$ rpki-client -vvf repo-rpki.idnic.net/repo/d8b98722-1cb4-40d4-ac8b-c3bca2bca217/0/8A95FAF723EC129E336E75ACE1CD4F3094FB6481.mft File: 8A95FAF723EC129E336E75ACE1CD4F3094FB6481.mft (raw, json) Hash identifier: Q50HUKe0V2qTzOf0jhbgmmFn0nNlzeorD56HwQVAe/8= Subject key identifier: C9:CC:93:DF:6E:FF:CD:E6:85:24:76:8C:40:8B:3D:B7:96:3F:9D:8D Authority key identifier: 8A:95:FA:F7:23:EC:12:9E:33:6E:75:AC:E1:CD:4F:30:94:FB:64:81 Certificate issuer: /CN=8A95FAF723EC129E336E75ACE1CD4F3094FB6481 Certificate serial: 09F6078301387EB22A9A5FA7137F89DF955D280A Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8A95FAF723EC129E336E75ACE1CD4F3094FB6481.cer Subject info access: rsync://repo-rpki.idnic.net/repo/d8b98722-1cb4-40d4-ac8b-c3bca2bca217/0/8A95FAF723EC129E336E75ACE1CD4F3094FB6481.mft Manifest number: 0469 Signing time: Sun 02 Nov 2025 17:21:27 +0000 Manifest this update: Sun 02 Nov 2025 17:16:27 +0000 Manifest next update: Wed 05 Nov 2025 23:41:27 +0000 Files and hashes: 1: 8A95FAF723EC129E336E75ACE1CD4F3094FB6481.crl (hash: /fYwMNF60oASz/eWDVRf17vhgpATZjCEVt8rVsKITPw=) 2: 34332e3234352e3138302e302f32322d3234203d3e203538333937.roa (hash: THVSHOfDNgrFd49wZlYvuTuPkWSURiIGaUg0EUGrcPM=) 3: 323030313a6466303a663830303a3a2f34382d3438203d3e203538333937.roa (hash: 8qFDAcssXXUuL7jdU+5MBpRRNuUnSR4XPXnprUszlok=) 4: 3130332e32332e32302e302f32322d3234203d3e203538333937.roa (hash: fxRWeEdUZsQcOgrNyDGJ7oXqFe+EeQD/MHcFmS1cl7s=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/d8b98722-1cb4-40d4-ac8b-c3bca2bca217/0/8A95FAF723EC129E336E75ACE1CD4F3094FB6481.crl rsync://repo-rpki.idnic.net/repo/d8b98722-1cb4-40d4-ac8b-c3bca2bca217/0/8A95FAF723EC129E336E75ACE1CD4F3094FB6481.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8A95FAF723EC129E336E75ACE1CD4F3094FB6481.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 05 Nov 2025 23:41:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 09:f6:07:83:01:38:7e:b2:2a:9a:5f:a7:13:7f:89:df:95:5d:28:0a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8A95FAF723EC129E336E75ACE1CD4F3094FB6481 Validity Not Before: Nov 2 17:16:27 2025 GMT Not After : Nov 5 23:41:27 2025 GMT Subject: CN=C9CC93DF6EFFCDE68524768C408B3DB7963F9D8D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:fb:a3:33:91:a6:81:68:13:46:52:52:4a:34: b2:4f:67:a9:13:c9:93:6a:d2:ca:38:6e:1f:dd:9f: 2f:cd:0a:54:4f:c3:fd:fb:b2:db:0d:c8:28:f9:f6: 58:42:95:d3:49:06:2b:ee:2c:49:c1:3b:93:cb:56: 4a:3c:ad:f5:a7:2d:ac:df:96:78:45:b6:7c:2f:d4: 0e:43:18:fd:db:2a:e9:fc:3f:30:43:13:e0:65:42: 9d:cb:26:5e:68:51:e1:43:11:f8:35:84:b8:b8:5b: b4:c0:0e:7a:fd:69:7a:f7:b6:3c:6a:ec:2f:92:3a: 67:11:9c:01:cd:1e:85:77:1d:07:9d:ff:cb:c0:96: 2a:10:b0:6e:b6:b8:62:04:05:85:50:c3:ac:a8:68: a9:a0:38:e5:37:df:ac:2e:c8:ae:5f:ba:22:ac:b4: 40:6c:95:da:a7:53:d9:ea:4a:40:d4:f7:e5:b1:f3: 1a:75:24:18:90:11:1a:55:b6:ab:f5:af:e4:da:26: cc:0c:ea:de:e4:74:e4:38:3d:a7:9a:e9:10:e4:a1: 23:5c:4c:d4:f0:47:43:dd:39:68:d5:08:d2:bb:e8: 79:af:8e:a8:2e:37:9b:0f:37:4f:86:f5:3b:8e:11: 0a:bf:8e:51:a0:0d:f7:13:97:f9:48:cb:dc:1f:fd: 99:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C9:CC:93:DF:6E:FF:CD:E6:85:24:76:8C:40:8B:3D:B7:96:3F:9D:8D X509v3 Authority Key Identifier: keyid:8A:95:FA:F7:23:EC:12:9E:33:6E:75:AC:E1:CD:4F:30:94:FB:64:81 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/d8b98722-1cb4-40d4-ac8b-c3bca2bca217/0/8A95FAF723EC129E336E75ACE1CD4F3094FB6481.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8A95FAF723EC129E336E75ACE1CD4F3094FB6481.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d8b98722-1cb4-40d4-ac8b-c3bca2bca217/0/8A95FAF723EC129E336E75ACE1CD4F3094FB6481.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 89:43:de:dd:1b:ce:3a:13:f5:b7:2a:45:58:67:c6:f8:86:57: 41:11:e8:ea:5c:97:46:9f:46:62:72:3f:10:7a:80:9d:45:06: 78:c6:74:0d:aa:a8:36:47:f7:2b:a0:7d:3b:42:20:8a:87:ff: 21:86:df:5a:13:1a:30:39:d2:48:24:6d:76:bd:1d:89:06:c2: 9d:41:78:78:d7:3a:cf:50:ee:a3:57:95:8c:88:0f:e5:2f:42: 1e:a2:b4:5d:28:33:0d:09:e1:44:66:35:e4:d3:f2:71:a9:be: 85:06:36:20:08:41:0d:5c:78:0a:b5:28:8a:01:ee:b3:37:1f: 8c:fe:2a:3d:a2:b6:42:b8:02:97:0e:da:b9:89:c0:3d:e0:24: 76:04:b3:49:e7:a9:37:ea:62:49:24:dd:a6:cd:2b:e6:8a:f8: e3:1b:4c:ec:72:3d:d0:d0:31:7e:ee:1c:36:69:3b:b9:1c:bb: 83:fe:bb:d3:35:27:40:22:6c:c4:c4:6e:2c:1c:1d:7d:d0:63: b6:84:11:c2:57:32:bf:9d:a1:f7:64:d5:7e:1e:85:c8:cd:2d: 07:86:fd:97:97:f1:c1:05:de:0a:bf:9a:bf:a5:57:01:a1:c9: 83:71:ea:15:90:ff:18:ab:ed:bd:96:2d:a7:ab:ce:2a:fa:88: e9:2e:20:58 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUCfYHgwE4frIqml+nE3+J35VdKAowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEE5NUZBRjcyM0VDMTI5RTMzNkU3NUFDRTFDRDRGMzA5 NEZCNjQ4MTAeFw0yNTExMDIxNzE2MjdaFw0yNTExMDUyMzQxMjdaMDMxMTAvBgNV BAMTKEM5Q0M5M0RGNkVGRkNERTY4NTI0NzY4QzQwOEIzREI3OTYzRjlEOEQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC5+6MzkaaBaBNGUlJKNLJPZ6kT yZNq0so4bh/dny/NClRPw/37stsNyCj59lhCldNJBivuLEnBO5PLVko8rfWnLazf lnhFtnwv1A5DGP3bKun8PzBDE+BlQp3LJl5oUeFDEfg1hLi4W7TADnr9aXr3tjxq 7C+SOmcRnAHNHoV3HQed/8vAlioQsG62uGIEBYVQw6yoaKmgOOU336wuyK5fuiKs tEBsldqnU9nqSkDU9+Wx8xp1JBiQERpVtqv1r+TaJswM6t7kdOQ4Paea6RDkoSNc TNTwR0PdOWjVCNK76HmvjqguN5sPN0+G9TuOEQq/jlGgDfcTl/lIy9wf/ZmhAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUycyT327/zeaFJHaMQIs9t5Y/nY0wHwYDVR0j BBgwFoAUipX69yPsEp4zbnWs4c1PMJT7ZIEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k OGI5ODcyMi0xY2I0LTQwZDQtYWM4Yi1jM2JjYTJiY2EyMTcvMC84QTk1RkFGNzIz RUMxMjlFMzM2RTc1QUNFMUNENEYzMDk0RkI2NDgxLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOEE5NUZBRjcyM0VDMTI5RTMzNkU3NUFDRTFDRDRGMzA5NEZC NjQ4MS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZDhiOTg3MjItMWNiNC00MGQ0LWFj OGItYzNiY2EyYmNhMjE3LzAvOEE5NUZBRjcyM0VDMTI5RTMzNkU3NUFDRTFDRDRG MzA5NEZCNjQ4MS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIlD3t0bzjoT9bcqRVhnxviGV0ER6Opcl0af RmJyPxB6gJ1FBnjGdA2qqDZH9yugfTtCIIqH/yGG31oTGjA50kgkbXa9HYkGwp1B eHjXOs9Q7qNXlYyID+UvQh6itF0oMw0J4URmNeTT8nGpvoUGNiAIQQ1ceAq1KIoB 7rM3H4z+Kj2itkK4ApcO2rmJwD3gJHYEs0nnqTfqYkkk3abNK+aK+OMbTOxyPdDQ MX7uHDZpO7kcu4P+u9M1J0AibMTEbiwcHX3QY7aEEcJXMr+dofdk1X4ehcjNLQeG /ZeX8cEF3gq/mr+lVwGhyYNx6hWQ/xir7b2WLaerzir6iOkuIFg= -----END CERTIFICATE-----Generated at Tue Nov 4 23:53:47 2025 by rpki-client