$ rpki-client -vvf repo-rpki.idnic.net/repo/d7ff01d0-26f9-4b20-a318-c311c267f2af/0/8A54C81A444D07051A24AACF743F01863F8129AB.mft File: 8A54C81A444D07051A24AACF743F01863F8129AB.mft (raw, json) Hash identifier: lXXFvRySm4TmJ8jKiN8Nou+HnS6IWfuozCGnc7UmyGs= Subject key identifier: FC:AD:A7:AD:53:59:4D:C6:68:68:1C:BA:90:67:58:18:FA:2D:FC:08 Authority key identifier: 8A:54:C8:1A:44:4D:07:05:1A:24:AA:CF:74:3F:01:86:3F:81:29:AB Certificate issuer: /CN=8A54C81A444D07051A24AACF743F01863F8129AB Certificate serial: 4692287006044EFE6C0F0238890CB1773A91E10D Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8A54C81A444D07051A24AACF743F01863F8129AB.cer Subject info access: rsync://repo-rpki.idnic.net/repo/d7ff01d0-26f9-4b20-a318-c311c267f2af/0/8A54C81A444D07051A24AACF743F01863F8129AB.mft Manifest number: 02FE Signing time: Mon 03 Nov 2025 17:30:38 +0000 Manifest this update: Mon 03 Nov 2025 17:25:38 +0000 Manifest next update: Fri 07 Nov 2025 00:59:38 +0000 Files and hashes: 1: 8A54C81A444D07051A24AACF743F01863F8129AB.crl (hash: 48f1nJ9RPz/YCbuvC7dYfisK7IOrcwlJy9Do+EeU8bA=) 2: 3130332e3136362e3135382e302f32332d3233203d3e20313431393535.roa (hash: 8iqd/DLPSKXzm6qMwrWasV0WJDuso56p2m5ElmgcTDA=) 3: 3130332e3136362e3135382e302f32342d3234203d3e20313431393535.roa (hash: E7SXMeinhYEx1nTb2SA2Sxos/hegF9SdTdiRzIK1k28=) 4: 3130332e3136362e3135392e302f32342d3234203d3e20313431393535.roa (hash: pYma4CnUYsvh/GHuj1AR+RzC7f0+QOGrW+zKFaT9Mpo=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/d7ff01d0-26f9-4b20-a318-c311c267f2af/0/8A54C81A444D07051A24AACF743F01863F8129AB.crl rsync://repo-rpki.idnic.net/repo/d7ff01d0-26f9-4b20-a318-c311c267f2af/0/8A54C81A444D07051A24AACF743F01863F8129AB.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8A54C81A444D07051A24AACF743F01863F8129AB.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 07 Nov 2025 00:59:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 46:92:28:70:06:04:4e:fe:6c:0f:02:38:89:0c:b1:77:3a:91:e1:0d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8A54C81A444D07051A24AACF743F01863F8129AB Validity Not Before: Nov 3 17:25:38 2025 GMT Not After : Nov 7 00:59:38 2025 GMT Subject: CN=FCADA7AD53594DC668681CBA90675818FA2DFC08 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f5:7b:b0:3e:50:ff:66:f8:9c:aa:7b:50:04:2e: 7f:97:78:2b:e5:0a:79:5d:e7:62:c5:f6:85:dc:9d: f6:21:05:04:f6:8a:da:b2:0e:c7:0f:37:54:7e:91: 36:90:49:62:51:96:d9:4b:0b:36:21:cc:4b:ba:2c: 71:dc:73:aa:fa:0b:d7:8e:97:6e:9e:29:4e:47:d7: b5:a7:6b:84:19:1d:05:76:70:62:cb:92:aa:86:0f: 93:a4:2c:5b:d7:c8:be:e3:82:df:3d:84:c4:33:62: c9:9e:f0:c5:8b:8d:99:54:1b:50:54:6d:e3:87:13: 80:4d:af:a3:99:5d:eb:14:67:4b:2e:2d:73:f9:b4: 36:38:1a:aa:28:70:82:07:47:c7:bb:25:be:7d:dd: 4a:20:e6:c1:9e:2b:ac:ea:6a:89:02:90:f0:ee:f0: 47:79:95:0d:38:90:6f:34:c7:9a:37:a3:6f:02:3e: 81:da:cd:93:9c:4c:e4:db:87:db:63:22:aa:3e:9f: 19:aa:99:2d:ac:b4:a3:40:af:5c:55:4a:76:e3:75: 4b:70:6a:f4:de:23:aa:ac:b6:08:81:96:4a:1d:3f: a3:6c:6c:a8:93:89:4a:76:9d:aa:4a:54:9c:35:57: 13:fd:ea:b3:4a:da:7e:4e:a0:67:8e:d0:83:d8:98: 6f:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FC:AD:A7:AD:53:59:4D:C6:68:68:1C:BA:90:67:58:18:FA:2D:FC:08 X509v3 Authority Key Identifier: keyid:8A:54:C8:1A:44:4D:07:05:1A:24:AA:CF:74:3F:01:86:3F:81:29:AB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/d7ff01d0-26f9-4b20-a318-c311c267f2af/0/8A54C81A444D07051A24AACF743F01863F8129AB.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8A54C81A444D07051A24AACF743F01863F8129AB.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d7ff01d0-26f9-4b20-a318-c311c267f2af/0/8A54C81A444D07051A24AACF743F01863F8129AB.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 04:08:eb:8d:08:7a:17:7c:78:a0:ef:8a:05:e0:f7:ca:18:9d: 80:29:16:57:40:25:69:69:1e:8d:f5:1a:d3:ed:92:fd:f8:5c: 12:dd:fe:f3:eb:37:55:6f:05:6a:80:38:96:b0:e6:6f:7f:09: eb:12:71:f5:fe:0b:b2:a0:95:10:34:e9:d6:f0:f3:05:a3:d5: e1:4d:0c:87:4b:23:e6:81:48:44:a7:62:3d:c6:2a:32:f4:08: f6:74:3d:f7:e1:ec:df:7a:9e:38:58:7d:81:00:d4:b2:74:88: b2:af:89:a5:c6:81:d5:f9:74:52:f6:b9:ae:86:2c:06:53:c8: 3e:ed:40:a7:24:05:2f:7b:5e:29:53:af:b8:45:60:32:22:7e: 27:c0:78:29:59:05:17:6d:d1:2a:53:d1:2f:fb:4c:7a:6f:9b: 50:84:68:9b:5d:4e:c7:a0:36:74:c7:26:ac:7a:29:72:aa:a5: 32:1c:6c:25:f1:2a:dc:a4:a8:d1:e9:31:a9:0f:f7:80:e7:fb: f3:a8:36:54:cf:91:fd:84:71:c2:18:eb:78:43:50:bd:ac:82: dd:23:36:cb:6c:b5:05:e8:e9:c9:30:2a:11:0d:e3:0e:90:c9: a6:76:f1:53:86:9d:25:6a:50:6b:83:e9:2c:a8:da:40:1a:48: 95:4b:0f:67 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIURpIocAYETv5sDwI4iQyxdzqR4Q0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEE1NEM4MUE0NDREMDcwNTFBMjRBQUNGNzQzRjAxODYz RjgxMjlBQjAeFw0yNTExMDMxNzI1MzhaFw0yNTExMDcwMDU5MzhaMDMxMTAvBgNV BAMTKEZDQURBN0FENTM1OTREQzY2ODY4MUNCQTkwNjc1ODE4RkEyREZDMDgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD1e7A+UP9m+Jyqe1AELn+XeCvl Cnld52LF9oXcnfYhBQT2itqyDscPN1R+kTaQSWJRltlLCzYhzEu6LHHcc6r6C9eO l26eKU5H17Wna4QZHQV2cGLLkqqGD5OkLFvXyL7jgt89hMQzYsme8MWLjZlUG1BU beOHE4BNr6OZXesUZ0suLXP5tDY4GqoocIIHR8e7Jb593Uog5sGeK6zqaokCkPDu 8Ed5lQ04kG80x5o3o28CPoHazZOcTOTbh9tjIqo+nxmqmS2stKNAr1xVSnbjdUtw avTeI6qstgiBlkodP6NsbKiTiUp2napKVJw1VxP96rNK2n5OoGeO0IPYmG+JAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU/K2nrVNZTcZoaBy6kGdYGPot/AgwHwYDVR0j BBgwFoAUilTIGkRNBwUaJKrPdD8Bhj+BKaswDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k N2ZmMDFkMC0yNmY5LTRiMjAtYTMxOC1jMzExYzI2N2YyYWYvMC84QTU0QzgxQTQ0 NEQwNzA1MUEyNEFBQ0Y3NDNGMDE4NjNGODEyOUFCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOEE1NEM4MUE0NDREMDcwNTFBMjRBQUNGNzQzRjAxODYzRjgx MjlBQi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZDdmZjAxZDAtMjZmOS00YjIwLWEz MTgtYzMxMWMyNjdmMmFmLzAvOEE1NEM4MUE0NDREMDcwNTFBMjRBQUNGNzQzRjAx ODYzRjgxMjlBQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAQI640Iehd8eKDvigXg98oYnYApFldAJWlp Ho31GtPtkv34XBLd/vPrN1VvBWqAOJaw5m9/CesScfX+C7KglRA06dbw8wWj1eFN DIdLI+aBSESnYj3GKjL0CPZ0Pffh7N96njhYfYEA1LJ0iLKviaXGgdX5dFL2ua6G LAZTyD7tQKckBS97XilTr7hFYDIififAeClZBRdt0SpT0S/7THpvm1CEaJtdTseg NnTHJqx6KXKqpTIcbCXxKtykqNHpMakP94Dn+/OoNlTPkf2EccIY63hDUL2sgt0j NststQXo6ckwKhEN4w6QyaZ28VOGnSVqUGuD6Syo2kAaSJVLD2c= -----END CERTIFICATE-----Generated at Tue Nov 4 18:59:51 2025 by rpki-client