$ rpki-client -vvf repo-rpki.idnic.net/repo/db8be905-f296-45d1-a879-4a4de52cb2d6/0/B2D1CBD015A419010845E6F56D8385C8647B5390.mft File: B2D1CBD015A419010845E6F56D8385C8647B5390.mft (raw, json) Hash identifier: /BeFhdTU84BtnVyyubdFtlJ5qUqLjVpkN9JQul5bvWM= Subject key identifier: 8D:0B:D8:62:89:FF:60:E4:73:3D:3A:ED:B9:14:D7:11:D9:C3:55:47 Authority key identifier: B2:D1:CB:D0:15:A4:19:01:08:45:E6:F5:6D:83:85:C8:64:7B:53:90 Certificate issuer: /CN=B2D1CBD015A419010845E6F56D8385C8647B5390 Certificate serial: 78308E1444ED930B6DBDEDF513672B3E251F10D0 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B2D1CBD015A419010845E6F56D8385C8647B5390.cer Subject info access: rsync://repo-rpki.idnic.net/repo/db8be905-f296-45d1-a879-4a4de52cb2d6/0/B2D1CBD015A419010845E6F56D8385C8647B5390.mft Manifest number: 02C9 Signing time: Sat 18 Oct 2025 16:32:07 +0000 Manifest this update: Sat 18 Oct 2025 16:27:07 +0000 Manifest next update: Wed 22 Oct 2025 01:52:07 +0000 Files and hashes: 1: B2D1CBD015A419010845E6F56D8385C8647B5390.crl (hash: hsxpp0JCVkQ67wA8WXWpR2oIiEt69sPnz+pvfPVtQhw=) 2: 3130332e3135332e3133352e302f32342d3234203d3e20313430343634.roa (hash: oUlQyF3I0zLJjLl9EcH8NBVRAz863HrDlDUllspbny0=) 3: 323430363a343534303a3a2f33322d3332203d3e20313430343634.roa (hash: fW6me2gng7+RFAgwfv3lcoF9Ov98BB9yIZ6/btVVKsw=) 4: 3130332e3135332e3133342e302f32332d3233203d3e20313430343634.roa (hash: bAHbnIP0Wicgt74YcQMMyo48qnOQtogRe4ndD6XNQrg=) 5: 3130332e3135332e3133342e302f32342d3234203d3e20313430343634.roa (hash: cn1hAJHYGCMSOghgviiiSzFiPXYh8mLQKkzicGhK/aE=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/db8be905-f296-45d1-a879-4a4de52cb2d6/0/B2D1CBD015A419010845E6F56D8385C8647B5390.crl rsync://repo-rpki.idnic.net/repo/db8be905-f296-45d1-a879-4a4de52cb2d6/0/B2D1CBD015A419010845E6F56D8385C8647B5390.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B2D1CBD015A419010845E6F56D8385C8647B5390.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 Oct 2025 01:52:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 78:30:8e:14:44:ed:93:0b:6d:bd:ed:f5:13:67:2b:3e:25:1f:10:d0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B2D1CBD015A419010845E6F56D8385C8647B5390 Validity Not Before: Oct 18 16:27:07 2025 GMT Not After : Oct 22 01:52:07 2025 GMT Subject: CN=8D0BD86289FF60E4733D3AEDB914D711D9C35547 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:e8:66:e6:9e:cb:fa:64:87:79:f6:5f:41:f4: bc:4b:0f:b6:ce:86:75:d4:8e:e6:06:de:af:41:26: 86:33:2c:13:f2:55:90:15:ff:2d:d3:c2:04:75:56: 1a:d9:9c:8e:63:1e:c9:9f:5e:81:89:8c:cd:ac:4e: b4:7c:09:30:4e:b1:d1:2c:cd:32:a2:69:e8:2c:11: 8a:f4:d6:28:1e:af:fe:cc:a1:3f:1d:08:94:13:44: 1a:1e:5f:63:10:bf:d0:e2:d0:b6:c5:f8:82:0c:e5: 82:2e:7d:85:d0:ea:32:74:4a:4a:d9:46:81:24:6e: ec:ef:7c:5a:7d:88:61:ae:d0:34:a1:83:f7:c5:19: ab:c3:01:8e:02:d7:65:70:b3:2d:aa:91:41:0d:58: 22:18:7f:99:78:57:90:59:4c:a5:3f:ff:08:cd:bf: 74:fe:74:fb:ec:2b:c2:d1:46:60:cd:96:14:19:c3: 1b:c3:99:7f:25:33:33:f9:0d:1c:ea:81:28:9d:fc: bf:eb:a1:f4:db:37:50:56:e7:c5:85:df:78:d6:29: 3a:fa:0d:0e:d1:59:9d:78:fb:0d:37:9a:f7:9a:22: 7c:88:40:6c:bd:72:78:8b:39:f8:2d:09:f6:59:40: 80:a9:77:37:cf:db:9b:54:0c:3b:2d:d4:dd:f5:b1: ae:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8D:0B:D8:62:89:FF:60:E4:73:3D:3A:ED:B9:14:D7:11:D9:C3:55:47 X509v3 Authority Key Identifier: keyid:B2:D1:CB:D0:15:A4:19:01:08:45:E6:F5:6D:83:85:C8:64:7B:53:90 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/db8be905-f296-45d1-a879-4a4de52cb2d6/0/B2D1CBD015A419010845E6F56D8385C8647B5390.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B2D1CBD015A419010845E6F56D8385C8647B5390.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/db8be905-f296-45d1-a879-4a4de52cb2d6/0/B2D1CBD015A419010845E6F56D8385C8647B5390.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 05:b7:8a:59:02:3d:6e:4b:60:16:c8:cd:a0:17:c1:20:12:59: 4f:de:72:1c:1a:b8:98:be:95:da:05:38:8c:bd:fd:c2:22:1d: 5d:b1:35:d7:ba:df:64:54:44:d3:70:4d:e9:11:f0:37:e4:5f: 5c:a3:84:9e:17:0b:3b:3c:a0:18:73:75:6b:00:f5:6f:d4:31: 64:ef:d6:35:23:58:99:9c:c4:60:50:61:0e:aa:1a:4e:9c:e4: e0:39:9d:1c:9d:bd:56:b7:03:ff:20:d1:3a:7b:23:43:6b:ee: 40:0b:f0:80:57:e5:d2:17:83:f6:7c:12:d8:59:43:34:e7:d1: f3:55:a2:aa:65:2a:00:2e:65:f3:2d:80:0b:83:ae:81:14:d8: da:ad:27:70:58:b4:0c:ee:c0:0b:87:5f:96:6b:e4:41:73:20: 80:2e:5e:da:1e:c6:d9:69:c4:a4:c6:0e:d1:5d:bf:e2:dd:d8: ef:ab:8b:a4:33:bc:9d:1e:60:21:eb:55:63:3c:eb:b3:ed:4f: 6e:2f:9c:2d:1a:27:b8:17:b8:cf:ea:f5:47:61:99:9c:03:ad: 06:13:23:4b:58:0a:b7:d0:b7:43:da:7b:25:d2:82:7d:d3:86: d7:4d:29:03:06:54:6d:c5:ec:49:ac:36:46:de:d3:d4:4a:8f: 25:44:db:43 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUeDCOFETtkwttve31E2crPiUfENAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjJEMUNCRDAxNUE0MTkwMTA4NDVFNkY1NkQ4Mzg1Qzg2 NDdCNTM5MDAeFw0yNTEwMTgxNjI3MDdaFw0yNTEwMjIwMTUyMDdaMDMxMTAvBgNV BAMTKDhEMEJEODYyODlGRjYwRTQ3MzNEM0FFREI5MTRENzExRDlDMzU1NDcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCz6Gbmnsv6ZId59l9B9LxLD7bO hnXUjuYG3q9BJoYzLBPyVZAV/y3TwgR1VhrZnI5jHsmfXoGJjM2sTrR8CTBOsdEs zTKiaegsEYr01iger/7MoT8dCJQTRBoeX2MQv9Di0LbF+IIM5YIufYXQ6jJ0SkrZ RoEkbuzvfFp9iGGu0DShg/fFGavDAY4C12Vwsy2qkUENWCIYf5l4V5BZTKU//wjN v3T+dPvsK8LRRmDNlhQZwxvDmX8lMzP5DRzqgSid/L/rofTbN1BW58WF33jWKTr6 DQ7RWZ14+w03mveaInyIQGy9cniLOfgtCfZZQICpdzfP25tUDDst1N31sa6BAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUjQvYYon/YORzPTrtuRTXEdnDVUcwHwYDVR0j BBgwFoAUstHL0BWkGQEIReb1bYOFyGR7U5AwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k YjhiZTkwNS1mMjk2LTQ1ZDEtYTg3OS00YTRkZTUyY2IyZDYvMC9CMkQxQ0JEMDE1 QTQxOTAxMDg0NUU2RjU2RDgzODVDODY0N0I1MzkwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQjJEMUNCRDAxNUE0MTkwMTA4NDVFNkY1NkQ4Mzg1Qzg2NDdC NTM5MC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZGI4YmU5MDUtZjI5Ni00NWQxLWE4 NzktNGE0ZGU1MmNiMmQ2LzAvQjJEMUNCRDAxNUE0MTkwMTA4NDVFNkY1NkQ4Mzg1 Qzg2NDdCNTM5MC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAW3ilkCPW5LYBbIzaAXwSASWU/echwauJi+ ldoFOIy9/cIiHV2xNde632RURNNwTekR8DfkX1yjhJ4XCzs8oBhzdWsA9W/UMWTv 1jUjWJmcxGBQYQ6qGk6c5OA5nRydvVa3A/8g0Tp7I0Nr7kAL8IBX5dIXg/Z8EthZ QzTn0fNVoqplKgAuZfMtgAuDroEU2NqtJ3BYtAzuwAuHX5Zr5EFzIIAuXtoextlp xKTGDtFdv+Ld2O+ri6QzvJ0eYCHrVWM867PtT24vnC0aJ7gXuM/q9UdhmZwDrQYT I0tYCrfQt0PaeyXSgn3ThtdNKQMGVG3F7EmsNkbe09RKjyVE20M= -----END CERTIFICATE-----Generated at Mon Oct 20 23:31:30 2025 by rpki-client