135332e31362e302f32302d3234203d3e203233363636.roa (hash: 5FOROrvQq+0t+Mk/ACrrEVqg06jInBJCBz0qroNhCeU=) 3: 0BB3D1874063172B5374865233070332233FB7B3.crl (hash: /d4qa5MThWwy7pO1p9zruDb27HoPP5ufg6a+Mh/jgjM=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/d5908b83-7f44-46e0-8535-6fb84b59d58a/0/0BB3D1874063172B5374865233070332233FB7B3.crl rsync://repo-rpki.idnic.net/repo/d5908b83-7f44-46e0-8535-6fb84b59d58a/0/0BB3D1874063172B5374865233070332233FB7B3.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0BB3D1874063172B5374865233070332233FB7B3.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 Oct 2025 11:48:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5b:9e:9f:fc:01:4e:76:b4:73:53:fe:bf:8a:ad:79:4b:70:87:ba:da Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0BB3D1874063172B5374865233070332233FB7B3 Validity Not Before: Oct 20 12:46:26 2025 GMT Not After : Oct 23 23:36:26 2025 GMT Subject: CN=6403C369AF8DB0E2C6D65D4D4F2CA8A92BC0BF03 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f1:e7:cf:86:02:e0:20:ea:f7:79:93:cc:d4:8d: 7e:81:b2:56:82:1b:08:80:9e:76:c8:c9:39:cb:f5: 0f:e7:11:50:51:c3:f5:80:9c:1e:c7:25:4c:07:ac: f3:e7:33:a5:c4:8a:0e:48:af:f1:4b:e5:5d:b6:c6: cc:6b:c2:9f:08:1c:81:fd:f7:ad:6d:79:44:3f:38: 9f:a5:0d:3d:71:59:91:b7:30:d9:e5:f3:81:36:7a: 4d:61:00:72:5d:67:22:b1:99:3b:68:50:d0:f4:09: 20:01:03:af:39:10:4a:31:ae:6e:c7:29:a4:72:36: a6:35:57:b1:87:a2:1c:c5:00:4d:77:85:94:b4:bd: c9:d5:21:4c:fc:48:9f:87:27:3d:e7:ad:0a:1d:b8: cb:dc:05:86:39:55:00:78:69:7d:1d:17:5b:cc:1e: 9a:1f:69:e3:c3:77:17:24:e6:e4:7c:22:6c:ca:2a: 99:3f:da:93:51:b9:43:dc:b7:60:47:bd:64:0a:af: fe:ac:4e:3a:27:ba:25:40:1a:fa:d0:b3:79:ff:b8: f6:cb:6f:2e:47:3c:8f:96:26:23:d2:54:97:97:7d: fb:b3:ab:29:d8:3e:02:86:f6:df:74:86:43:cf:61: 2c:38:df:1b:db:74:6f:cb:87:30:d1:1a:96:12:d9: 22:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 64:03:C3:69:AF:8D:B0:E2:C6:D6:5D:4D:4F:2C:A8:A9:2B:C0:BF:03 X509v3 Authority Key Identifier: keyid:0B:B3:D1:87:40:63:17:2B:53:74:86:52:33:07:03:32:23:3F:B7:B3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/d5908b83-7f44-46e0-8535-6fb84b59d58a/0/0BB3D1874063172B5374865233070332233FB7B3.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0BB3D1874063172B5374865233070332233FB7B3.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d5908b83-7f44-46e0-8535-6fb84b59d58a/0/0BB3D1874063172B5374865233070332233FB7B3.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5b:ff:76:5e:8c:15:fc:9f:f5:2e:66:09:52:bc:0d:da:0e:23: 0d:37:04:9b:c0:72:fc:ca:1d:95:8e:57:19:63:d9:6b:94:12: fd:b1:ce:80:60:d9:11:c5:29:b2:9e:dd:42:f3:31:7f:5f:59: 90:31:65:a5:7b:4a:1b:8f:bf:e2:87:9f:3b:fa:30:9e:ba:e9: 12:42:19:ac:e2:59:3b:25:47:df:e8:8e:2a:99:8c:6a:f3:d8: 9f:18:cd:82:fd:1a:13:99:6b:e9:b8:2e:59:4c:15:e4:3b:57: a8:41:ea:6f:8c:a8:db:b2:1c:be:3e:7e:e4:22:86:a5:9d:ee: 5d:dc:dd:8c:91:3e:8c:56:2e:31:00:a5:25:c6:90:a5:87:11: 9c:06:80:7c:24:b4:82:33:22:5d:e8:3b:6a:4e:4a:4f:82:01: 2f:c9:96:c3:63:79:52:d1:a8:ce:f5:2e:f6:5d:1f:df:1e:19: 3f:ce:61:0d:dd:74:8a:fa:e1:a1:6b:81:94:f6:95:86:a9:29: 4d:98:95:e8:45:29:12:7b:7a:8a:78:1f:39:37:1e:2e:3e:27: 54:65:ca:f8:df:e4:bc:e7:51:f7:09:01:94:53:7a:0f:c1:f2: 88:8f:fb:c8:63:6f:26:a7:73:91:29:21:35:33:72:8b:ef:87: 90:b5:89:42 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUW56f/AFOdrRzU/6/iq15S3CHutowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMEJCM0QxODc0MDYzMTcyQjUzNzQ4NjUyMzMwNzAzMzIy MzNGQjdCMzAeFw0yNTEwMjAxMjQ2MjZaFw0yNTEwMjMyMzM2MjZaMDMxMTAvBgNV BAMTKDY0MDNDMzY5QUY4REIwRTJDNkQ2NUQ0RDRGMkNBOEE5MkJDMEJGMDMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDx58+GAuAg6vd5k8zUjX6BslaC GwiAnnbIyTnL9Q/nEVBRw/WAnB7HJUwHrPPnM6XEig5Ir/FL5V22xsxrwp8IHIH9 961teUQ/OJ+lDT1xWZG3MNnl84E2ek1hAHJdZyKxmTtoUND0CSABA685EEoxrm7H KaRyNqY1V7GHohzFAE13hZS0vcnVIUz8SJ+HJz3nrQoduMvcBYY5VQB4aX0dF1vM HpofaePDdxck5uR8ImzKKpk/2pNRuUPct2BHvWQKr/6sTjonuiVAGvrQs3n/uPbL by5HPI+WJiPSVJeXffuzqynYPgKG9t90hkPPYSw43xvbdG/LhzDRGpYS2SKxAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUZAPDaa+NsOLG1l1NTyyoqSvAvwMwHwYDVR0j BBgwFoAUC7PRh0BjFytTdIZSMwcDMiM/t7MwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k NTkwOGI4My03ZjQ0LTQ2ZTAtODUzNS02ZmI4NGI1OWQ1OGEvMC8wQkIzRDE4NzQw NjMxNzJCNTM3NDg2NTIzMzA3MDMzMjIzM0ZCN0IzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMEJCM0QxODc0MDYzMTcyQjUzNzQ4NjUyMzMwNzAzMzIyMzNG QjdCMy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZDU5MDhiODMtN2Y0NC00NmUwLTg1 MzUtNmZiODRiNTlkNThhLzAvMEJCM0QxODc0MDYzMTcyQjUzNzQ4NjUyMzMwNzAz MzIyMzNGQjdCMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFv/dl6MFfyf9S5mCVK8DdoOIw03BJvAcvzK HZWOVxlj2WuUEv2xzoBg2RHFKbKe3ULzMX9fWZAxZaV7ShuPv+KHnzv6MJ666RJC GaziWTslR9/ojiqZjGrz2J8YzYL9GhOZa+m4LllMFeQ7V6hB6m+MqNuyHL4+fuQi hqWd7l3c3YyRPoxWLjEApSXGkKWHEZwGgHwktIIzIl3oO2pOSk+CAS/JlsNjeVLR qM71LvZdH98eGT/OYQ3ddIr64aFrgZT2lYapKU2YlehFKRJ7eop4Hzk3Hi4+J1Rl yvjf5LznUfcJAZRTeg/B8oiP+8hjbyanc5EpITUzcovvh5C1iUI= -----END CERTIFICATE-----Generated at Tue Oct 21 00:58:31 2025 by rpki-client