$ rpki-client -vvf repo-rpki.idnic.net/repo/7cd323be-837d-4244-846c-7d2393a9a009/0/B0928A45D014D8D5FAD50314E828086F12B15610.mft File: B0928A45D014D8D5FAD50314E828086F12B15610.mft (raw, json) Hash identifier: m64UnfFknLXgTSR9Y9ZUZoyOd4+p+3X/37fPPb+SwBg= Subject key identifier: 97:F7:C5:30:DC:07:07:21:6E:AF:8C:F2:99:C0:7A:13:5D:29:16:36 Authority key identifier: B0:92:8A:45:D0:14:D8:D5:FA:D5:03:14:E8:28:08:6F:12:B1:56:10 Certificate issuer: /CN=B0928A45D014D8D5FAD50314E828086F12B15610 Certificate serial: 51500CB1DD517B5E83FF3353B3558D35E96791F9 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B0928A45D014D8D5FAD50314E828086F12B15610.cer Subject info access: rsync://repo-rpki.idnic.net/repo/7cd323be-837d-4244-846c-7d2393a9a009/0/B0928A45D014D8D5FAD50314E828086F12B15610.mft Manifest number: 0322 Signing time: Mon 03 Nov 2025 08:32:52 +0000 Manifest this update: Mon 03 Nov 2025 08:27:52 +0000 Manifest next update: Thu 06 Nov 2025 11:29:52 +0000 Files and hashes: 1: 3230322e3132352e38322e302f32332d3233203d3e20313430343433.roa (hash: g4b6/Xa0b41J+1gc8Xz+JaVY6mTt5QNosbt82K9ZCLY=) 2: B0928A45D014D8D5FAD50314E828086F12B15610.crl (hash: /DY1rLomx/UJQeY2265/BlIc2KUPeEchpyjVc7Xi2KQ=) 3: 3230322e37302e3133332e302f32342d3234203d3e20313430343433.roa (hash: wdtK/qmLPSYK98usl8We2OAmclE1Y5QskILTtOqsrh0=) 4: 3230322e3132352e38322e302f32342d3234203d3e20313430343433.roa (hash: svi5IuXnIA+13Wc0eQrV3WQdaOBiVClli1PIWM+ewGc=) 5: 3230322e37302e3133322e302f32332d3233203d3e20313430343433.roa (hash: unxNSSNtfbW/QtJSHv1+Jppsd16Z88+qlZSg2ZXLUc0=) 6: 3230322e37302e3133322e302f32342d3234203d3e20313430343433.roa (hash: hnSe2L9heULKYvVeefFY6CeCDXE6iTWu+s4r/qCo/4o=) 7: 3230322e3132352e38332e302f32342d3234203d3e20313430343433.roa (hash: Ky8MrLU9AvVMvZfrLkoaRO/9X/2qSweH3weFbcGoV3c=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/7cd323be-837d-4244-846c-7d2393a9a009/0/B0928A45D014D8D5FAD50314E828086F12B15610.crl rsync://repo-rpki.idnic.net/repo/7cd323be-837d-4244-846c-7d2393a9a009/0/B0928A45D014D8D5FAD50314E828086F12B15610.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B0928A45D014D8D5FAD50314E828086F12B15610.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 06 Nov 2025 11:29:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 51:50:0c:b1:dd:51:7b:5e:83:ff:33:53:b3:55:8d:35:e9:67:91:f9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B0928A45D014D8D5FAD50314E828086F12B15610 Validity Not Before: Nov 3 08:27:52 2025 GMT Not After : Nov 6 11:29:52 2025 GMT Subject: CN=97F7C530DC0707216EAF8CF299C07A135D291636 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:cb:f8:91:d4:b2:38:ef:72:27:f0:3f:72:af: 47:57:77:66:bc:1c:79:68:c7:e1:c3:b3:23:29:b7: a3:b4:b0:6e:38:1d:2a:79:3c:ad:e4:33:d3:0e:43: 64:65:9a:2e:bb:48:7b:6c:a0:5d:2b:fc:ef:72:8d: a5:53:a8:dc:24:14:fd:d3:d5:fe:1d:cc:f3:ee:55: 87:3d:c9:16:aa:49:da:55:c5:f1:d5:f8:1f:c2:35: 41:d9:c2:39:d7:59:fd:f7:39:ea:7b:66:00:b4:f6: 86:da:17:46:61:5e:04:e2:4c:26:4a:9c:6e:16:de: aa:3c:db:c2:12:8e:e6:6c:2c:09:7a:2b:ff:24:4a: 78:5b:37:0c:7c:6c:59:98:72:ca:4e:49:f6:7d:fa: e0:50:cf:08:a0:21:24:4f:03:84:e2:77:8c:e6:43: 38:f2:06:18:82:af:92:be:78:f8:c4:cb:b4:67:93: 58:7f:d4:b9:de:af:8b:81:eb:d1:85:86:ad:4b:11: 01:20:33:30:76:aa:e9:9f:2e:e8:23:80:de:e5:5f: 3a:24:b8:b8:f5:f7:4c:68:a6:52:99:bf:80:d7:ea: 03:07:c1:1e:98:1b:f0:ce:98:f3:c8:58:f7:6d:b1: 41:09:83:69:01:4e:cc:56:4f:5c:52:40:f7:f1:39: 46:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 97:F7:C5:30:DC:07:07:21:6E:AF:8C:F2:99:C0:7A:13:5D:29:16:36 X509v3 Authority Key Identifier: keyid:B0:92:8A:45:D0:14:D8:D5:FA:D5:03:14:E8:28:08:6F:12:B1:56:10 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/7cd323be-837d-4244-846c-7d2393a9a009/0/B0928A45D014D8D5FAD50314E828086F12B15610.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B0928A45D014D8D5FAD50314E828086F12B15610.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/7cd323be-837d-4244-846c-7d2393a9a009/0/B0928A45D014D8D5FAD50314E828086F12B15610.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 94:e5:a6:9d:c2:87:e4:34:5b:2d:2d:3b:ac:3f:1c:28:02:f2: 25:6b:69:1a:c0:65:36:31:bf:7f:55:6f:34:60:68:93:4d:2f: 3f:9a:5e:21:96:ef:44:5f:d8:aa:e5:11:1d:0b:8a:29:f7:20: 57:00:9c:32:ff:80:53:6f:0d:83:3e:1f:ef:93:11:77:ff:80: 29:15:1c:3b:80:c4:33:0b:04:64:0f:a6:1b:03:7a:54:f3:a7: a6:38:2a:9d:a6:06:dc:df:10:6a:f7:5c:9d:b4:fd:dd:63:1c: 81:64:34:7f:2b:d7:dd:1b:23:31:1b:3f:9e:18:43:f7:5e:3c: 76:a6:a6:00:88:83:1c:1c:10:52:e4:c7:4c:f1:79:45:7e:74: e1:68:51:33:d1:01:bd:67:75:55:05:5a:41:61:6b:ed:a6:1e: 8b:82:ac:ff:81:51:ca:a7:80:11:a5:a9:52:10:d3:8b:bc:d1: 5c:f9:3a:f8:9b:aa:dc:41:b4:f8:ac:fa:04:e3:4e:fa:4d:76: de:36:2e:48:e7:bc:77:0c:d6:bc:c0:23:4e:41:f4:b2:26:20: 37:35:dd:3a:48:fc:02:ff:d7:69:cb:28:1f:2f:66:01:08:75: 8d:e5:d2:40:3f:df:87:da:ec:76:29:ac:dc:d0:ad:bf:45:c1: 00:97:a1:e9 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUUVAMsd1Re16D/zNTs1WNNelnkfkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjA5MjhBNDVEMDE0RDhENUZBRDUwMzE0RTgyODA4NkYx MkIxNTYxMDAeFw0yNTExMDMwODI3NTJaFw0yNTExMDYxMTI5NTJaMDMxMTAvBgNV BAMTKDk3RjdDNTMwREMwNzA3MjE2RUFGOENGMjk5QzA3QTEzNUQyOTE2MzYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC0y/iR1LI473In8D9yr0dXd2a8 HHlox+HDsyMpt6O0sG44HSp5PK3kM9MOQ2Rlmi67SHtsoF0r/O9yjaVTqNwkFP3T 1f4dzPPuVYc9yRaqSdpVxfHV+B/CNUHZwjnXWf33Oep7ZgC09obaF0ZhXgTiTCZK nG4W3qo828ISjuZsLAl6K/8kSnhbNwx8bFmYcspOSfZ9+uBQzwigISRPA4Tid4zm QzjyBhiCr5K+ePjEy7Rnk1h/1Lner4uB69GFhq1LEQEgMzB2qumfLugjgN7lXzok uLj190xoplKZv4DX6gMHwR6YG/DOmPPIWPdtsUEJg2kBTsxWT1xSQPfxOUZ9AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUl/fFMNwHByFur4zymcB6E10pFjYwHwYDVR0j BBgwFoAUsJKKRdAU2NX61QMU6CgIbxKxVhAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 Y2QzMjNiZS04MzdkLTQyNDQtODQ2Yy03ZDIzOTNhOWEwMDkvMC9CMDkyOEE0NUQw MTREOEQ1RkFENTAzMTRFODI4MDg2RjEyQjE1NjEwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQjA5MjhBNDVEMDE0RDhENUZBRDUwMzE0RTgyODA4NkYxMkIx NTYxMC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vN2NkMzIzYmUtODM3ZC00MjQ0LTg0 NmMtN2QyMzkzYTlhMDA5LzAvQjA5MjhBNDVEMDE0RDhENUZBRDUwMzE0RTgyODA4 NkYxMkIxNTYxMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJTlpp3Ch+Q0Wy0tO6w/HCgC8iVraRrAZTYx v39VbzRgaJNNLz+aXiGW70Rf2KrlER0Liin3IFcAnDL/gFNvDYM+H++TEXf/gCkV HDuAxDMLBGQPphsDelTzp6Y4Kp2mBtzfEGr3XJ20/d1jHIFkNH8r190bIzEbP54Y Q/dePHampgCIgxwcEFLkx0zxeUV+dOFoUTPRAb1ndVUFWkFha+2mHouCrP+BUcqn gBGlqVIQ04u80Vz5OvibqtxBtPis+gTjTvpNdt42LkjnvHcM1rzAI05B9LImIDc1 3TpI/AL/12nLKB8vZgEIdY3l0kA/34fa7HYprNzQrb9FwQCXoek= -----END CERTIFICATE-----Generated at Tue Nov 4 08:03:31 2025 by rpki-client