$ rpki-client -vvf repo-rpki.idnic.net/repo/0e05a1ce-849f-417c-b673-fdd33f0d7447/0/B0AAB728B88975526C1741CCA8673CBC88F7697C.mft File: B0AAB728B88975526C1741CCA8673CBC88F7697C.mft (raw, json) Hash identifier: z0OQe/XpWQ+nvLxzM/EWTVcAh0N5r2DxyIK99nDqCgI= Subject key identifier: 77:6B:83:D1:30:01:1D:0C:7C:02:DC:44:29:2D:E4:05:CB:09:74:26 Authority key identifier: B0:AA:B7:28:B8:89:75:52:6C:17:41:CC:A8:67:3C:BC:88:F7:69:7C Certificate issuer: /CN=B0AAB728B88975526C1741CCA8673CBC88F7697C Certificate serial: 542745855E7478EF04B8E27E45B940DAB15CE27E Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B0AAB728B88975526C1741CCA8673CBC88F7697C.cer Subject info access: rsync://repo-rpki.idnic.net/repo/0e05a1ce-849f-417c-b673-fdd33f0d7447/0/B0AAB728B88975526C1741CCA8673CBC88F7697C.mft Manifest number: 03A1 Signing time: Mon 03 Nov 2025 18:31:15 +0000 Manifest this update: Mon 03 Nov 2025 18:26:15 +0000 Manifest next update: Thu 06 Nov 2025 20:19:15 +0000 Files and hashes: 1: B0AAB728B88975526C1741CCA8673CBC88F7697C.crl (hash: htU2QQm+7qEUrEgpw5frn6LZwWtNKZC0Mamdwy8Dh8Y=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/0e05a1ce-849f-417c-b673-fdd33f0d7447/0/B0AAB728B88975526C1741CCA8673CBC88F7697C.crl rsync://repo-rpki.idnic.net/repo/0e05a1ce-849f-417c-b673-fdd33f0d7447/0/B0AAB728B88975526C1741CCA8673CBC88F7697C.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B0AAB728B88975526C1741CCA8673CBC88F7697C.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 06 Nov 2025 20:19:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 54:27:45:85:5e:74:78:ef:04:b8:e2:7e:45:b9:40:da:b1:5c:e2:7e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B0AAB728B88975526C1741CCA8673CBC88F7697C Validity Not Before: Nov 3 18:26:15 2025 GMT Not After : Nov 6 20:19:15 2025 GMT Subject: CN=776B83D130011D0C7C02DC44292DE405CB097426 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ec:39:4b:49:da:06:3e:8f:95:03:b1:8e:08:cc: 87:16:20:f1:b1:0a:e2:1f:90:5e:29:8b:2a:c7:57: 3d:50:d7:00:58:74:09:6e:b5:78:2f:04:3b:29:ae: a2:05:65:19:7c:76:aa:a5:48:c4:1d:bd:91:0b:8d: 21:61:64:89:93:0c:f4:a4:ce:72:80:52:73:27:01: bc:c8:17:40:7b:8d:d6:ad:47:03:d1:00:ac:42:46: 68:fa:76:ad:60:ea:b2:ce:a6:2f:d5:a6:0c:57:8a: e2:d5:61:4d:bd:44:11:ab:05:1b:66:a0:0f:87:e6: 03:bb:b0:c3:d2:fa:ff:c5:d8:04:bc:f9:1d:ca:43: df:ca:17:93:29:ab:5a:c8:fa:c5:e6:28:f3:d1:fc: f7:00:5f:85:9f:9c:66:bc:8d:f5:08:e1:5c:7e:34: 73:89:5c:a4:d7:45:d4:7a:4e:f8:92:3f:0d:f4:0a: bd:f1:3f:80:63:f7:42:a2:7f:bf:a3:14:1a:2e:fb: fd:66:8a:d1:9a:3f:e7:0f:bc:c5:4a:34:8e:5f:3a: 33:cb:05:d0:89:12:1d:b6:c1:7e:9e:92:ea:a2:ce: 12:8c:c8:5c:f2:a7:7c:ba:c0:aa:d0:de:50:cd:13: 50:09:e0:0a:65:b5:46:b7:81:56:e3:72:32:9d:35: 09:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 77:6B:83:D1:30:01:1D:0C:7C:02:DC:44:29:2D:E4:05:CB:09:74:26 X509v3 Authority Key Identifier: keyid:B0:AA:B7:28:B8:89:75:52:6C:17:41:CC:A8:67:3C:BC:88:F7:69:7C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/0e05a1ce-849f-417c-b673-fdd33f0d7447/0/B0AAB728B88975526C1741CCA8673CBC88F7697C.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B0AAB728B88975526C1741CCA8673CBC88F7697C.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/0e05a1ce-849f-417c-b673-fdd33f0d7447/0/B0AAB728B88975526C1741CCA8673CBC88F7697C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 40:c4:83:aa:27:94:99:82:8a:78:a4:59:b9:d8:16:b3:51:7c: b5:9a:f0:21:aa:ee:89:1e:ae:af:a6:b5:fd:38:2b:d1:2e:27: 34:47:e7:3c:91:f5:83:ac:3b:5a:c8:b7:c1:1d:91:c7:e2:a6: ac:4b:51:15:7d:b6:e5:c4:c2:51:eb:9d:0e:c1:04:9d:4f:fa: e6:27:5c:8a:79:9c:fc:c0:6a:a6:3d:a5:cc:02:e3:59:ba:d5: 99:2f:c8:38:5f:bf:08:d5:8c:b6:eb:30:5a:ae:7e:bc:aa:ef: 44:90:9f:5a:48:f9:7d:2c:45:f9:f1:67:4a:3d:6e:0a:b0:2c: 11:a1:4f:0a:6d:79:c2:d4:b8:2f:5d:64:5d:4a:a0:96:5e:2b: fb:a8:2d:f1:68:44:07:46:df:39:c4:ad:07:17:37:95:98:b9: f2:54:0e:0e:da:3f:9a:85:47:1b:f8:a2:84:8e:84:c9:e7:8a: e0:c3:4b:5e:79:6b:e9:b8:d4:df:3e:73:46:f4:71:39:d7:02: c8:01:df:f5:6a:6a:5f:9d:31:55:07:65:12:2d:06:69:11:a3: 9c:a5:83:48:c1:cc:b5:8d:cd:dd:17:c5:8d:d3:48:3f:8e:73: bd:5b:fc:f9:96:07:5b:c0:66:ac:47:6d:ac:61:37:f8:c3:7a: c3:c9:fd:ff -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUVCdFhV50eO8EuOJ+RblA2rFc4n4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjBBQUI3MjhCODg5NzU1MjZDMTc0MUNDQTg2NzNDQkM4 OEY3Njk3QzAeFw0yNTExMDMxODI2MTVaFw0yNTExMDYyMDE5MTVaMDMxMTAvBgNV BAMTKDc3NkI4M0QxMzAwMTFEMEM3QzAyREM0NDI5MkRFNDA1Q0IwOTc0MjYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDsOUtJ2gY+j5UDsY4IzIcWIPGx CuIfkF4piyrHVz1Q1wBYdAlutXgvBDsprqIFZRl8dqqlSMQdvZELjSFhZImTDPSk znKAUnMnAbzIF0B7jdatRwPRAKxCRmj6dq1g6rLOpi/VpgxXiuLVYU29RBGrBRtm oA+H5gO7sMPS+v/F2AS8+R3KQ9/KF5Mpq1rI+sXmKPPR/PcAX4WfnGa8jfUI4Vx+ NHOJXKTXRdR6TviSPw30Cr3xP4Bj90Kif7+jFBou+/1mitGaP+cPvMVKNI5fOjPL BdCJEh22wX6ekuqizhKMyFzyp3y6wKrQ3lDNE1AJ4ApltUa3gVbjcjKdNQk3AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUd2uD0TABHQx8AtxEKS3kBcsJdCYwHwYDVR0j BBgwFoAUsKq3KLiJdVJsF0HMqGc8vIj3aXwwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w ZTA1YTFjZS04NDlmLTQxN2MtYjY3My1mZGQzM2YwZDc0NDcvMC9CMEFBQjcyOEI4 ODk3NTUyNkMxNzQxQ0NBODY3M0NCQzg4Rjc2OTdDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQjBBQUI3MjhCODg5NzU1MjZDMTc0MUNDQTg2NzNDQkM4OEY3 Njk3Qy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMGUwNWExY2UtODQ5Zi00MTdjLWI2 NzMtZmRkMzNmMGQ3NDQ3LzAvQjBBQUI3MjhCODg5NzU1MjZDMTc0MUNDQTg2NzND QkM4OEY3Njk3Qy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEDEg6onlJmCinikWbnYFrNRfLWa8CGq7oke rq+mtf04K9EuJzRH5zyR9YOsO1rIt8EdkcfipqxLURV9tuXEwlHrnQ7BBJ1P+uYn XIp5nPzAaqY9pcwC41m61ZkvyDhfvwjVjLbrMFqufryq70SQn1pI+X0sRfnxZ0o9 bgqwLBGhTwptecLUuC9dZF1KoJZeK/uoLfFoRAdG3znErQcXN5WYufJUDg7aP5qF Rxv4ooSOhMnniuDDS155a+m41N8+c0b0cTnXAsgB3/Vqal+dMVUHZRItBmkRo5yl g0jBzLWNzd0XxY3TSD+Oc71b/PmWB1vAZqxHbaxhN/jDesPJ/f8= -----END CERTIFICATE-----Generated at Wed Nov 5 02:55:32 2025 by rpki-client