$ rpki-client -vvf repo-rpki.idnic.net/repo/1f2f64ca-fa54-499e-bc33-4862dca794f7/0/B9A55DD123C2F224C4E245856905F78F2F354D92.mft File: B9A55DD123C2F224C4E245856905F78F2F354D92.mft (raw, json) Hash identifier: 50iDdaW+YaeEv7eNM88cxrroWo0lJ3wLK1hTe2AMEOY= Subject key identifier: D9:1F:D0:04:A6:72:D9:4F:FE:B4:B1:D7:9B:EB:1B:C0:1E:55:6B:1E Authority key identifier: B9:A5:5D:D1:23:C2:F2:24:C4:E2:45:85:69:05:F7:8F:2F:35:4D:92 Certificate issuer: /CN=B9A55DD123C2F224C4E245856905F78F2F354D92 Certificate serial: 2A7DF87F39F773382535CD69EF39C41359E35C80 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/B9A55DD123C2F224C4E245856905F78F2F354D92.cer Subject info access: rsync://repo-rpki.idnic.net/repo/1f2f64ca-fa54-499e-bc33-4862dca794f7/0/B9A55DD123C2F224C4E245856905F78F2F354D92.mft Manifest number: EF Signing time: Sun 02 Nov 2025 14:21:00 +0000 Manifest this update: Sun 02 Nov 2025 14:16:00 +0000 Manifest next update: Wed 05 Nov 2025 16:38:00 +0000 Files and hashes: 1: 3135372e31302e39372e302f32342d3234203d3e203538383231.roa (hash: UPR5y8V0jVDX7lorT6sk4sYb0YCh+EKPNMakCdOkBwI=) 2: B9A55DD123C2F224C4E245856905F78F2F354D92.crl (hash: XP49rYaA+ikOVfr6wsvJbzeT/0sO72X4Y6LBOebqAtQ=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/1f2f64ca-fa54-499e-bc33-4862dca794f7/0/B9A55DD123C2F224C4E245856905F78F2F354D92.crl rsync://repo-rpki.idnic.net/repo/1f2f64ca-fa54-499e-bc33-4862dca794f7/0/B9A55DD123C2F224C4E245856905F78F2F354D92.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/B9A55DD123C2F224C4E245856905F78F2F354D92.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 05 Nov 2025 16:38:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2a:7d:f8:7f:39:f7:73:38:25:35:cd:69:ef:39:c4:13:59:e3:5c:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B9A55DD123C2F224C4E245856905F78F2F354D92 Validity Not Before: Nov 2 14:16:00 2025 GMT Not After : Nov 5 16:38:00 2025 GMT Subject: CN=D91FD004A672D94FFEB4B1D79BEB1BC01E556B1E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:ef:48:e5:9a:08:24:dc:9f:e6:4a:fc:82:ef: 85:ab:ea:c7:12:a2:28:84:f6:a9:1d:87:89:3b:50: 78:a5:b9:9b:7e:98:71:52:29:9d:5f:57:b8:9c:dc: 84:df:62:3c:da:6a:d8:1f:3e:ad:27:1b:8f:90:02: 9d:4d:e9:11:fe:1b:35:2f:d1:63:b5:8f:d2:b6:7c: 7d:49:17:27:62:e0:ea:31:32:f5:0a:c9:43:d4:71: 30:fc:4a:61:fe:60:1d:7b:66:89:40:08:ae:4d:1b: 86:e3:e3:e1:99:41:30:29:48:54:c0:c6:10:a0:7d: be:36:12:be:df:47:88:66:c0:d3:dc:ce:78:8a:43: b8:4c:ea:bc:39:03:eb:43:05:bc:8e:2b:38:70:25: 3a:4e:84:21:7d:20:3c:58:7b:83:cd:3c:38:2e:3a: 49:15:3e:24:8d:9f:9f:31:db:cf:4e:80:80:ba:ce: a4:11:a9:c8:33:64:ca:13:f3:94:d4:03:cd:f3:43: 7b:1f:1d:05:c8:c7:a7:7c:44:b3:ab:0c:bb:b0:7e: 69:4f:ec:0f:0b:dd:35:38:f0:77:4b:87:85:e5:98: 9e:78:28:46:18:53:96:48:c8:1f:fa:67:78:2e:ab: a1:55:3e:e0:3d:e9:49:31:5b:d9:bf:75:f5:2c:82: e9:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:1F:D0:04:A6:72:D9:4F:FE:B4:B1:D7:9B:EB:1B:C0:1E:55:6B:1E X509v3 Authority Key Identifier: keyid:B9:A5:5D:D1:23:C2:F2:24:C4:E2:45:85:69:05:F7:8F:2F:35:4D:92 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/1f2f64ca-fa54-499e-bc33-4862dca794f7/0/B9A55DD123C2F224C4E245856905F78F2F354D92.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/B9A55DD123C2F224C4E245856905F78F2F354D92.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/1f2f64ca-fa54-499e-bc33-4862dca794f7/0/B9A55DD123C2F224C4E245856905F78F2F354D92.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 53:cb:e3:d6:02:f7:86:94:67:7e:bb:04:f3:16:4e:69:7a:ce: 98:61:9f:14:aa:c5:21:08:9b:34:84:b1:6d:1c:ca:db:fe:e7: b7:59:67:80:61:1f:18:cc:2c:82:93:82:d7:8e:3b:b1:43:c4: 1c:b8:ab:64:d8:0c:fa:42:f5:26:80:17:ac:2d:5f:dd:2d:a3: e8:01:6c:19:dc:74:81:d5:f4:b9:9e:3d:a2:d0:21:50:2e:3e: a6:1d:b0:66:44:39:2e:a5:6f:7c:72:18:88:be:7c:96:63:2a: bf:e6:79:9f:77:56:07:f9:6f:d4:c0:d1:0e:66:43:f6:f3:14: a7:9e:02:c2:ea:b2:46:48:ba:67:3c:06:26:44:f2:cf:5a:9c: b3:bb:8e:e2:f0:b3:7d:f0:da:c3:d7:61:1c:89:df:35:6d:6d: b7:6f:fa:f6:04:4c:1c:6c:ff:f9:d1:08:c1:f5:03:6b:4e:2d: 4b:55:43:32:df:f0:4b:54:4a:cc:7e:2d:2d:bf:e1:b5:8f:64: cd:e6:86:90:d5:74:89:e8:64:8e:d6:cd:de:ff:86:c6:d3:1b: e0:67:56:07:a1:9f:95:fc:00:d5:a4:74:8d:99:ed:33:3d:d6: 4a:69:ea:fa:88:db:7c:55:89:ef:1f:93:17:30:23:60:f4:a5: f5:b8:c8:a9 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUKn34fzn3czglNc1p7znEE1njXIAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjlBNTVERDEyM0MyRjIyNEM0RTI0NTg1NjkwNUY3OEYy RjM1NEQ5MjAeFw0yNTExMDIxNDE2MDBaFw0yNTExMDUxNjM4MDBaMDMxMTAvBgNV BAMTKEQ5MUZEMDA0QTY3MkQ5NEZGRUI0QjFENzlCRUIxQkMwMUU1NTZCMUUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC870jlmggk3J/mSvyC74Wr6scS oiiE9qkdh4k7UHiluZt+mHFSKZ1fV7ic3ITfYjzaatgfPq0nG4+QAp1N6RH+GzUv 0WO1j9K2fH1JFydi4OoxMvUKyUPUcTD8SmH+YB17ZolACK5NG4bj4+GZQTApSFTA xhCgfb42Er7fR4hmwNPczniKQ7hM6rw5A+tDBbyOKzhwJTpOhCF9IDxYe4PNPDgu OkkVPiSNn58x289OgIC6zqQRqcgzZMoT85TUA83zQ3sfHQXIx6d8RLOrDLuwfmlP 7A8L3TU48HdLh4XlmJ54KEYYU5ZIyB/6Z3guq6FVPuA96UkxW9m/dfUsgulBAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU2R/QBKZy2U/+tLHXm+sbwB5Vax4wHwYDVR0j BBgwFoAUuaVd0SPC8iTE4kWFaQX3jy81TZIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x ZjJmNjRjYS1mYTU0LTQ5OWUtYmMzMy00ODYyZGNhNzk0ZjcvMC9COUE1NUREMTIz QzJGMjI0QzRFMjQ1ODU2OTA1Rjc4RjJGMzU0RDkyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvQjlBNTVERDEyM0MyRjIyNEM0RTI0NTg1NjkwNUY3OEYyRjM1 NEQ5Mi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMWYyZjY0Y2EtZmE1NC00OTllLWJj MzMtNDg2MmRjYTc5NGY3LzAvQjlBNTVERDEyM0MyRjIyNEM0RTI0NTg1NjkwNUY3 OEYyRjM1NEQ5Mi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFPL49YC94aUZ367BPMWTml6zphhnxSqxSEI mzSEsW0cytv+57dZZ4BhHxjMLIKTgteOO7FDxBy4q2TYDPpC9SaAF6wtX90to+gB bBncdIHV9LmePaLQIVAuPqYdsGZEOS6lb3xyGIi+fJZjKr/meZ93Vgf5b9TA0Q5m Q/bzFKeeAsLqskZIumc8BiZE8s9anLO7juLws33w2sPXYRyJ3zVtbbdv+vYETBxs //nRCMH1A2tOLUtVQzLf8EtUSsx+LS2/4bWPZM3mhpDVdInoZI7Wzd7/hsbTG+Bn Vgehn5X8ANWkdI2Z7TM91kpp6vqI23xVie8fkxcwI2D0pfW4yKk= -----END CERTIFICATE-----Generated at Tue Nov 4 18:59:51 2025 by rpki-client