$ rpki-client -vvf repo-rpki.idnic.net/repo/cf7b7677-6204-405f-8ba2-e714324c15d7/0/B76CEE66CD329E4EDD33E6D3452A33FBBE00D741.mft File: B76CEE66CD329E4EDD33E6D3452A33FBBE00D741.mft (raw, json) Hash identifier: Id88w0tcDhT8SdoVLf2l6hrSBpDNLSAMcSd9B3Y9w8I= Subject key identifier: 4E:0D:65:92:27:C5:2F:0C:31:BC:22:E3:37:67:31:C7:AB:9E:97:EB Authority key identifier: B7:6C:EE:66:CD:32:9E:4E:DD:33:E6:D3:45:2A:33:FB:BE:00:D7:41 Certificate issuer: /CN=B76CEE66CD329E4EDD33E6D3452A33FBBE00D741 Certificate serial: 618F7385A6F77A0CF11F6BB78D0B06BEEC839584 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B76CEE66CD329E4EDD33E6D3452A33FBBE00D741.cer Subject info access: rsync://repo-rpki.idnic.net/repo/cf7b7677-6204-405f-8ba2-e714324c15d7/0/B76CEE66CD329E4EDD33E6D3452A33FBBE00D741.mft Manifest number: 023A Signing time: Mon 03 Nov 2025 15:50:53 +0000 Manifest this update: Mon 03 Nov 2025 15:45:53 +0000 Manifest next update: Thu 06 Nov 2025 22:22:53 +0000 Files and hashes: 1: 3130332e3138362e39342e302f32332d3234203d3e20313439373430.roa (hash: 36f1oVCDIma5/edGeBmPtM2U4zeHtnBlVDsNRr5sez8=) 2: B76CEE66CD329E4EDD33E6D3452A33FBBE00D741.crl (hash: FPZNp5SgKvbi65FkUlFkgcZGXFm85IyeGWnSnP5O23g=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/cf7b7677-6204-405f-8ba2-e714324c15d7/0/B76CEE66CD329E4EDD33E6D3452A33FBBE00D741.crl rsync://repo-rpki.idnic.net/repo/cf7b7677-6204-405f-8ba2-e714324c15d7/0/B76CEE66CD329E4EDD33E6D3452A33FBBE00D741.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B76CEE66CD329E4EDD33E6D3452A33FBBE00D741.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 06 Nov 2025 22:22:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 61:8f:73:85:a6:f7:7a:0c:f1:1f:6b:b7:8d:0b:06:be:ec:83:95:84 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B76CEE66CD329E4EDD33E6D3452A33FBBE00D741 Validity Not Before: Nov 3 15:45:53 2025 GMT Not After : Nov 6 22:22:53 2025 GMT Subject: CN=4E0D659227C52F0C31BC22E3376731C7AB9E97EB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:11:ae:d2:e9:7b:bb:85:c0:6f:94:4b:16:d9: ab:f1:48:db:68:59:18:5b:c6:78:7a:14:c5:52:c2: 46:f5:71:29:34:69:2e:80:32:52:f5:5a:79:98:17: ad:e3:35:40:18:42:10:84:32:65:12:29:fa:d1:2e: 14:c1:67:74:cc:0e:c7:b0:b0:71:97:fb:e2:c4:c6: a1:8d:d3:28:5a:1b:4f:60:d1:25:84:46:de:ae:26: 16:7c:c9:94:6f:2f:7f:0f:e8:83:23:b0:73:35:97: 9c:cd:35:29:3e:dd:e5:1a:52:92:85:16:b4:47:7f: b1:a0:af:75:a7:f6:b5:1e:18:06:11:44:43:9d:e1: 16:b8:87:bf:a4:97:5a:54:ea:e2:de:36:62:a9:cd: b3:30:35:ab:80:50:b7:a8:58:c3:21:df:26:a5:0d: 54:f0:e7:86:65:6e:bb:52:4a:f9:72:ad:6f:a4:fe: 6f:cb:1f:64:dc:45:af:ec:67:4b:85:ec:e5:ea:c0: 0c:3b:58:8b:68:2b:b0:68:cb:48:eb:e6:02:6a:63: 44:ef:f4:a1:10:b7:69:18:e5:23:3f:08:c7:ab:37: 50:f8:3e:49:71:21:f3:ee:53:3d:8e:20:ea:d6:ac: 5c:58:9c:34:4d:b5:9c:fe:d8:e6:bb:dc:18:3b:30: 94:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4E:0D:65:92:27:C5:2F:0C:31:BC:22:E3:37:67:31:C7:AB:9E:97:EB X509v3 Authority Key Identifier: keyid:B7:6C:EE:66:CD:32:9E:4E:DD:33:E6:D3:45:2A:33:FB:BE:00:D7:41 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/cf7b7677-6204-405f-8ba2-e714324c15d7/0/B76CEE66CD329E4EDD33E6D3452A33FBBE00D741.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B76CEE66CD329E4EDD33E6D3452A33FBBE00D741.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/cf7b7677-6204-405f-8ba2-e714324c15d7/0/B76CEE66CD329E4EDD33E6D3452A33FBBE00D741.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8d:ac:81:84:cd:89:cf:11:47:b4:9f:cd:ff:76:1b:8b:4f:6a: f3:d2:01:6d:85:e3:ea:28:34:00:62:2c:89:2e:21:f7:58:ba: e5:e3:59:7c:2f:f9:34:10:f0:36:f5:1a:7c:af:1e:87:f4:02: 80:30:1b:20:67:f9:29:a0:96:55:33:d4:33:34:40:c4:c1:63: b2:6d:13:57:9f:b9:84:cc:2d:09:2c:d4:bc:64:f6:d8:c3:a9: f8:78:56:1d:55:b6:88:d2:bd:41:08:7e:48:5e:20:85:26:b2: d1:12:24:b0:05:b1:14:37:0f:f4:aa:4a:8d:33:66:ba:f6:ef: 63:62:a6:4e:fd:b7:94:7c:f8:31:96:82:29:f5:31:58:20:d8: 41:3e:da:58:1c:f6:54:02:05:7a:9f:94:a9:65:4a:a1:2d:79: 41:71:d3:1f:96:d1:c6:19:b9:70:a7:a7:61:3c:6f:02:3d:37: 50:60:79:83:99:a6:be:6c:03:39:31:c1:ee:e6:0f:67:05:2c: 7c:1f:e6:e9:e2:fa:aa:64:ea:2b:39:6d:89:31:ea:b3:bb:60: 0b:51:a7:17:69:d9:0c:c3:06:20:1f:50:ef:6a:b0:d4:97:c9: 4c:09:67:b5:9d:4b:14:35:56:96:c6:4a:f5:5f:29:ed:aa:04: d4:31:c9:6e -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUYY9zhab3egzxH2u3jQsGvuyDlYQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjc2Q0VFNjZDRDMyOUU0RUREMzNFNkQzNDUyQTMzRkJC RTAwRDc0MTAeFw0yNTExMDMxNTQ1NTNaFw0yNTExMDYyMjIyNTNaMDMxMTAvBgNV BAMTKDRFMEQ2NTkyMjdDNTJGMEMzMUJDMjJFMzM3NjczMUM3QUI5RTk3RUIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDBEa7S6Xu7hcBvlEsW2avxSNto WRhbxnh6FMVSwkb1cSk0aS6AMlL1WnmYF63jNUAYQhCEMmUSKfrRLhTBZ3TMDsew sHGX++LExqGN0yhaG09g0SWERt6uJhZ8yZRvL38P6IMjsHM1l5zNNSk+3eUaUpKF FrRHf7Ggr3Wn9rUeGAYRREOd4Ra4h7+kl1pU6uLeNmKpzbMwNauAULeoWMMh3yal DVTw54ZlbrtSSvlyrW+k/m/LH2TcRa/sZ0uF7OXqwAw7WItoK7Boy0jr5gJqY0Tv 9KEQt2kY5SM/CMerN1D4PklxIfPuUz2OIOrWrFxYnDRNtZz+2Oa73Bg7MJQhAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUTg1lkifFLwwxvCLjN2cxx6uel+swHwYDVR0j BBgwFoAUt2zuZs0ynk7dM+bTRSoz+74A10EwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j ZjdiNzY3Ny02MjA0LTQwNWYtOGJhMi1lNzE0MzI0YzE1ZDcvMC9CNzZDRUU2NkNE MzI5RTRFREQzM0U2RDM0NTJBMzNGQkJFMDBENzQxLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQjc2Q0VFNjZDRDMyOUU0RUREMzNFNkQzNDUyQTMzRkJCRTAw RDc0MS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vY2Y3Yjc2NzctNjIwNC00MDVmLThi YTItZTcxNDMyNGMxNWQ3LzAvQjc2Q0VFNjZDRDMyOUU0RUREMzNFNkQzNDUyQTMz RkJCRTAwRDc0MS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAI2sgYTNic8RR7Sfzf92G4tPavPSAW2F4+oo NABiLIkuIfdYuuXjWXwv+TQQ8Db1GnyvHof0AoAwGyBn+SmgllUz1DM0QMTBY7Jt E1efuYTMLQks1Lxk9tjDqfh4Vh1VtojSvUEIfkheIIUmstESJLAFsRQ3D/SqSo0z Zrr272Nipk79t5R8+DGWgin1MVgg2EE+2lgc9lQCBXqflKllSqEteUFx0x+W0cYZ uXCnp2E8bwI9N1BgeYOZpr5sAzkxwe7mD2cFLHwf5uni+qpk6is5bYkx6rO7YAtR pxdp2QzDBiAfUO9qsNSXyUwJZ7WdSxQ1VpbGSvVfKe2qBNQxyW4= -----END CERTIFICATE-----Generated at Tue Nov 4 12:55:35 2025 by rpki-client