$ rpki-client -vvf repo-rpki.idnic.net/repo/3b905766-440e-4bcb-ae72-3e78831ce9dc/0/B2650BD2D997B6C198A4B362B7395AC364683312.mft File: B2650BD2D997B6C198A4B362B7395AC364683312.mft (raw, json) Hash identifier: aLo0zBczcBnC+P/jU/zycUPLR9xXcPwafqL4veUFFZk= Subject key identifier: B1:13:73:81:08:76:B0:7E:CE:2A:F7:5A:2A:C3:0F:8D:50:F4:9B:E9 Authority key identifier: B2:65:0B:D2:D9:97:B6:C1:98:A4:B3:62:B7:39:5A:C3:64:68:33:12 Certificate issuer: /CN=B2650BD2D997B6C198A4B362B7395AC364683312 Certificate serial: 1CF1433474ABE42347B2FF4CEEDCD92EB9FD035E Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B2650BD2D997B6C198A4B362B7395AC364683312.cer Subject info access: rsync://repo-rpki.idnic.net/repo/3b905766-440e-4bcb-ae72-3e78831ce9dc/0/B2650BD2D997B6C198A4B362B7395AC364683312.mft Manifest number: 01F8 Signing time: Mon 03 Nov 2025 20:40:56 +0000 Manifest this update: Mon 03 Nov 2025 20:35:56 +0000 Manifest next update: Fri 07 Nov 2025 05:54:56 +0000 Files and hashes: 1: B2650BD2D997B6C198A4B362B7395AC364683312.crl (hash: 3ENKoc0t09Ur2NXh4wBzDFR585tUP0ty/OZDjvNxOEc=) 2: 3130332e31372e33322e302f32342d3234203d3e20313530323238.roa (hash: IFrFNgL9nGnkBy6pVhjob4v5DLOWZyxcdQ+rkKOm7OM=) 3: 3130332e31372e33332e302f32342d3234203d3e20313530323238.roa (hash: Din5W7YK7LMJbRJUi9wsZasS4GJU6jj09R0J09VzjXg=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/3b905766-440e-4bcb-ae72-3e78831ce9dc/0/B2650BD2D997B6C198A4B362B7395AC364683312.crl rsync://repo-rpki.idnic.net/repo/3b905766-440e-4bcb-ae72-3e78831ce9dc/0/B2650BD2D997B6C198A4B362B7395AC364683312.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B2650BD2D997B6C198A4B362B7395AC364683312.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 07 Nov 2025 05:54:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1c:f1:43:34:74:ab:e4:23:47:b2:ff:4c:ee:dc:d9:2e:b9:fd:03:5e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B2650BD2D997B6C198A4B362B7395AC364683312 Validity Not Before: Nov 3 20:35:56 2025 GMT Not After : Nov 7 05:54:56 2025 GMT Subject: CN=B11373810876B07ECE2AF75A2AC30F8D50F49BE9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:30:8f:9b:cc:22:8b:45:29:34:a8:11:37:40: 4e:90:72:89:92:60:d4:71:9b:77:25:16:76:ad:f4: 9f:f4:e0:8d:f1:13:30:27:d9:98:76:35:8c:0d:ef: 9f:fc:21:2f:05:bd:27:8d:69:c6:6c:ed:6b:ce:1e: b8:6b:0f:8f:7a:cf:71:ca:e2:43:df:aa:b7:31:d2: 4d:ae:86:2f:41:ce:b5:20:51:ac:c4:6b:98:54:f2: bd:55:eb:47:9d:b5:24:f4:6d:2c:13:20:64:00:f9: 0c:07:94:c5:45:d4:f6:d4:57:fe:02:53:12:68:30: 94:a6:2f:ce:fc:87:01:d0:7b:59:a6:80:55:b1:07: 50:2f:29:30:bd:e8:29:29:db:78:76:6e:62:ac:eb: 27:4c:e6:97:71:b5:a5:d9:8e:cf:1c:49:13:a0:1c: 99:be:b2:fe:b6:37:20:9f:03:15:ce:cd:bb:d9:5c: d0:34:42:da:c2:3c:9e:33:4c:de:22:1f:fd:0f:39: 43:bc:ef:05:52:6a:f7:9d:20:23:83:9f:5d:8b:a1: b1:cc:3e:76:72:bc:03:de:80:33:a5:76:37:e5:17: 31:7a:13:58:cc:df:b3:22:1a:e0:69:4f:13:50:c3: 87:3f:a4:15:25:71:13:aa:da:c2:f4:70:1e:96:1f: bb:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B1:13:73:81:08:76:B0:7E:CE:2A:F7:5A:2A:C3:0F:8D:50:F4:9B:E9 X509v3 Authority Key Identifier: keyid:B2:65:0B:D2:D9:97:B6:C1:98:A4:B3:62:B7:39:5A:C3:64:68:33:12 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/3b905766-440e-4bcb-ae72-3e78831ce9dc/0/B2650BD2D997B6C198A4B362B7395AC364683312.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B2650BD2D997B6C198A4B362B7395AC364683312.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3b905766-440e-4bcb-ae72-3e78831ce9dc/0/B2650BD2D997B6C198A4B362B7395AC364683312.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 97:7a:54:33:7a:e5:ca:85:f4:d6:9b:20:72:d7:7a:a7:91:a6: 99:3c:bd:ed:dd:6c:3a:c7:f2:4d:05:cb:21:f9:d4:8e:7c:e4: 39:ec:85:21:82:4e:8a:8c:30:ba:fc:81:06:89:ee:5c:34:cd: ff:1f:bc:f6:d9:16:88:b0:bc:94:47:aa:53:86:b6:79:56:28: ec:65:0a:6b:9a:f0:27:4f:13:0a:28:88:3a:fe:2a:83:4a:5f: 76:d7:8e:36:a2:7e:81:39:d7:39:a3:8f:7e:70:54:09:d9:e5: 05:42:1e:2c:18:71:2a:43:61:7f:32:1d:7f:5f:f4:76:8e:d3: 9b:ba:c2:0c:9f:d8:01:87:40:67:76:5b:17:9a:4a:f6:e1:70: 03:b1:d4:76:73:9c:3d:36:61:0d:6e:c7:ee:09:5d:a3:7a:3e: 4d:15:ff:9a:d0:68:91:a9:f5:6a:2a:90:73:f3:db:be:2b:1e: f0:e1:45:e8:b3:ee:04:14:3d:e7:e6:49:41:ff:a0:f0:89:b2: a8:24:07:3c:fc:55:df:38:1f:6b:10:91:34:f1:94:0c:4f:b0: 0c:f9:2f:0d:3c:92:72:0d:6d:42:9b:6f:21:28:14:dd:32:31: 7f:6d:49:64:c1:0a:f5:59:f0:a4:d7:6c:50:a6:78:24:cd:1b: 7d:2c:ca:4c -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUHPFDNHSr5CNHsv9M7tzZLrn9A14wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjI2NTBCRDJEOTk3QjZDMTk4QTRCMzYyQjczOTVBQzM2 NDY4MzMxMjAeFw0yNTExMDMyMDM1NTZaFw0yNTExMDcwNTU0NTZaMDMxMTAvBgNV BAMTKEIxMTM3MzgxMDg3NkIwN0VDRTJBRjc1QTJBQzMwRjhENTBGNDlCRTkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDaMI+bzCKLRSk0qBE3QE6QcomS YNRxm3clFnat9J/04I3xEzAn2Zh2NYwN75/8IS8FvSeNacZs7WvOHrhrD496z3HK 4kPfqrcx0k2uhi9BzrUgUazEa5hU8r1V60edtST0bSwTIGQA+QwHlMVF1PbUV/4C UxJoMJSmL878hwHQe1mmgFWxB1AvKTC96Ckp23h2bmKs6ydM5pdxtaXZjs8cSROg HJm+sv62NyCfAxXOzbvZXNA0QtrCPJ4zTN4iH/0POUO87wVSavedICODn12LobHM PnZyvAPegDOldjflFzF6E1jM37MiGuBpTxNQw4c/pBUlcROq2sL0cB6WH7sNAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUsRNzgQh2sH7OKvdaKsMPjVD0m+kwHwYDVR0j BBgwFoAUsmUL0tmXtsGYpLNitzlaw2RoMxIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z YjkwNTc2Ni00NDBlLTRiY2ItYWU3Mi0zZTc4ODMxY2U5ZGMvMC9CMjY1MEJEMkQ5 OTdCNkMxOThBNEIzNjJCNzM5NUFDMzY0NjgzMzEyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQjI2NTBCRDJEOTk3QjZDMTk4QTRCMzYyQjczOTVBQzM2NDY4 MzMxMi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vM2I5MDU3NjYtNDQwZS00YmNiLWFl NzItM2U3ODgzMWNlOWRjLzAvQjI2NTBCRDJEOTk3QjZDMTk4QTRCMzYyQjczOTVB QzM2NDY4MzMxMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJd6VDN65cqF9NabIHLXeqeRppk8ve3dbDrH 8k0FyyH51I585DnshSGCToqMMLr8gQaJ7lw0zf8fvPbZFoiwvJRHqlOGtnlWKOxl Cmua8CdPEwooiDr+KoNKX3bXjjaifoE51zmjj35wVAnZ5QVCHiwYcSpDYX8yHX9f 9HaO05u6wgyf2AGHQGd2WxeaSvbhcAOx1HZznD02YQ1ux+4JXaN6Pk0V/5rQaJGp 9WoqkHPz274rHvDhReiz7gQUPefmSUH/oPCJsqgkBzz8Vd84H2sQkTTxlAxPsAz5 Lw08knINbUKbbyEoFN0yMX9tSWTBCvVZ8KTXbFCmeCTNG30sykw= -----END CERTIFICATE-----Generated at Wed Nov 5 04:45:37 2025 by rpki-client