$ rpki-client -vvf repo-rpki.idnic.net/repo/2a97bcf4-e1aa-47d6-bde6-2e667b9d6134/0/A08B1B14AA5B6512424EDF8650A984942F27A4EF.mft File: A08B1B14AA5B6512424EDF8650A984942F27A4EF.mft (raw, json) Hash identifier: XMFIZia/HG3YL16fQGS59IbxPoz2zgATMTuNWVf6/jE= Subject key identifier: 9A:EC:EF:16:6F:17:F7:A3:96:A0:57:62:D6:7E:2B:6C:F7:E0:08:BB Authority key identifier: A0:8B:1B:14:AA:5B:65:12:42:4E:DF:86:50:A9:84:94:2F:27:A4:EF Certificate issuer: /CN=A08B1B14AA5B6512424EDF8650A984942F27A4EF Certificate serial: 30575C2BE74A8B8A8BA548CBBC3B62C22587FE7D Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A08B1B14AA5B6512424EDF8650A984942F27A4EF.cer Subject info access: rsync://repo-rpki.idnic.net/repo/2a97bcf4-e1aa-47d6-bde6-2e667b9d6134/0/A08B1B14AA5B6512424EDF8650A984942F27A4EF.mft Manifest number: 04B0 Signing time: Sun 19 Oct 2025 22:01:41 +0000 Manifest this update: Sun 19 Oct 2025 21:56:41 +0000 Manifest next update: Thu 23 Oct 2025 03:56:41 +0000 Files and hashes: 1: 3130332e3130302e3234372e302f32342d3234203d3e20313336383432.roa (hash: 7kcdJn0kEx4MlESTLNrz7h+lfGYcQSPT5Qkc5rykWNw=) 2: 323430353a6263303a3a2f33332d3438203d3e20313336383432.roa (hash: /afnBbe9lqmeZWTu4VD92m9xOkkp/GMDn8V+1M5ITYk=) 3: 3130332e3130302e3234362e302f32342d3234203d3e20313336383432.roa (hash: L/oaDs9pEKj6iBvLwrU05wZAuGGAsyb/Z+4/d76DsQ0=) 4: A08B1B14AA5B6512424EDF8650A984942F27A4EF.crl (hash: n622YUsaJv2ojFJhTde3ffUopNHc8ttY14muDDOb4/s=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/2a97bcf4-e1aa-47d6-bde6-2e667b9d6134/0/A08B1B14AA5B6512424EDF8650A984942F27A4EF.crl rsync://repo-rpki.idnic.net/repo/2a97bcf4-e1aa-47d6-bde6-2e667b9d6134/0/A08B1B14AA5B6512424EDF8650A984942F27A4EF.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A08B1B14AA5B6512424EDF8650A984942F27A4EF.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 Oct 2025 03:56:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 30:57:5c:2b:e7:4a:8b:8a:8b:a5:48:cb:bc:3b:62:c2:25:87:fe:7d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A08B1B14AA5B6512424EDF8650A984942F27A4EF Validity Not Before: Oct 19 21:56:41 2025 GMT Not After : Oct 23 03:56:41 2025 GMT Subject: CN=9AECEF166F17F7A396A05762D67E2B6CF7E008BB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:64:e6:fa:2f:fe:c8:84:28:69:fc:80:7e:c8: 7a:0e:06:4a:29:2d:70:2c:0f:d7:9a:3d:c6:10:9a: 9a:ac:15:eb:2e:8c:06:b1:a9:99:c1:97:d2:13:b2: 7f:d3:31:3c:ee:d0:dc:8e:0f:bb:6a:c4:7f:1f:8c: 21:5a:bb:39:08:0a:89:9b:7f:4b:84:a3:d3:ef:94: ed:b9:7a:e0:8f:c1:a4:1b:4f:09:33:a3:f8:e3:94: 5d:bb:ee:73:7e:be:5d:fa:51:68:c1:38:65:a2:1f: 7d:b2:c0:4b:8a:7d:84:ad:90:76:ac:3c:73:21:af: 93:b3:07:39:17:f6:d0:a8:dd:d8:d8:e5:37:cb:b0: ff:12:8d:dc:bc:22:eb:ae:44:ad:22:a2:3a:6f:d2: 6f:8c:3c:03:b3:82:c7:19:73:42:fa:4b:11:7a:c8: 8f:bd:68:f4:0f:d4:51:01:7c:1a:11:7a:99:0b:95: 0c:b5:53:a9:96:a1:71:19:f7:92:97:bf:d7:59:ae: 5c:bd:a9:54:b7:44:2f:18:d6:03:1f:48:97:10:60: c2:d9:47:7d:76:15:ce:32:88:df:7a:de:7b:9e:8e: 77:31:aa:7e:e2:99:f4:6e:c7:23:8a:ea:22:7c:c0: ca:ef:bf:91:db:6e:0e:96:38:ab:93:1a:ed:28:22: f0:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9A:EC:EF:16:6F:17:F7:A3:96:A0:57:62:D6:7E:2B:6C:F7:E0:08:BB X509v3 Authority Key Identifier: keyid:A0:8B:1B:14:AA:5B:65:12:42:4E:DF:86:50:A9:84:94:2F:27:A4:EF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/2a97bcf4-e1aa-47d6-bde6-2e667b9d6134/0/A08B1B14AA5B6512424EDF8650A984942F27A4EF.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A08B1B14AA5B6512424EDF8650A984942F27A4EF.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/2a97bcf4-e1aa-47d6-bde6-2e667b9d6134/0/A08B1B14AA5B6512424EDF8650A984942F27A4EF.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 31:56:b4:c1:1c:f6:74:2d:f9:03:34:e7:5d:f6:e2:2c:db:1b: 89:2c:d4:ca:2b:3f:08:cf:28:06:22:a2:4c:9b:9e:4b:4a:8f: ee:b4:27:c6:05:dc:10:47:f5:d5:25:a4:86:e2:a3:b4:26:67: c3:ac:a3:59:3e:5a:c5:a8:0d:1e:34:58:d1:24:9a:a1:5c:9f: f3:78:2a:29:3f:7f:02:d3:46:28:80:d6:d9:4f:90:dc:9c:05: 9d:1a:be:77:08:26:37:97:14:6e:9c:8a:42:39:23:e6:f8:44: 95:bf:bb:37:bb:6a:d9:51:2c:2d:ee:e2:fb:96:d6:ce:bd:53: 85:05:9a:17:51:4b:eb:5e:e2:dc:48:b6:d1:98:c4:99:92:08: 74:68:c8:88:49:76:59:c4:6c:92:55:ad:e9:c2:ee:de:c4:6e: 9b:b6:e4:b4:a9:2a:a2:a0:23:e7:94:00:f1:d8:f7:be:93:60: 20:c5:c8:9f:8a:40:a4:8c:78:ed:1f:0c:e7:94:f8:7c:97:b0: 81:e3:ab:58:84:a8:e0:46:e9:cb:7c:9a:71:f5:f3:2f:ac:64: 9d:21:7c:5a:ed:03:f2:5a:57:6f:43:44:be:d2:b8:55:e3:78: 05:8a:ac:f4:bf:bd:94:50:97:f9:14:dc:c0:8c:36:66:90:82: bc:c5:f6:ad -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUMFdcK+dKi4qLpUjLvDtiwiWH/n0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTA4QjFCMTRBQTVCNjUxMjQyNEVERjg2NTBBOTg0OTQy RjI3QTRFRjAeFw0yNTEwMTkyMTU2NDFaFw0yNTEwMjMwMzU2NDFaMDMxMTAvBgNV BAMTKDlBRUNFRjE2NkYxN0Y3QTM5NkEwNTc2MkQ2N0UyQjZDRjdFMDA4QkIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDCZOb6L/7IhChp/IB+yHoOBkop LXAsD9eaPcYQmpqsFesujAaxqZnBl9ITsn/TMTzu0NyOD7tqxH8fjCFauzkIComb f0uEo9PvlO25euCPwaQbTwkzo/jjlF277nN+vl36UWjBOGWiH32ywEuKfYStkHas PHMhr5OzBzkX9tCo3djY5TfLsP8Sjdy8IuuuRK0iojpv0m+MPAOzgscZc0L6SxF6 yI+9aPQP1FEBfBoRepkLlQy1U6mWoXEZ95KXv9dZrly9qVS3RC8Y1gMfSJcQYMLZ R312Fc4yiN963nuejncxqn7imfRuxyOK6iJ8wMrvv5Hbbg6WOKuTGu0oIvBXAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUmuzvFm8X96OWoFdi1n4rbPfgCLswHwYDVR0j BBgwFoAUoIsbFKpbZRJCTt+GUKmElC8npO8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y YTk3YmNmNC1lMWFhLTQ3ZDYtYmRlNi0yZTY2N2I5ZDYxMzQvMC9BMDhCMUIxNEFB NUI2NTEyNDI0RURGODY1MEE5ODQ5NDJGMjdBNEVGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQTA4QjFCMTRBQTVCNjUxMjQyNEVERjg2NTBBOTg0OTQyRjI3 QTRFRi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMmE5N2JjZjQtZTFhYS00N2Q2LWJk ZTYtMmU2NjdiOWQ2MTM0LzAvQTA4QjFCMTRBQTVCNjUxMjQyNEVERjg2NTBBOTg0 OTQyRjI3QTRFRi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADFWtMEc9nQt+QM051324izbG4ks1MorPwjP KAYiokybnktKj+60J8YF3BBH9dUlpIbio7QmZ8Oso1k+WsWoDR40WNEkmqFcn/N4 Kik/fwLTRiiA1tlPkNycBZ0avncIJjeXFG6cikI5I+b4RJW/uze7atlRLC3u4vuW 1s69U4UFmhdRS+te4txIttGYxJmSCHRoyIhJdlnEbJJVrenC7t7Ebpu25LSpKqKg I+eUAPHY976TYCDFyJ+KQKSMeO0fDOeU+HyXsIHjq1iEqOBG6ct8mnH18y+sZJ0h fFrtA/JaV29DRL7SuFXjeAWKrPS/vZRQl/kU3MCMNmaQgrzF9q0= -----END CERTIFICATE-----Generated at Mon Oct 20 11:07:22 2025 by rpki-client