$ rpki-client -vvf repo-rpki.idnic.net/repo/5f86b12e-e574-426b-aa6b-4939e3b030ba/0/08773191FBFC21A3C8615A3E36A2ACB187F63C25.mft File: 08773191FBFC21A3C8615A3E36A2ACB187F63C25.mft (raw, json) Hash identifier: 9iBCX1f4f5HCHxYXnKF0DAqMQcE8cpSAHHFjTgXCGBw= Subject key identifier: 78:1A:05:27:E7:AB:D4:76:17:64:4D:9D:1E:4D:62:F5:7A:CC:4D:D7 Authority key identifier: 08:77:31:91:FB:FC:21:A3:C8:61:5A:3E:36:A2:AC:B1:87:F6:3C:25 Certificate issuer: /CN=08773191FBFC21A3C8615A3E36A2ACB187F63C25 Certificate serial: 38BA480B18751BCFCFBD02275D96B6A4AC3F6B0B Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/08773191FBFC21A3C8615A3E36A2ACB187F63C25.cer Subject info access: rsync://repo-rpki.idnic.net/repo/5f86b12e-e574-426b-aa6b-4939e3b030ba/0/08773191FBFC21A3C8615A3E36A2ACB187F63C25.mft Manifest number: 0532 Signing time: Mon 03 Nov 2025 17:01:37 +0000 Manifest this update: Mon 03 Nov 2025 16:56:37 +0000 Manifest next update: Thu 06 Nov 2025 21:47:37 +0000 Files and hashes: 1: 08773191FBFC21A3C8615A3E36A2ACB187F63C25.crl (hash: d3VBMXmYIUskCGpWLp3t8W1z/N2V11FKwfkHxeh1R5Y=) 2: 3130332e3130322e31342e302f32342d3234203d3e20313336383635.roa (hash: xpIpnLctgV8IvR/95nZhbbNFRCrOenQ8KDE2o6OGJuo=) 3: 3130332e3130322e31322e302f32342d3234203d3e20313336383635.roa (hash: 3P9Pl6Hs5uriFWxnAGmotMmA1+l8H3Rlr0SXz2N0yKQ=) 4: 323430313a646234303a3a2f33322d3332203d3e20313336383635.roa (hash: KGUF32Kc9eR09Ep+PLSsXC9//4a1BdJ7Q2PE9xYrp/A=) 5: 3130332e3130322e31352e302f32342d3234203d3e20313337333331.roa (hash: pfUFTVsuIPjmnx0LWYbFiwDyhGMbxuFA/hftBufAVsk=) 6: 3130332e3130322e31332e302f32342d3234203d3e20313336383635.roa (hash: w8KhQhAE9qtOeUsIYiL4lko66TpmJ+xch/XP9e9vq2Y=) 7: 3130332e3130322e31322e302f32332d3233203d3e20313336383635.roa (hash: VX2tVKkS7LzPxrLmOsssh+r2zJ3zeiGSJ2bMTYWz5Q8=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/5f86b12e-e574-426b-aa6b-4939e3b030ba/0/08773191FBFC21A3C8615A3E36A2ACB187F63C25.crl rsync://repo-rpki.idnic.net/repo/5f86b12e-e574-426b-aa6b-4939e3b030ba/0/08773191FBFC21A3C8615A3E36A2ACB187F63C25.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/08773191FBFC21A3C8615A3E36A2ACB187F63C25.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 06 Nov 2025 21:47:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 38:ba:48:0b:18:75:1b:cf:cf:bd:02:27:5d:96:b6:a4:ac:3f:6b:0b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=08773191FBFC21A3C8615A3E36A2ACB187F63C25 Validity Not Before: Nov 3 16:56:37 2025 GMT Not After : Nov 6 21:47:37 2025 GMT Subject: CN=781A0527E7ABD47617644D9D1E4D62F57ACC4DD7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:b1:e4:5c:ee:5e:86:e8:a0:79:bb:7e:51:31: b6:e2:a9:a4:06:09:e4:13:b3:68:94:e3:cd:be:89: 36:cc:f8:a7:1a:2b:2a:9b:eb:84:5a:9f:94:67:8a: 3a:21:f0:14:ad:03:ea:e8:cb:b3:33:6d:08:28:4b: 91:1e:97:fb:81:a6:50:f5:14:d4:07:f5:49:9f:24: 17:8f:32:b7:68:78:c6:e1:69:33:00:fc:7d:5d:d8: 8c:7b:b2:1c:69:ba:89:99:7d:5e:4e:4c:a3:76:31: 71:6c:9d:d8:bb:51:a8:ce:ff:59:2f:68:a5:fc:76: 48:7d:1d:33:73:a9:0c:ee:34:4c:9a:0a:73:57:0f: f0:42:81:21:3c:1f:60:3c:b6:54:cb:31:a1:a8:a7: dc:66:01:34:e3:b0:dd:ce:88:1e:94:a3:ba:37:59: 5d:f4:ac:50:16:74:5f:38:2a:96:52:ed:67:8c:47: d7:3c:10:2a:0a:ca:07:d3:db:7d:f7:96:db:c2:cd: fd:6b:c4:73:9e:d2:75:8d:08:42:ac:f7:67:59:a1: 42:2e:09:73:f3:c5:c8:c7:04:71:c2:2e:73:12:d6: 51:99:c1:ef:d8:fc:59:17:9f:46:88:c4:be:26:70: 7c:41:81:50:c5:49:31:8a:8f:f8:c0:e7:61:53:cb: cf:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 78:1A:05:27:E7:AB:D4:76:17:64:4D:9D:1E:4D:62:F5:7A:CC:4D:D7 X509v3 Authority Key Identifier: keyid:08:77:31:91:FB:FC:21:A3:C8:61:5A:3E:36:A2:AC:B1:87:F6:3C:25 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/5f86b12e-e574-426b-aa6b-4939e3b030ba/0/08773191FBFC21A3C8615A3E36A2ACB187F63C25.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/08773191FBFC21A3C8615A3E36A2ACB187F63C25.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/5f86b12e-e574-426b-aa6b-4939e3b030ba/0/08773191FBFC21A3C8615A3E36A2ACB187F63C25.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7e:68:77:e0:bc:b8:1d:d7:a0:dd:73:dc:f5:dc:68:a7:ae:1f: f9:9b:c4:cc:5f:3e:bf:32:82:70:55:f7:bf:99:6b:d4:8d:56: 4f:c3:fa:79:c4:18:7a:bd:76:bd:35:a4:8a:c8:62:7e:9f:a9: 2c:f7:4e:8d:8c:c9:3f:0e:2c:69:f3:38:0d:e8:75:17:cc:6f: 13:45:99:ff:9b:8e:c8:64:0f:fb:f6:be:54:68:10:5a:7f:69: 4f:22:9d:1e:26:ef:1f:7a:d8:94:05:d6:48:76:ae:22:2e:3d: db:db:e3:df:2c:fd:6d:e0:cf:c8:c2:01:11:5f:c2:c0:ca:d4: ae:2b:68:db:60:57:94:af:6f:0d:b8:86:67:46:d5:c8:9a:4f: 1b:da:b1:27:45:3d:df:a7:9f:84:01:fd:5e:0e:f9:f5:99:63: 51:72:b4:e3:ee:e9:d6:95:e5:bf:4f:99:f9:7a:cd:d6:a8:02: e7:02:3a:30:6d:e1:49:a4:f9:81:26:e6:41:fd:3b:94:82:f3: d9:1f:41:18:46:0f:fd:82:c7:ca:83:5a:01:28:92:38:3b:45: 2c:ef:c1:3c:8d:8a:58:f2:35:62:63:d5:cb:4c:f2:39:56:4c: fa:c2:37:43:89:08:6b:2c:24:9f:c1:64:5f:e8:27:f6:1c:5a: c8:ee:a1:30 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUOLpICxh1G8/PvQInXZa2pKw/awswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDg3NzMxOTFGQkZDMjFBM0M4NjE1QTNFMzZBMkFDQjE4 N0Y2M0MyNTAeFw0yNTExMDMxNjU2MzdaFw0yNTExMDYyMTQ3MzdaMDMxMTAvBgNV BAMTKDc4MUEwNTI3RTdBQkQ0NzYxNzY0NEQ5RDFFNEQ2MkY1N0FDQzRERDcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC8seRc7l6G6KB5u35RMbbiqaQG CeQTs2iU482+iTbM+KcaKyqb64Ran5Rnijoh8BStA+roy7MzbQgoS5Eel/uBplD1 FNQH9UmfJBePMrdoeMbhaTMA/H1d2Ix7shxpuomZfV5OTKN2MXFsndi7UajO/1kv aKX8dkh9HTNzqQzuNEyaCnNXD/BCgSE8H2A8tlTLMaGop9xmATTjsN3OiB6Uo7o3 WV30rFAWdF84KpZS7WeMR9c8ECoKygfT2333ltvCzf1rxHOe0nWNCEKs92dZoUIu CXPzxcjHBHHCLnMS1lGZwe/Y/FkXn0aIxL4mcHxBgVDFSTGKj/jA52FTy8+VAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUeBoFJ+er1HYXZE2dHk1i9XrMTdcwHwYDVR0j BBgwFoAUCHcxkfv8IaPIYVo+NqKssYf2PCUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 Zjg2YjEyZS1lNTc0LTQyNmItYWE2Yi00OTM5ZTNiMDMwYmEvMC8wODc3MzE5MUZC RkMyMUEzQzg2MTVBM0UzNkEyQUNCMTg3RjYzQzI1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMDg3NzMxOTFGQkZDMjFBM0M4NjE1QTNFMzZBMkFDQjE4N0Y2 M0MyNS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNWY4NmIxMmUtZTU3NC00MjZiLWFh NmItNDkzOWUzYjAzMGJhLzAvMDg3NzMxOTFGQkZDMjFBM0M4NjE1QTNFMzZBMkFD QjE4N0Y2M0MyNS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAH5od+C8uB3XoN1z3PXcaKeuH/mbxMxfPr8y gnBV97+Za9SNVk/D+nnEGHq9dr01pIrIYn6fqSz3To2MyT8OLGnzOA3odRfMbxNF mf+bjshkD/v2vlRoEFp/aU8inR4m7x962JQF1kh2riIuPdvb498s/W3gz8jCARFf wsDK1K4raNtgV5Svbw24hmdG1ciaTxvasSdFPd+nn4QB/V4O+fWZY1FytOPu6daV 5b9Pmfl6zdaoAucCOjBt4Umk+YEm5kH9O5SC89kfQRhGD/2Cx8qDWgEokjg7RSzv wTyNiljyNWJj1ctM8jlWTPrCN0OJCGssJJ/BZF/oJ/YcWsjuoTA= -----END CERTIFICATE-----Generated at Tue Nov 4 12:55:11 2025 by rpki-client