$ rpki-client -vvf repo-rpki.idnic.net/repo/89b8604f-395a-42be-b997-e80fc1df90f9/0/0D05EF7BA71D640B784F72C7D8F0F4DCD285029E.mft File: 0D05EF7BA71D640B784F72C7D8F0F4DCD285029E.mft (raw, json) Hash identifier: mXD4ESfc7OtdYULTyFg9BAfkWjnBzRbOR8ysvLR9MzA= Subject key identifier: 49:89:3B:B5:4F:42:C2:0E:05:00:EC:09:1E:97:99:09:D6:DF:42:FF Authority key identifier: 0D:05:EF:7B:A7:1D:64:0B:78:4F:72:C7:D8:F0:F4:DC:D2:85:02:9E Certificate issuer: /CN=0D05EF7BA71D640B784F72C7D8F0F4DCD285029E Certificate serial: 137760086B10397FC8089321A8D03D00EC777873 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0D05EF7BA71D640B784F72C7D8F0F4DCD285029E.cer Subject info access: rsync://repo-rpki.idnic.net/repo/89b8604f-395a-42be-b997-e80fc1df90f9/0/0D05EF7BA71D640B784F72C7D8F0F4DCD285029E.mft Manifest number: 02B9 Signing time: Mon 03 Nov 2025 23:30:47 +0000 Manifest this update: Mon 03 Nov 2025 23:25:47 +0000 Manifest next update: Fri 07 Nov 2025 08:43:47 +0000 Files and hashes: 1: 3130332e3137372e39332e302f32342d3234203d3e20313437313435.roa (hash: v7MhMAJXwywfKNpvZVGmK8aNTXn4lXBf1MXFy8E2vnM=) 2: 3130332e3137372e39322e302f32332d3233203d3e20313437313435.roa (hash: WfXT/rfuqOQCtkSuVOvx3HMgMVWsirCiP4VcVNJi+gw=) 3: 0D05EF7BA71D640B784F72C7D8F0F4DCD285029E.crl (hash: XRAnwhDT5u3aeK0VYLssJLpGVdsRw0CR8n+W0COavd4=) 4: 3130332e3137372e39322e302f32342d3234203d3e20313437313435.roa (hash: CqE5ZCzeVRm7AAgS0qiGljnG3wqud2DW58oPqVZ6WJg=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/89b8604f-395a-42be-b997-e80fc1df90f9/0/0D05EF7BA71D640B784F72C7D8F0F4DCD285029E.crl rsync://repo-rpki.idnic.net/repo/89b8604f-395a-42be-b997-e80fc1df90f9/0/0D05EF7BA71D640B784F72C7D8F0F4DCD285029E.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0D05EF7BA71D640B784F72C7D8F0F4DCD285029E.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 07 Nov 2025 07:01:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13:77:60:08:6b:10:39:7f:c8:08:93:21:a8:d0:3d:00:ec:77:78:73 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0D05EF7BA71D640B784F72C7D8F0F4DCD285029E Validity Not Before: Nov 3 23:25:47 2025 GMT Not After : Nov 7 08:43:47 2025 GMT Subject: CN=49893BB54F42C20E0500EC091E979909D6DF42FF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:39:e6:c3:03:3b:28:7b:10:e7:f8:f9:74:eb: ba:52:81:bd:32:47:b7:b3:48:06:5c:2f:86:a5:d9: dd:6c:31:c6:fb:77:b5:13:2b:22:f6:5c:ab:9d:29: f6:b5:09:f6:e9:9d:b0:fd:26:d9:2c:42:b9:19:1b: f2:92:b4:8c:2a:d2:62:f4:ca:58:07:0a:a0:f0:9f: d0:60:c5:78:50:99:3d:72:85:08:b3:ca:b8:76:6e: a7:70:b4:5a:da:ad:da:98:ab:93:72:c6:63:2e:af: e3:d3:c9:95:97:8a:b2:17:11:57:4c:a7:4e:f1:35: 19:9f:0a:0d:0b:b4:b4:51:7a:2f:b3:d2:f9:c0:75: 40:46:63:44:8c:8c:dc:e0:65:80:aa:8c:d9:fb:18: a5:28:2d:47:01:f2:9d:89:b5:9d:4e:2c:86:b4:3f: 64:b7:61:a8:9c:0d:88:1f:c5:8b:24:d9:c4:c5:77: dc:23:2e:ed:a3:53:78:9e:5d:08:53:74:46:36:9f: eb:a3:3a:a9:d5:bc:55:ce:1f:43:f8:91:f2:d3:61: 3b:74:f9:ed:62:76:d2:b7:a9:7d:c7:58:f5:59:bc: 3e:8d:7c:5a:14:f3:68:b8:21:00:c5:2d:39:e8:db: 82:5e:23:c7:c6:dc:5b:ed:94:d5:ff:ba:46:16:32: c0:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:89:3B:B5:4F:42:C2:0E:05:00:EC:09:1E:97:99:09:D6:DF:42:FF X509v3 Authority Key Identifier: keyid:0D:05:EF:7B:A7:1D:64:0B:78:4F:72:C7:D8:F0:F4:DC:D2:85:02:9E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/89b8604f-395a-42be-b997-e80fc1df90f9/0/0D05EF7BA71D640B784F72C7D8F0F4DCD285029E.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0D05EF7BA71D640B784F72C7D8F0F4DCD285029E.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/89b8604f-395a-42be-b997-e80fc1df90f9/0/0D05EF7BA71D640B784F72C7D8F0F4DCD285029E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption af:86:ef:c0:4e:91:68:d4:ca:84:e4:63:61:c1:22:35:b8:0f: 01:6c:f2:c2:09:26:1d:09:ce:f3:25:55:79:b5:be:8b:2a:14: 58:0b:32:cb:41:d3:b2:d4:48:fb:a8:23:db:a6:c5:8e:a9:81: f3:26:88:16:2a:b3:ba:4b:2f:26:d2:e9:4a:a9:ad:42:1f:0a: 28:5f:e6:73:87:d3:07:ba:6e:77:db:3c:b1:83:40:04:f2:91: e0:18:3a:97:ec:eb:7d:94:7f:ba:37:e7:0c:89:a7:e8:8e:e3: bc:d6:bc:d6:17:04:9e:65:72:aa:c0:1c:0c:10:13:f5:cd:cd: db:98:eb:87:f8:93:d1:4c:07:10:28:cd:da:81:dc:04:19:ba: 6c:49:d1:b1:aa:a9:a7:ec:da:50:ab:65:57:22:51:a7:2e:4d: dc:8f:69:5d:17:1f:18:7e:aa:7c:27:7f:b2:73:c0:1f:70:df: 40:07:80:b4:8e:63:11:f6:9e:eb:7c:98:bf:00:1d:bf:b6:62: f2:9e:29:d6:35:eb:46:45:4e:bf:0c:e7:28:4a:da:b5:a7:fc: 59:03:c0:f8:64:b7:0e:d0:16:12:aa:1a:b1:e8:68:0f:67:fc: 19:1d:90:fc:d9:78:58:58:9a:7d:d8:eb:1c:33:af:c2:63:75: 70:b0:41:0d -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUE3dgCGsQOX/ICJMhqNA9AOx3eHMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMEQwNUVGN0JBNzFENjQwQjc4NEY3MkM3RDhGMEY0RENE Mjg1MDI5RTAeFw0yNTExMDMyMzI1NDdaFw0yNTExMDcwODQzNDdaMDMxMTAvBgNV BAMTKDQ5ODkzQkI1NEY0MkMyMEUwNTAwRUMwOTFFOTc5OTA5RDZERjQyRkYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCeOebDAzsoexDn+Pl067pSgb0y R7ezSAZcL4al2d1sMcb7d7UTKyL2XKudKfa1CfbpnbD9JtksQrkZG/KStIwq0mL0 ylgHCqDwn9BgxXhQmT1yhQizyrh2bqdwtFrardqYq5NyxmMur+PTyZWXirIXEVdM p07xNRmfCg0LtLRRei+z0vnAdUBGY0SMjNzgZYCqjNn7GKUoLUcB8p2JtZ1OLIa0 P2S3YaicDYgfxYsk2cTFd9wjLu2jU3ieXQhTdEY2n+ujOqnVvFXOH0P4kfLTYTt0 +e1idtK3qX3HWPVZvD6NfFoU82i4IQDFLTno24JeI8fG3FvtlNX/ukYWMsDxAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUSYk7tU9Cwg4FAOwJHpeZCdbfQv8wHwYDVR0j BBgwFoAUDQXve6cdZAt4T3LH2PD03NKFAp4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 OWI4NjA0Zi0zOTVhLTQyYmUtYjk5Ny1lODBmYzFkZjkwZjkvMC8wRDA1RUY3QkE3 MUQ2NDBCNzg0RjcyQzdEOEYwRjREQ0QyODUwMjlFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMEQwNUVGN0JBNzFENjQwQjc4NEY3MkM3RDhGMEY0RENEMjg1 MDI5RS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vODliODYwNGYtMzk1YS00MmJlLWI5 OTctZTgwZmMxZGY5MGY5LzAvMEQwNUVGN0JBNzFENjQwQjc4NEY3MkM3RDhGMEY0 RENEMjg1MDI5RS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAK+G78BOkWjUyoTkY2HBIjW4DwFs8sIJJh0J zvMlVXm1vosqFFgLMstB07LUSPuoI9umxY6pgfMmiBYqs7pLLybS6UqprUIfCihf 5nOH0we6bnfbPLGDQATykeAYOpfs632Uf7o35wyJp+iO47zWvNYXBJ5lcqrAHAwQ E/XNzduY64f4k9FMBxAozdqB3AQZumxJ0bGqqafs2lCrZVciUacuTdyPaV0XHxh+ qnwnf7JzwB9w30AHgLSOYxH2nut8mL8AHb+2YvKeKdY160ZFTr8M5yhK2rWn/FkD wPhktw7QFhKqGrHoaA9n/BkdkPzZeFhYmn3Y6xwzr8JjdXCwQQ0= -----END CERTIFICATE-----Generated at Tue Nov 4 02:20:33 2025 by rpki-client