$ rpki-client -vvf repo-rpki.idnic.net/repo/c81e9238-4267-48ef-b02e-1d7d04400941/0/C8AC2212A272ECEAE88D5232072578922C0E2E05.mft File: C8AC2212A272ECEAE88D5232072578922C0E2E05.mft (raw, json) Hash identifier: ogvJ8wUZ3zkSKwEHXWFAHgv1aC/le7rC7jpVYVKAEMo= Subject key identifier: 20:C6:3A:3A:FA:FE:19:C3:6B:87:FE:9B:78:48:F1:E5:0C:9C:09:12 Authority key identifier: C8:AC:22:12:A2:72:EC:EA:E8:8D:52:32:07:25:78:92:2C:0E:2E:05 Certificate issuer: /CN=C8AC2212A272ECEAE88D5232072578922C0E2E05 Certificate serial: 3AD3150024E337834C30AEE1E62027BE10B7EA35 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C8AC2212A272ECEAE88D5232072578922C0E2E05.cer Subject info access: rsync://repo-rpki.idnic.net/repo/c81e9238-4267-48ef-b02e-1d7d04400941/0/C8AC2212A272ECEAE88D5232072578922C0E2E05.mft Manifest number: 03DC Signing time: Mon 03 Nov 2025 10:30:06 +0000 Manifest this update: Mon 03 Nov 2025 10:25:06 +0000 Manifest next update: Thu 06 Nov 2025 17:53:06 +0000 Files and hashes: 1: 3130332e3136372e3130362e302f32332d3233203d3e203538333639.roa (hash: raVa/aPOEsczd+Tkb9xbGBhDO0WYbX1nl1AOZt1Q+7s=) 2: C8AC2212A272ECEAE88D5232072578922C0E2E05.crl (hash: 4icWdRlxci19afAL8TQSGbPwQ41zkwHtAV8yLPWFsKo=) 3: 3130332e3136372e3130372e302f32342d3234203d3e203538333639.roa (hash: 5KjLY0cT2Rgqo94D9xVgjaPbsdC93ycJskyyRFx1mYE=) 4: 3130332e3136372e3130362e302f32342d3234203d3e203538333639.roa (hash: 51VMCg6u8hW+9yY7Sn/sArynIKu6/fuS0HKX6tpsX6I=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/c81e9238-4267-48ef-b02e-1d7d04400941/0/C8AC2212A272ECEAE88D5232072578922C0E2E05.crl rsync://repo-rpki.idnic.net/repo/c81e9238-4267-48ef-b02e-1d7d04400941/0/C8AC2212A272ECEAE88D5232072578922C0E2E05.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C8AC2212A272ECEAE88D5232072578922C0E2E05.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 06 Nov 2025 17:53:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3a:d3:15:00:24:e3:37:83:4c:30:ae:e1:e6:20:27:be:10:b7:ea:35 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C8AC2212A272ECEAE88D5232072578922C0E2E05 Validity Not Before: Nov 3 10:25:06 2025 GMT Not After : Nov 6 17:53:06 2025 GMT Subject: CN=20C63A3AFAFE19C36B87FE9B7848F1E50C9C0912 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:00:2c:c1:a0:50:8f:b1:1f:cb:f9:fa:cc:2c: db:53:e6:0b:f2:20:d3:bb:77:d8:a8:1d:0c:48:35: 75:c6:24:3b:03:ae:72:01:aa:16:ce:a3:bb:c7:4c: c4:de:07:7e:95:2f:f3:37:6e:3d:fb:85:67:a8:9f: 67:db:6d:af:4c:ce:d5:fe:3a:77:7a:f4:d4:4d:6c: 59:9c:6d:db:78:56:be:8a:05:82:0d:02:15:8a:69: 2d:e3:b4:b4:d2:d5:a9:98:3c:71:94:07:08:dd:60: 5e:56:cb:5b:53:95:bc:a0:a0:92:17:43:3c:4a:b1: e5:f9:fc:73:51:43:80:a3:7b:65:01:a7:2b:3e:c7: dc:c9:1d:dd:ca:3e:ba:66:0c:cc:76:56:ef:ed:f0: be:aa:bd:3a:c7:45:05:48:3c:47:99:ca:b4:9b:8f: fa:7d:e2:84:d5:d7:ed:d9:00:fe:b6:8b:19:6b:da: b0:c7:b9:95:16:fe:f3:31:1f:00:cd:7d:b4:82:21: 24:4c:db:30:96:fa:b8:b0:5c:35:4b:2b:66:f1:f6: 19:dc:ac:b9:bf:76:ee:42:3d:10:1e:d1:6a:d1:8f: 45:34:d4:6c:6a:30:1a:b4:50:8b:5e:6c:e2:aa:6f: 46:b0:4c:68:c6:cb:aa:08:99:21:56:e4:bf:bb:e7: 67:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:C6:3A:3A:FA:FE:19:C3:6B:87:FE:9B:78:48:F1:E5:0C:9C:09:12 X509v3 Authority Key Identifier: keyid:C8:AC:22:12:A2:72:EC:EA:E8:8D:52:32:07:25:78:92:2C:0E:2E:05 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/c81e9238-4267-48ef-b02e-1d7d04400941/0/C8AC2212A272ECEAE88D5232072578922C0E2E05.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C8AC2212A272ECEAE88D5232072578922C0E2E05.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c81e9238-4267-48ef-b02e-1d7d04400941/0/C8AC2212A272ECEAE88D5232072578922C0E2E05.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b1:bd:f3:41:f8:f7:41:2f:bf:50:55:b5:f0:94:0b:c3:70:59: 5a:16:ad:b3:92:b4:88:02:d6:73:90:d7:72:fb:bc:f6:42:4c: 08:5d:ea:45:31:5b:32:9f:55:e6:48:dd:07:4f:03:0c:ad:66: b8:fb:10:51:6e:57:58:64:97:4d:84:e6:c8:01:9d:d4:9f:c5: 03:19:32:c8:b4:1a:af:5b:fe:4f:3b:ef:2f:e1:86:11:b5:80: df:d8:a0:c1:71:01:37:4d:aa:14:6c:68:ae:cf:99:ba:54:89: 87:38:b5:85:96:bb:18:b1:4a:40:30:18:1d:8d:48:7b:a0:b1: c7:80:67:4a:ec:fa:84:52:21:f5:d2:8d:a7:79:03:88:de:e4: 07:31:5e:4a:67:70:f0:5c:3a:c3:20:6a:fc:10:b7:f3:c9:51: 9c:bf:64:9c:0c:37:6f:26:83:3a:48:1a:91:28:02:a9:75:3c: 0c:fd:b4:3c:51:19:9a:73:c2:c6:a3:23:5e:3d:1f:2c:1a:7e: 93:17:05:b6:72:6c:1b:d1:eb:d6:04:01:87:49:36:1b:fb:2c: 78:eb:8d:ff:a5:44:69:24:c8:23:32:fb:38:18:24:43:5f:94: d6:4e:32:fe:3f:5a:fe:10:63:e0:65:7e:42:a8:31:df:07:59: a5:73:6a:19 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUOtMVACTjN4NMMK7h5iAnvhC36jUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzhBQzIyMTJBMjcyRUNFQUU4OEQ1MjMyMDcyNTc4OTIy QzBFMkUwNTAeFw0yNTExMDMxMDI1MDZaFw0yNTExMDYxNzUzMDZaMDMxMTAvBgNV BAMTKDIwQzYzQTNBRkFGRTE5QzM2Qjg3RkU5Qjc4NDhGMUU1MEM5QzA5MTIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQClACzBoFCPsR/L+frMLNtT5gvy INO7d9ioHQxINXXGJDsDrnIBqhbOo7vHTMTeB36VL/M3bj37hWeon2fbba9MztX+ Ond69NRNbFmcbdt4Vr6KBYINAhWKaS3jtLTS1amYPHGUBwjdYF5Wy1tTlbygoJIX QzxKseX5/HNRQ4Cje2UBpys+x9zJHd3KPrpmDMx2Vu/t8L6qvTrHRQVIPEeZyrSb j/p94oTV1+3ZAP62ixlr2rDHuZUW/vMxHwDNfbSCISRM2zCW+riwXDVLK2bx9hnc rLm/du5CPRAe0WrRj0U01GxqMBq0UItebOKqb0awTGjGy6oImSFW5L+752cvAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUIMY6Ovr+GcNrh/6beEjx5QycCRIwHwYDVR0j BBgwFoAUyKwiEqJy7OrojVIyByV4kiwOLgUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j ODFlOTIzOC00MjY3LTQ4ZWYtYjAyZS0xZDdkMDQ0MDA5NDEvMC9DOEFDMjIxMkEy NzJFQ0VBRTg4RDUyMzIwNzI1Nzg5MjJDMEUyRTA1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQzhBQzIyMTJBMjcyRUNFQUU4OEQ1MjMyMDcyNTc4OTIyQzBF MkUwNS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYzgxZTkyMzgtNDI2Ny00OGVmLWIw MmUtMWQ3ZDA0NDAwOTQxLzAvQzhBQzIyMTJBMjcyRUNFQUU4OEQ1MjMyMDcyNTc4 OTIyQzBFMkUwNS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALG980H490Evv1BVtfCUC8NwWVoWrbOStIgC 1nOQ13L7vPZCTAhd6kUxWzKfVeZI3QdPAwytZrj7EFFuV1hkl02E5sgBndSfxQMZ Msi0Gq9b/k877y/hhhG1gN/YoMFxATdNqhRsaK7PmbpUiYc4tYWWuxixSkAwGB2N SHugsceAZ0rs+oRSIfXSjad5A4je5AcxXkpncPBcOsMgavwQt/PJUZy/ZJwMN28m gzpIGpEoAql1PAz9tDxRGZpzwsajI149HywafpMXBbZybBvR69YEAYdJNhv7LHjr jf+lRGkkyCMy+zgYJENflNZOMv4/Wv4QY+BlfkKoMd8HWaVzahk= -----END CERTIFICATE-----Generated at Tue Nov 4 01:58:49 2025 by rpki-client