$ rpki-client -vvf repo-rpki.idnic.net/repo/17216425-6aa3-4429-b175-86901bb0cb1f/0/B247FB55BE5739FCE4EBBD20B84542267C15D192.mft File: B247FB55BE5739FCE4EBBD20B84542267C15D192.mft (raw, json) Hash identifier: Eg0e+BwQarSLhx5PtAyY8vlzHYEJ4/I+yuoroWh42Bk= Subject key identifier: 05:2D:95:DB:55:3D:1B:6C:C0:E9:79:C3:3A:AF:03:26:EC:1B:4C:27 Authority key identifier: B2:47:FB:55:BE:57:39:FC:E4:EB:BD:20:B8:45:42:26:7C:15:D1:92 Certificate issuer: /CN=B247FB55BE5739FCE4EBBD20B84542267C15D192 Certificate serial: 609084659C4FCD18BF392915346483B8A164821A Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B247FB55BE5739FCE4EBBD20B84542267C15D192.cer Subject info access: rsync://repo-rpki.idnic.net/repo/17216425-6aa3-4429-b175-86901bb0cb1f/0/B247FB55BE5739FCE4EBBD20B84542267C15D192.mft Manifest number: 02A2 Signing time: Sun 02 Nov 2025 00:51:20 +0000 Manifest this update: Sun 02 Nov 2025 00:46:20 +0000 Manifest next update: Wed 05 Nov 2025 10:47:20 +0000 Files and hashes: 1: 3130332e3137362e39382e302f32342d3234203d3e20313439333434.roa (hash: EI6CAFKMozCEfiPKGQcvscTjTfj7/nkyBcwcx/XBDg8=) 2: 3130332e3137362e39382e302f32332d3234203d3e20313439333434.roa (hash: 9BKuqPMpOCYVLDkVIwaFy+U4SgMn8wYu59t+XyUcQfg=) 3: 3130332e3137362e39392e302f32342d3234203d3e20313439333434.roa (hash: 1SXRbeE4Zo2BpgZYkA81FPjpBzqJO4ahWylO9ct7G/4=) 4: B247FB55BE5739FCE4EBBD20B84542267C15D192.crl (hash: teh0nz1E6qJyJAW9nadRWyyB3VE6GiDfLfX8sCzuWoI=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/17216425-6aa3-4429-b175-86901bb0cb1f/0/B247FB55BE5739FCE4EBBD20B84542267C15D192.crl rsync://repo-rpki.idnic.net/repo/17216425-6aa3-4429-b175-86901bb0cb1f/0/B247FB55BE5739FCE4EBBD20B84542267C15D192.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B247FB55BE5739FCE4EBBD20B84542267C15D192.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 05 Nov 2025 10:47:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 60:90:84:65:9c:4f:cd:18:bf:39:29:15:34:64:83:b8:a1:64:82:1a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B247FB55BE5739FCE4EBBD20B84542267C15D192 Validity Not Before: Nov 2 00:46:20 2025 GMT Not After : Nov 5 10:47:20 2025 GMT Subject: CN=052D95DB553D1B6CC0E979C33AAF0326EC1B4C27 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:be:24:a4:8f:72:3d:e6:d0:c6:5d:db:52:42: d0:9f:05:a9:a4:0a:07:8c:f9:8d:9f:65:a2:2d:32: 16:46:0e:13:80:f1:80:fc:f5:9a:e1:32:fe:2e:79: 5e:b1:97:05:9c:38:db:89:78:4e:86:bf:98:7e:b3: 12:04:54:d0:6e:43:64:f1:0e:5a:a7:8c:dc:05:54: d8:41:3d:b9:ed:4a:62:67:48:d4:c0:2c:af:e4:f3: 3a:0e:81:d8:69:05:cb:17:fa:b8:ce:bc:7f:a8:35: 1a:3f:3f:13:27:cc:35:f0:dd:19:ac:7e:28:86:cf: 98:7b:26:a4:e3:a6:f7:81:c9:d0:06:e5:48:cb:c7: 61:99:64:35:e8:b1:03:46:ae:5c:c6:46:69:73:33: 3f:9f:d9:e0:73:5e:91:e9:5c:6a:a1:a4:2e:da:94: ca:69:55:37:ae:92:65:51:7e:b3:ce:52:0b:40:2d: dc:ec:a2:de:cf:f3:e5:27:33:13:65:ee:68:e3:2f: 7e:34:db:6b:3a:da:87:a9:13:6c:81:0c:a1:78:42: 87:6b:03:b8:32:86:b7:a6:11:c0:c8:32:9f:b3:7f: 2f:48:ac:6f:91:5e:c1:af:36:d3:cc:69:67:14:dd: 6b:b9:df:3f:70:cb:48:bf:01:2b:a9:ee:e0:cf:f8: d2:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 05:2D:95:DB:55:3D:1B:6C:C0:E9:79:C3:3A:AF:03:26:EC:1B:4C:27 X509v3 Authority Key Identifier: keyid:B2:47:FB:55:BE:57:39:FC:E4:EB:BD:20:B8:45:42:26:7C:15:D1:92 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/17216425-6aa3-4429-b175-86901bb0cb1f/0/B247FB55BE5739FCE4EBBD20B84542267C15D192.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B247FB55BE5739FCE4EBBD20B84542267C15D192.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/17216425-6aa3-4429-b175-86901bb0cb1f/0/B247FB55BE5739FCE4EBBD20B84542267C15D192.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption f5:d3:67:b8:4c:9b:48:c4:8f:1d:c3:3c:d8:46:25:f7:e3:78: 2e:d5:b1:db:59:c3:6f:cd:50:be:5c:6b:06:e7:a5:df:5b:07: 6e:50:0c:f2:30:45:ed:3f:d0:24:75:0f:24:9b:c9:99:ef:1c: 6d:42:65:04:05:0c:21:cf:c1:43:b3:13:ad:9c:c5:04:29:27: c1:7c:da:ba:1e:98:24:11:01:f6:71:41:b6:b3:29:a8:d8:f8: 62:f8:6e:41:65:a6:4f:5a:c2:1e:66:c9:e4:7b:db:8e:bc:c2: 4f:09:9d:af:ba:e9:de:ee:20:b2:d0:54:c1:b6:ec:82:5b:3f: 80:92:3f:36:89:51:a3:79:45:8b:5d:ed:30:80:48:4e:dd:84: 3f:71:62:b8:f5:e2:a0:86:4f:f6:a0:0f:26:90:71:08:a4:2e: 7e:ad:06:2f:d4:cd:35:06:96:21:d2:cd:60:69:71:79:b3:c7: 75:ae:7a:9a:ed:e5:32:9e:8b:b7:13:56:01:2e:23:ab:7e:b8: bc:37:69:4c:ae:b8:bb:63:b9:d2:0c:69:82:e6:2d:58:1e:51: 29:30:98:3f:10:5d:45:b6:2b:47:c9:03:5c:03:12:c3:9f:e7: e2:c1:c4:7b:ab:b2:32:7a:13:de:4e:59:47:57:33:45:f0:0a: 3b:4a:a7:dc -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUYJCEZZxPzRi/OSkVNGSDuKFkghowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjI0N0ZCNTVCRTU3MzlGQ0U0RUJCRDIwQjg0NTQyMjY3 QzE1RDE5MjAeFw0yNTExMDIwMDQ2MjBaFw0yNTExMDUxMDQ3MjBaMDMxMTAvBgNV BAMTKDA1MkQ5NURCNTUzRDFCNkNDMEU5NzlDMzNBQUYwMzI2RUMxQjRDMjcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDIviSkj3I95tDGXdtSQtCfBamk CgeM+Y2fZaItMhZGDhOA8YD89ZrhMv4ueV6xlwWcONuJeE6Gv5h+sxIEVNBuQ2Tx DlqnjNwFVNhBPbntSmJnSNTALK/k8zoOgdhpBcsX+rjOvH+oNRo/PxMnzDXw3Rms fiiGz5h7JqTjpveBydAG5UjLx2GZZDXosQNGrlzGRmlzMz+f2eBzXpHpXGqhpC7a lMppVTeukmVRfrPOUgtALdzsot7P8+UnMxNl7mjjL34022s62oepE2yBDKF4Qodr A7gyhremEcDIMp+zfy9IrG+RXsGvNtPMaWcU3Wu53z9wy0i/ASup7uDP+NKfAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUBS2V21U9G2zA6XnDOq8DJuwbTCcwHwYDVR0j BBgwFoAUskf7Vb5XOfzk670guEVCJnwV0ZIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x NzIxNjQyNS02YWEzLTQ0MjktYjE3NS04NjkwMWJiMGNiMWYvMC9CMjQ3RkI1NUJF NTczOUZDRTRFQkJEMjBCODQ1NDIyNjdDMTVEMTkyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQjI0N0ZCNTVCRTU3MzlGQ0U0RUJCRDIwQjg0NTQyMjY3QzE1 RDE5Mi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMTcyMTY0MjUtNmFhMy00NDI5LWIx NzUtODY5MDFiYjBjYjFmLzAvQjI0N0ZCNTVCRTU3MzlGQ0U0RUJCRDIwQjg0NTQy MjY3QzE1RDE5Mi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAPXTZ7hMm0jEjx3DPNhGJffjeC7VsdtZw2/N UL5cawbnpd9bB25QDPIwRe0/0CR1DySbyZnvHG1CZQQFDCHPwUOzE62cxQQpJ8F8 2roemCQRAfZxQbazKajY+GL4bkFlpk9awh5myeR72468wk8Jna+66d7uILLQVMG2 7IJbP4CSPzaJUaN5RYtd7TCASE7dhD9xYrj14qCGT/agDyaQcQikLn6tBi/UzTUG liHSzWBpcXmzx3Wueprt5TKei7cTVgEuI6t+uLw3aUyuuLtjudIMaYLmLVgeUSkw mD8QXUW2K0fJA1wDEsOf5+LBxHursjJ6E95OWUdXM0XwCjtKp9w= -----END CERTIFICATE-----Generated at Tue Nov 4 02:19:30 2025 by rpki-client