$ rpki-client -vvf repo-rpki.idnic.net/repo/fa674668-0613-4a64-9323-547636b7d8b0/0/B8B47DE574D44D4CC9A3E4E2E1F7AC9CB0AEA0B5.mft File: B8B47DE574D44D4CC9A3E4E2E1F7AC9CB0AEA0B5.mft (raw, json) Hash identifier: ofGvGqaSt4ilONKzBdyzFfmHqiMXoq8pwLCLb2YyL6E= Subject key identifier: 69:83:6C:D9:32:7D:27:69:E0:A3:BD:2C:E1:69:4D:5F:EE:62:10:6C Authority key identifier: B8:B4:7D:E5:74:D4:4D:4C:C9:A3:E4:E2:E1:F7:AC:9C:B0:AE:A0:B5 Certificate issuer: /CN=B8B47DE574D44D4CC9A3E4E2E1F7AC9CB0AEA0B5 Certificate serial: 0C446C2903AF9C7DBCE75870654BD8A5FC319E1F Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B8B47DE574D44D4CC9A3E4E2E1F7AC9CB0AEA0B5.cer Subject info access: rsync://repo-rpki.idnic.net/repo/fa674668-0613-4a64-9323-547636b7d8b0/0/B8B47DE574D44D4CC9A3E4E2E1F7AC9CB0AEA0B5.mft Manifest number: 01AA Signing time: Mon 03 Nov 2025 20:42:15 +0000 Manifest this update: Mon 03 Nov 2025 20:37:15 +0000 Manifest next update: Fri 07 Nov 2025 01:18:15 +0000 Files and hashes: 1: B8B47DE574D44D4CC9A3E4E2E1F7AC9CB0AEA0B5.crl (hash: 4AHX4eITMgz8kthWHNvWr53gJ7EbCtbVbUiUH6vO4aM=) 2: 3130332e3131372e35362e302f32332d3234203d3e20313336303532.roa (hash: BAM070FvjGLMXJWAH9pbtiKqBzEQlvrgCYvemvA5CUw=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/fa674668-0613-4a64-9323-547636b7d8b0/0/B8B47DE574D44D4CC9A3E4E2E1F7AC9CB0AEA0B5.crl rsync://repo-rpki.idnic.net/repo/fa674668-0613-4a64-9323-547636b7d8b0/0/B8B47DE574D44D4CC9A3E4E2E1F7AC9CB0AEA0B5.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B8B47DE574D44D4CC9A3E4E2E1F7AC9CB0AEA0B5.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 07 Nov 2025 01:18:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0c:44:6c:29:03:af:9c:7d:bc:e7:58:70:65:4b:d8:a5:fc:31:9e:1f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B8B47DE574D44D4CC9A3E4E2E1F7AC9CB0AEA0B5 Validity Not Before: Nov 3 20:37:15 2025 GMT Not After : Nov 7 01:18:15 2025 GMT Subject: CN=69836CD9327D2769E0A3BD2CE1694D5FEE62106C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:7d:da:67:6f:59:c6:04:c9:33:b9:87:e0:11: 9d:e2:1d:ad:15:f7:9f:97:5d:ed:e1:fa:e3:56:34: 36:09:3a:6f:91:4f:4e:3b:fd:d7:2b:e5:55:bf:f2: 16:cd:22:07:f8:7a:cf:62:79:cc:18:4d:d3:83:c4: 1c:c7:f6:32:85:a1:9f:ea:aa:df:b4:c8:7d:61:0a: 41:de:f0:62:1e:b5:9c:75:74:e7:0e:4f:1b:ef:f5: 10:2a:08:ed:e8:11:f0:57:6e:51:eb:82:93:7c:fd: ed:41:93:87:31:5d:a0:85:43:61:5a:5a:e4:b6:46: b4:da:15:5b:20:19:af:48:c0:dd:b0:e6:e7:0e:c7: df:fe:6f:36:47:d2:60:b3:d4:96:ec:56:e8:1c:1b: 65:63:3e:15:46:1b:2b:ac:29:45:62:a0:d6:5c:da: 36:c6:4e:8f:e6:b2:2c:2b:af:3d:c2:1d:a7:63:e6: 3b:8e:26:eb:f0:db:da:ba:84:72:98:ed:90:e8:54: 84:c6:35:ba:c3:90:9e:0f:0d:0d:76:b6:0b:6d:83: dd:b4:fc:b1:a7:fe:95:aa:30:34:8c:50:cc:5e:c4: d2:47:51:54:09:4c:0d:01:55:eb:b4:ec:74:88:1f: e8:6b:42:a5:fe:8d:74:12:c8:e7:7b:08:3c:35:bf: ff:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 69:83:6C:D9:32:7D:27:69:E0:A3:BD:2C:E1:69:4D:5F:EE:62:10:6C X509v3 Authority Key Identifier: keyid:B8:B4:7D:E5:74:D4:4D:4C:C9:A3:E4:E2:E1:F7:AC:9C:B0:AE:A0:B5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/fa674668-0613-4a64-9323-547636b7d8b0/0/B8B47DE574D44D4CC9A3E4E2E1F7AC9CB0AEA0B5.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B8B47DE574D44D4CC9A3E4E2E1F7AC9CB0AEA0B5.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/fa674668-0613-4a64-9323-547636b7d8b0/0/B8B47DE574D44D4CC9A3E4E2E1F7AC9CB0AEA0B5.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4f:b1:9a:16:0a:19:72:25:c2:52:a4:79:55:08:b5:53:1a:f7: 75:9d:97:ef:05:d9:f5:2b:9d:cc:26:10:b4:ed:d6:cf:65:14: ca:4e:e7:19:97:c3:6c:7a:1f:09:ed:a0:d5:70:3f:b2:da:69: 72:10:35:71:1a:53:65:35:ef:54:7b:75:8c:f4:66:4d:ec:2a: ed:0a:87:99:e9:c6:4f:43:9e:e0:b4:f4:39:81:8d:4a:ec:cd: 57:27:96:ed:41:84:1a:5a:b9:3c:e4:31:ec:79:12:42:ce:b7: 6a:42:24:c7:9d:f8:89:c2:1e:d5:d3:87:24:f5:8f:6c:50:c7: ae:5f:b2:7b:9f:e9:24:dc:19:5b:6d:8d:a4:de:ef:e0:68:0f: 3e:e0:e4:a3:41:ea:f0:8b:ff:ae:88:a0:c1:2a:6c:2f:ae:09: 3c:45:b1:ed:d8:52:0b:0b:50:cf:62:fd:ab:99:b2:54:c2:b1: 64:7e:c7:5c:0b:a9:3f:47:01:cf:4b:80:72:a2:14:a4:11:8e: 83:19:ff:8a:6f:68:ee:28:d1:af:b4:ec:ad:9d:70:8b:ce:8c: 4b:3e:c8:23:c4:ef:c7:82:80:8b:60:b5:4b:be:85:b5:30:d4: 1c:82:17:64:42:b8:e6:44:2f:3f:09:d4:17:a1:cc:d7:63:74: da:2b:66:01 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUDERsKQOvnH2851hwZUvYpfwxnh8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjhCNDdERTU3NEQ0NEQ0Q0M5QTNFNEUyRTFGN0FDOUNC MEFFQTBCNTAeFw0yNTExMDMyMDM3MTVaFw0yNTExMDcwMTE4MTVaMDMxMTAvBgNV BAMTKDY5ODM2Q0Q5MzI3RDI3NjlFMEEzQkQyQ0UxNjk0RDVGRUU2MjEwNkMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCzfdpnb1nGBMkzuYfgEZ3iHa0V 95+XXe3h+uNWNDYJOm+RT047/dcr5VW/8hbNIgf4es9iecwYTdODxBzH9jKFoZ/q qt+0yH1hCkHe8GIetZx1dOcOTxvv9RAqCO3oEfBXblHrgpN8/e1Bk4cxXaCFQ2Fa WuS2RrTaFVsgGa9IwN2w5ucOx9/+bzZH0mCz1JbsVugcG2VjPhVGGyusKUVioNZc 2jbGTo/msiwrrz3CHadj5juOJuvw29q6hHKY7ZDoVITGNbrDkJ4PDQ12tgttg920 /LGn/pWqMDSMUMxexNJHUVQJTA0BVeu07HSIH+hrQqX+jXQSyOd7CDw1v//PAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUaYNs2TJ9J2ngo70s4WlNX+5iEGwwHwYDVR0j BBgwFoAUuLR95XTUTUzJo+Ti4fesnLCuoLUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m YTY3NDY2OC0wNjEzLTRhNjQtOTMyMy01NDc2MzZiN2Q4YjAvMC9COEI0N0RFNTc0 RDQ0RDRDQzlBM0U0RTJFMUY3QUM5Q0IwQUVBMEI1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQjhCNDdERTU3NEQ0NEQ0Q0M5QTNFNEUyRTFGN0FDOUNCMEFF QTBCNS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZmE2NzQ2NjgtMDYxMy00YTY0LTkz MjMtNTQ3NjM2YjdkOGIwLzAvQjhCNDdERTU3NEQ0NEQ0Q0M5QTNFNEUyRTFGN0FD OUNCMEFFQTBCNS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAE+xmhYKGXIlwlKkeVUItVMa93Wdl+8F2fUr ncwmELTt1s9lFMpO5xmXw2x6HwntoNVwP7LaaXIQNXEaU2U171R7dYz0Zk3sKu0K h5npxk9DnuC09DmBjUrszVcnlu1BhBpauTzkMex5EkLOt2pCJMed+InCHtXThyT1 j2xQx65fsnuf6STcGVttjaTe7+BoDz7g5KNB6vCL/66IoMEqbC+uCTxFse3YUgsL UM9i/auZslTCsWR+x1wLqT9HAc9LgHKiFKQRjoMZ/4pvaO4o0a+07K2dcIvOjEs+ yCPE78eCgItgtUu+hbUw1ByCF2RCuOZELz8J1BehzNdjdNorZgE= -----END CERTIFICATE-----Generated at Tue Nov 4 16:41:09 2025 by rpki-client