$ rpki-client -vvf repo-rpki.idnic.net/repo/89b8604f-395a-42be-b997-e80fc1df90f9/0/0D05EF7BA71D640B784F72C7D8F0F4DCD285029E.mft File: 0D05EF7BA71D640B784F72C7D8F0F4DCD285029E.mft (raw, json) Hash identifier: tGQy5ycqDJ99eTaoL/OR9ilHfXhwfu8Gh+tT5w49ozM= Subject key identifier: 5F:90:40:21:1C:5E:37:29:75:29:FC:3C:60:DB:6B:AD:9F:40:22:40 Authority key identifier: 0D:05:EF:7B:A7:1D:64:0B:78:4F:72:C7:D8:F0:F4:DC:D2:85:02:9E Certificate issuer: /CN=0D05EF7BA71D640B784F72C7D8F0F4DCD285029E Certificate serial: 55DD9FD7CCECBE602D7DE582E71943DD717BAACD Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0D05EF7BA71D640B784F72C7D8F0F4DCD285029E.cer Subject info access: rsync://repo-rpki.idnic.net/repo/89b8604f-395a-42be-b997-e80fc1df90f9/0/0D05EF7BA71D640B784F72C7D8F0F4DCD285029E.mft Manifest number: 02B2 Signing time: Sun 19 Oct 2025 13:00:46 +0000 Manifest this update: Sun 19 Oct 2025 12:55:46 +0000 Manifest next update: Wed 22 Oct 2025 17:41:46 +0000 Files and hashes: 1: 3130332e3137372e39322e302f32342d3234203d3e20313437313435.roa (hash: CqE5ZCzeVRm7AAgS0qiGljnG3wqud2DW58oPqVZ6WJg=) 2: 0D05EF7BA71D640B784F72C7D8F0F4DCD285029E.crl (hash: ptababisN6Z7zcbeKnp+QCAMziscXiQ1LIcQviWMQb0=) 3: 3130332e3137372e39332e302f32342d3234203d3e20313437313435.roa (hash: v7MhMAJXwywfKNpvZVGmK8aNTXn4lXBf1MXFy8E2vnM=) 4: 3130332e3137372e39322e302f32332d3233203d3e20313437313435.roa (hash: WfXT/rfuqOQCtkSuVOvx3HMgMVWsirCiP4VcVNJi+gw=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/89b8604f-395a-42be-b997-e80fc1df90f9/0/0D05EF7BA71D640B784F72C7D8F0F4DCD285029E.crl rsync://repo-rpki.idnic.net/repo/89b8604f-395a-42be-b997-e80fc1df90f9/0/0D05EF7BA71D640B784F72C7D8F0F4DCD285029E.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0D05EF7BA71D640B784F72C7D8F0F4DCD285029E.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 Oct 2025 17:41:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 55:dd:9f:d7:cc:ec:be:60:2d:7d:e5:82:e7:19:43:dd:71:7b:aa:cd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0D05EF7BA71D640B784F72C7D8F0F4DCD285029E Validity Not Before: Oct 19 12:55:46 2025 GMT Not After : Oct 22 17:41:46 2025 GMT Subject: CN=5F9040211C5E37297529FC3C60DB6BAD9F402240 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:97:e7:49:ef:19:95:44:d4:56:2a:26:60:d0: 70:2f:77:17:e0:99:38:33:9c:a3:a2:7d:e1:b7:04: 31:32:74:c0:0b:05:18:1f:d3:06:3d:df:94:d8:11: 80:fc:f0:9e:b5:c3:34:0b:86:10:f7:a3:df:9f:3e: b5:b5:ed:58:fc:22:a5:e4:af:fb:b0:f1:3d:24:00: c2:68:ad:58:b9:c1:a8:8a:c5:b3:25:59:82:c1:98: 47:20:52:36:60:74:87:41:ab:d9:8d:50:f5:74:3c: 72:2a:39:b2:eb:f4:28:82:7d:38:5b:4f:bb:44:4e: 87:72:5d:58:3f:7c:74:63:17:ac:65:d1:b3:df:9d: e0:55:6e:7f:ef:b2:21:8e:79:fd:5d:a4:51:af:b3: e7:5b:d5:ed:bf:28:00:34:f1:53:24:6d:7e:21:b3: 7f:78:c6:3d:c0:ff:34:56:3a:c6:e9:03:dc:4d:9c: e1:ed:fb:8f:b2:88:cd:ac:5e:2f:db:85:c0:d9:8f: 3a:26:35:85:89:aa:a3:a8:9f:9c:e1:a9:05:52:b7: 90:0e:c5:a7:12:33:a3:00:18:4b:fc:8e:a0:91:e3: 96:ee:58:a1:29:e2:90:c2:0d:16:ed:ef:ed:11:44: da:1f:b4:f0:6d:8a:a3:0c:a7:63:83:74:81:28:65: 4b:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5F:90:40:21:1C:5E:37:29:75:29:FC:3C:60:DB:6B:AD:9F:40:22:40 X509v3 Authority Key Identifier: keyid:0D:05:EF:7B:A7:1D:64:0B:78:4F:72:C7:D8:F0:F4:DC:D2:85:02:9E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/89b8604f-395a-42be-b997-e80fc1df90f9/0/0D05EF7BA71D640B784F72C7D8F0F4DCD285029E.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0D05EF7BA71D640B784F72C7D8F0F4DCD285029E.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/89b8604f-395a-42be-b997-e80fc1df90f9/0/0D05EF7BA71D640B784F72C7D8F0F4DCD285029E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 26:98:d5:3c:33:5b:7b:97:76:d8:de:a2:d0:bd:6b:e0:1f:09: 7c:37:38:d3:14:bb:0d:0f:34:68:af:3d:19:96:1e:f7:4c:86: f5:8e:fb:38:03:ed:93:c2:2d:ea:0e:78:27:82:8c:2c:29:36: 1b:d2:35:b8:1c:9b:0d:89:b1:82:72:14:7c:3e:7d:a1:31:69: e3:93:e2:ea:6f:23:dc:20:05:cf:f9:da:47:1e:5f:b0:e7:69: 14:75:33:b2:cb:41:de:ad:6c:df:ae:b9:b3:03:67:21:de:9d: f0:36:4a:5a:e3:dc:e6:86:fa:49:9e:4e:5a:99:c8:f8:c8:95: 8b:d4:c2:1a:bb:eb:89:4f:fe:67:a6:43:64:0c:49:49:2b:57: be:82:24:30:fb:2d:47:10:ad:46:76:96:0a:17:e7:42:7b:7f: 3d:cb:40:52:43:9b:f7:33:24:26:a6:a7:a8:9b:6f:45:40:73: a2:27:06:1a:78:ef:7f:d6:44:be:3b:d2:69:5b:4f:71:55:2b: de:b4:18:58:b6:06:2a:67:9d:12:0b:73:53:2e:86:94:e5:3d: 9b:bb:5f:51:14:1e:d7:1b:ae:f3:c8:91:19:26:46:3a:b4:7a: 47:a1:f2:83:ec:aa:7c:28:e3:e2:6e:4c:82:5a:89:79:0e:9c: 11:ef:2d:45 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUVd2f18zsvmAtfeWC5xlD3XF7qs0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMEQwNUVGN0JBNzFENjQwQjc4NEY3MkM3RDhGMEY0RENE Mjg1MDI5RTAeFw0yNTEwMTkxMjU1NDZaFw0yNTEwMjIxNzQxNDZaMDMxMTAvBgNV BAMTKDVGOTA0MDIxMUM1RTM3Mjk3NTI5RkMzQzYwREI2QkFEOUY0MDIyNDAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCUl+dJ7xmVRNRWKiZg0HAvdxfg mTgznKOifeG3BDEydMALBRgf0wY935TYEYD88J61wzQLhhD3o9+fPrW17Vj8IqXk r/uw8T0kAMJorVi5waiKxbMlWYLBmEcgUjZgdIdBq9mNUPV0PHIqObLr9CiCfThb T7tETodyXVg/fHRjF6xl0bPfneBVbn/vsiGOef1dpFGvs+db1e2/KAA08VMkbX4h s394xj3A/zRWOsbpA9xNnOHt+4+yiM2sXi/bhcDZjzomNYWJqqOon5zhqQVSt5AO xacSM6MAGEv8jqCR45buWKEp4pDCDRbt7+0RRNoftPBtiqMMp2ODdIEoZUtdAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUX5BAIRxeNyl1Kfw8YNtrrZ9AIkAwHwYDVR0j BBgwFoAUDQXve6cdZAt4T3LH2PD03NKFAp4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 OWI4NjA0Zi0zOTVhLTQyYmUtYjk5Ny1lODBmYzFkZjkwZjkvMC8wRDA1RUY3QkE3 MUQ2NDBCNzg0RjcyQzdEOEYwRjREQ0QyODUwMjlFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMEQwNUVGN0JBNzFENjQwQjc4NEY3MkM3RDhGMEY0RENEMjg1 MDI5RS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vODliODYwNGYtMzk1YS00MmJlLWI5 OTctZTgwZmMxZGY5MGY5LzAvMEQwNUVGN0JBNzFENjQwQjc4NEY3MkM3RDhGMEY0 RENEMjg1MDI5RS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACaY1TwzW3uXdtjeotC9a+AfCXw3ONMUuw0P NGivPRmWHvdMhvWO+zgD7ZPCLeoOeCeCjCwpNhvSNbgcmw2JsYJyFHw+faExaeOT 4upvI9wgBc/52kceX7DnaRR1M7LLQd6tbN+uubMDZyHenfA2Slrj3OaG+kmeTlqZ yPjIlYvUwhq764lP/memQ2QMSUkrV76CJDD7LUcQrUZ2lgoX50J7fz3LQFJDm/cz JCamp6ibb0VAc6InBhp473/WRL470mlbT3FVK960GFi2BipnnRILc1MuhpTlPZu7 X1EUHtcbrvPIkRkmRjq0ekeh8oPsqnwo4+JuTIJaiXkOnBHvLUU= -----END CERTIFICATE-----Generated at Mon Oct 20 12:11:07 2025 by rpki-client