$ rpki-client -vvf repo-rpki.idnic.net/repo/98035b12-6ca3-4fd2-b9b3-260d573e57c2/0/0A874A4CB5F8A46DF4501B63FA5487F42800F93E.mft File: 0A874A4CB5F8A46DF4501B63FA5487F42800F93E.mft (raw, json) Hash identifier: 3RdU0xgGolXMQM3W59JbzOkRpH3IoxbRMAPxWAw/j+4= Subject key identifier: 68:A4:49:39:74:C6:93:6C:79:65:D6:E0:A9:A5:77:56:89:46:EC:5D Authority key identifier: 0A:87:4A:4C:B5:F8:A4:6D:F4:50:1B:63:FA:54:87:F4:28:00:F9:3E Certificate issuer: /CN=0A874A4CB5F8A46DF4501B63FA5487F42800F93E Certificate serial: 4AC4EC42E9B2C55E5F973CC4BACDF05114835AA1 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0A874A4CB5F8A46DF4501B63FA5487F42800F93E.cer Subject info access: rsync://repo-rpki.idnic.net/repo/98035b12-6ca3-4fd2-b9b3-260d573e57c2/0/0A874A4CB5F8A46DF4501B63FA5487F42800F93E.mft Manifest number: 0284 Signing time: Sat 18 Oct 2025 05:21:27 +0000 Manifest this update: Sat 18 Oct 2025 05:16:27 +0000 Manifest next update: Tue 21 Oct 2025 13:16:27 +0000 Files and hashes: 1: 3130332e3137372e3235352e302f32342d3234203d3e20313439333238.roa (hash: ew6FBh5cPjMaDtq6eoOfJ8yer7wJ+Y8LRfEbpfeqcdU=) 2: 0A874A4CB5F8A46DF4501B63FA5487F42800F93E.crl (hash: HpoOtIdpTIlWKSA7oQnVDq2MEoPU9rPIszo0kG0KfMU=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/98035b12-6ca3-4fd2-b9b3-260d573e57c2/0/0A874A4CB5F8A46DF4501B63FA5487F42800F93E.crl rsync://repo-rpki.idnic.net/repo/98035b12-6ca3-4fd2-b9b3-260d573e57c2/0/0A874A4CB5F8A46DF4501B63FA5487F42800F93E.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0A874A4CB5F8A46DF4501B63FA5487F42800F93E.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 21 Oct 2025 13:16:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4a:c4:ec:42:e9:b2:c5:5e:5f:97:3c:c4:ba:cd:f0:51:14:83:5a:a1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0A874A4CB5F8A46DF4501B63FA5487F42800F93E Validity Not Before: Oct 18 05:16:27 2025 GMT Not After : Oct 21 13:16:27 2025 GMT Subject: CN=68A4493974C6936C7965D6E0A9A577568946EC5D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:55:4c:72:58:5f:5e:27:ec:0c:56:1c:0f:f7: 58:0d:e2:5b:d9:a5:23:8c:84:15:85:ac:51:61:f5: de:93:f8:57:8b:0a:73:2d:f3:5b:cf:b0:24:7b:bb: 8a:9c:07:12:86:9f:2c:b7:95:a7:a8:46:11:3c:14: 57:33:f7:24:60:9c:15:fd:ff:46:e2:ab:c2:4e:e1: 1f:2d:fb:5b:5b:d6:93:c8:37:38:d3:66:8b:cd:7d: d2:e6:52:fb:b8:81:9c:0c:56:d4:69:c0:52:73:91: 93:5f:09:c7:8b:8e:21:aa:e4:b7:5c:0b:ee:cb:63: c3:0f:73:0e:d8:d1:a6:04:42:d4:b9:2a:d2:68:02: 75:76:53:b2:c8:13:32:3f:f2:66:44:97:53:75:93: 3d:a9:4c:5b:72:16:ef:e5:ac:1b:ce:37:0c:70:b8: 8d:88:1b:c7:7f:32:82:fa:8f:8b:c1:8f:a4:c1:74: e0:68:7a:6d:4e:67:90:38:3a:5a:12:76:fc:6d:d4: fc:b3:ae:08:31:00:b8:07:2c:73:f1:2c:b7:0d:ae: 36:4f:3a:dc:d2:85:fd:25:3d:fc:d5:4e:f8:50:b7: 50:fd:c6:87:61:8c:f4:c2:7d:9f:9b:08:27:87:04: 2e:ad:a7:4e:51:c0:91:ee:9e:d0:c2:07:1e:bc:c0: 60:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:A4:49:39:74:C6:93:6C:79:65:D6:E0:A9:A5:77:56:89:46:EC:5D X509v3 Authority Key Identifier: keyid:0A:87:4A:4C:B5:F8:A4:6D:F4:50:1B:63:FA:54:87:F4:28:00:F9:3E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/98035b12-6ca3-4fd2-b9b3-260d573e57c2/0/0A874A4CB5F8A46DF4501B63FA5487F42800F93E.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0A874A4CB5F8A46DF4501B63FA5487F42800F93E.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/98035b12-6ca3-4fd2-b9b3-260d573e57c2/0/0A874A4CB5F8A46DF4501B63FA5487F42800F93E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 60:a7:4f:99:88:78:8f:05:47:61:6c:5b:53:77:47:a2:58:52: ca:4c:66:a6:92:75:6f:3a:c3:33:0e:e8:e9:f6:2a:f1:4e:46: 47:10:90:4a:3a:23:f4:af:a8:4b:6b:a1:45:a7:f3:07:78:9d: 11:28:48:3c:82:ed:91:42:c2:bb:fa:8b:b7:05:63:da:61:ca: ac:a8:37:1a:1a:17:c2:21:c2:70:20:03:b7:1d:c5:db:cd:ce: dd:59:92:c4:79:39:20:88:8f:6d:7a:64:f6:3c:fc:2f:5a:11: 0c:97:fa:05:6a:e3:25:94:bd:5c:dc:a2:fc:05:7a:a3:34:9f: de:6e:ed:02:cc:09:8f:b0:f2:ed:25:e1:ca:93:ad:29:e6:1e: 9f:a5:84:49:b2:38:87:03:84:21:77:8b:c2:3c:4d:de:66:78: a0:ef:01:46:dd:65:41:07:3a:6d:b6:67:e0:da:e2:ac:c4:55: 7e:f8:f2:b5:dc:c1:f0:a4:2f:60:af:72:a8:ef:b6:f0:45:f5: 03:34:3d:7e:b4:ab:37:b0:39:2a:ea:dc:2a:d5:0e:22:22:30: bf:f3:ff:82:9a:b1:7d:f6:67:a5:1c:ec:51:ac:48:81:f7:79: 50:b3:17:ea:c8:5e:dc:42:9b:87:1b:eb:90:d5:1b:ae:87:49: 50:66:71:5e -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUSsTsQumyxV5flzzEus3wURSDWqEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMEE4NzRBNENCNUY4QTQ2REY0NTAxQjYzRkE1NDg3RjQy ODAwRjkzRTAeFw0yNTEwMTgwNTE2MjdaFw0yNTEwMjExMzE2MjdaMDMxMTAvBgNV BAMTKDY4QTQ0OTM5NzRDNjkzNkM3OTY1RDZFMEE5QTU3NzU2ODk0NkVDNUQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCSVUxyWF9eJ+wMVhwP91gN4lvZ pSOMhBWFrFFh9d6T+FeLCnMt81vPsCR7u4qcBxKGnyy3laeoRhE8FFcz9yRgnBX9 /0biq8JO4R8t+1tb1pPINzjTZovNfdLmUvu4gZwMVtRpwFJzkZNfCceLjiGq5Ldc C+7LY8MPcw7Y0aYEQtS5KtJoAnV2U7LIEzI/8mZEl1N1kz2pTFtyFu/lrBvONwxw uI2IG8d/MoL6j4vBj6TBdOBoem1OZ5A4OloSdvxt1PyzrggxALgHLHPxLLcNrjZP OtzShf0lPfzVTvhQt1D9xodhjPTCfZ+bCCeHBC6tp05RwJHuntDCBx68wGDfAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUaKRJOXTGk2x5ZdbgqaV3VolG7F0wHwYDVR0j BBgwFoAUCodKTLX4pG30UBtj+lSH9CgA+T4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 ODAzNWIxMi02Y2EzLTRmZDItYjliMy0yNjBkNTczZTU3YzIvMC8wQTg3NEE0Q0I1 RjhBNDZERjQ1MDFCNjNGQTU0ODdGNDI4MDBGOTNFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMEE4NzRBNENCNUY4QTQ2REY0NTAxQjYzRkE1NDg3RjQyODAw RjkzRS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOTgwMzViMTItNmNhMy00ZmQyLWI5 YjMtMjYwZDU3M2U1N2MyLzAvMEE4NzRBNENCNUY4QTQ2REY0NTAxQjYzRkE1NDg3 RjQyODAwRjkzRS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGCnT5mIeI8FR2FsW1N3R6JYUspMZqaSdW86 wzMO6On2KvFORkcQkEo6I/SvqEtroUWn8wd4nREoSDyC7ZFCwrv6i7cFY9phyqyo NxoaF8IhwnAgA7cdxdvNzt1ZksR5OSCIj216ZPY8/C9aEQyX+gVq4yWUvVzcovwF eqM0n95u7QLMCY+w8u0l4cqTrSnmHp+lhEmyOIcDhCF3i8I8Td5meKDvAUbdZUEH Om22Z+Da4qzEVX748rXcwfCkL2CvcqjvtvBF9QM0PX60qzewOSrq3CrVDiIiML/z /4KasX32Z6Uc7FGsSIH3eVCzF+rIXtxCm4cb65DVG66HSVBmcV4= -----END CERTIFICATE-----Generated at Mon Oct 20 11:04:51 2025 by rpki-client