$ rpki-client -vvf repo-rpki.idnic.net/repo/f7f49068-c0ca-4a21-9a8a-eed26fcdd1aa/0/B144E4EB28F69D9B76C0C2499BFD7B3EC503EF3E.mft File: B144E4EB28F69D9B76C0C2499BFD7B3EC503EF3E.mft (raw, json) Hash identifier: YW3WPI+GubhzNkU2NrvFfTvUv56r8gXBN4u0FcqAXdE= Subject key identifier: 97:02:B3:8D:99:2A:54:A0:FF:07:23:3C:8E:35:2B:C4:F9:E1:AC:6D Authority key identifier: B1:44:E4:EB:28:F6:9D:9B:76:C0:C2:49:9B:FD:7B:3E:C5:03:EF:3E Certificate issuer: /CN=B144E4EB28F69D9B76C0C2499BFD7B3EC503EF3E Certificate serial: 3EF4099FB51184DF20B3797AEAE5DE8356C4C1B5 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B144E4EB28F69D9B76C0C2499BFD7B3EC503EF3E.cer Subject info access: rsync://repo-rpki.idnic.net/repo/f7f49068-c0ca-4a21-9a8a-eed26fcdd1aa/0/B144E4EB28F69D9B76C0C2499BFD7B3EC503EF3E.mft Manifest number: 0517 Signing time: Mon 20 Oct 2025 05:20:45 +0000 Manifest this update: Mon 20 Oct 2025 05:15:45 +0000 Manifest next update: Thu 23 Oct 2025 10:04:45 +0000 Files and hashes: 1: 3130332e37322e3131312e302f32342d3234203d3e203538343736.roa (hash: lw8CjbCa9nau6CgaK9qo3W7fJOYahpzK8W9j4IBI5bo=) 2: 34332e3234322e3133322e302f32342d3234203d3e203538343736.roa (hash: ut8mKe181e+GL8gZVd8D9lpxfAhurYa657vG8sPaVZU=) 3: 323030313a6466303a3236663a3a2f34382d3438203d3e203538343736.roa (hash: 19ABnycRhti98EG6MJ/6S6W4a31omV6sktXNN7fCeRE=) 4: 3130332e32382e3130362e302f32342d3234203d3e203538343736.roa (hash: 3CwSzY5tw6Zm4h624sLhttPd8ZN8CiHTGKhVehN+hWE=) 5: B144E4EB28F69D9B76C0C2499BFD7B3EC503EF3E.crl (hash: acXldOi7IbhaQyIRa3NBhW5w2/4gB5unhN0EoK8Sn3w=) 6: 3130332e37322e3131302e302f32342d3234203d3e203538343736.roa (hash: voekDMYuoDNmVswZr7/xsWsJnvx7lZSdUg+Aq+ToSP0=) 7: 34332e3234322e3133332e302f32342d3234203d3e203538343736.roa (hash: 2NAEElgvlB7IhQMwd1Atvpj3R7riVOfOU9AzMjYnGF0=) 8: 3130332e32382e3130372e302f32342d3234203d3e203538343736.roa (hash: 1UalLxKn41/lSLgzHwYn+86cGRYM0p3PY4M21eZtrAo=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/f7f49068-c0ca-4a21-9a8a-eed26fcdd1aa/0/B144E4EB28F69D9B76C0C2499BFD7B3EC503EF3E.crl rsync://repo-rpki.idnic.net/repo/f7f49068-c0ca-4a21-9a8a-eed26fcdd1aa/0/B144E4EB28F69D9B76C0C2499BFD7B3EC503EF3E.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B144E4EB28F69D9B76C0C2499BFD7B3EC503EF3E.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 Oct 2025 10:04:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3e:f4:09:9f:b5:11:84:df:20:b3:79:7a:ea:e5:de:83:56:c4:c1:b5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B144E4EB28F69D9B76C0C2499BFD7B3EC503EF3E Validity Not Before: Oct 20 05:15:45 2025 GMT Not After : Oct 23 10:04:45 2025 GMT Subject: CN=9702B38D992A54A0FF07233C8E352BC4F9E1AC6D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:75:2c:b6:2e:b4:99:b2:60:26:99:ec:5f:37: 72:08:f0:d1:3f:2e:5f:96:f2:04:bd:18:ba:42:7e: 3f:91:db:3b:f5:9a:22:2e:1f:88:b2:83:dd:a3:7e: 5e:14:ae:7c:4b:f6:76:1b:39:83:f9:c5:f4:c1:e1: 1c:4d:00:57:71:ac:49:1d:18:67:d5:eb:da:a5:8a: 67:d9:65:86:67:4a:11:e8:f8:9c:00:83:1e:1a:cb: 37:81:1f:3a:77:28:6c:5a:f4:c7:69:bb:0d:d9:ad: e7:a3:d7:cf:c8:76:20:d9:15:40:43:db:65:90:ed: 77:00:06:c4:e5:01:c1:6a:55:c7:55:a1:ba:1d:c5: 9e:73:95:c9:ad:3b:2c:87:2b:43:34:32:99:2c:98: ad:94:4d:d9:b4:99:1c:54:e9:3e:68:3e:4e:d9:f4: 3f:a2:9f:a3:78:e8:20:b1:f0:cc:f2:a9:86:c8:7c: 1e:bb:e6:c7:5b:27:c1:9a:d0:6b:4e:80:db:37:6b: 68:b8:3b:cf:a3:71:58:46:3f:5e:5b:1e:4f:06:22: 86:88:72:61:3f:fe:09:58:e2:39:7c:c8:54:a1:67: e3:8b:1b:31:25:9a:ff:53:9d:19:f3:c8:a5:e0:a5: 92:00:b0:c8:42:89:aa:a4:2e:57:6a:e6:f9:c0:b7: 96:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 97:02:B3:8D:99:2A:54:A0:FF:07:23:3C:8E:35:2B:C4:F9:E1:AC:6D X509v3 Authority Key Identifier: keyid:B1:44:E4:EB:28:F6:9D:9B:76:C0:C2:49:9B:FD:7B:3E:C5:03:EF:3E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/f7f49068-c0ca-4a21-9a8a-eed26fcdd1aa/0/B144E4EB28F69D9B76C0C2499BFD7B3EC503EF3E.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B144E4EB28F69D9B76C0C2499BFD7B3EC503EF3E.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f7f49068-c0ca-4a21-9a8a-eed26fcdd1aa/0/B144E4EB28F69D9B76C0C2499BFD7B3EC503EF3E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1e:d9:a4:76:a0:29:32:40:72:07:85:83:7c:5e:b8:9a:82:a1: 07:ad:b9:76:1c:3e:07:95:96:d3:4e:d0:fe:20:59:16:98:a7: 0a:2a:7f:8c:93:ba:80:80:15:61:ee:8c:40:e0:67:f1:dd:15: 51:03:af:93:53:49:c1:96:28:16:54:f6:fb:20:57:3f:8b:88: 5c:61:6c:ce:da:9b:36:44:b9:5d:d6:91:0e:d9:2b:25:ff:20: 47:c2:ec:91:76:90:cb:02:5b:e9:2f:e9:8b:24:26:a3:b7:00: 6b:d2:c0:b3:e2:ca:8d:6e:fa:1e:74:d3:42:31:7e:3e:a4:dd: 96:6d:bd:d9:e5:e4:46:f2:ea:ad:91:07:96:a5:67:db:e0:48: e5:43:46:05:59:7f:12:76:e3:65:1e:fc:a7:ab:41:af:d4:1b: 02:9c:60:ae:1e:e1:14:db:06:14:fe:3a:b9:18:38:3a:fd:d1: b1:ee:51:cd:d1:a5:dd:c6:04:4d:e1:d6:09:7f:fe:d8:0b:f4: 1a:f3:af:ca:b4:3b:55:6c:32:3e:c2:6f:f5:9e:59:1c:fa:38: 30:46:a4:8c:dd:d4:74:75:33:bd:8c:41:30:eb:e1:5b:fd:b4: d7:ed:c8:f6:43:c8:2c:c2:42:d5:24:1d:31:16:44:f3:cc:25: d3:48:aa:37 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUPvQJn7URhN8gs3l66uXeg1bEwbUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjE0NEU0RUIyOEY2OUQ5Qjc2QzBDMjQ5OUJGRDdCM0VD NTAzRUYzRTAeFw0yNTEwMjAwNTE1NDVaFw0yNTEwMjMxMDA0NDVaMDMxMTAvBgNV BAMTKDk3MDJCMzhEOTkyQTU0QTBGRjA3MjMzQzhFMzUyQkM0RjlFMUFDNkQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDMdSy2LrSZsmAmmexfN3II8NE/ Ll+W8gS9GLpCfj+R2zv1miIuH4iyg92jfl4UrnxL9nYbOYP5xfTB4RxNAFdxrEkd GGfV69qlimfZZYZnShHo+JwAgx4ayzeBHzp3KGxa9Mdpuw3Zreej18/IdiDZFUBD 22WQ7XcABsTlAcFqVcdVobodxZ5zlcmtOyyHK0M0MpksmK2UTdm0mRxU6T5oPk7Z 9D+in6N46CCx8MzyqYbIfB675sdbJ8Ga0GtOgNs3a2i4O8+jcVhGP15bHk8GIoaI cmE//glY4jl8yFShZ+OLGzElmv9TnRnzyKXgpZIAsMhCiaqkLldq5vnAt5aNAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUlwKzjZkqVKD/ByM8jjUrxPnhrG0wHwYDVR0j BBgwFoAUsUTk6yj2nZt2wMJJm/17PsUD7z4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m N2Y0OTA2OC1jMGNhLTRhMjEtOWE4YS1lZWQyNmZjZGQxYWEvMC9CMTQ0RTRFQjI4 RjY5RDlCNzZDMEMyNDk5QkZEN0IzRUM1MDNFRjNFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQjE0NEU0RUIyOEY2OUQ5Qjc2QzBDMjQ5OUJGRDdCM0VDNTAz RUYzRS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZjdmNDkwNjgtYzBjYS00YTIxLTlh OGEtZWVkMjZmY2RkMWFhLzAvQjE0NEU0RUIyOEY2OUQ5Qjc2QzBDMjQ5OUJGRDdC M0VDNTAzRUYzRS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAB7ZpHagKTJAcgeFg3xeuJqCoQetuXYcPgeV ltNO0P4gWRaYpwoqf4yTuoCAFWHujEDgZ/HdFVEDr5NTScGWKBZU9vsgVz+LiFxh bM7amzZEuV3WkQ7ZKyX/IEfC7JF2kMsCW+kv6YskJqO3AGvSwLPiyo1u+h5000Ix fj6k3ZZtvdnl5Eby6q2RB5alZ9vgSOVDRgVZfxJ242Ue/KerQa/UGwKcYK4e4RTb BhT+OrkYODr90bHuUc3Rpd3GBE3h1gl//tgL9Brzr8q0O1VsMj7Cb/WeWRz6ODBG pIzd1HR1M72MQTDr4Vv9tNftyPZDyCzCQtUkHTEWRPPMJdNIqjc= -----END CERTIFICATE-----Generated at Mon Oct 20 14:58:18 2025 by rpki-client