$ rpki-client -vvf repo-rpki.idnic.net/repo/45dff9b3-9041-4dd6-b7ab-02060d65d09a/0/B605D71FEB5A1DBE5676CFACB394ABBA37C83A86.mft File: B605D71FEB5A1DBE5676CFACB394ABBA37C83A86.mft (raw, json) Hash identifier: 2adBvgADaIjx5/Pqq38ysKoz5lDrkTUj8uZbWMf5dUI= Subject key identifier: 7F:86:DE:66:C0:F4:51:20:F4:97:50:15:22:82:B7:A5:E8:36:B5:00 Authority key identifier: B6:05:D7:1F:EB:5A:1D:BE:56:76:CF:AC:B3:94:AB:BA:37:C8:3A:86 Certificate issuer: /CN=B605D71FEB5A1DBE5676CFACB394ABBA37C83A86 Certificate serial: 790721D2D864A4A5CA799D8AC6848A28903F7657 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B605D71FEB5A1DBE5676CFACB394ABBA37C83A86.cer Subject info access: rsync://repo-rpki.idnic.net/repo/45dff9b3-9041-4dd6-b7ab-02060d65d09a/0/B605D71FEB5A1DBE5676CFACB394ABBA37C83A86.mft Manifest number: 0520 Signing time: Sat 01 Nov 2025 14:02:05 +0000 Manifest this update: Sat 01 Nov 2025 13:57:05 +0000 Manifest next update: Wed 05 Nov 2025 01:38:05 +0000 Files and hashes: 1: 3130332e3132342e3139372e302f32342d3234203d3e20313338303936.roa (hash: nzLKnI/D3cwy5mjROOKEojLaE+IM3VD8CZS+m6prGYU=) 2: 323430333a653434303a3a2f33322d3332203d3e20313338303936.roa (hash: NFm2BuROSXEUux226kkrY22nGhWfXy6Nzi8qa9TvywQ=) 3: 3130332e3132342e3139392e302f32342d3234203d3e20313338303936.roa (hash: 9iKS8p7Xao18ldzefre+pP4jboQ9AAl4Hg0B9pQyQbE=) 4: 3130332e3132342e3139362e302f32342d3234203d3e20313338303936.roa (hash: n0pHhF58CPylB9y5w46zbjaPBFWjrRvur8ZNb3WIRks=) 5: 3130332e3132342e3139382e302f32342d3234203d3e20313338303936.roa (hash: 6uaz9H2C0Zmi7+Kl7mXUqp61Tn9wAvtzejcx5d8BSvE=) 6: B605D71FEB5A1DBE5676CFACB394ABBA37C83A86.crl (hash: cRQ+R8HduPKNdvF+ubuwtICA93DzPQGHo/WEnjqYMBM=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/45dff9b3-9041-4dd6-b7ab-02060d65d09a/0/B605D71FEB5A1DBE5676CFACB394ABBA37C83A86.crl rsync://repo-rpki.idnic.net/repo/45dff9b3-9041-4dd6-b7ab-02060d65d09a/0/B605D71FEB5A1DBE5676CFACB394ABBA37C83A86.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B605D71FEB5A1DBE5676CFACB394ABBA37C83A86.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 05 Nov 2025 01:38:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 79:07:21:d2:d8:64:a4:a5:ca:79:9d:8a:c6:84:8a:28:90:3f:76:57 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B605D71FEB5A1DBE5676CFACB394ABBA37C83A86 Validity Not Before: Nov 1 13:57:05 2025 GMT Not After : Nov 5 01:38:05 2025 GMT Subject: CN=7F86DE66C0F45120F49750152282B7A5E836B500 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:54:d9:1a:33:79:2c:53:ee:43:c1:62:da:c7: 02:42:a9:0b:e4:cb:9f:b9:89:a2:32:54:69:41:bf: bb:2e:08:8b:b5:06:df:ec:fe:82:f1:62:c2:12:76: 1c:e3:fa:42:e4:a2:25:fe:a1:99:af:88:99:59:7b: 14:26:01:76:64:af:64:c4:55:7b:eb:91:5e:ec:3b: 2a:e3:6f:c4:ff:a1:cd:db:3a:1f:63:9c:30:7b:51: 87:ff:bd:a6:84:f7:17:96:2e:49:ec:39:5d:10:bf: e1:45:25:07:d3:f2:10:44:12:87:29:b1:fb:bc:0d: fa:9c:1b:40:41:92:08:93:bc:81:b5:5c:2a:20:bf: 00:b0:b3:5b:12:c3:f8:b5:db:94:b8:65:c0:9f:bd: 16:69:62:b3:11:b5:72:73:ad:79:7d:03:ca:7c:d1: f2:22:a6:7e:4d:08:62:cb:4a:cb:dd:69:42:1e:fc: 23:c0:bf:3e:81:a5:e1:9e:ed:6d:e4:c6:bf:03:aa: af:76:35:fb:59:66:d6:6f:98:08:5c:5a:55:08:6f: cd:94:94:85:15:d2:36:4c:f4:db:6a:8e:31:db:f9: e0:aa:38:8d:b0:59:33:aa:49:21:a3:70:59:4e:ba: ae:ca:4f:30:af:51:f5:39:44:50:e6:59:07:55:33: 50:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7F:86:DE:66:C0:F4:51:20:F4:97:50:15:22:82:B7:A5:E8:36:B5:00 X509v3 Authority Key Identifier: keyid:B6:05:D7:1F:EB:5A:1D:BE:56:76:CF:AC:B3:94:AB:BA:37:C8:3A:86 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/45dff9b3-9041-4dd6-b7ab-02060d65d09a/0/B605D71FEB5A1DBE5676CFACB394ABBA37C83A86.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B605D71FEB5A1DBE5676CFACB394ABBA37C83A86.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/45dff9b3-9041-4dd6-b7ab-02060d65d09a/0/B605D71FEB5A1DBE5676CFACB394ABBA37C83A86.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 85:2b:bf:61:cc:2d:10:f4:fb:39:45:89:8e:1f:db:3d:fe:ab: df:e7:23:ff:d2:4b:00:22:37:0a:f3:36:8d:01:18:8e:6b:02: f1:a5:2e:9e:31:a3:70:84:cf:34:60:89:6b:8a:9a:58:c0:82: 96:a1:b9:dd:b4:6a:f6:8d:88:56:8a:f5:fe:24:6f:df:ce:06: 29:50:b9:df:d1:f0:11:20:dd:b1:d7:a7:6b:74:8e:60:69:1c: 52:09:5f:ec:b8:d4:76:f8:bc:86:81:ad:c0:87:1e:4b:1f:37: 3b:a4:6c:aa:d8:de:8a:d2:f6:9d:bb:6e:f7:fd:2b:5e:78:22: e9:fa:87:8c:de:f4:17:37:ac:ad:c1:ba:2f:7c:bb:85:96:38: b7:2b:06:aa:ac:f4:bb:8e:f2:c7:9c:6c:fd:c6:8d:6d:cf:b8: 3c:ae:d0:4b:eb:73:b6:b5:1d:57:bd:c4:cb:19:67:c4:70:8c: 1f:d8:a9:3a:d6:5a:4b:18:51:20:e8:36:6c:c3:43:95:c5:97: 6c:0a:dd:b0:88:e1:e2:97:9a:7a:b2:bb:5f:c6:dd:e8:d7:0c: 9d:fb:b4:90:ed:2b:cd:79:f1:a0:88:d1:e1:0e:94:8d:67:c8: ec:e4:56:07:f9:ba:d3:b3:f9:cd:b4:b5:f7:fc:16:bb:9f:7a: 87:60:e1:7e -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUeQch0thkpKXKeZ2KxoSKKJA/dlcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjYwNUQ3MUZFQjVBMURCRTU2NzZDRkFDQjM5NEFCQkEz N0M4M0E4NjAeFw0yNTExMDExMzU3MDVaFw0yNTExMDUwMTM4MDVaMDMxMTAvBgNV BAMTKDdGODZERTY2QzBGNDUxMjBGNDk3NTAxNTIyODJCN0E1RTgzNkI1MDAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC0VNkaM3ksU+5DwWLaxwJCqQvk y5+5iaIyVGlBv7suCIu1Bt/s/oLxYsISdhzj+kLkoiX+oZmviJlZexQmAXZkr2TE VXvrkV7sOyrjb8T/oc3bOh9jnDB7UYf/vaaE9xeWLknsOV0Qv+FFJQfT8hBEEocp sfu8DfqcG0BBkgiTvIG1XCogvwCws1sSw/i125S4ZcCfvRZpYrMRtXJzrXl9A8p8 0fIipn5NCGLLSsvdaUIe/CPAvz6BpeGe7W3kxr8Dqq92NftZZtZvmAhcWlUIb82U lIUV0jZM9NtqjjHb+eCqOI2wWTOqSSGjcFlOuq7KTzCvUfU5RFDmWQdVM1DBAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUf4beZsD0USD0l1AVIoK3peg2tQAwHwYDVR0j BBgwFoAUtgXXH+taHb5Wds+ss5SrujfIOoYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 NWRmZjliMy05MDQxLTRkZDYtYjdhYi0wMjA2MGQ2NWQwOWEvMC9CNjA1RDcxRkVC NUExREJFNTY3NkNGQUNCMzk0QUJCQTM3QzgzQTg2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQjYwNUQ3MUZFQjVBMURCRTU2NzZDRkFDQjM5NEFCQkEzN0M4 M0E4Ni5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNDVkZmY5YjMtOTA0MS00ZGQ2LWI3 YWItMDIwNjBkNjVkMDlhLzAvQjYwNUQ3MUZFQjVBMURCRTU2NzZDRkFDQjM5NEFC QkEzN0M4M0E4Ni5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIUrv2HMLRD0+zlFiY4f2z3+q9/nI//SSwAi NwrzNo0BGI5rAvGlLp4xo3CEzzRgiWuKmljAgpahud20avaNiFaK9f4kb9/OBilQ ud/R8BEg3bHXp2t0jmBpHFIJX+y41Hb4vIaBrcCHHksfNzukbKrY3orS9p27bvf9 K154Iun6h4ze9Bc3rK3Bui98u4WWOLcrBqqs9LuO8secbP3GjW3PuDyu0Evrc7a1 HVe9xMsZZ8RwjB/YqTrWWksYUSDoNmzDQ5XFl2wK3bCI4eKXmnqyu1/G3ejXDJ37 tJDtK8158aCI0eEOlI1nyOzkVgf5utOz+c20tff8Frufeodg4X4= -----END CERTIFICATE-----Generated at Tue Nov 4 01:57:26 2025 by rpki-client