$ rpki-client -vvf repo-rpki.idnic.net/repo/b1f87f5a-f6f9-468d-895e-314487f5e25e/0/B9BEB60CD6224D41F333A07E1820F0AF3A81FFF7.mft File: B9BEB60CD6224D41F333A07E1820F0AF3A81FFF7.mft (raw, json) Hash identifier: Zca3FgU6y3d1cbGDxHYjeVYcUYsq4pMdGT4o8DCiRcA= Subject key identifier: 35:14:37:4E:38:BB:13:A0:06:7A:D2:51:C9:7C:20:ED:C8:35:36:19 Authority key identifier: B9:BE:B6:0C:D6:22:4D:41:F3:33:A0:7E:18:20:F0:AF:3A:81:FF:F7 Certificate issuer: /CN=B9BEB60CD6224D41F333A07E1820F0AF3A81FFF7 Certificate serial: 5D727CF8288AD85412893B2A65BA233EBC23B9B0 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B9BEB60CD6224D41F333A07E1820F0AF3A81FFF7.cer Subject info access: rsync://repo-rpki.idnic.net/repo/b1f87f5a-f6f9-468d-895e-314487f5e25e/0/B9BEB60CD6224D41F333A07E1820F0AF3A81FFF7.mft Manifest number: 01AC Signing time: Mon 03 Nov 2025 19:00:38 +0000 Manifest this update: Mon 03 Nov 2025 18:55:38 +0000 Manifest next update: Thu 06 Nov 2025 19:53:38 +0000 Files and hashes: 1: 3130332e3230392e3133312e302f32342d3234203d3e20313333333535.roa (hash: j+U4AErtYzwumrbJ7yEuFWr2i7wA+4c75xZyRtRhbQ4=) 2: B9BEB60CD6224D41F333A07E1820F0AF3A81FFF7.crl (hash: SWWSGY/1YkmbPRDzDbbGlQmgH9ZBHikk3Dw72Vco3Ds=) 3: 3130332e3138352e3139372e302f32342d3234203d3e20313333333535.roa (hash: PjJ5xaEmVECnvYiFxtFmdeDestY/+54rJNs+3F7mqcY=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/b1f87f5a-f6f9-468d-895e-314487f5e25e/0/B9BEB60CD6224D41F333A07E1820F0AF3A81FFF7.crl rsync://repo-rpki.idnic.net/repo/b1f87f5a-f6f9-468d-895e-314487f5e25e/0/B9BEB60CD6224D41F333A07E1820F0AF3A81FFF7.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B9BEB60CD6224D41F333A07E1820F0AF3A81FFF7.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 06 Nov 2025 19:53:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5d:72:7c:f8:28:8a:d8:54:12:89:3b:2a:65:ba:23:3e:bc:23:b9:b0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B9BEB60CD6224D41F333A07E1820F0AF3A81FFF7 Validity Not Before: Nov 3 18:55:38 2025 GMT Not After : Nov 6 19:53:38 2025 GMT Subject: CN=3514374E38BB13A0067AD251C97C20EDC8353619 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:81:cf:41:72:35:64:93:f0:00:ad:b2:03:db: 82:a3:04:c3:0c:df:e7:e6:d7:77:4b:2a:40:99:e3: cd:4d:f9:3b:6d:f2:31:c1:d1:0f:b2:7b:be:46:98: 2c:00:bd:86:de:08:0c:5f:72:96:ca:6a:af:c3:36: 83:38:8d:3d:cd:88:38:7c:78:6e:ac:a8:13:fc:e1: 4e:bd:24:e1:ce:9b:76:b4:17:8a:d5:98:a7:2f:3e: 63:a6:30:ed:8a:a9:7a:af:78:28:0e:2a:f7:ff:04: 92:c2:93:87:bb:43:e5:3f:12:0c:f1:e9:34:48:8f: 1c:ca:b5:60:f6:8a:57:12:99:12:72:8b:e7:7b:49: a4:3a:a3:a8:f4:89:0c:ba:7d:72:f6:64:96:5d:03: 2c:b5:39:12:c8:78:d2:79:0c:81:8e:88:85:cd:a0: e1:8d:fd:9e:1a:30:36:1a:7f:df:25:07:c8:a9:7c: 2b:96:9f:a9:ef:74:2d:c2:a4:1d:a4:7e:fc:ca:ab: d6:d9:5e:2b:ad:ad:68:66:59:c4:d2:2f:1b:c8:67: 7f:33:4f:39:77:92:4f:d0:50:e8:b8:f0:4f:d8:88: 8e:59:ff:75:0d:00:e5:11:00:58:53:57:58:f8:33: b3:b4:72:e8:42:1d:80:02:88:6e:94:8a:73:b6:0e: 44:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:14:37:4E:38:BB:13:A0:06:7A:D2:51:C9:7C:20:ED:C8:35:36:19 X509v3 Authority Key Identifier: keyid:B9:BE:B6:0C:D6:22:4D:41:F3:33:A0:7E:18:20:F0:AF:3A:81:FF:F7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/b1f87f5a-f6f9-468d-895e-314487f5e25e/0/B9BEB60CD6224D41F333A07E1820F0AF3A81FFF7.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B9BEB60CD6224D41F333A07E1820F0AF3A81FFF7.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/b1f87f5a-f6f9-468d-895e-314487f5e25e/0/B9BEB60CD6224D41F333A07E1820F0AF3A81FFF7.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 39:35:43:19:81:78:d4:94:c9:96:b8:34:87:56:78:c5:0b:e9: 10:b9:7f:32:79:7a:0f:b4:ef:28:ea:80:01:96:d8:7e:6f:ef: 99:9e:d1:cf:83:40:c4:c3:03:5a:c2:e7:05:13:67:1a:e2:1c: 7b:13:45:e2:bf:4f:d0:56:1e:88:da:77:83:69:e9:ed:48:54: df:cd:26:4f:0d:74:34:b6:68:cd:82:29:5e:c2:d7:af:4f:b6: 35:10:e2:c7:43:98:7c:07:1c:f7:b2:41:c4:dc:28:75:3c:2a: 8d:59:6a:66:d8:fa:fa:aa:1a:b6:1f:e5:e0:89:e2:63:ae:80: 8e:e0:48:68:81:54:cb:1b:aa:9a:a9:ae:5d:32:e3:b4:69:85: 39:83:7b:d9:13:99:79:50:51:80:96:02:9d:9f:1c:07:07:8f: b7:11:27:11:b1:30:26:5a:65:90:2a:ee:38:69:15:7d:67:c5: 39:8b:5e:91:c2:dc:11:0e:88:73:84:10:9e:f7:ce:34:05:f6: 4d:e7:54:90:ad:22:8a:50:99:31:c2:fc:32:ba:a6:d2:fa:81: d7:0d:5e:80:71:98:94:f8:1f:77:95:1f:45:89:2d:a3:49:24: 67:a4:27:d6:bf:30:4e:52:d5:97:1e:38:f5:3d:00:25:3d:ca: b1:96:93:f0 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUXXJ8+CiK2FQSiTsqZbojPrwjubAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjlCRUI2MENENjIyNEQ0MUYzMzNBMDdFMTgyMEYwQUYz QTgxRkZGNzAeFw0yNTExMDMxODU1MzhaFw0yNTExMDYxOTUzMzhaMDMxMTAvBgNV BAMTKDM1MTQzNzRFMzhCQjEzQTAwNjdBRDI1MUM5N0MyMEVEQzgzNTM2MTkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCUgc9BcjVkk/AArbID24KjBMMM 3+fm13dLKkCZ481N+Ttt8jHB0Q+ye75GmCwAvYbeCAxfcpbKaq/DNoM4jT3NiDh8 eG6sqBP84U69JOHOm3a0F4rVmKcvPmOmMO2KqXqveCgOKvf/BJLCk4e7Q+U/Egzx 6TRIjxzKtWD2ilcSmRJyi+d7SaQ6o6j0iQy6fXL2ZJZdAyy1ORLIeNJ5DIGOiIXN oOGN/Z4aMDYaf98lB8ipfCuWn6nvdC3CpB2kfvzKq9bZXiutrWhmWcTSLxvIZ38z Tzl3kk/QUOi48E/YiI5Z/3UNAOURAFhTV1j4M7O0cuhCHYACiG6UinO2DkQbAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUNRQ3Tji7E6AGetJRyXwg7cg1NhkwHwYDVR0j BBgwFoAUub62DNYiTUHzM6B+GCDwrzqB//cwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i MWY4N2Y1YS1mNmY5LTQ2OGQtODk1ZS0zMTQ0ODdmNWUyNWUvMC9COUJFQjYwQ0Q2 MjI0RDQxRjMzM0EwN0UxODIwRjBBRjNBODFGRkY3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQjlCRUI2MENENjIyNEQ0MUYzMzNBMDdFMTgyMEYwQUYzQTgx RkZGNy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYjFmODdmNWEtZjZmOS00NjhkLTg5 NWUtMzE0NDg3ZjVlMjVlLzAvQjlCRUI2MENENjIyNEQ0MUYzMzNBMDdFMTgyMEYw QUYzQTgxRkZGNy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADk1QxmBeNSUyZa4NIdWeMUL6RC5fzJ5eg+0 7yjqgAGW2H5v75me0c+DQMTDA1rC5wUTZxriHHsTReK/T9BWHojad4Np6e1IVN/N Jk8NdDS2aM2CKV7C169PtjUQ4sdDmHwHHPeyQcTcKHU8Ko1ZambY+vqqGrYf5eCJ 4mOugI7gSGiBVMsbqpqprl0y47RphTmDe9kTmXlQUYCWAp2fHAcHj7cRJxGxMCZa ZZAq7jhpFX1nxTmLXpHC3BEOiHOEEJ73zjQF9k3nVJCtIopQmTHC/DK6ptL6gdcN XoBxmJT4H3eVH0WJLaNJJGekJ9a/ME5S1ZceOPU9ACU9yrGWk/A= -----END CERTIFICATE-----Generated at Wed Nov 5 01:20:18 2025 by rpki-client