$ rpki-client -vvf repo-rpki.idnic.net/repo/42083d44-7835-443d-853a-0a79cf00e950/0/08A94FD7F0E8A287AD318D7A26254192431E175F.mft File: 08A94FD7F0E8A287AD318D7A26254192431E175F.mft (raw, json) Hash identifier: ynkehiGxpvyF8eyNiPGa7WGm9Bj5IzwHGWbMZjbvg6A= Subject key identifier: 2D:A1:77:2D:14:CC:86:E5:44:A6:D5:E3:95:4E:0B:BF:5C:7B:58:29 Authority key identifier: 08:A9:4F:D7:F0:E8:A2:87:AD:31:8D:7A:26:25:41:92:43:1E:17:5F Certificate issuer: /CN=08A94FD7F0E8A287AD318D7A26254192431E175F Certificate serial: 66504D9FF4383997CB24CC6A0B749F73BD951130 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/08A94FD7F0E8A287AD318D7A26254192431E175F.cer Subject info access: rsync://repo-rpki.idnic.net/repo/42083d44-7835-443d-853a-0a79cf00e950/0/08A94FD7F0E8A287AD318D7A26254192431E175F.mft Manifest number: 01DC Signing time: Sat 18 Oct 2025 09:30:38 +0000 Manifest this update: Sat 18 Oct 2025 09:25:38 +0000 Manifest next update: Tue 21 Oct 2025 16:33:38 +0000 Files and hashes: 1: 08A94FD7F0E8A287AD318D7A26254192431E175F.crl (hash: zt75QU+wOTMA8/SawjiSHqTLe9Aak6Rp7QlJuk4Weq4=) 2: 3130332e34332e32342e302f32342d3234203d3e20313339343139.roa (hash: n37UknBhv1+9WuSxzltTO8fZT8WF7d4rSmL/iPmFdNo=) 3: 3130332e34332e32352e302f32342d3234203d3e20313431353931.roa (hash: wqJtSQHwbnqm8jiqozWh9r8aZJIccaguRYiH+0smDl0=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/42083d44-7835-443d-853a-0a79cf00e950/0/08A94FD7F0E8A287AD318D7A26254192431E175F.crl rsync://repo-rpki.idnic.net/repo/42083d44-7835-443d-853a-0a79cf00e950/0/08A94FD7F0E8A287AD318D7A26254192431E175F.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/08A94FD7F0E8A287AD318D7A26254192431E175F.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 21 Oct 2025 16:33:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 66:50:4d:9f:f4:38:39:97:cb:24:cc:6a:0b:74:9f:73:bd:95:11:30 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=08A94FD7F0E8A287AD318D7A26254192431E175F Validity Not Before: Oct 18 09:25:38 2025 GMT Not After : Oct 21 16:33:38 2025 GMT Subject: CN=2DA1772D14CC86E544A6D5E3954E0BBF5C7B5829 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:56:65:a5:ed:99:8c:ee:93:14:d8:05:9e:44: 27:5b:18:71:16:5d:f6:2f:40:03:22:c6:1e:90:14: 04:44:13:8f:bf:6e:c0:f7:69:53:84:03:f9:a5:94: 1f:21:fb:82:ca:f6:09:b6:74:6f:18:45:8a:d2:e0: 02:bc:23:5d:44:a6:c6:31:88:ef:90:85:3f:f2:11: 2f:c5:79:c8:0b:3c:b1:4d:5a:e1:8c:af:f8:3e:ba: fe:ca:3c:3b:ff:4d:07:18:87:74:cd:dd:a1:bb:a7: 22:2e:56:b5:b0:ed:48:44:df:c3:07:c0:3f:56:eb: 7e:fc:40:d8:12:07:f7:fe:dc:a2:74:4e:03:a5:eb: 59:b3:c2:c4:34:ef:84:f5:fa:7a:8c:91:ad:30:a8: 1e:15:42:b2:92:39:5d:90:a4:9f:cf:c6:36:ba:32: 68:c6:68:c4:cf:12:44:a2:2d:65:7d:1b:09:d6:c5: 97:72:34:fc:68:75:9e:ae:97:fe:3d:d9:51:93:52: 72:20:65:64:3a:b4:79:1a:30:fd:e1:4a:4f:c4:f6: 1c:97:9b:70:96:68:b0:ad:82:d9:ea:d6:e1:c8:5f: a3:51:d4:3f:47:d2:12:22:67:db:20:d3:50:31:23: 6f:b1:66:3a:e9:b7:81:35:49:94:22:fd:9a:0b:c3: c6:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:A1:77:2D:14:CC:86:E5:44:A6:D5:E3:95:4E:0B:BF:5C:7B:58:29 X509v3 Authority Key Identifier: keyid:08:A9:4F:D7:F0:E8:A2:87:AD:31:8D:7A:26:25:41:92:43:1E:17:5F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/42083d44-7835-443d-853a-0a79cf00e950/0/08A94FD7F0E8A287AD318D7A26254192431E175F.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/08A94FD7F0E8A287AD318D7A26254192431E175F.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/42083d44-7835-443d-853a-0a79cf00e950/0/08A94FD7F0E8A287AD318D7A26254192431E175F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ae:f9:75:a3:9e:d2:b1:30:65:fb:e4:ff:b5:f3:f3:6f:36:a8: e1:cc:7f:42:28:ff:22:fd:18:67:09:a1:29:67:33:f7:ed:02: 58:b4:bd:97:ab:17:0a:09:55:49:37:dc:10:46:05:44:e7:4a: ef:78:29:db:22:a9:14:e5:43:bc:61:19:e0:52:ca:9d:ed:1b: 1a:2c:11:4d:5d:ee:8c:3d:7a:e2:8a:fb:4d:33:66:7c:52:3e: 1b:66:19:08:a9:0a:84:96:a2:6e:3b:f3:d2:5c:4d:04:5a:8c: 08:33:e6:74:1e:f7:55:05:b0:6f:05:2b:d0:f2:52:4a:3a:2c: c1:00:aa:bb:d5:23:f4:cf:81:a2:e6:ce:10:c1:f6:c6:c0:b6: 84:94:9b:59:55:b4:69:2c:9d:a8:3d:cc:8f:66:76:7f:7b:9c: 93:8e:5f:9a:c1:d6:37:b2:40:81:2e:31:10:ad:84:e8:37:ec: 39:4c:f1:e0:c8:49:6c:84:35:d8:75:62:83:f3:bc:c1:99:14: 56:aa:eb:3d:6d:16:16:b0:a0:af:bd:69:28:ea:7b:0c:e3:3a: 05:1e:92:86:8d:b4:a8:1f:d1:cd:99:e4:74:5a:26:0c:90:ad: 71:57:91:b7:7e:9a:87:e4:d0:76:d7:43:dc:f0:a3:42:dd:7e: c4:82:07:74 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUZlBNn/Q4OZfLJMxqC3Sfc72VETAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDhBOTRGRDdGMEU4QTI4N0FEMzE4RDdBMjYyNTQxOTI0 MzFFMTc1RjAeFw0yNTEwMTgwOTI1MzhaFw0yNTEwMjExNjMzMzhaMDMxMTAvBgNV BAMTKDJEQTE3NzJEMTRDQzg2RTU0NEE2RDVFMzk1NEUwQkJGNUM3QjU4MjkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/VmWl7ZmM7pMU2AWeRCdbGHEW XfYvQAMixh6QFAREE4+/bsD3aVOEA/mllB8h+4LK9gm2dG8YRYrS4AK8I11EpsYx iO+QhT/yES/FecgLPLFNWuGMr/g+uv7KPDv/TQcYh3TN3aG7pyIuVrWw7UhE38MH wD9W6378QNgSB/f+3KJ0TgOl61mzwsQ074T1+nqMka0wqB4VQrKSOV2QpJ/Pxja6 MmjGaMTPEkSiLWV9GwnWxZdyNPxodZ6ul/492VGTUnIgZWQ6tHkaMP3hSk/E9hyX m3CWaLCtgtnq1uHIX6NR1D9H0hIiZ9sg01AxI2+xZjrpt4E1SZQi/ZoLw8YbAgMB AAGjggI8MIICODAdBgNVHQ4EFgQULaF3LRTMhuVEptXjlU4Lv1x7WCkwHwYDVR0j BBgwFoAUCKlP1/DoooetMY16JiVBkkMeF18wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 MjA4M2Q0NC03ODM1LTQ0M2QtODUzYS0wYTc5Y2YwMGU5NTAvMC8wOEE5NEZEN0Yw RThBMjg3QUQzMThEN0EyNjI1NDE5MjQzMUUxNzVGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMDhBOTRGRDdGMEU4QTI4N0FEMzE4RDdBMjYyNTQxOTI0MzFF MTc1Ri5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNDIwODNkNDQtNzgzNS00NDNkLTg1 M2EtMGE3OWNmMDBlOTUwLzAvMDhBOTRGRDdGMEU4QTI4N0FEMzE4RDdBMjYyNTQx OTI0MzFFMTc1Ri5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAK75daOe0rEwZfvk/7Xz8282qOHMf0Io/yL9 GGcJoSlnM/ftAli0vZerFwoJVUk33BBGBUTnSu94KdsiqRTlQ7xhGeBSyp3tGxos EU1d7ow9euKK+00zZnxSPhtmGQipCoSWom4789JcTQRajAgz5nQe91UFsG8FK9Dy Uko6LMEAqrvVI/TPgaLmzhDB9sbAtoSUm1lVtGksnag9zI9mdn97nJOOX5rB1jey QIEuMRCthOg37DlM8eDISWyENdh1YoPzvMGZFFaq6z1tFhawoK+9aSjqewzjOgUe koaNtKgf0c2Z5HRaJgyQrXFXkbd+mofk0HbXQ9zwo0LdfsSCB3Q= -----END CERTIFICATE-----Generated at Mon Oct 20 12:16:52 2025 by rpki-client