$ rpki-client -vvf repo-rpki.idnic.net/repo/9036e07c-8283-43d3-9164-3e0e6cacf499/0/B563D708A094B24FC361EDD11C91EE7979AB0471.mft File: B563D708A094B24FC361EDD11C91EE7979AB0471.mft (raw, json) Hash identifier: 42yOfaczYOh6jdPwQ4XewiKXf6CBAad8sAK6jBAgH6I= Subject key identifier: D7:45:FA:46:30:19:F2:33:AD:1C:F9:35:04:D5:F0:0B:3E:2D:38:A6 Authority key identifier: B5:63:D7:08:A0:94:B2:4F:C3:61:ED:D1:1C:91:EE:79:79:AB:04:71 Certificate issuer: /CN=B563D708A094B24FC361EDD11C91EE7979AB0471 Certificate serial: 037D37536F837C9843F06EDAB7A82134CFD58267 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B563D708A094B24FC361EDD11C91EE7979AB0471.cer Subject info access: rsync://repo-rpki.idnic.net/repo/9036e07c-8283-43d3-9164-3e0e6cacf499/0/B563D708A094B24FC361EDD11C91EE7979AB0471.mft Manifest number: 04A1 Signing time: Sat 01 Nov 2025 20:01:09 +0000 Manifest this update: Sat 01 Nov 2025 19:56:09 +0000 Manifest next update: Wed 05 Nov 2025 07:46:09 +0000 Files and hashes: 1: 3130332e3135382e3233342e302f32342d3234203d3e20313431383938.roa (hash: DC1WzlYzoLRsGjbVoxuqgztNqkwtiD8GKj7bCCztmOc=) 2: 3130332e3135382e3233352e302f32342d3234203d3e20313431383938.roa (hash: 1oRmxMWEmNWfiObwNq2iDBD7Utfj4IUiGgv5WjZ9wmA=) 3: 3130332e3135382e3233342e302f32332d3233203d3e20313431313332.roa (hash: VerBshfKSbDiG4ilBKzo2++FEnDv7+7VU/P4UtUMaSI=) 4: 3130332e3135382e3233342e302f32332d3233203d3e20313431383938.roa (hash: Fqgr+r9WG3m7zmpO3rSwg44QNE4blwlf0zSotQ3DNUo=) 5: B563D708A094B24FC361EDD11C91EE7979AB0471.crl (hash: 8CY+0h3EdZhOWXUQNbOKd22XljwCGXbp0bqsOVUpdl4=) 6: 3130332e3135382e3233342e302f32342d3234203d3e20313431313332.roa (hash: LFN1lWDxbZdPzNeB6sbVhDvJLLQcsJmGzjZZihSsn1w=) 7: 3130332e3135382e3233352e302f32342d3234203d3e20313431313332.roa (hash: kpMxQvSYLU76Gm9LQAAGgZvfd3otWzRiAJhO9y4zBsk=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/9036e07c-8283-43d3-9164-3e0e6cacf499/0/B563D708A094B24FC361EDD11C91EE7979AB0471.crl rsync://repo-rpki.idnic.net/repo/9036e07c-8283-43d3-9164-3e0e6cacf499/0/B563D708A094B24FC361EDD11C91EE7979AB0471.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B563D708A094B24FC361EDD11C91EE7979AB0471.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 05 Nov 2025 07:46:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 03:7d:37:53:6f:83:7c:98:43:f0:6e:da:b7:a8:21:34:cf:d5:82:67 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B563D708A094B24FC361EDD11C91EE7979AB0471 Validity Not Before: Nov 1 19:56:09 2025 GMT Not After : Nov 5 07:46:09 2025 GMT Subject: CN=D745FA463019F233AD1CF93504D5F00B3E2D38A6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:51:ea:3f:8a:03:60:b8:2d:92:60:8b:9a:9a: 4a:d0:81:85:85:49:be:7a:9a:bb:21:37:8a:ab:06: c3:06:3f:fe:8d:9f:56:9e:11:0f:4e:dc:9f:c9:a5: 83:15:92:6e:7c:99:ae:b7:d9:f6:2f:b6:3d:39:37: 74:5d:f9:5b:06:d0:e1:e7:bb:59:58:2b:86:44:f9: 7b:46:ba:89:9a:51:41:f0:72:d5:4f:f9:7c:b5:54: 5b:63:fe:b5:57:1b:99:db:aa:f7:7e:dc:ba:60:b2: e7:a8:f6:5b:7c:57:c9:23:78:fc:81:91:8a:3d:c9: e2:25:ac:4c:54:e2:ec:60:a9:25:8b:5d:ed:3d:66: 79:83:f3:b2:22:1a:2d:c2:8e:b9:99:d3:b6:f5:03: 0e:d8:26:86:d7:1a:33:ec:5a:83:06:aa:23:be:b9: f9:84:f1:5b:40:1a:84:34:1e:f6:3c:89:a1:31:eb: a7:87:71:c0:b4:e5:93:d8:b0:b7:b8:16:80:a3:28: 89:c6:a4:8c:73:8f:b2:f7:0d:07:ab:02:00:aa:85: fd:84:c5:26:c1:38:c2:19:a6:ce:5d:66:3f:a5:5b: 44:c9:91:3a:27:2f:5a:2f:35:78:c4:14:3e:db:16: 50:d9:a1:c3:73:c7:77:ee:6e:6a:58:ee:bd:78:08: f5:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D7:45:FA:46:30:19:F2:33:AD:1C:F9:35:04:D5:F0:0B:3E:2D:38:A6 X509v3 Authority Key Identifier: keyid:B5:63:D7:08:A0:94:B2:4F:C3:61:ED:D1:1C:91:EE:79:79:AB:04:71 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/9036e07c-8283-43d3-9164-3e0e6cacf499/0/B563D708A094B24FC361EDD11C91EE7979AB0471.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B563D708A094B24FC361EDD11C91EE7979AB0471.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/9036e07c-8283-43d3-9164-3e0e6cacf499/0/B563D708A094B24FC361EDD11C91EE7979AB0471.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 07:bb:8a:2f:3c:59:0a:ef:c3:da:25:99:f0:c7:38:70:84:62: 30:a7:81:c2:cb:88:ba:1e:29:e5:7e:62:71:78:9b:52:3b:92: 1d:77:01:58:16:56:11:59:01:c9:22:70:6d:7e:2b:9d:4b:5d: b0:d4:4e:07:40:c5:44:b5:d5:30:08:2b:c3:7e:fb:c4:fd:e5: 45:ae:42:f2:fa:62:91:b0:df:10:59:35:01:40:49:56:c5:b3: 5e:e3:22:d6:b1:8e:65:10:7f:06:76:d4:96:41:af:ec:be:b4: 83:12:ec:63:ae:81:1b:b1:f3:08:83:41:f7:02:ef:69:08:4b: 80:3d:e4:d7:e4:e2:ce:57:16:d3:c4:8c:02:90:58:52:57:05: e6:63:4a:ce:8d:3e:cf:5b:00:ff:76:18:2c:1f:85:ea:6a:b2: 8b:df:94:0c:ce:90:2a:37:a6:31:5a:08:6a:c6:e9:78:e5:a6: fb:22:ea:34:68:a6:d7:71:04:11:ee:39:70:86:0c:95:e8:9c: 31:27:c0:5c:37:f3:73:f6:1a:dd:10:43:bb:24:fc:01:e1:36: 0e:99:32:42:d6:f0:85:19:e0:5f:c4:83:30:9d:52:86:2a:35: 9d:6d:e2:67:11:63:93:b5:86:82:14:ba:1a:2b:35:72:df:29: 95:e9:99:d3 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUA303U2+DfJhD8G7at6ghNM/VgmcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjU2M0Q3MDhBMDk0QjI0RkMzNjFFREQxMUM5MUVFNzk3 OUFCMDQ3MTAeFw0yNTExMDExOTU2MDlaFw0yNTExMDUwNzQ2MDlaMDMxMTAvBgNV BAMTKEQ3NDVGQTQ2MzAxOUYyMzNBRDFDRjkzNTA0RDVGMDBCM0UyRDM4QTYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDRUeo/igNguC2SYIuamkrQgYWF Sb56mrshN4qrBsMGP/6Nn1aeEQ9O3J/JpYMVkm58ma632fYvtj05N3Rd+VsG0OHn u1lYK4ZE+XtGuomaUUHwctVP+Xy1VFtj/rVXG5nbqvd+3Lpgsueo9lt8V8kjePyB kYo9yeIlrExU4uxgqSWLXe09ZnmD87IiGi3CjrmZ07b1Aw7YJobXGjPsWoMGqiO+ ufmE8VtAGoQ0HvY8iaEx66eHccC05ZPYsLe4FoCjKInGpIxzj7L3DQerAgCqhf2E xSbBOMIZps5dZj+lW0TJkTonL1ovNXjEFD7bFlDZocNzx3fubmpY7r14CPW7AgMB AAGjggI8MIICODAdBgNVHQ4EFgQU10X6RjAZ8jOtHPk1BNXwCz4tOKYwHwYDVR0j BBgwFoAUtWPXCKCUsk/DYe3RHJHueXmrBHEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 MDM2ZTA3Yy04MjgzLTQzZDMtOTE2NC0zZTBlNmNhY2Y0OTkvMC9CNTYzRDcwOEEw OTRCMjRGQzM2MUVERDExQzkxRUU3OTc5QUIwNDcxLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQjU2M0Q3MDhBMDk0QjI0RkMzNjFFREQxMUM5MUVFNzk3OUFC MDQ3MS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOTAzNmUwN2MtODI4My00M2QzLTkx NjQtM2UwZTZjYWNmNDk5LzAvQjU2M0Q3MDhBMDk0QjI0RkMzNjFFREQxMUM5MUVF Nzk3OUFCMDQ3MS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAe7ii88WQrvw9olmfDHOHCEYjCngcLLiLoe KeV+YnF4m1I7kh13AVgWVhFZAckicG1+K51LXbDUTgdAxUS11TAIK8N++8T95UWu QvL6YpGw3xBZNQFASVbFs17jItaxjmUQfwZ21JZBr+y+tIMS7GOugRux8wiDQfcC 72kIS4A95Nfk4s5XFtPEjAKQWFJXBeZjSs6NPs9bAP92GCwfhepqsovflAzOkCo3 pjFaCGrG6Xjlpvsi6jRoptdxBBHuOXCGDJXonDEnwFw383P2Gt0QQ7sk/AHhNg6Z MkLW8IUZ4F/EgzCdUoYqNZ1t4mcRY5O1hoIUuhorNXLfKZXpmdM= -----END CERTIFICATE-----Generated at Tue Nov 4 02:20:36 2025 by rpki-client