$ rpki-client -vvf repo-rpki.idnic.net/repo/17e26aa3-3073-4276-bd74-ad86f099c253/0/8955B36815B4084BAFC7908A639810631BEED49F.mft File: 8955B36815B4084BAFC7908A639810631BEED49F.mft (raw, json) Hash identifier: KKvJgCPSL0qji6jIEbvdYXW5yc3WjLDzgZoNB0nabfw= Subject key identifier: B2:91:EC:2E:6B:0B:DB:B8:B6:F0:3F:68:58:7A:C1:1D:BF:B4:59:1A Authority key identifier: 89:55:B3:68:15:B4:08:4B:AF:C7:90:8A:63:98:10:63:1B:EE:D4:9F Certificate issuer: /CN=8955B36815B4084BAFC7908A639810631BEED49F Certificate serial: 0C23D894B7274451EDD2CA77E4CAAE4253CE5306 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8955B36815B4084BAFC7908A639810631BEED49F.cer Subject info access: rsync://repo-rpki.idnic.net/repo/17e26aa3-3073-4276-bd74-ad86f099c253/0/8955B36815B4084BAFC7908A639810631BEED49F.mft Manifest number: 0509 Signing time: Mon 20 Oct 2025 03:40:46 +0000 Manifest this update: Mon 20 Oct 2025 03:35:46 +0000 Manifest next update: Thu 23 Oct 2025 05:53:46 +0000 Files and hashes: 1: 3130332e3135332e3234342e302f32342d3234203d3e20313430343734.roa (hash: anheo7/IFUA2/H9FN8liseYHAvu0fSEkGprdILkGE3g=) 2: 8955B36815B4084BAFC7908A639810631BEED49F.crl (hash: z3uEDnvYDeViVVkMnZD4I9wj2UgYvmAmYIT2WeLAq0M=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/17e26aa3-3073-4276-bd74-ad86f099c253/0/8955B36815B4084BAFC7908A639810631BEED49F.crl rsync://repo-rpki.idnic.net/repo/17e26aa3-3073-4276-bd74-ad86f099c253/0/8955B36815B4084BAFC7908A639810631BEED49F.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8955B36815B4084BAFC7908A639810631BEED49F.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 Oct 2025 05:53:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0c:23:d8:94:b7:27:44:51:ed:d2:ca:77:e4:ca:ae:42:53:ce:53:06 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8955B36815B4084BAFC7908A639810631BEED49F Validity Not Before: Oct 20 03:35:46 2025 GMT Not After : Oct 23 05:53:46 2025 GMT Subject: CN=B291EC2E6B0BDBB8B6F03F68587AC11DBFB4591A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:bc:20:49:d0:4d:4c:c7:5d:c2:18:7c:fe:3f: da:c1:2b:9e:27:c8:1d:00:e4:78:0b:1b:5c:8f:cb: da:a3:8c:75:79:50:58:8c:14:07:53:0a:88:c0:cb: e7:17:fd:1c:fc:a1:d4:0f:04:a9:7c:e8:66:1a:66: b4:21:30:6b:5c:df:9a:08:3e:4b:56:5d:37:a7:29: 96:9b:3b:2a:de:52:3f:19:07:5b:db:22:f4:7f:79: 20:0e:9f:9e:e9:f4:98:62:3f:32:e4:71:c9:60:a8: 54:34:e9:f9:ef:7d:4c:2e:32:52:6b:f9:f2:49:aa: 58:3f:39:ce:f9:e6:48:4d:b7:f3:1d:74:c4:72:3c: 16:71:fe:96:5d:e3:fd:25:e2:ca:a8:fd:19:ac:89: 91:00:13:c9:26:3c:99:75:0e:9c:f1:4f:be:fe:a4: e9:ba:a9:9c:a3:23:86:6a:32:90:f7:ea:fc:b6:14: b3:c9:c3:05:26:f4:92:bf:31:a2:e1:5e:6c:b9:2a: 1d:60:8f:19:65:de:67:69:62:5c:83:6e:50:3f:06: b4:b2:c8:c6:49:a3:50:f8:a1:c7:87:8b:2e:eb:17: 16:00:5c:7e:5b:ad:56:b6:b0:f5:8b:f0:d1:01:0b: 51:4a:e5:92:15:18:6f:26:39:27:f5:8a:01:5a:f5: 10:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B2:91:EC:2E:6B:0B:DB:B8:B6:F0:3F:68:58:7A:C1:1D:BF:B4:59:1A X509v3 Authority Key Identifier: keyid:89:55:B3:68:15:B4:08:4B:AF:C7:90:8A:63:98:10:63:1B:EE:D4:9F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/17e26aa3-3073-4276-bd74-ad86f099c253/0/8955B36815B4084BAFC7908A639810631BEED49F.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8955B36815B4084BAFC7908A639810631BEED49F.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/17e26aa3-3073-4276-bd74-ad86f099c253/0/8955B36815B4084BAFC7908A639810631BEED49F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0d:87:06:93:09:ce:97:ac:76:db:b8:56:ef:ff:ba:74:6c:65: d4:4e:b2:bb:f5:b2:72:ce:4b:c4:3c:03:9b:54:17:da:d6:d0: 61:93:90:20:c2:08:ab:2e:34:b3:a2:f1:4e:88:fa:8e:c6:f4: 45:b6:ea:a2:6c:27:f4:60:e9:a6:dd:3a:5f:e9:8e:08:3e:15: 1f:96:e0:31:47:7a:43:c3:e1:36:85:d9:c4:e5:d1:7c:c5:62: aa:ba:70:ca:a2:9c:ec:34:0b:0a:9a:e9:b8:4c:34:bb:82:f1: 9d:40:05:ac:f3:f4:76:76:5e:31:69:fd:42:bd:5b:8f:7b:ff: 0d:f1:e2:1b:96:ba:f3:82:bf:19:78:bf:d7:19:5f:59:01:c3: 93:64:6b:d4:40:a8:fa:87:85:a9:43:1a:4c:6e:e3:54:0f:e7: 36:04:c5:f5:9a:1c:1d:de:98:62:0d:8b:99:72:77:bb:7a:46: 3f:d0:37:4b:83:54:fa:10:e5:66:75:34:4d:82:1b:7f:29:62: 30:d2:e8:78:1e:30:cf:b0:5d:dd:5b:e0:61:64:ba:3b:fc:e4: 75:d6:2c:fd:6f:62:a7:4b:a4:50:ae:7e:a1:e4:08:32:63:c7: 58:23:02:d7:75:e4:e2:83:aa:82:0e:15:3e:8e:77:b6:f1:9a: 13:c3:25:f7 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUDCPYlLcnRFHt0sp35MquQlPOUwYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODk1NUIzNjgxNUI0MDg0QkFGQzc5MDhBNjM5ODEwNjMx QkVFRDQ5RjAeFw0yNTEwMjAwMzM1NDZaFw0yNTEwMjMwNTUzNDZaMDMxMTAvBgNV BAMTKEIyOTFFQzJFNkIwQkRCQjhCNkYwM0Y2ODU4N0FDMTFEQkZCNDU5MUEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDgvCBJ0E1Mx13CGHz+P9rBK54n yB0A5HgLG1yPy9qjjHV5UFiMFAdTCojAy+cX/Rz8odQPBKl86GYaZrQhMGtc35oI PktWXTenKZabOyreUj8ZB1vbIvR/eSAOn57p9JhiPzLkcclgqFQ06fnvfUwuMlJr +fJJqlg/Oc755khNt/MddMRyPBZx/pZd4/0l4sqo/RmsiZEAE8kmPJl1DpzxT77+ pOm6qZyjI4ZqMpD36vy2FLPJwwUm9JK/MaLhXmy5Kh1gjxll3mdpYlyDblA/BrSy yMZJo1D4oceHiy7rFxYAXH5brVa2sPWL8NEBC1FK5ZIVGG8mOSf1igFa9RAtAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUspHsLmsL27i28D9oWHrBHb+0WRowHwYDVR0j BBgwFoAUiVWzaBW0CEuvx5CKY5gQYxvu1J8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x N2UyNmFhMy0zMDczLTQyNzYtYmQ3NC1hZDg2ZjA5OWMyNTMvMC84OTU1QjM2ODE1 QjQwODRCQUZDNzkwOEE2Mzk4MTA2MzFCRUVENDlGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvODk1NUIzNjgxNUI0MDg0QkFGQzc5MDhBNjM5ODEwNjMxQkVF RDQ5Ri5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMTdlMjZhYTMtMzA3My00Mjc2LWJk NzQtYWQ4NmYwOTljMjUzLzAvODk1NUIzNjgxNUI0MDg0QkFGQzc5MDhBNjM5ODEw NjMxQkVFRDQ5Ri5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAA2HBpMJzpesdtu4Vu//unRsZdROsrv1snLO S8Q8A5tUF9rW0GGTkCDCCKsuNLOi8U6I+o7G9EW26qJsJ/Rg6abdOl/pjgg+FR+W 4DFHekPD4TaF2cTl0XzFYqq6cMqinOw0Cwqa6bhMNLuC8Z1ABazz9HZ2XjFp/UK9 W497/w3x4huWuvOCvxl4v9cZX1kBw5Nka9RAqPqHhalDGkxu41QP5zYExfWaHB3e mGINi5lyd7t6Rj/QN0uDVPoQ5WZ1NE2CG38pYjDS6HgeMM+wXd1b4GFkujv85HXW LP1vYqdLpFCufqHkCDJjx1gjAtd15OKDqoIOFT6Od7bxmhPDJfc= -----END CERTIFICATE-----Generated at Mon Oct 20 17:25:50 2025 by rpki-client