$ rpki-client -vvf repo-rpki.idnic.net/repo/a8dc13ff-5b10-44a6-b6f3-8f035e5897d8/0/B914C61A5DB1C65E66CE5AF64C3E20C201962B5B.mft File: B914C61A5DB1C65E66CE5AF64C3E20C201962B5B.mft (raw, json) Hash identifier: 1p83Ea9QWWqWS//WhM7cZhMTZ8eowAE0gsl0fOYlvEY= Subject key identifier: 4F:53:5C:06:D1:22:73:A4:9B:57:02:6F:D8:73:71:09:42:AB:02:2B Authority key identifier: B9:14:C6:1A:5D:B1:C6:5E:66:CE:5A:F6:4C:3E:20:C2:01:96:2B:5B Certificate issuer: /CN=B914C61A5DB1C65E66CE5AF64C3E20C201962B5B Certificate serial: 5104782F309457B8764EE5F2D0B2C4B15DAE71DD Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/B914C61A5DB1C65E66CE5AF64C3E20C201962B5B.cer Subject info access: rsync://repo-rpki.idnic.net/repo/a8dc13ff-5b10-44a6-b6f3-8f035e5897d8/0/B914C61A5DB1C65E66CE5AF64C3E20C201962B5B.mft Manifest number: CC Signing time: Tue 04 Nov 2025 16:31:43 +0000 Manifest this update: Tue 04 Nov 2025 16:26:43 +0000 Manifest next update: Fri 07 Nov 2025 18:54:43 +0000 Files and hashes: 1: B914C61A5DB1C65E66CE5AF64C3E20C201962B5B.crl (hash: dJ8yQKtzsMGzEIS8hzbZXNpCk0DRT7X0Gif9u1RbmBE=) 2: 3135372e31302e3137392e302f32342d3234203d3e20313532333436.roa (hash: I8nLPluTJWLYyGtu9yBeYoUlVfCol4rqRzuAbdB/G2g=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/a8dc13ff-5b10-44a6-b6f3-8f035e5897d8/0/B914C61A5DB1C65E66CE5AF64C3E20C201962B5B.crl rsync://repo-rpki.idnic.net/repo/a8dc13ff-5b10-44a6-b6f3-8f035e5897d8/0/B914C61A5DB1C65E66CE5AF64C3E20C201962B5B.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/B914C61A5DB1C65E66CE5AF64C3E20C201962B5B.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 07 Nov 2025 10:49:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 51:04:78:2f:30:94:57:b8:76:4e:e5:f2:d0:b2:c4:b1:5d:ae:71:dd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B914C61A5DB1C65E66CE5AF64C3E20C201962B5B Validity Not Before: Nov 4 16:26:43 2025 GMT Not After : Nov 7 18:54:43 2025 GMT Subject: CN=4F535C06D12273A49B57026FD873710942AB022B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:74:c6:5f:48:3a:73:29:39:fa:b0:91:ea:cc: 8b:37:b8:a8:a7:ac:ec:08:3b:33:36:64:ce:cc:3e: 9e:42:cd:2a:7e:9d:df:77:7d:5b:f3:8b:14:8c:36: c9:fe:78:03:1b:cf:f1:8e:09:66:6e:cf:f1:41:bb: 69:f7:52:48:33:d6:6d:75:ad:c7:9a:21:97:64:9a: 20:c3:d3:47:4c:c8:51:69:35:9c:ad:bc:8f:2f:c0: 78:69:3f:28:cc:b6:0e:ae:1e:12:38:27:fd:49:b8: 37:f9:2b:8b:ce:eb:82:30:ce:bd:77:5d:f4:6f:da: 09:28:7e:9c:4c:96:fa:0d:e2:36:69:a9:5d:d2:a0: ad:b4:91:5a:20:06:19:b1:63:93:0c:d3:2a:2b:0e: 84:c8:3f:32:01:3c:0d:9c:b4:9b:b0:db:7c:18:5c: da:6c:02:49:35:b9:bf:02:dd:88:b1:01:da:54:1d: 55:cd:76:54:98:d5:f4:22:6e:50:7a:d3:75:cb:89: 61:55:f1:f1:ab:fb:bf:2f:41:11:59:75:ab:f6:09: b9:08:cc:c4:f7:30:ac:36:38:ee:2f:3b:cc:ce:6f: b1:88:43:b0:c4:29:2c:b6:4a:c2:0b:bf:de:1d:e7: 1e:63:19:0e:20:6d:8f:0c:f0:fb:4f:16:49:f1:97: 7f:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4F:53:5C:06:D1:22:73:A4:9B:57:02:6F:D8:73:71:09:42:AB:02:2B X509v3 Authority Key Identifier: keyid:B9:14:C6:1A:5D:B1:C6:5E:66:CE:5A:F6:4C:3E:20:C2:01:96:2B:5B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/a8dc13ff-5b10-44a6-b6f3-8f035e5897d8/0/B914C61A5DB1C65E66CE5AF64C3E20C201962B5B.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/B914C61A5DB1C65E66CE5AF64C3E20C201962B5B.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a8dc13ff-5b10-44a6-b6f3-8f035e5897d8/0/B914C61A5DB1C65E66CE5AF64C3E20C201962B5B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b2:15:06:34:a9:17:d2:8c:6c:cd:bf:36:ba:fb:fe:b6:e9:56: f8:af:cd:73:78:04:37:3a:47:64:48:64:87:dd:42:e0:1b:8f: 2b:05:95:8b:32:a3:2f:a6:9f:57:a9:e3:85:c4:95:4a:55:13: f4:7d:a3:73:3d:45:cc:c2:d7:63:bf:0e:b0:73:e9:58:70:3a: 1e:6a:df:39:0c:61:5f:00:86:f1:d3:05:02:a1:81:69:84:31: 76:19:9a:ea:40:4e:30:cb:c0:99:10:8e:ab:87:96:64:12:d9: 3f:1b:07:be:94:af:13:2e:c4:3c:fa:a7:0e:3e:4b:30:5e:b2: a3:7d:73:c4:96:c3:00:39:f4:76:81:5d:15:45:dc:c3:24:67: 45:11:80:37:3d:7d:2a:ec:27:a5:06:9d:ef:67:7d:80:1a:df: cf:af:71:db:75:46:9b:c8:66:0f:fd:06:05:19:ac:79:9b:b5: 94:6a:17:eb:8e:d3:fb:aa:57:dd:c6:70:8a:90:c5:52:1f:51: 12:c7:b6:ad:4d:8c:be:e3:f5:09:fa:15:ac:89:d5:e0:d9:6e: cb:b4:08:bd:cc:7c:91:4c:bf:42:46:72:dd:d3:72:1a:e2:04: ff:29:33:4d:f9:09:ae:56:0e:2f:48:87:48:db:30:82:86:0c: e1:43:70:c2 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUUQR4LzCUV7h2TuXy0LLEsV2ucd0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjkxNEM2MUE1REIxQzY1RTY2Q0U1QUY2NEMzRTIwQzIw MTk2MkI1QjAeFw0yNTExMDQxNjI2NDNaFw0yNTExMDcxODU0NDNaMDMxMTAvBgNV BAMTKDRGNTM1QzA2RDEyMjczQTQ5QjU3MDI2RkQ4NzM3MTA5NDJBQjAyMkIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDSdMZfSDpzKTn6sJHqzIs3uKin rOwIOzM2ZM7MPp5CzSp+nd93fVvzixSMNsn+eAMbz/GOCWZuz/FBu2n3Ukgz1m11 rceaIZdkmiDD00dMyFFpNZytvI8vwHhpPyjMtg6uHhI4J/1JuDf5K4vO64Iwzr13 XfRv2gkofpxMlvoN4jZpqV3SoK20kVogBhmxY5MM0yorDoTIPzIBPA2ctJuw23wY XNpsAkk1ub8C3YixAdpUHVXNdlSY1fQiblB603XLiWFV8fGr+78vQRFZdav2CbkI zMT3MKw2OO4vO8zOb7GIQ7DEKSy2SsILv94d5x5jGQ4gbY8M8PtPFknxl3/XAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUT1NcBtEic6SbVwJv2HNxCUKrAiswHwYDVR0j BBgwFoAUuRTGGl2xxl5mzlr2TD4gwgGWK1swDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h OGRjMTNmZi01YjEwLTQ0YTYtYjZmMy04ZjAzNWU1ODk3ZDgvMC9COTE0QzYxQTVE QjFDNjVFNjZDRTVBRjY0QzNFMjBDMjAxOTYyQjVCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvQjkxNEM2MUE1REIxQzY1RTY2Q0U1QUY2NEMzRTIwQzIwMTk2 MkI1Qi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYThkYzEzZmYtNWIxMC00NGE2LWI2 ZjMtOGYwMzVlNTg5N2Q4LzAvQjkxNEM2MUE1REIxQzY1RTY2Q0U1QUY2NEMzRTIw QzIwMTk2MkI1Qi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALIVBjSpF9KMbM2/Nrr7/rbpVvivzXN4BDc6 R2RIZIfdQuAbjysFlYsyoy+mn1ep44XElUpVE/R9o3M9RczC12O/DrBz6VhwOh5q 3zkMYV8AhvHTBQKhgWmEMXYZmupATjDLwJkQjquHlmQS2T8bB76UrxMuxDz6pw4+ SzBesqN9c8SWwwA59HaBXRVF3MMkZ0URgDc9fSrsJ6UGne9nfYAa38+vcdt1RpvI Zg/9BgUZrHmbtZRqF+uO0/uqV93GcIqQxVIfURLHtq1NjL7j9Qn6FayJ1eDZbsu0 CL3MfJFMv0JGct3TchriBP8pM035Ca5WDi9Ih0jbMIKGDOFDcMI= -----END CERTIFICATE-----Generated at Wed Nov 5 00:29:56 2025 by rpki-client