$ rpki-client -vvf repo-rpki.idnic.net/repo/05669807-050e-43ae-8708-b46b8817842c/0/0912BC2A8D2E8BF2553D7106FF6E62228E03C1E4.mft File: 0912BC2A8D2E8BF2553D7106FF6E62228E03C1E4.mft (raw, json) Hash identifier: BeqX2qmmr9sxvp5w+m9FbPyf+2rzwWV1lfXTdMzksdc= Subject key identifier: CD:7E:CC:61:AA:D4:33:F7:DE:CA:9B:3C:07:7D:0F:4E:AA:BD:26:7D Authority key identifier: 09:12:BC:2A:8D:2E:8B:F2:55:3D:71:06:FF:6E:62:22:8E:03:C1:E4 Certificate issuer: /CN=0912BC2A8D2E8BF2553D7106FF6E62228E03C1E4 Certificate serial: 3C5E4A3797E1A8949CD6D3917B2405A7DCB608A4 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0912BC2A8D2E8BF2553D7106FF6E62228E03C1E4.cer Subject info access: rsync://repo-rpki.idnic.net/repo/05669807-050e-43ae-8708-b46b8817842c/0/0912BC2A8D2E8BF2553D7106FF6E62228E03C1E4.mft Manifest number: 0519 Signing time: Sat 18 Oct 2025 17:41:16 +0000 Manifest this update: Sat 18 Oct 2025 17:36:16 +0000 Manifest next update: Wed 22 Oct 2025 05:29:16 +0000 Files and hashes: 1: 0912BC2A8D2E8BF2553D7106FF6E62228E03C1E4.crl (hash: Dy5RTiSPsvUCCCtU878ZMWG2iU4fg52rXJoA1MYNysg=) 2: 3130332e3133302e3138322e302f32332d3233203d3e20313338303833.roa (hash: /xZYFYyOB1e+pblVdjFbZfEDRpifvi0rioH8bq15tlY=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/05669807-050e-43ae-8708-b46b8817842c/0/0912BC2A8D2E8BF2553D7106FF6E62228E03C1E4.crl rsync://repo-rpki.idnic.net/repo/05669807-050e-43ae-8708-b46b8817842c/0/0912BC2A8D2E8BF2553D7106FF6E62228E03C1E4.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0912BC2A8D2E8BF2553D7106FF6E62228E03C1E4.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 Oct 2025 05:29:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3c:5e:4a:37:97:e1:a8:94:9c:d6:d3:91:7b:24:05:a7:dc:b6:08:a4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0912BC2A8D2E8BF2553D7106FF6E62228E03C1E4 Validity Not Before: Oct 18 17:36:16 2025 GMT Not After : Oct 22 05:29:16 2025 GMT Subject: CN=CD7ECC61AAD433F7DECA9B3C077D0F4EAABD267D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:e1:8e:dd:47:1e:58:8d:36:75:e8:c9:f7:f6: ef:e7:7a:47:ec:32:28:45:5d:dc:c5:90:37:6d:46: 72:c0:bf:b8:89:2d:a9:12:99:07:b3:c9:01:e0:c1: 12:87:07:12:20:0c:63:50:28:52:69:98:eb:95:0b: 98:bd:92:b0:5f:7d:66:19:fc:50:fd:61:ff:b9:98: 0b:fe:ab:ca:d9:2e:20:10:59:19:e2:57:7f:5c:87: 4d:fb:3a:20:f1:9f:84:a3:96:7a:0f:6c:4e:b6:8a: ff:51:7f:31:5f:74:9e:c5:e6:69:3c:c7:09:51:57: 00:51:f0:ff:fc:de:a8:79:da:4e:b0:10:1e:ed:d9: a3:55:ff:86:be:21:51:25:8b:24:3f:ec:f8:32:13: 19:71:1e:5a:28:21:c8:7c:b7:f9:81:e5:b2:fb:ce: 78:1f:11:92:82:78:ef:53:a0:6c:c1:70:dd:ac:5e: c2:38:82:00:2a:db:38:e3:68:b7:3b:f7:e1:fe:b2: 04:e1:87:8f:48:54:6a:dd:03:1b:ae:6c:6d:14:3a: ba:c5:5f:27:95:01:42:74:d1:5c:93:6a:cd:e6:b2: 8f:fa:d8:78:6a:10:09:3d:76:ae:2d:56:9c:29:8e: bd:71:d0:ba:9d:e0:ad:3c:64:4d:4a:06:05:85:a0: bb:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CD:7E:CC:61:AA:D4:33:F7:DE:CA:9B:3C:07:7D:0F:4E:AA:BD:26:7D X509v3 Authority Key Identifier: keyid:09:12:BC:2A:8D:2E:8B:F2:55:3D:71:06:FF:6E:62:22:8E:03:C1:E4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/05669807-050e-43ae-8708-b46b8817842c/0/0912BC2A8D2E8BF2553D7106FF6E62228E03C1E4.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0912BC2A8D2E8BF2553D7106FF6E62228E03C1E4.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/05669807-050e-43ae-8708-b46b8817842c/0/0912BC2A8D2E8BF2553D7106FF6E62228E03C1E4.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7d:d4:21:a7:88:c3:07:a0:6f:9e:b0:23:d9:8e:9f:8c:d0:c8: b4:81:e8:c4:33:a3:37:fc:c7:3c:6e:a3:cc:49:4b:f9:08:c7: 11:68:af:e4:82:ad:95:cb:12:04:ce:8e:a9:1c:a6:f7:1c:f7: 62:6d:39:98:76:7d:45:d5:c3:dc:93:cf:4f:e1:8a:71:9f:35: 60:2e:22:a6:32:d8:f2:85:87:ea:c1:93:d5:93:09:bf:a4:77: e3:31:f0:f1:1e:a0:31:96:86:a5:a4:43:38:af:f7:6a:b2:c2: d2:d4:00:f8:ad:9f:1e:a2:f5:77:5c:2e:8f:6d:41:7e:e8:c2: 66:5c:d5:6b:01:81:13:d9:5b:84:39:62:02:5b:88:51:41:d5: fb:e2:87:0a:51:2e:51:b2:54:74:8f:47:38:61:10:40:01:56: 3e:a9:81:61:ec:b7:0d:04:ce:d2:09:5f:45:47:3f:f4:ba:7a: 9b:35:b9:74:71:b1:a5:d6:d9:06:02:b2:bb:d8:9f:f8:a4:e8: d9:5d:74:94:a9:f9:d2:d1:b5:ea:f1:72:72:44:1f:4e:58:fb: 06:5a:4b:d6:94:7a:d6:d3:72:74:06:6a:16:67:9c:df:21:13: 03:8f:08:44:b1:ac:bd:b5:97:96:a1:38:09:56:83:23:78:bf: 0f:f6:d0:c4 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUPF5KN5fhqJSc1tOReyQFp9y2CKQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDkxMkJDMkE4RDJFOEJGMjU1M0Q3MTA2RkY2RTYyMjI4 RTAzQzFFNDAeFw0yNTEwMTgxNzM2MTZaFw0yNTEwMjIwNTI5MTZaMDMxMTAvBgNV BAMTKENEN0VDQzYxQUFENDMzRjdERUNBOUIzQzA3N0QwRjRFQUFCRDI2N0QwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCr4Y7dRx5YjTZ16Mn39u/nekfs MihFXdzFkDdtRnLAv7iJLakSmQezyQHgwRKHBxIgDGNQKFJpmOuVC5i9krBffWYZ /FD9Yf+5mAv+q8rZLiAQWRniV39ch037OiDxn4SjlnoPbE62iv9RfzFfdJ7F5mk8 xwlRVwBR8P/83qh52k6wEB7t2aNV/4a+IVEliyQ/7PgyExlxHlooIch8t/mB5bL7 zngfEZKCeO9ToGzBcN2sXsI4ggAq2zjjaLc79+H+sgThh49IVGrdAxuubG0UOrrF XyeVAUJ00VyTas3mso/62HhqEAk9dq4tVpwpjr1x0Lqd4K08ZE1KBgWFoLujAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUzX7MYarUM/feyps8B30PTqq9Jn0wHwYDVR0j BBgwFoAUCRK8Ko0ui/JVPXEG/25iIo4DweQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w NTY2OTgwNy0wNTBlLTQzYWUtODcwOC1iNDZiODgxNzg0MmMvMC8wOTEyQkMyQThE MkU4QkYyNTUzRDcxMDZGRjZFNjIyMjhFMDNDMUU0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMDkxMkJDMkE4RDJFOEJGMjU1M0Q3MTA2RkY2RTYyMjI4RTAz QzFFNC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMDU2Njk4MDctMDUwZS00M2FlLTg3 MDgtYjQ2Yjg4MTc4NDJjLzAvMDkxMkJDMkE4RDJFOEJGMjU1M0Q3MTA2RkY2RTYy MjI4RTAzQzFFNC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAH3UIaeIwwegb56wI9mOn4zQyLSB6MQzozf8 xzxuo8xJS/kIxxFor+SCrZXLEgTOjqkcpvcc92JtOZh2fUXVw9yTz0/hinGfNWAu IqYy2PKFh+rBk9WTCb+kd+Mx8PEeoDGWhqWkQziv92qywtLUAPitnx6i9XdcLo9t QX7owmZc1WsBgRPZW4Q5YgJbiFFB1fvihwpRLlGyVHSPRzhhEEABVj6pgWHstw0E ztIJX0VHP/S6eps1uXRxsaXW2QYCsrvYn/ik6NlddJSp+dLRterxcnJEH05Y+wZa S9aUetbTcnQGahZnnN8hEwOPCESxrL21l5ahOAlWgyN4vw/20MQ= -----END CERTIFICATE-----Generated at Mon Oct 20 10:06:25 2025 by rpki-client