$ rpki-client -vvf repo-rpki.idnic.net/repo/b193018e-718f-4757-a087-93ad77b81821/0/0F21C3EBD50FC8F43F8CA7A87114156F7425DC9D.mft File: 0F21C3EBD50FC8F43F8CA7A87114156F7425DC9D.mft (raw, json) Hash identifier: /9VpYMYM3W0TXPnATnZMc4cVILELwZ91dW66xpSyGkA= Subject key identifier: B2:7F:4A:94:ED:1D:EB:9A:2E:67:08:D2:BD:15:5E:FB:5B:65:AA:34 Authority key identifier: 0F:21:C3:EB:D5:0F:C8:F4:3F:8C:A7:A8:71:14:15:6F:74:25:DC:9D Certificate issuer: /CN=0F21C3EBD50FC8F43F8CA7A87114156F7425DC9D Certificate serial: 6694283CB76CA2462E847617059F08F39BA116C7 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0F21C3EBD50FC8F43F8CA7A87114156F7425DC9D.cer Subject info access: rsync://repo-rpki.idnic.net/repo/b193018e-718f-4757-a087-93ad77b81821/0/0F21C3EBD50FC8F43F8CA7A87114156F7425DC9D.mft Manifest number: 01B1 Signing time: Mon 03 Nov 2025 13:31:45 +0000 Manifest this update: Mon 03 Nov 2025 13:26:45 +0000 Manifest next update: Thu 06 Nov 2025 22:20:45 +0000 Files and hashes: 1: 3130332e3132362e3139352e302f32342d3234203d3e20313530353438.roa (hash: 2Aghezf2z7P1qZlnkDBkv3wvvtG5c1l4SMgNAsKv8N0=) 2: 0F21C3EBD50FC8F43F8CA7A87114156F7425DC9D.crl (hash: CxshJyV+r7xg0Shuvb51zDlzZCQVm6xg1jKHVZQflNI=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/b193018e-718f-4757-a087-93ad77b81821/0/0F21C3EBD50FC8F43F8CA7A87114156F7425DC9D.crl rsync://repo-rpki.idnic.net/repo/b193018e-718f-4757-a087-93ad77b81821/0/0F21C3EBD50FC8F43F8CA7A87114156F7425DC9D.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0F21C3EBD50FC8F43F8CA7A87114156F7425DC9D.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 06 Nov 2025 22:20:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 66:94:28:3c:b7:6c:a2:46:2e:84:76:17:05:9f:08:f3:9b:a1:16:c7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0F21C3EBD50FC8F43F8CA7A87114156F7425DC9D Validity Not Before: Nov 3 13:26:45 2025 GMT Not After : Nov 6 22:20:45 2025 GMT Subject: CN=B27F4A94ED1DEB9A2E6708D2BD155EFB5B65AA34 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:3d:9b:52:e3:09:f6:97:fb:22:b4:47:2f:80: ba:d0:78:ee:a3:ee:88:d3:a8:36:f9:ee:5c:b5:00: 8a:a1:b7:13:f2:c3:32:76:e0:1e:57:33:1b:ae:35: f8:59:c1:2a:af:8c:6a:89:ba:a9:dc:67:96:e9:7c: bc:1a:90:05:2e:37:97:9a:da:cc:8e:a0:fa:65:b4: 3a:4a:96:90:82:7d:11:82:bf:f1:eb:b3:ad:70:39: 4f:1b:6a:43:c5:9f:e6:c7:16:98:e2:32:58:7d:09: b1:30:39:bb:9d:35:5f:fc:0a:82:e3:c6:84:c8:1c: 7e:f2:18:65:88:8d:b6:74:bb:3e:ee:0c:6b:d3:3b: 39:06:cd:64:d6:45:09:3a:65:63:7c:53:f9:7d:a7: e8:05:c9:0c:ac:cf:62:ce:08:d3:d2:3c:06:5b:e5: 5a:62:69:02:f0:c7:43:49:31:91:4a:8d:54:35:1e: b4:d5:d3:5b:fc:0c:04:a9:cb:3d:93:10:8d:70:7b: 73:ec:41:df:a8:c2:73:31:62:af:b7:26:49:5a:a2: 78:2b:be:5a:d6:b5:22:58:7d:2a:16:ed:bc:92:e3: 8c:0f:92:25:a9:03:29:dc:08:bf:ca:26:66:51:6d: 16:d8:12:df:08:19:71:51:33:9f:d5:b4:ed:c4:aa: ee:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B2:7F:4A:94:ED:1D:EB:9A:2E:67:08:D2:BD:15:5E:FB:5B:65:AA:34 X509v3 Authority Key Identifier: keyid:0F:21:C3:EB:D5:0F:C8:F4:3F:8C:A7:A8:71:14:15:6F:74:25:DC:9D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/b193018e-718f-4757-a087-93ad77b81821/0/0F21C3EBD50FC8F43F8CA7A87114156F7425DC9D.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0F21C3EBD50FC8F43F8CA7A87114156F7425DC9D.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/b193018e-718f-4757-a087-93ad77b81821/0/0F21C3EBD50FC8F43F8CA7A87114156F7425DC9D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b6:0f:9f:0b:8e:3f:50:7c:e4:cc:9a:b7:b5:4c:1c:53:73:a0: 6d:39:2d:9b:3c:84:e6:94:2b:45:ac:09:60:ee:8d:ea:bb:0d: 08:a0:dc:dc:fe:c5:a1:cc:e1:5a:25:4d:cb:d6:fa:16:93:1f: a9:d4:3d:bd:ca:fb:6f:72:55:71:af:6e:a3:8b:3f:ca:5a:3f: ba:89:1a:d4:50:5d:98:06:f9:8e:b1:53:0b:5b:f0:70:51:d5: 12:24:1c:5d:84:80:93:30:40:68:73:58:ca:8c:d3:cf:7e:7d: ad:41:07:ff:72:35:6a:ff:fa:5a:cc:dc:6a:3d:fb:d9:00:8d: 33:1f:27:0c:00:46:8d:ce:b8:13:99:f5:ac:1f:39:14:a0:25: 99:e7:df:48:7f:81:b1:50:87:7e:15:f4:2d:3a:c8:61:30:6b: 49:be:b7:8f:c7:ac:02:f9:02:69:b0:e0:7c:9e:c0:5b:57:5f: f8:04:be:57:f1:ce:f3:6a:88:9b:10:1d:b2:3a:10:bc:05:2e: 29:f9:18:de:56:42:eb:48:46:4b:92:0f:de:6a:2b:8f:03:aa: 94:4c:ca:9b:6e:78:f1:4a:ed:66:52:c1:e0:2a:f1:ce:34:fb: c6:bd:f4:b8:55:b9:91:ff:58:9f:dd:92:ad:76:60:39:6f:57: c5:41:e0:1e -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUZpQoPLdsokYuhHYXBZ8I85uhFscwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMEYyMUMzRUJENTBGQzhGNDNGOENBN0E4NzExNDE1NkY3 NDI1REM5RDAeFw0yNTExMDMxMzI2NDVaFw0yNTExMDYyMjIwNDVaMDMxMTAvBgNV BAMTKEIyN0Y0QTk0RUQxREVCOUEyRTY3MDhEMkJEMTU1RUZCNUI2NUFBMzQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDhPZtS4wn2l/sitEcvgLrQeO6j 7ojTqDb57ly1AIqhtxPywzJ24B5XMxuuNfhZwSqvjGqJuqncZ5bpfLwakAUuN5ea 2syOoPpltDpKlpCCfRGCv/Hrs61wOU8bakPFn+bHFpjiMlh9CbEwObudNV/8CoLj xoTIHH7yGGWIjbZ0uz7uDGvTOzkGzWTWRQk6ZWN8U/l9p+gFyQysz2LOCNPSPAZb 5VpiaQLwx0NJMZFKjVQ1HrTV01v8DASpyz2TEI1we3PsQd+ownMxYq+3Jklaongr vlrWtSJYfSoW7byS44wPkiWpAyncCL/KJmZRbRbYEt8IGXFRM5/VtO3Equ7LAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUsn9KlO0d65ouZwjSvRVe+1tlqjQwHwYDVR0j BBgwFoAUDyHD69UPyPQ/jKeocRQVb3Ql3J0wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i MTkzMDE4ZS03MThmLTQ3NTctYTA4Ny05M2FkNzdiODE4MjEvMC8wRjIxQzNFQkQ1 MEZDOEY0M0Y4Q0E3QTg3MTE0MTU2Rjc0MjVEQzlELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMEYyMUMzRUJENTBGQzhGNDNGOENBN0E4NzExNDE1NkY3NDI1 REM5RC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYjE5MzAxOGUtNzE4Zi00NzU3LWEw ODctOTNhZDc3YjgxODIxLzAvMEYyMUMzRUJENTBGQzhGNDNGOENBN0E4NzExNDE1 NkY3NDI1REM5RC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALYPnwuOP1B85Myat7VMHFNzoG05LZs8hOaU K0WsCWDujeq7DQig3Nz+xaHM4VolTcvW+haTH6nUPb3K+29yVXGvbqOLP8paP7qJ GtRQXZgG+Y6xUwtb8HBR1RIkHF2EgJMwQGhzWMqM089+fa1BB/9yNWr/+lrM3Go9 +9kAjTMfJwwARo3OuBOZ9awfORSgJZnn30h/gbFQh34V9C06yGEwa0m+t4/HrAL5 Ammw4HyewFtXX/gEvlfxzvNqiJsQHbI6ELwFLin5GN5WQutIRkuSD95qK48DqpRM yptuePFK7WZSweAq8c40+8a99LhVuZH/WJ/dkq12YDlvV8VB4B4= -----END CERTIFICATE-----Generated at Tue Nov 4 02:20:23 2025 by rpki-client