$ rpki-client -vvf repo-rpki.idnic.net/repo/481d54cb-57a9-4a16-a70e-c5f6024e139d/0/C08E65A250AEDC93967004D660D25DB8293AB419.mft File: C08E65A250AEDC93967004D660D25DB8293AB419.mft (raw, json) Hash identifier: mKZ9XrreqyoB64szoa2Fy44wuyKmQYHhV7iBJEjAPWE= Subject key identifier: C0:4A:3C:5C:F7:40:14:A7:1C:4C:A6:ED:BE:E7:C2:E9:A5:58:2A:18 Authority key identifier: C0:8E:65:A2:50:AE:DC:93:96:70:04:D6:60:D2:5D:B8:29:3A:B4:19 Certificate issuer: /CN=C08E65A250AEDC93967004D660D25DB8293AB419 Certificate serial: 0F28D62ABD9382B7302B6640E7C2A86796EF3F3A Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/C08E65A250AEDC93967004D660D25DB8293AB419.cer Subject info access: rsync://repo-rpki.idnic.net/repo/481d54cb-57a9-4a16-a70e-c5f6024e139d/0/C08E65A250AEDC93967004D660D25DB8293AB419.mft Manifest number: AA Signing time: Tue 04 Nov 2025 15:01:17 +0000 Manifest this update: Tue 04 Nov 2025 14:56:17 +0000 Manifest next update: Sat 08 Nov 2025 02:13:17 +0000 Files and hashes: 1: 3136302e3138372e3231392e302f32342d3234203d3e20313533313332.roa (hash: VI5amVZMC5v2utwkbkM6uux1JOpkEgEOw5W8n9olw68=) 2: 3136302e3138372e3231382e302f32342d3234203d3e20313533313332.roa (hash: 2o2jdCVbNyj/6dX+oq2zQPU0J+pHhSRrwsuCtvlNp9A=) 3: C08E65A250AEDC93967004D660D25DB8293AB419.crl (hash: e1+eTaNviZHrpSb7SQgrUchQsmz7ruYWpwJygZoN4No=) 4: 3136302e3138372e3231382e302f32332d3233203d3e20313533313332.roa (hash: xQqvUTJq/TqdKwLf4G80fezav1LupyUO9lDHs53vxIs=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/481d54cb-57a9-4a16-a70e-c5f6024e139d/0/C08E65A250AEDC93967004D660D25DB8293AB419.crl rsync://repo-rpki.idnic.net/repo/481d54cb-57a9-4a16-a70e-c5f6024e139d/0/C08E65A250AEDC93967004D660D25DB8293AB419.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/C08E65A250AEDC93967004D660D25DB8293AB419.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 07 Nov 2025 10:49:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0f:28:d6:2a:bd:93:82:b7:30:2b:66:40:e7:c2:a8:67:96:ef:3f:3a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C08E65A250AEDC93967004D660D25DB8293AB419 Validity Not Before: Nov 4 14:56:17 2025 GMT Not After : Nov 8 02:13:17 2025 GMT Subject: CN=C04A3C5CF74014A71C4CA6EDBEE7C2E9A5582A18 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:c6:61:10:a2:0c:bb:bb:50:c9:9d:c6:a3:8b: 4e:97:87:30:ff:cf:3d:51:62:9f:2c:05:a2:00:c8: 2c:47:74:ac:ff:ed:01:ca:8c:c1:23:d4:ec:94:ca: 65:6d:77:a6:6c:81:4d:ef:27:8d:da:a9:71:d4:8d: d2:5e:9f:d1:5c:eb:e5:2a:d3:17:89:78:30:99:96: 62:75:41:d4:a3:32:a5:00:94:07:b2:15:cd:c2:d7: 46:a9:39:79:1a:01:07:74:0b:65:6b:61:90:70:0c: 1d:81:be:bd:0c:b7:ac:38:bd:b7:1c:e6:84:0d:5d: 81:27:50:45:8f:1c:b7:53:b9:cb:e2:f0:7b:ae:11: 04:c9:b0:aa:3a:ad:5d:c2:a8:1f:63:45:9d:d7:4e: 64:dd:fe:07:6a:69:91:70:f8:ca:cb:0d:d6:5e:8d: 9a:01:2d:41:3d:00:c9:e7:d2:74:32:cf:2c:a1:c6: 08:ac:77:a4:16:e1:a9:89:be:34:8f:23:4c:d3:8d: be:a7:e0:47:22:d5:69:e1:62:75:72:66:73:49:8c: e5:a3:e8:44:ec:93:27:10:e7:86:79:88:7a:76:89: d6:ee:6e:06:82:53:10:30:b0:ba:20:3f:9e:12:ba: 6e:d2:fb:52:b6:71:5b:53:10:96:85:47:b2:58:89: e3:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C0:4A:3C:5C:F7:40:14:A7:1C:4C:A6:ED:BE:E7:C2:E9:A5:58:2A:18 X509v3 Authority Key Identifier: keyid:C0:8E:65:A2:50:AE:DC:93:96:70:04:D6:60:D2:5D:B8:29:3A:B4:19 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/481d54cb-57a9-4a16-a70e-c5f6024e139d/0/C08E65A250AEDC93967004D660D25DB8293AB419.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/C08E65A250AEDC93967004D660D25DB8293AB419.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/481d54cb-57a9-4a16-a70e-c5f6024e139d/0/C08E65A250AEDC93967004D660D25DB8293AB419.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b0:23:ca:70:fe:91:0c:17:95:64:dd:b3:6e:90:ee:fd:0c:a6: 21:3e:b8:19:35:ff:19:5d:ce:2e:27:ff:e8:d4:bf:c9:95:02: 76:25:3a:a6:9c:34:f8:11:80:f3:cb:9b:1d:bc:22:e4:04:36: cb:12:dd:26:17:69:45:a9:4d:46:3a:d1:13:ea:ed:e4:5a:09: 7d:1d:cf:f0:df:72:26:d7:27:7a:b9:dc:88:0a:14:69:75:33: 7d:dc:2e:11:d9:81:6c:40:b9:74:98:01:64:b1:14:e4:e7:3a: f6:a5:bd:55:3a:eb:5a:af:a0:d5:94:28:01:cd:bc:09:46:a7: 67:77:14:62:27:0a:16:fb:b6:12:1f:ba:1c:4a:93:16:e1:92: 49:fa:43:16:33:60:72:4a:f3:bd:d1:dd:ba:55:ba:b1:82:48: 28:67:74:2f:37:7f:5f:29:e7:bb:93:3d:c9:9b:5a:d6:93:aa: 5b:c5:39:b3:16:93:92:87:47:cc:50:21:96:39:79:ad:bb:e5: 46:44:28:b4:68:01:3a:f1:ec:25:b3:59:bb:26:18:eb:ef:98: 01:2e:d0:79:d0:de:b7:70:2a:9e:7e:3d:ab:4c:8f:55:46:a7: 6b:84:67:60:59:65:d4:92:4f:6e:41:14:72:87:3e:2a:50:4d: 27:0b:4d:0c -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUDyjWKr2TgrcwK2ZA58KoZ5bvPzowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzA4RTY1QTI1MEFFREM5Mzk2NzAwNEQ2NjBEMjVEQjgy OTNBQjQxOTAeFw0yNTExMDQxNDU2MTdaFw0yNTExMDgwMjEzMTdaMDMxMTAvBgNV BAMTKEMwNEEzQzVDRjc0MDE0QTcxQzRDQTZFREJFRTdDMkU5QTU1ODJBMTgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCxxmEQogy7u1DJncaji06XhzD/ zz1RYp8sBaIAyCxHdKz/7QHKjMEj1OyUymVtd6ZsgU3vJ43aqXHUjdJen9Fc6+Uq 0xeJeDCZlmJ1QdSjMqUAlAeyFc3C10apOXkaAQd0C2VrYZBwDB2Bvr0Mt6w4vbcc 5oQNXYEnUEWPHLdTucvi8HuuEQTJsKo6rV3CqB9jRZ3XTmTd/gdqaZFw+MrLDdZe jZoBLUE9AMnn0nQyzyyhxgisd6QW4amJvjSPI0zTjb6n4Eci1WnhYnVyZnNJjOWj 6ETskycQ54Z5iHp2idbubgaCUxAwsLogP54Sum7S+1K2cVtTEJaFR7JYiePhAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUwEo8XPdAFKccTKbtvufC6aVYKhgwHwYDVR0j BBgwFoAUwI5lolCu3JOWcATWYNJduCk6tBkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 ODFkNTRjYi01N2E5LTRhMTYtYTcwZS1jNWY2MDI0ZTEzOWQvMC9DMDhFNjVBMjUw QUVEQzkzOTY3MDA0RDY2MEQyNURCODI5M0FCNDE5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvQzA4RTY1QTI1MEFFREM5Mzk2NzAwNEQ2NjBEMjVEQjgyOTNB QjQxOS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNDgxZDU0Y2ItNTdhOS00YTE2LWE3 MGUtYzVmNjAyNGUxMzlkLzAvQzA4RTY1QTI1MEFFREM5Mzk2NzAwNEQ2NjBEMjVE QjgyOTNBQjQxOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALAjynD+kQwXlWTds26Q7v0MpiE+uBk1/xld zi4n/+jUv8mVAnYlOqacNPgRgPPLmx28IuQENssS3SYXaUWpTUY60RPq7eRaCX0d z/DfcibXJ3q53IgKFGl1M33cLhHZgWxAuXSYAWSxFOTnOvalvVU661qvoNWUKAHN vAlGp2d3FGInChb7thIfuhxKkxbhkkn6QxYzYHJK873R3bpVurGCSChndC83f18p 57uTPcmbWtaTqlvFObMWk5KHR8xQIZY5ea275UZEKLRoATrx7CWzWbsmGOvvmAEu 0HnQ3rdwKp5+PatMj1VGp2uEZ2BZZdSST25BFHKHPipQTScLTQw= -----END CERTIFICATE-----Generated at Wed Nov 5 00:29:13 2025 by rpki-client