$ rpki-client -vvf repo-rpki.idnic.net/repo/8dcf4067-a69d-4908-bee8-b4655bdc15f8/0/B197F427572524588487CFDB163A9E512FAE4DF2.mft File: B197F427572524588487CFDB163A9E512FAE4DF2.mft (raw, json) Hash identifier: djR8UDxbkXQx3OUpLLnVBNJmDTf7lEa7RhAkZHgIm5g= Subject key identifier: A5:71:09:93:93:AB:1D:24:4E:F1:36:DB:F4:79:23:8E:02:2D:10:66 Authority key identifier: B1:97:F4:27:57:25:24:58:84:87:CF:DB:16:3A:9E:51:2F:AE:4D:F2 Certificate issuer: /CN=B197F427572524588487CFDB163A9E512FAE4DF2 Certificate serial: 3999057C0A367E8FEF86D8B0F095A6E05AF02C9F Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B197F427572524588487CFDB163A9E512FAE4DF2.cer Subject info access: rsync://repo-rpki.idnic.net/repo/8dcf4067-a69d-4908-bee8-b4655bdc15f8/0/B197F427572524588487CFDB163A9E512FAE4DF2.mft Manifest number: 0240 Signing time: Mon 03 Nov 2025 13:31:22 +0000 Manifest this update: Mon 03 Nov 2025 13:26:22 +0000 Manifest next update: Thu 06 Nov 2025 21:48:22 +0000 Files and hashes: 1: 323430363a346563303a3a2f33322d3332203d3e20313430343735.roa (hash: sqH8mgq0fr+XiznMLTzogmtodA1+q341U0FlkHOzY5k=) 2: 3130332e3135332e3234362e302f32342d3234203d3e20313430343735.roa (hash: BU1Q0ryHM0MlXG1Q7vZvhi4oAbOwc3sWBEiOeckA5Ms=) 3: 3130332e3135332e3234372e302f32342d3234203d3e20313430343735.roa (hash: IlIKis9hrjcqU4gajZ2m+r4qTrp6BInf4S11M61jB+A=) 4: B197F427572524588487CFDB163A9E512FAE4DF2.crl (hash: Rh0TlMB924hTRgTKJlxvCCk4k/bIjIUxaNqx8x4Hq80=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/8dcf4067-a69d-4908-bee8-b4655bdc15f8/0/B197F427572524588487CFDB163A9E512FAE4DF2.crl rsync://repo-rpki.idnic.net/repo/8dcf4067-a69d-4908-bee8-b4655bdc15f8/0/B197F427572524588487CFDB163A9E512FAE4DF2.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B197F427572524588487CFDB163A9E512FAE4DF2.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 06 Nov 2025 21:48:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 39:99:05:7c:0a:36:7e:8f:ef:86:d8:b0:f0:95:a6:e0:5a:f0:2c:9f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B197F427572524588487CFDB163A9E512FAE4DF2 Validity Not Before: Nov 3 13:26:22 2025 GMT Not After : Nov 6 21:48:22 2025 GMT Subject: CN=A571099393AB1D244EF136DBF479238E022D1066 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:22:d6:c8:17:27:85:ab:24:ec:46:05:bf:5b: 96:5d:3b:52:11:0e:88:fa:39:b6:7d:da:26:f0:94: 94:90:93:c3:0f:a3:71:5c:e4:d3:b5:17:67:2e:23: cd:74:68:2d:5b:cb:e0:f8:2e:0d:67:e5:bf:7d:35: de:ca:dd:a9:16:43:0e:01:1f:4d:64:ef:ed:5b:f6: 24:e5:e0:5a:b4:db:a0:a1:4e:b8:0c:d4:e7:4f:06: fd:ee:3a:8f:e1:88:1b:26:9c:68:ff:3d:51:51:85: a4:b9:dc:75:d1:ce:24:5b:42:81:94:31:6a:1c:20: 88:20:b6:82:63:e0:33:c6:c6:01:fd:df:77:18:83: 38:bb:a4:7d:d6:85:aa:86:cf:04:1b:c3:d2:19:43: 03:f9:ed:b0:c0:2b:f1:46:a7:b7:ef:69:fd:1a:8e: e5:c2:4d:15:e1:d2:12:e3:a7:a5:e3:cb:c8:51:99: 6c:cb:1b:71:09:b9:7f:39:bc:dc:6d:75:90:d4:8f: dd:7f:fd:81:ad:83:c8:d6:25:33:5c:4e:87:ae:90: 89:6d:dc:d6:6d:f4:61:92:c6:7e:fb:d3:72:fd:5b: 52:3f:5a:96:7b:7f:33:6e:03:1d:83:5f:a7:91:d0: c8:e3:82:61:82:d4:bb:50:54:70:cd:a9:c7:f2:6b: 5c:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:71:09:93:93:AB:1D:24:4E:F1:36:DB:F4:79:23:8E:02:2D:10:66 X509v3 Authority Key Identifier: keyid:B1:97:F4:27:57:25:24:58:84:87:CF:DB:16:3A:9E:51:2F:AE:4D:F2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/8dcf4067-a69d-4908-bee8-b4655bdc15f8/0/B197F427572524588487CFDB163A9E512FAE4DF2.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B197F427572524588487CFDB163A9E512FAE4DF2.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/8dcf4067-a69d-4908-bee8-b4655bdc15f8/0/B197F427572524588487CFDB163A9E512FAE4DF2.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3e:42:80:49:5a:e2:d9:f4:31:05:4d:0a:ca:3b:24:73:bc:b6: ea:4a:e7:4e:be:d3:74:db:22:5c:73:a2:30:2e:7b:06:cd:60: 97:b0:78:43:1b:7e:8e:0c:d3:e9:fd:a4:79:f0:ca:92:ea:7c: ee:ce:02:8d:ac:29:9c:88:90:96:26:32:d7:b5:f5:54:56:b7: 8d:63:19:30:32:37:00:eb:8c:a0:45:5b:fe:49:e9:1c:e3:69: 32:1e:a9:12:41:de:80:60:09:2f:88:48:52:32:ab:f3:0c:10: 6c:e1:9b:c3:ba:6c:c3:12:50:a1:ef:0f:d0:5c:6d:61:ea:ac: 84:9f:da:11:72:66:67:98:21:89:68:44:d3:49:bf:96:fe:a3: d3:82:06:e5:ee:f9:6e:ca:0e:62:15:94:fb:de:12:38:a2:2f: 31:37:47:de:59:69:19:cf:0e:2e:4b:bd:83:c2:95:9d:cd:c1: 45:e8:0a:68:ec:ac:04:78:9f:6a:b1:fc:24:73:f4:a7:92:c9: 8f:af:41:5d:e4:87:2e:6e:03:7c:38:7c:34:22:e9:1a:f1:69: f2:c9:b4:2b:b7:4d:a7:eb:0b:38:72:ca:53:09:d7:ef:63:5d: c1:7a:93:1c:95:7e:9d:77:fc:5a:0b:a7:32:07:f5:23:4b:96: 30:d2:64:fb -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUOZkFfAo2fo/vhtiw8JWm4FrwLJ8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjE5N0Y0Mjc1NzI1MjQ1ODg0ODdDRkRCMTYzQTlFNTEy RkFFNERGMjAeFw0yNTExMDMxMzI2MjJaFw0yNTExMDYyMTQ4MjJaMDMxMTAvBgNV BAMTKEE1NzEwOTkzOTNBQjFEMjQ0RUYxMzZEQkY0NzkyMzhFMDIyRDEwNjYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDjItbIFyeFqyTsRgW/W5ZdO1IR Doj6ObZ92ibwlJSQk8MPo3Fc5NO1F2cuI810aC1by+D4Lg1n5b99Nd7K3akWQw4B H01k7+1b9iTl4Fq026ChTrgM1OdPBv3uOo/hiBsmnGj/PVFRhaS53HXRziRbQoGU MWocIIggtoJj4DPGxgH933cYgzi7pH3WhaqGzwQbw9IZQwP57bDAK/FGp7fvaf0a juXCTRXh0hLjp6Xjy8hRmWzLG3EJuX85vNxtdZDUj91//YGtg8jWJTNcToeukIlt 3NZt9GGSxn7703L9W1I/WpZ7fzNuAx2DX6eR0MjjgmGC1LtQVHDNqcfya1wHAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUpXEJk5OrHSRO8Tbb9HkjjgItEGYwHwYDVR0j BBgwFoAUsZf0J1clJFiEh8/bFjqeUS+uTfIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 ZGNmNDA2Ny1hNjlkLTQ5MDgtYmVlOC1iNDY1NWJkYzE1ZjgvMC9CMTk3RjQyNzU3 MjUyNDU4ODQ4N0NGREIxNjNBOUU1MTJGQUU0REYyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQjE5N0Y0Mjc1NzI1MjQ1ODg0ODdDRkRCMTYzQTlFNTEyRkFF NERGMi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOGRjZjQwNjctYTY5ZC00OTA4LWJl ZTgtYjQ2NTViZGMxNWY4LzAvQjE5N0Y0Mjc1NzI1MjQ1ODg0ODdDRkRCMTYzQTlF NTEyRkFFNERGMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAD5CgEla4tn0MQVNCso7JHO8tupK506+03Tb IlxzojAuewbNYJeweEMbfo4M0+n9pHnwypLqfO7OAo2sKZyIkJYmMte19VRWt41j GTAyNwDrjKBFW/5J6RzjaTIeqRJB3oBgCS+ISFIyq/MMEGzhm8O6bMMSUKHvD9Bc bWHqrISf2hFyZmeYIYloRNNJv5b+o9OCBuXu+W7KDmIVlPveEjiiLzE3R95ZaRnP Di5LvYPClZ3NwUXoCmjsrAR4n2qx/CRz9KeSyY+vQV3khy5uA3w4fDQi6RrxafLJ tCu3TafrCzhyylMJ1+9jXcF6kxyVfp13/FoLpzIH9SNLljDSZPs= -----END CERTIFICATE-----Generated at Wed Nov 5 01:33:39 2025 by rpki-client