$ rpki-client -vvf repo-rpki.idnic.net/repo/9e47847c-bc2c-40da-b2aa-915951428aad/0/A8104CA9AA31459E18BB7A597857DDA711E3E7FA.mft File: A8104CA9AA31459E18BB7A597857DDA711E3E7FA.mft (raw, json) Hash identifier: Y96F5LTfBITNC8LWaYEIVNvGdBIDQmOEMrY1Pk3HFqY= Subject key identifier: 3E:69:1E:E5:EF:95:D9:34:4F:18:6B:14:04:F0:3E:AE:E2:59:FA:76 Authority key identifier: A8:10:4C:A9:AA:31:45:9E:18:BB:7A:59:78:57:DD:A7:11:E3:E7:FA Certificate issuer: /CN=A8104CA9AA31459E18BB7A597857DDA711E3E7FA Certificate serial: 428925BA4947E5E2D0FB0679CAE98058A9FF1559 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A8104CA9AA31459E18BB7A597857DDA711E3E7FA.cer Subject info access: rsync://repo-rpki.idnic.net/repo/9e47847c-bc2c-40da-b2aa-915951428aad/0/A8104CA9AA31459E18BB7A597857DDA711E3E7FA.mft Manifest number: 0217 Signing time: Mon 03 Nov 2025 16:01:51 +0000 Manifest this update: Mon 03 Nov 2025 15:56:51 +0000 Manifest next update: Thu 06 Nov 2025 22:10:51 +0000 Files and hashes: 1: 3130332e3139312e3231362e302f32332d3234203d3e20313439393239.roa (hash: EzMh3H3LMpcsDj1VtV66jHz9y8osKoSaALLtXZ0KBbY=) 2: A8104CA9AA31459E18BB7A597857DDA711E3E7FA.crl (hash: vi/rleC7ti1fnXTGu/ZK/XJVcUn8vAW6ncaQmmiKnzQ=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/9e47847c-bc2c-40da-b2aa-915951428aad/0/A8104CA9AA31459E18BB7A597857DDA711E3E7FA.crl rsync://repo-rpki.idnic.net/repo/9e47847c-bc2c-40da-b2aa-915951428aad/0/A8104CA9AA31459E18BB7A597857DDA711E3E7FA.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A8104CA9AA31459E18BB7A597857DDA711E3E7FA.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 06 Nov 2025 22:10:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 42:89:25:ba:49:47:e5:e2:d0:fb:06:79:ca:e9:80:58:a9:ff:15:59 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A8104CA9AA31459E18BB7A597857DDA711E3E7FA Validity Not Before: Nov 3 15:56:51 2025 GMT Not After : Nov 6 22:10:51 2025 GMT Subject: CN=3E691EE5EF95D9344F186B1404F03EAEE259FA76 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:64:63:d6:b7:e8:25:62:2b:32:51:a3:b5:a4: 07:0e:cc:86:aa:76:19:47:f4:5e:eb:92:f5:58:69: 5b:26:de:a1:00:2a:a3:ab:43:07:c6:26:e9:8b:98: 39:97:fc:c7:97:d6:da:e5:e9:2f:2d:7a:75:81:2d: ae:6b:01:96:ea:69:b3:28:ba:3c:60:c2:b5:24:23: 7f:04:ec:bf:a6:59:ce:dc:7f:eb:d1:a1:01:c8:54: a1:b1:29:d3:25:60:0b:c6:34:4b:46:4f:d9:cc:b6: e7:c6:78:7e:bb:d7:48:6b:13:28:21:65:1d:b7:92: 6f:84:b4:00:0e:56:f4:6d:6d:66:95:f9:db:93:96: 2f:ad:fc:d4:7e:65:6d:8c:05:39:fa:62:50:e4:27: 34:b0:c2:ec:35:e9:5b:41:65:76:25:2e:41:7c:b2: 83:fb:83:23:76:cc:80:c4:3b:4c:87:51:be:0e:2d: c6:6a:fc:1a:ac:8f:34:37:f4:f9:29:77:f7:6a:78: 90:22:80:74:91:68:2d:f8:1c:4f:52:64:1f:68:70: 81:1b:f7:85:b5:53:fc:fb:de:8a:ec:78:6d:8e:3b: 5f:ec:ea:f7:39:d2:45:2a:02:ac:2e:3d:2b:59:48: 38:2a:f4:9a:e0:65:36:c3:d1:40:9c:83:d7:5f:ea: 99:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3E:69:1E:E5:EF:95:D9:34:4F:18:6B:14:04:F0:3E:AE:E2:59:FA:76 X509v3 Authority Key Identifier: keyid:A8:10:4C:A9:AA:31:45:9E:18:BB:7A:59:78:57:DD:A7:11:E3:E7:FA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/9e47847c-bc2c-40da-b2aa-915951428aad/0/A8104CA9AA31459E18BB7A597857DDA711E3E7FA.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A8104CA9AA31459E18BB7A597857DDA711E3E7FA.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/9e47847c-bc2c-40da-b2aa-915951428aad/0/A8104CA9AA31459E18BB7A597857DDA711E3E7FA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 06:3c:9f:09:f2:31:3e:88:e2:d5:be:65:50:f5:f8:dc:64:de: e7:6c:08:e4:88:99:c6:96:49:9b:97:2a:7d:65:85:b5:93:1b: 92:12:12:07:be:a1:b1:c9:df:bb:43:ac:9e:d2:d7:04:5b:ca: 57:0a:40:70:6d:a1:3e:6f:c3:ee:60:2f:ca:b2:58:d4:6b:ba: 31:36:82:7b:15:85:cd:93:df:24:18:74:db:bd:13:85:54:d1: b9:22:3e:ab:85:3b:a3:4f:12:e2:06:a4:bb:81:17:db:bc:43: 46:4a:70:84:d9:58:a7:e3:ba:82:10:ce:d3:26:dd:7c:cc:df: b2:5a:1a:ff:fe:ce:dc:86:13:6c:6e:62:f5:87:4a:d4:a8:f8: 6e:a7:7d:b0:2d:10:e4:37:f8:9d:a6:83:a9:d1:7e:a1:39:f1: c8:c9:ce:3a:50:21:c1:93:d3:33:c1:3a:3d:7a:26:a0:d1:0a: 5c:0c:b0:05:dc:2b:d5:15:0b:8e:fb:03:d2:ea:8e:79:4e:b5: ac:64:0a:8a:e0:dd:92:3c:57:6f:72:60:bf:39:ea:bc:a3:f3: 26:59:4c:5c:ed:cf:6c:33:2c:79:75:29:bc:d2:bf:ea:6d:6b: 82:51:1b:08:da:77:cd:7b:77:3b:27:90:8e:b0:6f:51:49:73: 5b:f9:0f:41 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUQokluklH5eLQ+wZ5yumAWKn/FVkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTgxMDRDQTlBQTMxNDU5RTE4QkI3QTU5Nzg1N0REQTcx MUUzRTdGQTAeFw0yNTExMDMxNTU2NTFaFw0yNTExMDYyMjEwNTFaMDMxMTAvBgNV BAMTKDNFNjkxRUU1RUY5NUQ5MzQ0RjE4NkIxNDA0RjAzRUFFRTI1OUZBNzYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDEZGPWt+glYisyUaO1pAcOzIaq dhlH9F7rkvVYaVsm3qEAKqOrQwfGJumLmDmX/MeX1trl6S8tenWBLa5rAZbqabMo ujxgwrUkI38E7L+mWc7cf+vRoQHIVKGxKdMlYAvGNEtGT9nMtufGeH6710hrEygh ZR23km+EtAAOVvRtbWaV+duTli+t/NR+ZW2MBTn6YlDkJzSwwuw16VtBZXYlLkF8 soP7gyN2zIDEO0yHUb4OLcZq/BqsjzQ39Pkpd/dqeJAigHSRaC34HE9SZB9ocIEb 94W1U/z73orseG2OO1/s6vc50kUqAqwuPStZSDgq9JrgZTbD0UCcg9df6pl5AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUPmke5e+V2TRPGGsUBPA+ruJZ+nYwHwYDVR0j BBgwFoAUqBBMqaoxRZ4Yu3pZeFfdpxHj5/owDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 ZTQ3ODQ3Yy1iYzJjLTQwZGEtYjJhYS05MTU5NTE0MjhhYWQvMC9BODEwNENBOUFB MzE0NTlFMThCQjdBNTk3ODU3RERBNzExRTNFN0ZBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQTgxMDRDQTlBQTMxNDU5RTE4QkI3QTU5Nzg1N0REQTcxMUUz RTdGQS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOWU0Nzg0N2MtYmMyYy00MGRhLWIy YWEtOTE1OTUxNDI4YWFkLzAvQTgxMDRDQTlBQTMxNDU5RTE4QkI3QTU5Nzg1N0RE QTcxMUUzRTdGQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAY8nwnyMT6I4tW+ZVD1+Nxk3udsCOSImcaW SZuXKn1lhbWTG5ISEge+obHJ37tDrJ7S1wRbylcKQHBtoT5vw+5gL8qyWNRrujE2 gnsVhc2T3yQYdNu9E4VU0bkiPquFO6NPEuIGpLuBF9u8Q0ZKcITZWKfjuoIQztMm 3XzM37JaGv/+ztyGE2xuYvWHStSo+G6nfbAtEOQ3+J2mg6nRfqE58cjJzjpQIcGT 0zPBOj16JqDRClwMsAXcK9UVC477A9LqjnlOtaxkCorg3ZI8V29yYL856ryj8yZZ TFztz2wzLHl1KbzSv+pta4JRGwjad817dzsnkI6wb1FJc1v5D0E= -----END CERTIFICATE-----Generated at Wed Nov 5 00:38:24 2025 by rpki-client