$ rpki-client -vvf repo-rpki.idnic.net/repo/f7f49068-c0ca-4a21-9a8a-eed26fcdd1aa/0/B144E4EB28F69D9B76C0C2499BFD7B3EC503EF3E.mft File: B144E4EB28F69D9B76C0C2499BFD7B3EC503EF3E.mft (raw, json) Hash identifier: SePoOqP2RzvOhppRcmPjGTsUrQpVZCx0yvYVpd7V66w= Subject key identifier: 19:E8:69:CC:7A:AE:DD:6F:E9:5C:D7:E0:12:65:2A:02:A4:2C:3F:B4 Authority key identifier: B1:44:E4:EB:28:F6:9D:9B:76:C0:C2:49:9B:FD:7B:3E:C5:03:EF:3E Certificate issuer: /CN=B144E4EB28F69D9B76C0C2499BFD7B3EC503EF3E Certificate serial: 250411ECA13FB169C7896231C2686EE4F3D2B403 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B144E4EB28F69D9B76C0C2499BFD7B3EC503EF3E.cer Subject info access: rsync://repo-rpki.idnic.net/repo/f7f49068-c0ca-4a21-9a8a-eed26fcdd1aa/0/B144E4EB28F69D9B76C0C2499BFD7B3EC503EF3E.mft Manifest number: 051D Signing time: Sun 02 Nov 2025 18:30:45 +0000 Manifest this update: Sun 02 Nov 2025 18:25:45 +0000 Manifest next update: Wed 05 Nov 2025 22:28:45 +0000 Files and hashes: 1: B144E4EB28F69D9B76C0C2499BFD7B3EC503EF3E.crl (hash: YFoFJZ8yCGmck/UjfBqpAxlixSWIFqAjZkoHYItWBRI=) 2: 3130332e32382e3130362e302f32342d3234203d3e203538343736.roa (hash: 3CwSzY5tw6Zm4h624sLhttPd8ZN8CiHTGKhVehN+hWE=) 3: 323030313a6466303a3236663a3a2f34382d3438203d3e203538343736.roa (hash: 19ABnycRhti98EG6MJ/6S6W4a31omV6sktXNN7fCeRE=) 4: 34332e3234322e3133332e302f32342d3234203d3e203538343736.roa (hash: 2NAEElgvlB7IhQMwd1Atvpj3R7riVOfOU9AzMjYnGF0=) 5: 34332e3234322e3133322e302f32342d3234203d3e203538343736.roa (hash: ut8mKe181e+GL8gZVd8D9lpxfAhurYa657vG8sPaVZU=) 6: 3130332e37322e3131302e302f32342d3234203d3e203538343736.roa (hash: voekDMYuoDNmVswZr7/xsWsJnvx7lZSdUg+Aq+ToSP0=) 7: 3130332e32382e3130372e302f32342d3234203d3e203538343736.roa (hash: 1UalLxKn41/lSLgzHwYn+86cGRYM0p3PY4M21eZtrAo=) 8: 3130332e37322e3131312e302f32342d3234203d3e203538343736.roa (hash: lw8CjbCa9nau6CgaK9qo3W7fJOYahpzK8W9j4IBI5bo=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/f7f49068-c0ca-4a21-9a8a-eed26fcdd1aa/0/B144E4EB28F69D9B76C0C2499BFD7B3EC503EF3E.crl rsync://repo-rpki.idnic.net/repo/f7f49068-c0ca-4a21-9a8a-eed26fcdd1aa/0/B144E4EB28F69D9B76C0C2499BFD7B3EC503EF3E.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B144E4EB28F69D9B76C0C2499BFD7B3EC503EF3E.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 05 Nov 2025 22:28:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 25:04:11:ec:a1:3f:b1:69:c7:89:62:31:c2:68:6e:e4:f3:d2:b4:03 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B144E4EB28F69D9B76C0C2499BFD7B3EC503EF3E Validity Not Before: Nov 2 18:25:45 2025 GMT Not After : Nov 5 22:28:45 2025 GMT Subject: CN=19E869CC7AAEDD6FE95CD7E012652A02A42C3FB4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:4d:b5:39:2a:28:3b:57:13:d9:8f:d8:8e:5b: 4e:4e:08:9e:09:63:a2:74:b6:74:7e:71:ee:bd:15: 28:a7:3e:9e:49:fe:f1:56:d0:6c:e5:cf:03:0f:59: c7:2d:ff:5f:f5:6e:4a:e1:e6:73:65:15:38:3a:bc: 18:6c:6a:ab:d5:41:55:13:da:f9:48:9b:fe:3f:df: 2a:e7:47:5b:a3:f4:d3:b7:50:91:f7:70:73:60:f7: 65:64:af:d9:81:e9:78:b9:bf:42:76:04:f4:88:41: ab:03:8c:f0:4f:84:26:9a:30:4e:08:07:f9:2c:37: 85:15:87:89:93:4e:d6:ec:e7:94:34:b5:7e:bf:67: 6c:30:2e:fe:ec:78:f2:b3:c5:c0:ae:e2:87:06:68: 3d:82:04:ce:9f:f7:85:33:97:e3:32:44:4e:a0:75: 36:6d:95:65:08:77:55:f7:34:44:a2:10:b9:ef:d9: e3:38:9e:57:34:7b:8b:0f:17:3c:d8:eb:fe:c3:b4: 7a:29:ec:6e:11:55:82:b0:87:0b:ce:26:6b:33:0e: 42:f0:53:3d:a2:b3:33:c1:f1:70:1e:10:6a:1e:55: 0b:73:c1:38:f3:6b:41:11:75:11:5b:90:c2:28:43: 36:de:ed:03:a2:be:c3:8e:08:27:da:37:62:96:66: f0:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 19:E8:69:CC:7A:AE:DD:6F:E9:5C:D7:E0:12:65:2A:02:A4:2C:3F:B4 X509v3 Authority Key Identifier: keyid:B1:44:E4:EB:28:F6:9D:9B:76:C0:C2:49:9B:FD:7B:3E:C5:03:EF:3E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/f7f49068-c0ca-4a21-9a8a-eed26fcdd1aa/0/B144E4EB28F69D9B76C0C2499BFD7B3EC503EF3E.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B144E4EB28F69D9B76C0C2499BFD7B3EC503EF3E.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f7f49068-c0ca-4a21-9a8a-eed26fcdd1aa/0/B144E4EB28F69D9B76C0C2499BFD7B3EC503EF3E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 70:6a:fe:d8:17:fe:82:ce:a9:88:23:b8:d4:d5:71:47:95:d2: 6b:60:32:4b:ba:d2:51:3d:92:47:e2:0a:d0:96:44:61:b2:24: f7:5a:ca:77:1a:b5:fb:4f:cb:0d:92:e3:9a:aa:34:d1:11:9d: e2:e4:23:85:84:32:2c:57:f2:7f:49:fe:f7:5f:d9:b3:ff:0a: 3a:7b:55:90:3d:7d:34:11:1c:49:a9:bd:c9:38:67:91:4e:76: 19:c0:01:cf:d5:14:75:4e:cc:a3:38:c3:90:82:3f:4c:01:bc: d0:3a:20:85:02:55:37:ea:03:38:1a:17:25:79:2a:a5:23:ba: 8a:78:e1:08:cc:45:f6:b2:b8:43:ca:ce:cd:27:4e:f2:fe:d7: 13:42:5d:20:ec:aa:ba:d5:88:7e:a5:88:59:dd:2c:a1:63:df: a9:33:cb:00:70:24:af:88:67:08:18:90:23:f6:13:61:f6:e8: 3a:32:44:4a:6d:28:ba:92:6d:47:9b:cc:94:09:49:2b:5c:c2: dc:15:39:1c:b5:01:67:08:af:15:c7:b6:f5:2f:9d:a4:d6:ac: 44:f8:50:a5:46:f7:e6:8c:d7:cf:a5:68:42:6f:00:23:fd:3b: 20:8c:0b:75:ee:3b:ff:9a:20:23:0f:3f:cc:6d:53:16:73:4d: 4f:98:42:7b -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUJQQR7KE/sWnHiWIxwmhu5PPStAMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjE0NEU0RUIyOEY2OUQ5Qjc2QzBDMjQ5OUJGRDdCM0VD NTAzRUYzRTAeFw0yNTExMDIxODI1NDVaFw0yNTExMDUyMjI4NDVaMDMxMTAvBgNV BAMTKDE5RTg2OUNDN0FBRURENkZFOTVDRDdFMDEyNjUyQTAyQTQyQzNGQjQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCoTbU5Kig7VxPZj9iOW05OCJ4J Y6J0tnR+ce69FSinPp5J/vFW0GzlzwMPWcct/1/1bkrh5nNlFTg6vBhsaqvVQVUT 2vlIm/4/3yrnR1uj9NO3UJH3cHNg92Vkr9mB6Xi5v0J2BPSIQasDjPBPhCaaME4I B/ksN4UVh4mTTtbs55Q0tX6/Z2wwLv7sePKzxcCu4ocGaD2CBM6f94Uzl+MyRE6g dTZtlWUId1X3NESiELnv2eM4nlc0e4sPFzzY6/7DtHop7G4RVYKwhwvOJmszDkLw Uz2iszPB8XAeEGoeVQtzwTjza0ERdRFbkMIoQzbe7QOivsOOCCfaN2KWZvCvAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUGehpzHqu3W/pXNfgEmUqAqQsP7QwHwYDVR0j BBgwFoAUsUTk6yj2nZt2wMJJm/17PsUD7z4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m N2Y0OTA2OC1jMGNhLTRhMjEtOWE4YS1lZWQyNmZjZGQxYWEvMC9CMTQ0RTRFQjI4 RjY5RDlCNzZDMEMyNDk5QkZEN0IzRUM1MDNFRjNFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQjE0NEU0RUIyOEY2OUQ5Qjc2QzBDMjQ5OUJGRDdCM0VDNTAz RUYzRS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZjdmNDkwNjgtYzBjYS00YTIxLTlh OGEtZWVkMjZmY2RkMWFhLzAvQjE0NEU0RUIyOEY2OUQ5Qjc2QzBDMjQ5OUJGRDdC M0VDNTAzRUYzRS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHBq/tgX/oLOqYgjuNTVcUeV0mtgMku60lE9 kkfiCtCWRGGyJPdayncatftPyw2S45qqNNERneLkI4WEMixX8n9J/vdf2bP/Cjp7 VZA9fTQRHEmpvck4Z5FOdhnAAc/VFHVOzKM4w5CCP0wBvNA6IIUCVTfqAzgaFyV5 KqUjuop44QjMRfayuEPKzs0nTvL+1xNCXSDsqrrViH6liFndLKFj36kzywBwJK+I ZwgYkCP2E2H26DoyREptKLqSbUebzJQJSStcwtwVORy1AWcIrxXHtvUvnaTWrET4 UKVG9+aM18+laEJvACP9OyCMC3XuO/+aICMPP8xtUxZzTU+YQns= -----END CERTIFICATE-----Generated at Tue Nov 4 01:58:37 2025 by rpki-client