$ rpki-client -vvf repo-rpki.idnic.net/repo/a2e5ff81-b082-4334-ad29-55dc8d1e53b9/0/A8CDD576A9B5E448A869BEA4D516BAFC5A879503.mft File: A8CDD576A9B5E448A869BEA4D516BAFC5A879503.mft (raw, json) Hash identifier: x6H7JmDaceFJfZ5ozmtsnEuHudTilngtc0q5n6ecw1A= Subject key identifier: C6:C9:9B:E7:07:F3:7F:E7:72:A6:59:4A:82:79:17:DC:04:60:F8:0C Authority key identifier: A8:CD:D5:76:A9:B5:E4:48:A8:69:BE:A4:D5:16:BA:FC:5A:87:95:03 Certificate issuer: /CN=A8CDD576A9B5E448A869BEA4D516BAFC5A879503 Certificate serial: 54EEC8E83C40923D8945C516A18DB18F4D3F8528 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/A8CDD576A9B5E448A869BEA4D516BAFC5A879503.cer Subject info access: rsync://repo-rpki.idnic.net/repo/a2e5ff81-b082-4334-ad29-55dc8d1e53b9/0/A8CDD576A9B5E448A869BEA4D516BAFC5A879503.mft Manifest number: E1 Signing time: Tue 04 Nov 2025 06:12:25 +0000 Manifest this update: Tue 04 Nov 2025 06:07:25 +0000 Manifest next update: Fri 07 Nov 2025 07:34:25 +0000 Files and hashes: 1: 3136302e31392e3134352e302f32342d3234203d3e203435333035.roa (hash: b0d54b5VfP0y4Y/gj0JeZ9te1p1dA7COr+bHtkAFBE4=) 2: 3136302e31392e3134342e302f32342d3234203d3e20313532373838.roa (hash: zcdVZSiLzuXwzNXJqyWuf4sDbiVxTodHTiD95Tvz7k8=) 3: A8CDD576A9B5E448A869BEA4D516BAFC5A879503.crl (hash: EdqCvGWNdB0pNTiwNNUqLAclGCoJI4/vzm3n1T1vg/s=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/a2e5ff81-b082-4334-ad29-55dc8d1e53b9/0/A8CDD576A9B5E448A869BEA4D516BAFC5A879503.crl rsync://repo-rpki.idnic.net/repo/a2e5ff81-b082-4334-ad29-55dc8d1e53b9/0/A8CDD576A9B5E448A869BEA4D516BAFC5A879503.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/A8CDD576A9B5E448A869BEA4D516BAFC5A879503.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 07 Nov 2025 07:34:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 54:ee:c8:e8:3c:40:92:3d:89:45:c5:16:a1:8d:b1:8f:4d:3f:85:28 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A8CDD576A9B5E448A869BEA4D516BAFC5A879503 Validity Not Before: Nov 4 06:07:25 2025 GMT Not After : Nov 7 07:34:25 2025 GMT Subject: CN=C6C99BE707F37FE772A6594A827917DC0460F80C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:84:69:41:d1:78:a7:b3:2e:d0:c4:cf:d0:bb: 40:87:a6:dc:1f:29:fc:89:e6:26:7c:51:f2:f2:eb: 27:c8:f3:74:9f:b4:8b:2b:1e:f4:e8:6b:e3:41:11: 97:8a:f1:29:bc:94:8e:53:6e:d5:0d:3c:34:0b:06: bb:9b:67:3d:b3:b6:95:96:06:a4:b0:04:03:a7:e2: d7:ec:d7:e8:0f:33:ec:0f:58:00:ad:c1:d8:e6:b9: 42:ef:0c:60:84:d3:11:b2:93:7c:6b:d6:6a:a1:f0: c6:c3:bd:f4:6a:61:f3:eb:03:04:d2:3b:24:28:7a: f6:2b:ed:a8:95:2e:8c:bb:a8:bd:eb:4c:29:a5:49: 6c:a4:76:c4:24:ea:f9:7e:aa:55:fa:bc:0d:9b:99: f6:d8:3b:56:61:07:55:82:00:47:60:52:58:b8:d7: da:da:c0:20:98:4e:d0:59:7c:58:2d:33:ca:66:2a: 80:43:51:a0:d8:1e:66:c0:16:ac:7f:3c:b5:85:6c: a6:00:96:9f:e0:84:cc:35:58:a0:67:2f:13:dc:6c: df:25:7d:d3:f0:64:d7:e4:48:de:f4:bd:c0:d3:5d: 04:07:ca:16:43:88:70:99:3b:2d:20:19:47:cb:48: 80:16:63:a6:b9:76:22:fd:c9:c9:8d:b2:23:f2:e9: 0c:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C6:C9:9B:E7:07:F3:7F:E7:72:A6:59:4A:82:79:17:DC:04:60:F8:0C X509v3 Authority Key Identifier: keyid:A8:CD:D5:76:A9:B5:E4:48:A8:69:BE:A4:D5:16:BA:FC:5A:87:95:03 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/a2e5ff81-b082-4334-ad29-55dc8d1e53b9/0/A8CDD576A9B5E448A869BEA4D516BAFC5A879503.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/A8CDD576A9B5E448A869BEA4D516BAFC5A879503.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a2e5ff81-b082-4334-ad29-55dc8d1e53b9/0/A8CDD576A9B5E448A869BEA4D516BAFC5A879503.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 88:f8:58:09:5d:8f:93:b9:f9:1b:88:3c:37:01:9b:2f:a0:fd: cd:e2:f5:9a:d1:55:e2:45:e6:c8:85:c9:b1:63:65:43:40:89: 09:f1:d3:4f:b6:52:00:0b:0b:5a:bd:bb:c0:85:1f:7a:9f:0a: e1:ba:b4:27:a6:47:16:89:4b:27:0b:a6:d0:19:21:a6:90:bf: fb:44:aa:27:09:d4:76:48:76:47:94:27:33:45:70:10:74:8b: 42:db:53:72:c5:90:e2:f9:59:53:94:f4:a6:7a:40:73:34:49: d1:56:9c:1d:8f:cf:84:fc:85:ea:73:0b:35:70:33:d1:d1:ba: 05:45:c5:72:f1:14:ac:32:95:e5:f6:94:98:82:b2:22:0c:8c: 5c:3e:4c:e9:73:44:47:ac:7b:6f:a1:7a:66:70:87:24:9f:ea: 92:26:c2:27:31:a5:94:93:19:4a:a3:a3:dc:50:1a:ae:3c:d9: d7:4c:39:df:2a:41:d6:9a:2f:a0:3a:12:1d:62:11:ae:20:f9: 46:44:5c:2e:7a:5b:b9:d7:e0:a2:b2:cd:ec:b4:a4:f8:48:ba: 9d:9e:a4:31:02:56:e0:a9:c8:4b:ef:8c:e2:ee:34:06:4f:06: d3:56:a4:99:62:5f:5d:3a:07:1f:d4:53:29:33:5c:fc:54:bf: e2:8f:17:7b -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUVO7I6DxAkj2JRcUWoY2xj00/hSgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQThDREQ1NzZBOUI1RTQ0OEE4NjlCRUE0RDUxNkJBRkM1 QTg3OTUwMzAeFw0yNTExMDQwNjA3MjVaFw0yNTExMDcwNzM0MjVaMDMxMTAvBgNV BAMTKEM2Qzk5QkU3MDdGMzdGRTc3MkE2NTk0QTgyNzkxN0RDMDQ2MEY4MEMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/hGlB0Xinsy7QxM/Qu0CHptwf KfyJ5iZ8UfLy6yfI83SftIsrHvToa+NBEZeK8Sm8lI5TbtUNPDQLBrubZz2ztpWW BqSwBAOn4tfs1+gPM+wPWACtwdjmuULvDGCE0xGyk3xr1mqh8MbDvfRqYfPrAwTS OyQoevYr7aiVLoy7qL3rTCmlSWykdsQk6vl+qlX6vA2bmfbYO1ZhB1WCAEdgUli4 19rawCCYTtBZfFgtM8pmKoBDUaDYHmbAFqx/PLWFbKYAlp/ghMw1WKBnLxPcbN8l fdPwZNfkSN70vcDTXQQHyhZDiHCZOy0gGUfLSIAWY6a5diL9ycmNsiPy6QyrAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUxsmb5wfzf+dypllKgnkX3ARg+AwwHwYDVR0j BBgwFoAUqM3Vdqm15Eioab6k1Ra6/FqHlQMwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h MmU1ZmY4MS1iMDgyLTQzMzQtYWQyOS01NWRjOGQxZTUzYjkvMC9BOENERDU3NkE5 QjVFNDQ4QTg2OUJFQTRENTE2QkFGQzVBODc5NTAzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvQThDREQ1NzZBOUI1RTQ0OEE4NjlCRUE0RDUxNkJBRkM1QTg3 OTUwMy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYTJlNWZmODEtYjA4Mi00MzM0LWFk MjktNTVkYzhkMWU1M2I5LzAvQThDREQ1NzZBOUI1RTQ0OEE4NjlCRUE0RDUxNkJB RkM1QTg3OTUwMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIj4WAldj5O5+RuIPDcBmy+g/c3i9ZrRVeJF 5siFybFjZUNAiQnx00+2UgALC1q9u8CFH3qfCuG6tCemRxaJSycLptAZIaaQv/tE qicJ1HZIdkeUJzNFcBB0i0LbU3LFkOL5WVOU9KZ6QHM0SdFWnB2Pz4T8hepzCzVw M9HRugVFxXLxFKwyleX2lJiCsiIMjFw+TOlzREese2+hemZwhySf6pImwicxpZST GUqjo9xQGq482ddMOd8qQdaaL6A6Eh1iEa4g+UZEXC56W7nX4KKyzey0pPhIup2e pDECVuCpyEvvjOLuNAZPBtNWpJliX106Bx/UUykzXPxUv+KPF3s= -----END CERTIFICATE-----Generated at Wed Nov 5 11:33:41 2025 by rpki-client