$ rpki-client -vvf repo-rpki.idnic.net/repo/29b3be62-3597-4fe8-a795-fc9ba1202344/0/B4381C63674B5D9A9B8C44C13CF19E7DD321F7C0.mft File: B4381C63674B5D9A9B8C44C13CF19E7DD321F7C0.mft (raw, json) Hash identifier: UxygC4z2EBo/W5/Ga0Svtpn26E8MDLBs4NQc5q0R8T4= Subject key identifier: 2B:B8:34:59:E5:98:94:D8:64:85:76:92:E8:CA:02:EE:8F:0D:32:23 Authority key identifier: B4:38:1C:63:67:4B:5D:9A:9B:8C:44:C1:3C:F1:9E:7D:D3:21:F7:C0 Certificate issuer: /CN=B4381C63674B5D9A9B8C44C13CF19E7DD321F7C0 Certificate serial: 079DB883E0264394E9EAA9AF1E20C30DF87F25D0 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B4381C63674B5D9A9B8C44C13CF19E7DD321F7C0.cer Subject info access: rsync://repo-rpki.idnic.net/repo/29b3be62-3597-4fe8-a795-fc9ba1202344/0/B4381C63674B5D9A9B8C44C13CF19E7DD321F7C0.mft Manifest number: 01BB Signing time: Mon 03 Nov 2025 11:01:29 +0000 Manifest this update: Mon 03 Nov 2025 10:56:29 +0000 Manifest next update: Thu 06 Nov 2025 18:55:29 +0000 Files and hashes: 1: B4381C63674B5D9A9B8C44C13CF19E7DD321F7C0.crl (hash: EN4cr5AVRE3q3uO4fxx7nMp2iYUxMAKr+l+JpcGRDFk=) 2: 3130332e32302e3231392e302f32342d3234203d3e20313439393638.roa (hash: O7tUFKX21rX6gYwZ1ZrwxitGOTUDY0G4VWaDfkWzuZ4=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/29b3be62-3597-4fe8-a795-fc9ba1202344/0/B4381C63674B5D9A9B8C44C13CF19E7DD321F7C0.crl rsync://repo-rpki.idnic.net/repo/29b3be62-3597-4fe8-a795-fc9ba1202344/0/B4381C63674B5D9A9B8C44C13CF19E7DD321F7C0.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B4381C63674B5D9A9B8C44C13CF19E7DD321F7C0.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 06 Nov 2025 18:55:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 07:9d:b8:83:e0:26:43:94:e9:ea:a9:af:1e:20:c3:0d:f8:7f:25:d0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B4381C63674B5D9A9B8C44C13CF19E7DD321F7C0 Validity Not Before: Nov 3 10:56:29 2025 GMT Not After : Nov 6 18:55:29 2025 GMT Subject: CN=2BB83459E59894D864857692E8CA02EE8F0D3223 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:2e:14:76:cb:ec:9c:9f:9b:3f:53:f3:9d:63: 76:81:8c:36:87:20:dd:5b:67:62:c0:1c:65:65:be: 74:df:a8:4b:65:54:9c:5e:52:ae:36:35:c3:2d:5c: b8:ec:28:b2:bb:10:f5:b3:0d:2e:89:c7:b7:7f:ee: 6a:12:6b:57:ac:fe:51:2d:b9:79:bd:f0:3e:c5:d2: 5b:72:99:bc:e7:fa:21:40:8a:ea:23:b0:63:c8:6b: 9f:58:7b:6c:00:cb:0e:ce:c1:f0:a5:18:40:38:21: 91:19:99:26:b5:10:b9:63:67:07:d9:d9:58:79:8a: 7f:7e:70:31:be:da:f1:c8:ad:bb:4e:0d:8b:ba:a9: 6e:8b:08:43:f0:57:38:34:43:86:35:6d:89:2d:a8: 38:9c:8e:d9:4d:6c:7e:ce:ab:49:90:23:39:4a:d3: 51:c4:e0:a4:22:c2:cc:ac:01:7b:b5:a8:7c:3d:8c: 5e:dd:af:e2:01:4d:71:b0:6d:0b:a2:3a:0a:47:8d: 29:34:15:c4:88:8d:2c:1b:58:34:9a:20:e6:d4:fe: a6:36:e4:82:a8:1d:55:e7:50:f2:94:c2:e4:71:42: dd:69:44:79:88:4c:5e:61:ea:08:5a:b3:b4:0d:0e: 46:05:1a:66:cf:fb:82:68:6c:ed:8f:96:30:4c:1e: 79:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:B8:34:59:E5:98:94:D8:64:85:76:92:E8:CA:02:EE:8F:0D:32:23 X509v3 Authority Key Identifier: keyid:B4:38:1C:63:67:4B:5D:9A:9B:8C:44:C1:3C:F1:9E:7D:D3:21:F7:C0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/29b3be62-3597-4fe8-a795-fc9ba1202344/0/B4381C63674B5D9A9B8C44C13CF19E7DD321F7C0.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B4381C63674B5D9A9B8C44C13CF19E7DD321F7C0.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/29b3be62-3597-4fe8-a795-fc9ba1202344/0/B4381C63674B5D9A9B8C44C13CF19E7DD321F7C0.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 56:f6:21:b9:98:e9:85:47:fe:00:b2:64:d6:fe:2b:26:3a:85: 59:28:b9:92:e5:50:74:9b:57:ae:94:d5:ce:b1:cd:9f:96:d6: de:06:b8:b4:2e:de:28:00:74:bd:d0:b3:fa:ae:11:75:ec:04: b9:4f:51:e5:44:aa:7c:fb:fd:4c:fc:70:40:98:8b:4b:ff:90: bb:60:70:4c:81:c3:cf:cd:ac:4e:7d:2f:43:e8:16:34:cd:f4: 59:d9:fb:56:b1:59:1d:ac:da:e2:98:7a:82:02:de:37:c6:4a: b1:42:b8:7a:df:98:47:85:fb:92:f5:2c:c7:6d:5f:01:dd:b5: 54:d1:d8:83:7b:40:4c:65:09:c0:72:18:c8:ee:aa:3d:67:62: b2:20:38:3b:4a:58:b2:b9:d9:9b:3e:77:d5:f5:b7:84:97:83: b3:a6:88:a5:f4:f4:2e:8b:eb:be:d4:75:42:ea:a1:de:be:f2: 10:11:f0:00:da:d4:96:f4:7a:33:2a:69:8a:4c:cc:5c:14:70: 80:6e:87:94:77:1b:19:48:22:02:ac:c5:50:26:69:5f:77:69: f7:be:2e:02:5a:f3:7b:80:0d:93:75:e6:55:c7:1d:8d:05:91: e8:b0:80:09:84:54:93:59:13:74:1d:80:89:59:cc:4a:76:67: e3:b9:aa:a0 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUB524g+AmQ5Tp6qmvHiDDDfh/JdAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjQzODFDNjM2NzRCNUQ5QTlCOEM0NEMxM0NGMTlFN0RE MzIxRjdDMDAeFw0yNTExMDMxMDU2MjlaFw0yNTExMDYxODU1MjlaMDMxMTAvBgNV BAMTKDJCQjgzNDU5RTU5ODk0RDg2NDg1NzY5MkU4Q0EwMkVFOEYwRDMyMjMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDhLhR2y+ycn5s/U/OdY3aBjDaH IN1bZ2LAHGVlvnTfqEtlVJxeUq42NcMtXLjsKLK7EPWzDS6Jx7d/7moSa1es/lEt uXm98D7F0ltymbzn+iFAiuojsGPIa59Ye2wAyw7OwfClGEA4IZEZmSa1ELljZwfZ 2Vh5in9+cDG+2vHIrbtODYu6qW6LCEPwVzg0Q4Y1bYktqDicjtlNbH7Oq0mQIzlK 01HE4KQiwsysAXu1qHw9jF7dr+IBTXGwbQuiOgpHjSk0FcSIjSwbWDSaIObU/qY2 5IKoHVXnUPKUwuRxQt1pRHmITF5h6ghas7QNDkYFGmbP+4JobO2PljBMHnnHAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUK7g0WeWYlNhkhXaS6MoC7o8NMiMwHwYDVR0j BBgwFoAUtDgcY2dLXZqbjETBPPGefdMh98AwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y OWIzYmU2Mi0zNTk3LTRmZTgtYTc5NS1mYzliYTEyMDIzNDQvMC9CNDM4MUM2MzY3 NEI1RDlBOUI4QzQ0QzEzQ0YxOUU3REQzMjFGN0MwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQjQzODFDNjM2NzRCNUQ5QTlCOEM0NEMxM0NGMTlFN0REMzIx RjdDMC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMjliM2JlNjItMzU5Ny00ZmU4LWE3 OTUtZmM5YmExMjAyMzQ0LzAvQjQzODFDNjM2NzRCNUQ5QTlCOEM0NEMxM0NGMTlF N0REMzIxRjdDMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFb2IbmY6YVH/gCyZNb+KyY6hVkouZLlUHSb V66U1c6xzZ+W1t4GuLQu3igAdL3Qs/quEXXsBLlPUeVEqnz7/Uz8cECYi0v/kLtg cEyBw8/NrE59L0PoFjTN9FnZ+1axWR2s2uKYeoIC3jfGSrFCuHrfmEeF+5L1LMdt XwHdtVTR2IN7QExlCcByGMjuqj1nYrIgODtKWLK52Zs+d9X1t4SXg7OmiKX09C6L 677UdULqod6+8hAR8ADa1Jb0ejMqaYpMzFwUcIBuh5R3GxlIIgKsxVAmaV93afe+ LgJa83uADZN15lXHHY0FkeiwgAmEVJNZE3QdgIlZzEp2Z+O5qqA= -----END CERTIFICATE-----Generated at Wed Nov 5 06:10:57 2025 by rpki-client