$ rpki-client -vvf repo-rpki.idnic.net/repo/0f7d2894-c077-421c-bc1d-37d6f9d9897d/0/B0D673B78DBE219F1EEEF056E3E49FB6D58A5550.mft File: B0D673B78DBE219F1EEEF056E3E49FB6D58A5550.mft (raw, json) Hash identifier: clUmlXuL/UwwHMZyCkHqyr+W0wWo+JjLdtjtIqVALOg= Subject key identifier: 0A:81:B3:E4:2B:15:7E:DF:A2:FD:4C:E5:F0:BE:3B:8F:CA:6A:B6:64 Authority key identifier: B0:D6:73:B7:8D:BE:21:9F:1E:EE:F0:56:E3:E4:9F:B6:D5:8A:55:50 Certificate issuer: /CN=B0D673B78DBE219F1EEEF056E3E49FB6D58A5550 Certificate serial: 0F85BCAE6CCD1B4C0B1658964847AFFF28BD1BE5 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/B0D673B78DBE219F1EEEF056E3E49FB6D58A5550.cer Subject info access: rsync://repo-rpki.idnic.net/repo/0f7d2894-c077-421c-bc1d-37d6f9d9897d/0/B0D673B78DBE219F1EEEF056E3E49FB6D58A5550.mft Manifest number: E5 Signing time: Tue 04 Nov 2025 08:20:53 +0000 Manifest this update: Tue 04 Nov 2025 08:15:53 +0000 Manifest next update: Fri 07 Nov 2025 08:26:53 +0000 Files and hashes: 1: 3136302e32322e32322e302f32332d3234203d3e20313532383032.roa (hash: 1cb+dRF1cCmzlK2LUqHDHTpgVi9SG86amprY/lPnWU4=) 2: B0D673B78DBE219F1EEEF056E3E49FB6D58A5550.crl (hash: aSLH0yXJuLeTfU3IagiJxwhb3rROaMoZ7feWs6r4uC4=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/0f7d2894-c077-421c-bc1d-37d6f9d9897d/0/B0D673B78DBE219F1EEEF056E3E49FB6D58A5550.crl rsync://repo-rpki.idnic.net/repo/0f7d2894-c077-421c-bc1d-37d6f9d9897d/0/B0D673B78DBE219F1EEEF056E3E49FB6D58A5550.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/B0D673B78DBE219F1EEEF056E3E49FB6D58A5550.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 07 Nov 2025 08:26:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0f:85:bc:ae:6c:cd:1b:4c:0b:16:58:96:48:47:af:ff:28:bd:1b:e5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B0D673B78DBE219F1EEEF056E3E49FB6D58A5550 Validity Not Before: Nov 4 08:15:53 2025 GMT Not After : Nov 7 08:26:53 2025 GMT Subject: CN=0A81B3E42B157EDFA2FD4CE5F0BE3B8FCA6AB664 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:03:ae:1d:8a:a5:f4:81:7d:eb:eb:af:0a:25: 9f:f7:33:f3:7a:5a:55:08:a3:3e:05:68:2c:66:a8: bb:11:f0:a7:f3:f4:98:23:16:60:e0:09:cc:fa:d7: 00:c8:a0:2e:cb:b2:48:13:5b:23:76:e0:70:82:6e: 03:b9:f0:a0:cf:18:67:8b:5a:93:51:9d:bb:8a:7a: f6:d9:27:f8:de:a8:88:ec:72:06:1f:ff:a9:8e:e4: 03:02:e7:2b:cc:4b:6b:00:f2:24:d9:ec:5d:6d:1f: bb:b5:2d:93:22:62:c4:fe:ac:29:bd:48:93:fc:8c: e7:d5:91:ef:e9:05:60:3c:5d:8b:7a:c2:bf:3d:2b: 84:ec:ea:23:ba:a6:1f:af:e2:6c:4d:db:ca:b4:9d: 9e:e7:65:cf:dd:33:7e:2e:78:36:c7:28:fe:3e:be: 0c:21:52:8d:f5:48:41:73:79:bb:00:f6:ee:e2:71: bf:6e:00:fd:6f:ba:61:25:de:54:56:48:1e:d9:78: 56:b0:70:28:21:18:b5:37:3e:af:2a:2b:4e:f9:ea: b9:a1:be:19:72:51:2f:23:12:91:8a:c5:89:be:eb: bd:12:ac:ac:bb:38:dd:ef:38:51:1c:e0:a7:94:0a: 87:5e:f4:6b:aa:89:e4:d8:7b:28:04:53:3a:66:f0: 31:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0A:81:B3:E4:2B:15:7E:DF:A2:FD:4C:E5:F0:BE:3B:8F:CA:6A:B6:64 X509v3 Authority Key Identifier: keyid:B0:D6:73:B7:8D:BE:21:9F:1E:EE:F0:56:E3:E4:9F:B6:D5:8A:55:50 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/0f7d2894-c077-421c-bc1d-37d6f9d9897d/0/B0D673B78DBE219F1EEEF056E3E49FB6D58A5550.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/B0D673B78DBE219F1EEEF056E3E49FB6D58A5550.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/0f7d2894-c077-421c-bc1d-37d6f9d9897d/0/B0D673B78DBE219F1EEEF056E3E49FB6D58A5550.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 89:86:2f:62:88:ff:bb:b3:41:d0:42:1a:4c:2b:f0:0c:53:ac: 62:8d:65:bf:70:db:48:49:63:b0:88:91:71:b3:3e:4d:9c:c2: 73:31:86:b6:75:47:6e:d1:45:f0:87:87:98:0d:ba:a2:27:3d: 4e:59:ec:2a:b0:fa:78:0b:55:86:fe:40:f1:71:06:b2:a4:da: 62:80:23:03:6b:4a:40:0a:a8:87:96:34:a9:17:ba:bc:fd:6a: 63:fb:24:53:af:01:d8:57:a6:e5:a4:9b:88:c6:c5:13:f6:23: c1:14:aa:d7:58:95:05:21:f1:d9:51:d2:e3:d8:b2:cb:81:aa: a2:c9:0d:b8:0c:ae:f0:10:a0:b6:4d:3b:d3:e8:f5:fb:7f:73: 0a:cb:73:8c:af:5b:46:14:3d:27:2a:97:58:19:b9:e3:95:20: b3:4e:02:73:87:db:7f:fd:89:db:dc:64:83:f0:ac:cf:fd:5b: c4:55:0f:71:f7:4c:ae:61:7b:9e:22:d6:d0:73:17:36:9c:fc: 2c:08:a2:05:1c:a9:5d:f7:ed:82:34:ef:a5:13:8f:2f:28:98: c6:0c:8a:46:ea:85:45:d5:7e:35:3f:cc:ff:89:7b:6b:09:53: 62:e2:fb:27:1c:19:f5:87:b3:98:09:54:e3:bd:5a:28:da:7a: 9e:ba:4b:fb -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUD4W8rmzNG0wLFliWSEev/yi9G+UwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjBENjczQjc4REJFMjE5RjFFRUVGMDU2RTNFNDlGQjZE NThBNTU1MDAeFw0yNTExMDQwODE1NTNaFw0yNTExMDcwODI2NTNaMDMxMTAvBgNV BAMTKDBBODFCM0U0MkIxNTdFREZBMkZENENFNUYwQkUzQjhGQ0E2QUI2NjQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDdA64diqX0gX3r668KJZ/3M/N6 WlUIoz4FaCxmqLsR8Kfz9JgjFmDgCcz61wDIoC7LskgTWyN24HCCbgO58KDPGGeL WpNRnbuKevbZJ/jeqIjscgYf/6mO5AMC5yvMS2sA8iTZ7F1tH7u1LZMiYsT+rCm9 SJP8jOfVke/pBWA8XYt6wr89K4Ts6iO6ph+v4mxN28q0nZ7nZc/dM34ueDbHKP4+ vgwhUo31SEFzebsA9u7icb9uAP1vumEl3lRWSB7ZeFawcCghGLU3Pq8qK0756rmh vhlyUS8jEpGKxYm+670SrKy7ON3vOFEc4KeUCode9GuqieTYeygEUzpm8DF1AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUCoGz5CsVft+i/Uzl8L47j8pqtmQwHwYDVR0j BBgwFoAUsNZzt42+IZ8e7vBW4+SfttWKVVAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w ZjdkMjg5NC1jMDc3LTQyMWMtYmMxZC0zN2Q2ZjlkOTg5N2QvMC9CMEQ2NzNCNzhE QkUyMTlGMUVFRUYwNTZFM0U0OUZCNkQ1OEE1NTUwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvQjBENjczQjc4REJFMjE5RjFFRUVGMDU2RTNFNDlGQjZENThB NTU1MC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMGY3ZDI4OTQtYzA3Ny00MjFjLWJj MWQtMzdkNmY5ZDk4OTdkLzAvQjBENjczQjc4REJFMjE5RjFFRUVGMDU2RTNFNDlG QjZENThBNTU1MC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAImGL2KI/7uzQdBCGkwr8AxTrGKNZb9w20hJ Y7CIkXGzPk2cwnMxhrZ1R27RRfCHh5gNuqInPU5Z7Cqw+ngLVYb+QPFxBrKk2mKA IwNrSkAKqIeWNKkXurz9amP7JFOvAdhXpuWkm4jGxRP2I8EUqtdYlQUh8dlR0uPY ssuBqqLJDbgMrvAQoLZNO9Po9ft/cwrLc4yvW0YUPScql1gZueOVILNOAnOH23/9 idvcZIPwrM/9W8RVD3H3TK5he54i1tBzFzac/CwIogUcqV337YI076UTjy8omMYM ikbqhUXVfjU/zP+Je2sJU2Li+yccGfWHs5gJVOO9Wijaep66S/s= -----END CERTIFICATE-----Generated at Wed Nov 5 00:08:56 2025 by rpki-client