$ rpki-client -vvf repo-rpki.idnic.net/repo/7794da40-b37e-4fe6-8f40-73b3b0be019f/0/B4A42192F8CDBE935CE5927E5AD3C63C8196152D.mft File: B4A42192F8CDBE935CE5927E5AD3C63C8196152D.mft (raw, json) Hash identifier: 2AvvTIIzbtI2COKaxFaRXhfc79ycYiA1I/Xqz1tzk/k= Subject key identifier: C3:83:5C:8D:42:59:38:0A:DC:90:38:12:1D:BC:ED:01:44:5F:50:7A Authority key identifier: B4:A4:21:92:F8:CD:BE:93:5C:E5:92:7E:5A:D3:C6:3C:81:96:15:2D Certificate issuer: /CN=B4A42192F8CDBE935CE5927E5AD3C63C8196152D Certificate serial: 5D3D9B9DD12DA4B778ADAFCBEBC9CFED2AF1B9E6 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B4A42192F8CDBE935CE5927E5AD3C63C8196152D.cer Subject info access: rsync://repo-rpki.idnic.net/repo/7794da40-b37e-4fe6-8f40-73b3b0be019f/0/B4A42192F8CDBE935CE5927E5AD3C63C8196152D.mft Manifest number: 01BC Signing time: Sun 02 Nov 2025 10:00:56 +0000 Manifest this update: Sun 02 Nov 2025 09:55:56 +0000 Manifest next update: Wed 05 Nov 2025 19:34:56 +0000 Files and hashes: 1: B4A42192F8CDBE935CE5927E5AD3C63C8196152D.crl (hash: Cc4FnxJ4t0ah9T4ydsg920Zs5XC9r8ymkR90/4+d/f0=) 2: 3130332e35352e32322e302f32332d3234203d3e20313530343930.roa (hash: qiaxwvksmM66atpVD6z5NciBUAyVEKleM/kHb9VhlSw=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/7794da40-b37e-4fe6-8f40-73b3b0be019f/0/B4A42192F8CDBE935CE5927E5AD3C63C8196152D.crl rsync://repo-rpki.idnic.net/repo/7794da40-b37e-4fe6-8f40-73b3b0be019f/0/B4A42192F8CDBE935CE5927E5AD3C63C8196152D.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B4A42192F8CDBE935CE5927E5AD3C63C8196152D.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 05 Nov 2025 19:34:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5d:3d:9b:9d:d1:2d:a4:b7:78:ad:af:cb:eb:c9:cf:ed:2a:f1:b9:e6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B4A42192F8CDBE935CE5927E5AD3C63C8196152D Validity Not Before: Nov 2 09:55:56 2025 GMT Not After : Nov 5 19:34:56 2025 GMT Subject: CN=C3835C8D4259380ADC9038121DBCED01445F507A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:2e:41:95:88:c8:f3:2d:3f:cf:72:43:e1:ae: b9:9a:d7:2f:5f:0e:93:24:f0:f6:81:1c:8f:22:8d: c0:ba:11:e0:a7:14:0c:20:a0:49:8d:29:57:81:d0: 3d:6a:c9:e4:4d:cf:57:76:4f:47:51:5c:a2:1b:65: 64:e7:22:55:35:d6:c1:bc:7c:10:e2:ae:cc:4c:64: e1:60:d3:ca:c7:2a:08:89:2a:67:08:50:79:e8:89: c2:9a:eb:91:5e:0a:c8:25:c5:13:69:5b:e7:1f:aa: 46:4c:00:a7:97:e0:8f:f6:d2:d8:dd:6d:9b:52:c7: 71:f6:3a:5b:bc:c6:18:4b:1d:7c:60:f9:0a:95:24: 0e:1a:69:c2:35:18:1d:b6:60:58:48:aa:c2:fe:ee: 9d:b9:76:97:71:08:18:0b:8c:38:17:4f:7f:cb:f1: ab:9e:07:65:f5:ea:d5:f0:c7:d7:34:65:35:6d:5d: dd:36:55:0b:81:c7:08:45:7f:31:17:46:92:f1:ef: d1:3a:b7:c3:d0:44:25:2a:0f:f2:24:de:de:35:dd: 37:91:00:82:80:88:77:8c:57:85:de:cf:34:f4:2b: 40:66:58:55:4b:d9:84:07:a2:fb:ef:9a:cb:55:4e: 35:3f:c1:d4:e3:75:69:43:e7:98:96:92:5a:d6:0c: 5c:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C3:83:5C:8D:42:59:38:0A:DC:90:38:12:1D:BC:ED:01:44:5F:50:7A X509v3 Authority Key Identifier: keyid:B4:A4:21:92:F8:CD:BE:93:5C:E5:92:7E:5A:D3:C6:3C:81:96:15:2D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/7794da40-b37e-4fe6-8f40-73b3b0be019f/0/B4A42192F8CDBE935CE5927E5AD3C63C8196152D.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B4A42192F8CDBE935CE5927E5AD3C63C8196152D.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/7794da40-b37e-4fe6-8f40-73b3b0be019f/0/B4A42192F8CDBE935CE5927E5AD3C63C8196152D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 00:31:b1:66:ac:3e:66:c4:cf:06:8b:e5:4b:ca:23:d6:f3:2f: cf:76:fc:77:cb:8b:08:5c:51:5a:6b:a8:7e:ce:e2:4b:7d:71: cb:6a:b0:61:21:ac:4f:6a:ef:ef:79:fd:38:c9:92:1a:f3:80: fd:81:cb:e0:1a:72:d1:bf:d9:d9:ef:77:a0:c8:f4:08:41:21: 35:01:b9:17:ca:2d:18:71:8e:a9:5a:81:b0:2b:88:38:0c:f0: 18:ad:83:45:27:0b:13:9c:a4:ea:e9:b3:3c:d3:77:e3:73:ad: 30:28:61:d7:87:fb:f1:6f:a2:64:f2:02:a6:35:56:d3:cf:45: cf:fc:73:84:75:70:09:b6:4c:da:27:5f:88:25:b8:d3:35:79: 64:ae:53:a7:d9:a9:1e:64:80:9f:ed:c5:02:3d:d7:0c:b2:1d: 0c:c7:e3:09:d1:9d:cd:bd:11:05:51:3f:33:46:52:41:6f:bc: 37:bd:99:fb:ba:63:a8:ef:40:de:1f:9e:25:64:31:79:8f:c3: 2d:09:3a:e9:99:86:ff:9f:ba:31:16:ab:fa:04:bc:c0:5f:90: 06:ff:3e:2a:ad:73:3f:63:03:c7:d1:c1:a6:72:63:37:4a:f1: 99:06:14:ba:50:e7:01:0f:28:1d:6d:f1:16:9a:da:47:50:22: 3f:d8:16:62 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUXT2bndEtpLd4ra/L68nP7SrxueYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjRBNDIxOTJGOENEQkU5MzVDRTU5MjdFNUFEM0M2M0M4 MTk2MTUyRDAeFw0yNTExMDIwOTU1NTZaFw0yNTExMDUxOTM0NTZaMDMxMTAvBgNV BAMTKEMzODM1QzhENDI1OTM4MEFEQzkwMzgxMjFEQkNFRDAxNDQ1RjUwN0EwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCeLkGViMjzLT/PckPhrrma1y9f DpMk8PaBHI8ijcC6EeCnFAwgoEmNKVeB0D1qyeRNz1d2T0dRXKIbZWTnIlU11sG8 fBDirsxMZOFg08rHKgiJKmcIUHnoicKa65FeCsglxRNpW+cfqkZMAKeX4I/20tjd bZtSx3H2Olu8xhhLHXxg+QqVJA4aacI1GB22YFhIqsL+7p25dpdxCBgLjDgXT3/L 8aueB2X16tXwx9c0ZTVtXd02VQuBxwhFfzEXRpLx79E6t8PQRCUqD/Ik3t413TeR AIKAiHeMV4XezzT0K0BmWFVL2YQHovvvmstVTjU/wdTjdWlD55iWklrWDFyfAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUw4NcjUJZOArckDgSHbztAURfUHowHwYDVR0j BBgwFoAUtKQhkvjNvpNc5ZJ+WtPGPIGWFS0wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 Nzk0ZGE0MC1iMzdlLTRmZTYtOGY0MC03M2IzYjBiZTAxOWYvMC9CNEE0MjE5MkY4 Q0RCRTkzNUNFNTkyN0U1QUQzQzYzQzgxOTYxNTJELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQjRBNDIxOTJGOENEQkU5MzVDRTU5MjdFNUFEM0M2M0M4MTk2 MTUyRC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNzc5NGRhNDAtYjM3ZS00ZmU2LThm NDAtNzNiM2IwYmUwMTlmLzAvQjRBNDIxOTJGOENEQkU5MzVDRTU5MjdFNUFEM0M2 M0M4MTk2MTUyRC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAAxsWasPmbEzwaL5UvKI9bzL892/HfLiwhc UVprqH7O4kt9cctqsGEhrE9q7+95/TjJkhrzgP2By+AactG/2dnvd6DI9AhBITUB uRfKLRhxjqlagbAriDgM8Bitg0UnCxOcpOrpszzTd+NzrTAoYdeH+/FvomTyAqY1 VtPPRc/8c4R1cAm2TNonX4gluNM1eWSuU6fZqR5kgJ/txQI91wyyHQzH4wnRnc29 EQVRPzNGUkFvvDe9mfu6Y6jvQN4fniVkMXmPwy0JOumZhv+fujEWq/oEvMBfkAb/ Piqtcz9jA8fRwaZyYzdK8ZkGFLpQ5wEPKB1t8Raa2kdQIj/YFmI= -----END CERTIFICATE-----Generated at Tue Nov 4 12:53:16 2025 by rpki-client