$ rpki-client -vvf repo-rpki.idnic.net/repo/91e0d17c-edd1-4202-b736-3b527efa6ba2/0/708351A7D650085780AA7D6B77F317953F16F999.mft File: 708351A7D650085780AA7D6B77F317953F16F999.mft (raw, json) Hash identifier: 4ViAhNOC1KSvoDYV13QZVCAUq2u6SR8GO96T7VSbOnY= Subject key identifier: 36:87:6F:82:95:E9:11:CD:C8:E9:DE:B7:24:B5:08:04:44:18:5F:45 Authority key identifier: 70:83:51:A7:D6:50:08:57:80:AA:7D:6B:77:F3:17:95:3F:16:F9:99 Certificate issuer: /CN=708351A7D650085780AA7D6B77F317953F16F999 Certificate serial: 7955BC258B247EE6DEAFB85FD738A995DBE8971E Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/708351A7D650085780AA7D6B77F317953F16F999.cer Subject info access: rsync://repo-rpki.idnic.net/repo/91e0d17c-edd1-4202-b736-3b527efa6ba2/0/708351A7D650085780AA7D6B77F317953F16F999.mft Manifest number: 01A8 Signing time: Sun 19 Oct 2025 12:00:44 +0000 Manifest this update: Sun 19 Oct 2025 11:55:44 +0000 Manifest next update: Wed 22 Oct 2025 22:58:44 +0000 Files and hashes: 1: 3130332e3139362e3135362e302f32342d3234203d3e20313530393531.roa (hash: 0UTf1+BQXj8Ras4zkWL/wgGnY3awXAg7yXF2OUkmNfo=) 2: 708351A7D650085780AA7D6B77F317953F16F999.crl (hash: bojPnVbAafYz1T8jk0kyG6GDTsguo7WRnJV60tkaZ9Y=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/91e0d17c-edd1-4202-b736-3b527efa6ba2/0/708351A7D650085780AA7D6B77F317953F16F999.crl rsync://repo-rpki.idnic.net/repo/91e0d17c-edd1-4202-b736-3b527efa6ba2/0/708351A7D650085780AA7D6B77F317953F16F999.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/708351A7D650085780AA7D6B77F317953F16F999.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 Oct 2025 22:58:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 79:55:bc:25:8b:24:7e:e6:de:af:b8:5f:d7:38:a9:95:db:e8:97:1e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=708351A7D650085780AA7D6B77F317953F16F999 Validity Not Before: Oct 19 11:55:44 2025 GMT Not After : Oct 22 22:58:44 2025 GMT Subject: CN=36876F8295E911CDC8E9DEB724B5080444185F45 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:62:eb:9e:48:80:32:b7:ce:38:1d:78:79:97: cc:ae:76:c9:41:92:9d:78:20:b1:e7:89:88:a0:ca: ab:db:c6:77:12:a8:bf:74:0d:8f:b8:4b:28:4f:dc: e9:63:ae:37:b4:0c:99:d3:94:69:03:a3:72:a3:46: bc:2e:80:2d:57:e7:d1:b4:48:64:7b:a5:42:03:42: 25:31:d9:9e:21:51:38:a0:f9:24:8d:9b:c1:31:ea: 5c:c5:e9:ff:4c:51:95:02:a9:f7:8b:71:3e:09:e2: e0:34:27:32:19:da:04:c7:44:94:68:cf:02:ce:60: a9:dc:bb:c3:7f:76:55:2b:13:fe:c2:0c:cd:a8:b8: b4:1b:bf:a6:69:11:99:7d:77:c6:eb:1c:29:6c:b2: 8e:97:95:bf:98:cb:52:c3:7c:a6:fe:07:00:4d:5f: 9d:f2:46:ce:03:ee:d5:86:67:97:c5:5e:61:71:c3: ca:6b:7b:59:84:41:ab:0d:3d:20:9a:3e:fb:ac:fe: f2:94:74:77:d4:1e:e6:02:59:85:28:c1:82:f6:c2: a8:cc:7c:6c:d4:4f:ce:a0:20:c0:fe:85:52:2a:2e: 1a:78:86:33:40:f2:96:c6:34:8b:93:bf:ad:75:8a: 1f:7f:49:a2:03:73:b2:a0:6d:81:df:9b:0a:98:b0: 90:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 36:87:6F:82:95:E9:11:CD:C8:E9:DE:B7:24:B5:08:04:44:18:5F:45 X509v3 Authority Key Identifier: keyid:70:83:51:A7:D6:50:08:57:80:AA:7D:6B:77:F3:17:95:3F:16:F9:99 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/91e0d17c-edd1-4202-b736-3b527efa6ba2/0/708351A7D650085780AA7D6B77F317953F16F999.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/708351A7D650085780AA7D6B77F317953F16F999.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/91e0d17c-edd1-4202-b736-3b527efa6ba2/0/708351A7D650085780AA7D6B77F317953F16F999.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 82:33:4b:df:10:90:52:2a:ed:9e:d2:4e:53:56:7d:e3:98:ed: 80:a9:76:c6:a6:48:fc:06:56:fa:b2:7d:eb:9d:58:43:bb:9b: f1:5a:9e:2e:fc:8f:36:7a:bb:44:96:aa:fd:0a:cb:24:f5:53: 21:e3:35:3c:62:f7:7d:cd:0e:58:c0:1e:dd:ba:c8:11:16:48: db:45:e9:37:db:f9:e6:03:fb:52:50:fb:61:18:f7:58:d4:c3: 80:45:fd:01:22:54:6e:08:6f:63:ad:6b:2d:83:c6:62:94:24: 02:25:12:0a:4f:8c:7c:63:8c:ff:8a:8d:5a:49:f8:f0:cf:e7: 61:be:15:6d:39:17:95:49:8a:9d:5a:55:2e:22:ca:29:04:4b: 82:e0:0f:74:96:8e:3e:da:7e:a5:5d:51:74:70:dc:e9:33:96: 4a:43:f4:2b:7d:0e:6a:02:7c:1d:60:13:77:ef:99:f3:4b:66: 4c:f6:d2:43:75:07:28:a2:44:60:e1:bd:b9:fc:e7:6d:71:29: 84:f1:34:04:f2:9d:a9:f3:c4:32:59:84:92:7b:59:f7:8f:0e: 19:45:a9:55:a0:af:4e:b0:71:ad:51:f2:68:c2:04:e3:e1:60: 47:56:44:9a:d8:bb:c5:b9:64:7a:91:80:ce:ca:86:56:24:2c: 32:73:57:3c -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUeVW8JYskfuber7hf1zipldvolx4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzA4MzUxQTdENjUwMDg1NzgwQUE3RDZCNzdGMzE3OTUz RjE2Rjk5OTAeFw0yNTEwMTkxMTU1NDRaFw0yNTEwMjIyMjU4NDRaMDMxMTAvBgNV BAMTKDM2ODc2RjgyOTVFOTExQ0RDOEU5REVCNzI0QjUwODA0NDQxODVGNDUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDIYuueSIAyt844HXh5l8yudslB kp14ILHniYigyqvbxncSqL90DY+4SyhP3Oljrje0DJnTlGkDo3KjRrwugC1X59G0 SGR7pUIDQiUx2Z4hUTig+SSNm8Ex6lzF6f9MUZUCqfeLcT4J4uA0JzIZ2gTHRJRo zwLOYKncu8N/dlUrE/7CDM2ouLQbv6ZpEZl9d8brHClsso6Xlb+Yy1LDfKb+BwBN X53yRs4D7tWGZ5fFXmFxw8pre1mEQasNPSCaPvus/vKUdHfUHuYCWYUowYL2wqjM fGzUT86gIMD+hVIqLhp4hjNA8pbGNIuTv611ih9/SaIDc7KgbYHfmwqYsJATAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUNodvgpXpEc3I6d63JLUIBEQYX0UwHwYDVR0j BBgwFoAUcINRp9ZQCFeAqn1rd/MXlT8W+ZkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 MWUwZDE3Yy1lZGQxLTQyMDItYjczNi0zYjUyN2VmYTZiYTIvMC83MDgzNTFBN0Q2 NTAwODU3ODBBQTdENkI3N0YzMTc5NTNGMTZGOTk5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNzA4MzUxQTdENjUwMDg1NzgwQUE3RDZCNzdGMzE3OTUzRjE2 Rjk5OS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOTFlMGQxN2MtZWRkMS00MjAyLWI3 MzYtM2I1MjdlZmE2YmEyLzAvNzA4MzUxQTdENjUwMDg1NzgwQUE3RDZCNzdGMzE3 OTUzRjE2Rjk5OS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIIzS98QkFIq7Z7STlNWfeOY7YCpdsamSPwG VvqyfeudWEO7m/Fani78jzZ6u0SWqv0KyyT1UyHjNTxi933NDljAHt26yBEWSNtF 6Tfb+eYD+1JQ+2EY91jUw4BF/QEiVG4Ib2Otay2DxmKUJAIlEgpPjHxjjP+KjVpJ +PDP52G+FW05F5VJip1aVS4iyikES4LgD3SWjj7afqVdUXRw3OkzlkpD9Ct9DmoC fB1gE3fvmfNLZkz20kN1ByiiRGDhvbn8521xKYTxNATynanzxDJZhJJ7WfePDhlF qVWgr06wca1R8mjCBOPhYEdWRJrYu8W5ZHqRgM7KhlYkLDJzVzw= -----END CERTIFICATE-----Generated at Mon Oct 20 12:03:07 2025 by rpki-client