$ rpki-client -vvf repo-rpki.idnic.net/repo/d9106827-866e-4ac3-8f79-a6e320b20de7/0/B347BBA6BD11BFC5E55F7FF334C165E9FD21FA5C.mft File: B347BBA6BD11BFC5E55F7FF334C165E9FD21FA5C.mft (raw, json) Hash identifier: rKwZJWs9vXujLrCUn8PMvxWOR/aWiQZN//5hf2BBZqU= Subject key identifier: C2:26:0C:1B:ED:6E:79:6A:E1:9D:7E:D8:36:48:AB:AC:5A:BE:DA:C8 Authority key identifier: B3:47:BB:A6:BD:11:BF:C5:E5:5F:7F:F3:34:C1:65:E9:FD:21:FA:5C Certificate issuer: /CN=B347BBA6BD11BFC5E55F7FF334C165E9FD21FA5C Certificate serial: 40FD4081D671B4BC8E092896A34E6ECB180053D8 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B347BBA6BD11BFC5E55F7FF334C165E9FD21FA5C.cer Subject info access: rsync://repo-rpki.idnic.net/repo/d9106827-866e-4ac3-8f79-a6e320b20de7/0/B347BBA6BD11BFC5E55F7FF334C165E9FD21FA5C.mft Manifest number: 0229 Signing time: Mon 20 Oct 2025 04:02:13 +0000 Manifest this update: Mon 20 Oct 2025 03:57:13 +0000 Manifest next update: Thu 23 Oct 2025 06:31:13 +0000 Files and hashes: 1: 3130332e3138362e3230332e302f32342d3234203d3e20313439373036.roa (hash: JgDdJ0VL4u8D8+wDznKBSlTRQ0p6opMwZGoPzapaaX4=) 2: 3130332e3138362e3230322e302f32332d3233203d3e20313439373036.roa (hash: YXcPTV7LyiaT/dlRqQiGxAGyQ4A0Km1DyhqBZdphgGs=) 3: 3130332e3138362e3230322e302f32342d3234203d3e20313439373036.roa (hash: k4Wn7QjCevaLRtjzpZzU9aujDNZ1W8N1HpzN16+qakY=) 4: B347BBA6BD11BFC5E55F7FF334C165E9FD21FA5C.crl (hash: lIpzoocPpkhMIm2MCyBsA9bXjNYS2E5bDEogmckpHPQ=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/d9106827-866e-4ac3-8f79-a6e320b20de7/0/B347BBA6BD11BFC5E55F7FF334C165E9FD21FA5C.crl rsync://repo-rpki.idnic.net/repo/d9106827-866e-4ac3-8f79-a6e320b20de7/0/B347BBA6BD11BFC5E55F7FF334C165E9FD21FA5C.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B347BBA6BD11BFC5E55F7FF334C165E9FD21FA5C.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 Oct 2025 06:31:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 40:fd:40:81:d6:71:b4:bc:8e:09:28:96:a3:4e:6e:cb:18:00:53:d8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B347BBA6BD11BFC5E55F7FF334C165E9FD21FA5C Validity Not Before: Oct 20 03:57:13 2025 GMT Not After : Oct 23 06:31:13 2025 GMT Subject: CN=C2260C1BED6E796AE19D7ED83648ABAC5ABEDAC8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:36:2b:8e:90:ae:5d:62:4e:52:79:ba:2b:77: 2e:5e:21:0b:13:32:57:e9:cf:16:45:b0:95:49:c4: 91:90:55:38:03:15:53:d2:45:37:c0:9c:6b:d5:d9: df:55:e2:51:fa:d7:30:0c:35:6f:b7:c4:05:23:39: 6f:22:c4:36:18:bc:76:d0:51:9f:61:03:62:2a:66: 45:56:e9:50:a1:fd:ae:4c:0f:18:f0:e6:b3:ae:3a: 7d:1d:0d:aa:69:d5:79:c9:d3:73:63:d5:7d:4f:7b: a5:da:35:50:71:49:a5:45:ca:be:6d:df:ba:98:5f: d0:59:de:ef:33:1f:f4:50:5b:0a:ca:3f:23:ea:81: 74:cd:c3:3b:de:21:f9:5a:0a:49:22:e0:59:18:c8: 64:3f:1c:68:eb:90:1e:7b:f6:6c:f6:b5:5d:8c:91: 9e:1f:9d:c3:86:8e:85:c3:b3:02:b7:73:ad:84:8e: 65:13:8c:d4:8d:eb:a7:ef:d0:92:37:c3:be:c5:1a: 98:da:6b:47:e0:40:06:ee:12:4e:e9:76:52:8f:5e: 4d:93:33:6c:9a:61:1e:07:60:e4:b9:1c:03:d6:e1: e1:05:49:fd:bd:2c:ba:e8:aa:ed:49:b3:65:57:da: 37:a4:ec:ee:8e:1d:eb:6a:c6:e8:38:cf:da:80:c1: 71:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C2:26:0C:1B:ED:6E:79:6A:E1:9D:7E:D8:36:48:AB:AC:5A:BE:DA:C8 X509v3 Authority Key Identifier: keyid:B3:47:BB:A6:BD:11:BF:C5:E5:5F:7F:F3:34:C1:65:E9:FD:21:FA:5C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/d9106827-866e-4ac3-8f79-a6e320b20de7/0/B347BBA6BD11BFC5E55F7FF334C165E9FD21FA5C.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B347BBA6BD11BFC5E55F7FF334C165E9FD21FA5C.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d9106827-866e-4ac3-8f79-a6e320b20de7/0/B347BBA6BD11BFC5E55F7FF334C165E9FD21FA5C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 27:a6:db:d4:57:9f:8c:32:17:f2:e3:2c:37:24:2e:08:4f:18: ac:1b:d9:d3:91:6b:59:15:01:51:44:21:7c:61:82:43:ac:11: 87:71:d0:5a:93:b6:68:af:cb:4b:a3:3d:a9:59:1a:18:fd:d1: 73:b3:af:d3:25:b4:67:eb:8c:dc:5a:a5:09:56:71:b5:4a:88: 04:43:b5:ce:53:6e:a0:b2:79:ff:a9:bd:48:c6:27:5e:1f:cb: 04:32:41:80:37:fb:91:dd:f9:d8:fd:97:f2:79:bb:42:c1:3d: 27:26:a2:85:77:59:a3:bd:e4:11:f0:d7:27:c0:62:35:68:15: 3a:89:e9:c6:6c:84:f5:a7:d8:f5:79:25:6b:a8:d0:a1:99:af: c3:6d:6f:2a:b5:74:2f:20:92:18:94:f1:05:c0:e0:a7:31:3d: da:19:20:8c:35:ee:da:fe:06:7e:c8:d2:95:d5:89:62:af:8a: 7e:3e:37:ec:f9:05:bf:79:19:f9:15:05:d1:e3:b9:b2:7a:56: c1:6f:00:d1:c9:03:1c:94:fb:37:93:c1:d6:ce:7a:14:ba:ee: 99:d1:14:a2:78:0e:68:41:bf:c4:d9:89:9e:9e:8d:06:b7:6c: 06:84:7e:53:78:f4:d8:28:e9:cc:d4:a5:78:e1:32:19:92:36: 72:a0:6f:51 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUQP1AgdZxtLyOCSiWo05uyxgAU9gwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjM0N0JCQTZCRDExQkZDNUU1NUY3RkYzMzRDMTY1RTlG RDIxRkE1QzAeFw0yNTEwMjAwMzU3MTNaFw0yNTEwMjMwNjMxMTNaMDMxMTAvBgNV BAMTKEMyMjYwQzFCRUQ2RTc5NkFFMTlEN0VEODM2NDhBQkFDNUFCRURBQzgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDMNiuOkK5dYk5Sebordy5eIQsT MlfpzxZFsJVJxJGQVTgDFVPSRTfAnGvV2d9V4lH61zAMNW+3xAUjOW8ixDYYvHbQ UZ9hA2IqZkVW6VCh/a5MDxjw5rOuOn0dDapp1XnJ03Nj1X1Pe6XaNVBxSaVFyr5t 37qYX9BZ3u8zH/RQWwrKPyPqgXTNwzveIflaCkki4FkYyGQ/HGjrkB579mz2tV2M kZ4fncOGjoXDswK3c62EjmUTjNSN66fv0JI3w77FGpjaa0fgQAbuEk7pdlKPXk2T M2yaYR4HYOS5HAPW4eEFSf29LLroqu1Js2VX2jek7O6OHetqxug4z9qAwXEhAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUwiYMG+1ueWrhnX7YNkirrFq+2sgwHwYDVR0j BBgwFoAUs0e7pr0Rv8XlX3/zNMFl6f0h+lwwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k OTEwNjgyNy04NjZlLTRhYzMtOGY3OS1hNmUzMjBiMjBkZTcvMC9CMzQ3QkJBNkJE MTFCRkM1RTU1RjdGRjMzNEMxNjVFOUZEMjFGQTVDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQjM0N0JCQTZCRDExQkZDNUU1NUY3RkYzMzRDMTY1RTlGRDIx RkE1Qy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZDkxMDY4MjctODY2ZS00YWMzLThm NzktYTZlMzIwYjIwZGU3LzAvQjM0N0JCQTZCRDExQkZDNUU1NUY3RkYzMzRDMTY1 RTlGRDIxRkE1Qy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACem29RXn4wyF/LjLDckLghPGKwb2dORa1kV AVFEIXxhgkOsEYdx0FqTtmivy0ujPalZGhj90XOzr9MltGfrjNxapQlWcbVKiARD tc5TbqCyef+pvUjGJ14fywQyQYA3+5Hd+dj9l/J5u0LBPScmooV3WaO95BHw1yfA YjVoFTqJ6cZshPWn2PV5JWuo0KGZr8Ntbyq1dC8gkhiU8QXA4KcxPdoZIIw17tr+ Bn7I0pXViWKvin4+N+z5Bb95GfkVBdHjubJ6VsFvANHJAxyU+zeTwdbOehS67pnR FKJ4DmhBv8TZiZ6ejQa3bAaEflN49Ngo6czUpXjhMhmSNnKgb1E= -----END CERTIFICATE-----Generated at Mon Oct 20 12:09:06 2025 by rpki-client