$ rpki-client -vvf repo-rpki.idnic.net/repo/defe8f9b-8c34-4342-a0fe-ca1075fba5ff/0/B605E2C01C5BDC6CEE49545C80501360234DC910.mft File: B605E2C01C5BDC6CEE49545C80501360234DC910.mft (raw, json) Hash identifier: y9nkHp/nuOBE5gciT+0rL6DiUKvWagnY62+dfS0RYW4= Subject key identifier: 25:90:D6:8D:F0:65:BC:A0:67:6C:91:72:7A:93:02:22:3D:2A:BF:B7 Authority key identifier: B6:05:E2:C0:1C:5B:DC:6C:EE:49:54:5C:80:50:13:60:23:4D:C9:10 Certificate issuer: /CN=B605E2C01C5BDC6CEE49545C80501360234DC910 Certificate serial: 6CC7D766BCF3C4A7A7469B800810D7543E27CFD6 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B605E2C01C5BDC6CEE49545C80501360234DC910.cer Subject info access: rsync://repo-rpki.idnic.net/repo/defe8f9b-8c34-4342-a0fe-ca1075fba5ff/0/B605E2C01C5BDC6CEE49545C80501360234DC910.mft Manifest number: 0520 Signing time: Sat 18 Oct 2025 12:10:04 +0000 Manifest this update: Sat 18 Oct 2025 12:05:04 +0000 Manifest next update: Tue 21 Oct 2025 15:56:04 +0000 Files and hashes: 1: 3131352e3137382e35332e302f32342d3234203d3e20313331373137.roa (hash: 5Br8jzUfiBL0O6Kopm71gWMUaniCVXm/uXqyIID9rs0=) 2: 3131352e3137382e34382e302f32342d3234203d3e203338373833.roa (hash: /bgLX80Id13xkunC59CvIZtu8KOfj3mxVa1lG5ZXF/0=) 3: 3131352e3137382e35352e302f32342d3234203d3e203338373833.roa (hash: L3ZzIiAydRdMLY3ej77+q1So7IkWU5tA3zvtMa14wvQ=) 4: 3131352e3137382e35312e302f32342d3234203d3e20313331373137.roa (hash: tZJdaYJ4K7yW2v2tBg39Lb9tz4r7Kf6sn+VE2gvdsHw=) 5: 3131352e3137382e34392e302f32342d3234203d3e203338373833.roa (hash: isINXQLKIC1dEiiAoWDEseWdjl997XY6+RtHzF8UKMk=) 6: 3131352e3137382e35302e302f32342d3234203d3e203338373833.roa (hash: AVHUuCu/pWOfGEGbs7pgdGUZzNAVfi/HDMj4JakhRSI=) 7: 3131352e3137382e35322e302f32342d3234203d3e20313331373137.roa (hash: NtqkwrlUwIEQ1zhmOPelG6/o7YZq6aMqPrp+f2CJ/tw=) 8: B605E2C01C5BDC6CEE49545C80501360234DC910.crl (hash: 9UFM+WFEDHq7HRYecOvcLuk6sDKj5Z0yvYZH86pug0s=) 9: 3131352e3137382e35342e302f32342d3234203d3e20313331373137.roa (hash: 4R3cIWzWFlBnUOjDtKgjITkNYaOCw4Tx4+7Vb5ietQo=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/defe8f9b-8c34-4342-a0fe-ca1075fba5ff/0/B605E2C01C5BDC6CEE49545C80501360234DC910.crl rsync://repo-rpki.idnic.net/repo/defe8f9b-8c34-4342-a0fe-ca1075fba5ff/0/B605E2C01C5BDC6CEE49545C80501360234DC910.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B605E2C01C5BDC6CEE49545C80501360234DC910.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 21 Oct 2025 15:56:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6c:c7:d7:66:bc:f3:c4:a7:a7:46:9b:80:08:10:d7:54:3e:27:cf:d6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B605E2C01C5BDC6CEE49545C80501360234DC910 Validity Not Before: Oct 18 12:05:04 2025 GMT Not After : Oct 21 15:56:04 2025 GMT Subject: CN=2590D68DF065BCA0676C91727A9302223D2ABFB7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:e7:e7:ba:6f:3e:37:ce:0b:82:41:04:ce:87: 23:3a:b9:c8:2f:c8:ec:37:6a:8b:63:39:5d:03:6f: c4:43:ad:9a:2b:63:21:3c:eb:67:2d:73:82:f6:e9: f6:69:12:fd:55:f5:2c:40:bf:75:db:0b:0a:27:37: 0f:ef:b4:17:52:83:5a:71:f3:7b:c4:50:93:45:ec: 71:48:e4:b7:e1:61:96:81:b4:c4:61:7e:1b:a7:68: f4:2e:0b:d1:aa:82:d6:bd:bb:f5:55:87:f2:c8:07: fc:44:e0:49:c2:93:df:41:94:83:b1:ae:79:36:54: 14:ef:98:c5:e0:97:a0:00:d0:92:c4:53:41:7b:09: 5f:cf:cd:42:b9:d9:0d:2e:1b:0e:e1:0a:f4:1d:dc: 3e:c5:f4:e8:74:b4:6e:c4:a3:5a:53:c1:a4:07:6b: de:02:89:c8:dd:a0:2d:48:e6:74:12:1d:50:47:e6: 09:ae:90:3b:e5:59:c2:64:a5:c2:38:c7:d7:43:a1: 2d:19:b8:8f:69:9b:64:6b:75:31:03:1a:5f:49:40: 99:dd:75:7f:9a:b1:4a:93:09:fc:0f:b3:3a:5d:68: 32:1c:dc:f0:c6:a3:dd:11:cf:65:2a:18:1f:27:8e: 9d:eb:e2:e6:87:b0:23:34:1e:c5:80:31:5a:cc:79: 33:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 25:90:D6:8D:F0:65:BC:A0:67:6C:91:72:7A:93:02:22:3D:2A:BF:B7 X509v3 Authority Key Identifier: keyid:B6:05:E2:C0:1C:5B:DC:6C:EE:49:54:5C:80:50:13:60:23:4D:C9:10 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/defe8f9b-8c34-4342-a0fe-ca1075fba5ff/0/B605E2C01C5BDC6CEE49545C80501360234DC910.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B605E2C01C5BDC6CEE49545C80501360234DC910.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/defe8f9b-8c34-4342-a0fe-ca1075fba5ff/0/B605E2C01C5BDC6CEE49545C80501360234DC910.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ad:10:71:b0:9a:b5:20:f9:27:06:0d:dc:6a:6b:9d:4b:41:4e: d9:d6:cc:e8:1d:a4:48:89:92:d6:6a:ff:e6:a5:2f:8b:6c:63: 49:4d:20:92:4a:5c:31:2e:af:4e:c6:65:b6:00:3b:00:53:79: 02:2b:4e:31:b1:76:32:70:b9:91:7b:06:29:47:bb:45:1f:8d: ee:d7:e2:b4:0e:d2:88:fa:c8:de:20:69:22:6b:4d:59:b8:8f: bb:1e:b7:27:8e:ab:ca:89:04:d1:c3:d8:5e:ae:10:07:13:1c: b4:be:1b:e1:76:5d:03:a7:8b:5d:9a:c8:b7:a0:ce:02:99:cc: f5:d9:d0:49:52:2a:44:29:dd:d6:0e:bc:2d:b5:c4:87:2d:eb: f5:da:30:36:7c:f4:e4:7b:10:74:34:85:6d:15:4e:81:be:31: 62:cb:c9:84:41:a7:ab:2b:fa:af:cd:32:a4:46:22:53:24:fc: 56:29:9d:49:8d:66:3e:72:05:c8:fc:29:b3:80:66:79:ee:48: 1d:74:ad:71:a4:4b:4f:6f:25:c9:db:2f:21:d1:a7:33:1c:ee: 53:2e:3c:ac:3b:3b:e3:2c:c5:03:0b:fe:54:08:5f:97:3f:84: 16:d2:f7:45:fd:36:4d:35:0c:0e:bc:56:9c:0a:2b:b1:86:a6: 6d:89:0a:4c -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUbMfXZrzzxKenRpuACBDXVD4nz9YwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjYwNUUyQzAxQzVCREM2Q0VFNDk1NDVDODA1MDEzNjAy MzREQzkxMDAeFw0yNTEwMTgxMjA1MDRaFw0yNTEwMjExNTU2MDRaMDMxMTAvBgNV BAMTKDI1OTBENjhERjA2NUJDQTA2NzZDOTE3MjdBOTMwMjIyM0QyQUJGQjcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+5+e6bz43zguCQQTOhyM6ucgv yOw3aotjOV0Db8RDrZorYyE862ctc4L26fZpEv1V9SxAv3XbCwonNw/vtBdSg1px 83vEUJNF7HFI5LfhYZaBtMRhfhunaPQuC9Gqgta9u/VVh/LIB/xE4EnCk99BlIOx rnk2VBTvmMXgl6AA0JLEU0F7CV/PzUK52Q0uGw7hCvQd3D7F9Oh0tG7Eo1pTwaQH a94CicjdoC1I5nQSHVBH5gmukDvlWcJkpcI4x9dDoS0ZuI9pm2RrdTEDGl9JQJnd dX+asUqTCfwPszpdaDIc3PDGo90Rz2UqGB8njp3r4uaHsCM0HsWAMVrMeTP3AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUJZDWjfBlvKBnbJFyepMCIj0qv7cwHwYDVR0j BBgwFoAUtgXiwBxb3GzuSVRcgFATYCNNyRAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k ZWZlOGY5Yi04YzM0LTQzNDItYTBmZS1jYTEwNzVmYmE1ZmYvMC9CNjA1RTJDMDFD NUJEQzZDRUU0OTU0NUM4MDUwMTM2MDIzNERDOTEwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQjYwNUUyQzAxQzVCREM2Q0VFNDk1NDVDODA1MDEzNjAyMzRE QzkxMC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZGVmZThmOWItOGMzNC00MzQyLWEw ZmUtY2ExMDc1ZmJhNWZmLzAvQjYwNUUyQzAxQzVCREM2Q0VFNDk1NDVDODA1MDEz NjAyMzREQzkxMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAK0QcbCatSD5JwYN3GprnUtBTtnWzOgdpEiJ ktZq/+alL4tsY0lNIJJKXDEur07GZbYAOwBTeQIrTjGxdjJwuZF7BilHu0Ufje7X 4rQO0oj6yN4gaSJrTVm4j7setyeOq8qJBNHD2F6uEAcTHLS+G+F2XQOni12ayLeg zgKZzPXZ0ElSKkQp3dYOvC21xIct6/XaMDZ89OR7EHQ0hW0VToG+MWLLyYRBp6sr +q/NMqRGIlMk/FYpnUmNZj5yBcj8KbOAZnnuSB10rXGkS09vJcnbLyHRpzMc7lMu PKw7O+MsxQML/lQIX5c/hBbS90X9Nk01DA68VpwKK7GGpm2JCkw= -----END CERTIFICATE-----Generated at Mon Oct 20 12:33:55 2025 by rpki-client