$ rpki-client -vvf repo-rpki.idnic.net/repo/0ed850a8-abb9-4482-a5bc-54d79eb7f323/0/B1015FDC3ABDC9EC594F6E8A82A116F769CA5665.mft File: B1015FDC3ABDC9EC594F6E8A82A116F769CA5665.mft (raw, json) Hash identifier: TuzngFEG+JwcYS6+kJH6di4a81gbsolWIFbV5a4isfs= Subject key identifier: 7F:73:54:01:AF:CB:0E:10:83:73:D9:FB:B6:4A:92:4E:DA:32:53:5F Authority key identifier: B1:01:5F:DC:3A:BD:C9:EC:59:4F:6E:8A:82:A1:16:F7:69:CA:56:65 Certificate issuer: /CN=B1015FDC3ABDC9EC594F6E8A82A116F769CA5665 Certificate serial: 1766507224483D40DE2101B625498A439DB6355C Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B1015FDC3ABDC9EC594F6E8A82A116F769CA5665.cer Subject info access: rsync://repo-rpki.idnic.net/repo/0ed850a8-abb9-4482-a5bc-54d79eb7f323/0/B1015FDC3ABDC9EC594F6E8A82A116F769CA5665.mft Manifest number: 01A9 Signing time: Mon 03 Nov 2025 16:10:44 +0000 Manifest this update: Mon 03 Nov 2025 16:05:44 +0000 Manifest next update: Thu 06 Nov 2025 20:14:44 +0000 Files and hashes: 1: B1015FDC3ABDC9EC594F6E8A82A116F769CA5665.crl (hash: knmHIA9wvrg3BvNBiOoXIhEH9Wc7XHMHsdQT4A9IFRI=) 2: 3130332e3134312e3235352e302f32342d3234203d3e20313331373639.roa (hash: UaQ/mjwTv+b6NTjX6YdQwkzBFAEMayy8kKSUdpdv01Q=) 3: 3130332e3134312e3235342e302f32342d3234203d3e20313331373639.roa (hash: 3jV7osfpuzM2RdznZ0/4uwu+i/NyUjZA48yClTEGD1w=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/0ed850a8-abb9-4482-a5bc-54d79eb7f323/0/B1015FDC3ABDC9EC594F6E8A82A116F769CA5665.crl rsync://repo-rpki.idnic.net/repo/0ed850a8-abb9-4482-a5bc-54d79eb7f323/0/B1015FDC3ABDC9EC594F6E8A82A116F769CA5665.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B1015FDC3ABDC9EC594F6E8A82A116F769CA5665.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 06 Nov 2025 20:14:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 17:66:50:72:24:48:3d:40:de:21:01:b6:25:49:8a:43:9d:b6:35:5c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B1015FDC3ABDC9EC594F6E8A82A116F769CA5665 Validity Not Before: Nov 3 16:05:44 2025 GMT Not After : Nov 6 20:14:44 2025 GMT Subject: CN=7F735401AFCB0E108373D9FBB64A924EDA32535F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f4:df:13:10:d4:7a:8e:14:6f:3c:1e:aa:d3:b2: 0e:70:28:94:d5:5e:66:82:86:84:29:81:1e:76:aa: c8:20:8f:e0:25:a5:9a:dd:3b:94:b1:68:fb:06:9f: 07:84:52:a2:a8:f1:c1:82:cd:75:43:46:35:c6:bc: 8f:f6:55:f3:ae:5f:86:36:f6:79:ea:f1:63:27:8f: 38:14:49:7f:8f:7f:97:60:2a:e5:22:9f:4f:1e:dc: e2:11:aa:dc:88:e7:db:32:89:cf:cc:c1:f8:81:4c: 82:38:f5:42:49:fb:8a:ac:a6:1f:d3:19:70:da:d4: 09:85:0a:05:23:8e:04:ef:b6:86:e0:b0:6f:a8:b0: 9c:94:fa:49:67:a2:34:84:29:e6:58:79:ff:be:a0: 6b:6c:37:6d:45:fc:19:87:24:a0:d0:46:60:54:da: 3f:ac:be:49:c4:64:1b:ab:74:51:b6:15:f3:f3:11: 87:95:86:15:2c:5b:68:10:00:e2:09:bf:c2:4f:fc: 65:d2:a1:cb:29:96:aa:d5:ac:5a:df:1b:96:d7:5a: a1:00:3f:60:b4:4d:20:67:b6:1b:61:e1:d5:4d:ba: 1d:92:35:81:06:0d:b5:e7:ac:15:ca:46:30:42:0d: b8:36:46:66:6d:7c:c0:a7:54:96:3a:0f:93:d0:69: 95:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7F:73:54:01:AF:CB:0E:10:83:73:D9:FB:B6:4A:92:4E:DA:32:53:5F X509v3 Authority Key Identifier: keyid:B1:01:5F:DC:3A:BD:C9:EC:59:4F:6E:8A:82:A1:16:F7:69:CA:56:65 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/0ed850a8-abb9-4482-a5bc-54d79eb7f323/0/B1015FDC3ABDC9EC594F6E8A82A116F769CA5665.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B1015FDC3ABDC9EC594F6E8A82A116F769CA5665.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/0ed850a8-abb9-4482-a5bc-54d79eb7f323/0/B1015FDC3ABDC9EC594F6E8A82A116F769CA5665.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a8:24:5d:44:cf:68:f1:15:8d:bd:e2:aa:ed:92:c5:b3:54:c8: 19:3b:9f:97:fb:56:38:92:ea:72:32:a2:6e:48:dc:7a:e4:8f: ff:35:ca:43:17:f9:1b:1e:0c:28:5b:a3:3a:5d:b9:f4:9f:c2: 58:45:90:35:34:91:5e:ae:3e:64:91:23:a3:1d:8b:eb:d2:82: 22:1a:b6:16:3a:b1:4c:53:12:54:ab:20:af:ac:30:10:ad:af: 72:4b:15:49:7d:cd:d2:c1:07:f3:1e:cc:7c:a1:2e:12:d7:59: 19:db:3b:09:66:e8:3e:37:ad:32:1f:d8:7e:f3:d0:5f:fb:17: 0f:17:67:ec:00:a8:90:00:0d:a9:42:9c:21:83:8f:1d:8a:e1: 17:70:0f:a4:53:da:e6:3c:a5:62:0f:65:94:d3:d5:ae:24:e4: bd:be:61:dd:f1:16:5f:86:99:5a:c1:f4:17:0f:49:0e:c3:fd: 37:63:2c:6e:15:14:ad:17:41:f0:c2:1c:76:01:32:db:bb:ae: 6f:df:9a:e9:88:3d:00:a9:10:53:af:3d:85:5c:90:67:8d:06: 25:e8:26:b9:e7:b9:19:91:91:e2:a2:bd:09:5d:8f:88:d1:7d: a5:99:67:a2:da:c8:3a:56:c9:42:0c:07:63:9d:54:31:4c:51: 4f:32:a1:3d -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUF2ZQciRIPUDeIQG2JUmKQ522NVwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjEwMTVGREMzQUJEQzlFQzU5NEY2RThBODJBMTE2Rjc2 OUNBNTY2NTAeFw0yNTExMDMxNjA1NDRaFw0yNTExMDYyMDE0NDRaMDMxMTAvBgNV BAMTKDdGNzM1NDAxQUZDQjBFMTA4MzczRDlGQkI2NEE5MjRFREEzMjUzNUYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD03xMQ1HqOFG88HqrTsg5wKJTV XmaChoQpgR52qsggj+AlpZrdO5SxaPsGnweEUqKo8cGCzXVDRjXGvI/2VfOuX4Y2 9nnq8WMnjzgUSX+Pf5dgKuUin08e3OIRqtyI59syic/MwfiBTII49UJJ+4qsph/T GXDa1AmFCgUjjgTvtobgsG+osJyU+klnojSEKeZYef++oGtsN21F/BmHJKDQRmBU 2j+svknEZBurdFG2FfPzEYeVhhUsW2gQAOIJv8JP/GXSocsplqrVrFrfG5bXWqEA P2C0TSBnthth4dVNuh2SNYEGDbXnrBXKRjBCDbg2RmZtfMCnVJY6D5PQaZXLAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUf3NUAa/LDhCDc9n7tkqSTtoyU18wHwYDVR0j BBgwFoAUsQFf3Dq9yexZT26KgqEW92nKVmUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w ZWQ4NTBhOC1hYmI5LTQ0ODItYTViYy01NGQ3OWViN2YzMjMvMC9CMTAxNUZEQzNB QkRDOUVDNTk0RjZFOEE4MkExMTZGNzY5Q0E1NjY1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQjEwMTVGREMzQUJEQzlFQzU5NEY2RThBODJBMTE2Rjc2OUNB NTY2NS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMGVkODUwYTgtYWJiOS00NDgyLWE1 YmMtNTRkNzllYjdmMzIzLzAvQjEwMTVGREMzQUJEQzlFQzU5NEY2RThBODJBMTE2 Rjc2OUNBNTY2NS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKgkXUTPaPEVjb3iqu2SxbNUyBk7n5f7VjiS 6nIyom5I3Hrkj/81ykMX+RseDChbozpdufSfwlhFkDU0kV6uPmSRI6Mdi+vSgiIa thY6sUxTElSrIK+sMBCtr3JLFUl9zdLBB/MezHyhLhLXWRnbOwlm6D43rTIf2H7z 0F/7Fw8XZ+wAqJAADalCnCGDjx2K4RdwD6RT2uY8pWIPZZTT1a4k5L2+Yd3xFl+G mVrB9BcPSQ7D/TdjLG4VFK0XQfDCHHYBMtu7rm/fmumIPQCpEFOvPYVckGeNBiXo JrnnuRmRkeKivQldj4jRfaWZZ6LayDpWyUIMB2OdVDFMUU8yoT0= -----END CERTIFICATE-----Generated at Tue Nov 4 15:54:13 2025 by rpki-client