$ rpki-client -vvf repo-rpki.idnic.net/repo/12307390-6ef3-4476-a6aa-d0c5783e1f37/0/8A05EBF58BEC96D946EE85F0F0F85701A0A72799.mft File: 8A05EBF58BEC96D946EE85F0F0F85701A0A72799.mft (raw, json) Hash identifier: zErUky+a8fxo8eXMyUP5MFCird4YR7OW2HFrKOoYVWI= Subject key identifier: C2:CC:39:47:D4:52:A3:7E:FA:17:03:7C:9E:75:BD:7E:1C:F2:30:44 Authority key identifier: 8A:05:EB:F5:8B:EC:96:D9:46:EE:85:F0:F0:F8:57:01:A0:A7:27:99 Certificate issuer: /CN=8A05EBF58BEC96D946EE85F0F0F85701A0A72799 Certificate serial: 5A62540AC6B64EAE4A6B2341FAEE5171265BA932 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8A05EBF58BEC96D946EE85F0F0F85701A0A72799.cer Subject info access: rsync://repo-rpki.idnic.net/repo/12307390-6ef3-4476-a6aa-d0c5783e1f37/0/8A05EBF58BEC96D946EE85F0F0F85701A0A72799.mft Manifest number: 0519 Signing time: Mon 20 Oct 2025 09:11:07 +0000 Manifest this update: Mon 20 Oct 2025 09:06:07 +0000 Manifest next update: Thu 23 Oct 2025 09:15:07 +0000 Files and hashes: 1: 8A05EBF58BEC96D946EE85F0F0F85701A0A72799.crl (hash: gPu9/hgfnwyoQxez0d5Cxxnlo21IwbvrV17EL1582n4=) 2: 3130332e3133392e34362e302f32342d3234203d3e203137393935.roa (hash: hthNpAwJxjCDLni6mv2Gc1l+BPz0lcv9dxQLklW+A64=) 3: 3130332e3133392e34372e302f32342d3234203d3e203137393935.roa (hash: hRDdGequ+GhEEqBrX8O9Zq6WRslymD5ehiejKAFbvr0=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/12307390-6ef3-4476-a6aa-d0c5783e1f37/0/8A05EBF58BEC96D946EE85F0F0F85701A0A72799.crl rsync://repo-rpki.idnic.net/repo/12307390-6ef3-4476-a6aa-d0c5783e1f37/0/8A05EBF58BEC96D946EE85F0F0F85701A0A72799.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8A05EBF58BEC96D946EE85F0F0F85701A0A72799.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 Oct 2025 09:15:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5a:62:54:0a:c6:b6:4e:ae:4a:6b:23:41:fa:ee:51:71:26:5b:a9:32 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8A05EBF58BEC96D946EE85F0F0F85701A0A72799 Validity Not Before: Oct 20 09:06:07 2025 GMT Not After : Oct 23 09:15:07 2025 GMT Subject: CN=C2CC3947D452A37EFA17037C9E75BD7E1CF23044 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:48:da:d7:a2:6a:67:ea:7b:75:b6:2c:95:9d: 82:b0:fb:f8:83:21:b1:e1:13:bf:61:e1:b5:c9:c5: 49:40:2d:17:e9:e8:c6:4a:5b:e6:a8:0b:fd:8a:81: 16:66:56:e3:18:65:a7:9c:d1:9a:af:19:7f:10:b7: 50:01:a8:58:4e:35:24:93:36:03:ec:2e:78:32:bd: dc:ee:dc:0e:a8:f3:c2:e3:e8:d3:a3:e1:b3:de:0a: f1:0e:bb:0a:3d:20:68:b0:96:8c:e3:90:0b:e7:54: 4d:12:02:44:b8:a9:2d:57:a9:7d:be:70:68:25:96: 8e:26:d6:52:34:55:e0:47:44:33:3e:e1:bc:06:ba: b8:d6:25:53:46:47:ec:ca:0e:98:2d:fb:2a:e2:22: 7e:f5:ab:7c:37:8b:5e:5e:a4:86:e2:76:3a:5d:13: 7b:88:a2:a8:da:1b:20:4e:51:56:08:a9:54:10:6b: d7:33:9f:16:61:e7:17:1a:2e:cc:16:c7:cd:cf:a1: 47:be:9e:fd:2a:09:a5:f4:8a:ad:aa:1c:52:49:e8: aa:6e:61:a3:1c:8a:70:4c:94:75:b5:b2:0a:ab:49: ec:f0:45:3a:68:74:6b:20:de:05:34:fc:c2:36:d2: 0e:b7:c4:cf:ae:ba:6c:85:d7:27:88:6d:a3:26:a2: 43:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C2:CC:39:47:D4:52:A3:7E:FA:17:03:7C:9E:75:BD:7E:1C:F2:30:44 X509v3 Authority Key Identifier: keyid:8A:05:EB:F5:8B:EC:96:D9:46:EE:85:F0:F0:F8:57:01:A0:A7:27:99 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/12307390-6ef3-4476-a6aa-d0c5783e1f37/0/8A05EBF58BEC96D946EE85F0F0F85701A0A72799.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8A05EBF58BEC96D946EE85F0F0F85701A0A72799.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/12307390-6ef3-4476-a6aa-d0c5783e1f37/0/8A05EBF58BEC96D946EE85F0F0F85701A0A72799.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 46:44:ba:7c:6c:ab:50:76:0c:ba:aa:c1:8d:2b:51:fc:b7:a3: c5:6f:7a:9b:63:cf:b2:18:9f:9e:72:11:21:80:cb:bd:8e:4e: 39:61:dd:81:22:84:31:3a:2f:c4:c1:83:db:a8:2d:00:2a:95: a5:3a:7c:bd:8e:d0:21:ca:a1:db:37:29:b2:5d:52:e1:49:46: 2e:1a:27:78:99:0d:74:87:e1:92:50:6a:c3:8a:28:4b:7e:57: d5:c7:c3:50:39:ae:6a:1c:86:bb:bd:a1:f4:f0:2c:da:b0:fe: 97:52:fa:60:a4:62:a3:93:0c:a1:3c:db:9d:9f:40:d4:f7:f1: d6:88:df:74:8a:ab:c9:51:a5:9a:2a:cd:2d:aa:22:ec:e1:e7: ba:68:75:29:32:e1:fa:85:e5:71:8c:3d:ba:1e:4a:34:df:bc: af:50:bd:61:fb:c1:80:d0:11:68:81:0a:e0:3d:d5:2c:a8:1e: 22:90:c0:27:30:94:4c:42:51:41:5e:75:ac:60:63:75:a2:79: b8:40:dc:38:ca:67:57:03:b4:dd:dd:77:69:fb:c9:39:5b:0c: 70:8c:d9:0e:ae:94:17:91:2d:c7:ce:8e:ca:f6:71:c4:d4:58: 60:ee:96:7b:76:bd:5b:6b:d4:a6:9c:03:86:8f:21:5f:cd:eb: 5c:13:a1:44 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUWmJUCsa2Tq5KayNB+u5RcSZbqTIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEEwNUVCRjU4QkVDOTZEOTQ2RUU4NUYwRjBGODU3MDFB MEE3Mjc5OTAeFw0yNTEwMjAwOTA2MDdaFw0yNTEwMjMwOTE1MDdaMDMxMTAvBgNV BAMTKEMyQ0MzOTQ3RDQ1MkEzN0VGQTE3MDM3QzlFNzVCRDdFMUNGMjMwNDQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDhSNrXompn6nt1tiyVnYKw+/iD IbHhE79h4bXJxUlALRfp6MZKW+aoC/2KgRZmVuMYZaec0ZqvGX8Qt1ABqFhONSST NgPsLngyvdzu3A6o88Lj6NOj4bPeCvEOuwo9IGiwlozjkAvnVE0SAkS4qS1XqX2+ cGgllo4m1lI0VeBHRDM+4bwGurjWJVNGR+zKDpgt+yriIn71q3w3i15epIbidjpd E3uIoqjaGyBOUVYIqVQQa9cznxZh5xcaLswWx83PoUe+nv0qCaX0iq2qHFJJ6Kpu YaMcinBMlHW1sgqrSezwRTpodGsg3gU0/MI20g63xM+uumyF1yeIbaMmokMrAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUwsw5R9RSo376FwN8nnW9fhzyMEQwHwYDVR0j BBgwFoAUigXr9YvsltlG7oXw8PhXAaCnJ5kwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x MjMwNzM5MC02ZWYzLTQ0NzYtYTZhYS1kMGM1NzgzZTFmMzcvMC84QTA1RUJGNThC RUM5NkQ5NDZFRTg1RjBGMEY4NTcwMUEwQTcyNzk5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOEEwNUVCRjU4QkVDOTZEOTQ2RUU4NUYwRjBGODU3MDFBMEE3 Mjc5OS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMTIzMDczOTAtNmVmMy00NDc2LWE2 YWEtZDBjNTc4M2UxZjM3LzAvOEEwNUVCRjU4QkVDOTZEOTQ2RUU4NUYwRjBGODU3 MDFBMEE3Mjc5OS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEZEunxsq1B2DLqqwY0rUfy3o8Vveptjz7IY n55yESGAy72OTjlh3YEihDE6L8TBg9uoLQAqlaU6fL2O0CHKods3KbJdUuFJRi4a J3iZDXSH4ZJQasOKKEt+V9XHw1A5rmochru9ofTwLNqw/pdS+mCkYqOTDKE8252f QNT38daI33SKq8lRpZoqzS2qIuzh57podSky4fqF5XGMPboeSjTfvK9QvWH7wYDQ EWiBCuA91SyoHiKQwCcwlExCUUFedaxgY3WiebhA3DjKZ1cDtN3dd2n7yTlbDHCM 2Q6ulBeRLcfOjsr2ccTUWGDulnt2vVtr1KacA4aPIV/N61wToUQ= -----END CERTIFICATE-----Generated at Mon Oct 20 14:20:53 2025 by rpki-client