$ rpki-client -vvf repo-rpki.idnic.net/repo/57cd511f-afff-4fec-8724-d4119f891df2/0/B0B4D0A5FD4E58D80534977B027C8BC68222070F.mft File: B0B4D0A5FD4E58D80534977B027C8BC68222070F.mft (raw, json) Hash identifier: 6SzSZBTzYwOQCaAGsObPiOieKsocqz5ZpBpsRKGuFog= Subject key identifier: 03:5D:7A:08:1F:7C:F0:7C:75:11:28:38:EF:47:9C:F6:F9:6A:54:FA Authority key identifier: B0:B4:D0:A5:FD:4E:58:D8:05:34:97:7B:02:7C:8B:C6:82:22:07:0F Certificate issuer: /CN=B0B4D0A5FD4E58D80534977B027C8BC68222070F Certificate serial: 3DD60FC3874A06B8DEDCB81F8644326A998A5D73 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B0B4D0A5FD4E58D80534977B027C8BC68222070F.cer Subject info access: rsync://repo-rpki.idnic.net/repo/57cd511f-afff-4fec-8724-d4119f891df2/0/B0B4D0A5FD4E58D80534977B027C8BC68222070F.mft Manifest number: 039A Signing time: Mon 03 Nov 2025 15:11:21 +0000 Manifest this update: Mon 03 Nov 2025 15:06:21 +0000 Manifest next update: Thu 06 Nov 2025 21:11:21 +0000 Files and hashes: 1: B0B4D0A5FD4E58D80534977B027C8BC68222070F.crl (hash: xz3DB3Kgx5Wrce1cjgCsyKJs+kAlfm0iwSuh7rVLOKs=) 2: 3130332e3136342e35372e302f32342d3234203d3e20313431393033.roa (hash: QHTzNtrA62lCbap5pnLy6Afc1/3RNfZE7wu74tOUQBg=) 3: 3130332e3136342e35362e302f32332d3233203d3e20313431393033.roa (hash: lmDaoh03D9rTDqDSAuHtSlsBls3g0dB3bSo5aCMqbVU=) 4: 3130332e3136342e35362e302f32342d3234203d3e20313431393033.roa (hash: BZ7IxyZHQ1xzeEJa2EscxaRyrE0WSeLJOeD3hu5iHH8=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/57cd511f-afff-4fec-8724-d4119f891df2/0/B0B4D0A5FD4E58D80534977B027C8BC68222070F.crl rsync://repo-rpki.idnic.net/repo/57cd511f-afff-4fec-8724-d4119f891df2/0/B0B4D0A5FD4E58D80534977B027C8BC68222070F.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B0B4D0A5FD4E58D80534977B027C8BC68222070F.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 06 Nov 2025 21:11:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3d:d6:0f:c3:87:4a:06:b8:de:dc:b8:1f:86:44:32:6a:99:8a:5d:73 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B0B4D0A5FD4E58D80534977B027C8BC68222070F Validity Not Before: Nov 3 15:06:21 2025 GMT Not After : Nov 6 21:11:21 2025 GMT Subject: CN=035D7A081F7CF07C75112838EF479CF6F96A54FA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:6f:5e:36:ac:0a:cf:4d:45:a3:30:c0:8d:f6: fd:e6:40:7c:1d:a0:37:f1:63:79:d1:f7:90:8f:39: 33:8a:54:2e:28:6f:17:16:01:5a:f3:40:22:9b:da: 27:6c:9c:99:0f:9e:27:f9:4f:fe:51:71:b2:90:62: bb:b3:5d:29:97:0b:21:3f:7d:9b:87:98:d1:71:d8: 47:fe:df:db:e9:ee:e2:ca:2f:b6:34:32:e2:11:6d: 90:80:37:4e:28:11:ca:e1:4c:3e:ef:27:bd:e3:91: eb:d6:0c:59:ba:19:1b:a4:db:15:5b:07:6e:c9:49: 60:99:b2:a1:f2:37:0c:83:c7:c1:ff:9c:c8:ac:29: 45:6c:fb:42:7f:56:30:00:07:f3:83:33:53:ec:f3: 33:49:38:90:9b:28:67:08:c6:6d:09:85:08:5a:92: 7e:75:7d:76:4e:95:d1:2d:b5:b2:b1:d1:08:af:e2: d7:df:1c:d8:09:d3:e5:e3:f2:db:22:a4:44:0d:f1: cf:0b:6e:07:9b:78:34:4b:5b:a1:1a:46:e2:66:ec: 33:e1:e8:ad:08:8a:ba:cf:8e:4d:9e:6e:6f:3a:b1: 73:ef:0f:72:60:5a:9b:11:0f:d2:64:c5:9f:95:04: 14:a7:2d:02:bc:11:e7:71:6f:10:23:7c:7a:bf:6b: dd:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 03:5D:7A:08:1F:7C:F0:7C:75:11:28:38:EF:47:9C:F6:F9:6A:54:FA X509v3 Authority Key Identifier: keyid:B0:B4:D0:A5:FD:4E:58:D8:05:34:97:7B:02:7C:8B:C6:82:22:07:0F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/57cd511f-afff-4fec-8724-d4119f891df2/0/B0B4D0A5FD4E58D80534977B027C8BC68222070F.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B0B4D0A5FD4E58D80534977B027C8BC68222070F.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/57cd511f-afff-4fec-8724-d4119f891df2/0/B0B4D0A5FD4E58D80534977B027C8BC68222070F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1d:82:a1:ce:54:84:ec:a9:3f:45:f4:59:f7:e8:42:ca:42:a4: b2:3a:a2:9b:63:9c:8b:bf:e5:f0:0e:de:c6:4b:5c:3b:31:6e: 8d:ee:83:7d:38:fe:26:49:59:c4:c8:22:43:ba:a4:22:6a:d1: ee:23:b4:71:f7:03:f5:79:8c:4d:27:a6:9e:f0:bf:e1:13:2b: aa:45:5f:6c:de:b6:2e:83:17:9c:14:d0:d3:ca:46:0b:62:32: 39:59:97:a5:6b:9a:00:4e:4a:26:ca:43:b5:81:72:1f:5d:64: ce:7e:e4:a7:c1:f6:d5:f8:59:ff:ba:91:3f:5d:d9:cb:de:91: d7:bc:32:77:10:14:fe:a4:0a:01:61:d8:12:c9:02:25:b7:ee: 4e:b9:d3:b7:27:a1:3b:4e:3e:94:5b:b2:c5:ee:a1:d1:f0:10: b1:4f:72:90:e2:15:58:f9:59:84:5e:3f:c4:a3:be:93:15:f2: 2b:29:8c:1f:58:db:ef:4e:4b:bd:7d:c6:fe:7b:e8:9b:c6:56: bf:4d:a2:be:0d:e5:46:e6:a8:63:71:af:21:37:4e:98:33:2e: 75:e0:3e:ff:e0:a5:ef:4e:5b:b8:7d:e3:b6:e1:0f:b6:74:5e: 33:93:87:6b:1a:cb:b9:1c:76:6c:f1:75:ab:62:f8:90:06:b1: e9:22:d4:fa -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUPdYPw4dKBrje3LgfhkQyapmKXXMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjBCNEQwQTVGRDRFNThEODA1MzQ5NzdCMDI3QzhCQzY4 MjIyMDcwRjAeFw0yNTExMDMxNTA2MjFaFw0yNTExMDYyMTExMjFaMDMxMTAvBgNV BAMTKDAzNUQ3QTA4MUY3Q0YwN0M3NTExMjgzOEVGNDc5Q0Y2Rjk2QTU0RkEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDGb142rArPTUWjMMCN9v3mQHwd oDfxY3nR95CPOTOKVC4obxcWAVrzQCKb2idsnJkPnif5T/5RcbKQYruzXSmXCyE/ fZuHmNFx2Ef+39vp7uLKL7Y0MuIRbZCAN04oEcrhTD7vJ73jkevWDFm6GRuk2xVb B27JSWCZsqHyNwyDx8H/nMisKUVs+0J/VjAAB/ODM1Ps8zNJOJCbKGcIxm0JhQha kn51fXZOldEttbKx0Qiv4tffHNgJ0+Xj8tsipEQN8c8LbgebeDRLW6EaRuJm7DPh 6K0IirrPjk2ebm86sXPvD3JgWpsRD9JkxZ+VBBSnLQK8EedxbxAjfHq/a92VAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUA116CB988Hx1ESg470ec9vlqVPowHwYDVR0j BBgwFoAUsLTQpf1OWNgFNJd7AnyLxoIiBw8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 N2NkNTExZi1hZmZmLTRmZWMtODcyNC1kNDExOWY4OTFkZjIvMC9CMEI0RDBBNUZE NEU1OEQ4MDUzNDk3N0IwMjdDOEJDNjgyMjIwNzBGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQjBCNEQwQTVGRDRFNThEODA1MzQ5NzdCMDI3QzhCQzY4MjIy MDcwRi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNTdjZDUxMWYtYWZmZi00ZmVjLTg3 MjQtZDQxMTlmODkxZGYyLzAvQjBCNEQwQTVGRDRFNThEODA1MzQ5NzdCMDI3QzhC QzY4MjIyMDcwRi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAB2Coc5UhOypP0X0WffoQspCpLI6optjnIu/ 5fAO3sZLXDsxbo3ug304/iZJWcTIIkO6pCJq0e4jtHH3A/V5jE0npp7wv+ETK6pF X2zeti6DF5wU0NPKRgtiMjlZl6VrmgBOSibKQ7WBch9dZM5+5KfB9tX4Wf+6kT9d 2cvekde8MncQFP6kCgFh2BLJAiW37k6507cnoTtOPpRbssXuodHwELFPcpDiFVj5 WYReP8SjvpMV8ispjB9Y2+9OS719xv576JvGVr9Nor4N5UbmqGNxryE3TpgzLnXg Pv/gpe9OW7h947bhD7Z0XjOTh2say7kcdmzxdati+JAGseki1Po= -----END CERTIFICATE-----Generated at Tue Nov 4 21:09:18 2025 by rpki-client