$ rpki-client -vvf repo-rpki.idnic.net/repo/a63097f0-3978-49ce-b69c-4b20b4dcfb7e/0/B0734A32D13A96FCB3FDF982C2EEC500150411CA.mft File: B0734A32D13A96FCB3FDF982C2EEC500150411CA.mft (raw, json) Hash identifier: 0ZeL+FwKxixSn6esyEHQtE2oVwOcmtfoHGfs0IVo87o= Subject key identifier: 5A:2B:3F:31:1A:4B:97:BD:8C:14:AF:67:18:B5:71:A6:0B:4A:55:CD Authority key identifier: B0:73:4A:32:D1:3A:96:FC:B3:FD:F9:82:C2:EE:C5:00:15:04:11:CA Certificate issuer: /CN=B0734A32D13A96FCB3FDF982C2EEC500150411CA Certificate serial: 5335CF0B4A7FADB3D79DB8E1E4BC58341E73A9B7 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B0734A32D13A96FCB3FDF982C2EEC500150411CA.cer Subject info access: rsync://repo-rpki.idnic.net/repo/a63097f0-3978-49ce-b69c-4b20b4dcfb7e/0/B0734A32D13A96FCB3FDF982C2EEC500150411CA.mft Manifest number: 022C Signing time: Sun 02 Nov 2025 13:01:12 +0000 Manifest this update: Sun 02 Nov 2025 12:56:12 +0000 Manifest next update: Wed 05 Nov 2025 15:37:12 +0000 Files and hashes: 1: B0734A32D13A96FCB3FDF982C2EEC500150411CA.crl (hash: R7K4+N9i8O0++F4v1wzjmBUwMTVqU6m8VYJ3YwjP4Dw=) 2: 3130332e3138372e3232362e302f32332d3234203d3e20313439373238.roa (hash: fcX6dDB/6jZr5p1excLhOSLezwfpNz/DNvOt6VHyTLo=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/a63097f0-3978-49ce-b69c-4b20b4dcfb7e/0/B0734A32D13A96FCB3FDF982C2EEC500150411CA.crl rsync://repo-rpki.idnic.net/repo/a63097f0-3978-49ce-b69c-4b20b4dcfb7e/0/B0734A32D13A96FCB3FDF982C2EEC500150411CA.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B0734A32D13A96FCB3FDF982C2EEC500150411CA.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 05 Nov 2025 15:37:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 53:35:cf:0b:4a:7f:ad:b3:d7:9d:b8:e1:e4:bc:58:34:1e:73:a9:b7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B0734A32D13A96FCB3FDF982C2EEC500150411CA Validity Not Before: Nov 2 12:56:12 2025 GMT Not After : Nov 5 15:37:12 2025 GMT Subject: CN=5A2B3F311A4B97BD8C14AF6718B571A60B4A55CD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:55:84:cc:29:aa:0d:30:20:bd:23:66:2c:2c: 14:79:a5:92:21:6e:a2:e8:91:be:85:8b:90:04:7f: f8:aa:59:9b:cb:53:b6:18:7f:68:30:55:3f:f7:42: b6:83:b7:46:e6:d1:91:76:ca:bf:90:ff:a4:08:dc: 55:13:8e:cc:e4:02:fc:99:4e:40:7e:c1:4c:05:36: 45:0f:f5:9e:2c:49:53:27:ec:9a:ba:bf:ea:ac:8a: f7:92:00:a5:b9:9f:9f:8e:12:7c:dc:8a:90:e2:5e: 61:cf:d1:2c:2d:33:38:ce:69:fe:3f:45:5d:6c:65: 79:84:f7:5a:3a:b1:42:c5:8e:b8:b9:c1:cf:18:3c: 84:6a:8f:cc:df:7a:fc:7c:7d:11:5e:ca:03:57:c2: 92:8f:4b:94:0f:2f:62:01:ec:08:f4:bd:5d:61:25: eb:2a:43:2e:ae:91:8f:29:31:c6:d4:d0:5a:89:8b: 6e:d2:69:28:3a:23:fc:dc:59:02:26:a0:95:c2:6f: 46:9d:56:15:a1:11:2f:e2:88:36:84:fb:1e:e7:ec: 5e:29:54:be:95:fe:82:2f:a1:d7:7b:8a:ed:1a:d1: af:76:26:1b:19:25:57:44:10:c3:70:ab:f9:92:9a: ca:ae:40:b7:b8:d7:f5:08:a9:38:dd:96:5f:28:67: 6b:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:2B:3F:31:1A:4B:97:BD:8C:14:AF:67:18:B5:71:A6:0B:4A:55:CD X509v3 Authority Key Identifier: keyid:B0:73:4A:32:D1:3A:96:FC:B3:FD:F9:82:C2:EE:C5:00:15:04:11:CA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/a63097f0-3978-49ce-b69c-4b20b4dcfb7e/0/B0734A32D13A96FCB3FDF982C2EEC500150411CA.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B0734A32D13A96FCB3FDF982C2EEC500150411CA.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a63097f0-3978-49ce-b69c-4b20b4dcfb7e/0/B0734A32D13A96FCB3FDF982C2EEC500150411CA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 63:d1:f2:a5:e3:8c:cd:53:22:62:b5:1f:b1:c2:8e:12:71:84: 6c:1e:89:99:5e:68:56:d8:58:ac:04:48:ae:86:12:5d:8b:c5: a4:74:6b:1f:0b:2b:73:6c:16:ed:12:c0:0c:98:e4:cc:81:67: 1c:34:85:b0:1d:99:ff:15:79:a2:b3:eb:97:9b:72:fc:e0:d7: 3e:ca:e2:2e:b2:36:47:4b:e7:fa:61:d5:48:77:ab:dc:6a:d0: 0d:c8:91:71:f1:9e:68:a6:57:6c:e9:33:0c:8b:d5:08:37:28: e1:6c:f2:0b:b8:b0:80:eb:56:58:9b:d0:ae:58:91:2c:68:fd: fe:7a:23:45:23:eb:dd:57:71:9d:1e:96:d6:58:66:56:5d:1a: 46:90:71:ca:db:03:12:d6:04:0f:5b:f7:5d:4c:67:84:f2:92: cb:c9:35:31:8d:84:ba:4f:43:14:22:43:f1:8b:17:ea:07:0f: 15:27:89:e5:6b:04:eb:22:7a:9c:9f:d6:02:63:af:eb:98:48: 67:cf:7e:1f:e8:c1:ca:ca:9f:51:bf:0a:95:22:7d:6b:c4:77: 0a:40:cd:f9:29:99:5d:2f:80:79:9e:aa:7b:91:61:9a:39:6f: c0:fc:4c:cc:d8:e4:05:3a:9e:e5:44:7c:fc:0b:88:59:26:13: ba:e0:8d:55 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUUzXPC0p/rbPXnbjh5LxYNB5zqbcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjA3MzRBMzJEMTNBOTZGQ0IzRkRGOTgyQzJFRUM1MDAx NTA0MTFDQTAeFw0yNTExMDIxMjU2MTJaFw0yNTExMDUxNTM3MTJaMDMxMTAvBgNV BAMTKDVBMkIzRjMxMUE0Qjk3QkQ4QzE0QUY2NzE4QjU3MUE2MEI0QTU1Q0QwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCcVYTMKaoNMCC9I2YsLBR5pZIh bqLokb6Fi5AEf/iqWZvLU7YYf2gwVT/3QraDt0bm0ZF2yr+Q/6QI3FUTjszkAvyZ TkB+wUwFNkUP9Z4sSVMn7Jq6v+qsiveSAKW5n5+OEnzcipDiXmHP0SwtMzjOaf4/ RV1sZXmE91o6sULFjri5wc8YPIRqj8zfevx8fRFeygNXwpKPS5QPL2IB7Aj0vV1h JesqQy6ukY8pMcbU0FqJi27SaSg6I/zcWQImoJXCb0adVhWhES/iiDaE+x7n7F4p VL6V/oIvodd7iu0a0a92JhsZJVdEEMNwq/mSmsquQLe41/UIqTjdll8oZ2tTAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUWis/MRpLl72MFK9nGLVxpgtKVc0wHwYDVR0j BBgwFoAUsHNKMtE6lvyz/fmCwu7FABUEEcowDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h NjMwOTdmMC0zOTc4LTQ5Y2UtYjY5Yy00YjIwYjRkY2ZiN2UvMC9CMDczNEEzMkQx M0E5NkZDQjNGREY5ODJDMkVFQzUwMDE1MDQxMUNBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQjA3MzRBMzJEMTNBOTZGQ0IzRkRGOTgyQzJFRUM1MDAxNTA0 MTFDQS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYTYzMDk3ZjAtMzk3OC00OWNlLWI2 OWMtNGIyMGI0ZGNmYjdlLzAvQjA3MzRBMzJEMTNBOTZGQ0IzRkRGOTgyQzJFRUM1 MDAxNTA0MTFDQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGPR8qXjjM1TImK1H7HCjhJxhGweiZleaFbY WKwESK6GEl2LxaR0ax8LK3NsFu0SwAyY5MyBZxw0hbAdmf8VeaKz65ebcvzg1z7K 4i6yNkdL5/ph1Uh3q9xq0A3IkXHxnmimV2zpMwyL1Qg3KOFs8gu4sIDrVlib0K5Y kSxo/f56I0Uj691XcZ0eltZYZlZdGkaQccrbAxLWBA9b911MZ4TyksvJNTGNhLpP QxQiQ/GLF+oHDxUnieVrBOsiepyf1gJjr+uYSGfPfh/owcrKn1G/CpUifWvEdwpA zfkpmV0vgHmeqnuRYZo5b8D8TMzY5AU6nuVEfPwLiFkmE7rgjVU= -----END CERTIFICATE-----Generated at Tue Nov 4 02:20:26 2025 by rpki-client