$ rpki-client -vvf repo-rpki.idnic.net/repo/ebefbf04-41be-48d7-ac00-8a3c498ca9ae/0/B8436ACB7CE8F8C2F57245FFE4E6BA2F52393F4D.mft File: B8436ACB7CE8F8C2F57245FFE4E6BA2F52393F4D.mft (raw, json) Hash identifier: FN7VjBx+rpRgJ4543PJQfpt5zfUQmKaqaLHGIvyfZ1U= Subject key identifier: 2E:99:2C:4B:BD:47:1B:9A:91:F1:7C:E2:AC:51:D8:4A:88:D0:A8:BB Authority key identifier: B8:43:6A:CB:7C:E8:F8:C2:F5:72:45:FF:E4:E6:BA:2F:52:39:3F:4D Certificate issuer: /CN=B8436ACB7CE8F8C2F57245FFE4E6BA2F52393F4D Certificate serial: 710A8713521A68296F421BFB4B92203C083424E5 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B8436ACB7CE8F8C2F57245FFE4E6BA2F52393F4D.cer Subject info access: rsync://repo-rpki.idnic.net/repo/ebefbf04-41be-48d7-ac00-8a3c498ca9ae/0/B8436ACB7CE8F8C2F57245FFE4E6BA2F52393F4D.mft Manifest number: 0384 Signing time: Mon 03 Nov 2025 06:11:46 +0000 Manifest this update: Mon 03 Nov 2025 06:06:46 +0000 Manifest next update: Thu 06 Nov 2025 07:47:46 +0000 Files and hashes: 1: 3130332e3135342e32352e302f32342d3234203d3e20313430343738.roa (hash: YWVKY2G+Nvg6caG2vXoeK6bw0DFIbKqpsrtcWOftF08=) 2: B8436ACB7CE8F8C2F57245FFE4E6BA2F52393F4D.crl (hash: jaAMzsgVdBecrOTKDBv0XMK82DuzfKIrkCem1JzCA5c=) 3: 3130332e3135342e32342e302f32332d3233203d3e20313430343738.roa (hash: s1nmEcWlMGfpOr6XkgkIDAhuvP77SQ9zj5c2Qr3sr/E=) 4: 3130332e3135342e32342e302f32342d3234203d3e20313430343738.roa (hash: OPJ+0bfTR2bNFtVvMzF36s5tfMJLI0pXwTypT9BsLeE=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/ebefbf04-41be-48d7-ac00-8a3c498ca9ae/0/B8436ACB7CE8F8C2F57245FFE4E6BA2F52393F4D.crl rsync://repo-rpki.idnic.net/repo/ebefbf04-41be-48d7-ac00-8a3c498ca9ae/0/B8436ACB7CE8F8C2F57245FFE4E6BA2F52393F4D.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B8436ACB7CE8F8C2F57245FFE4E6BA2F52393F4D.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 06 Nov 2025 07:47:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 71:0a:87:13:52:1a:68:29:6f:42:1b:fb:4b:92:20:3c:08:34:24:e5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B8436ACB7CE8F8C2F57245FFE4E6BA2F52393F4D Validity Not Before: Nov 3 06:06:46 2025 GMT Not After : Nov 6 07:47:46 2025 GMT Subject: CN=2E992C4BBD471B9A91F17CE2AC51D84A88D0A8BB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:f2:9e:24:e6:b8:9c:1d:7e:2c:b2:fd:cf:22: df:63:d3:c6:8a:f9:57:21:3c:b5:cb:37:42:5f:aa: 4e:87:50:07:4b:b3:55:b5:aa:55:a3:f9:23:44:dc: 6c:10:d4:bd:ca:e5:fb:cd:32:de:89:dd:ae:bf:c3: 1d:8c:f2:63:1c:09:0c:23:e8:76:ab:6d:8c:1a:8b: 14:76:43:56:d2:e1:55:ef:ca:5f:7c:ba:17:2d:09: ac:fd:6e:b7:d6:0a:5d:ba:77:0a:d9:53:22:f9:eb: 7b:a0:02:23:8e:5b:26:cc:70:f6:96:1b:2c:3b:b3: 66:cf:9c:2f:b5:52:6b:92:68:84:06:56:ce:4f:f7: 1b:8d:fe:2c:e2:68:a6:08:97:4c:c0:6c:80:c7:4d: c0:c2:ef:4e:94:94:2c:43:2b:dd:42:1b:92:89:77: 32:08:aa:88:9c:aa:63:71:a3:bc:48:38:63:d3:1e: 9e:1e:fd:92:32:c9:ad:6b:67:3b:2a:d7:78:b6:2c: f6:56:0c:d9:9e:da:6e:27:d8:61:b0:9c:13:92:4f: 37:53:15:2f:36:07:ef:1e:e7:56:2a:3a:12:a9:cd: 09:77:6f:d8:a6:5e:a2:29:7f:83:48:0f:5a:6a:3a: a4:84:98:ea:6c:90:a7:41:45:8f:15:30:39:4b:40: b7:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2E:99:2C:4B:BD:47:1B:9A:91:F1:7C:E2:AC:51:D8:4A:88:D0:A8:BB X509v3 Authority Key Identifier: keyid:B8:43:6A:CB:7C:E8:F8:C2:F5:72:45:FF:E4:E6:BA:2F:52:39:3F:4D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/ebefbf04-41be-48d7-ac00-8a3c498ca9ae/0/B8436ACB7CE8F8C2F57245FFE4E6BA2F52393F4D.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B8436ACB7CE8F8C2F57245FFE4E6BA2F52393F4D.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ebefbf04-41be-48d7-ac00-8a3c498ca9ae/0/B8436ACB7CE8F8C2F57245FFE4E6BA2F52393F4D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 22:65:2c:61:69:9b:de:a9:72:91:fb:24:52:47:23:4d:78:e1: c3:80:ba:25:bb:a9:4a:e1:60:d8:74:73:82:aa:81:30:70:e8: b5:dd:6e:73:65:7c:cb:e4:73:a1:d3:f5:c8:28:df:72:fb:42: a3:7e:16:f6:6b:45:de:c5:cb:1e:42:b5:86:f4:26:65:2d:07: d5:f8:ca:a7:5e:f1:34:9a:37:4f:9b:07:cb:a5:d9:3f:d0:2a: 4b:b6:28:b2:d2:0c:dc:05:78:66:dd:b8:bc:21:f7:1c:a0:7f: 22:ee:20:a1:74:bd:25:20:84:41:d7:05:91:f7:e7:f1:da:8b: 99:f4:9e:98:91:f1:d6:0f:24:4c:99:b2:9e:4e:89:36:35:1f: 86:39:25:43:5c:b9:f2:cc:9e:1f:d3:83:27:65:7f:4a:7f:ef: 6c:0e:ad:9d:84:ce:0f:42:c0:4e:a4:87:7b:48:f5:0a:87:e7: fd:1d:d6:d6:1b:c6:a9:3a:0a:d0:68:97:57:df:39:70:1f:44: bd:0f:5f:e5:49:aa:f8:e2:bc:2c:cc:c7:cd:49:5c:79:0f:eb: 52:48:3b:2f:03:8f:1d:04:2d:ff:57:96:5e:5f:c7:ca:c3:0a: 71:fa:65:38:2f:18:f7:45:ac:83:9a:c9:22:10:49:8a:bf:5b: 2b:6c:c7:d7 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUcQqHE1IaaClvQhv7S5IgPAg0JOUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjg0MzZBQ0I3Q0U4RjhDMkY1NzI0NUZGRTRFNkJBMkY1 MjM5M0Y0RDAeFw0yNTExMDMwNjA2NDZaFw0yNTExMDYwNzQ3NDZaMDMxMTAvBgNV BAMTKDJFOTkyQzRCQkQ0NzFCOUE5MUYxN0NFMkFDNTFEODRBODhEMEE4QkIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDc8p4k5ricHX4ssv3PIt9j08aK +VchPLXLN0Jfqk6HUAdLs1W1qlWj+SNE3GwQ1L3K5fvNMt6J3a6/wx2M8mMcCQwj 6HarbYwaixR2Q1bS4VXvyl98uhctCaz9brfWCl26dwrZUyL563ugAiOOWybMcPaW Gyw7s2bPnC+1UmuSaIQGVs5P9xuN/iziaKYIl0zAbIDHTcDC706UlCxDK91CG5KJ dzIIqoicqmNxo7xIOGPTHp4e/ZIyya1rZzsq13i2LPZWDNme2m4n2GGwnBOSTzdT FS82B+8e51YqOhKpzQl3b9imXqIpf4NID1pqOqSEmOpskKdBRY8VMDlLQLdbAgMB AAGjggI8MIICODAdBgNVHQ4EFgQULpksS71HG5qR8XzirFHYSojQqLswHwYDVR0j BBgwFoAUuENqy3zo+ML1ckX/5Oa6L1I5P00wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l YmVmYmYwNC00MWJlLTQ4ZDctYWMwMC04YTNjNDk4Y2E5YWUvMC9CODQzNkFDQjdD RThGOEMyRjU3MjQ1RkZFNEU2QkEyRjUyMzkzRjRELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQjg0MzZBQ0I3Q0U4RjhDMkY1NzI0NUZGRTRFNkJBMkY1MjM5 M0Y0RC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZWJlZmJmMDQtNDFiZS00OGQ3LWFj MDAtOGEzYzQ5OGNhOWFlLzAvQjg0MzZBQ0I3Q0U4RjhDMkY1NzI0NUZGRTRFNkJB MkY1MjM5M0Y0RC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACJlLGFpm96pcpH7JFJHI0144cOAuiW7qUrh YNh0c4KqgTBw6LXdbnNlfMvkc6HT9cgo33L7QqN+FvZrRd7Fyx5CtYb0JmUtB9X4 yqde8TSaN0+bB8ul2T/QKku2KLLSDNwFeGbduLwh9xygfyLuIKF0vSUghEHXBZH3 5/Hai5n0npiR8dYPJEyZsp5OiTY1H4Y5JUNcufLMnh/Tgydlf0p/72wOrZ2Ezg9C wE6kh3tI9QqH5/0d1tYbxqk6CtBol1ffOXAfRL0PX+VJqvjivCzMx81JXHkP61JI Oy8Djx0ELf9Xll5fx8rDCnH6ZTgvGPdFrIOaySIQSYq/Wytsx9c= -----END CERTIFICATE-----Generated at Tue Nov 4 22:55:45 2025 by rpki-client