$ rpki-client -vvf repo-rpki.idnic.net/repo/78e78ee0-0002-4a67-a739-3033d5b5ba61/0/B1D4F5495BE4F9D995EA9C1545469CA2B98334F1.mft File: B1D4F5495BE4F9D995EA9C1545469CA2B98334F1.mft (raw, json) Hash identifier: YibH+HpFkiDdUx8TLbvKcxfcQCmBu7Go85pGvlvSrBM= Subject key identifier: 71:79:14:38:19:51:0E:4E:C4:E2:53:6B:80:19:1E:F0:4B:58:ED:A4 Authority key identifier: B1:D4:F5:49:5B:E4:F9:D9:95:EA:9C:15:45:46:9C:A2:B9:83:34:F1 Certificate issuer: /CN=B1D4F5495BE4F9D995EA9C1545469CA2B98334F1 Certificate serial: 2A93EAFF61A5F35914B5B1EB7F28E5F37D0494FF Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B1D4F5495BE4F9D995EA9C1545469CA2B98334F1.cer Subject info access: rsync://repo-rpki.idnic.net/repo/78e78ee0-0002-4a67-a739-3033d5b5ba61/0/B1D4F5495BE4F9D995EA9C1545469CA2B98334F1.mft Manifest number: 025C Signing time: Mon 03 Nov 2025 21:02:19 +0000 Manifest this update: Mon 03 Nov 2025 20:57:19 +0000 Manifest next update: Fri 07 Nov 2025 01:44:19 +0000 Files and hashes: 1: B1D4F5495BE4F9D995EA9C1545469CA2B98334F1.crl (hash: PexCNlVxBIjNTtaKrNgouvpgOW0oe1GOXw1+jshRNmc=) 2: 3130332e3136382e3138352e302f32342d3234203d3e20313432333231.roa (hash: KAd16ldutYh48OLbDnroVNt1O/HTzAA/aCmbtAP1Odw=) 3: 3130332e3136382e3138342e302f32332d3233203d3e20313432333231.roa (hash: WwW9nUa1rmjUn7BCAW+1oX9KPadjU43XCXkkj1toOfQ=) 4: 3130332e3136382e3138342e302f32342d3234203d3e203438343635.roa (hash: 1UJAHonWaadwHYuLef8BFUV8SSyJkucgr+FB5CesNHg=) 5: 3130332e3136382e3138342e302f32342d3234203d3e20313432333231.roa (hash: YwiS5nlm2sACVNb5Xfq0EOTBtueDgKIv6RAnbgfUwRk=) 6: 3130332e3136382e3138352e302f32342d3234203d3e203438343635.roa (hash: hum6PwDa+tJlyU75JQFBXd7LlyucqEnCFxIhwk7g/uE=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/78e78ee0-0002-4a67-a739-3033d5b5ba61/0/B1D4F5495BE4F9D995EA9C1545469CA2B98334F1.crl rsync://repo-rpki.idnic.net/repo/78e78ee0-0002-4a67-a739-3033d5b5ba61/0/B1D4F5495BE4F9D995EA9C1545469CA2B98334F1.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B1D4F5495BE4F9D995EA9C1545469CA2B98334F1.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 07 Nov 2025 01:44:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2a:93:ea:ff:61:a5:f3:59:14:b5:b1:eb:7f:28:e5:f3:7d:04:94:ff Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B1D4F5495BE4F9D995EA9C1545469CA2B98334F1 Validity Not Before: Nov 3 20:57:19 2025 GMT Not After : Nov 7 01:44:19 2025 GMT Subject: CN=7179143819510E4EC4E2536B80191EF04B58EDA4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:21:71:c7:68:c6:1f:a7:eb:7f:9a:c9:65:d9: 86:54:40:f1:26:f7:f9:7e:47:c6:10:04:ff:77:ed: 88:49:32:8d:d2:d5:8c:64:ea:a3:f2:24:d9:51:c5: e8:1f:52:e5:3e:bd:c0:0e:64:fa:24:e8:2e:4e:ff: 54:23:80:cc:6d:a1:64:55:9f:18:88:9c:88:fd:23: 7b:02:7b:7d:e8:42:89:21:e2:87:cc:24:cd:1d:83: 47:50:4e:cc:6a:c7:be:cd:e6:1e:e7:e3:df:8a:13: d1:a9:13:2b:d7:e2:18:d5:d6:82:80:ae:88:14:d3: b1:5c:84:35:00:47:33:8d:fc:a3:db:6d:1a:33:28: 0e:f6:3e:db:9a:64:61:03:4a:09:49:66:9c:72:54: 65:2b:02:34:71:ce:6a:e2:71:e0:86:1f:36:57:01: e1:44:91:a4:4f:32:9f:54:9b:fb:ee:16:41:fa:21: 7e:07:4a:e9:50:2f:1e:33:9b:a6:0f:eb:fe:ed:c5: 76:d5:06:57:5f:d7:78:a7:98:ed:fb:e4:00:37:8e: dc:1b:0c:2f:99:87:a3:a8:c7:2a:96:70:63:3c:0d: bf:5c:9d:f4:a2:e8:34:6c:b6:75:9c:81:d3:4f:e4: c5:53:28:3d:82:93:0c:9e:cf:26:99:3f:49:4f:a9: 91:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:79:14:38:19:51:0E:4E:C4:E2:53:6B:80:19:1E:F0:4B:58:ED:A4 X509v3 Authority Key Identifier: keyid:B1:D4:F5:49:5B:E4:F9:D9:95:EA:9C:15:45:46:9C:A2:B9:83:34:F1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/78e78ee0-0002-4a67-a739-3033d5b5ba61/0/B1D4F5495BE4F9D995EA9C1545469CA2B98334F1.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B1D4F5495BE4F9D995EA9C1545469CA2B98334F1.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/78e78ee0-0002-4a67-a739-3033d5b5ba61/0/B1D4F5495BE4F9D995EA9C1545469CA2B98334F1.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption d5:c6:4b:80:a7:50:20:9e:4c:56:b9:10:e9:b7:b6:6b:1e:4b: 4b:41:16:df:b6:e3:f7:d2:aa:c2:f4:29:b4:f4:80:e9:0a:5e: 8e:b2:3e:be:dd:69:ea:87:16:1c:76:80:07:a6:74:2d:2b:82: b2:70:ab:46:c3:d0:aa:50:87:7b:63:5c:7e:5a:8e:ea:7a:5a: 08:c1:20:dc:53:91:4c:0e:5a:f8:4a:d0:96:b2:3b:07:8d:aa: b3:84:68:cb:06:9e:63:0c:05:62:54:df:b5:29:10:11:f4:01: bd:d5:85:32:01:3c:b2:64:ea:53:0f:90:29:0f:9c:05:29:2b: f5:7c:99:8f:bd:2f:f5:4f:fb:6e:bc:21:f9:f3:64:1a:7e:ae: 9d:ba:08:65:33:5e:eb:42:99:3a:b9:7d:fd:df:a8:16:1f:90: 52:37:ba:0b:2c:bb:fa:dd:5f:55:62:35:52:84:d6:8c:51:cb: da:f3:84:68:3f:f6:27:46:ef:30:d9:8b:6c:45:46:16:6a:94: d3:e6:00:21:e5:54:2d:f1:80:68:5d:87:26:3c:54:8d:a4:b1: d7:49:10:a1:00:89:f8:2a:88:8d:bd:51:34:0e:9c:ce:d5:1c: 4e:33:31:d6:5b:e5:c8:0d:e3:e7:1a:21:e9:7b:5c:f4:8e:10: d9:21:f8:73 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUKpPq/2Gl81kUtbHrfyjl830ElP8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjFENEY1NDk1QkU0RjlEOTk1RUE5QzE1NDU0NjlDQTJC OTgzMzRGMTAeFw0yNTExMDMyMDU3MTlaFw0yNTExMDcwMTQ0MTlaMDMxMTAvBgNV BAMTKDcxNzkxNDM4MTk1MTBFNEVDNEUyNTM2QjgwMTkxRUYwNEI1OEVEQTQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDVIXHHaMYfp+t/msll2YZUQPEm 9/l+R8YQBP937YhJMo3S1Yxk6qPyJNlRxegfUuU+vcAOZPok6C5O/1QjgMxtoWRV nxiInIj9I3sCe33oQokh4ofMJM0dg0dQTsxqx77N5h7n49+KE9GpEyvX4hjV1oKA rogU07FchDUARzON/KPbbRozKA72PtuaZGEDSglJZpxyVGUrAjRxzmriceCGHzZX AeFEkaRPMp9Um/vuFkH6IX4HSulQLx4zm6YP6/7txXbVBldf13inmO375AA3jtwb DC+Zh6OoxyqWcGM8Db9cnfSi6DRstnWcgdNP5MVTKD2CkwyezyaZP0lPqZG7AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUcXkUOBlRDk7E4lNrgBke8EtY7aQwHwYDVR0j BBgwFoAUsdT1SVvk+dmV6pwVRUacormDNPEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 OGU3OGVlMC0wMDAyLTRhNjctYTczOS0zMDMzZDViNWJhNjEvMC9CMUQ0RjU0OTVC RTRGOUQ5OTVFQTlDMTU0NTQ2OUNBMkI5ODMzNEYxLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQjFENEY1NDk1QkU0RjlEOTk1RUE5QzE1NDU0NjlDQTJCOTgz MzRGMS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNzhlNzhlZTAtMDAwMi00YTY3LWE3 MzktMzAzM2Q1YjViYTYxLzAvQjFENEY1NDk1QkU0RjlEOTk1RUE5QzE1NDU0NjlD QTJCOTgzMzRGMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBANXGS4CnUCCeTFa5EOm3tmseS0tBFt+24/fS qsL0KbT0gOkKXo6yPr7daeqHFhx2gAemdC0rgrJwq0bD0KpQh3tjXH5ajup6WgjB INxTkUwOWvhK0JayOweNqrOEaMsGnmMMBWJU37UpEBH0Ab3VhTIBPLJk6lMPkCkP nAUpK/V8mY+9L/VP+268IfnzZBp+rp26CGUzXutCmTq5ff3fqBYfkFI3ugssu/rd X1ViNVKE1oxRy9rzhGg/9idG7zDZi2xFRhZqlNPmACHlVC3xgGhdhyY8VI2ksddJ EKEAifgqiI29UTQOnM7VHE4zMdZb5cgN4+caIel7XPSOENkh+HM= -----END CERTIFICATE-----Generated at Wed Nov 5 05:49:08 2025 by rpki-client