$ rpki-client -vvf repo-rpki.idnic.net/repo/12307390-6ef3-4476-a6aa-d0c5783e1f37/0/8A05EBF58BEC96D946EE85F0F0F85701A0A72799.mft File: 8A05EBF58BEC96D946EE85F0F0F85701A0A72799.mft (raw, json) Hash identifier: L8OdvyZkrAIcQZa/n4WGsqfHO6P5mGr5Dz3tvBRbxFY= Subject key identifier: 01:4A:6E:0D:1F:0D:67:B5:5B:A0:D2:4D:9B:C5:C7:65:AE:2D:9E:4E Authority key identifier: 8A:05:EB:F5:8B:EC:96:D9:46:EE:85:F0:F0:F8:57:01:A0:A7:27:99 Certificate issuer: /CN=8A05EBF58BEC96D946EE85F0F0F85701A0A72799 Certificate serial: 7461F27AEF1E60C5AD5108D6F25EA986BB641B51 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8A05EBF58BEC96D946EE85F0F0F85701A0A72799.cer Subject info access: rsync://repo-rpki.idnic.net/repo/12307390-6ef3-4476-a6aa-d0c5783e1f37/0/8A05EBF58BEC96D946EE85F0F0F85701A0A72799.mft Manifest number: 0520 Signing time: Tue 04 Nov 2025 04:31:06 +0000 Manifest this update: Tue 04 Nov 2025 04:26:06 +0000 Manifest next update: Fri 07 Nov 2025 08:13:06 +0000 Files and hashes: 1: 8A05EBF58BEC96D946EE85F0F0F85701A0A72799.crl (hash: r7SfV18UuGW7pJ3OfiSl4w+VF+C1pgXNbpkLY9gNwv0=) 2: 3130332e3133392e34372e302f32342d3234203d3e203137393935.roa (hash: hRDdGequ+GhEEqBrX8O9Zq6WRslymD5ehiejKAFbvr0=) 3: 3130332e3133392e34362e302f32342d3234203d3e203137393935.roa (hash: hthNpAwJxjCDLni6mv2Gc1l+BPz0lcv9dxQLklW+A64=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/12307390-6ef3-4476-a6aa-d0c5783e1f37/0/8A05EBF58BEC96D946EE85F0F0F85701A0A72799.crl rsync://repo-rpki.idnic.net/repo/12307390-6ef3-4476-a6aa-d0c5783e1f37/0/8A05EBF58BEC96D946EE85F0F0F85701A0A72799.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8A05EBF58BEC96D946EE85F0F0F85701A0A72799.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 07 Nov 2025 08:13:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 74:61:f2:7a:ef:1e:60:c5:ad:51:08:d6:f2:5e:a9:86:bb:64:1b:51 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8A05EBF58BEC96D946EE85F0F0F85701A0A72799 Validity Not Before: Nov 4 04:26:06 2025 GMT Not After : Nov 7 08:13:06 2025 GMT Subject: CN=014A6E0D1F0D67B55BA0D24D9BC5C765AE2D9E4E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:e7:98:1a:2d:9b:f6:6b:8a:8f:fd:23:f2:d2: 12:4e:5c:81:4f:de:85:b0:79:54:60:48:6e:e9:74: f9:42:5f:e5:1f:aa:74:7d:7c:c4:06:e9:5b:e7:9e: 45:7a:7e:59:d2:78:61:10:37:7f:e1:67:a9:22:26: 31:cf:3e:19:f2:86:5a:7c:0c:96:0f:e4:1d:db:da: 8a:68:ab:31:45:48:eb:9f:a9:d6:10:38:8c:eb:58: 28:53:c1:ec:93:90:47:57:52:12:82:a7:48:5e:4e: 5f:42:1e:d4:48:35:8f:13:a1:25:13:40:88:61:a4: 62:d4:20:c2:1f:aa:49:75:3d:92:1f:e3:4e:d4:6f: 5b:d6:40:3d:90:c0:7b:b2:d4:b9:d1:a5:35:66:ec: 19:fd:57:08:b5:30:f5:33:47:cd:a4:5a:f9:67:d9: 62:c4:cb:21:81:6a:09:5f:6d:db:26:cc:a3:b4:8a: 21:ad:61:23:b1:39:29:1f:b9:64:ef:13:32:c8:12: 6e:3d:bb:29:ba:97:b5:a4:d3:bf:bd:35:79:44:40: 8d:9d:26:6a:55:75:af:71:e4:7f:7f:bf:ab:56:8f: 95:44:11:a5:39:7c:36:6a:09:92:9e:95:aa:b6:37: 00:e2:00:70:32:ca:35:67:7f:3a:f7:fe:92:bd:f8: 2b:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 01:4A:6E:0D:1F:0D:67:B5:5B:A0:D2:4D:9B:C5:C7:65:AE:2D:9E:4E X509v3 Authority Key Identifier: keyid:8A:05:EB:F5:8B:EC:96:D9:46:EE:85:F0:F0:F8:57:01:A0:A7:27:99 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/12307390-6ef3-4476-a6aa-d0c5783e1f37/0/8A05EBF58BEC96D946EE85F0F0F85701A0A72799.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8A05EBF58BEC96D946EE85F0F0F85701A0A72799.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/12307390-6ef3-4476-a6aa-d0c5783e1f37/0/8A05EBF58BEC96D946EE85F0F0F85701A0A72799.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 92:5f:4b:50:ae:ad:48:d6:87:db:69:72:4c:4c:c9:b7:08:9e: 7c:f2:65:b0:3e:b2:7b:d4:c8:f9:26:da:45:12:0e:6f:73:46: ac:36:7f:f8:b2:b3:5a:d4:38:b0:89:8e:9b:82:e7:89:ac:12: fe:61:5e:00:84:a2:6f:4a:9d:14:c6:69:9d:21:8f:42:07:33: d9:30:f4:ea:0a:4f:a0:46:7d:f0:ff:0c:aa:6f:80:6e:94:ed: 6f:86:92:1d:10:29:0a:cb:bd:18:17:a4:62:58:4f:ff:92:11: 70:cc:08:f0:06:be:d7:e2:e1:5a:f4:63:d1:5b:14:86:0d:37: 7b:56:96:a5:29:80:7b:24:45:d6:2f:73:df:e6:e6:fd:fd:c2: ee:68:4a:b4:49:2f:35:3a:8f:98:65:bc:da:2e:d3:f5:da:90: ff:ff:fc:ec:a3:e6:6a:0b:98:17:e4:bb:26:fc:45:33:e6:00: e0:f4:12:2f:4e:3b:21:f3:b7:27:1b:36:32:42:2a:8a:09:4f: 3e:4f:ea:75:6d:85:85:3a:e4:43:57:4c:d8:6f:4a:72:3f:5f: ce:0b:2e:5d:fe:1e:64:2f:4b:75:19:da:e0:db:96:3f:18:56: eb:40:e0:41:78:a5:dd:e9:94:50:8c:27:31:72:ea:c3:02:35: 9f:db:2a:bb -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUdGHyeu8eYMWtUQjW8l6phrtkG1EwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEEwNUVCRjU4QkVDOTZEOTQ2RUU4NUYwRjBGODU3MDFB MEE3Mjc5OTAeFw0yNTExMDQwNDI2MDZaFw0yNTExMDcwODEzMDZaMDMxMTAvBgNV BAMTKDAxNEE2RTBEMUYwRDY3QjU1QkEwRDI0RDlCQzVDNzY1QUUyRDlFNEUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDH55gaLZv2a4qP/SPy0hJOXIFP 3oWweVRgSG7pdPlCX+UfqnR9fMQG6VvnnkV6flnSeGEQN3/hZ6kiJjHPPhnyhlp8 DJYP5B3b2opoqzFFSOufqdYQOIzrWChTweyTkEdXUhKCp0heTl9CHtRINY8ToSUT QIhhpGLUIMIfqkl1PZIf407Ub1vWQD2QwHuy1LnRpTVm7Bn9Vwi1MPUzR82kWvln 2WLEyyGBaglfbdsmzKO0iiGtYSOxOSkfuWTvEzLIEm49uym6l7Wk07+9NXlEQI2d JmpVda9x5H9/v6tWj5VEEaU5fDZqCZKelaq2NwDiAHAyyjVnfzr3/pK9+CtnAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUAUpuDR8NZ7VboNJNm8XHZa4tnk4wHwYDVR0j BBgwFoAUigXr9YvsltlG7oXw8PhXAaCnJ5kwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x MjMwNzM5MC02ZWYzLTQ0NzYtYTZhYS1kMGM1NzgzZTFmMzcvMC84QTA1RUJGNThC RUM5NkQ5NDZFRTg1RjBGMEY4NTcwMUEwQTcyNzk5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOEEwNUVCRjU4QkVDOTZEOTQ2RUU4NUYwRjBGODU3MDFBMEE3 Mjc5OS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMTIzMDczOTAtNmVmMy00NDc2LWE2 YWEtZDBjNTc4M2UxZjM3LzAvOEEwNUVCRjU4QkVDOTZEOTQ2RUU4NUYwRjBGODU3 MDFBMEE3Mjc5OS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJJfS1CurUjWh9tpckxMybcInnzyZbA+snvU yPkm2kUSDm9zRqw2f/iys1rUOLCJjpuC54msEv5hXgCEom9KnRTGaZ0hj0IHM9kw 9OoKT6BGffD/DKpvgG6U7W+Gkh0QKQrLvRgXpGJYT/+SEXDMCPAGvtfi4Vr0Y9Fb FIYNN3tWlqUpgHskRdYvc9/m5v39wu5oSrRJLzU6j5hlvNou0/XakP///Oyj5moL mBfkuyb8RTPmAOD0Ei9OOyHztycbNjJCKooJTz5P6nVthYU65ENXTNhvSnI/X84L Ll3+HmQvS3UZ2uDblj8YVutA4EF4pd3plFCMJzFy6sMCNZ/bKrs= -----END CERTIFICATE-----Generated at Wed Nov 5 10:27:19 2025 by rpki-client