$ rpki-client -vvf repo-rpki.idnic.net/repo/cafcbfbb-ba3f-4d53-a04f-14d6f4be0cb1/1/B92F0FB3E141D52ED2A71FA483ED3C6D723F60E2.mft File: B92F0FB3E141D52ED2A71FA483ED3C6D723F60E2.mft (raw, json) Hash identifier: A5QHxsunWD334DdIM/iPmDqgUnfErZ4Njk9OhkYsgWc= Subject key identifier: 5E:D0:84:C5:93:17:27:6A:96:B4:A2:34:F9:C3:5F:27:C1:59:B4:F1 Authority key identifier: B9:2F:0F:B3:E1:41:D5:2E:D2:A7:1F:A4:83:ED:3C:6D:72:3F:60:E2 Certificate issuer: /CN=B92F0FB3E141D52ED2A71FA483ED3C6D723F60E2 Certificate serial: 74A466143E660D1607DFB518BB13292A555E83F7 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B92F0FB3E141D52ED2A71FA483ED3C6D723F60E2.cer Subject info access: rsync://repo-rpki.idnic.net/repo/cafcbfbb-ba3f-4d53-a04f-14d6f4be0cb1/1/B92F0FB3E141D52ED2A71FA483ED3C6D723F60E2.mft Manifest number: 98 Signing time: Mon 03 Nov 2025 09:21:34 +0000 Manifest this update: Mon 03 Nov 2025 09:16:34 +0000 Manifest next update: Thu 06 Nov 2025 18:24:34 +0000 Files and hashes: 1: B92F0FB3E141D52ED2A71FA483ED3C6D723F60E2.crl (hash: g0UURgCTrGyYJ38dAwONtzpgzLTZH07rmCtiVEDDBUE=) 2: 323030313a6466343a363463303a3a2f34382d3438203d3e20313533313430.roa (hash: yyzmdDb8FTjdC+THNvwdhgAOOXsuzFTHgJxxHYpFD6k=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/cafcbfbb-ba3f-4d53-a04f-14d6f4be0cb1/1/B92F0FB3E141D52ED2A71FA483ED3C6D723F60E2.crl rsync://repo-rpki.idnic.net/repo/cafcbfbb-ba3f-4d53-a04f-14d6f4be0cb1/1/B92F0FB3E141D52ED2A71FA483ED3C6D723F60E2.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B92F0FB3E141D52ED2A71FA483ED3C6D723F60E2.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 06 Nov 2025 18:24:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 74:a4:66:14:3e:66:0d:16:07:df:b5:18:bb:13:29:2a:55:5e:83:f7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B92F0FB3E141D52ED2A71FA483ED3C6D723F60E2 Validity Not Before: Nov 3 09:16:34 2025 GMT Not After : Nov 6 18:24:34 2025 GMT Subject: CN=5ED084C59317276A96B4A234F9C35F27C159B4F1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:0e:87:c0:95:5c:8c:b9:9a:eb:e8:75:24:14: 1c:2a:81:b1:f5:7d:7d:5f:96:64:b8:06:b9:a8:e5: ba:a6:d2:08:6b:0e:1f:3c:53:00:64:71:29:dc:13: db:e7:19:48:85:9f:81:75:c0:36:c6:c9:d4:65:a3: 16:5d:1b:36:6e:b7:14:e7:63:6d:b6:aa:0d:1f:ff: 1c:93:c9:5d:ca:f5:c6:44:3f:a1:d3:b9:53:ae:48: eb:4e:74:8c:ab:cb:ee:34:e1:a7:df:57:e3:f2:e2: cd:11:91:f4:70:8b:3e:17:80:ce:bb:d4:01:74:b9: bf:26:1f:cf:f5:02:b2:d2:5a:d9:81:f6:d6:91:1d: b9:ca:fd:38:ca:53:1a:ff:05:a1:c5:1e:ec:ad:a7: ad:8a:b1:69:ee:b2:5b:82:5b:95:ee:41:87:f2:06: a7:d5:13:2f:35:64:f4:de:18:56:34:0a:fc:55:e8: 00:2d:48:fe:cd:6b:df:2c:d0:13:bb:c0:f4:e5:b1: 1e:79:3c:83:c4:11:03:3b:9c:cf:c9:ed:65:a8:78: bc:7b:ae:6a:4a:65:2f:29:a3:3c:b8:67:b8:22:9b: a1:53:45:23:cf:b1:ad:ec:2f:44:b6:87:73:36:09: 64:34:16:1c:8a:0b:09:43:06:71:7a:fe:94:29:37: c3:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5E:D0:84:C5:93:17:27:6A:96:B4:A2:34:F9:C3:5F:27:C1:59:B4:F1 X509v3 Authority Key Identifier: keyid:B9:2F:0F:B3:E1:41:D5:2E:D2:A7:1F:A4:83:ED:3C:6D:72:3F:60:E2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/cafcbfbb-ba3f-4d53-a04f-14d6f4be0cb1/1/B92F0FB3E141D52ED2A71FA483ED3C6D723F60E2.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B92F0FB3E141D52ED2A71FA483ED3C6D723F60E2.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/cafcbfbb-ba3f-4d53-a04f-14d6f4be0cb1/1/B92F0FB3E141D52ED2A71FA483ED3C6D723F60E2.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c2:58:d2:b6:84:f3:42:79:14:84:76:b7:4c:2d:98:b9:3c:7d: b2:cb:c6:6e:f3:70:49:f4:e1:93:a9:52:fd:51:47:91:32:0d: 21:5d:1d:6a:50:28:2f:cf:c9:b5:9b:34:0f:3c:b0:5e:f6:c7: aa:4c:d9:36:15:08:3d:d3:89:a3:51:dc:06:b2:e3:d0:43:83: 6c:71:9e:a7:99:f0:3e:bf:a1:e8:1d:0c:cd:41:26:38:50:b4: ad:05:14:ee:5b:7c:b1:bf:f7:b2:cb:2a:24:77:06:c9:0b:5a: ca:8f:ed:a7:d1:09:56:a7:0c:fa:78:0d:90:2e:2e:d0:dd:3e: f1:fb:74:7a:f3:d4:0d:3e:62:ef:4d:0a:e2:3c:fb:80:67:ab: 53:21:94:91:54:34:c3:db:32:16:a2:8d:58:33:8d:46:46:b0: 24:50:66:aa:5f:75:04:9d:15:17:ce:6b:21:d4:72:bf:a6:09: 76:34:cd:59:c6:c6:96:46:0d:d3:75:77:e0:84:fc:cd:16:c0: 90:00:06:f8:3f:c1:d4:0c:7b:8b:74:95:45:a1:78:0b:05:94: 0f:5c:f2:9e:bf:3f:8b:2c:1d:27:e5:f8:8e:bf:49:6e:3d:56: 95:19:ac:fa:21:ba:e3:87:63:8e:f0:d0:38:c8:0e:3c:bc:bb: d8:a9:67:eb -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUdKRmFD5mDRYH37UYuxMpKlVeg/cwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjkyRjBGQjNFMTQxRDUyRUQyQTcxRkE0ODNFRDNDNkQ3 MjNGNjBFMjAeFw0yNTExMDMwOTE2MzRaFw0yNTExMDYxODI0MzRaMDMxMTAvBgNV BAMTKDVFRDA4NEM1OTMxNzI3NkE5NkI0QTIzNEY5QzM1RjI3QzE1OUI0RjEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC9DofAlVyMuZrr6HUkFBwqgbH1 fX1flmS4Brmo5bqm0ghrDh88UwBkcSncE9vnGUiFn4F1wDbGydRloxZdGzZutxTn Y222qg0f/xyTyV3K9cZEP6HTuVOuSOtOdIyry+404affV+Py4s0RkfRwiz4XgM67 1AF0ub8mH8/1ArLSWtmB9taRHbnK/TjKUxr/BaHFHuytp62KsWnusluCW5XuQYfy BqfVEy81ZPTeGFY0CvxV6AAtSP7Na98s0BO7wPTlsR55PIPEEQM7nM/J7WWoeLx7 rmpKZS8pozy4Z7gim6FTRSPPsa3sL0S2h3M2CWQ0FhyKCwlDBnF6/pQpN8OnAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUXtCExZMXJ2qWtKI0+cNfJ8FZtPEwHwYDVR0j BBgwFoAUuS8Ps+FB1S7Spx+kg+08bXI/YOIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j YWZjYmZiYi1iYTNmLTRkNTMtYTA0Zi0xNGQ2ZjRiZTBjYjEvMS9COTJGMEZCM0Ux NDFENTJFRDJBNzFGQTQ4M0VEM0M2RDcyM0Y2MEUyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQjkyRjBGQjNFMTQxRDUyRUQyQTcxRkE0ODNFRDNDNkQ3MjNG NjBFMi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vY2FmY2JmYmItYmEzZi00ZDUzLWEw NGYtMTRkNmY0YmUwY2IxLzEvQjkyRjBGQjNFMTQxRDUyRUQyQTcxRkE0ODNFRDND NkQ3MjNGNjBFMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAMJY0raE80J5FIR2t0wtmLk8fbLLxm7zcEn0 4ZOpUv1RR5EyDSFdHWpQKC/PybWbNA88sF72x6pM2TYVCD3TiaNR3Aay49BDg2xx nqeZ8D6/oegdDM1BJjhQtK0FFO5bfLG/97LLKiR3BskLWsqP7afRCVanDPp4DZAu LtDdPvH7dHrz1A0+Yu9NCuI8+4Bnq1MhlJFUNMPbMhaijVgzjUZGsCRQZqpfdQSd FRfOayHUcr+mCXY0zVnGxpZGDdN1d+CE/M0WwJAABvg/wdQMe4t0lUWheAsFlA9c 8p6/P4ssHSfl+I6/SW49VpUZrPohuuOHY47w0DjIDjy8u9ipZ+s= -----END CERTIFICATE-----Generated at Tue Nov 4 16:46:41 2025 by rpki-client