$ rpki-client -vvf repo-rpki.idnic.net/repo/ca124e6a-f51b-46d0-8ea3-76b2744558a6/0/B178402BEDE3EC5A5EE2E0E71F736A1360C06AF6.mft File: B178402BEDE3EC5A5EE2E0E71F736A1360C06AF6.mft (raw, json) Hash identifier: hiUf2aeII01L1wlw88DbT7hqSy+3gSy1cUyeKeu6t2o= Subject key identifier: B6:14:E1:E3:AE:3A:A9:E2:9A:B1:12:41:AA:F8:C5:16:29:28:52:B1 Authority key identifier: B1:78:40:2B:ED:E3:EC:5A:5E:E2:E0:E7:1F:73:6A:13:60:C0:6A:F6 Certificate issuer: /CN=B178402BEDE3EC5A5EE2E0E71F736A1360C06AF6 Certificate serial: 08FC67FB403FBC79858E924B5A403402D1F3FC52 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B178402BEDE3EC5A5EE2E0E71F736A1360C06AF6.cer Subject info access: rsync://repo-rpki.idnic.net/repo/ca124e6a-f51b-46d0-8ea3-76b2744558a6/0/B178402BEDE3EC5A5EE2E0E71F736A1360C06AF6.mft Manifest number: F4 Signing time: Tue 04 Nov 2025 20:51:59 +0000 Manifest this update: Tue 04 Nov 2025 20:46:59 +0000 Manifest next update: Sat 08 Nov 2025 03:08:59 +0000 Files and hashes: 1: 3130332e372e3130372e302f32342d3234203d3e20313531353939.roa (hash: ZOp7UUJVVpn+HE+2CW6AOz2wc15ptx3FxJXIlhX1FTo=) 2: 3130332e372e3130362e302f32342d3234203d3e20313531353939.roa (hash: 0rbZlrsZPTaqVhI90ea5Mcg8UbhZvU1fUTVZXNAKo74=) 3: 3130332e372e3130362e302f32332d3233203d3e20313531353939.roa (hash: gKuzS0cjEmgd3PQlr3qETih9wH6v1uECgkfmF5qpn9s=) 4: B178402BEDE3EC5A5EE2E0E71F736A1360C06AF6.crl (hash: AJhT2h+SrydgYJzk1/tohdG8NOMn9e3+N3iV8NYhEJA=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/ca124e6a-f51b-46d0-8ea3-76b2744558a6/0/B178402BEDE3EC5A5EE2E0E71F736A1360C06AF6.crl rsync://repo-rpki.idnic.net/repo/ca124e6a-f51b-46d0-8ea3-76b2744558a6/0/B178402BEDE3EC5A5EE2E0E71F736A1360C06AF6.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B178402BEDE3EC5A5EE2E0E71F736A1360C06AF6.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 08 Nov 2025 03:08:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 08:fc:67:fb:40:3f:bc:79:85:8e:92:4b:5a:40:34:02:d1:f3:fc:52 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B178402BEDE3EC5A5EE2E0E71F736A1360C06AF6 Validity Not Before: Nov 4 20:46:59 2025 GMT Not After : Nov 8 03:08:59 2025 GMT Subject: CN=B614E1E3AE3AA9E29AB11241AAF8C516292852B1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:75:5d:d8:6e:87:28:1c:eb:8f:4a:43:ed:f9: 6b:c1:39:aa:72:9c:3c:16:91:7d:61:02:b8:a3:08: fb:0f:c0:76:ba:1a:7d:d6:70:a8:08:e6:e2:f0:f6: 9e:7f:78:f6:a6:a4:d0:5a:31:cb:29:c2:3b:22:63: ed:3c:67:8f:14:aa:ea:d7:24:0c:31:cd:16:d6:9d: fe:f2:50:9a:60:01:72:72:85:07:f7:3c:a4:2c:af: ec:37:15:35:03:97:6b:96:23:48:db:e5:9b:ef:fd: ab:b4:56:e5:c7:cb:99:da:fe:ae:13:ef:86:f6:e0: 6e:bd:ad:03:30:9e:1b:63:1f:06:46:ab:0b:30:db: 71:93:28:e8:52:21:fd:e2:c7:a9:d8:3f:60:97:17: 1a:7a:3e:e4:e1:9e:53:1a:8a:2b:10:b9:6a:8e:c4: e9:fa:36:42:ca:ac:30:86:ec:e7:50:1a:e7:98:57: 8d:30:ad:bf:13:2b:22:7f:21:d2:91:43:07:45:25: 77:37:e9:99:6c:1d:d0:2d:21:54:92:d7:7d:15:6e: 0e:22:ae:8f:0d:14:f3:ac:31:4a:71:8f:cd:11:91: 3e:31:90:45:2e:73:3e:07:4a:c5:f9:2e:33:2a:51: a5:72:27:6d:73:44:68:15:15:83:a5:ba:ea:4c:10: 5f:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B6:14:E1:E3:AE:3A:A9:E2:9A:B1:12:41:AA:F8:C5:16:29:28:52:B1 X509v3 Authority Key Identifier: keyid:B1:78:40:2B:ED:E3:EC:5A:5E:E2:E0:E7:1F:73:6A:13:60:C0:6A:F6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/ca124e6a-f51b-46d0-8ea3-76b2744558a6/0/B178402BEDE3EC5A5EE2E0E71F736A1360C06AF6.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B178402BEDE3EC5A5EE2E0E71F736A1360C06AF6.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ca124e6a-f51b-46d0-8ea3-76b2744558a6/0/B178402BEDE3EC5A5EE2E0E71F736A1360C06AF6.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3e:30:68:2d:e9:38:7c:bb:f6:17:e0:8a:55:e1:91:ae:48:4b: 2d:c1:e8:9c:f1:77:f7:58:d4:82:6c:af:5c:d2:08:aa:84:d9: ca:f1:97:52:db:02:57:4e:ef:6b:5e:00:23:52:17:4c:52:09: be:72:72:89:89:2e:37:42:de:36:a5:a1:fc:ab:8b:2b:d5:db: a5:35:83:5a:b2:d1:5f:ba:74:7b:0d:30:54:c9:7f:a0:9c:fd: 7e:f6:1f:55:82:84:51:69:42:1d:57:a4:84:4a:6a:9e:b1:fc: 84:88:37:3b:a4:d6:c2:1a:24:0d:fb:aa:3b:7e:f0:bc:4e:b0: f2:23:70:23:6f:ad:f3:c5:6a:ab:b2:9e:93:64:79:0e:a4:02: cc:9b:72:1d:3c:34:a3:7a:be:ca:7e:37:fe:08:63:87:1e:ed: c2:8f:08:8e:e7:ae:6e:1a:cf:8d:ec:b2:59:05:55:8d:86:0b: c3:c1:5a:4a:af:1f:04:45:32:60:9f:98:b4:53:d2:b8:f0:07: 64:d0:c0:60:de:3f:40:c9:f2:86:f5:50:10:8e:00:57:7f:65: 8d:0e:c6:d8:13:04:92:00:73:04:eb:3e:a1:a9:9e:ce:3a:82: 54:df:14:cc:a7:ca:4c:c2:48:d8:83:ff:c0:65:91:7e:bc:33: 8a:2c:7c:22 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUCPxn+0A/vHmFjpJLWkA0AtHz/FIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjE3ODQwMkJFREUzRUM1QTVFRTJFMEU3MUY3MzZBMTM2 MEMwNkFGNjAeFw0yNTExMDQyMDQ2NTlaFw0yNTExMDgwMzA4NTlaMDMxMTAvBgNV BAMTKEI2MTRFMUUzQUUzQUE5RTI5QUIxMTI0MUFBRjhDNTE2MjkyODUyQjEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC9dV3YbocoHOuPSkPt+WvBOapy nDwWkX1hArijCPsPwHa6Gn3WcKgI5uLw9p5/ePampNBaMcspwjsiY+08Z48UqurX JAwxzRbWnf7yUJpgAXJyhQf3PKQsr+w3FTUDl2uWI0jb5Zvv/au0VuXHy5na/q4T 74b24G69rQMwnhtjHwZGqwsw23GTKOhSIf3ix6nYP2CXFxp6PuThnlMaiisQuWqO xOn6NkLKrDCG7OdQGueYV40wrb8TKyJ/IdKRQwdFJXc36ZlsHdAtIVSS130Vbg4i ro8NFPOsMUpxj80RkT4xkEUucz4HSsX5LjMqUaVyJ21zRGgVFYOluupMEF/HAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUthTh4646qeKasRJBqvjFFikoUrEwHwYDVR0j BBgwFoAUsXhAK+3j7Fpe4uDnH3NqE2DAavYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j YTEyNGU2YS1mNTFiLTQ2ZDAtOGVhMy03NmIyNzQ0NTU4YTYvMC9CMTc4NDAyQkVE RTNFQzVBNUVFMkUwRTcxRjczNkExMzYwQzA2QUY2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQjE3ODQwMkJFREUzRUM1QTVFRTJFMEU3MUY3MzZBMTM2MEMw NkFGNi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vY2ExMjRlNmEtZjUxYi00NmQwLThl YTMtNzZiMjc0NDU1OGE2LzAvQjE3ODQwMkJFREUzRUM1QTVFRTJFMEU3MUY3MzZB MTM2MEMwNkFGNi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAD4waC3pOHy79hfgilXhka5ISy3B6Jzxd/dY 1IJsr1zSCKqE2crxl1LbAldO72teACNSF0xSCb5ycomJLjdC3jalofyriyvV26U1 g1qy0V+6dHsNMFTJf6Cc/X72H1WChFFpQh1XpIRKap6x/ISINzuk1sIaJA37qjt+ 8LxOsPIjcCNvrfPFaquynpNkeQ6kAsybch08NKN6vsp+N/4IY4ce7cKPCI7nrm4a z43sslkFVY2GC8PBWkqvHwRFMmCfmLRT0rjwB2TQwGDeP0DJ8ob1UBCOAFd/ZY0O xtgTBJIAcwTrPqGpns46glTfFMynykzCSNiD/8BlkX68M4osfCI= -----END CERTIFICATE-----Generated at Wed Nov 5 00:38:18 2025 by rpki-client