$ rpki-client -vvf repo-rpki.idnic.net/repo/71403409-bf04-42e9-9567-b06ec823d901/0/8910B51FCAA7F54124A76AF839CE19F4055A1061.mft File: 8910B51FCAA7F54124A76AF839CE19F4055A1061.mft (raw, json) Hash identifier: KS5iym7Mgzulhrojyp9PZ0imiYNDO2izDbn0qCT2iD0= Subject key identifier: DA:21:BA:ED:ED:FE:2A:88:4D:75:CB:8A:28:A4:C9:0C:68:62:8D:DE Authority key identifier: 89:10:B5:1F:CA:A7:F5:41:24:A7:6A:F8:39:CE:19:F4:05:5A:10:61 Certificate issuer: /CN=8910B51FCAA7F54124A76AF839CE19F4055A1061 Certificate serial: 2E4BA47D15C3B1B7CC6406E5A1768D746F1FD58D Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/8910B51FCAA7F54124A76AF839CE19F4055A1061.cer Subject info access: rsync://repo-rpki.idnic.net/repo/71403409-bf04-42e9-9567-b06ec823d901/0/8910B51FCAA7F54124A76AF839CE19F4055A1061.mft Manifest number: D7 Signing time: Sun 19 Oct 2025 06:31:41 +0000 Manifest this update: Sun 19 Oct 2025 06:26:41 +0000 Manifest next update: Wed 22 Oct 2025 13:35:41 +0000 Files and hashes: 1: 3136302e31392e31372e302f32342d3234203d3e20313532303733.roa (hash: z0YgoG/ujpHrwuWoXrEZAv8nwDL/OBeAUxVX0QCVaBM=) 2: 3136302e31392e31362e302f32342d3234203d3e20313532303733.roa (hash: BD9874huussdd9AhnhjODm64dILqVkWxIW7wjOoaAMQ=) 3: 8910B51FCAA7F54124A76AF839CE19F4055A1061.crl (hash: MTOFqHtC2hX08gf9FXCSyuai/fiYfuomexgNJgyMG8g=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/71403409-bf04-42e9-9567-b06ec823d901/0/8910B51FCAA7F54124A76AF839CE19F4055A1061.crl rsync://repo-rpki.idnic.net/repo/71403409-bf04-42e9-9567-b06ec823d901/0/8910B51FCAA7F54124A76AF839CE19F4055A1061.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/8910B51FCAA7F54124A76AF839CE19F4055A1061.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 Oct 2025 13:35:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2e:4b:a4:7d:15:c3:b1:b7:cc:64:06:e5:a1:76:8d:74:6f:1f:d5:8d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8910B51FCAA7F54124A76AF839CE19F4055A1061 Validity Not Before: Oct 19 06:26:41 2025 GMT Not After : Oct 22 13:35:41 2025 GMT Subject: CN=DA21BAEDEDFE2A884D75CB8A28A4C90C68628DDE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:29:9d:26:59:e2:ba:2d:4f:5a:96:b6:27:cb: 0c:9e:40:bd:94:5f:d5:1f:e7:d0:d9:95:d7:35:57: be:5d:c4:b9:4e:c8:c1:5f:6c:67:dd:4d:4f:be:c8: c3:56:0d:10:51:94:44:5b:60:25:f6:a2:6b:d0:b5: 2d:c1:9e:4b:98:4d:05:4e:0e:2d:ee:cc:18:c0:35: 2f:5b:12:6d:69:31:63:fc:29:72:df:ed:a8:54:a2: ca:de:00:98:e0:cc:dd:ed:db:4c:2f:e5:58:5d:bb: c9:86:a6:51:d0:c7:10:bd:37:4b:92:35:a9:f9:42: 8c:2f:a5:77:eb:60:ba:85:64:7f:d3:e8:dc:4e:79: 09:6c:0c:db:f6:aa:60:d2:48:ba:aa:25:cd:7e:d6: ef:20:2b:2a:e3:d9:88:51:a5:8a:6a:90:9f:a2:14: 23:db:09:95:18:bf:e7:3e:d3:8c:23:eb:03:28:3b: 2b:ae:e9:77:10:8b:51:e5:81:9f:6b:48:34:10:3c: 71:14:05:f0:08:13:f2:20:6e:5b:45:c6:d1:06:b5: 16:69:6d:a5:01:ed:f5:27:df:3f:07:b6:51:58:14: a5:b9:75:23:34:6c:3d:d2:97:5b:78:c1:6e:1f:31: 93:5c:66:af:73:4c:d1:de:83:01:72:f2:c0:c7:83: 03:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DA:21:BA:ED:ED:FE:2A:88:4D:75:CB:8A:28:A4:C9:0C:68:62:8D:DE X509v3 Authority Key Identifier: keyid:89:10:B5:1F:CA:A7:F5:41:24:A7:6A:F8:39:CE:19:F4:05:5A:10:61 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/71403409-bf04-42e9-9567-b06ec823d901/0/8910B51FCAA7F54124A76AF839CE19F4055A1061.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/8910B51FCAA7F54124A76AF839CE19F4055A1061.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/71403409-bf04-42e9-9567-b06ec823d901/0/8910B51FCAA7F54124A76AF839CE19F4055A1061.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 22:48:2a:71:53:57:36:b2:c3:85:b4:ab:77:5a:93:80:7b:72: 62:d0:66:12:8e:ac:9d:d8:a7:fe:33:c9:af:ac:c8:5e:b4:52: bb:20:a7:58:7c:62:48:5a:5a:4d:5c:93:77:7c:79:e3:26:1d: a2:a8:71:9a:05:17:5e:20:6a:1b:75:44:cf:cc:c8:f3:ec:2b: 40:23:1d:4e:bd:12:68:0b:d5:a2:53:18:f6:01:b5:7c:ef:05: 9f:21:a5:f5:00:0e:ca:59:51:ec:bd:63:f5:5f:ab:2a:0e:24: 94:c8:5d:1f:4b:b8:76:73:52:a1:f9:df:cc:74:49:fe:4b:c9: 50:0d:1b:bc:00:78:d4:19:cf:7c:00:34:2c:82:61:c2:38:89: da:95:be:ac:11:21:18:e3:9c:f7:6b:10:c3:f7:4c:a0:4f:63: 5e:5e:f0:74:64:fd:60:e4:05:2c:72:bf:d7:e4:ae:76:f0:c4: 38:76:6d:1f:54:97:9e:9c:7b:ab:02:9f:f2:3a:b8:a5:09:ba: 86:d9:7c:dd:ec:a4:0c:3a:ad:20:d1:b2:73:fc:de:4e:0d:0c: 8c:2f:b1:4e:42:6d:9d:c5:40:91:19:86:28:35:c5:6c:9f:8e: 8b:39:27:a6:cf:98:1f:dd:29:a5:d2:1a:e9:a2:dd:ae:0d:9f: e1:d9:5c:d0 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIULkukfRXDsbfMZAbloXaNdG8f1Y0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODkxMEI1MUZDQUE3RjU0MTI0QTc2QUY4MzlDRTE5RjQw NTVBMTA2MTAeFw0yNTEwMTkwNjI2NDFaFw0yNTEwMjIxMzM1NDFaMDMxMTAvBgNV BAMTKERBMjFCQUVERURGRTJBODg0RDc1Q0I4QTI4QTRDOTBDNjg2MjhEREUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/KZ0mWeK6LU9alrYnywyeQL2U X9Uf59DZldc1V75dxLlOyMFfbGfdTU++yMNWDRBRlERbYCX2omvQtS3BnkuYTQVO Di3uzBjANS9bEm1pMWP8KXLf7ahUosreAJjgzN3t20wv5Vhdu8mGplHQxxC9N0uS Nan5QowvpXfrYLqFZH/T6NxOeQlsDNv2qmDSSLqqJc1+1u8gKyrj2YhRpYpqkJ+i FCPbCZUYv+c+04wj6wMoOyuu6XcQi1HlgZ9rSDQQPHEUBfAIE/IgbltFxtEGtRZp baUB7fUn3z8HtlFYFKW5dSM0bD3Sl1t4wW4fMZNcZq9zTNHegwFy8sDHgwNXAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU2iG67e3+KohNdcuKKKTJDGhijd4wHwYDVR0j BBgwFoAUiRC1H8qn9UEkp2r4Oc4Z9AVaEGEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 MTQwMzQwOS1iZjA0LTQyZTktOTU2Ny1iMDZlYzgyM2Q5MDEvMC84OTEwQjUxRkNB QTdGNTQxMjRBNzZBRjgzOUNFMTlGNDA1NUExMDYxLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvODkxMEI1MUZDQUE3RjU0MTI0QTc2QUY4MzlDRTE5RjQwNTVB MTA2MS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNzE0MDM0MDktYmYwNC00MmU5LTk1 NjctYjA2ZWM4MjNkOTAxLzAvODkxMEI1MUZDQUE3RjU0MTI0QTc2QUY4MzlDRTE5 RjQwNTVBMTA2MS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACJIKnFTVzayw4W0q3dak4B7cmLQZhKOrJ3Y p/4zya+syF60Ursgp1h8YkhaWk1ck3d8eeMmHaKocZoFF14gaht1RM/MyPPsK0Aj HU69EmgL1aJTGPYBtXzvBZ8hpfUADspZUey9Y/VfqyoOJJTIXR9LuHZzUqH538x0 Sf5LyVANG7wAeNQZz3wANCyCYcI4idqVvqwRIRjjnPdrEMP3TKBPY15e8HRk/WDk BSxyv9fkrnbwxDh2bR9Ul56ce6sCn/I6uKUJuobZfN3spAw6rSDRsnP83k4NDIwv sU5CbZ3FQJEZhig1xWyfjos5J6bPmB/dKaXSGumi3a4Nn+HZXNA= -----END CERTIFICATE-----Generated at Mon Oct 20 11:14:38 2025 by rpki-client