$ rpki-client -vvf repo-rpki.idnic.net/repo/e5b1e57e-a0f1-467f-a46f-55a3157b0d65/0/B8C2A2B1B21164AF8EAEE387C7D9A5D94D4F8308.mft File: B8C2A2B1B21164AF8EAEE387C7D9A5D94D4F8308.mft (raw, json) Hash identifier: PQwPjnGvTiJG9BYY5FhiSCGB26Tz4U20vzAHj7wYAmo= Subject key identifier: E5:3C:B6:95:84:F3:93:41:60:7E:61:65:66:BD:20:6C:E6:9B:CF:97 Authority key identifier: B8:C2:A2:B1:B2:11:64:AF:8E:AE:E3:87:C7:D9:A5:D9:4D:4F:83:08 Certificate issuer: /CN=B8C2A2B1B21164AF8EAEE387C7D9A5D94D4F8308 Certificate serial: 1376C2F514DFF6FF2151150C6142CBB66F8D907A Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B8C2A2B1B21164AF8EAEE387C7D9A5D94D4F8308.cer Subject info access: rsync://repo-rpki.idnic.net/repo/e5b1e57e-a0f1-467f-a46f-55a3157b0d65/0/B8C2A2B1B21164AF8EAEE387C7D9A5D94D4F8308.mft Manifest number: 01C4 Signing time: Mon 03 Nov 2025 02:11:07 +0000 Manifest this update: Mon 03 Nov 2025 02:06:07 +0000 Manifest next update: Thu 06 Nov 2025 07:18:07 +0000 Files and hashes: 1: 3230322e3135392e39362e302f31392d3234203d3e2039333430.roa (hash: 4CYpX855PsKjE7pRqG0I65N8tDE2yevHm2JcGXCxF84=) 2: B8C2A2B1B21164AF8EAEE387C7D9A5D94D4F8308.crl (hash: PK5oD9epqEa+Zz573auYFDcqHxowfknVP2sawPojL0c=) 3: 3230322e35332e3232342e302f31392d3234203d3e2039333430.roa (hash: cxySA+7GoKy0ZBQ953Jz7wXFE+7U1S6vU/NAFozpO4w=) 4: 3230322e3135332e3232342e302f31392d3234203d3e2039333430.roa (hash: vY8tbOcXriyCtT6FUxDmURMpeDa3xL/alWeAEYVK8DM=) 5: 3230322e3135392e302e302f31382d3234203d3e2039333430.roa (hash: Juur4GxLWpPp32FXP5B1lQD8F+2wWzZU/lQ5cSimSag=) 6: 3230322e3135392e35302e302f32332d3234203d3e203435373239.roa (hash: 7LPe2lEj9jSSghBzwzWvEJHD1rdTalK2jKZeyt7h7R0=) 7: 3131372e35342e302e302f31362d3234203d3e2039333430.roa (hash: UieSxZjEvKIMrWcJdH2TDXUustdkDqF4w0J/hh4yLRA=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/e5b1e57e-a0f1-467f-a46f-55a3157b0d65/0/B8C2A2B1B21164AF8EAEE387C7D9A5D94D4F8308.crl rsync://repo-rpki.idnic.net/repo/e5b1e57e-a0f1-467f-a46f-55a3157b0d65/0/B8C2A2B1B21164AF8EAEE387C7D9A5D94D4F8308.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B8C2A2B1B21164AF8EAEE387C7D9A5D94D4F8308.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 06 Nov 2025 07:18:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13:76:c2:f5:14:df:f6:ff:21:51:15:0c:61:42:cb:b6:6f:8d:90:7a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B8C2A2B1B21164AF8EAEE387C7D9A5D94D4F8308 Validity Not Before: Nov 3 02:06:07 2025 GMT Not After : Nov 6 07:18:07 2025 GMT Subject: CN=E53CB69584F39341607E616566BD206CE69BCF97 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:2e:51:72:5c:0d:66:df:f6:53:e8:8b:a5:8a: 9c:d9:ec:b4:07:d0:61:d8:f9:fe:e6:f6:a5:68:f4: d4:a9:1b:b0:1a:d7:d3:91:d1:df:c4:e3:27:87:e9: dd:42:e8:91:d1:de:61:c3:00:5d:5f:10:5c:d9:a8: c1:b2:65:24:9c:95:6c:ef:20:21:ce:e8:7c:40:43: c0:ff:dd:2e:2f:29:fe:cb:d8:2b:29:30:36:19:28: 90:71:f7:9e:bb:d0:a0:1c:49:a4:b6:14:71:6d:80: e7:0b:61:da:58:28:7c:57:41:bb:a8:b9:d6:8e:0e: a3:21:55:14:08:29:36:6c:22:93:8f:6a:fc:d6:b5: 12:36:4f:35:9f:2a:98:a5:a2:fd:b7:96:85:fc:21: 74:64:e8:66:7e:c4:f4:5b:5f:2d:95:99:1c:ce:a7: 14:9f:a8:15:78:82:a5:49:e9:be:09:8e:53:8e:1c: 48:03:4a:0b:63:55:bd:d9:3a:c0:79:0f:2f:ab:88: f5:88:48:7f:6f:86:16:3b:14:af:3e:b9:8b:1a:83: 87:23:68:5b:4a:15:ee:6f:34:36:9d:6c:34:bc:9e: 53:dd:1b:c5:94:05:55:d5:8c:35:d6:cf:a1:59:57: f9:a6:39:21:1c:ba:6e:c0:ba:8b:03:31:9e:fa:a4: e1:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E5:3C:B6:95:84:F3:93:41:60:7E:61:65:66:BD:20:6C:E6:9B:CF:97 X509v3 Authority Key Identifier: keyid:B8:C2:A2:B1:B2:11:64:AF:8E:AE:E3:87:C7:D9:A5:D9:4D:4F:83:08 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/e5b1e57e-a0f1-467f-a46f-55a3157b0d65/0/B8C2A2B1B21164AF8EAEE387C7D9A5D94D4F8308.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B8C2A2B1B21164AF8EAEE387C7D9A5D94D4F8308.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e5b1e57e-a0f1-467f-a46f-55a3157b0d65/0/B8C2A2B1B21164AF8EAEE387C7D9A5D94D4F8308.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 39:03:6c:65:88:5b:40:37:6e:40:19:a8:78:51:d1:04:bb:e2: 99:65:43:76:21:98:36:f1:ae:4d:98:d4:94:d7:3a:4a:ab:48: f9:c7:92:00:94:d7:9b:9f:93:c7:44:21:d8:b9:19:c1:69:9b: 03:85:b0:85:d9:83:66:f3:df:6e:18:7c:ad:4b:a2:06:2f:5c: a0:cb:cc:6c:7f:ec:13:46:35:8e:f6:99:51:58:10:11:7f:13: 9a:ea:cc:1e:ee:3f:9f:f6:18:f8:3a:7a:16:d0:b8:f1:b5:1d: 56:f8:74:15:29:55:65:39:34:62:d2:73:ca:2d:91:e6:a9:77: 06:f5:e9:1c:2f:2c:79:b4:97:fc:9f:13:ff:b4:68:a6:0e:40: 8e:22:6e:59:61:75:fa:99:d0:ea:83:a5:cf:5a:cb:bf:ea:e4: 94:a2:36:97:33:d9:8d:42:8c:fd:67:ee:3c:0b:6e:93:d0:1e: 3e:05:ff:99:2c:92:ec:9d:00:f2:ea:5b:25:5a:ba:04:f5:4f: 3b:38:cd:e9:f9:36:8f:e3:c9:46:ed:da:2c:ff:14:ea:94:0d: 66:db:32:1f:fc:92:a7:88:99:d8:82:d8:cd:11:e1:bc:18:e4: d1:c8:a5:6c:fd:b0:74:8e:11:64:ab:b7:9d:3c:ef:7d:e3:60: bb:0d:dd:10 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUE3bC9RTf9v8hURUMYULLtm+NkHowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjhDMkEyQjFCMjExNjRBRjhFQUVFMzg3QzdEOUE1RDk0 RDRGODMwODAeFw0yNTExMDMwMjA2MDdaFw0yNTExMDYwNzE4MDdaMDMxMTAvBgNV BAMTKEU1M0NCNjk1ODRGMzkzNDE2MDdFNjE2NTY2QkQyMDZDRTY5QkNGOTcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC4LlFyXA1m3/ZT6IulipzZ7LQH 0GHY+f7m9qVo9NSpG7Aa19OR0d/E4yeH6d1C6JHR3mHDAF1fEFzZqMGyZSSclWzv ICHO6HxAQ8D/3S4vKf7L2CspMDYZKJBx95670KAcSaS2FHFtgOcLYdpYKHxXQbuo udaODqMhVRQIKTZsIpOPavzWtRI2TzWfKpilov23loX8IXRk6GZ+xPRbXy2VmRzO pxSfqBV4gqVJ6b4JjlOOHEgDSgtjVb3ZOsB5Dy+riPWISH9vhhY7FK8+uYsag4cj aFtKFe5vNDadbDS8nlPdG8WUBVXVjDXWz6FZV/mmOSEcum7AuosDMZ76pOHFAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU5Ty2lYTzk0FgfmFlZr0gbOabz5cwHwYDVR0j BBgwFoAUuMKisbIRZK+OruOHx9ml2U1PgwgwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l NWIxZTU3ZS1hMGYxLTQ2N2YtYTQ2Zi01NWEzMTU3YjBkNjUvMC9COEMyQTJCMUIy MTE2NEFGOEVBRUUzODdDN0Q5QTVEOTRENEY4MzA4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQjhDMkEyQjFCMjExNjRBRjhFQUVFMzg3QzdEOUE1RDk0RDRG ODMwOC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZTViMWU1N2UtYTBmMS00NjdmLWE0 NmYtNTVhMzE1N2IwZDY1LzAvQjhDMkEyQjFCMjExNjRBRjhFQUVFMzg3QzdEOUE1 RDk0RDRGODMwOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADkDbGWIW0A3bkAZqHhR0QS74pllQ3YhmDbx rk2Y1JTXOkqrSPnHkgCU15ufk8dEIdi5GcFpmwOFsIXZg2bz324YfK1LogYvXKDL zGx/7BNGNY72mVFYEBF/E5rqzB7uP5/2GPg6ehbQuPG1HVb4dBUpVWU5NGLSc8ot keapdwb16RwvLHm0l/yfE/+0aKYOQI4ibllhdfqZ0OqDpc9ay7/q5JSiNpcz2Y1C jP1n7jwLbpPQHj4F/5kskuydAPLqWyVaugT1Tzs4zen5No/jyUbt2iz/FOqUDWbb Mh/8kqeImdiC2M0R4bwY5NHIpWz9sHSOEWSrt508733jYLsN3RA= -----END CERTIFICATE-----Generated at Wed Nov 5 06:05:17 2025 by rpki-client