$ rpki-client -vvf repo-rpki.idnic.net/repo/ebefbf04-41be-48d7-ac00-8a3c498ca9ae/0/B8436ACB7CE8F8C2F57245FFE4E6BA2F52393F4D.mft File: B8436ACB7CE8F8C2F57245FFE4E6BA2F52393F4D.mft (raw, json) Hash identifier: hoxCWM7S+84IUtGrzGQ1O5KudVpjaHHSaQVLPJEmW5c= Subject key identifier: 01:EF:6D:13:40:44:00:23:57:8F:00:90:3D:5B:78:A8:67:6D:EE:C6 Authority key identifier: B8:43:6A:CB:7C:E8:F8:C2:F5:72:45:FF:E4:E6:BA:2F:52:39:3F:4D Certificate issuer: /CN=B8436ACB7CE8F8C2F57245FFE4E6BA2F52393F4D Certificate serial: 6A242C6190BF1D65E50052CCBE3A6F2DC8192A26 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B8436ACB7CE8F8C2F57245FFE4E6BA2F52393F4D.cer Subject info access: rsync://repo-rpki.idnic.net/repo/ebefbf04-41be-48d7-ac00-8a3c498ca9ae/0/B8436ACB7CE8F8C2F57245FFE4E6BA2F52393F4D.mft Manifest number: 037D Signing time: Sat 18 Oct 2025 12:01:46 +0000 Manifest this update: Sat 18 Oct 2025 11:56:46 +0000 Manifest next update: Tue 21 Oct 2025 19:55:46 +0000 Files and hashes: 1: B8436ACB7CE8F8C2F57245FFE4E6BA2F52393F4D.crl (hash: BG3wDg+k/NmcBXhmtbaRpC5ZsuEp3b5CMYZdM9RL1Uw=) 2: 3130332e3135342e32342e302f32342d3234203d3e20313430343738.roa (hash: OPJ+0bfTR2bNFtVvMzF36s5tfMJLI0pXwTypT9BsLeE=) 3: 3130332e3135342e32352e302f32342d3234203d3e20313430343738.roa (hash: YWVKY2G+Nvg6caG2vXoeK6bw0DFIbKqpsrtcWOftF08=) 4: 3130332e3135342e32342e302f32332d3233203d3e20313430343738.roa (hash: s1nmEcWlMGfpOr6XkgkIDAhuvP77SQ9zj5c2Qr3sr/E=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/ebefbf04-41be-48d7-ac00-8a3c498ca9ae/0/B8436ACB7CE8F8C2F57245FFE4E6BA2F52393F4D.crl rsync://repo-rpki.idnic.net/repo/ebefbf04-41be-48d7-ac00-8a3c498ca9ae/0/B8436ACB7CE8F8C2F57245FFE4E6BA2F52393F4D.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B8436ACB7CE8F8C2F57245FFE4E6BA2F52393F4D.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 21 Oct 2025 19:55:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6a:24:2c:61:90:bf:1d:65:e5:00:52:cc:be:3a:6f:2d:c8:19:2a:26 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B8436ACB7CE8F8C2F57245FFE4E6BA2F52393F4D Validity Not Before: Oct 18 11:56:46 2025 GMT Not After : Oct 21 19:55:46 2025 GMT Subject: CN=01EF6D1340440023578F00903D5B78A8676DEEC6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:fb:81:cb:d8:0d:c6:d7:98:b9:63:8b:1b:3e: 1d:11:00:51:12:dc:4d:b4:b8:8b:54:b9:82:55:3b: 86:92:02:50:66:e5:b1:21:df:30:ee:7d:24:48:07: f3:74:4c:69:3f:b6:c0:98:de:a9:d9:ad:68:5a:5e: eb:84:66:98:e1:d9:6d:75:b2:90:fa:ea:11:c0:2e: 27:bc:b1:75:d3:38:fe:a2:e3:91:0e:c7:26:3b:41: 83:6a:6b:ba:5c:d3:fb:ea:61:c2:3b:c5:f5:a6:a5: b1:a5:0d:d1:a0:92:3c:15:86:74:cb:7a:e4:77:b2: 8c:b8:89:d3:1b:4f:d1:45:b0:a8:59:0a:8e:f7:cc: e1:17:5c:b5:cf:d8:5c:05:55:fb:27:6f:1c:c3:b9: 87:00:80:6a:b2:2d:6b:68:cb:c6:54:2e:96:6f:e7: 40:45:bd:15:64:4e:a5:7e:92:1c:70:0e:a0:32:a7: aa:36:6a:8e:2b:a7:93:a8:2b:f5:97:7b:db:a5:23: e6:e6:22:87:d3:3f:99:30:9e:84:c5:2c:69:58:54: bb:e2:a2:1f:12:76:c6:6c:ba:c4:63:23:e9:32:ce: e5:e4:fc:e4:1f:dc:a9:cc:10:8c:1f:21:b1:b9:95: e8:8c:b2:24:31:16:db:51:0b:1f:a0:6c:fe:11:fd: 02:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 01:EF:6D:13:40:44:00:23:57:8F:00:90:3D:5B:78:A8:67:6D:EE:C6 X509v3 Authority Key Identifier: keyid:B8:43:6A:CB:7C:E8:F8:C2:F5:72:45:FF:E4:E6:BA:2F:52:39:3F:4D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/ebefbf04-41be-48d7-ac00-8a3c498ca9ae/0/B8436ACB7CE8F8C2F57245FFE4E6BA2F52393F4D.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B8436ACB7CE8F8C2F57245FFE4E6BA2F52393F4D.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ebefbf04-41be-48d7-ac00-8a3c498ca9ae/0/B8436ACB7CE8F8C2F57245FFE4E6BA2F52393F4D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1e:64:42:c9:13:42:61:e9:23:2e:1c:76:75:43:b6:02:0c:30: 63:75:9a:f9:13:6e:36:e5:0b:db:ac:d0:57:e9:c9:48:12:49: 93:1d:e6:10:df:4d:80:a9:69:b3:7b:75:07:57:6b:7b:6c:b5: 8f:8c:db:76:40:8e:05:6f:c7:e2:01:9c:65:83:16:d7:0e:a6: fe:1f:70:e6:d6:ae:51:42:1a:45:e4:d5:d3:df:5b:46:26:a0: 2b:99:1a:5c:1d:44:63:bd:0d:f6:05:02:16:b0:92:a5:b6:fa: a9:3f:63:16:b7:5c:14:2a:85:38:79:cf:bd:a0:46:dc:9f:96: 4e:25:3a:58:a2:d7:57:14:58:7d:dc:16:37:ad:31:77:f6:77: 19:00:00:73:1d:15:0f:52:7d:68:a5:ce:a1:75:dd:b8:6a:91: 84:f8:a1:6f:18:4a:1c:d7:b2:f7:cf:fb:66:66:8c:b1:ce:8e: 63:f8:47:4b:02:f5:f0:d9:8a:a8:67:84:b6:ca:ab:a6:43:d2: 43:e4:bb:5b:32:7d:12:7a:21:e0:85:bb:d8:79:0a:dd:01:3e: 17:bb:cb:32:b4:f3:c5:a2:96:ad:79:d4:0b:4b:9b:57:d7:9a: 4a:98:92:31:c2:55:97:1d:51:31:2a:04:71:4e:2f:20:00:26: 89:b6:86:66 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUaiQsYZC/HWXlAFLMvjpvLcgZKiYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjg0MzZBQ0I3Q0U4RjhDMkY1NzI0NUZGRTRFNkJBMkY1 MjM5M0Y0RDAeFw0yNTEwMTgxMTU2NDZaFw0yNTEwMjExOTU1NDZaMDMxMTAvBgNV BAMTKDAxRUY2RDEzNDA0NDAwMjM1NzhGMDA5MDNENUI3OEE4Njc2REVFQzYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDS+4HL2A3G15i5Y4sbPh0RAFES 3E20uItUuYJVO4aSAlBm5bEh3zDufSRIB/N0TGk/tsCY3qnZrWhaXuuEZpjh2W11 spD66hHALie8sXXTOP6i45EOxyY7QYNqa7pc0/vqYcI7xfWmpbGlDdGgkjwVhnTL euR3soy4idMbT9FFsKhZCo73zOEXXLXP2FwFVfsnbxzDuYcAgGqyLWtoy8ZULpZv 50BFvRVkTqV+khxwDqAyp6o2ao4rp5OoK/WXe9ulI+bmIofTP5kwnoTFLGlYVLvi oh8SdsZsusRjI+kyzuXk/OQf3KnMEIwfIbG5leiMsiQxFttRCx+gbP4R/QIxAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUAe9tE0BEACNXjwCQPVt4qGdt7sYwHwYDVR0j BBgwFoAUuENqy3zo+ML1ckX/5Oa6L1I5P00wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l YmVmYmYwNC00MWJlLTQ4ZDctYWMwMC04YTNjNDk4Y2E5YWUvMC9CODQzNkFDQjdD RThGOEMyRjU3MjQ1RkZFNEU2QkEyRjUyMzkzRjRELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQjg0MzZBQ0I3Q0U4RjhDMkY1NzI0NUZGRTRFNkJBMkY1MjM5 M0Y0RC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZWJlZmJmMDQtNDFiZS00OGQ3LWFj MDAtOGEzYzQ5OGNhOWFlLzAvQjg0MzZBQ0I3Q0U4RjhDMkY1NzI0NUZGRTRFNkJB MkY1MjM5M0Y0RC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAB5kQskTQmHpIy4cdnVDtgIMMGN1mvkTbjbl C9us0FfpyUgSSZMd5hDfTYCpabN7dQdXa3tstY+M23ZAjgVvx+IBnGWDFtcOpv4f cObWrlFCGkXk1dPfW0YmoCuZGlwdRGO9DfYFAhawkqW2+qk/Yxa3XBQqhTh5z72g Rtyflk4lOlii11cUWH3cFjetMXf2dxkAAHMdFQ9SfWilzqF13bhqkYT4oW8YShzX svfP+2ZmjLHOjmP4R0sC9fDZiqhnhLbKq6ZD0kPku1syfRJ6IeCFu9h5Ct0BPhe7 yzK088Wilq151AtLm1fXmkqYkjHCVZcdUTEqBHFOLyAAJom2hmY= -----END CERTIFICATE-----Generated at Mon Oct 20 12:07:38 2025 by rpki-client