$ rpki-client -vvf repo-rpki.idnic.net/repo/42713a32-fada-484e-a68d-0cac0fffa33c/0/B0FA6C3ED4780E032B0A3F161E018A7C8FA82B45.mft File: B0FA6C3ED4780E032B0A3F161E018A7C8FA82B45.mft (raw, json) Hash identifier: fMMV7L5kQ0Fm6NK7vQK2603zajT5ahlUgp934FYWsnc= Subject key identifier: 84:B4:82:32:55:FC:24:24:D0:51:16:7E:A5:03:10:2E:A1:8D:4D:62 Authority key identifier: B0:FA:6C:3E:D4:78:0E:03:2B:0A:3F:16:1E:01:8A:7C:8F:A8:2B:45 Certificate issuer: /CN=B0FA6C3ED4780E032B0A3F161E018A7C8FA82B45 Certificate serial: 75C890FEAF282CFE512698B0378A2E2BB4BDEA25 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B0FA6C3ED4780E032B0A3F161E018A7C8FA82B45.cer Subject info access: rsync://repo-rpki.idnic.net/repo/42713a32-fada-484e-a68d-0cac0fffa33c/0/B0FA6C3ED4780E032B0A3F161E018A7C8FA82B45.mft Manifest number: 023A Signing time: Tue 04 Nov 2025 13:32:13 +0000 Manifest this update: Tue 04 Nov 2025 13:27:13 +0000 Manifest next update: Fri 07 Nov 2025 18:09:13 +0000 Files and hashes: 1: 3130332e3138362e3136382e302f32332d3233203d3e20313439333135.roa (hash: 0o9IBgjEwrH3ZJGqMXSmtJgW+TONR3n1c/K3AjhSCz0=) 2: 3130332e3138362e3136392e302f32342d3234203d3e20313439333135.roa (hash: k0YtTjCvRfHkKBkEOTB9msrr0NImtoiaOd/b0Un02oI=) 3: 3130332e3138362e3136382e302f32342d3234203d3e20313439333135.roa (hash: cA/IXkQfExxLqkZklRIGA4Iq/8wfMruGPEzuyZnNgNM=) 4: B0FA6C3ED4780E032B0A3F161E018A7C8FA82B45.crl (hash: Bgk+VXGVMBnkz8g+7pZaJiS+FPXlwxctPz50bEE9U/0=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/42713a32-fada-484e-a68d-0cac0fffa33c/0/B0FA6C3ED4780E032B0A3F161E018A7C8FA82B45.crl rsync://repo-rpki.idnic.net/repo/42713a32-fada-484e-a68d-0cac0fffa33c/0/B0FA6C3ED4780E032B0A3F161E018A7C8FA82B45.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B0FA6C3ED4780E032B0A3F161E018A7C8FA82B45.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 07 Nov 2025 18:09:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 75:c8:90:fe:af:28:2c:fe:51:26:98:b0:37:8a:2e:2b:b4:bd:ea:25 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B0FA6C3ED4780E032B0A3F161E018A7C8FA82B45 Validity Not Before: Nov 4 13:27:13 2025 GMT Not After : Nov 7 18:09:13 2025 GMT Subject: CN=84B4823255FC2424D051167EA503102EA18D4D62 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:43:b5:27:1a:f8:50:05:0c:63:23:db:4d:8e: b2:ca:3b:88:5d:80:22:a0:7d:69:a2:a8:d9:fe:27: 73:22:b2:11:3d:ac:e8:89:b5:da:9c:7d:28:05:cf: 15:77:7f:eb:e9:d5:2c:68:57:ec:b4:0e:11:22:c0: 8a:5f:9d:05:1a:51:71:a7:55:43:8a:e0:27:e6:01: a1:a9:de:fd:9c:3e:e1:a6:e6:a6:9f:25:d6:57:e6: 61:f2:4e:ae:4f:3d:8c:22:96:e9:d2:fc:3d:73:9b: 01:6c:66:3c:d0:30:71:6a:9a:1a:3c:78:c0:19:dd: 4e:c5:c5:d7:73:02:5a:cb:fa:77:ca:1b:d3:32:11: cc:90:ff:47:74:40:1a:d8:ab:e1:e4:15:bd:ab:5e: 47:6d:80:12:6a:66:5f:02:7b:3e:75:29:bc:f2:be: c5:f3:3a:30:54:2f:03:33:52:99:2a:54:5e:02:11: 69:5c:45:13:f3:78:96:08:90:5b:05:77:4d:53:61: aa:dd:81:a5:47:fd:0e:98:59:63:03:07:e4:e3:2b: ea:67:c3:a4:ff:f2:57:dc:87:7c:25:50:47:7d:7b: d0:82:67:44:52:32:e2:f6:73:5e:f2:8d:02:4a:f4: 83:91:f0:48:e0:3d:cb:83:51:6f:9a:1e:d5:83:97: 29:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:B4:82:32:55:FC:24:24:D0:51:16:7E:A5:03:10:2E:A1:8D:4D:62 X509v3 Authority Key Identifier: keyid:B0:FA:6C:3E:D4:78:0E:03:2B:0A:3F:16:1E:01:8A:7C:8F:A8:2B:45 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/42713a32-fada-484e-a68d-0cac0fffa33c/0/B0FA6C3ED4780E032B0A3F161E018A7C8FA82B45.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B0FA6C3ED4780E032B0A3F161E018A7C8FA82B45.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/42713a32-fada-484e-a68d-0cac0fffa33c/0/B0FA6C3ED4780E032B0A3F161E018A7C8FA82B45.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4d:96:f2:5d:4b:e0:4c:4d:45:d4:80:8a:92:3f:ec:9b:20:ea: 0c:18:cb:77:ca:1c:55:fb:1d:a8:a8:e5:0a:37:48:a0:18:b6: 08:75:1f:ec:a6:3c:51:46:3a:7f:63:b8:59:eb:4e:61:74:6e: ed:6c:a1:77:c7:ec:3e:14:1b:11:dc:f4:24:70:82:3c:ec:dd: 5d:2b:e1:e8:72:5d:14:1b:4c:5b:21:da:1d:61:91:63:5d:d3: d3:40:50:95:85:7d:04:72:91:ad:4b:ff:be:28:ad:5e:c5:3e: d0:2b:39:9c:31:a9:53:83:58:e8:c6:64:b0:fd:53:5d:12:11: 72:e7:52:9f:f5:1f:6c:ca:e6:cc:d7:f8:eb:47:67:9b:53:58: 8a:dc:0c:47:69:ee:a7:b1:38:62:e3:fd:fc:12:80:a3:bf:cc: df:ae:2e:3c:3c:5b:23:dc:18:3a:82:26:a5:bd:5b:85:07:57: 64:f8:dc:4d:77:a3:75:2f:27:00:64:44:83:60:d5:19:de:75: 91:74:78:84:2b:95:06:76:e1:96:2f:a7:ef:9e:04:46:39:03: c9:c5:9a:da:f7:bc:2d:f7:a4:08:0d:74:87:8f:44:7b:44:3f: c5:49:e7:02:f6:2d:ea:31:00:64:f3:38:59:83:2a:e2:dd:9c: 03:33:92:fe -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUdciQ/q8oLP5RJpiwN4ouK7S96iUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjBGQTZDM0VENDc4MEUwMzJCMEEzRjE2MUUwMThBN0M4 RkE4MkI0NTAeFw0yNTExMDQxMzI3MTNaFw0yNTExMDcxODA5MTNaMDMxMTAvBgNV BAMTKDg0QjQ4MjMyNTVGQzI0MjREMDUxMTY3RUE1MDMxMDJFQTE4RDRENjIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDlQ7UnGvhQBQxjI9tNjrLKO4hd gCKgfWmiqNn+J3MishE9rOiJtdqcfSgFzxV3f+vp1SxoV+y0DhEiwIpfnQUaUXGn VUOK4CfmAaGp3v2cPuGm5qafJdZX5mHyTq5PPYwilunS/D1zmwFsZjzQMHFqmho8 eMAZ3U7FxddzAlrL+nfKG9MyEcyQ/0d0QBrYq+HkFb2rXkdtgBJqZl8Cez51Kbzy vsXzOjBULwMzUpkqVF4CEWlcRRPzeJYIkFsFd01TYardgaVH/Q6YWWMDB+TjK+pn w6T/8lfch3wlUEd9e9CCZ0RSMuL2c17yjQJK9IOR8EjgPcuDUW+aHtWDlykpAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUhLSCMlX8JCTQURZ+pQMQLqGNTWIwHwYDVR0j BBgwFoAUsPpsPtR4DgMrCj8WHgGKfI+oK0UwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 MjcxM2EzMi1mYWRhLTQ4NGUtYTY4ZC0wY2FjMGZmZmEzM2MvMC9CMEZBNkMzRUQ0 NzgwRTAzMkIwQTNGMTYxRTAxOEE3QzhGQTgyQjQ1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQjBGQTZDM0VENDc4MEUwMzJCMEEzRjE2MUUwMThBN0M4RkE4 MkI0NS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNDI3MTNhMzItZmFkYS00ODRlLWE2 OGQtMGNhYzBmZmZhMzNjLzAvQjBGQTZDM0VENDc4MEUwMzJCMEEzRjE2MUUwMThB N0M4RkE4MkI0NS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAE2W8l1L4ExNRdSAipI/7Jsg6gwYy3fKHFX7 Haio5Qo3SKAYtgh1H+ymPFFGOn9juFnrTmF0bu1soXfH7D4UGxHc9CRwgjzs3V0r 4ehyXRQbTFsh2h1hkWNd09NAUJWFfQRyka1L/74orV7FPtArOZwxqVODWOjGZLD9 U10SEXLnUp/1H2zK5szX+OtHZ5tTWIrcDEdp7qexOGLj/fwSgKO/zN+uLjw8WyPc GDqCJqW9W4UHV2T43E13o3UvJwBkRINg1RnedZF0eIQrlQZ24ZYvp++eBEY5A8nF mtr3vC33pAgNdIePRHtEP8VJ5wL2LeoxAGTzOFmDKuLdnAMzkv4= -----END CERTIFICATE-----Generated at Wed Nov 5 04:13:29 2025 by rpki-client