$ rpki-client -vvf repo-rpki.idnic.net/repo/22f5f07c-f07b-4aaa-a0c2-df17c910c586/0/B5787D648E70D60E0E09510EBF1809D686E83D03.mft File: B5787D648E70D60E0E09510EBF1809D686E83D03.mft (raw, json) Hash identifier: 6zQXdYzgy5cV3Rbt4AL90Mb3HWQ0HV0UdqfGrw3ln4I= Subject key identifier: 8D:0C:27:76:2A:B2:C5:1A:9E:87:9A:C7:4E:B0:69:1C:9C:B3:94:9A Authority key identifier: B5:78:7D:64:8E:70:D6:0E:0E:09:51:0E:BF:18:09:D6:86:E8:3D:03 Certificate issuer: /CN=B5787D648E70D60E0E09510EBF1809D686E83D03 Certificate serial: 7ED7AC1EF16D5CF6034599447CCAD5B22210D6D5 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B5787D648E70D60E0E09510EBF1809D686E83D03.cer Subject info access: rsync://repo-rpki.idnic.net/repo/22f5f07c-f07b-4aaa-a0c2-df17c910c586/0/B5787D648E70D60E0E09510EBF1809D686E83D03.mft Manifest number: 034E Signing time: Wed 05 Nov 2025 00:12:06 +0000 Manifest this update: Wed 05 Nov 2025 00:07:06 +0000 Manifest next update: Sat 08 Nov 2025 04:14:06 +0000 Files and hashes: 1: 3130332e3137322e3138362e302f32332d3233203d3e20313432343030.roa (hash: eAolVNFu5RbZ8vrRSJHTSAnnItGXFwJM+Qxe0653Ja4=) 2: 3130332e3137322e3138362e302f32342d3234203d3e20313432343030.roa (hash: hdRTJYsi8eswhC1onrTfel6azdbRvum1qwnVMu+58TM=) 3: 3130332e3137322e3138372e302f32342d3234203d3e20313432343030.roa (hash: UMxzpZwJkuyWT8WiV33AdNXTdJHylmbT6yyy6htu0s4=) 4: B5787D648E70D60E0E09510EBF1809D686E83D03.crl (hash: 4Bpj743AVIvPBfwjQ3aMwKip7Mp1dNpiOwB81VDAL3Q=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/22f5f07c-f07b-4aaa-a0c2-df17c910c586/0/B5787D648E70D60E0E09510EBF1809D686E83D03.crl rsync://repo-rpki.idnic.net/repo/22f5f07c-f07b-4aaa-a0c2-df17c910c586/0/B5787D648E70D60E0E09510EBF1809D686E83D03.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B5787D648E70D60E0E09510EBF1809D686E83D03.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 08 Nov 2025 04:14:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7e:d7:ac:1e:f1:6d:5c:f6:03:45:99:44:7c:ca:d5:b2:22:10:d6:d5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B5787D648E70D60E0E09510EBF1809D686E83D03 Validity Not Before: Nov 5 00:07:06 2025 GMT Not After : Nov 8 04:14:06 2025 GMT Subject: CN=8D0C27762AB2C51A9E879AC74EB0691C9CB3949A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:86:37:6b:b0:f1:1d:5c:43:25:8e:1b:13:90: 8b:ca:4a:58:a5:ed:35:69:52:97:b2:3e:03:f4:d9: 56:0c:7f:05:b0:51:65:2f:aa:dc:65:40:db:0d:c7: d6:51:9a:15:d7:f2:00:e1:d9:4e:ac:09:a0:fa:db: 37:d0:6b:f9:ae:cf:0d:4b:eb:bc:76:77:e5:95:ab: 94:8f:15:63:fa:c7:3a:91:98:22:8e:da:ea:ed:51: 37:34:03:b9:f5:67:68:fc:0e:ac:93:79:19:a1:cf: 24:ba:d0:9c:ee:56:c9:a7:78:bd:f0:2c:76:fd:35: 44:4e:87:79:15:0c:4e:e4:24:2c:8b:08:8d:5c:f1: ba:8d:5e:e8:ea:08:3f:a9:5d:69:d9:30:99:42:1c: 91:fc:61:fe:b7:d3:7d:15:a3:dc:60:46:ae:08:cd: a0:69:8f:a3:a7:c4:c8:6f:b8:26:b8:93:15:84:32: 45:cd:91:cf:db:ce:f3:97:7f:32:f5:c8:95:bc:63: de:79:58:8a:42:e0:f1:f1:7d:3b:58:88:f2:8c:ef: 5b:8b:ae:ab:83:29:94:3c:e8:8d:af:08:20:d7:5d: 46:ec:03:a5:c1:cb:e1:df:48:09:ef:1d:2e:e9:56: 74:b7:67:b0:4c:c8:d5:a5:66:ba:e1:26:7d:e3:22: 97:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8D:0C:27:76:2A:B2:C5:1A:9E:87:9A:C7:4E:B0:69:1C:9C:B3:94:9A X509v3 Authority Key Identifier: keyid:B5:78:7D:64:8E:70:D6:0E:0E:09:51:0E:BF:18:09:D6:86:E8:3D:03 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/22f5f07c-f07b-4aaa-a0c2-df17c910c586/0/B5787D648E70D60E0E09510EBF1809D686E83D03.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B5787D648E70D60E0E09510EBF1809D686E83D03.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/22f5f07c-f07b-4aaa-a0c2-df17c910c586/0/B5787D648E70D60E0E09510EBF1809D686E83D03.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 83:e2:7b:49:5a:7e:90:cb:9b:99:05:9d:3c:40:d9:fa:a7:84: ad:2b:e1:93:36:bf:52:3a:e9:9f:45:2d:aa:b5:70:a4:3f:c9: f8:3c:91:2a:ec:b2:db:78:be:34:08:b5:ea:d4:09:f7:b3:bc: be:c8:dd:2d:9d:ad:6a:a0:10:86:83:98:cc:f9:7e:ed:de:9d: a2:b4:5b:9e:84:c0:12:8c:c4:c5:9a:f4:89:53:f6:b3:ed:2c: 5a:b5:6b:55:d4:d9:56:fd:52:b1:9a:e1:1e:f3:1e:28:0b:f5: 9e:50:c5:4e:47:5e:11:69:d2:8b:80:10:ff:c3:df:18:cf:da: 8c:b2:01:7a:a5:65:83:f0:16:79:be:b6:77:12:1f:12:fa:e9: c4:69:3d:ec:bd:71:6e:21:23:f1:6a:b7:a9:04:2a:d5:4f:31: d5:8c:88:51:e3:79:91:1f:6b:38:80:27:05:67:90:06:82:e2: cc:9d:8e:5f:75:f5:ee:c2:9b:9f:e7:3f:82:05:c1:7b:05:64: 84:b9:cd:b9:ce:5f:03:9b:bf:06:f3:ea:57:0f:ca:17:b6:04: aa:21:eb:e6:cb:f2:82:77:3a:79:69:51:27:a8:80:a2:73:84: de:4e:59:60:d5:c1:7c:9a:ca:02:e6:c4:e7:66:97:2e:2e:f2: 0c:9b:72:5c -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUftesHvFtXPYDRZlEfMrVsiIQ1tUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjU3ODdENjQ4RTcwRDYwRTBFMDk1MTBFQkYxODA5RDY4 NkU4M0QwMzAeFw0yNTExMDUwMDA3MDZaFw0yNTExMDgwNDE0MDZaMDMxMTAvBgNV BAMTKDhEMEMyNzc2MkFCMkM1MUE5RTg3OUFDNzRFQjA2OTFDOUNCMzk0OUEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+hjdrsPEdXEMljhsTkIvKSlil 7TVpUpeyPgP02VYMfwWwUWUvqtxlQNsNx9ZRmhXX8gDh2U6sCaD62zfQa/muzw1L 67x2d+WVq5SPFWP6xzqRmCKO2urtUTc0A7n1Z2j8DqyTeRmhzyS60JzuVsmneL3w LHb9NUROh3kVDE7kJCyLCI1c8bqNXujqCD+pXWnZMJlCHJH8Yf63030Vo9xgRq4I zaBpj6OnxMhvuCa4kxWEMkXNkc/bzvOXfzL1yJW8Y955WIpC4PHxfTtYiPKM71uL rquDKZQ86I2vCCDXXUbsA6XBy+HfSAnvHS7pVnS3Z7BMyNWlZrrhJn3jIpfRAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUjQwndiqyxRqeh5rHTrBpHJyzlJowHwYDVR0j BBgwFoAUtXh9ZI5w1g4OCVEOvxgJ1oboPQMwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y MmY1ZjA3Yy1mMDdiLTRhYWEtYTBjMi1kZjE3YzkxMGM1ODYvMC9CNTc4N0Q2NDhF NzBENjBFMEUwOTUxMEVCRjE4MDlENjg2RTgzRDAzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQjU3ODdENjQ4RTcwRDYwRTBFMDk1MTBFQkYxODA5RDY4NkU4 M0QwMy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMjJmNWYwN2MtZjA3Yi00YWFhLWEw YzItZGYxN2M5MTBjNTg2LzAvQjU3ODdENjQ4RTcwRDYwRTBFMDk1MTBFQkYxODA5 RDY4NkU4M0QwMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIPie0lafpDLm5kFnTxA2fqnhK0r4ZM2v1I6 6Z9FLaq1cKQ/yfg8kSrsstt4vjQIterUCfezvL7I3S2drWqgEIaDmMz5fu3enaK0 W56EwBKMxMWa9IlT9rPtLFq1a1XU2Vb9UrGa4R7zHigL9Z5QxU5HXhFp0ouAEP/D 3xjP2oyyAXqlZYPwFnm+tncSHxL66cRpPey9cW4hI/Fqt6kEKtVPMdWMiFHjeZEf aziAJwVnkAaC4sydjl919e7Cm5/nP4IFwXsFZIS5zbnOXwObvwbz6lcPyhe2BKoh 6+bL8oJ3OnlpUSeogKJzhN5OWWDVwXyaygLmxOdmly4u8gybclw= -----END CERTIFICATE-----Generated at Wed Nov 5 07:44:33 2025 by rpki-client