$ rpki-client -vvf repo-rpki.idnic.net/repo/05669807-050e-43ae-8708-b46b8817842c/0/0912BC2A8D2E8BF2553D7106FF6E62228E03C1E4.mft File: 0912BC2A8D2E8BF2553D7106FF6E62228E03C1E4.mft (raw, json) Hash identifier: qHLQnyO8WhhE7DOHq/W+JEXzx8uZbeMnDd0ZF+lGck8= Subject key identifier: 20:FC:B4:92:7B:D8:09:1A:1B:11:CD:65:51:E7:3F:34:F8:D7:FA:5E Authority key identifier: 09:12:BC:2A:8D:2E:8B:F2:55:3D:71:06:FF:6E:62:22:8E:03:C1:E4 Certificate issuer: /CN=0912BC2A8D2E8BF2553D7106FF6E62228E03C1E4 Certificate serial: 1BA3E988E700ACC3169C2EA4BCEF774F0D1E10FF Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0912BC2A8D2E8BF2553D7106FF6E62228E03C1E4.cer Subject info access: rsync://repo-rpki.idnic.net/repo/05669807-050e-43ae-8708-b46b8817842c/0/0912BC2A8D2E8BF2553D7106FF6E62228E03C1E4.mft Manifest number: 0520 Signing time: Mon 03 Nov 2025 15:01:17 +0000 Manifest this update: Mon 03 Nov 2025 14:56:17 +0000 Manifest next update: Fri 07 Nov 2025 01:45:17 +0000 Files and hashes: 1: 3130332e3133302e3138322e302f32332d3233203d3e20313338303833.roa (hash: /xZYFYyOB1e+pblVdjFbZfEDRpifvi0rioH8bq15tlY=) 2: 0912BC2A8D2E8BF2553D7106FF6E62228E03C1E4.crl (hash: u8uJoSsAuDtukGxgMKstgWMS5Z9X+RcxUBSgvc4sIXc=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/05669807-050e-43ae-8708-b46b8817842c/0/0912BC2A8D2E8BF2553D7106FF6E62228E03C1E4.crl rsync://repo-rpki.idnic.net/repo/05669807-050e-43ae-8708-b46b8817842c/0/0912BC2A8D2E8BF2553D7106FF6E62228E03C1E4.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0912BC2A8D2E8BF2553D7106FF6E62228E03C1E4.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 07 Nov 2025 01:45:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1b:a3:e9:88:e7:00:ac:c3:16:9c:2e:a4:bc:ef:77:4f:0d:1e:10:ff Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0912BC2A8D2E8BF2553D7106FF6E62228E03C1E4 Validity Not Before: Nov 3 14:56:17 2025 GMT Not After : Nov 7 01:45:17 2025 GMT Subject: CN=20FCB4927BD8091A1B11CD6551E73F34F8D7FA5E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:32:31:9a:f3:4c:e9:6a:78:04:38:fd:9c:92: a8:01:69:ea:e8:96:7e:e0:4f:a0:30:b4:07:66:6e: 6a:90:ad:84:e1:e8:2f:36:6a:a5:3d:c2:2b:65:0f: 7b:c3:42:56:77:d3:15:89:b5:bf:cd:06:00:b6:3f: 2c:a4:2e:34:24:e8:e5:17:78:e9:fa:0c:50:18:1a: 36:3d:d3:d1:12:76:b9:fa:d0:7b:ca:d5:d4:15:46: 39:43:ab:70:2d:ad:66:b0:f3:ad:02:1b:a8:ee:b2: 32:63:46:a7:d7:6c:75:2a:70:92:fd:20:fd:4f:87: e3:04:26:b1:c8:7c:8d:56:3d:c8:e5:d7:05:43:96: f8:d1:63:37:9e:8e:7c:8e:e0:c8:b6:24:78:b1:e3: d5:6d:e0:c3:3f:46:cd:b9:6f:23:8c:80:cc:a3:eb: 52:7e:8b:9b:8c:9a:37:50:77:e2:73:18:c6:0b:4e: 8a:d6:21:98:11:77:c9:cb:af:00:cc:41:e3:5d:49: 0a:f0:00:3d:fd:c3:3c:57:cd:25:1a:24:b1:87:64: 4d:5c:0d:ef:d2:07:9f:9a:b6:57:65:92:d5:97:31: 84:80:75:63:bf:0d:82:91:4b:8b:d7:59:23:d3:ce: 32:0f:82:29:1c:52:c0:95:81:27:a3:7d:de:af:f7: c2:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:FC:B4:92:7B:D8:09:1A:1B:11:CD:65:51:E7:3F:34:F8:D7:FA:5E X509v3 Authority Key Identifier: keyid:09:12:BC:2A:8D:2E:8B:F2:55:3D:71:06:FF:6E:62:22:8E:03:C1:E4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/05669807-050e-43ae-8708-b46b8817842c/0/0912BC2A8D2E8BF2553D7106FF6E62228E03C1E4.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0912BC2A8D2E8BF2553D7106FF6E62228E03C1E4.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/05669807-050e-43ae-8708-b46b8817842c/0/0912BC2A8D2E8BF2553D7106FF6E62228E03C1E4.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 03:b3:b3:b0:1d:60:e4:dc:7a:e9:2c:98:12:73:e9:ac:c5:1d: 64:af:6e:da:9a:f2:2d:1d:8f:ee:3f:03:87:43:25:75:4c:23: 73:74:75:3d:be:19:06:53:ff:10:ce:2c:69:a7:af:55:77:60: 73:7a:c2:bd:bd:58:f4:2e:e1:d5:46:1d:2e:20:50:6a:37:b3: f0:9f:19:e6:d9:77:f5:96:21:1f:c3:e9:ea:6d:c1:08:b3:ce: e1:e4:03:db:30:54:84:e4:09:8f:8b:63:2f:af:4b:b0:b1:76: fe:b2:66:27:00:7f:97:bc:ec:a4:85:e2:ab:23:26:9f:a3:ee: 5d:5b:4c:72:2d:58:72:2b:12:f1:d7:48:58:b4:4e:63:3a:25: db:94:ce:05:45:0e:bf:74:76:3b:2f:52:38:ac:76:7f:15:f3: 05:2e:15:66:ca:a7:55:06:84:e1:92:71:c9:5d:1b:36:65:1b: 4e:ec:b8:66:64:44:91:ba:c8:8d:db:f5:cb:da:e7:56:50:4a: a8:11:80:74:16:c2:25:f9:b4:df:6b:ff:e7:1c:6e:48:3a:3a: 80:5e:d9:17:30:2a:03:5c:b2:7f:9d:c3:89:39:65:af:d3:d7: 40:ab:97:39:b8:0e:33:b1:31:04:fb:c5:f0:37:e4:76:70:82: d8:9d:32:62 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUG6PpiOcArMMWnC6kvO93Tw0eEP8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDkxMkJDMkE4RDJFOEJGMjU1M0Q3MTA2RkY2RTYyMjI4 RTAzQzFFNDAeFw0yNTExMDMxNDU2MTdaFw0yNTExMDcwMTQ1MTdaMDMxMTAvBgNV BAMTKDIwRkNCNDkyN0JEODA5MUExQjExQ0Q2NTUxRTczRjM0RjhEN0ZBNUUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDoMjGa80zpangEOP2ckqgBaero ln7gT6AwtAdmbmqQrYTh6C82aqU9witlD3vDQlZ30xWJtb/NBgC2PyykLjQk6OUX eOn6DFAYGjY909ESdrn60HvK1dQVRjlDq3AtrWaw860CG6jusjJjRqfXbHUqcJL9 IP1Ph+MEJrHIfI1WPcjl1wVDlvjRYzeejnyO4Mi2JHix49Vt4MM/Rs25byOMgMyj 61J+i5uMmjdQd+JzGMYLTorWIZgRd8nLrwDMQeNdSQrwAD39wzxXzSUaJLGHZE1c De/SB5+atldlktWXMYSAdWO/DYKRS4vXWSPTzjIPgikcUsCVgSejfd6v98IvAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUIPy0knvYCRobEc1lUec/NPjX+l4wHwYDVR0j BBgwFoAUCRK8Ko0ui/JVPXEG/25iIo4DweQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w NTY2OTgwNy0wNTBlLTQzYWUtODcwOC1iNDZiODgxNzg0MmMvMC8wOTEyQkMyQThE MkU4QkYyNTUzRDcxMDZGRjZFNjIyMjhFMDNDMUU0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMDkxMkJDMkE4RDJFOEJGMjU1M0Q3MTA2RkY2RTYyMjI4RTAz QzFFNC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMDU2Njk4MDctMDUwZS00M2FlLTg3 MDgtYjQ2Yjg4MTc4NDJjLzAvMDkxMkJDMkE4RDJFOEJGMjU1M0Q3MTA2RkY2RTYy MjI4RTAzQzFFNC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAOzs7AdYOTceuksmBJz6azFHWSvbtqa8i0d j+4/A4dDJXVMI3N0dT2+GQZT/xDOLGmnr1V3YHN6wr29WPQu4dVGHS4gUGo3s/Cf GebZd/WWIR/D6eptwQizzuHkA9swVITkCY+LYy+vS7Cxdv6yZicAf5e87KSF4qsj Jp+j7l1bTHItWHIrEvHXSFi0TmM6JduUzgVFDr90djsvUjisdn8V8wUuFWbKp1UG hOGSccldGzZlG07suGZkRJG6yI3b9cva51ZQSqgRgHQWwiX5tN9r/+ccbkg6OoBe 2RcwKgNcsn+dw4k5Za/T10Crlzm4DjOxMQT7xfA35HZwgtidMmI= -----END CERTIFICATE-----Generated at Tue Nov 4 21:20:41 2025 by rpki-client