$ rpki-client -vvf repo-rpki.idnic.net/repo/8a66f350-e642-402f-8ac3-6aef7e11aac3/0/9852ABB8508DE551F1723BC9AC5EC39B35056AE2.mft File: 9852ABB8508DE551F1723BC9AC5EC39B35056AE2.mft (raw, json) Hash identifier: TeLRewSiXRVmS6x2a0o5NHz/V9GryvQW1S9Q7Qq2EgQ= Subject key identifier: 88:DF:8B:B5:FC:B1:4D:91:25:98:2A:DF:45:B6:6B:1D:83:92:C6:0D Authority key identifier: 98:52:AB:B8:50:8D:E5:51:F1:72:3B:C9:AC:5E:C3:9B:35:05:6A:E2 Certificate issuer: /CN=9852ABB8508DE551F1723BC9AC5EC39B35056AE2 Certificate serial: 44F3AB219B38BDCB748540ED5D23569EA73365F6 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9852ABB8508DE551F1723BC9AC5EC39B35056AE2.cer Subject info access: rsync://repo-rpki.idnic.net/repo/8a66f350-e642-402f-8ac3-6aef7e11aac3/0/9852ABB8508DE551F1723BC9AC5EC39B35056AE2.mft Manifest number: 051B Signing time: Mon 20 Oct 2025 05:51:56 +0000 Manifest this update: Mon 20 Oct 2025 05:46:56 +0000 Manifest next update: Thu 23 Oct 2025 15:26:56 +0000 Files and hashes: 1: 3130332e3131302e3138342e302f32332d3234203d3e20313337333734.roa (hash: t6DqUPB7zlmhbQqkH/Czn9ueyAzHtFeCOGR6aaj9LSw=) 2: 9852ABB8508DE551F1723BC9AC5EC39B35056AE2.crl (hash: 72f5E67jdzKv20mRhyIRvyo07VYLdJHq9SWHjmh/Iu0=) 3: 323030313a6466343a366430303a3a2f34382d3438203d3e20313337333734.roa (hash: 415EQue+5BmAk6tXc9Eh3zzXOH8qdWNQfAsbBNLYlC0=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/8a66f350-e642-402f-8ac3-6aef7e11aac3/0/9852ABB8508DE551F1723BC9AC5EC39B35056AE2.crl rsync://repo-rpki.idnic.net/repo/8a66f350-e642-402f-8ac3-6aef7e11aac3/0/9852ABB8508DE551F1723BC9AC5EC39B35056AE2.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9852ABB8508DE551F1723BC9AC5EC39B35056AE2.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 Oct 2025 11:48:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 44:f3:ab:21:9b:38:bd:cb:74:85:40:ed:5d:23:56:9e:a7:33:65:f6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9852ABB8508DE551F1723BC9AC5EC39B35056AE2 Validity Not Before: Oct 20 05:46:56 2025 GMT Not After : Oct 23 15:26:56 2025 GMT Subject: CN=88DF8BB5FCB14D9125982ADF45B66B1D8392C60D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:04:dd:c3:ef:88:69:34:96:7c:96:e4:cf:9c: 4a:66:6f:ed:52:44:46:e0:79:5f:29:0d:26:f1:e3: 0c:25:36:63:8a:90:04:06:6c:1f:cc:fc:88:57:78: f7:d0:60:43:b5:aa:8f:b6:95:bb:c9:e9:88:2f:dc: a0:bd:0d:1a:d5:d8:4f:27:c5:09:a6:c4:05:b9:6b: e9:8f:d1:97:19:97:c4:74:43:47:75:5c:04:2b:26: 46:b8:fb:aa:1c:bd:17:41:b4:73:57:a0:a9:68:9f: 61:23:33:18:60:d2:2f:79:24:6e:0a:4c:c8:0a:48: e2:5c:33:7f:09:1a:86:76:4b:16:74:2c:9c:a0:80: dc:dc:2d:0c:62:7d:5a:a2:0e:a9:ff:c3:a5:e1:f9: fd:15:ac:15:9f:42:ef:11:d3:df:62:91:08:dc:a3: d9:ae:68:c7:7b:df:41:2d:10:ee:43:8d:e8:18:79: 30:11:c5:50:ce:28:00:dc:a6:88:c6:7b:d8:4f:8a: 0d:1f:6e:b4:5e:d2:19:dc:f6:01:49:94:00:aa:76: 44:f8:02:14:2f:1e:13:4a:a2:b8:2b:e3:35:cd:8d: cc:c9:62:50:43:65:e8:0b:5f:e4:54:3e:43:c2:ab: 52:bb:1d:37:84:c9:a7:5a:ee:34:3f:97:f8:a3:54: ca:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:DF:8B:B5:FC:B1:4D:91:25:98:2A:DF:45:B6:6B:1D:83:92:C6:0D X509v3 Authority Key Identifier: keyid:98:52:AB:B8:50:8D:E5:51:F1:72:3B:C9:AC:5E:C3:9B:35:05:6A:E2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/8a66f350-e642-402f-8ac3-6aef7e11aac3/0/9852ABB8508DE551F1723BC9AC5EC39B35056AE2.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9852ABB8508DE551F1723BC9AC5EC39B35056AE2.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/8a66f350-e642-402f-8ac3-6aef7e11aac3/0/9852ABB8508DE551F1723BC9AC5EC39B35056AE2.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c9:71:52:00:ec:7c:a0:3e:79:02:f3:01:4b:88:04:c3:e1:7f: 36:ac:db:1f:e6:a7:e8:b3:88:f6:69:a8:45:e8:43:fc:92:30: 99:06:e3:ce:ec:5a:bc:a9:56:ca:bb:95:59:fb:e6:41:2e:f7: 57:32:bf:21:f7:2a:13:ce:9c:c2:d9:ec:08:c2:65:3d:cf:f8: ab:91:56:e9:bd:0b:d2:a6:7d:c0:d2:e7:88:c4:6a:38:8c:fa: e9:76:67:fc:96:36:91:5f:77:36:8f:31:c3:c0:fb:eb:5d:00: 19:a9:7c:3f:bd:65:dc:ff:57:a0:02:95:32:75:9c:78:96:3d: 88:43:09:ec:9b:89:d4:3e:54:70:b0:8a:73:20:05:2c:4c:9e: ab:95:77:38:e4:91:86:3e:c0:84:57:ab:14:28:25:82:0d:63: d7:9b:06:a1:5c:d8:c8:c0:65:b7:e1:0b:0e:68:30:a9:c9:20: 7b:09:1f:8e:81:d6:4b:4b:dc:db:07:bf:d7:3d:39:20:b9:96: 5d:79:25:06:1f:d6:87:67:1d:c5:8a:8d:73:80:41:b4:a8:30: 19:d2:ff:db:b1:bb:07:86:68:cc:e3:4b:57:a9:9e:62:c6:a2: 88:a6:1d:77:e3:dd:b4:b1:0c:be:01:49:ac:53:88:e8:af:40: 7a:25:57:04 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIURPOrIZs4vct0hUDtXSNWnqczZfYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTg1MkFCQjg1MDhERTU1MUYxNzIzQkM5QUM1RUMzOUIz NTA1NkFFMjAeFw0yNTEwMjAwNTQ2NTZaFw0yNTEwMjMxNTI2NTZaMDMxMTAvBgNV BAMTKDg4REY4QkI1RkNCMTREOTEyNTk4MkFERjQ1QjY2QjFEODM5MkM2MEQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDCBN3D74hpNJZ8luTPnEpmb+1S REbgeV8pDSbx4wwlNmOKkAQGbB/M/IhXePfQYEO1qo+2lbvJ6Ygv3KC9DRrV2E8n xQmmxAW5a+mP0ZcZl8R0Q0d1XAQrJka4+6ocvRdBtHNXoKlon2EjMxhg0i95JG4K TMgKSOJcM38JGoZ2SxZ0LJyggNzcLQxifVqiDqn/w6Xh+f0VrBWfQu8R099ikQjc o9muaMd730EtEO5DjegYeTARxVDOKADcpojGe9hPig0fbrRe0hnc9gFJlACqdkT4 AhQvHhNKorgr4zXNjczJYlBDZegLX+RUPkPCq1K7HTeEyada7jQ/l/ijVMqTAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUiN+LtfyxTZElmCrfRbZrHYOSxg0wHwYDVR0j BBgwFoAUmFKruFCN5VHxcjvJrF7DmzUFauIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 YTY2ZjM1MC1lNjQyLTQwMmYtOGFjMy02YWVmN2UxMWFhYzMvMC85ODUyQUJCODUw OERFNTUxRjE3MjNCQzlBQzVFQzM5QjM1MDU2QUUyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOTg1MkFCQjg1MDhERTU1MUYxNzIzQkM5QUM1RUMzOUIzNTA1 NkFFMi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOGE2NmYzNTAtZTY0Mi00MDJmLThh YzMtNmFlZjdlMTFhYWMzLzAvOTg1MkFCQjg1MDhERTU1MUYxNzIzQkM5QUM1RUMz OUIzNTA1NkFFMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAMlxUgDsfKA+eQLzAUuIBMPhfzas2x/mp+iz iPZpqEXoQ/ySMJkG487sWrypVsq7lVn75kEu91cyvyH3KhPOnMLZ7AjCZT3P+KuR Vum9C9KmfcDS54jEajiM+ul2Z/yWNpFfdzaPMcPA++tdABmpfD+9Zdz/V6AClTJ1 nHiWPYhDCeybidQ+VHCwinMgBSxMnquVdzjkkYY+wIRXqxQoJYINY9ebBqFc2MjA ZbfhCw5oMKnJIHsJH46B1ktL3NsHv9c9OSC5ll15JQYf1odnHcWKjXOAQbSoMBnS /9uxuweGaMzjS1epnmLGooimHXfj3bSxDL4BSaxTiOivQHolVwQ= -----END CERTIFICATE-----Generated at Mon Oct 20 13:54:19 2025 by rpki-client