$ rpki-client -vvf repo-rpki.idnic.net/repo/c846f422-c302-4462-b584-700e9346ca09/0/B2B2F42BF1978AD094186480A7DA0086FD7C2919.mft File: B2B2F42BF1978AD094186480A7DA0086FD7C2919.mft (raw, json) Hash identifier: gHLb4ZpolvYH0vzfP+SLBBp/THesgTyCHH1uyyFuym8= Subject key identifier: EC:1D:7E:D7:1B:BA:AA:3F:5E:45:5F:64:FE:DF:A1:42:FB:31:6C:AA Authority key identifier: B2:B2:F4:2B:F1:97:8A:D0:94:18:64:80:A7:DA:00:86:FD:7C:29:19 Certificate issuer: /CN=B2B2F42BF1978AD094186480A7DA0086FD7C2919 Certificate serial: 54D525AE5093973D8842EDFD57451CC161EB2622 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B2B2F42BF1978AD094186480A7DA0086FD7C2919.cer Subject info access: rsync://repo-rpki.idnic.net/repo/c846f422-c302-4462-b584-700e9346ca09/0/B2B2F42BF1978AD094186480A7DA0086FD7C2919.mft Manifest number: 01BC Signing time: Sun 02 Nov 2025 04:01:33 +0000 Manifest this update: Sun 02 Nov 2025 03:56:33 +0000 Manifest next update: Wed 05 Nov 2025 11:52:33 +0000 Files and hashes: 1: 3130332e32332e39392e302f32342d3234203d3e20313530323435.roa (hash: 7tXNJtByPVAUWKN7rPTJrICa1r391Ty+571rFNCuCe4=) 2: 3130332e32332e39382e302f32342d3234203d3e20313530323435.roa (hash: zfWwMyIyfYFsLYce6cLTwp+3PWwf0vu9ehqN4lOZ8SU=) 3: B2B2F42BF1978AD094186480A7DA0086FD7C2919.crl (hash: +neFeWaY3tRHjnsLmCgIurrhhFLqE/P2oVIAJshTgK4=) 4: 3130332e32332e39382e302f32332d3233203d3e20313530323435.roa (hash: 4vMfmSE2Nr1Jh9euWzmJY0IXJeyMyzfrb4vovMJmB9A=) 5: 323030313a6466313a653034303a3a2f34382d3438203d3e20313530323435.roa (hash: gtOr9NwzW8Aa7fZGd03VkoCWA9Dhf88Ryc02CpBSPGY=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/c846f422-c302-4462-b584-700e9346ca09/0/B2B2F42BF1978AD094186480A7DA0086FD7C2919.crl rsync://repo-rpki.idnic.net/repo/c846f422-c302-4462-b584-700e9346ca09/0/B2B2F42BF1978AD094186480A7DA0086FD7C2919.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B2B2F42BF1978AD094186480A7DA0086FD7C2919.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 05 Nov 2025 11:52:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 54:d5:25:ae:50:93:97:3d:88:42:ed:fd:57:45:1c:c1:61:eb:26:22 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B2B2F42BF1978AD094186480A7DA0086FD7C2919 Validity Not Before: Nov 2 03:56:33 2025 GMT Not After : Nov 5 11:52:33 2025 GMT Subject: CN=EC1D7ED71BBAAA3F5E455F64FEDFA142FB316CAA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:10:38:3e:29:a5:af:d6:de:91:6c:12:c3:68: ab:b7:0d:86:58:21:67:ff:e5:96:f1:e8:64:ba:49: b1:a5:6e:55:91:fb:59:2d:5e:e6:f3:aa:20:02:bc: 08:62:76:0f:1b:0b:c1:8d:c7:78:08:3d:bd:92:89: 41:dc:30:55:aa:04:19:9f:a5:55:60:ca:64:b1:35: 9a:17:e2:c5:2d:a6:84:ba:e0:58:13:e5:9c:5c:0f: 31:62:38:2f:7c:6b:af:f9:4e:03:83:69:d1:00:56: d6:46:2c:67:0c:0c:c8:15:9c:74:9c:df:d4:2c:33: ca:9f:69:f9:72:60:78:dd:5e:b7:19:76:c9:9f:dc: 1b:38:33:d9:bf:03:ad:0a:a2:c1:a1:f2:b1:91:f7: 6a:e7:a2:62:1a:f4:13:0c:0d:49:07:9f:a6:01:0f: 50:01:23:fa:a3:67:f7:fb:80:9e:b1:de:83:62:60: d0:77:c1:fa:0c:fe:bd:2f:94:ad:40:f5:1d:21:e7: b0:47:db:13:0b:18:7c:ad:43:cf:21:6f:f1:8c:e5: ca:1a:96:64:d3:c5:24:92:4d:e6:80:1b:42:47:0e: 88:33:ea:65:fa:83:be:1d:83:50:7d:de:36:96:6c: 44:09:af:4f:fb:4a:28:57:57:ce:fc:bf:8e:f0:0b: c9:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EC:1D:7E:D7:1B:BA:AA:3F:5E:45:5F:64:FE:DF:A1:42:FB:31:6C:AA X509v3 Authority Key Identifier: keyid:B2:B2:F4:2B:F1:97:8A:D0:94:18:64:80:A7:DA:00:86:FD:7C:29:19 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/c846f422-c302-4462-b584-700e9346ca09/0/B2B2F42BF1978AD094186480A7DA0086FD7C2919.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B2B2F42BF1978AD094186480A7DA0086FD7C2919.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c846f422-c302-4462-b584-700e9346ca09/0/B2B2F42BF1978AD094186480A7DA0086FD7C2919.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0b:7e:a2:7e:56:67:d6:46:83:80:7d:69:4c:8d:c9:a1:f4:bd: 50:bf:85:df:f3:ac:ea:0f:8b:93:db:90:e3:aa:24:27:66:5d: 5d:e4:69:de:b0:f6:51:32:12:1d:35:bd:59:ec:6b:8e:16:15: 98:ef:5a:9c:2c:da:a1:d9:e7:46:3f:fb:80:ae:d6:ae:fa:b8: 64:2e:3d:35:fe:a4:19:fe:c6:6f:6d:2e:be:3b:a1:8e:01:9d: 6a:8a:b4:00:15:77:6e:5b:f6:db:a0:2a:25:b9:c3:d9:ba:7e: 83:f2:5f:be:e6:7d:63:de:42:1c:cf:11:c8:15:5d:08:45:3a: c7:d0:b3:b4:76:11:df:4d:97:e4:13:6e:f2:74:7f:5f:2c:4b: e5:52:08:4d:2c:1b:f8:46:50:a9:54:d3:49:a5:65:85:f5:8c: e2:e1:6e:cb:ec:c0:f2:17:6a:3e:7c:ae:b5:6e:22:e0:b9:3b: a0:9f:bc:77:df:b7:16:cd:2f:86:a6:87:ae:58:a1:19:8f:13: 8e:c5:ed:56:f6:5f:a4:f8:e5:a7:70:1d:58:c2:26:dc:c8:4e: 28:54:fb:20:64:80:62:f1:b1:d7:6a:d1:dd:24:4c:c6:9f:ae: 75:db:f3:bf:95:45:b4:58:7b:a5:1b:af:ef:fb:78:e4:ef:c5: 9b:67:76:a4 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUVNUlrlCTlz2IQu39V0UcwWHrJiIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjJCMkY0MkJGMTk3OEFEMDk0MTg2NDgwQTdEQTAwODZG RDdDMjkxOTAeFw0yNTExMDIwMzU2MzNaFw0yNTExMDUxMTUyMzNaMDMxMTAvBgNV BAMTKEVDMUQ3RUQ3MUJCQUFBM0Y1RTQ1NUY2NEZFREZBMTQyRkIzMTZDQUEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC1EDg+KaWv1t6RbBLDaKu3DYZY IWf/5Zbx6GS6SbGlblWR+1ktXubzqiACvAhidg8bC8GNx3gIPb2SiUHcMFWqBBmf pVVgymSxNZoX4sUtpoS64FgT5ZxcDzFiOC98a6/5TgODadEAVtZGLGcMDMgVnHSc 39QsM8qfaflyYHjdXrcZdsmf3Bs4M9m/A60KosGh8rGR92rnomIa9BMMDUkHn6YB D1ABI/qjZ/f7gJ6x3oNiYNB3wfoM/r0vlK1A9R0h57BH2xMLGHytQ88hb/GM5coa lmTTxSSSTeaAG0JHDogz6mX6g74dg1B93jaWbEQJr0/7SihXV878v47wC8ndAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU7B1+1xu6qj9eRV9k/t+hQvsxbKowHwYDVR0j BBgwFoAUsrL0K/GXitCUGGSAp9oAhv18KRkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j ODQ2ZjQyMi1jMzAyLTQ0NjItYjU4NC03MDBlOTM0NmNhMDkvMC9CMkIyRjQyQkYx OTc4QUQwOTQxODY0ODBBN0RBMDA4NkZEN0MyOTE5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQjJCMkY0MkJGMTk3OEFEMDk0MTg2NDgwQTdEQTAwODZGRDdD MjkxOS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYzg0NmY0MjItYzMwMi00NDYyLWI1 ODQtNzAwZTkzNDZjYTA5LzAvQjJCMkY0MkJGMTk3OEFEMDk0MTg2NDgwQTdEQTAw ODZGRDdDMjkxOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAt+on5WZ9ZGg4B9aUyNyaH0vVC/hd/zrOoP i5PbkOOqJCdmXV3kad6w9lEyEh01vVnsa44WFZjvWpws2qHZ50Y/+4Cu1q76uGQu PTX+pBn+xm9tLr47oY4BnWqKtAAVd25b9tugKiW5w9m6foPyX77mfWPeQhzPEcgV XQhFOsfQs7R2Ed9Nl+QTbvJ0f18sS+VSCE0sG/hGUKlU00mlZYX1jOLhbsvswPIX aj58rrVuIuC5O6CfvHfftxbNL4amh65YoRmPE47F7Vb2X6T45adwHVjCJtzITihU +yBkgGLxsddq0d0kTMafrnXb87+VRbRYe6Ubr+/7eOTvxZtndqQ= -----END CERTIFICATE-----Generated at Tue Nov 4 02:20:33 2025 by rpki-client