$ rpki-client -vvf repo-rpki.idnic.net/repo/9d1619cb-c01c-4614-863e-ce288d7ba765/0/B972F073B8AF26B8533E97AAFBAEC17FCEFD6F8C.mft File: B972F073B8AF26B8533E97AAFBAEC17FCEFD6F8C.mft (raw, json) Hash identifier: +VQ2d8OC3lUMJegIevW9XOFmjyFycWS1cLc3IRL+UQY= Subject key identifier: DA:90:03:3E:A7:FC:4F:01:F5:8D:8A:4E:44:13:E8:47:64:14:A7:52 Authority key identifier: B9:72:F0:73:B8:AF:26:B8:53:3E:97:AA:FB:AE:C1:7F:CE:FD:6F:8C Certificate issuer: /CN=B972F073B8AF26B8533E97AAFBAEC17FCEFD6F8C Certificate serial: 26D2B914AD93A4F7FF5D9096FF5CC3ABA11F4BA1 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B972F073B8AF26B8533E97AAFBAEC17FCEFD6F8C.cer Subject info access: rsync://repo-rpki.idnic.net/repo/9d1619cb-c01c-4614-863e-ce288d7ba765/0/B972F073B8AF26B8533E97AAFBAEC17FCEFD6F8C.mft Manifest number: 0395 Signing time: Mon 03 Nov 2025 08:01:59 +0000 Manifest this update: Mon 03 Nov 2025 07:56:59 +0000 Manifest next update: Thu 06 Nov 2025 08:23:59 +0000 Files and hashes: 1: 3130332e3135352e3135372e302f32342d3234203d3e20313431303632.roa (hash: 0/uMdmxlRYv0BxLj1kLNukE06046JVFdcxHugW59xeM=) 2: 3130332e3135352e3135362e302f32342d3234203d3e20313431303632.roa (hash: neE3zrlksOzJV8H0qe9TgTIuCvuChMBCqnrQKxlvrQU=) 3: B972F073B8AF26B8533E97AAFBAEC17FCEFD6F8C.crl (hash: 1ofQlI6fA8zP9iQqF6tyCJbNoyNnHXw9bxHbyaX11A8=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/9d1619cb-c01c-4614-863e-ce288d7ba765/0/B972F073B8AF26B8533E97AAFBAEC17FCEFD6F8C.crl rsync://repo-rpki.idnic.net/repo/9d1619cb-c01c-4614-863e-ce288d7ba765/0/B972F073B8AF26B8533E97AAFBAEC17FCEFD6F8C.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B972F073B8AF26B8533E97AAFBAEC17FCEFD6F8C.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 06 Nov 2025 08:23:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 26:d2:b9:14:ad:93:a4:f7:ff:5d:90:96:ff:5c:c3:ab:a1:1f:4b:a1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B972F073B8AF26B8533E97AAFBAEC17FCEFD6F8C Validity Not Before: Nov 3 07:56:59 2025 GMT Not After : Nov 6 08:23:59 2025 GMT Subject: CN=DA90033EA7FC4F01F58D8A4E4413E8476414A752 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:1f:c4:29:08:a5:23:15:8f:44:50:be:07:a1: 5d:8f:44:a8:10:a6:fc:9f:24:92:39:68:43:6c:1e: 6e:07:9c:e6:c9:84:e6:d2:38:01:c9:4f:74:e7:25: 30:7f:78:ad:8b:4a:1a:1b:26:f9:63:ac:6f:d9:ac: 09:0f:29:d9:c8:a5:5f:3d:63:86:98:b1:b9:17:3a: bc:81:20:47:ac:5c:ba:39:aa:59:68:1f:65:3f:56: 21:28:ce:ed:77:bc:5a:f4:a5:cc:c6:16:58:d3:b0: bf:6a:00:38:b3:a2:e1:31:b9:5c:9e:ef:1f:a5:5d: ca:64:90:9a:c6:6f:5b:0e:e9:45:ea:05:2d:56:b9: 05:a8:fa:01:a1:3d:e0:05:96:29:13:a0:41:cd:76: 73:fd:a3:8f:aa:48:e1:b3:81:cd:d7:32:ac:b9:56: 47:9a:0b:9c:b1:50:cf:0a:20:e8:95:e9:d9:ba:70: 38:e2:d8:80:b6:52:a0:d7:01:fb:85:f0:c7:dd:98: 85:a2:7d:13:a4:ec:cf:82:bb:1d:e9:5b:c5:f4:b8: 8a:d9:1d:f1:bf:9c:cf:cc:13:0d:3b:9c:c3:c5:5c: c3:0d:b1:15:81:1d:a0:1e:dd:1b:ed:c2:11:34:a1: fe:65:b0:52:23:ed:77:f2:77:d7:07:00:25:5a:43: c9:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DA:90:03:3E:A7:FC:4F:01:F5:8D:8A:4E:44:13:E8:47:64:14:A7:52 X509v3 Authority Key Identifier: keyid:B9:72:F0:73:B8:AF:26:B8:53:3E:97:AA:FB:AE:C1:7F:CE:FD:6F:8C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/9d1619cb-c01c-4614-863e-ce288d7ba765/0/B972F073B8AF26B8533E97AAFBAEC17FCEFD6F8C.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B972F073B8AF26B8533E97AAFBAEC17FCEFD6F8C.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/9d1619cb-c01c-4614-863e-ce288d7ba765/0/B972F073B8AF26B8533E97AAFBAEC17FCEFD6F8C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 47:09:73:47:e2:87:38:45:ee:11:5d:db:60:e2:16:3d:45:06: b7:4c:b5:e8:a2:f7:2b:09:dd:49:47:49:d9:34:75:16:bb:8e: f9:8b:41:2b:c7:2d:59:6b:c1:a7:8f:ac:4c:f3:0a:ef:94:97: 10:bf:5b:f3:66:6a:40:0b:d6:b6:2d:ff:be:98:b7:d1:7b:e4: ad:29:93:14:85:52:6f:25:02:f6:d2:04:f2:35:5c:97:d0:62: 67:da:17:6b:f3:fe:ef:f5:f2:e9:45:da:97:4c:51:2c:b7:db: 52:84:8d:6d:20:79:94:b5:4c:cc:0d:5f:7d:94:ed:82:a9:c3: 0a:dc:2d:78:a4:70:20:d3:71:cc:c8:16:3e:59:f2:73:0f:26: f0:f8:ab:1f:18:87:70:88:34:45:3f:58:75:d9:59:1d:65:8b: 17:76:d1:38:d9:f4:65:2e:70:9e:04:31:66:48:cc:a8:7f:d9: dc:aa:98:dd:7b:f0:76:33:65:3a:17:68:76:19:f9:77:6d:2f: 8b:f6:c1:51:cd:eb:da:38:b1:e2:2f:b5:16:40:b0:e9:7a:96: 0b:eb:83:db:82:97:ce:ae:a5:1f:b0:f4:b5:95:d5:75:e2:4e: f2:3a:81:86:f4:86:90:be:2e:9d:58:83:5b:86:2c:ee:df:c0: 93:ea:1d:fb -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUJtK5FK2TpPf/XZCW/1zDq6EfS6EwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjk3MkYwNzNCOEFGMjZCODUzM0U5N0FBRkJBRUMxN0ZD RUZENkY4QzAeFw0yNTExMDMwNzU2NTlaFw0yNTExMDYwODIzNTlaMDMxMTAvBgNV BAMTKERBOTAwMzNFQTdGQzRGMDFGNThEOEE0RTQ0MTNFODQ3NjQxNEE3NTIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDDH8QpCKUjFY9EUL4HoV2PRKgQ pvyfJJI5aENsHm4HnObJhObSOAHJT3TnJTB/eK2LShobJvljrG/ZrAkPKdnIpV89 Y4aYsbkXOryBIEesXLo5qlloH2U/ViEozu13vFr0pczGFljTsL9qADizouExuVye 7x+lXcpkkJrGb1sO6UXqBS1WuQWo+gGhPeAFlikToEHNdnP9o4+qSOGzgc3XMqy5 VkeaC5yxUM8KIOiV6dm6cDji2IC2UqDXAfuF8MfdmIWifROk7M+Cux3pW8X0uIrZ HfG/nM/MEw07nMPFXMMNsRWBHaAe3RvtwhE0of5lsFIj7Xfyd9cHACVaQ8kdAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU2pADPqf8TwH1jYpORBPoR2QUp1IwHwYDVR0j BBgwFoAUuXLwc7ivJrhTPpeq+67Bf879b4wwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 ZDE2MTljYi1jMDFjLTQ2MTQtODYzZS1jZTI4OGQ3YmE3NjUvMC9COTcyRjA3M0I4 QUYyNkI4NTMzRTk3QUFGQkFFQzE3RkNFRkQ2RjhDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQjk3MkYwNzNCOEFGMjZCODUzM0U5N0FBRkJBRUMxN0ZDRUZE NkY4Qy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOWQxNjE5Y2ItYzAxYy00NjE0LTg2 M2UtY2UyODhkN2JhNzY1LzAvQjk3MkYwNzNCOEFGMjZCODUzM0U5N0FBRkJBRUMx N0ZDRUZENkY4Qy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEcJc0fihzhF7hFd22DiFj1FBrdMteii9ysJ 3UlHSdk0dRa7jvmLQSvHLVlrwaePrEzzCu+UlxC/W/NmakAL1rYt/76Yt9F75K0p kxSFUm8lAvbSBPI1XJfQYmfaF2vz/u/18ulF2pdMUSy321KEjW0geZS1TMwNX32U 7YKpwwrcLXikcCDTcczIFj5Z8nMPJvD4qx8Yh3CINEU/WHXZWR1lixd20TjZ9GUu cJ4EMWZIzKh/2dyqmN178HYzZToXaHYZ+XdtL4v2wVHN69o4seIvtRZAsOl6lgvr g9uCl86upR+w9LWV1XXiTvI6gYb0hpC+Lp1Yg1uGLO7fwJPqHfs= -----END CERTIFICATE-----Generated at Tue Nov 4 16:45:19 2025 by rpki-client