$ rpki-client -vvf repo-rpki.idnic.net/repo/a990da49-9862-41de-833e-b304f0c1ae57/0/B70932ED6C688D58897E32E1D5C990B20910FF02.mft File: B70932ED6C688D58897E32E1D5C990B20910FF02.mft (raw, json) Hash identifier: J5xzLbcHRQdtNzwGKdWIiiUuHhXdhm7D349rC55TNy8= Subject key identifier: 3A:95:20:F6:D8:26:66:5E:09:8A:53:AF:2C:98:69:32:81:FA:6E:3B Authority key identifier: B7:09:32:ED:6C:68:8D:58:89:7E:32:E1:D5:C9:90:B2:09:10:FF:02 Certificate issuer: /CN=B70932ED6C688D58897E32E1D5C990B20910FF02 Certificate serial: 140656015E0D1F5840AB50BA71004C55F770EBD8 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B70932ED6C688D58897E32E1D5C990B20910FF02.cer Subject info access: rsync://repo-rpki.idnic.net/repo/a990da49-9862-41de-833e-b304f0c1ae57/0/B70932ED6C688D58897E32E1D5C990B20910FF02.mft Manifest number: 01C1 Signing time: Tue 04 Nov 2025 14:12:14 +0000 Manifest this update: Tue 04 Nov 2025 14:07:14 +0000 Manifest next update: Fri 07 Nov 2025 19:31:14 +0000 Files and hashes: 1: B70932ED6C688D58897E32E1D5C990B20910FF02.crl (hash: 4zaFZquNncjDOim1bW+KW5Hax/TxNZwadke5zPqEUvE=) 2: 3130332e3132392e34302e302f32332d3234203d3e20313335343738.roa (hash: b+1ENA1CQV0UHypRXPMfHhHTGiVgtOzzvTXY/wFcyPw=) 3: 3130332e3132392e34322e302f32332d3234203d3e20313335343738.roa (hash: D7YG7GtU8OdbibrqJfPY6iiVpoIqqq1mmvO/Oo1ZWAQ=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/a990da49-9862-41de-833e-b304f0c1ae57/0/B70932ED6C688D58897E32E1D5C990B20910FF02.crl rsync://repo-rpki.idnic.net/repo/a990da49-9862-41de-833e-b304f0c1ae57/0/B70932ED6C688D58897E32E1D5C990B20910FF02.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B70932ED6C688D58897E32E1D5C990B20910FF02.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 07 Nov 2025 13:50:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 14:06:56:01:5e:0d:1f:58:40:ab:50:ba:71:00:4c:55:f7:70:eb:d8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B70932ED6C688D58897E32E1D5C990B20910FF02 Validity Not Before: Nov 4 14:07:14 2025 GMT Not After : Nov 7 19:31:14 2025 GMT Subject: CN=3A9520F6D826665E098A53AF2C98693281FA6E3B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f9:18:6c:27:fc:5c:fe:a2:48:5c:d2:95:7f:bc: 8a:17:f6:a6:db:6e:aa:67:08:48:ba:d2:78:cb:1b: df:0c:93:c4:e6:0a:81:07:bd:6f:6a:ab:74:56:f4: 1a:8e:b4:5a:5c:c5:35:32:41:87:40:4e:42:48:c8: 9e:fb:95:f8:0f:12:69:1a:1b:09:c2:cd:9c:a2:93: 45:8c:16:3d:48:a6:9c:54:03:c0:58:8d:db:9e:de: 20:5b:d1:29:d3:e6:0b:43:67:72:92:c3:08:28:45: c8:2c:3f:2e:84:a6:3b:ff:2f:89:a6:07:1c:a1:00: b3:88:82:1f:8b:e6:c7:78:28:08:e1:82:a1:23:ea: 81:14:14:43:f3:59:ce:b5:37:f1:e9:27:a4:62:b5: 0c:bb:70:38:b8:b9:52:0c:73:6c:ac:84:d6:43:20: bd:48:f3:c1:cb:3b:aa:6c:8d:df:b6:d5:38:78:31: 2f:88:0c:8c:d3:e8:06:36:bb:bc:34:a5:d2:27:88: 8c:39:58:50:e6:14:db:9d:ec:00:90:a6:f8:96:60: 48:20:ae:d9:da:cf:1f:fb:fb:c7:6a:1f:17:bf:cd: e2:ac:4d:eb:79:70:35:c2:1e:80:2c:93:85:84:86: 7b:7a:86:55:be:60:43:da:7b:ac:c8:22:5e:bd:0d: 0f:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:95:20:F6:D8:26:66:5E:09:8A:53:AF:2C:98:69:32:81:FA:6E:3B X509v3 Authority Key Identifier: keyid:B7:09:32:ED:6C:68:8D:58:89:7E:32:E1:D5:C9:90:B2:09:10:FF:02 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/a990da49-9862-41de-833e-b304f0c1ae57/0/B70932ED6C688D58897E32E1D5C990B20910FF02.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B70932ED6C688D58897E32E1D5C990B20910FF02.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a990da49-9862-41de-833e-b304f0c1ae57/0/B70932ED6C688D58897E32E1D5C990B20910FF02.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8b:a3:5c:fb:1b:c6:f9:d5:47:ae:79:98:52:c6:d0:9c:4c:21: a6:81:3d:ab:eb:d4:bb:b6:ba:85:c6:11:41:57:65:42:d0:1d: 24:81:c8:18:36:cb:47:ba:cc:f8:ee:3f:c6:50:c6:74:20:2c: 46:1c:57:28:43:b7:70:23:9d:ee:31:db:74:d5:df:d1:a8:a2: e2:40:ba:7b:9d:4c:8a:cd:00:34:1e:1a:77:df:1a:de:56:85: ec:76:d7:5c:9e:bc:12:37:17:84:08:fd:61:44:85:a3:c0:81: d6:d8:1f:8e:7d:f3:03:49:26:70:b8:9b:8a:90:8b:5d:91:0d: dd:b4:f7:87:14:26:db:12:3d:4e:2d:ef:57:17:e8:91:aa:5b: 79:93:cb:76:0d:87:24:32:a1:c4:60:7e:0f:bf:c1:07:d2:31: 02:d2:07:e9:5d:c5:24:0b:6f:71:e1:cb:af:d4:1a:2c:97:5d: 58:70:8b:86:07:1d:25:39:50:8b:83:f3:80:85:9f:24:6f:d5: fd:4b:b2:01:7d:94:85:11:de:aa:1b:c9:a6:8a:20:de:a8:77: e7:e0:b8:1f:10:94:78:0a:49:f4:d9:cb:1d:19:4b:bc:0e:4d: 16:a6:e0:78:09:cf:e9:e8:4a:4f:3e:8d:4a:26:ff:3d:2c:c5: cf:ef:fc:d6 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUFAZWAV4NH1hAq1C6cQBMVfdw69gwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjcwOTMyRUQ2QzY4OEQ1ODg5N0UzMkUxRDVDOTkwQjIw OTEwRkYwMjAeFw0yNTExMDQxNDA3MTRaFw0yNTExMDcxOTMxMTRaMDMxMTAvBgNV BAMTKDNBOTUyMEY2RDgyNjY2NUUwOThBNTNBRjJDOTg2OTMyODFGQTZFM0IwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD5GGwn/Fz+okhc0pV/vIoX9qbb bqpnCEi60njLG98Mk8TmCoEHvW9qq3RW9BqOtFpcxTUyQYdATkJIyJ77lfgPEmka GwnCzZyik0WMFj1IppxUA8BYjdue3iBb0SnT5gtDZ3KSwwgoRcgsPy6Epjv/L4mm BxyhALOIgh+L5sd4KAjhgqEj6oEUFEPzWc61N/HpJ6RitQy7cDi4uVIMc2yshNZD IL1I88HLO6psjd+21Th4MS+IDIzT6AY2u7w0pdIniIw5WFDmFNud7ACQpviWYEgg rtnazx/7+8dqHxe/zeKsTet5cDXCHoAsk4WEhnt6hlW+YEPae6zIIl69DQ9PAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUOpUg9tgmZl4JilOvLJhpMoH6bjswHwYDVR0j BBgwFoAUtwky7WxojViJfjLh1cmQsgkQ/wIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h OTkwZGE0OS05ODYyLTQxZGUtODMzZS1iMzA0ZjBjMWFlNTcvMC9CNzA5MzJFRDZD Njg4RDU4ODk3RTMyRTFENUM5OTBCMjA5MTBGRjAyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQjcwOTMyRUQ2QzY4OEQ1ODg5N0UzMkUxRDVDOTkwQjIwOTEw RkYwMi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYTk5MGRhNDktOTg2Mi00MWRlLTgz M2UtYjMwNGYwYzFhZTU3LzAvQjcwOTMyRUQ2QzY4OEQ1ODg5N0UzMkUxRDVDOTkw QjIwOTEwRkYwMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIujXPsbxvnVR655mFLG0JxMIaaBPavr1Lu2 uoXGEUFXZULQHSSByBg2y0e6zPjuP8ZQxnQgLEYcVyhDt3Ajne4x23TV39GoouJA unudTIrNADQeGnffGt5Whex211yevBI3F4QI/WFEhaPAgdbYH4598wNJJnC4m4qQ i12RDd2094cUJtsSPU4t71cX6JGqW3mTy3YNhyQyocRgfg+/wQfSMQLSB+ldxSQL b3Hhy6/UGiyXXVhwi4YHHSU5UIuD84CFnyRv1f1LsgF9lIUR3qobyaaKIN6od+fg uB8QlHgKSfTZyx0ZS7wOTRam4HgJz+noSk8+jUom/z0sxc/v/NY= -----END CERTIFICATE-----Generated at Tue Nov 4 16:13:27 2025 by rpki-client