$ rpki-client -vvf repo-rpki.idnic.net/repo/85dd4f16-570e-4c8c-a992-db89ea3bad36/0/B2077B9BAF0BF3E5FCB84513B1D7445E30CE6582.mft File: B2077B9BAF0BF3E5FCB84513B1D7445E30CE6582.mft (raw, json) Hash identifier: zxBSYi6tHbJ45NdcSLoe7x79Yc3og4+diZPuslRnvlk= Subject key identifier: 30:FA:35:32:A1:D4:4E:45:54:BC:E7:13:16:B7:00:38:38:5D:0B:20 Authority key identifier: B2:07:7B:9B:AF:0B:F3:E5:FC:B8:45:13:B1:D7:44:5E:30:CE:65:82 Certificate issuer: /CN=B2077B9BAF0BF3E5FCB84513B1D7445E30CE6582 Certificate serial: 0ADDCA44E491D3663BC25941D2A2D7AA13A28F09 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B2077B9BAF0BF3E5FCB84513B1D7445E30CE6582.cer Subject info access: rsync://repo-rpki.idnic.net/repo/85dd4f16-570e-4c8c-a992-db89ea3bad36/0/B2077B9BAF0BF3E5FCB84513B1D7445E30CE6582.mft Manifest number: 0496 Signing time: Wed 05 Nov 2025 22:02:04 +0000 Manifest this update: Wed 05 Nov 2025 21:57:04 +0000 Manifest next update: Sun 09 Nov 2025 00:31:04 +0000 Files and hashes: 1: B2077B9BAF0BF3E5FCB84513B1D7445E30CE6582.crl (hash: qFUa4kqMEZrY/dOU2KakVcldtESDtY+mnmSAGXxYM2g=) 2: 3130332e3135372e362e302f32342d3234203d3e20313431313036.roa (hash: 2XQOc628Et0oqO8CO0VRKDq3/7F6VNJ+Q07NK/QPZuc=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/85dd4f16-570e-4c8c-a992-db89ea3bad36/0/B2077B9BAF0BF3E5FCB84513B1D7445E30CE6582.crl rsync://repo-rpki.idnic.net/repo/85dd4f16-570e-4c8c-a992-db89ea3bad36/0/B2077B9BAF0BF3E5FCB84513B1D7445E30CE6582.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B2077B9BAF0BF3E5FCB84513B1D7445E30CE6582.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 08 Nov 2025 23:17:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0a:dd:ca:44:e4:91:d3:66:3b:c2:59:41:d2:a2:d7:aa:13:a2:8f:09 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B2077B9BAF0BF3E5FCB84513B1D7445E30CE6582 Validity Not Before: Nov 5 21:57:04 2025 GMT Not After : Nov 9 00:31:04 2025 GMT Subject: CN=30FA3532A1D44E4554BCE71316B70038385D0B20 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:e7:c0:8d:e0:83:50:52:6b:d3:67:b4:f8:8b: c4:c0:64:a1:38:14:39:5c:5b:ef:7e:d7:2e:cf:b5: 27:e3:4f:ff:77:ff:65:98:85:43:67:e0:14:8d:df: b7:fb:44:76:26:ad:5a:68:d4:73:c5:02:64:ac:bc: 1c:0d:d8:fc:c8:fe:22:97:65:59:bb:c3:25:7d:6e: 4c:40:b2:17:55:a9:52:cb:86:bb:da:bc:dd:65:81: f9:f7:d2:bf:79:6e:ac:d1:fa:f0:ba:83:de:1e:0f: 9e:d6:93:3c:20:14:be:34:6f:41:a8:5b:a7:6d:07: 29:0e:98:c2:c6:2a:94:23:b1:a0:e5:94:5b:f5:c1: b3:3b:3a:a7:2f:03:72:e0:6c:ff:dd:f3:5c:1d:a8: 11:21:d8:db:af:f4:d2:05:d3:42:ce:6a:67:9c:c6: 8d:9b:98:52:9d:3a:f3:1e:e5:95:54:34:28:84:e2: f8:fb:93:b0:ad:a2:89:74:9a:52:d9:b7:41:aa:2a: a8:de:e6:24:15:8b:59:86:97:32:7b:88:3e:40:5d: ec:02:84:77:44:d3:be:32:ca:9c:ac:92:bd:20:af: c3:40:47:03:55:23:22:29:97:50:cb:4a:45:06:36: df:9e:81:4c:cd:a4:35:13:1a:a2:b6:4f:cc:6d:53: fe:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 30:FA:35:32:A1:D4:4E:45:54:BC:E7:13:16:B7:00:38:38:5D:0B:20 X509v3 Authority Key Identifier: keyid:B2:07:7B:9B:AF:0B:F3:E5:FC:B8:45:13:B1:D7:44:5E:30:CE:65:82 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/85dd4f16-570e-4c8c-a992-db89ea3bad36/0/B2077B9BAF0BF3E5FCB84513B1D7445E30CE6582.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B2077B9BAF0BF3E5FCB84513B1D7445E30CE6582.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/85dd4f16-570e-4c8c-a992-db89ea3bad36/0/B2077B9BAF0BF3E5FCB84513B1D7445E30CE6582.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b2:a7:a3:5d:2f:50:8e:6f:42:35:f1:7c:03:99:69:8a:30:1b: 3a:96:b4:0d:73:56:b1:18:4d:08:44:25:f6:fc:bd:7e:33:b3: fe:5c:d1:81:7e:9c:a5:38:b8:d1:c2:8f:4b:c5:84:ae:02:6f: c2:82:d3:b0:34:f0:1e:c4:c2:12:87:88:f7:86:8a:2e:3d:c0: 80:66:f7:5a:05:f9:7c:e8:53:b7:9f:a5:ef:2e:a4:34:9e:76: c1:ba:59:4a:11:20:2a:27:ba:dd:72:67:0b:6a:26:2c:03:cc: c9:e8:34:6e:c9:1e:86:d1:ee:bf:6e:b0:ed:c2:83:85:ef:c2: 70:47:d8:25:c3:10:19:25:3c:2f:10:4f:89:71:9e:58:9e:1c: 30:49:8a:e1:37:d1:0f:d0:78:dc:84:8a:d1:dc:2a:31:d4:47: 37:e4:0c:3c:d1:07:ad:dd:c2:a2:75:f8:7e:15:ba:1d:e7:2e: 2a:2f:8e:c2:db:b8:ab:34:91:3a:cc:bb:e0:49:14:32:b2:85: 72:71:e9:5d:6b:51:16:0e:90:c5:ad:59:b0:f0:64:50:29:37: cc:ee:28:dc:bf:06:b7:bf:62:48:8b:6e:9c:1d:5c:d0:29:66: 90:40:a1:4c:11:d8:4f:15:6a:de:c9:45:97:68:22:8c:2c:69: 15:d8:3d:f3 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUCt3KROSR02Y7wllB0qLXqhOijwkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjIwNzdCOUJBRjBCRjNFNUZDQjg0NTEzQjFENzQ0NUUz MENFNjU4MjAeFw0yNTExMDUyMTU3MDRaFw0yNTExMDkwMDMxMDRaMDMxMTAvBgNV BAMTKDMwRkEzNTMyQTFENDRFNDU1NEJDRTcxMzE2QjcwMDM4Mzg1RDBCMjAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC658CN4INQUmvTZ7T4i8TAZKE4 FDlcW+9+1y7PtSfjT/93/2WYhUNn4BSN37f7RHYmrVpo1HPFAmSsvBwN2PzI/iKX ZVm7wyV9bkxAshdVqVLLhrvavN1lgfn30r95bqzR+vC6g94eD57WkzwgFL40b0Go W6dtBykOmMLGKpQjsaDllFv1wbM7OqcvA3LgbP/d81wdqBEh2Nuv9NIF00LOamec xo2bmFKdOvMe5ZVUNCiE4vj7k7Ctool0mlLZt0GqKqje5iQVi1mGlzJ7iD5AXewC hHdE074yypyskr0gr8NARwNVIyIpl1DLSkUGNt+egUzNpDUTGqK2T8xtU/5TAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUMPo1MqHUTkVUvOcTFrcAODhdCyAwHwYDVR0j BBgwFoAUsgd7m68L8+X8uEUTsddEXjDOZYIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 NWRkNGYxNi01NzBlLTRjOGMtYTk5Mi1kYjg5ZWEzYmFkMzYvMC9CMjA3N0I5QkFG MEJGM0U1RkNCODQ1MTNCMUQ3NDQ1RTMwQ0U2NTgyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQjIwNzdCOUJBRjBCRjNFNUZDQjg0NTEzQjFENzQ0NUUzMENF NjU4Mi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vODVkZDRmMTYtNTcwZS00YzhjLWE5 OTItZGI4OWVhM2JhZDM2LzAvQjIwNzdCOUJBRjBCRjNFNUZDQjg0NTEzQjFENzQ0 NUUzMENFNjU4Mi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALKno10vUI5vQjXxfAOZaYowGzqWtA1zVrEY TQhEJfb8vX4zs/5c0YF+nKU4uNHCj0vFhK4Cb8KC07A08B7EwhKHiPeGii49wIBm 91oF+XzoU7efpe8upDSedsG6WUoRIConut1yZwtqJiwDzMnoNG7JHobR7r9usO3C g4XvwnBH2CXDEBklPC8QT4lxnlieHDBJiuE30Q/QeNyEitHcKjHURzfkDDzRB63d wqJ1+H4Vuh3nLiovjsLbuKs0kTrMu+BJFDKyhXJx6V1rURYOkMWtWbDwZFApN8zu KNy/Bre/YkiLbpwdXNApZpBAoUwR2E8Vat7JRZdoIowsaRXYPfM= -----END CERTIFICATE-----Generated at Wed Nov 5 23:39:26 2025 by rpki-client