$ rpki-client -vvf repo-rpki.idnic.net/repo/9bcc62ae-20c8-4974-aae9-b108df8e2f59/0/0A8C0BB45F8412F7F2DC2F442F5FCEB792A2DBFF.mft File: 0A8C0BB45F8412F7F2DC2F442F5FCEB792A2DBFF.mft (raw, json) Hash identifier: VGHv3MFNRhJL+jonjwoysrOkFyZGIJg3rfMFzc5Vl5U= Subject key identifier: 8F:D5:D7:EB:B4:16:36:67:E0:08:55:B6:46:64:1B:D4:A6:7D:BC:A6 Authority key identifier: 0A:8C:0B:B4:5F:84:12:F7:F2:DC:2F:44:2F:5F:CE:B7:92:A2:DB:FF Certificate issuer: /CN=0A8C0BB45F8412F7F2DC2F442F5FCEB792A2DBFF Certificate serial: 2EDC77230E76D707A42FB30D2E9B71F6AAEF7632 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/0A8C0BB45F8412F7F2DC2F442F5FCEB792A2DBFF.cer Subject info access: rsync://repo-rpki.idnic.net/repo/9bcc62ae-20c8-4974-aae9-b108df8e2f59/0/0A8C0BB45F8412F7F2DC2F442F5FCEB792A2DBFF.mft Manifest number: 1C Signing time: Wed 05 Nov 2025 13:01:04 +0000 Manifest this update: Wed 05 Nov 2025 12:56:04 +0000 Manifest next update: Sat 08 Nov 2025 22:23:04 +0000 Files and hashes: 1: 0A8C0BB45F8412F7F2DC2F442F5FCEB792A2DBFF.crl (hash: MkDFoLAbuK6pUKkRScpQrec6jTRORQ+LW/mhdfX1NtM=) 2: 3136302e3139312e3233342e302f32342d3234203d3e20313533343932.roa (hash: UIZ03usfq2XFdSk/q+e6qEltdDYNXrFthkIDpbSov1g=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/9bcc62ae-20c8-4974-aae9-b108df8e2f59/0/0A8C0BB45F8412F7F2DC2F442F5FCEB792A2DBFF.crl rsync://repo-rpki.idnic.net/repo/9bcc62ae-20c8-4974-aae9-b108df8e2f59/0/0A8C0BB45F8412F7F2DC2F442F5FCEB792A2DBFF.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/0A8C0BB45F8412F7F2DC2F442F5FCEB792A2DBFF.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 08 Nov 2025 22:23:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2e:dc:77:23:0e:76:d7:07:a4:2f:b3:0d:2e:9b:71:f6:aa:ef:76:32 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0A8C0BB45F8412F7F2DC2F442F5FCEB792A2DBFF Validity Not Before: Nov 5 12:56:04 2025 GMT Not After : Nov 8 22:23:04 2025 GMT Subject: CN=8FD5D7EBB4163667E00855B646641BD4A67DBCA6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:28:f2:a7:ae:dd:d3:43:6b:b5:a5:b7:11:f5: 32:16:a2:fc:7b:02:70:3d:ca:39:48:82:4a:19:8c: 09:ef:85:83:01:7d:29:9c:fc:c0:d1:c3:5d:e5:55: e5:3b:6e:75:6d:fb:d3:3a:b4:29:0b:d9:8d:60:12: a1:2a:ee:51:be:62:00:c8:a4:ca:5d:a0:e9:d1:5f: 22:8d:f0:1b:40:5c:e6:67:21:9c:7b:85:94:d9:37: 68:75:34:64:12:12:39:22:eb:02:e9:87:5c:12:ba: 83:ab:80:ae:8c:88:d2:32:bb:d1:78:e0:9a:c1:07: 8f:ee:61:bc:20:bd:cf:50:ca:15:e0:5a:84:c8:ce: d2:fe:d7:24:60:ef:77:a0:17:48:a3:94:d6:26:d9: 1f:62:97:5a:2b:8c:0a:22:6d:ed:b8:0d:ca:0e:31: 75:d3:fa:0a:94:d7:34:6d:cf:f3:04:62:fb:c4:a5: 5f:bc:93:f9:d5:27:82:a0:5a:60:91:d3:2b:63:ab: d6:04:cb:27:28:ac:8e:67:12:b8:58:b1:c3:ef:47: 57:06:86:7b:c6:33:61:f3:95:58:cb:56:3a:9e:27: c3:78:2a:89:be:94:65:fa:70:3e:9e:4c:12:54:5e: b5:c3:c8:f7:08:56:b2:34:f9:04:86:7c:6e:a2:71: b7:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8F:D5:D7:EB:B4:16:36:67:E0:08:55:B6:46:64:1B:D4:A6:7D:BC:A6 X509v3 Authority Key Identifier: keyid:0A:8C:0B:B4:5F:84:12:F7:F2:DC:2F:44:2F:5F:CE:B7:92:A2:DB:FF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/9bcc62ae-20c8-4974-aae9-b108df8e2f59/0/0A8C0BB45F8412F7F2DC2F442F5FCEB792A2DBFF.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/0A8C0BB45F8412F7F2DC2F442F5FCEB792A2DBFF.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/9bcc62ae-20c8-4974-aae9-b108df8e2f59/0/0A8C0BB45F8412F7F2DC2F442F5FCEB792A2DBFF.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 04:a0:05:10:61:98:0a:40:ab:6b:51:ef:d1:26:b4:f5:b1:1a: d0:8c:f1:2c:cc:21:cc:6a:3d:e9:43:1f:42:c2:f7:f0:16:ec: 37:75:eb:ce:eb:2c:71:d5:25:7f:91:26:14:68:b1:6a:99:ff: af:68:f2:bc:6b:fd:19:1d:f7:99:49:60:6f:2d:73:9b:18:1d: 66:98:fa:4f:47:66:9f:56:76:8c:76:ed:1f:f4:39:35:f6:17: b5:a1:2e:21:83:e6:2e:07:1d:dc:18:86:c4:5b:40:f2:d3:4e: 2a:33:e0:03:4f:0d:e6:4f:f2:75:0b:51:79:06:9c:34:69:1c: c0:05:75:b4:b5:d4:10:51:a8:e7:91:f9:d8:fb:e1:5b:f3:17: 12:3c:e5:27:5d:9f:cc:5f:e7:df:f6:02:84:27:a0:50:56:c4: f2:27:41:72:1d:4f:d7:56:c8:e5:aa:56:4c:0a:a1:b5:cc:b3: 7d:a3:e6:a4:4f:27:4f:d6:52:df:93:76:e7:98:4f:f8:0d:17: a4:2e:62:b5:1e:b2:bc:ec:31:8f:12:38:16:d9:89:31:ab:e5: f0:6b:46:ab:43:36:ed:4d:b1:8a:71:13:f2:f2:3c:b8:66:b7: 79:8c:6a:ef:c8:93:d6:d9:87:c1:03:ec:f6:f6:db:59:9e:3f: 8d:46:c3:4b -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIULtx3Iw521wekL7MNLptx9qrvdjIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMEE4QzBCQjQ1Rjg0MTJGN0YyREMyRjQ0MkY1RkNFQjc5 MkEyREJGRjAeFw0yNTExMDUxMjU2MDRaFw0yNTExMDgyMjIzMDRaMDMxMTAvBgNV BAMTKDhGRDVEN0VCQjQxNjM2NjdFMDA4NTVCNjQ2NjQxQkQ0QTY3REJDQTYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDjKPKnrt3TQ2u1pbcR9TIWovx7 AnA9yjlIgkoZjAnvhYMBfSmc/MDRw13lVeU7bnVt+9M6tCkL2Y1gEqEq7lG+YgDI pMpdoOnRXyKN8BtAXOZnIZx7hZTZN2h1NGQSEjki6wLph1wSuoOrgK6MiNIyu9F4 4JrBB4/uYbwgvc9QyhXgWoTIztL+1yRg73egF0ijlNYm2R9il1orjAoibe24DcoO MXXT+gqU1zRtz/MEYvvEpV+8k/nVJ4KgWmCR0ytjq9YEyycorI5nErhYscPvR1cG hnvGM2HzlVjLVjqeJ8N4Kom+lGX6cD6eTBJUXrXDyPcIVrI0+QSGfG6icbcLAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUj9XX67QWNmfgCFW2RmQb1KZ9vKYwHwYDVR0j BBgwFoAUCowLtF+EEvfy3C9EL1/Ot5Ki2/8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 YmNjNjJhZS0yMGM4LTQ5NzQtYWFlOS1iMTA4ZGY4ZTJmNTkvMC8wQThDMEJCNDVG ODQxMkY3RjJEQzJGNDQyRjVGQ0VCNzkyQTJEQkZGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvMEE4QzBCQjQ1Rjg0MTJGN0YyREMyRjQ0MkY1RkNFQjc5MkEy REJGRi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOWJjYzYyYWUtMjBjOC00OTc0LWFh ZTktYjEwOGRmOGUyZjU5LzAvMEE4QzBCQjQ1Rjg0MTJGN0YyREMyRjQ0MkY1RkNF Qjc5MkEyREJGRi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAASgBRBhmApAq2tR79EmtPWxGtCM8SzMIcxq PelDH0LC9/AW7Dd1687rLHHVJX+RJhRosWqZ/69o8rxr/Rkd95lJYG8tc5sYHWaY +k9HZp9Wdox27R/0OTX2F7WhLiGD5i4HHdwYhsRbQPLTTioz4ANPDeZP8nULUXkG nDRpHMAFdbS11BBRqOeR+dj74VvzFxI85Sddn8xf59/2AoQnoFBWxPInQXIdT9dW yOWqVkwKobXMs32j5qRPJ0/WUt+TdueYT/gNF6QuYrUesrzsMY8SOBbZiTGr5fBr RqtDNu1NsYpxE/LyPLhmt3mMau/Ik9bZh8ED7Pb221meP41Gw0s= -----END CERTIFICATE-----Generated at Wed Nov 5 21:20:26 2025 by rpki-client