$ rpki-client -vvf repo-rpki.idnic.net/repo/6a9e2898-023b-4741-8735-a0718cc6cf2b/0/B152586AE46FCAB640629D941147319E05FCF34B.mft File: B152586AE46FCAB640629D941147319E05FCF34B.mft (raw, json) Hash identifier: DXwNDfrGBK6xOB5qVmymHvHLmiOUV2BPwol7QqboN2g= Subject key identifier: C4:89:11:A8:6A:03:C5:43:09:71:6D:7C:66:7C:EC:22:58:C7:4B:5D Authority key identifier: B1:52:58:6A:E4:6F:CA:B6:40:62:9D:94:11:47:31:9E:05:FC:F3:4B Certificate issuer: /CN=B152586AE46FCAB640629D941147319E05FCF34B Certificate serial: 5840D8119773756F853F7DB49EA36981ABE96F89 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B152586AE46FCAB640629D941147319E05FCF34B.cer Subject info access: rsync://repo-rpki.idnic.net/repo/6a9e2898-023b-4741-8735-a0718cc6cf2b/0/B152586AE46FCAB640629D941147319E05FCF34B.mft Manifest number: 0251 Signing time: Tue 04 Nov 2025 05:21:01 +0000 Manifest this update: Tue 04 Nov 2025 05:16:01 +0000 Manifest next update: Fri 07 Nov 2025 11:53:01 +0000 Files and hashes: 1: B152586AE46FCAB640629D941147319E05FCF34B.crl (hash: rU+pkS27CpXDjZk9+fligofJIB8yU2vCOeH1sOuua9o=) 2: 3130332e3137362e3232372e302f32342d3234203d3e20313437313534.roa (hash: 6c26JZWNMMIKbz8QiOgDDGQqpXGJuiNocLMDMSpKyVk=) 3: 323030313a6466303a376334303a3a2f34382d3438203d3e20313437313534.roa (hash: y0s8YGn9mHg2T9EeIiu21b9Ye25qY26dsfL13en5ZUs=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/6a9e2898-023b-4741-8735-a0718cc6cf2b/0/B152586AE46FCAB640629D941147319E05FCF34B.crl rsync://repo-rpki.idnic.net/repo/6a9e2898-023b-4741-8735-a0718cc6cf2b/0/B152586AE46FCAB640629D941147319E05FCF34B.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B152586AE46FCAB640629D941147319E05FCF34B.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 07 Nov 2025 11:53:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 58:40:d8:11:97:73:75:6f:85:3f:7d:b4:9e:a3:69:81:ab:e9:6f:89 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B152586AE46FCAB640629D941147319E05FCF34B Validity Not Before: Nov 4 05:16:01 2025 GMT Not After : Nov 7 11:53:01 2025 GMT Subject: CN=C48911A86A03C54309716D7C667CEC2258C74B5D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:a3:ac:78:48:ec:30:b0:d1:36:ed:31:72:d3: 4a:9c:c5:63:1a:30:3d:6d:21:ab:5d:2c:1d:85:b8: 71:eb:0b:08:e3:33:ac:f3:63:04:da:03:8e:8f:75: 33:14:c8:89:a8:07:60:24:6c:88:81:79:1d:3d:ea: 1e:2c:56:9b:3f:ac:e8:c1:7b:c2:d7:5c:bd:24:66: 34:7a:fd:55:5a:d1:d6:9b:77:4d:bc:84:5f:62:b3: 71:b3:82:d3:07:3b:f4:bc:c9:f5:7c:83:36:99:b9: be:5c:1b:3e:eb:ab:8d:54:89:a7:3a:52:7a:22:e9: c3:71:89:84:d9:40:14:5c:a3:1e:8c:36:41:d2:c6: c2:ec:4b:12:d4:09:a5:6a:75:a7:3c:9d:79:8c:b6: ac:ed:c8:4a:0b:a9:ee:ab:ed:a5:6c:8b:28:22:a0: 59:eb:2b:41:e9:16:c8:37:c1:59:3a:c4:64:c7:dd: c4:3d:7a:61:4f:ee:bf:fb:23:c3:3a:2b:13:dd:e5: 21:a0:7d:b2:7e:ec:f8:bb:42:79:c3:15:79:ca:f4: 30:11:79:40:67:25:39:ec:b2:87:ff:2a:82:1f:62: 74:eb:c0:12:67:a1:17:ac:6e:d2:fc:4a:e1:44:04: a4:d2:b6:1d:b2:98:52:88:57:08:c5:46:4a:96:89: 1e:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:89:11:A8:6A:03:C5:43:09:71:6D:7C:66:7C:EC:22:58:C7:4B:5D X509v3 Authority Key Identifier: keyid:B1:52:58:6A:E4:6F:CA:B6:40:62:9D:94:11:47:31:9E:05:FC:F3:4B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/6a9e2898-023b-4741-8735-a0718cc6cf2b/0/B152586AE46FCAB640629D941147319E05FCF34B.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B152586AE46FCAB640629D941147319E05FCF34B.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/6a9e2898-023b-4741-8735-a0718cc6cf2b/0/B152586AE46FCAB640629D941147319E05FCF34B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 76:db:bd:49:8a:7d:f5:dd:2f:4d:be:67:1f:80:88:59:cf:93: 33:49:c2:2c:15:9e:f0:80:ac:63:e5:02:df:4c:ed:1e:d9:51: 4b:4f:fa:fe:cb:b3:4c:ea:88:b1:6f:fb:4d:c0:df:61:2c:49: 87:97:b1:93:39:0d:f0:60:6a:42:98:20:1f:94:76:00:1b:27: 93:1a:fb:27:48:99:44:d4:12:0f:7d:00:c7:f1:38:59:76:68: 4a:ed:10:a4:5d:f7:50:e8:4a:10:f6:24:aa:ee:ac:70:f7:1d: 43:44:04:01:91:5d:63:07:76:b3:22:96:a6:e0:b7:89:42:4f: a8:b1:95:12:f9:36:b9:52:f3:28:55:b5:8b:b0:93:dc:28:0e: 76:a6:7f:88:bd:ac:80:ca:80:d8:1d:a6:67:7f:b6:91:8a:eb: 36:c8:f3:d6:b6:7a:c8:27:cb:2d:e5:07:b3:bb:f7:bd:ef:15: f5:8f:4d:de:25:d7:90:22:7b:d3:2b:db:66:38:cf:c2:3f:22: 81:a8:f6:9d:4a:d5:7e:e9:3f:3e:1d:e2:4d:ef:02:a7:a3:e2: 39:e1:5d:ac:e9:b4:9c:f1:f8:61:30:47:9a:e8:fc:04:62:9e: 15:cc:3b:a1:f8:9d:6f:21:a1:20:ef:61:b7:d1:33:45:e7:70: 7d:dc:aa:da -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUWEDYEZdzdW+FP320nqNpgavpb4kwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjE1MjU4NkFFNDZGQ0FCNjQwNjI5RDk0MTE0NzMxOUUw NUZDRjM0QjAeFw0yNTExMDQwNTE2MDFaFw0yNTExMDcxMTUzMDFaMDMxMTAvBgNV BAMTKEM0ODkxMUE4NkEwM0M1NDMwOTcxNkQ3QzY2N0NFQzIyNThDNzRCNUQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDlo6x4SOwwsNE27TFy00qcxWMa MD1tIatdLB2FuHHrCwjjM6zzYwTaA46PdTMUyImoB2AkbIiBeR096h4sVps/rOjB e8LXXL0kZjR6/VVa0dabd028hF9is3GzgtMHO/S8yfV8gzaZub5cGz7rq41Uiac6 Unoi6cNxiYTZQBRcox6MNkHSxsLsSxLUCaVqdac8nXmMtqztyEoLqe6r7aVsiygi oFnrK0HpFsg3wVk6xGTH3cQ9emFP7r/7I8M6KxPd5SGgfbJ+7Pi7QnnDFXnK9DAR eUBnJTnssof/KoIfYnTrwBJnoResbtL8SuFEBKTSth2ymFKIVwjFRkqWiR4JAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUxIkRqGoDxUMJcW18ZnzsIljHS10wHwYDVR0j BBgwFoAUsVJYauRvyrZAYp2UEUcxngX880swDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 YTllMjg5OC0wMjNiLTQ3NDEtODczNS1hMDcxOGNjNmNmMmIvMC9CMTUyNTg2QUU0 NkZDQUI2NDA2MjlEOTQxMTQ3MzE5RTA1RkNGMzRCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQjE1MjU4NkFFNDZGQ0FCNjQwNjI5RDk0MTE0NzMxOUUwNUZD RjM0Qi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNmE5ZTI4OTgtMDIzYi00NzQxLTg3 MzUtYTA3MThjYzZjZjJiLzAvQjE1MjU4NkFFNDZGQ0FCNjQwNjI5RDk0MTE0NzMx OUUwNUZDRjM0Qi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHbbvUmKffXdL02+Zx+AiFnPkzNJwiwVnvCA rGPlAt9M7R7ZUUtP+v7Ls0zqiLFv+03A32EsSYeXsZM5DfBgakKYIB+UdgAbJ5Ma +ydImUTUEg99AMfxOFl2aErtEKRd91DoShD2JKrurHD3HUNEBAGRXWMHdrMilqbg t4lCT6ixlRL5NrlS8yhVtYuwk9woDnamf4i9rIDKgNgdpmd/tpGK6zbI89a2esgn yy3lB7O7973vFfWPTd4l15Aie9Mr22Y4z8I/IoGo9p1K1X7pPz4d4k3vAqej4jnh XazptJzx+GEwR5ro/ARinhXMO6H4nW8hoSDvYbfRM0XncH3cqto= -----END CERTIFICATE-----Generated at Wed Nov 5 11:38:21 2025 by rpki-client