$ rpki-client -vvf repo-rpki.idnic.net/repo/8f582f2b-8625-4f38-b26e-42fbd3c21cf0/0/A950C0F5B830659E499444729038D5D2047859FB.mft File: A950C0F5B830659E499444729038D5D2047859FB.mft (raw, json) Hash identifier: lXTVeJu+c38dFDJkQEol9gSl5YhHqXeCD/ShwKUU/V0= Subject key identifier: 6E:E2:08:4B:6E:3E:3D:C7:06:C8:FE:5F:82:97:1D:5E:5E:30:D8:B4 Authority key identifier: A9:50:C0:F5:B8:30:65:9E:49:94:44:72:90:38:D5:D2:04:78:59:FB Certificate issuer: /CN=A950C0F5B830659E499444729038D5D2047859FB Certificate serial: 34919B0F8BB40C9B18B58FF120C9EBFF055512DB Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/A950C0F5B830659E499444729038D5D2047859FB.cer Subject info access: rsync://repo-rpki.idnic.net/repo/8f582f2b-8625-4f38-b26e-42fbd3c21cf0/0/A950C0F5B830659E499444729038D5D2047859FB.mft Manifest number: DF Signing time: Mon 20 Oct 2025 21:42:24 +0000 Manifest this update: Mon 20 Oct 2025 21:37:24 +0000 Manifest next update: Fri 24 Oct 2025 07:41:24 +0000 Files and hashes: 1: A950C0F5B830659E499444729038D5D2047859FB.crl (hash: teDv69eXasNOHJ7n6eqZWODDissjR5KpZljIsFnfFIw=) 2: 3136302e32322e33372e302f32342d3234203d3e20313532373933.roa (hash: p0Gix7kk0dJdR+0SrzqwZk1UXDcM7trhKt9LXa5iNvk=) 3: 3136302e32322e33362e302f32342d3234203d3e20313532373933.roa (hash: qpEenk6wx4J1PVfOlTpwDMHCKC14Zk2TeAHNO3MKSc4=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/8f582f2b-8625-4f38-b26e-42fbd3c21cf0/0/A950C0F5B830659E499444729038D5D2047859FB.crl rsync://repo-rpki.idnic.net/repo/8f582f2b-8625-4f38-b26e-42fbd3c21cf0/0/A950C0F5B830659E499444729038D5D2047859FB.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/A950C0F5B830659E499444729038D5D2047859FB.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 Oct 2025 03:04:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 34:91:9b:0f:8b:b4:0c:9b:18:b5:8f:f1:20:c9:eb:ff:05:55:12:db Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A950C0F5B830659E499444729038D5D2047859FB Validity Not Before: Oct 20 21:37:24 2025 GMT Not After : Oct 24 07:41:24 2025 GMT Subject: CN=6EE2084B6E3E3DC706C8FE5F82971D5E5E30D8B4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:6f:c7:ce:46:3c:64:fd:b0:3e:e1:a9:ae:c0: 1c:08:d1:17:f4:61:82:60:f2:c4:7d:6f:9d:19:ee: 8b:a0:c2:7f:01:00:ef:e4:45:ad:45:df:64:7c:f1: a2:73:4f:1e:3d:33:fd:7d:4a:40:cc:12:61:8f:ba: e2:06:87:9b:2c:0b:f8:f6:8f:a3:7c:a9:3c:b6:ee: 07:76:a6:83:c6:a4:f6:aa:7a:fc:bd:dd:1f:4e:f8: 4c:d5:e2:22:f6:60:29:af:59:ad:54:33:b8:66:bf: 89:02:10:6c:49:fc:d8:a6:3a:ed:f5:8c:d5:b3:d6: 1a:4c:be:67:01:47:18:1b:4c:52:8e:c2:bc:46:d5: a3:48:c2:69:26:e6:47:5b:cd:bb:b0:6a:c2:0b:78: 76:72:21:c0:06:2b:5c:d9:28:97:3c:11:19:72:27: a0:11:50:13:ce:f3:fc:f3:e0:5b:a3:4b:a9:7e:70: 12:9b:8d:d1:b8:62:92:5f:1e:3f:4d:58:57:f9:a4: 4f:91:72:f6:c1:6c:57:ac:41:b1:5e:f2:36:47:88: 9b:ca:06:d4:e9:2f:c1:bd:45:ce:0a:37:9b:da:28: 71:96:37:84:77:00:94:f3:45:85:ac:98:eb:31:e4: c8:d8:b6:5d:55:77:2c:83:a9:39:64:05:81:ff:6c: e6:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6E:E2:08:4B:6E:3E:3D:C7:06:C8:FE:5F:82:97:1D:5E:5E:30:D8:B4 X509v3 Authority Key Identifier: keyid:A9:50:C0:F5:B8:30:65:9E:49:94:44:72:90:38:D5:D2:04:78:59:FB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/8f582f2b-8625-4f38-b26e-42fbd3c21cf0/0/A950C0F5B830659E499444729038D5D2047859FB.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/A950C0F5B830659E499444729038D5D2047859FB.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/8f582f2b-8625-4f38-b26e-42fbd3c21cf0/0/A950C0F5B830659E499444729038D5D2047859FB.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption bb:3d:7e:1f:9f:96:b0:af:ed:61:66:0c:60:53:cc:d4:d2:f1: 5d:96:fe:9b:73:d4:93:4f:4a:27:e3:55:e4:a0:2e:b6:82:f9: 33:ef:86:68:b5:16:45:18:bf:b2:b4:12:24:39:70:d3:a1:ce: 0d:9c:c0:28:a5:e9:26:54:4c:05:71:a2:5f:5f:b7:56:97:9b: c6:27:35:f4:07:51:cf:16:0d:a5:9d:bd:9b:bf:27:07:ea:9f: 59:b0:c2:f3:a7:c9:ec:42:af:3d:cf:24:4d:75:1b:16:f9:00: 13:fd:dd:8a:ce:17:7d:c4:30:bf:8c:69:aa:4e:cd:94:e1:fd: 83:2b:b4:58:8e:e1:68:e1:ce:fd:ad:bd:f2:68:d7:6c:b2:80: b4:b1:52:f6:69:65:42:1b:32:df:27:bb:8d:d9:7c:02:fb:c0: a7:17:34:e7:b6:3c:66:50:01:ac:60:18:11:c8:aa:6e:7a:a3: 4a:9d:34:00:c1:25:21:c9:6c:a9:5b:99:7a:b6:3d:1e:7d:08: 8d:06:94:fa:70:63:99:f5:f7:5b:a9:86:ae:e4:88:52:73:5a: ef:c7:25:de:48:6b:f9:37:e2:8f:3d:9e:c4:5d:3b:8a:48:1e: 7f:bf:c8:26:89:3b:64:30:59:7c:7b:b5:7f:10:4b:87:29:e8: 26:bf:fc:3a -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUNJGbD4u0DJsYtY/xIMnr/wVVEtswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTk1MEMwRjVCODMwNjU5RTQ5OTQ0NDcyOTAzOEQ1RDIw NDc4NTlGQjAeFw0yNTEwMjAyMTM3MjRaFw0yNTEwMjQwNzQxMjRaMDMxMTAvBgNV BAMTKDZFRTIwODRCNkUzRTNEQzcwNkM4RkU1RjgyOTcxRDVFNUUzMEQ4QjQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC1b8fORjxk/bA+4amuwBwI0Rf0 YYJg8sR9b50Z7ougwn8BAO/kRa1F32R88aJzTx49M/19SkDMEmGPuuIGh5ssC/j2 j6N8qTy27gd2poPGpPaqevy93R9O+EzV4iL2YCmvWa1UM7hmv4kCEGxJ/NimOu31 jNWz1hpMvmcBRxgbTFKOwrxG1aNIwmkm5kdbzbuwasILeHZyIcAGK1zZKJc8ERly J6ARUBPO8/zz4FujS6l+cBKbjdG4YpJfHj9NWFf5pE+RcvbBbFesQbFe8jZHiJvK BtTpL8G9Rc4KN5vaKHGWN4R3AJTzRYWsmOsx5MjYtl1VdyyDqTlkBYH/bOYZAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUbuIIS24+PccGyP5fgpcdXl4w2LQwHwYDVR0j BBgwFoAUqVDA9bgwZZ5JlERykDjV0gR4WfswDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 ZjU4MmYyYi04NjI1LTRmMzgtYjI2ZS00MmZiZDNjMjFjZjAvMC9BOTUwQzBGNUI4 MzA2NTlFNDk5NDQ0NzI5MDM4RDVEMjA0Nzg1OUZCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvQTk1MEMwRjVCODMwNjU5RTQ5OTQ0NDcyOTAzOEQ1RDIwNDc4 NTlGQi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOGY1ODJmMmItODYyNS00ZjM4LWIy NmUtNDJmYmQzYzIxY2YwLzAvQTk1MEMwRjVCODMwNjU5RTQ5OTQ0NDcyOTAzOEQ1 RDIwNDc4NTlGQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALs9fh+flrCv7WFmDGBTzNTS8V2W/ptz1JNP SifjVeSgLraC+TPvhmi1FkUYv7K0EiQ5cNOhzg2cwCil6SZUTAVxol9ft1aXm8Yn NfQHUc8WDaWdvZu/Jwfqn1mwwvOnyexCrz3PJE11Gxb5ABP93YrOF33EML+MaapO zZTh/YMrtFiO4Wjhzv2tvfJo12yygLSxUvZpZUIbMt8nu43ZfAL7wKcXNOe2PGZQ AaxgGBHIqm56o0qdNADBJSHJbKlbmXq2PR59CI0GlPpwY5n191uphq7kiFJzWu/H Jd5Ia/k34o89nsRdO4pIHn+/yCaJO2QwWXx7tX8QS4cp6Ca//Do= -----END CERTIFICATE-----Generated at Tue Oct 21 00:12:55 2025 by rpki-client