$ rpki-client -vvf repo-rpki.idnic.net/repo/2a97bcf4-e1aa-47d6-bde6-2e667b9d6134/0/A08B1B14AA5B6512424EDF8650A984942F27A4EF.mft File: A08B1B14AA5B6512424EDF8650A984942F27A4EF.mft (raw, json) Hash identifier: 7aIV02/FAQigLh9K0sxg+iOuE419ofJUQ3qfFjXcR8o= Subject key identifier: B2:FD:A4:2B:F4:52:1F:8E:39:D7:6E:AE:53:82:14:09:97:51:5C:59 Authority key identifier: A0:8B:1B:14:AA:5B:65:12:42:4E:DF:86:50:A9:84:94:2F:27:A4:EF Certificate issuer: /CN=A08B1B14AA5B6512424EDF8650A984942F27A4EF Certificate serial: 27072098C404555D1FFE530C824178575D483461 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A08B1B14AA5B6512424EDF8650A984942F27A4EF.cer Subject info access: rsync://repo-rpki.idnic.net/repo/2a97bcf4-e1aa-47d6-bde6-2e667b9d6134/0/A08B1B14AA5B6512424EDF8650A984942F27A4EF.mft Manifest number: 04B7 Signing time: Tue 04 Nov 2025 19:51:45 +0000 Manifest this update: Tue 04 Nov 2025 19:46:45 +0000 Manifest next update: Sat 08 Nov 2025 00:48:45 +0000 Files and hashes: 1: A08B1B14AA5B6512424EDF8650A984942F27A4EF.crl (hash: UMziAZ1XAO7odAndcm3j6huTXloCZOAO3h8g8wNvaII=) 2: 323430353a6263303a3a2f33332d3438203d3e20313336383432.roa (hash: /afnBbe9lqmeZWTu4VD92m9xOkkp/GMDn8V+1M5ITYk=) 3: 3130332e3130302e3234372e302f32342d3234203d3e20313336383432.roa (hash: 7kcdJn0kEx4MlESTLNrz7h+lfGYcQSPT5Qkc5rykWNw=) 4: 3130332e3130302e3234362e302f32342d3234203d3e20313336383432.roa (hash: L/oaDs9pEKj6iBvLwrU05wZAuGGAsyb/Z+4/d76DsQ0=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/2a97bcf4-e1aa-47d6-bde6-2e667b9d6134/0/A08B1B14AA5B6512424EDF8650A984942F27A4EF.crl rsync://repo-rpki.idnic.net/repo/2a97bcf4-e1aa-47d6-bde6-2e667b9d6134/0/A08B1B14AA5B6512424EDF8650A984942F27A4EF.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A08B1B14AA5B6512424EDF8650A984942F27A4EF.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 07 Nov 2025 13:50:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 27:07:20:98:c4:04:55:5d:1f:fe:53:0c:82:41:78:57:5d:48:34:61 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A08B1B14AA5B6512424EDF8650A984942F27A4EF Validity Not Before: Nov 4 19:46:45 2025 GMT Not After : Nov 8 00:48:45 2025 GMT Subject: CN=B2FDA42BF4521F8E39D76EAE5382140997515C59 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:08:23:f8:66:11:72:1b:5d:6a:8d:7e:f5:ba: 84:00:dc:b1:fb:19:77:78:4b:ea:5a:c6:f3:f0:42: dc:66:59:0d:0f:6e:4f:d4:44:fc:a1:05:66:ec:ab: e7:13:d6:a0:00:78:89:7d:22:df:26:f7:c0:f6:ae: fd:18:09:5e:82:c5:6b:86:11:8b:04:8f:cd:c1:68: 59:82:f9:55:41:b8:f4:3a:e8:37:d5:d4:1d:b5:5c: ef:7f:a2:18:5b:0b:02:47:f2:96:79:3b:b9:f2:4c: c2:1a:5c:77:77:34:1a:5c:11:b4:43:1f:69:52:de: 99:6f:c1:d3:5c:f1:b2:a5:02:04:75:0a:a3:2d:c5: 8e:a5:3d:b6:18:10:c7:5d:ee:04:ce:d4:c3:06:85: 9e:a3:aa:35:26:a5:08:1d:0e:32:89:1f:04:4d:c9: c1:9d:62:70:71:60:75:88:c7:75:b2:7d:65:2f:e3: e9:dd:d9:e1:ef:65:ee:5c:cf:e3:d8:45:7d:c8:17: 17:96:83:c7:e0:26:7c:48:89:c4:90:46:b6:dc:99: 51:7e:24:ea:db:d0:ec:ad:9a:32:f3:bc:af:b8:c9: b1:69:8d:a3:3f:51:c9:41:b8:f0:61:6f:b4:0b:0b: 14:d1:3b:ee:5c:b1:1c:ce:d2:46:a1:8e:69:53:55: df:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B2:FD:A4:2B:F4:52:1F:8E:39:D7:6E:AE:53:82:14:09:97:51:5C:59 X509v3 Authority Key Identifier: keyid:A0:8B:1B:14:AA:5B:65:12:42:4E:DF:86:50:A9:84:94:2F:27:A4:EF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/2a97bcf4-e1aa-47d6-bde6-2e667b9d6134/0/A08B1B14AA5B6512424EDF8650A984942F27A4EF.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A08B1B14AA5B6512424EDF8650A984942F27A4EF.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/2a97bcf4-e1aa-47d6-bde6-2e667b9d6134/0/A08B1B14AA5B6512424EDF8650A984942F27A4EF.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2a:89:88:f1:2e:50:90:dc:09:49:07:ba:be:c1:2f:fc:5a:88: dd:9a:c0:f5:0a:e9:8f:f8:48:96:35:51:4c:f4:42:f1:47:96: 08:b9:b8:f3:3d:cb:62:35:1d:12:d3:d7:87:ca:b4:3d:e9:37: a3:75:da:3a:19:b4:be:98:32:7a:8f:02:f7:38:20:38:e6:86: 68:7f:a2:9f:7d:61:4c:e9:7b:a5:14:37:67:d3:d3:66:88:16: c5:e3:7a:01:77:af:97:21:29:ce:78:03:39:63:3a:a9:23:dd: f4:6b:fa:ff:a8:5f:15:3d:49:f3:a4:97:ab:bf:a6:2b:96:d7: 56:3c:4c:a8:27:08:98:87:77:ed:d8:f0:5e:33:1e:4f:1a:d9: 44:ee:46:2a:03:1b:22:28:ed:c9:da:fa:b3:85:59:91:fd:7e: ba:37:b2:f6:14:cd:31:c6:a5:60:3c:29:81:36:0e:e9:e9:26: cc:68:52:cc:e9:95:3c:da:d4:81:1e:5e:89:94:3f:19:cb:ad: aa:22:af:5b:ea:ef:65:e9:fb:d7:ae:3b:44:9a:83:9b:cd:d8: 4d:39:fd:99:37:e9:03:a6:52:d0:26:6f:6b:a2:fc:48:ab:cc: 0c:c2:ab:3f:c9:2d:91:e3:67:2c:69:94:bd:de:7f:68:3f:c5: 13:3f:b6:85 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUJwcgmMQEVV0f/lMMgkF4V11INGEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTA4QjFCMTRBQTVCNjUxMjQyNEVERjg2NTBBOTg0OTQy RjI3QTRFRjAeFw0yNTExMDQxOTQ2NDVaFw0yNTExMDgwMDQ4NDVaMDMxMTAvBgNV BAMTKEIyRkRBNDJCRjQ1MjFGOEUzOUQ3NkVBRTUzODIxNDA5OTc1MTVDNTkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDYCCP4ZhFyG11qjX71uoQA3LH7 GXd4S+paxvPwQtxmWQ0Pbk/URPyhBWbsq+cT1qAAeIl9It8m98D2rv0YCV6CxWuG EYsEj83BaFmC+VVBuPQ66DfV1B21XO9/ohhbCwJH8pZ5O7nyTMIaXHd3NBpcEbRD H2lS3plvwdNc8bKlAgR1CqMtxY6lPbYYEMdd7gTO1MMGhZ6jqjUmpQgdDjKJHwRN ycGdYnBxYHWIx3WyfWUv4+nd2eHvZe5cz+PYRX3IFxeWg8fgJnxIicSQRrbcmVF+ JOrb0OytmjLzvK+4ybFpjaM/UclBuPBhb7QLCxTRO+5csRzO0kahjmlTVd9jAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUsv2kK/RSH445126uU4IUCZdRXFkwHwYDVR0j BBgwFoAUoIsbFKpbZRJCTt+GUKmElC8npO8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y YTk3YmNmNC1lMWFhLTQ3ZDYtYmRlNi0yZTY2N2I5ZDYxMzQvMC9BMDhCMUIxNEFB NUI2NTEyNDI0RURGODY1MEE5ODQ5NDJGMjdBNEVGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQTA4QjFCMTRBQTVCNjUxMjQyNEVERjg2NTBBOTg0OTQyRjI3 QTRFRi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMmE5N2JjZjQtZTFhYS00N2Q2LWJk ZTYtMmU2NjdiOWQ2MTM0LzAvQTA4QjFCMTRBQTVCNjUxMjQyNEVERjg2NTBBOTg0 OTQyRjI3QTRFRi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACqJiPEuUJDcCUkHur7BL/xaiN2awPUK6Y/4 SJY1UUz0QvFHlgi5uPM9y2I1HRLT14fKtD3pN6N12joZtL6YMnqPAvc4IDjmhmh/ op99YUzpe6UUN2fT02aIFsXjegF3r5chKc54AzljOqkj3fRr+v+oXxU9SfOkl6u/ piuW11Y8TKgnCJiHd+3Y8F4zHk8a2UTuRioDGyIo7cna+rOFWZH9fro3svYUzTHG pWA8KYE2DunpJsxoUszplTza1IEeXomUPxnLraoir1vq72Xp+9euO0Sag5vN2E05 /Zk36QOmUtAmb2ui/EirzAzCqz/JLZHjZyxplL3ef2g/xRM/toU= -----END CERTIFICATE-----Generated at Tue Nov 4 23:13:21 2025 by rpki-client