$ rpki-client -vvf repo-rpki.idnic.net/repo/bfa3cff7-2aa1-44df-914c-f19184f6f3b1/0/CA978B7ACEF55A251B74721E04A034CA3601A88B.mft File: CA978B7ACEF55A251B74721E04A034CA3601A88B.mft (raw, json) Hash identifier: U90Uci8f3nIWyYRvQqI7MjR3Juc5GsQgj4iX+rMzg2Y= Subject key identifier: 50:DA:0B:5D:93:28:81:85:F8:0C:70:16:F2:C7:06:54:3A:EE:38:2D Authority key identifier: CA:97:8B:7A:CE:F5:5A:25:1B:74:72:1E:04:A0:34:CA:36:01:A8:8B Certificate issuer: /CN=CA978B7ACEF55A251B74721E04A034CA3601A88B Certificate serial: 209087D2A1A63DBBF6E47CDC0BDA517D2EDAAB0F Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CA978B7ACEF55A251B74721E04A034CA3601A88B.cer Subject info access: rsync://repo-rpki.idnic.net/repo/bfa3cff7-2aa1-44df-914c-f19184f6f3b1/0/CA978B7ACEF55A251B74721E04A034CA3601A88B.mft Manifest number: 013B Signing time: Mon 03 Nov 2025 23:01:26 +0000 Manifest this update: Mon 03 Nov 2025 22:56:26 +0000 Manifest next update: Fri 07 Nov 2025 03:21:26 +0000 Files and hashes: 1: CA978B7ACEF55A251B74721E04A034CA3601A88B.crl (hash: qBH/lhRaE/RthAMtedNYzEWO8z2CJo56j8MMcI0i490=) 2: 3130332e38332e3233372e302f32342d3234203d3e20313530353430.roa (hash: Y1BreLVa1ZjV8+fm+79oJJhjLUjz8il238UQwEnA8vE=) 3: 3130332e38332e3233362e302f32342d3234203d3e20313530353430.roa (hash: 5p6wjGyXDMhYJEnC8e2hHCinkGJrBkWoW7KvueEj5dQ=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/bfa3cff7-2aa1-44df-914c-f19184f6f3b1/0/CA978B7ACEF55A251B74721E04A034CA3601A88B.crl rsync://repo-rpki.idnic.net/repo/bfa3cff7-2aa1-44df-914c-f19184f6f3b1/0/CA978B7ACEF55A251B74721E04A034CA3601A88B.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CA978B7ACEF55A251B74721E04A034CA3601A88B.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 07 Nov 2025 03:21:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 20:90:87:d2:a1:a6:3d:bb:f6:e4:7c:dc:0b:da:51:7d:2e:da:ab:0f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CA978B7ACEF55A251B74721E04A034CA3601A88B Validity Not Before: Nov 3 22:56:26 2025 GMT Not After : Nov 7 03:21:26 2025 GMT Subject: CN=50DA0B5D93288185F80C7016F2C706543AEE382D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:7a:56:00:f3:09:ea:cd:4b:8a:33:74:8d:65: 94:26:3c:5b:ad:ae:ee:57:0e:82:f4:1d:b7:4b:f9: 4e:b2:53:16:42:e1:5c:91:3e:63:e0:5a:51:bd:4b: 55:bd:23:1f:1c:78:c5:db:f6:57:04:8e:27:62:3f: 2c:c9:45:67:79:36:0a:b7:c5:b2:10:84:e6:22:d3: 06:87:4c:66:48:fd:ba:10:15:fb:2e:94:42:d3:29: 6c:89:d8:a0:a7:9c:b5:2f:2e:a1:80:d4:9e:d5:59: 98:66:b5:65:4b:5e:94:4a:40:bf:11:94:62:14:80: 6d:5b:2b:97:52:2b:4b:60:b1:49:d6:b9:c0:5b:8d: de:24:6b:22:64:59:ba:22:3f:56:6c:6a:5d:1d:e8: 10:fd:ce:68:99:d7:7a:61:4c:72:4f:e0:f0:c3:33: 75:ef:35:15:dd:eb:45:91:22:ef:0e:35:f3:80:b3: 25:de:f9:ed:19:98:6a:e0:16:b7:49:62:07:3d:66: c0:3e:79:ec:d0:09:fa:0f:7d:c3:d3:09:7e:7e:27: 58:a8:a6:c6:f0:48:a6:20:67:57:79:2c:f8:91:ee: 64:7b:52:51:5c:bb:c0:68:9e:52:59:81:d8:68:d1: d5:a4:ec:a0:d2:dd:5b:6c:64:ab:13:0c:4c:80:2a: a7:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 50:DA:0B:5D:93:28:81:85:F8:0C:70:16:F2:C7:06:54:3A:EE:38:2D X509v3 Authority Key Identifier: keyid:CA:97:8B:7A:CE:F5:5A:25:1B:74:72:1E:04:A0:34:CA:36:01:A8:8B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/bfa3cff7-2aa1-44df-914c-f19184f6f3b1/0/CA978B7ACEF55A251B74721E04A034CA3601A88B.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CA978B7ACEF55A251B74721E04A034CA3601A88B.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/bfa3cff7-2aa1-44df-914c-f19184f6f3b1/0/CA978B7ACEF55A251B74721E04A034CA3601A88B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5b:05:7a:8a:46:fa:e7:65:7b:05:a6:cf:7a:2d:e3:3d:39:9f: 2d:56:c5:0b:47:a2:b3:7a:30:16:c5:7f:18:6a:2d:66:f9:b0: d5:5c:b3:f2:61:54:94:2e:3f:48:98:47:b2:22:28:01:d2:30: e6:13:a2:ef:99:8c:87:92:86:06:8f:69:79:d8:6b:76:c2:85: 47:73:6c:53:c0:c2:8a:0b:46:84:eb:c7:50:71:d5:a1:0d:62: c1:11:2e:15:07:e1:e9:d5:60:dc:67:60:fa:6e:fb:35:df:73: 07:63:28:4c:dc:0c:61:60:22:4c:41:2d:2c:6f:8c:27:a3:57: fe:f4:b8:c1:77:f2:22:51:5e:13:be:12:e2:31:38:6f:82:23: a1:f3:9a:e7:38:af:5d:17:64:e0:6d:03:31:e0:72:6e:6f:49: 26:21:2c:95:19:82:b0:39:7a:12:8a:5f:74:04:39:fd:36:19: 07:79:f7:09:5b:f3:32:95:64:01:12:7b:98:0e:f6:83:2b:a6: 40:27:d5:38:93:ca:62:f0:19:ca:3f:6b:c8:49:6b:74:d5:e4: 26:58:23:3d:cc:9d:60:d1:6e:cf:33:fd:53:fb:0f:a5:dc:26: 4e:01:33:9e:e5:2a:c7:6a:4a:29:1b:60:cb:f4:3f:33:54:7d: 86:12:89:ef -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUIJCH0qGmPbv25HzcC9pRfS7aqw8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0E5NzhCN0FDRUY1NUEyNTFCNzQ3MjFFMDRBMDM0Q0Ez NjAxQTg4QjAeFw0yNTExMDMyMjU2MjZaFw0yNTExMDcwMzIxMjZaMDMxMTAvBgNV BAMTKDUwREEwQjVEOTMyODgxODVGODBDNzAxNkYyQzcwNjU0M0FFRTM4MkQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCYelYA8wnqzUuKM3SNZZQmPFut ru5XDoL0HbdL+U6yUxZC4VyRPmPgWlG9S1W9Ix8ceMXb9lcEjidiPyzJRWd5Ngq3 xbIQhOYi0waHTGZI/boQFfsulELTKWyJ2KCnnLUvLqGA1J7VWZhmtWVLXpRKQL8R lGIUgG1bK5dSK0tgsUnWucBbjd4kayJkWboiP1Zsal0d6BD9zmiZ13phTHJP4PDD M3XvNRXd60WRIu8ONfOAsyXe+e0ZmGrgFrdJYgc9ZsA+eezQCfoPfcPTCX5+J1io psbwSKYgZ1d5LPiR7mR7UlFcu8BonlJZgdho0dWk7KDS3VtsZKsTDEyAKqdhAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUUNoLXZMogYX4DHAW8scGVDruOC0wHwYDVR0j BBgwFoAUypeLes71WiUbdHIeBKA0yjYBqIswDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i ZmEzY2ZmNy0yYWExLTQ0ZGYtOTE0Yy1mMTkxODRmNmYzYjEvMC9DQTk3OEI3QUNF RjU1QTI1MUI3NDcyMUUwNEEwMzRDQTM2MDFBODhCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQ0E5NzhCN0FDRUY1NUEyNTFCNzQ3MjFFMDRBMDM0Q0EzNjAx QTg4Qi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYmZhM2NmZjctMmFhMS00NGRmLTkx NGMtZjE5MTg0ZjZmM2IxLzAvQ0E5NzhCN0FDRUY1NUEyNTFCNzQ3MjFFMDRBMDM0 Q0EzNjAxQTg4Qi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFsFeopG+udlewWmz3ot4z05ny1WxQtHorN6 MBbFfxhqLWb5sNVcs/JhVJQuP0iYR7IiKAHSMOYTou+ZjIeShgaPaXnYa3bChUdz bFPAwooLRoTrx1Bx1aENYsERLhUH4enVYNxnYPpu+zXfcwdjKEzcDGFgIkxBLSxv jCejV/70uMF38iJRXhO+EuIxOG+CI6Hzmuc4r10XZOBtAzHgcm5vSSYhLJUZgrA5 ehKKX3QEOf02GQd59wlb8zKVZAESe5gO9oMrpkAn1TiTymLwGco/a8hJa3TV5CZY Iz3MnWDRbs8z/VP7D6XcJk4BM57lKsdqSikbYMv0PzNUfYYSie8= -----END CERTIFICATE-----Generated at Tue Nov 4 12:54:47 2025 by rpki-client