$ rpki-client -vvf repo-rpki.idnic.net/repo/5f86b12e-e574-426b-aa6b-4939e3b030ba/0/08773191FBFC21A3C8615A3E36A2ACB187F63C25.mft File: 08773191FBFC21A3C8615A3E36A2ACB187F63C25.mft (raw, json) Hash identifier: Et6NTIe1iX/BRnZB0j+2YY/bBmG1DdgKgHhWqmeqyNo= Subject key identifier: D9:58:8D:57:6D:37:DC:70:BD:B8:AC:EF:97:20:55:28:F5:29:65:DA Authority key identifier: 08:77:31:91:FB:FC:21:A3:C8:61:5A:3E:36:A2:AC:B1:87:F6:3C:25 Certificate issuer: /CN=08773191FBFC21A3C8615A3E36A2ACB187F63C25 Certificate serial: 1A8A96C063C3DA076767466BCDB0AFF701C18DA1 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/08773191FBFC21A3C8615A3E36A2ACB187F63C25.cer Subject info access: rsync://repo-rpki.idnic.net/repo/5f86b12e-e574-426b-aa6b-4939e3b030ba/0/08773191FBFC21A3C8615A3E36A2ACB187F63C25.mft Manifest number: 052B Signing time: Sun 19 Oct 2025 07:31:36 +0000 Manifest this update: Sun 19 Oct 2025 07:26:36 +0000 Manifest next update: Wed 22 Oct 2025 10:52:36 +0000 Files and hashes: 1: 3130332e3130322e31322e302f32342d3234203d3e20313336383635.roa (hash: 3P9Pl6Hs5uriFWxnAGmotMmA1+l8H3Rlr0SXz2N0yKQ=) 2: 3130332e3130322e31322e302f32332d3233203d3e20313336383635.roa (hash: VX2tVKkS7LzPxrLmOsssh+r2zJ3zeiGSJ2bMTYWz5Q8=) 3: 323430313a646234303a3a2f33322d3332203d3e20313336383635.roa (hash: KGUF32Kc9eR09Ep+PLSsXC9//4a1BdJ7Q2PE9xYrp/A=) 4: 3130332e3130322e31342e302f32342d3234203d3e20313336383635.roa (hash: xpIpnLctgV8IvR/95nZhbbNFRCrOenQ8KDE2o6OGJuo=) 5: 3130332e3130322e31332e302f32342d3234203d3e20313336383635.roa (hash: w8KhQhAE9qtOeUsIYiL4lko66TpmJ+xch/XP9e9vq2Y=) 6: 3130332e3130322e31352e302f32342d3234203d3e20313337333331.roa (hash: MQx/O8O2uQJVqHYOSxfo/Q2KG9J3bcLTiM4IdvIIF+I=) 7: 08773191FBFC21A3C8615A3E36A2ACB187F63C25.crl (hash: xmGypRaBlrBrZj6qcuS5IkxMjEp5Dfk8sIfgbkcSJfk=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/5f86b12e-e574-426b-aa6b-4939e3b030ba/0/08773191FBFC21A3C8615A3E36A2ACB187F63C25.crl rsync://repo-rpki.idnic.net/repo/5f86b12e-e574-426b-aa6b-4939e3b030ba/0/08773191FBFC21A3C8615A3E36A2ACB187F63C25.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/08773191FBFC21A3C8615A3E36A2ACB187F63C25.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 Oct 2025 10:52:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1a:8a:96:c0:63:c3:da:07:67:67:46:6b:cd:b0:af:f7:01:c1:8d:a1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=08773191FBFC21A3C8615A3E36A2ACB187F63C25 Validity Not Before: Oct 19 07:26:36 2025 GMT Not After : Oct 22 10:52:36 2025 GMT Subject: CN=D9588D576D37DC70BDB8ACEF97205528F52965DA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ed:4b:de:ee:76:d2:e7:d7:d4:90:b0:70:71:fa: 9c:95:0a:7d:0a:b4:ff:69:8d:1c:b9:99:d0:c9:65: ec:b3:83:a3:a3:c2:b5:bf:97:f4:10:b6:36:62:be: bd:b7:08:ef:4d:96:3b:2e:21:1a:8b:14:a5:d5:0b: 6b:d1:c4:71:aa:66:18:6e:d4:5c:5d:d8:58:2c:94: 85:b6:08:54:bb:0d:ee:32:61:ee:10:7e:d0:d1:a3: 9c:5b:e1:f5:ff:08:4a:c3:a2:ac:ae:57:c3:84:99: 9b:20:e5:ae:94:66:83:0f:ce:d9:b1:1c:b2:ef:6e: bb:a2:17:90:9e:77:39:d1:16:bc:59:77:c2:77:0b: 05:8e:98:ab:4b:b7:20:db:9d:b7:c8:5b:7a:01:b8: 40:40:ee:8e:6f:44:0a:02:85:8d:27:d6:98:26:14: 06:26:15:81:c9:09:35:18:0c:25:1d:2e:29:be:68: 6f:d2:0d:ec:d4:88:73:9a:71:ac:c9:88:2a:b6:02: f1:2a:ce:9a:99:ad:c3:b9:81:0d:a9:dd:db:fa:7d: 9a:7e:02:0c:10:ce:33:c2:1e:9b:48:5f:68:af:cf: e4:a5:01:1b:1e:44:09:69:b9:da:87:9c:e3:b4:08: 2d:7c:32:b2:df:b5:3a:cf:f9:32:1a:77:e7:94:77: a0:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:58:8D:57:6D:37:DC:70:BD:B8:AC:EF:97:20:55:28:F5:29:65:DA X509v3 Authority Key Identifier: keyid:08:77:31:91:FB:FC:21:A3:C8:61:5A:3E:36:A2:AC:B1:87:F6:3C:25 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/5f86b12e-e574-426b-aa6b-4939e3b030ba/0/08773191FBFC21A3C8615A3E36A2ACB187F63C25.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/08773191FBFC21A3C8615A3E36A2ACB187F63C25.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/5f86b12e-e574-426b-aa6b-4939e3b030ba/0/08773191FBFC21A3C8615A3E36A2ACB187F63C25.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2b:36:a0:69:82:f4:c5:47:d1:77:17:f5:85:5f:98:5f:bb:ef: 2d:7e:83:3b:e8:78:67:24:84:2e:1f:db:20:f9:93:8b:9a:8d: 5e:12:74:12:d9:b9:0e:81:84:72:ba:39:95:78:4c:05:12:e7: bb:8f:85:0d:d1:08:17:b2:dd:dd:91:7f:46:fd:93:09:9b:66: 28:96:69:df:27:47:05:6f:de:f7:d0:8a:c4:87:05:77:89:52: 6e:e8:a4:cc:68:81:c5:83:82:dd:46:d4:3a:ed:ce:dc:b1:c6: 6b:65:8b:9a:93:b1:88:56:13:01:eb:d5:9a:07:62:0b:8d:05: d4:48:9f:85:3e:af:5b:4f:52:d1:b0:15:7e:ea:61:17:6a:25: e8:43:bc:97:c8:71:85:c2:ea:0a:7e:59:cc:bb:cb:10:64:ec: f8:08:4b:f5:d7:67:66:16:6f:81:6c:60:c2:f7:28:ef:42:b9: 04:e0:aa:5a:7b:08:ff:0f:ef:13:34:d1:a8:9b:2d:b4:79:1d: 95:e4:81:8f:64:78:09:29:6c:5f:94:e2:02:24:29:0f:65:45: 1c:d2:19:de:41:ec:60:52:0d:fd:11:49:04:4e:06:0d:e1:f2: 71:da:9a:5e:b9:1f:39:b5:37:e4:41:b2:0b:22:08:64:25:96: d8:ab:55:8d -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUGoqWwGPD2gdnZ0ZrzbCv9wHBjaEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDg3NzMxOTFGQkZDMjFBM0M4NjE1QTNFMzZBMkFDQjE4 N0Y2M0MyNTAeFw0yNTEwMTkwNzI2MzZaFw0yNTEwMjIxMDUyMzZaMDMxMTAvBgNV BAMTKEQ5NTg4RDU3NkQzN0RDNzBCREI4QUNFRjk3MjA1NTI4RjUyOTY1REEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDtS97udtLn19SQsHBx+pyVCn0K tP9pjRy5mdDJZeyzg6OjwrW/l/QQtjZivr23CO9NljsuIRqLFKXVC2vRxHGqZhhu 1Fxd2FgslIW2CFS7De4yYe4QftDRo5xb4fX/CErDoqyuV8OEmZsg5a6UZoMPztmx HLLvbruiF5CedznRFrxZd8J3CwWOmKtLtyDbnbfIW3oBuEBA7o5vRAoChY0n1pgm FAYmFYHJCTUYDCUdLim+aG/SDezUiHOacazJiCq2AvEqzpqZrcO5gQ2p3dv6fZp+ AgwQzjPCHptIX2ivz+SlARseRAlpudqHnOO0CC18MrLftTrP+TIad+eUd6BxAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU2ViNV2033HC9uKzvlyBVKPUpZdowHwYDVR0j BBgwFoAUCHcxkfv8IaPIYVo+NqKssYf2PCUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 Zjg2YjEyZS1lNTc0LTQyNmItYWE2Yi00OTM5ZTNiMDMwYmEvMC8wODc3MzE5MUZC RkMyMUEzQzg2MTVBM0UzNkEyQUNCMTg3RjYzQzI1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMDg3NzMxOTFGQkZDMjFBM0M4NjE1QTNFMzZBMkFDQjE4N0Y2 M0MyNS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNWY4NmIxMmUtZTU3NC00MjZiLWFh NmItNDkzOWUzYjAzMGJhLzAvMDg3NzMxOTFGQkZDMjFBM0M4NjE1QTNFMzZBMkFD QjE4N0Y2M0MyNS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACs2oGmC9MVH0XcX9YVfmF+77y1+gzvoeGck hC4f2yD5k4uajV4SdBLZuQ6BhHK6OZV4TAUS57uPhQ3RCBey3d2Rf0b9kwmbZiiW ad8nRwVv3vfQisSHBXeJUm7opMxogcWDgt1G1Drtztyxxmtli5qTsYhWEwHr1ZoH YguNBdRIn4U+r1tPUtGwFX7qYRdqJehDvJfIcYXC6gp+Wcy7yxBk7PgIS/XXZ2YW b4FsYML3KO9CuQTgqlp7CP8P7xM00aibLbR5HZXkgY9keAkpbF+U4gIkKQ9lRRzS Gd5B7GBSDf0RSQROBg3h8nHaml65Hzm1N+RBsgsiCGQlltirVY0= -----END CERTIFICATE-----Generated at Mon Oct 20 23:31:43 2025 by rpki-client