$ rpki-client -vvf repo-rpki.idnic.net/repo/db8be905-f296-45d1-a879-4a4de52cb2d6/0/B2D1CBD015A419010845E6F56D8385C8647B5390.mft File: B2D1CBD015A419010845E6F56D8385C8647B5390.mft (raw, json) Hash identifier: V+0UYtkthLvIIwbmRc/7KblkHGovM5LY2iQthx8ezXs= Subject key identifier: D4:63:C7:86:51:2D:CA:89:FA:A6:81:06:E7:6F:EE:7F:B6:09:FC:99 Authority key identifier: B2:D1:CB:D0:15:A4:19:01:08:45:E6:F5:6D:83:85:C8:64:7B:53:90 Certificate issuer: /CN=B2D1CBD015A419010845E6F56D8385C8647B5390 Certificate serial: 608F91D695AF3934F17EBC0A810B45105A9DE209 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B2D1CBD015A419010845E6F56D8385C8647B5390.cer Subject info access: rsync://repo-rpki.idnic.net/repo/db8be905-f296-45d1-a879-4a4de52cb2d6/0/B2D1CBD015A419010845E6F56D8385C8647B5390.mft Manifest number: 02D0 Signing time: Tue 04 Nov 2025 06:02:07 +0000 Manifest this update: Tue 04 Nov 2025 05:57:07 +0000 Manifest next update: Fri 07 Nov 2025 15:51:07 +0000 Files and hashes: 1: 3130332e3135332e3133352e302f32342d3234203d3e20313430343634.roa (hash: oUlQyF3I0zLJjLl9EcH8NBVRAz863HrDlDUllspbny0=) 2: 323430363a343534303a3a2f33322d3332203d3e20313430343634.roa (hash: fW6me2gng7+RFAgwfv3lcoF9Ov98BB9yIZ6/btVVKsw=) 3: 3130332e3135332e3133342e302f32342d3234203d3e20313430343634.roa (hash: cn1hAJHYGCMSOghgviiiSzFiPXYh8mLQKkzicGhK/aE=) 4: B2D1CBD015A419010845E6F56D8385C8647B5390.crl (hash: juCoULxxvDVQsHzSC556FUaDPJ+vtB4Yv+6ETWdJsDA=) 5: 3130332e3135332e3133342e302f32332d3233203d3e20313430343634.roa (hash: bAHbnIP0Wicgt74YcQMMyo48qnOQtogRe4ndD6XNQrg=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/db8be905-f296-45d1-a879-4a4de52cb2d6/0/B2D1CBD015A419010845E6F56D8385C8647B5390.crl rsync://repo-rpki.idnic.net/repo/db8be905-f296-45d1-a879-4a4de52cb2d6/0/B2D1CBD015A419010845E6F56D8385C8647B5390.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B2D1CBD015A419010845E6F56D8385C8647B5390.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 07 Nov 2025 13:50:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 60:8f:91:d6:95:af:39:34:f1:7e:bc:0a:81:0b:45:10:5a:9d:e2:09 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B2D1CBD015A419010845E6F56D8385C8647B5390 Validity Not Before: Nov 4 05:57:07 2025 GMT Not After : Nov 7 15:51:07 2025 GMT Subject: CN=D463C786512DCA89FAA68106E76FEE7FB609FC99 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:fe:f5:fb:42:ce:61:76:16:fa:20:47:09:97: 4e:3f:42:b9:8d:79:e2:4f:a0:ea:a2:b8:33:51:5d: c5:fd:c4:d0:0e:90:31:16:3e:35:df:2f:a6:df:15: 94:0f:ee:62:d0:eb:2d:c5:ae:b1:b4:af:6d:83:25: 25:a1:fd:a7:78:ee:9c:c0:56:37:fd:6b:e7:00:d4: f8:1c:e0:e6:92:a5:2b:e5:35:9f:99:54:e0:96:25: 68:e6:54:5c:22:ce:f6:00:36:1e:24:fb:98:ed:e7: 18:62:4f:c6:5a:43:fe:2b:7e:63:6f:6d:42:71:28: be:13:6a:ac:b8:e8:17:36:5e:b6:48:43:72:89:bf: c3:a8:bd:9d:e2:ed:b0:49:72:12:91:46:ad:f9:b1: 32:7f:86:d8:47:dc:f9:cc:9d:6c:bf:0f:4a:a0:23: c9:c3:d5:94:5c:29:a7:2a:ae:78:b9:51:c8:b8:71: 1f:d1:00:8b:8a:cf:67:1f:ba:d5:23:18:c8:3b:21: 40:44:2e:74:a5:f2:11:5b:e3:f4:4f:5b:54:cf:e5: ea:94:40:31:14:30:a8:ee:dd:d3:df:6d:6c:78:47: 6b:0e:9f:b7:6c:f1:9a:dd:ae:c9:05:a4:69:0b:e1: 3c:5c:06:df:e2:e4:ca:b6:20:ef:1e:3d:1d:4a:80: fb:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D4:63:C7:86:51:2D:CA:89:FA:A6:81:06:E7:6F:EE:7F:B6:09:FC:99 X509v3 Authority Key Identifier: keyid:B2:D1:CB:D0:15:A4:19:01:08:45:E6:F5:6D:83:85:C8:64:7B:53:90 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/db8be905-f296-45d1-a879-4a4de52cb2d6/0/B2D1CBD015A419010845E6F56D8385C8647B5390.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B2D1CBD015A419010845E6F56D8385C8647B5390.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/db8be905-f296-45d1-a879-4a4de52cb2d6/0/B2D1CBD015A419010845E6F56D8385C8647B5390.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 15:95:e6:d3:2a:4f:d9:2e:92:7f:17:ad:1d:65:5f:5a:e3:30: 3a:a3:e7:de:ab:60:2d:d1:74:a5:da:27:49:fe:cc:87:a5:41: ea:98:f2:e8:6c:b3:cd:31:a9:60:c5:ff:b6:cf:ef:88:28:06: 92:7b:e8:75:0a:00:41:f6:b5:31:11:15:74:82:57:ac:46:0e: bf:60:c3:3b:77:57:ab:f6:47:43:42:8b:27:fb:a6:7e:07:e8: 73:db:5b:6e:04:c0:e8:c3:50:8b:e0:01:d7:f1:a2:40:e6:be: 08:46:e1:c2:1a:19:10:2d:3f:e5:26:0e:7f:c3:b7:b4:52:65: 73:3b:1c:99:89:ab:06:66:15:20:04:c3:56:80:63:7e:a0:59: fe:32:3a:94:37:2f:58:4b:c0:18:84:c6:cc:36:27:2b:03:d0: fb:fc:4e:65:9b:1f:94:cb:3b:2d:a3:73:dd:26:d4:91:fa:54: 10:41:28:75:db:3e:85:da:7a:26:02:c4:25:c8:5c:cc:94:a3: d5:9a:f3:46:a8:fe:a3:b8:f3:ca:87:c7:a8:15:55:c7:bb:90: e9:48:a4:ec:1d:b1:4a:91:7a:04:79:8d:f8:c0:ae:4b:92:4b: 25:3f:80:30:55:92:50:70:ec:11:df:2d:e8:ab:8e:15:ed:ff: 45:ce:aa:50 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUYI+R1pWvOTTxfrwKgQtFEFqd4gkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjJEMUNCRDAxNUE0MTkwMTA4NDVFNkY1NkQ4Mzg1Qzg2 NDdCNTM5MDAeFw0yNTExMDQwNTU3MDdaFw0yNTExMDcxNTUxMDdaMDMxMTAvBgNV BAMTKEQ0NjNDNzg2NTEyRENBODlGQUE2ODEwNkU3NkZFRTdGQjYwOUZDOTkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDl/vX7Qs5hdhb6IEcJl04/QrmN eeJPoOqiuDNRXcX9xNAOkDEWPjXfL6bfFZQP7mLQ6y3FrrG0r22DJSWh/ad47pzA Vjf9a+cA1Pgc4OaSpSvlNZ+ZVOCWJWjmVFwizvYANh4k+5jt5xhiT8ZaQ/4rfmNv bUJxKL4Taqy46Bc2XrZIQ3KJv8OovZ3i7bBJchKRRq35sTJ/hthH3PnMnWy/D0qg I8nD1ZRcKacqrni5Uci4cR/RAIuKz2cfutUjGMg7IUBELnSl8hFb4/RPW1TP5eqU QDEUMKju3dPfbWx4R2sOn7ds8ZrdrskFpGkL4TxcBt/i5Mq2IO8ePR1KgPt9AgMB AAGjggI8MIICODAdBgNVHQ4EFgQU1GPHhlEtyon6poEG52/uf7YJ/JkwHwYDVR0j BBgwFoAUstHL0BWkGQEIReb1bYOFyGR7U5AwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k YjhiZTkwNS1mMjk2LTQ1ZDEtYTg3OS00YTRkZTUyY2IyZDYvMC9CMkQxQ0JEMDE1 QTQxOTAxMDg0NUU2RjU2RDgzODVDODY0N0I1MzkwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQjJEMUNCRDAxNUE0MTkwMTA4NDVFNkY1NkQ4Mzg1Qzg2NDdC NTM5MC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZGI4YmU5MDUtZjI5Ni00NWQxLWE4 NzktNGE0ZGU1MmNiMmQ2LzAvQjJEMUNCRDAxNUE0MTkwMTA4NDVFNkY1NkQ4Mzg1 Qzg2NDdCNTM5MC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABWV5tMqT9kukn8XrR1lX1rjMDqj596rYC3R dKXaJ0n+zIelQeqY8uhss80xqWDF/7bP74goBpJ76HUKAEH2tTERFXSCV6xGDr9g wzt3V6v2R0NCiyf7pn4H6HPbW24EwOjDUIvgAdfxokDmvghG4cIaGRAtP+UmDn/D t7RSZXM7HJmJqwZmFSAEw1aAY36gWf4yOpQ3L1hLwBiExsw2JysD0Pv8TmWbH5TL Oy2jc90m1JH6VBBBKHXbPoXaeiYCxCXIXMyUo9Wa80ao/qO488qHx6gVVce7kOlI pOwdsUqRegR5jfjArkuSSyU/gDBVklBw7BHfLeirjhXt/0XOqlA= -----END CERTIFICATE-----Generated at Tue Nov 4 12:55:01 2025 by rpki-client