$ rpki-client -vvf repo-rpki.idnic.net/repo/0463ae7c-a6ff-4fd8-96f2-0ba1880133c7/0/B7959E04EF090801395CE53E099D09F7AF2EF81B.mft File: B7959E04EF090801395CE53E099D09F7AF2EF81B.mft (raw, json) Hash identifier: no0xX2aupuIzKDzWONKanbIJzsZz8/hHlr5JdUyDUSk= Subject key identifier: EB:2C:1F:4B:A9:1C:99:A9:E4:A1:1A:BF:6F:A8:8D:61:6E:66:9C:36 Authority key identifier: B7:95:9E:04:EF:09:08:01:39:5C:E5:3E:09:9D:09:F7:AF:2E:F8:1B Certificate issuer: /CN=B7959E04EF090801395CE53E099D09F7AF2EF81B Certificate serial: 3896A4F5E65D5CE85D995A79545206371D86051E Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B7959E04EF090801395CE53E099D09F7AF2EF81B.cer Subject info access: rsync://repo-rpki.idnic.net/repo/0463ae7c-a6ff-4fd8-96f2-0ba1880133c7/0/B7959E04EF090801395CE53E099D09F7AF2EF81B.mft Manifest number: 0210 Signing time: Sun 02 Nov 2025 09:30:59 +0000 Manifest this update: Sun 02 Nov 2025 09:25:59 +0000 Manifest next update: Wed 05 Nov 2025 19:00:59 +0000 Files and hashes: 1: 3230332e3131342e3232372e302f32342d3234203d3e203435373033.roa (hash: S8koCw5Zpdz9WUfwrWHvdyG3BqQzOLzzd7o5WN4coH4=) 2: 3230332e3131342e3232362e302f32342d3234203d3e203435373033.roa (hash: 1cX8i6kVHz142LzobmEyC/+1K1VM1wldny1qyaPLfIA=) 3: B7959E04EF090801395CE53E099D09F7AF2EF81B.crl (hash: QkT5qGxZpVHPzriPX1kiCZCQhmCMIIh1liy25dZUL9A=) 4: 3230332e3131342e3232362e302f32332d3233203d3e203435373033.roa (hash: 6Ec3PjRbQ83AgMPSDqdSdFcRTMZUzCno6pS4ublkNCA=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/0463ae7c-a6ff-4fd8-96f2-0ba1880133c7/0/B7959E04EF090801395CE53E099D09F7AF2EF81B.crl rsync://repo-rpki.idnic.net/repo/0463ae7c-a6ff-4fd8-96f2-0ba1880133c7/0/B7959E04EF090801395CE53E099D09F7AF2EF81B.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B7959E04EF090801395CE53E099D09F7AF2EF81B.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 05 Nov 2025 19:00:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 38:96:a4:f5:e6:5d:5c:e8:5d:99:5a:79:54:52:06:37:1d:86:05:1e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B7959E04EF090801395CE53E099D09F7AF2EF81B Validity Not Before: Nov 2 09:25:59 2025 GMT Not After : Nov 5 19:00:59 2025 GMT Subject: CN=EB2C1F4BA91C99A9E4A11ABF6FA88D616E669C36 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ee:91:95:69:10:a2:9a:dc:28:92:87:e6:5b:62: 03:15:ee:1c:e6:42:57:e4:14:23:d0:87:cb:c1:77: 7e:5b:aa:50:64:0a:09:0a:76:8d:87:93:9f:69:9a: 78:59:8b:79:fd:30:9c:b0:dd:3d:2f:c7:36:46:80: 5d:b4:a2:4f:6e:b8:02:ad:f7:7f:05:6a:98:09:56: 67:45:16:ee:ce:8b:4c:db:53:26:cb:c5:6f:d7:6e: ac:93:1f:b6:e9:c3:b6:8c:5a:ef:55:c8:70:fd:ff: 21:56:ce:1e:4d:9a:9a:65:d9:ff:a1:2c:df:3f:15: 77:e1:1e:07:07:d1:1c:ad:53:63:ff:5b:b9:a3:8f: 2d:0f:af:b1:98:36:4b:8b:19:8d:ef:7a:63:e4:12: 5d:94:c7:ee:16:e9:5b:cf:37:83:82:a0:d1:36:38: 03:e5:7f:77:f1:cf:d9:e8:fc:f9:3c:26:80:d0:10: 88:bb:a2:f0:c5:83:e5:3b:17:fb:7d:28:33:03:36: 02:02:19:64:67:76:39:3a:e1:67:84:e7:e4:40:65: 67:c2:da:c4:df:b6:5b:6e:f9:05:26:b6:14:6b:dc: 66:88:d2:73:cb:1f:94:ef:8a:4d:02:d0:72:48:52: e0:10:da:e5:58:51:a8:ea:a5:19:0a:ae:ec:e7:06: 7a:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EB:2C:1F:4B:A9:1C:99:A9:E4:A1:1A:BF:6F:A8:8D:61:6E:66:9C:36 X509v3 Authority Key Identifier: keyid:B7:95:9E:04:EF:09:08:01:39:5C:E5:3E:09:9D:09:F7:AF:2E:F8:1B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/0463ae7c-a6ff-4fd8-96f2-0ba1880133c7/0/B7959E04EF090801395CE53E099D09F7AF2EF81B.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B7959E04EF090801395CE53E099D09F7AF2EF81B.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/0463ae7c-a6ff-4fd8-96f2-0ba1880133c7/0/B7959E04EF090801395CE53E099D09F7AF2EF81B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5f:f2:4e:5f:0b:e5:4a:d2:97:0b:d1:ac:0e:ac:21:92:ba:fc: 29:7c:3a:7e:b2:63:56:55:9a:02:cf:2a:40:fc:6c:f2:a7:be: 2a:fc:e3:70:37:97:7c:36:a3:1c:1d:a8:08:b6:24:51:8a:6f: 56:33:e6:bc:c9:ea:28:7e:1e:3e:ac:62:26:e6:79:82:e4:01: 92:c5:b0:4a:56:97:8d:10:5f:d9:cd:90:83:ce:98:40:bb:b9: c0:c6:b1:49:b1:14:cc:0b:24:05:20:49:3a:f6:ac:47:f8:f4: ef:4b:f0:0d:b1:96:0b:79:8f:fd:bd:9d:63:55:f8:17:8a:c6: 09:02:b2:82:c6:c6:75:76:dc:b1:be:ca:4b:b0:8e:03:3e:3c: 2b:56:c3:fd:74:b7:2c:4b:cf:94:fa:1b:25:08:b5:44:a0:30: 7c:6f:1c:99:bd:db:10:37:60:59:39:bc:5b:22:8c:53:0d:dd: fb:82:d5:19:03:17:42:28:1f:75:a2:5f:01:1f:70:78:60:90: 79:62:a9:88:42:52:82:43:3f:1d:ed:df:f1:cb:fc:88:ec:51: d9:e1:d9:db:eb:08:df:f8:d4:63:fa:76:e9:8c:e0:29:89:66: 95:4d:0d:7d:d4:be:b2:03:ce:5b:c3:44:83:d9:eb:65:b1:b7: f9:87:70:b0 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUOJak9eZdXOhdmVp5VFIGNx2GBR4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjc5NTlFMDRFRjA5MDgwMTM5NUNFNTNFMDk5RDA5RjdB RjJFRjgxQjAeFw0yNTExMDIwOTI1NTlaFw0yNTExMDUxOTAwNTlaMDMxMTAvBgNV BAMTKEVCMkMxRjRCQTkxQzk5QTlFNEExMUFCRjZGQTg4RDYxNkU2NjlDMzYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDukZVpEKKa3CiSh+ZbYgMV7hzm QlfkFCPQh8vBd35bqlBkCgkKdo2Hk59pmnhZi3n9MJyw3T0vxzZGgF20ok9uuAKt 938FapgJVmdFFu7Oi0zbUybLxW/XbqyTH7bpw7aMWu9VyHD9/yFWzh5Nmppl2f+h LN8/FXfhHgcH0RytU2P/W7mjjy0Pr7GYNkuLGY3vemPkEl2Ux+4W6VvPN4OCoNE2 OAPlf3fxz9no/Pk8JoDQEIi7ovDFg+U7F/t9KDMDNgICGWRndjk64WeE5+RAZWfC 2sTftltu+QUmthRr3GaI0nPLH5Tvik0C0HJIUuAQ2uVYUajqpRkKruznBnpPAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU6ywfS6kcmankoRq/b6iNYW5mnDYwHwYDVR0j BBgwFoAUt5WeBO8JCAE5XOU+CZ0J968u+BswDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w NDYzYWU3Yy1hNmZmLTRmZDgtOTZmMi0wYmExODgwMTMzYzcvMC9CNzk1OUUwNEVG MDkwODAxMzk1Q0U1M0UwOTlEMDlGN0FGMkVGODFCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQjc5NTlFMDRFRjA5MDgwMTM5NUNFNTNFMDk5RDA5RjdBRjJF RjgxQi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMDQ2M2FlN2MtYTZmZi00ZmQ4LTk2 ZjItMGJhMTg4MDEzM2M3LzAvQjc5NTlFMDRFRjA5MDgwMTM5NUNFNTNFMDk5RDA5 RjdBRjJFRjgxQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAF/yTl8L5UrSlwvRrA6sIZK6/Cl8On6yY1ZV mgLPKkD8bPKnvir843A3l3w2oxwdqAi2JFGKb1Yz5rzJ6ih+Hj6sYibmeYLkAZLF sEpWl40QX9nNkIPOmEC7ucDGsUmxFMwLJAUgSTr2rEf49O9L8A2xlgt5j/29nWNV +BeKxgkCsoLGxnV23LG+ykuwjgM+PCtWw/10tyxLz5T6GyUItUSgMHxvHJm92xA3 YFk5vFsijFMN3fuC1RkDF0IoH3WiXwEfcHhgkHliqYhCUoJDPx3t3/HL/IjsUdnh 2dvrCN/41GP6dumM4CmJZpVNDX3UvrIDzlvDRIPZ62Wxt/mHcLA= -----END CERTIFICATE-----Generated at Tue Nov 4 16:30:24 2025 by rpki-client