$ rpki-client -vvf repo-rpki.idnic.net/repo/ca631d77-f805-439c-98f4-b0da60fe8dd1/0/B3032084B1211BBB522E01AB56EC94BFBD1C91BB.mft File: B3032084B1211BBB522E01AB56EC94BFBD1C91BB.mft (raw, json) Hash identifier: B0f9S/pNTYnB7NLCuK8lxTvRqO29WQD/wqn/Q0g7I8U= Subject key identifier: AC:9C:BE:16:C2:71:84:6B:FE:12:6A:6D:C4:3E:DC:55:CE:E3:6C:D6 Authority key identifier: B3:03:20:84:B1:21:1B:BB:52:2E:01:AB:56:EC:94:BF:BD:1C:91:BB Certificate issuer: /CN=B3032084B1211BBB522E01AB56EC94BFBD1C91BB Certificate serial: 5FF8FE005CC130643118300DBFE6399C556DAE90 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B3032084B1211BBB522E01AB56EC94BFBD1C91BB.cer Subject info access: rsync://repo-rpki.idnic.net/repo/ca631d77-f805-439c-98f4-b0da60fe8dd1/0/B3032084B1211BBB522E01AB56EC94BFBD1C91BB.mft Manifest number: 0240 Signing time: Wed 05 Nov 2025 02:22:06 +0000 Manifest this update: Wed 05 Nov 2025 02:17:06 +0000 Manifest next update: Sat 08 Nov 2025 04:33:06 +0000 Files and hashes: 1: 3130332e31302e3137312e302f32342d3234203d3e203536323535.roa (hash: AIOs31+uc6Pf39KqIrmoIMFECvqIwvPghHjhEcSTbxg=) 2: B3032084B1211BBB522E01AB56EC94BFBD1C91BB.crl (hash: 25xgzqPtCmVROzdFCF8dDjzl7sCUnjVuiU2KyUMcJu0=) 3: 3130332e31302e3137302e302f32342d3234203d3e203536323535.roa (hash: oyYL/ZrPIXcKrR/gCu+KLuQHBsbf7zO4u+0wSABNiSw=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/ca631d77-f805-439c-98f4-b0da60fe8dd1/0/B3032084B1211BBB522E01AB56EC94BFBD1C91BB.crl rsync://repo-rpki.idnic.net/repo/ca631d77-f805-439c-98f4-b0da60fe8dd1/0/B3032084B1211BBB522E01AB56EC94BFBD1C91BB.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B3032084B1211BBB522E01AB56EC94BFBD1C91BB.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 08 Nov 2025 00:42:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5f:f8:fe:00:5c:c1:30:64:31:18:30:0d:bf:e6:39:9c:55:6d:ae:90 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B3032084B1211BBB522E01AB56EC94BFBD1C91BB Validity Not Before: Nov 5 02:17:06 2025 GMT Not After : Nov 8 04:33:06 2025 GMT Subject: CN=AC9CBE16C271846BFE126A6DC43EDC55CEE36CD6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:45:0e:3f:18:94:b2:86:c9:7d:24:bd:11:52: db:52:90:b4:81:32:10:8c:2b:b1:99:c5:1f:6a:9d: f1:52:5f:ba:97:b8:17:52:2d:28:05:8c:4e:67:0b: f9:04:8e:96:92:d3:9c:b5:97:b4:83:49:23:d8:bf: ec:65:54:73:69:f7:f7:38:01:98:27:70:61:8e:8d: 7a:52:a3:1e:e9:f9:bb:d7:99:b1:b8:be:45:fc:49: f0:c5:42:8f:e2:25:ef:81:db:21:6c:c5:25:1f:42: c6:a8:63:d3:c6:df:b2:c1:66:9c:9a:b0:42:68:37: c7:9b:3f:50:cf:2d:9f:ff:3f:4f:2d:c9:67:64:99: 1f:e9:0c:cc:32:2e:44:ee:f4:2a:57:7b:3b:4e:a8: f7:db:4e:70:98:34:43:c6:85:3f:ea:c1:de:72:1f: 12:9f:48:4f:63:75:eb:3b:d6:04:71:78:cd:95:17: c3:58:d3:08:2a:c9:75:ab:ce:af:cb:db:ee:ec:b7: e7:8c:0b:ed:ac:ac:41:74:46:c7:40:56:ec:95:60: d5:44:be:3f:0a:65:9e:87:48:56:01:ae:b0:f6:b1: 6a:ef:5d:32:a0:2f:50:a3:5f:35:42:4d:33:2d:42: 93:c0:49:6b:b2:0d:29:75:60:e0:07:0b:94:03:1c: 13:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AC:9C:BE:16:C2:71:84:6B:FE:12:6A:6D:C4:3E:DC:55:CE:E3:6C:D6 X509v3 Authority Key Identifier: keyid:B3:03:20:84:B1:21:1B:BB:52:2E:01:AB:56:EC:94:BF:BD:1C:91:BB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/ca631d77-f805-439c-98f4-b0da60fe8dd1/0/B3032084B1211BBB522E01AB56EC94BFBD1C91BB.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B3032084B1211BBB522E01AB56EC94BFBD1C91BB.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ca631d77-f805-439c-98f4-b0da60fe8dd1/0/B3032084B1211BBB522E01AB56EC94BFBD1C91BB.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8e:21:aa:b0:35:94:98:0e:8e:6c:19:20:c8:03:77:f2:49:a4: 31:22:d0:ac:d9:a2:9f:35:57:3a:d7:5a:d6:e6:81:27:48:c6: e5:f6:ee:d1:49:18:a1:3e:ec:c7:c7:fe:a9:d6:a5:39:d8:04: 98:97:f0:f6:58:9d:9f:63:2d:22:e6:a3:93:08:c1:ea:3f:cb: c5:e3:e8:f4:6c:24:23:86:ab:24:ce:74:68:2b:0a:5c:f7:ee: b9:33:93:96:fd:d8:6d:90:0e:fe:4c:91:65:cf:2b:97:7f:be: 52:76:c4:c0:d0:16:99:fd:38:b3:3f:10:30:a5:be:76:8b:4d: 94:08:f0:4a:a8:f2:f3:8a:98:c0:c4:1e:92:c8:e3:02:16:53: 16:4e:56:ee:96:45:a9:ce:43:b2:64:b0:0a:5b:f9:93:6c:1a: d1:3c:73:dc:04:26:3b:a1:ce:57:e1:df:5e:aa:49:d6:65:20: 61:cd:77:1b:a0:93:6b:c4:0c:11:8b:8b:a0:68:1f:97:5a:9e: 07:85:07:cc:dc:dc:87:bb:ea:43:85:ae:ac:49:ce:10:63:6e: ba:75:2b:47:3c:83:f3:36:11:53:76:b8:20:64:4c:8e:a0:3f: 0f:22:68:5e:43:0b:76:5b:2e:74:6c:da:f4:2c:9b:8d:6e:10: 2d:42:8b:bd -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUX/j+AFzBMGQxGDANv+Y5nFVtrpAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjMwMzIwODRCMTIxMUJCQjUyMkUwMUFCNTZFQzk0QkZC RDFDOTFCQjAeFw0yNTExMDUwMjE3MDZaFw0yNTExMDgwNDMzMDZaMDMxMTAvBgNV BAMTKEFDOUNCRTE2QzI3MTg0NkJGRTEyNkE2REM0M0VEQzU1Q0VFMzZDRDYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCxRQ4/GJSyhsl9JL0RUttSkLSB MhCMK7GZxR9qnfFSX7qXuBdSLSgFjE5nC/kEjpaS05y1l7SDSSPYv+xlVHNp9/c4 AZgncGGOjXpSox7p+bvXmbG4vkX8SfDFQo/iJe+B2yFsxSUfQsaoY9PG37LBZpya sEJoN8ebP1DPLZ//P08tyWdkmR/pDMwyLkTu9CpXeztOqPfbTnCYNEPGhT/qwd5y HxKfSE9jdes71gRxeM2VF8NY0wgqyXWrzq/L2+7st+eMC+2srEF0RsdAVuyVYNVE vj8KZZ6HSFYBrrD2sWrvXTKgL1CjXzVCTTMtQpPASWuyDSl1YOAHC5QDHBMRAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUrJy+FsJxhGv+EmptxD7cVc7jbNYwHwYDVR0j BBgwFoAUswMghLEhG7tSLgGrVuyUv70ckbswDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j YTYzMWQ3Ny1mODA1LTQzOWMtOThmNC1iMGRhNjBmZThkZDEvMC9CMzAzMjA4NEIx MjExQkJCNTIyRTAxQUI1NkVDOTRCRkJEMUM5MUJCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQjMwMzIwODRCMTIxMUJCQjUyMkUwMUFCNTZFQzk0QkZCRDFD OTFCQi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vY2E2MzFkNzctZjgwNS00MzljLTk4 ZjQtYjBkYTYwZmU4ZGQxLzAvQjMwMzIwODRCMTIxMUJCQjUyMkUwMUFCNTZFQzk0 QkZCRDFDOTFCQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAI4hqrA1lJgOjmwZIMgDd/JJpDEi0KzZop81 VzrXWtbmgSdIxuX27tFJGKE+7MfH/qnWpTnYBJiX8PZYnZ9jLSLmo5MIweo/y8Xj 6PRsJCOGqyTOdGgrClz37rkzk5b92G2QDv5MkWXPK5d/vlJ2xMDQFpn9OLM/EDCl vnaLTZQI8Eqo8vOKmMDEHpLI4wIWUxZOVu6WRanOQ7JksApb+ZNsGtE8c9wEJjuh zlfh316qSdZlIGHNdxugk2vEDBGLi6BoH5dangeFB8zc3Ie76kOFrqxJzhBjbrp1 K0c8g/M2EVN2uCBkTI6gPw8iaF5DC3ZbLnRs2vQsm41uEC1Ci70= -----END CERTIFICATE-----Generated at Wed Nov 5 04:20:14 2025 by rpki-client