$ rpki-client -vvf repo-rpki.idnic.net/repo/d5908b83-7f44-46e0-8535-6fb84b59d58a/0/0BB3D1874063172B5374865233070332233FB7B3.mft File: 0BB3D1874063172B5374865233070332233FB7B3.mft (raw, json) Hash identifier: Gw5UKZvOdoc/xUsw2/txwU5pqxt0BDmHVcLU00/BSn8= Subject key identifier: CD:12:D6:08:32:05:AC:EE:98:6A:FC:6F:D2:18:BB:97:71:3D:0A:E6 Authority key identifier: 0B:B3:D1:87:40:63:17:2B:53:74:86:52:33:07:03:32:23:3F:B7:B3 Certificate issuer: /CN=0BB3D1874063172B5374865233070332233FB7B3 Certificate serial: 1C6A352B6DB8DD3428E01C4B15BBAB86DC0DCADE Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0BB3D1874063172B5374865233070332233FB7B3.cer Subject info access: rsync://repo-rpki.idnic.net/repo/d5908b83-7f44-46e0-8535-6fb84b59d58a/0/0BB3D1874063172B5374865233070332233FB7B3.mft Manifest number: 051B Signing time: Mon 03 Nov 2025 11:41:25 +0000 Manifest this update: Mon 03 Nov 2025 11:36:25 +0000 Manifest next update: Thu 06 Nov 2025 13:30:25 +0000 Files and hashes: 1: 0BB3D1874063172B5374865233070332233FB7B3.crl (hash: /f12g8MxQp0WvXIom1FiNvOQN34MQuOTKDqmkZBZy9k=) 2: 3131372e3130342e3139322e302f31392d3234203d3e203233363636.roa (hash: zCm8uejNjkpY+DjdGXgrEnekcPvtN86UHanFShqlM6g=) 3: 3230322e3135332e31362e302f32302d3234203d3e203233363636.roa (hash: 5FOROrvQq+0t+Mk/ACrrEVqg06jInBJCBz0qroNhCeU=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/d5908b83-7f44-46e0-8535-6fb84b59d58a/0/0BB3D1874063172B5374865233070332233FB7B3.crl rsync://repo-rpki.idnic.net/repo/d5908b83-7f44-46e0-8535-6fb84b59d58a/0/0BB3D1874063172B5374865233070332233FB7B3.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0BB3D1874063172B5374865233070332233FB7B3.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 06 Nov 2025 13:30:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1c:6a:35:2b:6d:b8:dd:34:28:e0:1c:4b:15:bb:ab:86:dc:0d:ca:de Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0BB3D1874063172B5374865233070332233FB7B3 Validity Not Before: Nov 3 11:36:25 2025 GMT Not After : Nov 6 13:30:25 2025 GMT Subject: CN=CD12D6083205ACEE986AFC6FD218BB97713D0AE6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:ba:51:8d:49:92:7f:9d:dc:88:40:8a:6c:1f: 77:a9:1d:49:28:af:d3:7e:e4:69:12:a3:30:ea:61: ed:3d:ef:b4:12:7b:02:79:78:1d:bc:55:ed:b4:3d: d1:01:bf:51:27:de:79:37:25:83:46:fe:33:81:a8: 48:a0:af:ea:8c:28:8f:23:16:36:82:72:2e:dc:57: 7e:13:fc:75:5e:6a:c3:4e:c7:fc:25:1d:97:e2:56: ad:bb:a3:e1:64:26:67:09:48:eb:f6:1b:bb:8b:00: 9e:d1:9c:51:1f:89:32:0c:8d:3a:ab:a5:d3:9e:3e: 73:96:81:db:14:16:45:63:77:f2:50:90:74:48:b3: 5b:df:35:aa:2c:a7:f9:fd:7b:30:0a:15:71:f2:d6: 90:c5:7f:2c:6d:e0:17:f6:00:fd:45:a8:a0:02:ea: 82:ea:c8:4a:83:c4:c0:46:87:eb:18:af:3f:34:5e: 1a:b2:40:9b:c4:e0:71:f2:12:c9:8a:b9:b7:ed:bd: ae:6d:c4:8f:d8:4c:39:31:29:3f:fe:5e:1f:85:9a: 69:70:dd:8f:6b:1b:2a:39:50:bd:0e:61:17:8d:d7: c9:b2:ce:84:89:72:10:a4:94:24:fe:1f:22:2f:2e: dd:21:31:7a:71:b9:c3:25:38:79:46:2f:32:45:7f: 15:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CD:12:D6:08:32:05:AC:EE:98:6A:FC:6F:D2:18:BB:97:71:3D:0A:E6 X509v3 Authority Key Identifier: keyid:0B:B3:D1:87:40:63:17:2B:53:74:86:52:33:07:03:32:23:3F:B7:B3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/d5908b83-7f44-46e0-8535-6fb84b59d58a/0/0BB3D1874063172B5374865233070332233FB7B3.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0BB3D1874063172B5374865233070332233FB7B3.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d5908b83-7f44-46e0-8535-6fb84b59d58a/0/0BB3D1874063172B5374865233070332233FB7B3.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2e:26:0c:8a:02:02:84:44:e0:3c:3a:2c:0f:14:c2:b8:3b:4a: c5:26:b0:20:ca:8f:ab:85:25:e6:2e:44:60:54:2b:73:81:2c: 8e:ad:dc:30:69:df:23:c6:21:99:7c:8d:f8:b5:d8:65:b4:ad: 1d:50:d5:ba:0b:07:9d:b5:d2:62:52:65:7f:21:33:16:c6:5a: df:1b:6e:42:c4:1e:68:84:aa:e1:e6:80:c1:30:48:17:18:61: 6b:30:b8:06:5b:b8:8e:cc:ca:fb:d2:4b:e1:5c:5d:b2:2b:a2: cb:b0:d7:4e:6d:7a:df:68:46:ed:dd:60:50:f3:ac:15:a4:f1: ce:58:ca:b0:fb:d9:e6:a7:f9:e8:d6:29:82:5c:cb:4f:3f:de: 07:97:9a:e2:04:56:5f:1d:81:24:b4:04:ef:e1:c7:78:ed:2f: c9:1f:bc:5d:95:aa:95:12:1f:cd:7d:9d:b4:48:0a:2b:17:90: f7:27:c6:ce:8c:e5:e8:61:67:2e:e7:06:86:ed:26:1a:b5:f7: ae:7a:6f:b0:f7:26:ee:52:d0:52:9d:61:79:75:31:d6:ea:22: ae:0f:c7:5c:00:2b:a8:f6:65:98:95:26:26:10:6e:15:ef:5b: cc:98:35:47:c2:07:96:88:db:03:34:a0:ec:3b:18:67:13:c8: 57:96:0b:36 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUHGo1K2243TQo4BxLFburhtwNyt4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMEJCM0QxODc0MDYzMTcyQjUzNzQ4NjUyMzMwNzAzMzIy MzNGQjdCMzAeFw0yNTExMDMxMTM2MjVaFw0yNTExMDYxMzMwMjVaMDMxMTAvBgNV BAMTKENEMTJENjA4MzIwNUFDRUU5ODZBRkM2RkQyMThCQjk3NzEzRDBBRTYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/ulGNSZJ/ndyIQIpsH3epHUko r9N+5GkSozDqYe0977QSewJ5eB28Ve20PdEBv1En3nk3JYNG/jOBqEigr+qMKI8j FjaCci7cV34T/HVeasNOx/wlHZfiVq27o+FkJmcJSOv2G7uLAJ7RnFEfiTIMjTqr pdOePnOWgdsUFkVjd/JQkHRIs1vfNaosp/n9ezAKFXHy1pDFfyxt4Bf2AP1FqKAC 6oLqyEqDxMBGh+sYrz80XhqyQJvE4HHyEsmKubftva5txI/YTDkxKT/+Xh+Fmmlw 3Y9rGyo5UL0OYReN18myzoSJchCklCT+HyIvLt0hMXpxucMlOHlGLzJFfxXPAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUzRLWCDIFrO6Yavxv0hi7l3E9CuYwHwYDVR0j BBgwFoAUC7PRh0BjFytTdIZSMwcDMiM/t7MwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k NTkwOGI4My03ZjQ0LTQ2ZTAtODUzNS02ZmI4NGI1OWQ1OGEvMC8wQkIzRDE4NzQw NjMxNzJCNTM3NDg2NTIzMzA3MDMzMjIzM0ZCN0IzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMEJCM0QxODc0MDYzMTcyQjUzNzQ4NjUyMzMwNzAzMzIyMzNG QjdCMy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZDU5MDhiODMtN2Y0NC00NmUwLTg1 MzUtNmZiODRiNTlkNThhLzAvMEJCM0QxODc0MDYzMTcyQjUzNzQ4NjUyMzMwNzAz MzIyMzNGQjdCMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAC4mDIoCAoRE4Dw6LA8Uwrg7SsUmsCDKj6uF JeYuRGBUK3OBLI6t3DBp3yPGIZl8jfi12GW0rR1Q1boLB5210mJSZX8hMxbGWt8b bkLEHmiEquHmgMEwSBcYYWswuAZbuI7MyvvSS+FcXbIrosuw105tet9oRu3dYFDz rBWk8c5YyrD72ean+ejWKYJcy08/3geXmuIEVl8dgSS0BO/hx3jtL8kfvF2VqpUS H819nbRICisXkPcnxs6M5ehhZy7nBobtJhq19656b7D3Ju5S0FKdYXl1MdbqIq4P x1wAK6j2ZZiVJiYQbhXvW8yYNUfCB5aI2wM0oOw7GGcTyFeWCzY= -----END CERTIFICATE-----Generated at Wed Nov 5 05:48:58 2025 by rpki-client