$ rpki-client -vvf repo-rpki.idnic.net/repo/8a66f350-e642-402f-8ac3-6aef7e11aac3/0/9852ABB8508DE551F1723BC9AC5EC39B35056AE2.mft File: 9852ABB8508DE551F1723BC9AC5EC39B35056AE2.mft (raw, json) Hash identifier: 03saKK7F5gcPzPVJaxSxlvXTcm7MOKmNTZG0dfl4UGI= Subject key identifier: F5:34:CD:9B:0F:D6:EC:73:CD:1B:A3:A0:5F:3B:AC:3B:55:A8:E3:53 Authority key identifier: 98:52:AB:B8:50:8D:E5:51:F1:72:3B:C9:AC:5E:C3:9B:35:05:6A:E2 Certificate issuer: /CN=9852ABB8508DE551F1723BC9AC5EC39B35056AE2 Certificate serial: 6F02A1E934DDF51140047D159CAFA62546B1B63D Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9852ABB8508DE551F1723BC9AC5EC39B35056AE2.cer Subject info access: rsync://repo-rpki.idnic.net/repo/8a66f350-e642-402f-8ac3-6aef7e11aac3/0/9852ABB8508DE551F1723BC9AC5EC39B35056AE2.mft Manifest number: 0521 Signing time: Mon 03 Nov 2025 01:31:57 +0000 Manifest this update: Mon 03 Nov 2025 01:26:57 +0000 Manifest next update: Thu 06 Nov 2025 07:01:57 +0000 Files and hashes: 1: 9852ABB8508DE551F1723BC9AC5EC39B35056AE2.crl (hash: R0MkFm1FGKSZkVx1PY81RRTnDhWRUr1t1zoh9NMaUms=) 2: 323030313a6466343a366430303a3a2f34382d3438203d3e20313337333734.roa (hash: 415EQue+5BmAk6tXc9Eh3zzXOH8qdWNQfAsbBNLYlC0=) 3: 3130332e3131302e3138342e302f32332d3234203d3e20313337333734.roa (hash: t6DqUPB7zlmhbQqkH/Czn9ueyAzHtFeCOGR6aaj9LSw=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/8a66f350-e642-402f-8ac3-6aef7e11aac3/0/9852ABB8508DE551F1723BC9AC5EC39B35056AE2.crl rsync://repo-rpki.idnic.net/repo/8a66f350-e642-402f-8ac3-6aef7e11aac3/0/9852ABB8508DE551F1723BC9AC5EC39B35056AE2.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9852ABB8508DE551F1723BC9AC5EC39B35056AE2.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 06 Nov 2025 07:01:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6f:02:a1:e9:34:dd:f5:11:40:04:7d:15:9c:af:a6:25:46:b1:b6:3d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9852ABB8508DE551F1723BC9AC5EC39B35056AE2 Validity Not Before: Nov 3 01:26:57 2025 GMT Not After : Nov 6 07:01:57 2025 GMT Subject: CN=F534CD9B0FD6EC73CD1BA3A05F3BAC3B55A8E353 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:7d:de:1b:0a:be:b9:18:a1:7b:a8:3c:bf:ca: 7d:c9:e2:ef:de:48:36:ca:cc:fa:72:dc:f7:08:2a: 5f:40:7a:c3:2b:70:9d:cf:4a:6b:c5:94:7a:4d:b0: 58:62:ab:34:45:d3:4e:1e:e5:e4:5c:2c:75:a8:b2: 33:58:d7:4c:e8:5f:02:d1:d0:60:48:e0:b0:8e:da: 5b:a7:1f:92:66:8c:c1:c2:16:a8:a5:5d:54:0e:77: 0a:30:ba:67:af:30:80:b9:fb:87:4a:c0:37:50:a3: a6:15:60:b3:79:9d:23:25:5b:2a:cc:07:67:d9:4f: 36:b0:24:cf:e8:96:0b:1b:a6:f3:97:04:1e:f3:88: b8:87:bb:8d:24:17:74:f1:a1:21:1e:c9:7c:aa:b4: b3:36:1c:e0:c0:48:d6:82:71:c3:52:ff:c6:3f:56: 59:ef:e0:e3:a7:67:dc:f8:06:37:02:83:d6:6e:1c: e1:b1:0f:1c:38:7b:cf:17:28:96:59:46:63:35:91: 5d:45:3b:83:cf:6e:ce:18:03:0b:b6:ad:94:e6:88: a8:b3:c6:61:8f:8e:24:33:45:5c:bb:f9:22:4d:f3: 1d:ff:a4:56:ea:31:2a:fa:97:9c:5c:82:65:30:57: bb:f4:62:1d:51:bd:5c:8f:4c:34:30:6e:90:09:c6: 9c:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F5:34:CD:9B:0F:D6:EC:73:CD:1B:A3:A0:5F:3B:AC:3B:55:A8:E3:53 X509v3 Authority Key Identifier: keyid:98:52:AB:B8:50:8D:E5:51:F1:72:3B:C9:AC:5E:C3:9B:35:05:6A:E2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/8a66f350-e642-402f-8ac3-6aef7e11aac3/0/9852ABB8508DE551F1723BC9AC5EC39B35056AE2.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9852ABB8508DE551F1723BC9AC5EC39B35056AE2.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/8a66f350-e642-402f-8ac3-6aef7e11aac3/0/9852ABB8508DE551F1723BC9AC5EC39B35056AE2.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 79:10:19:82:a0:25:2a:80:88:99:e9:ca:09:f4:b0:a4:e6:11: ed:10:3e:72:13:69:a2:17:e3:23:70:d8:d9:a6:3a:55:56:9a: bc:0e:c1:26:86:ca:9a:8b:ff:af:9f:68:ea:cf:b2:3c:78:93: 5b:91:0e:5f:bb:ff:77:af:e8:87:f6:71:26:42:b3:48:7a:0c: 49:6d:50:e9:84:e7:22:d6:f3:74:7b:dd:40:cd:c2:10:49:1e: 2d:ba:8f:dc:49:3f:17:20:48:68:74:30:bf:72:81:d4:a4:8d: 9e:de:51:e8:fc:46:d8:bd:9c:1d:db:27:d1:f5:19:4c:5b:b6: 12:1e:17:f5:42:b5:bc:74:1b:ba:3f:a9:35:de:de:5a:ae:eb: 9d:87:14:44:70:07:c6:1f:9f:53:93:da:85:28:18:80:3d:4c: ef:e4:86:e5:fe:c3:77:1a:46:a8:b5:cd:8e:cb:37:8c:18:45: 3b:60:e8:21:24:1b:05:7e:a4:6d:9a:a2:74:79:0f:7e:9a:e9: c7:a1:06:53:c9:b6:3b:a6:c3:46:bf:5a:fc:51:eb:86:db:c4: 4c:f9:22:07:d1:03:2b:d6:39:eb:03:53:67:a9:31:44:d7:d6: 79:ae:c6:49:f2:55:7c:e6:50:4b:48:51:7c:5d:ab:fe:94:a4: 8e:56:59:b9 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUbwKh6TTd9RFABH0VnK+mJUaxtj0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTg1MkFCQjg1MDhERTU1MUYxNzIzQkM5QUM1RUMzOUIz NTA1NkFFMjAeFw0yNTExMDMwMTI2NTdaFw0yNTExMDYwNzAxNTdaMDMxMTAvBgNV BAMTKEY1MzRDRDlCMEZENkVDNzNDRDFCQTNBMDVGM0JBQzNCNTVBOEUzNTMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDSfd4bCr65GKF7qDy/yn3J4u/e SDbKzPpy3PcIKl9AesMrcJ3PSmvFlHpNsFhiqzRF004e5eRcLHWosjNY10zoXwLR 0GBI4LCO2lunH5JmjMHCFqilXVQOdwowumevMIC5+4dKwDdQo6YVYLN5nSMlWyrM B2fZTzawJM/olgsbpvOXBB7ziLiHu40kF3TxoSEeyXyqtLM2HODASNaCccNS/8Y/ Vlnv4OOnZ9z4BjcCg9ZuHOGxDxw4e88XKJZZRmM1kV1FO4PPbs4YAwu2rZTmiKiz xmGPjiQzRVy7+SJN8x3/pFbqMSr6l5xcgmUwV7v0Yh1RvVyPTDQwbpAJxpwxAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU9TTNmw/W7HPNG6OgXzusO1Wo41MwHwYDVR0j BBgwFoAUmFKruFCN5VHxcjvJrF7DmzUFauIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 YTY2ZjM1MC1lNjQyLTQwMmYtOGFjMy02YWVmN2UxMWFhYzMvMC85ODUyQUJCODUw OERFNTUxRjE3MjNCQzlBQzVFQzM5QjM1MDU2QUUyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOTg1MkFCQjg1MDhERTU1MUYxNzIzQkM5QUM1RUMzOUIzNTA1 NkFFMi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOGE2NmYzNTAtZTY0Mi00MDJmLThh YzMtNmFlZjdlMTFhYWMzLzAvOTg1MkFCQjg1MDhERTU1MUYxNzIzQkM5QUM1RUMz OUIzNTA1NkFFMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHkQGYKgJSqAiJnpygn0sKTmEe0QPnITaaIX 4yNw2NmmOlVWmrwOwSaGypqL/6+faOrPsjx4k1uRDl+7/3ev6If2cSZCs0h6DElt UOmE5yLW83R73UDNwhBJHi26j9xJPxcgSGh0ML9ygdSkjZ7eUej8Rti9nB3bJ9H1 GUxbthIeF/VCtbx0G7o/qTXe3lqu652HFERwB8Yfn1OT2oUoGIA9TO/khuX+w3ca Rqi1zY7LN4wYRTtg6CEkGwV+pG2aonR5D36a6cehBlPJtjumw0a/WvxR64bbxEz5 IgfRAyvWOesDU2epMUTX1nmuxknyVXzmUEtIUXxdq/6UpI5WWbk= -----END CERTIFICATE-----Generated at Tue Nov 4 02:20:33 2025 by rpki-client