$ rpki-client -vvf repo-rpki.idnic.net/repo/f9d6acc6-0af3-4b97-99a4-0f45e8ecf576/0/0A8E8E063785238467D4AD1F507CC97B30DBB959.mft File: 0A8E8E063785238467D4AD1F507CC97B30DBB959.mft (raw, json) Hash identifier: xRF/fHp0v8vlXWmGQcF0kj6DGnfPhtRYw+++4po2Bo8= Subject key identifier: 49:A0:02:A7:EC:A5:B5:2D:D1:10:24:71:3E:3B:DC:F9:EC:86:DC:F8 Authority key identifier: 0A:8E:8E:06:37:85:23:84:67:D4:AD:1F:50:7C:C9:7B:30:DB:B9:59 Certificate issuer: /CN=0A8E8E063785238467D4AD1F507CC97B30DBB959 Certificate serial: 423E448353FE6F2007380A0CD81E6C10208B9AC6 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0A8E8E063785238467D4AD1F507CC97B30DBB959.cer Subject info access: rsync://repo-rpki.idnic.net/repo/f9d6acc6-0af3-4b97-99a4-0f45e8ecf576/0/0A8E8E063785238467D4AD1F507CC97B30DBB959.mft Manifest number: 0187 Signing time: Mon 03 Nov 2025 07:51:18 +0000 Manifest this update: Mon 03 Nov 2025 07:46:18 +0000 Manifest next update: Thu 06 Nov 2025 13:27:18 +0000 Files and hashes: 1: 323430363a356334303a393939393a3a2f34382d3438203d3e20313331373035.roa (hash: cSd8oWkoy/PciTBhaM2sT+kEpSFLFHXqmquC1grDeYk=) 2: 3130332e3135342e3137392e302f32342d3234203d3e20313331373035.roa (hash: fuYAXhPxVSs3uQDGyVoloAUdGAB1vPzhCZLoObuSwWo=) 3: 323430363a356334303a313030303a3a2f33362d3438203d3e20313331373035.roa (hash: Mk93/Py1aNdqibCxnW5rDhu68jIUBJ5f2wQcM99902Q=) 4: 3130332e3135342e3137382e302f32332d3234203d3e20313331373035.roa (hash: z6Vlo67b6HowiJ4eNQMIImpcN0YW2LjWV36x2SeZA5M=) 5: 3130332e3135342e3137382e302f32342d3234203d3e20313331373035.roa (hash: dY5S+6E2tTu7kTt3kud9rHyNZ8ICT/4MYY6A5gKdkm0=) 6: 0A8E8E063785238467D4AD1F507CC97B30DBB959.crl (hash: ikxJ9PpEdII3qON0Qs0Exvx6TEQTvgTPWwcki73RjH4=) 7: 323430363a356334303a3a2f33322d3438203d3e20313331373035.roa (hash: ZrrNvfIdpKFxME3MijZJjel9mkVCFWr1LKlyTLKuOmk=) 8: 323430363a356334303a373737373a3a2f34382d3438203d3e20313331373035.roa (hash: uxf3gr1qNXj16NXsE/3S99HOdYs6kHV+q6L/TWnS+ag=) 9: 323430363a356334303a383838383a3a2f34382d3438203d3e20313331373035.roa (hash: xhrHJkeZ6ORZKPQ3ePW270bQNoXqgZH/hWdzMzXe/Ng=) 10: 323430363a356334303a323030303a3a2f33362d3438203d3e20313331373035.roa (hash: 34w8SIWSSd8kqURH0Jn+B/R9XKBmDHxtyVWAlqGJxJo=) 11: 323430363a356334303a3a2f33362d3438203d3e20313331373035.roa (hash: vVX9J+iIt5S0zLOqjzNP9A3DgvrDc3RqZLM36XJo31Q=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/f9d6acc6-0af3-4b97-99a4-0f45e8ecf576/0/0A8E8E063785238467D4AD1F507CC97B30DBB959.crl rsync://repo-rpki.idnic.net/repo/f9d6acc6-0af3-4b97-99a4-0f45e8ecf576/0/0A8E8E063785238467D4AD1F507CC97B30DBB959.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0A8E8E063785238467D4AD1F507CC97B30DBB959.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 06 Nov 2025 13:27:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 42:3e:44:83:53:fe:6f:20:07:38:0a:0c:d8:1e:6c:10:20:8b:9a:c6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0A8E8E063785238467D4AD1F507CC97B30DBB959 Validity Not Before: Nov 3 07:46:18 2025 GMT Not After : Nov 6 13:27:18 2025 GMT Subject: CN=49A002A7ECA5B52DD11024713E3BDCF9EC86DCF8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:5c:bb:a5:7c:fb:73:7b:ea:19:a6:f3:ef:e0: a0:24:52:24:5a:d6:b5:8d:5f:12:a7:1a:bd:35:a9: e2:4f:8a:67:ab:d3:4d:76:bf:90:e9:8b:38:85:6f: aa:f8:44:f5:b7:04:01:8e:70:6b:ef:13:65:98:30: b6:36:33:70:11:4f:65:04:46:80:c8:7f:95:6e:d8: 0b:3b:92:04:84:fa:e4:d9:90:4c:c1:65:9e:dc:cd: 63:bd:34:a3:3a:53:1c:11:e4:61:14:ed:17:07:0d: 29:01:ad:b9:f3:6c:1a:bf:ad:07:c4:21:9b:1f:3b: 92:eb:bd:80:93:0d:cc:d3:80:32:12:73:a5:9d:63: a2:c7:61:b0:93:8d:22:c5:ca:4c:6d:ed:46:ea:51: f9:ad:2d:ee:a2:50:35:9f:e3:1c:94:8f:00:fc:0b: 0f:a5:53:7d:d3:7f:80:41:fc:0a:f1:06:92:49:7d: 5e:e1:ab:2c:38:5d:f5:18:63:d7:a9:69:14:08:32: 5a:3f:95:b5:89:0e:54:ac:1b:9b:00:5c:9b:0a:f6: 43:0b:e4:24:b7:06:46:6b:c8:fc:3a:92:4b:7d:02: 3c:00:9e:21:af:99:2e:9a:06:de:12:39:68:a7:c4: e0:5c:d5:8a:1e:aa:f3:00:2d:01:ea:65:e9:45:b9: 38:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:A0:02:A7:EC:A5:B5:2D:D1:10:24:71:3E:3B:DC:F9:EC:86:DC:F8 X509v3 Authority Key Identifier: keyid:0A:8E:8E:06:37:85:23:84:67:D4:AD:1F:50:7C:C9:7B:30:DB:B9:59 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/f9d6acc6-0af3-4b97-99a4-0f45e8ecf576/0/0A8E8E063785238467D4AD1F507CC97B30DBB959.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0A8E8E063785238467D4AD1F507CC97B30DBB959.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f9d6acc6-0af3-4b97-99a4-0f45e8ecf576/0/0A8E8E063785238467D4AD1F507CC97B30DBB959.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 63:4d:06:dd:16:1f:00:b2:c1:5f:43:49:c4:10:5d:79:38:55: ff:83:82:af:51:1c:97:c0:f6:32:95:48:60:12:e5:10:36:cf: dd:ce:a8:98:64:bf:5d:73:fe:63:38:bf:52:90:43:81:2a:2f: bd:2a:74:ae:b5:f0:5f:59:0a:cc:9d:d5:60:da:7d:31:90:80: ab:95:31:b5:7e:36:95:c3:c1:48:7d:9a:71:ee:e8:a5:2f:0a: 69:5d:f0:91:a2:f6:ea:5e:5e:9c:be:c2:5c:b0:d2:60:45:6d: 4a:f3:9d:50:e3:52:c6:c0:13:22:74:92:cf:ac:dd:50:de:9d: b7:ba:10:5d:ba:d8:75:58:9f:47:c7:d7:4f:82:56:31:ae:ff: ea:d6:62:b5:a1:b0:eb:0f:32:e2:d9:18:a8:1b:d8:13:5c:8c: a2:32:6b:76:3f:f3:ba:ca:b8:12:06:07:07:ff:47:bf:de:aa: 6f:08:a3:7e:10:b1:09:87:cd:83:80:ed:d4:0f:5d:06:19:55: 56:ac:77:76:b4:b4:03:6f:41:bd:95:0e:eb:78:d0:51:20:81: 10:d9:25:04:78:43:cd:f0:5b:fa:2f:27:c4:7c:f7:a3:00:3f: 98:0b:39:52:4a:81:f6:e6:90:e8:d4:2c:45:80:19:4c:8e:90: 03:63:0f:c6 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUQj5Eg1P+byAHOAoM2B5sECCLmsYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMEE4RThFMDYzNzg1MjM4NDY3RDRBRDFGNTA3Q0M5N0Iz MERCQjk1OTAeFw0yNTExMDMwNzQ2MThaFw0yNTExMDYxMzI3MThaMDMxMTAvBgNV BAMTKDQ5QTAwMkE3RUNBNUI1MkREMTEwMjQ3MTNFM0JEQ0Y5RUM4NkRDRjgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDMXLulfPtze+oZpvPv4KAkUiRa 1rWNXxKnGr01qeJPimer0012v5DpiziFb6r4RPW3BAGOcGvvE2WYMLY2M3ART2UE RoDIf5Vu2As7kgSE+uTZkEzBZZ7czWO9NKM6UxwR5GEU7RcHDSkBrbnzbBq/rQfE IZsfO5LrvYCTDczTgDISc6WdY6LHYbCTjSLFykxt7UbqUfmtLe6iUDWf4xyUjwD8 Cw+lU33Tf4BB/ArxBpJJfV7hqyw4XfUYY9epaRQIMlo/lbWJDlSsG5sAXJsK9kML 5CS3BkZryPw6kkt9AjwAniGvmS6aBt4SOWinxOBc1YoeqvMALQHqZelFuTi/AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUSaACp+yltS3RECRxPjvc+eyG3PgwHwYDVR0j BBgwFoAUCo6OBjeFI4Rn1K0fUHzJezDbuVkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m OWQ2YWNjNi0wYWYzLTRiOTctOTlhNC0wZjQ1ZThlY2Y1NzYvMC8wQThFOEUwNjM3 ODUyMzg0NjdENEFEMUY1MDdDQzk3QjMwREJCOTU5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMEE4RThFMDYzNzg1MjM4NDY3RDRBRDFGNTA3Q0M5N0IzMERC Qjk1OS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZjlkNmFjYzYtMGFmMy00Yjk3LTk5 YTQtMGY0NWU4ZWNmNTc2LzAvMEE4RThFMDYzNzg1MjM4NDY3RDRBRDFGNTA3Q0M5 N0IzMERCQjk1OS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGNNBt0WHwCywV9DScQQXXk4Vf+Dgq9RHJfA 9jKVSGAS5RA2z93OqJhkv11z/mM4v1KQQ4EqL70qdK618F9ZCsyd1WDafTGQgKuV MbV+NpXDwUh9mnHu6KUvCmld8JGi9upeXpy+wlyw0mBFbUrznVDjUsbAEyJ0ks+s 3VDenbe6EF262HVYn0fH10+CVjGu/+rWYrWhsOsPMuLZGKgb2BNcjKIya3Y/87rK uBIGBwf/R7/eqm8Io34QsQmHzYOA7dQPXQYZVVasd3a0tANvQb2VDut40FEggRDZ JQR4Q83wW/ovJ8R896MAP5gLOVJKgfbmkOjULEWAGUyOkANjD8Y= -----END CERTIFICATE-----Generated at Tue Nov 4 21:15:03 2025 by rpki-client