$ rpki-client -vvf repo-rpki.idnic.net/repo/8f582f2b-8625-4f38-b26e-42fbd3c21cf0/0/A950C0F5B830659E499444729038D5D2047859FB.mft File: A950C0F5B830659E499444729038D5D2047859FB.mft (raw, json) Hash identifier: Mgcfk9uqUkJJ6XTnOuRg4Cg80ZRkf6YIbPcMsWNHjds= Subject key identifier: 87:C6:1E:43:80:D4:E2:8B:17:C6:49:2B:41:71:94:03:F4:D6:CC:56 Authority key identifier: A9:50:C0:F5:B8:30:65:9E:49:94:44:72:90:38:D5:D2:04:78:59:FB Certificate issuer: /CN=A950C0F5B830659E499444729038D5D2047859FB Certificate serial: 0AFEEF990359B959D9FBE765EA2CA449AF1287BA Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/A950C0F5B830659E499444729038D5D2047859FB.cer Subject info access: rsync://repo-rpki.idnic.net/repo/8f582f2b-8625-4f38-b26e-42fbd3c21cf0/0/A950C0F5B830659E499444729038D5D2047859FB.mft Manifest number: E5 Signing time: Mon 03 Nov 2025 22:22:24 +0000 Manifest this update: Mon 03 Nov 2025 22:17:24 +0000 Manifest next update: Fri 07 Nov 2025 05:47:24 +0000 Files and hashes: 1: 3136302e32322e33372e302f32342d3234203d3e20313532373933.roa (hash: p0Gix7kk0dJdR+0SrzqwZk1UXDcM7trhKt9LXa5iNvk=) 2: 3136302e32322e33362e302f32342d3234203d3e20313532373933.roa (hash: qpEenk6wx4J1PVfOlTpwDMHCKC14Zk2TeAHNO3MKSc4=) 3: A950C0F5B830659E499444729038D5D2047859FB.crl (hash: 61w4VuZ2zfOgHic4U2QXptXUIs/9suf04RHACiY0Ttk=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/8f582f2b-8625-4f38-b26e-42fbd3c21cf0/0/A950C0F5B830659E499444729038D5D2047859FB.crl rsync://repo-rpki.idnic.net/repo/8f582f2b-8625-4f38-b26e-42fbd3c21cf0/0/A950C0F5B830659E499444729038D5D2047859FB.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/A950C0F5B830659E499444729038D5D2047859FB.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 07 Nov 2025 05:47:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0a:fe:ef:99:03:59:b9:59:d9:fb:e7:65:ea:2c:a4:49:af:12:87:ba Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A950C0F5B830659E499444729038D5D2047859FB Validity Not Before: Nov 3 22:17:24 2025 GMT Not After : Nov 7 05:47:24 2025 GMT Subject: CN=87C61E4380D4E28B17C6492B41719403F4D6CC56 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:0a:19:95:54:b5:55:da:d7:46:38:3b:91:e3: 88:5b:d2:a3:e4:0c:29:bf:70:10:87:3b:79:ca:b9: f9:bd:86:5f:4f:7a:e1:28:b8:0f:15:38:a6:91:39: 50:02:e5:5e:08:33:5e:3d:a6:73:4c:42:d5:9e:06: 42:70:47:c5:8f:3a:dc:7f:02:3e:b2:70:6c:14:37: b7:da:9b:8f:0e:00:ba:d0:59:d4:c6:ee:cf:17:72: 14:b0:ca:97:1a:85:2f:65:37:a2:9e:f8:e6:fa:10: f5:91:2e:33:69:5e:9c:a6:1e:68:15:98:14:ff:51: 1c:03:c3:69:d3:49:b3:61:6b:4a:59:61:12:c6:af: 69:5a:3e:d8:41:79:79:d4:97:61:d2:28:30:7d:41: 63:05:9e:32:28:fb:69:16:38:4b:30:a0:5c:7b:7f: 6d:96:4f:b4:4a:35:f1:0b:c8:2a:87:59:d8:13:c6: 7a:1f:9c:74:db:cc:7d:c1:6f:27:25:ee:ed:04:26: 54:48:37:43:36:68:4c:6d:f2:6f:af:99:c5:26:b4: ee:6e:21:bb:09:86:c7:fa:80:09:0a:fe:3e:a0:f9: e0:06:6b:06:fd:71:28:01:30:da:0f:51:bd:77:2d: 7a:c2:c7:e2:9b:1a:a1:33:c2:46:01:be:00:9d:d9: 96:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:C6:1E:43:80:D4:E2:8B:17:C6:49:2B:41:71:94:03:F4:D6:CC:56 X509v3 Authority Key Identifier: keyid:A9:50:C0:F5:B8:30:65:9E:49:94:44:72:90:38:D5:D2:04:78:59:FB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/8f582f2b-8625-4f38-b26e-42fbd3c21cf0/0/A950C0F5B830659E499444729038D5D2047859FB.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/A950C0F5B830659E499444729038D5D2047859FB.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/8f582f2b-8625-4f38-b26e-42fbd3c21cf0/0/A950C0F5B830659E499444729038D5D2047859FB.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 66:1a:0e:68:66:89:af:3f:0c:f1:54:38:3f:ca:11:bc:3a:fc: 1d:98:f1:1d:b2:12:ea:de:9d:1f:60:af:5f:12:d9:6b:00:52: 3e:fe:28:bf:a6:9f:2e:05:a3:32:1b:93:c7:0c:33:2f:71:79: 79:7a:09:70:80:bd:a0:c5:3f:a9:9f:d0:96:30:2b:09:8e:84: 16:7f:1c:34:05:bc:7b:14:39:f3:2c:c9:da:e3:a9:5b:82:0e: 69:be:94:26:37:fb:72:d9:ed:33:aa:52:91:ed:c4:be:c5:c0: 5f:84:f0:d0:d0:db:c7:01:e9:0e:c1:5d:7c:d9:6c:ce:4e:5a: 2c:e6:95:76:be:5c:b5:2f:36:91:4c:8a:b6:e7:7c:d8:06:70: e1:d7:1b:3b:0e:a3:ac:8d:e7:a2:61:f9:e1:4c:38:14:d7:a8: 1d:44:89:c2:d1:b8:5b:5d:1e:85:fa:f4:7e:5b:b1:cd:0b:c1: 14:b0:f7:92:eb:3f:25:27:98:a0:3f:2f:b7:12:58:e6:36:ad: 6e:0c:7d:38:3b:43:85:76:6e:20:e4:4d:33:a9:85:0e:49:2c: 6c:b6:59:b0:00:5a:ae:ec:13:64:4c:c9:65:d8:d4:e5:fc:d3: 0a:b4:73:22:a2:e1:80:61:fd:6e:9e:ad:fc:25:2f:c9:28:52: 88:6f:6a:1b -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUCv7vmQNZuVnZ++dl6iykSa8Sh7owDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTk1MEMwRjVCODMwNjU5RTQ5OTQ0NDcyOTAzOEQ1RDIw NDc4NTlGQjAeFw0yNTExMDMyMjE3MjRaFw0yNTExMDcwNTQ3MjRaMDMxMTAvBgNV BAMTKDg3QzYxRTQzODBENEUyOEIxN0M2NDkyQjQxNzE5NDAzRjRENkNDNTYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCsChmVVLVV2tdGODuR44hb0qPk DCm/cBCHO3nKufm9hl9PeuEouA8VOKaROVAC5V4IM149pnNMQtWeBkJwR8WPOtx/ Aj6ycGwUN7fam48OALrQWdTG7s8XchSwypcahS9lN6Ke+Ob6EPWRLjNpXpymHmgV mBT/URwDw2nTSbNha0pZYRLGr2laPthBeXnUl2HSKDB9QWMFnjIo+2kWOEswoFx7 f22WT7RKNfELyCqHWdgTxnofnHTbzH3Bbycl7u0EJlRIN0M2aExt8m+vmcUmtO5u IbsJhsf6gAkK/j6g+eAGawb9cSgBMNoPUb13LXrCx+KbGqEzwkYBvgCd2ZZPAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUh8YeQ4DU4osXxkkrQXGUA/TWzFYwHwYDVR0j BBgwFoAUqVDA9bgwZZ5JlERykDjV0gR4WfswDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 ZjU4MmYyYi04NjI1LTRmMzgtYjI2ZS00MmZiZDNjMjFjZjAvMC9BOTUwQzBGNUI4 MzA2NTlFNDk5NDQ0NzI5MDM4RDVEMjA0Nzg1OUZCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvQTk1MEMwRjVCODMwNjU5RTQ5OTQ0NDcyOTAzOEQ1RDIwNDc4 NTlGQi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOGY1ODJmMmItODYyNS00ZjM4LWIy NmUtNDJmYmQzYzIxY2YwLzAvQTk1MEMwRjVCODMwNjU5RTQ5OTQ0NDcyOTAzOEQ1 RDIwNDc4NTlGQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGYaDmhmia8/DPFUOD/KEbw6/B2Y8R2yEure nR9gr18S2WsAUj7+KL+mny4FozIbk8cMMy9xeXl6CXCAvaDFP6mf0JYwKwmOhBZ/ HDQFvHsUOfMsydrjqVuCDmm+lCY3+3LZ7TOqUpHtxL7FwF+E8NDQ28cB6Q7BXXzZ bM5OWizmlXa+XLUvNpFMirbnfNgGcOHXGzsOo6yN56Jh+eFMOBTXqB1EicLRuFtd HoX69H5bsc0LwRSw95LrPyUnmKA/L7cSWOY2rW4MfTg7Q4V2biDkTTOphQ5JLGy2 WbAAWq7sE2RMyWXY1OX80wq0cyKi4YBh/W6erfwlL8koUohvahs= -----END CERTIFICATE-----Generated at Wed Nov 5 01:09:59 2025 by rpki-client