$ rpki-client -vvf repo-rpki.idnic.net/repo/690c9009-ad53-4fa6-a183-34b3457bea03/0/BF3B675AEBEE64D00B323056545D1F630F1C489E.mft File: BF3B675AEBEE64D00B323056545D1F630F1C489E.mft (raw, json) Hash identifier: xYXB5OlwhfRbwM8f4Lnd4sC5Vz+7guuElqDuQq+CCww= Subject key identifier: 76:8E:07:8B:9E:1B:BE:50:5F:3A:7E:2E:46:96:B8:2C:06:FB:66:B0 Authority key identifier: BF:3B:67:5A:EB:EE:64:D0:0B:32:30:56:54:5D:1F:63:0F:1C:48:9E Certificate issuer: /CN=BF3B675AEBEE64D00B323056545D1F630F1C489E Certificate serial: 7E9B77D1D556D1CE9B61AFB6317A8A6272337B15 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BF3B675AEBEE64D00B323056545D1F630F1C489E.cer Subject info access: rsync://repo-rpki.idnic.net/repo/690c9009-ad53-4fa6-a183-34b3457bea03/0/BF3B675AEBEE64D00B323056545D1F630F1C489E.mft Manifest number: 0521 Signing time: Wed 05 Nov 2025 04:40:49 +0000 Manifest this update: Wed 05 Nov 2025 04:35:49 +0000 Manifest next update: Sat 08 Nov 2025 05:01:49 +0000 Files and hashes: 1: 3230322e36392e39362e302f32302d3234203d3e2039373835.roa (hash: 9zTx3s0a2rHUUwPutdrNSjBytv6Kk1GTM8S/civ+mWo=) 2: BF3B675AEBEE64D00B323056545D1F630F1C489E.crl (hash: tAZhXSJ+lJwhJ+qCDUrTQoi+PaK6FckdiUMkzVXi7tU=) 3: 3230322e3135312e382e302f32322d3234203d3e2039373835.roa (hash: J6bQJ2rdsim2ttJlJ/Bk72O/5PQxeXoEvre44CKnHWo=) 4: 3131362e3231332e34382e302f32302d3234203d3e20313331363931.roa (hash: GYZuxR+Zqxd6pxL2lTHKcyVNBpecVMAB2ZosCkKojM0=) 5: 323430333a373230303a3a2f33322d3438203d3e2039373835.roa (hash: CtyzufwtsM1OsMWgnYCmXW6JoR/5zQKHjokkqsxGYYM=) 6: 3232332e3136342e302e302f31362d3234203d3e2039373835.roa (hash: GqlYotz76qpsvx0YbP1++o+soFVawkjmgw8JjYGM37s=) 7: 3131362e3231332e34382e302f32302d3234203d3e2039373835.roa (hash: ILkXkfNJzfGzwTYNzRYQw2a7890NKmPmydyWQw+HB7E=) 8: 3230322e36392e39362e302f32302d3234203d3e20313331363931.roa (hash: levW4fK5Av9j8+txVVV15SprxZ5Vl8IniN5F3a6MoCA=) 9: 3232302e3135372e39362e302f32302d3234203d3e2039373835.roa (hash: HNZfntXqIdjS6Oc1nk9EDrt/Ny6J1wp1N0wmznQcons=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/690c9009-ad53-4fa6-a183-34b3457bea03/0/BF3B675AEBEE64D00B323056545D1F630F1C489E.crl rsync://repo-rpki.idnic.net/repo/690c9009-ad53-4fa6-a183-34b3457bea03/0/BF3B675AEBEE64D00B323056545D1F630F1C489E.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BF3B675AEBEE64D00B323056545D1F630F1C489E.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 08 Nov 2025 05:01:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7e:9b:77:d1:d5:56:d1:ce:9b:61:af:b6:31:7a:8a:62:72:33:7b:15 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BF3B675AEBEE64D00B323056545D1F630F1C489E Validity Not Before: Nov 5 04:35:49 2025 GMT Not After : Nov 8 05:01:49 2025 GMT Subject: CN=768E078B9E1BBE505F3A7E2E4696B82C06FB66B0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:e5:fe:91:51:48:2f:90:f9:8a:0d:9c:9c:91: 12:84:21:35:8b:cc:be:dd:75:0b:32:a3:2b:80:75: 8c:76:2d:ee:e1:ff:53:a6:f0:50:d7:d3:ca:e0:0b: db:f6:3b:88:9c:26:66:92:0e:62:12:6b:10:a4:a0: 6c:14:5b:8a:38:a1:c5:7d:64:28:f8:a0:b3:4c:17: c4:7b:b6:61:e9:a3:da:2a:e0:b4:f5:ad:8d:ca:91: 16:98:f2:94:9c:b2:46:86:00:9c:59:89:a1:d5:26: 58:4a:1c:2a:c5:65:a4:38:56:e9:8d:47:81:15:9d: ac:77:ba:5b:07:35:91:fc:dd:ca:58:dd:66:d0:5d: 42:08:91:32:bf:80:1c:28:55:5f:53:85:a1:a1:e3: 98:bc:92:05:f3:8e:d2:f3:d7:03:3f:aa:7d:13:5c: 41:c9:a8:f1:97:af:08:cb:01:71:c4:d8:39:f7:0a: 81:eb:84:23:a5:f4:4e:47:9a:f4:7f:6c:f7:27:9c: f2:21:d8:1a:74:c4:5b:7c:5c:3a:46:33:55:aa:51: 5b:fc:a3:42:79:56:b9:db:0e:4f:1c:37:1a:a2:16: 9a:8b:af:ba:30:6a:9b:11:cf:8d:c9:b2:ee:6c:ba: 16:fa:b2:65:56:f4:31:a8:1e:d0:ce:a2:b5:17:13: cc:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 76:8E:07:8B:9E:1B:BE:50:5F:3A:7E:2E:46:96:B8:2C:06:FB:66:B0 X509v3 Authority Key Identifier: keyid:BF:3B:67:5A:EB:EE:64:D0:0B:32:30:56:54:5D:1F:63:0F:1C:48:9E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/690c9009-ad53-4fa6-a183-34b3457bea03/0/BF3B675AEBEE64D00B323056545D1F630F1C489E.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BF3B675AEBEE64D00B323056545D1F630F1C489E.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/690c9009-ad53-4fa6-a183-34b3457bea03/0/BF3B675AEBEE64D00B323056545D1F630F1C489E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 57:d6:d6:7f:6e:24:6b:58:ff:fe:7e:3e:d6:0c:c4:ce:2e:ed: 8d:e6:32:13:c2:fe:03:2a:69:32:2f:03:6a:7a:ba:8d:36:9a: 2e:ca:71:35:8b:14:8c:26:d9:1d:ca:7d:f7:3f:81:25:a7:08: 22:df:5c:34:82:5a:c4:75:bf:73:12:cd:3b:4a:6b:d5:b0:2d: 78:17:c8:97:09:6e:23:c0:cf:8a:9c:f2:9e:13:1f:bd:a6:14: 80:b9:29:e9:cb:bf:82:e6:a5:30:55:88:7a:31:69:df:5e:99: 7e:06:f1:43:83:76:1b:65:1d:30:cd:93:2d:5e:ac:72:7d:8c: 2d:cb:58:93:c4:2c:ed:4b:c6:95:9f:7f:ba:d9:f3:96:0a:3c: 74:1d:cf:fb:7e:af:cd:21:a6:aa:fa:9f:98:8f:5f:aa:68:87: a0:76:71:36:f2:b8:dc:5a:f8:d0:11:c9:23:4c:96:c5:c0:99: 1f:53:97:fb:33:3b:82:e1:85:89:35:70:96:61:3d:d1:38:02: 67:ac:60:f1:a5:a1:a3:19:1d:82:7a:16:57:30:12:23:4b:43: 9d:d6:3e:f4:4d:65:84:32:bb:16:98:4c:c4:2c:de:09:40:8f: 7c:e7:f9:70:2d:93:02:58:dd:0f:f6:13:be:c6:af:2e:b4:50: dd:63:96:26 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUfpt30dVW0c6bYa+2MXqKYnIzexUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkYzQjY3NUFFQkVFNjREMDBCMzIzMDU2NTQ1RDFGNjMw RjFDNDg5RTAeFw0yNTExMDUwNDM1NDlaFw0yNTExMDgwNTAxNDlaMDMxMTAvBgNV BAMTKDc2OEUwNzhCOUUxQkJFNTA1RjNBN0UyRTQ2OTZCODJDMDZGQjY2QjAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCs5f6RUUgvkPmKDZyckRKEITWL zL7ddQsyoyuAdYx2Le7h/1Om8FDX08rgC9v2O4icJmaSDmISaxCkoGwUW4o4ocV9 ZCj4oLNMF8R7tmHpo9oq4LT1rY3KkRaY8pScskaGAJxZiaHVJlhKHCrFZaQ4VumN R4EVnax3ulsHNZH83cpY3WbQXUIIkTK/gBwoVV9ThaGh45i8kgXzjtLz1wM/qn0T XEHJqPGXrwjLAXHE2Dn3CoHrhCOl9E5HmvR/bPcnnPIh2Bp0xFt8XDpGM1WqUVv8 o0J5VrnbDk8cNxqiFpqLr7owapsRz43Jsu5suhb6smVW9DGoHtDOorUXE8zTAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUdo4Hi54bvlBfOn4uRpa4LAb7ZrAwHwYDVR0j BBgwFoAUvztnWuvuZNALMjBWVF0fYw8cSJ4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 OTBjOTAwOS1hZDUzLTRmYTYtYTE4My0zNGIzNDU3YmVhMDMvMC9CRjNCNjc1QUVC RUU2NEQwMEIzMjMwNTY1NDVEMUY2MzBGMUM0ODlFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQkYzQjY3NUFFQkVFNjREMDBCMzIzMDU2NTQ1RDFGNjMwRjFD NDg5RS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNjkwYzkwMDktYWQ1My00ZmE2LWEx ODMtMzRiMzQ1N2JlYTAzLzAvQkYzQjY3NUFFQkVFNjREMDBCMzIzMDU2NTQ1RDFG NjMwRjFDNDg5RS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFfW1n9uJGtY//5+PtYMxM4u7Y3mMhPC/gMq aTIvA2p6uo02mi7KcTWLFIwm2R3Kffc/gSWnCCLfXDSCWsR1v3MSzTtKa9WwLXgX yJcJbiPAz4qc8p4TH72mFIC5KenLv4LmpTBViHoxad9emX4G8UODdhtlHTDNky1e rHJ9jC3LWJPELO1LxpWff7rZ85YKPHQdz/t+r80hpqr6n5iPX6poh6B2cTbyuNxa +NARySNMlsXAmR9Tl/szO4LhhYk1cJZhPdE4AmesYPGloaMZHYJ6FlcwEiNLQ53W PvRNZYQyuxaYTMQs3glAj3zn+XAtkwJY3Q/2E77Gry60UN1jliY= -----END CERTIFICATE-----Generated at Wed Nov 5 08:00:27 2025 by rpki-client