$ rpki-client -vvf repo-rpki.idnic.net/repo/81cf5657-ecdc-4d97-a59c-b676ce53c8a1/0/B0D5A05340C55C7E2CDC83ADCE4774AF0CC184C1.mft File: B0D5A05340C55C7E2CDC83ADCE4774AF0CC184C1.mft (raw, json) Hash identifier: MfWll+f727LBEkvugfEzQ6X7SJ0Zs7AcBhiUvPcSaGs= Subject key identifier: B4:AF:51:08:81:DB:A8:3E:C5:A6:69:1D:51:91:07:DB:2F:6B:85:6F Authority key identifier: B0:D5:A0:53:40:C5:5C:7E:2C:DC:83:AD:CE:47:74:AF:0C:C1:84:C1 Certificate issuer: /CN=B0D5A05340C55C7E2CDC83ADCE4774AF0CC184C1 Certificate serial: 6569D96806BEFB8E4B644BEF79D5B6246F8F28C6 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B0D5A05340C55C7E2CDC83ADCE4774AF0CC184C1.cer Subject info access: rsync://repo-rpki.idnic.net/repo/81cf5657-ecdc-4d97-a59c-b676ce53c8a1/0/B0D5A05340C55C7E2CDC83ADCE4774AF0CC184C1.mft Manifest number: 0315 Signing time: Mon 03 Nov 2025 19:21:02 +0000 Manifest this update: Mon 03 Nov 2025 19:16:02 +0000 Manifest next update: Fri 07 Nov 2025 05:00:02 +0000 Files and hashes: 1: B0D5A05340C55C7E2CDC83ADCE4774AF0CC184C1.crl (hash: 1VZkG/jQrYx7vxWKreu69TL4h8Hmh0cmwyMekDbn344=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/81cf5657-ecdc-4d97-a59c-b676ce53c8a1/0/B0D5A05340C55C7E2CDC83ADCE4774AF0CC184C1.crl rsync://repo-rpki.idnic.net/repo/81cf5657-ecdc-4d97-a59c-b676ce53c8a1/0/B0D5A05340C55C7E2CDC83ADCE4774AF0CC184C1.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B0D5A05340C55C7E2CDC83ADCE4774AF0CC184C1.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 07 Nov 2025 05:00:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 65:69:d9:68:06:be:fb:8e:4b:64:4b:ef:79:d5:b6:24:6f:8f:28:c6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B0D5A05340C55C7E2CDC83ADCE4774AF0CC184C1 Validity Not Before: Nov 3 19:16:02 2025 GMT Not After : Nov 7 05:00:02 2025 GMT Subject: CN=B4AF510881DBA83EC5A6691D519107DB2F6B856F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:34:33:a6:6f:46:73:ea:73:a0:13:ed:3d:1c: d8:2d:8a:81:93:27:ef:63:01:1e:71:0e:36:b3:1a: 68:89:41:7a:fb:d2:33:07:94:a0:14:f3:af:37:b5: dc:05:b3:29:8a:be:31:7e:74:1d:72:db:b4:b4:7b: de:92:f8:e4:22:d5:29:a2:c1:45:1b:a5:18:5a:59: a9:a3:8f:94:9b:65:5d:17:b0:af:8f:16:6b:8d:eb: c3:69:f5:ce:2e:f1:44:9f:35:ef:bb:2d:13:33:ac: fd:69:4e:f1:6a:76:3f:ef:89:11:63:a9:f4:a4:41: ae:70:db:b7:0c:49:87:d0:db:8f:25:f8:8b:b1:a3: 1f:0a:e2:8f:5c:e4:02:71:7c:a2:da:f3:1b:7d:e9: 76:aa:58:8e:1f:20:d3:b0:22:3b:ea:8a:c5:fc:11: 48:eb:39:c5:ae:46:4f:d0:7b:0f:a2:d1:cf:ef:4b: 28:1d:12:79:a7:88:9e:7a:88:12:94:b4:1c:fb:3f: a7:51:bf:ca:c7:15:16:52:2e:b7:66:af:38:ed:35: 2d:9a:1c:32:c8:89:3e:a1:8b:c6:44:9e:a8:11:bb: 00:c9:d2:89:e5:6f:02:d1:98:ed:f8:41:0f:27:dc: 22:cd:1b:ca:40:c8:09:b5:ba:6c:26:d7:6b:24:3f: 43:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B4:AF:51:08:81:DB:A8:3E:C5:A6:69:1D:51:91:07:DB:2F:6B:85:6F X509v3 Authority Key Identifier: keyid:B0:D5:A0:53:40:C5:5C:7E:2C:DC:83:AD:CE:47:74:AF:0C:C1:84:C1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/81cf5657-ecdc-4d97-a59c-b676ce53c8a1/0/B0D5A05340C55C7E2CDC83ADCE4774AF0CC184C1.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B0D5A05340C55C7E2CDC83ADCE4774AF0CC184C1.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/81cf5657-ecdc-4d97-a59c-b676ce53c8a1/0/B0D5A05340C55C7E2CDC83ADCE4774AF0CC184C1.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9b:97:5f:0d:15:19:2d:11:57:22:e3:98:32:f5:a3:51:1e:c9: ff:51:69:97:0e:78:cc:93:7d:aa:d7:31:c5:f5:a6:c1:60:f4: f7:d4:47:bf:68:90:3d:a4:8b:29:3b:d3:c0:67:a9:64:42:33: 6a:de:bc:5a:cb:48:29:0f:ea:02:25:26:5b:12:ee:35:50:6b: 60:38:a6:95:f9:f7:61:b5:05:62:65:be:99:31:92:37:7a:ec: 2a:dd:43:f0:00:34:ed:1e:e6:f7:71:d0:1c:d2:0a:41:39:a1: 6b:d3:bd:6d:51:21:1c:5a:db:5a:43:ca:a2:1c:1e:ad:6f:ba: fa:1e:22:99:86:24:16:9d:da:7e:13:a3:d8:d6:ac:48:b3:a8: f2:40:93:fa:8a:58:1b:ac:e8:06:22:e4:b9:0a:56:75:e2:1c: 77:01:03:85:52:01:a4:65:35:96:07:f9:bf:a6:08:92:4e:0a: a9:57:fa:83:92:0f:b4:e6:94:54:9e:1a:fb:43:7b:e3:4f:90: 02:4b:1f:ae:1b:63:47:1c:94:66:e1:42:cb:27:63:10:46:17: 6f:1c:40:82:7f:54:11:6d:b5:b6:e7:c2:58:2c:6e:c5:15:1e: 0f:5c:c3:72:a8:31:13:c2:83:7b:8a:1e:a3:7a:0b:0c:f5:82: 88:f0:53:4d -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUZWnZaAa++45LZEvvedW2JG+PKMYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjBENUEwNTM0MEM1NUM3RTJDREM4M0FEQ0U0Nzc0QUYw Q0MxODRDMTAeFw0yNTExMDMxOTE2MDJaFw0yNTExMDcwNTAwMDJaMDMxMTAvBgNV BAMTKEI0QUY1MTA4ODFEQkE4M0VDNUE2NjkxRDUxOTEwN0RCMkY2Qjg1NkYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCqNDOmb0Zz6nOgE+09HNgtioGT J+9jAR5xDjazGmiJQXr70jMHlKAU8683tdwFsymKvjF+dB1y27S0e96S+OQi1Smi wUUbpRhaWamjj5SbZV0XsK+PFmuN68Np9c4u8USfNe+7LRMzrP1pTvFqdj/viRFj qfSkQa5w27cMSYfQ248l+Iuxox8K4o9c5AJxfKLa8xt96XaqWI4fINOwIjvqisX8 EUjrOcWuRk/Qew+i0c/vSygdEnmniJ56iBKUtBz7P6dRv8rHFRZSLrdmrzjtNS2a HDLIiT6hi8ZEnqgRuwDJ0onlbwLRmO34QQ8n3CLNG8pAyAm1umwm12skP0N9AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUtK9RCIHbqD7FpmkdUZEH2y9rhW8wHwYDVR0j BBgwFoAUsNWgU0DFXH4s3IOtzkd0rwzBhMEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 MWNmNTY1Ny1lY2RjLTRkOTctYTU5Yy1iNjc2Y2U1M2M4YTEvMC9CMEQ1QTA1MzQw QzU1QzdFMkNEQzgzQURDRTQ3NzRBRjBDQzE4NEMxLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQjBENUEwNTM0MEM1NUM3RTJDREM4M0FEQ0U0Nzc0QUYwQ0Mx ODRDMS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vODFjZjU2NTctZWNkYy00ZDk3LWE1 OWMtYjY3NmNlNTNjOGExLzAvQjBENUEwNTM0MEM1NUM3RTJDREM4M0FEQ0U0Nzc0 QUYwQ0MxODRDMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJuXXw0VGS0RVyLjmDL1o1Eeyf9RaZcOeMyT farXMcX1psFg9PfUR79okD2kiyk708BnqWRCM2revFrLSCkP6gIlJlsS7jVQa2A4 ppX592G1BWJlvpkxkjd67CrdQ/AANO0e5vdx0BzSCkE5oWvTvW1RIRxa21pDyqIc Hq1vuvoeIpmGJBad2n4To9jWrEizqPJAk/qKWBus6AYi5LkKVnXiHHcBA4VSAaRl NZYH+b+mCJJOCqlX+oOSD7TmlFSeGvtDe+NPkAJLH64bY0cclGbhQssnYxBGF28c QIJ/VBFttbbnwlgsbsUVHg9cw3KoMRPCg3uKHqN6Cwz1gojwU00= -----END CERTIFICATE-----Generated at Thu Nov 6 01:50:05 2025 by rpki-client