$ rpki-client -vvf repo-rpki.idnic.net/repo/9bcc62ae-20c8-4974-aae9-b108df8e2f59/0/0A8C0BB45F8412F7F2DC2F442F5FCEB792A2DBFF.mft File: 0A8C0BB45F8412F7F2DC2F442F5FCEB792A2DBFF.mft (raw, json) Hash identifier: I4EWmHQpn65mgWGJ0F4TnyoW2MjaLDOkdMpRP2/jcrY= Subject key identifier: 1B:C2:B0:C8:4E:DA:E9:08:4E:02:6E:4F:AC:8A:E2:B0:53:07:02:82 Authority key identifier: 0A:8C:0B:B4:5F:84:12:F7:F2:DC:2F:44:2F:5F:CE:B7:92:A2:DB:FF Certificate issuer: /CN=0A8C0BB45F8412F7F2DC2F442F5FCEB792A2DBFF Certificate serial: 18CAB4ED3D5AA981236A05CB925B9F1859811063 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/0A8C0BB45F8412F7F2DC2F442F5FCEB792A2DBFF.cer Subject info access: rsync://repo-rpki.idnic.net/repo/9bcc62ae-20c8-4974-aae9-b108df8e2f59/0/0A8C0BB45F8412F7F2DC2F442F5FCEB792A2DBFF.mft Manifest number: 15 Signing time: Sun 19 Oct 2025 20:11:04 +0000 Manifest this update: Sun 19 Oct 2025 20:06:04 +0000 Manifest next update: Thu 23 Oct 2025 05:21:04 +0000 Files and hashes: 1: 0A8C0BB45F8412F7F2DC2F442F5FCEB792A2DBFF.crl (hash: SrzJuoyUpke5XzmOhMhOwKE5IvpX78EfGeDq6PbssRU=) 2: 3136302e3139312e3233342e302f32342d3234203d3e20313533343932.roa (hash: UIZ03usfq2XFdSk/q+e6qEltdDYNXrFthkIDpbSov1g=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/9bcc62ae-20c8-4974-aae9-b108df8e2f59/0/0A8C0BB45F8412F7F2DC2F442F5FCEB792A2DBFF.crl rsync://repo-rpki.idnic.net/repo/9bcc62ae-20c8-4974-aae9-b108df8e2f59/0/0A8C0BB45F8412F7F2DC2F442F5FCEB792A2DBFF.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/0A8C0BB45F8412F7F2DC2F442F5FCEB792A2DBFF.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 Oct 2025 03:04:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 18:ca:b4:ed:3d:5a:a9:81:23:6a:05:cb:92:5b:9f:18:59:81:10:63 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0A8C0BB45F8412F7F2DC2F442F5FCEB792A2DBFF Validity Not Before: Oct 19 20:06:04 2025 GMT Not After : Oct 23 05:21:04 2025 GMT Subject: CN=1BC2B0C84EDAE9084E026E4FAC8AE2B053070282 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:a1:3b:25:9c:4d:04:6e:31:29:90:c6:20:30: 03:60:5e:bf:8a:a5:a1:0d:36:88:0a:e1:68:80:44: b7:ec:73:a4:a5:0a:4b:0a:0a:bd:ed:0d:a7:a3:85: 0b:a2:71:53:5a:fb:24:e9:3c:b0:2a:2e:dc:9a:6a: c5:7e:96:1d:23:0a:9f:b7:fd:f5:5a:08:74:d0:6c: fe:83:3d:28:f0:9a:70:96:2f:d8:c4:2e:32:4c:ea: c1:4c:d9:54:73:3b:dd:c8:f2:0d:60:d4:40:85:a5: b0:82:54:72:90:df:5a:82:0a:4c:c0:c9:11:12:1b: 0d:6f:7f:49:64:15:f7:5d:34:6f:58:ae:10:89:8c: 56:c5:f5:f1:ba:cc:bb:37:a4:0a:17:a7:28:14:c3: 0e:fa:77:e4:5f:b2:71:10:bf:23:b1:34:1a:58:c3: 6e:8f:61:fd:26:75:4d:ce:1d:87:1d:a5:18:19:b1: 3f:df:56:07:9d:45:64:75:45:28:29:26:c4:4b:a4: 91:53:b5:73:66:74:9a:fc:b5:e4:3a:37:f7:5d:03: 7e:a9:e6:e9:dd:5d:70:18:b4:9c:45:65:16:35:b8: 80:9b:d9:bc:cb:db:c8:6a:bf:9b:45:ef:bf:5b:9d: e7:72:a0:d8:ae:56:52:d9:d3:f6:45:2d:04:17:2c: 30:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1B:C2:B0:C8:4E:DA:E9:08:4E:02:6E:4F:AC:8A:E2:B0:53:07:02:82 X509v3 Authority Key Identifier: keyid:0A:8C:0B:B4:5F:84:12:F7:F2:DC:2F:44:2F:5F:CE:B7:92:A2:DB:FF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/9bcc62ae-20c8-4974-aae9-b108df8e2f59/0/0A8C0BB45F8412F7F2DC2F442F5FCEB792A2DBFF.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/0A8C0BB45F8412F7F2DC2F442F5FCEB792A2DBFF.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/9bcc62ae-20c8-4974-aae9-b108df8e2f59/0/0A8C0BB45F8412F7F2DC2F442F5FCEB792A2DBFF.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 28:5b:e6:c3:e6:37:34:33:65:ea:98:e6:41:c2:73:93:37:9d: c1:31:16:68:7f:26:4e:47:fe:b0:27:80:bf:2b:8e:7a:bf:09: 00:83:14:d7:0f:1b:9d:d9:c6:de:4d:d0:1f:cd:04:76:a8:06: 2f:95:27:9d:57:a9:81:88:af:fa:f9:df:0b:bf:dc:14:e4:68: 06:11:f4:fd:f9:82:3f:78:fd:6b:ce:ba:df:de:ae:f8:70:0f: c1:4e:bb:f9:2d:80:ce:7e:29:89:67:9e:48:0a:93:53:e4:10: 38:56:bc:ef:be:cf:e0:9a:53:48:5e:f4:f1:57:13:fc:52:54: 23:7b:34:52:44:6a:36:98:e0:b8:3e:57:26:9b:cf:a3:2d:fa: 02:f6:84:88:fe:c4:9f:93:b9:0c:d2:78:a8:49:4b:cc:35:b9: 10:5b:3c:fd:c3:b7:17:80:6d:ce:d3:5f:97:b3:a9:ad:4e:10: df:24:8d:dc:87:64:6e:88:e7:a1:b1:fc:3e:ac:af:93:68:41: 2a:89:d4:e5:e5:fd:de:46:6d:fe:e9:05:5d:4f:b5:06:dc:a9: 1e:96:40:90:d5:4f:f1:94:50:5d:a2:a8:af:ed:81:3d:bb:08: 6e:be:43:6b:e2:ad:d8:a5:1f:4e:a4:3b:5a:ab:60:59:94:98: 23:e8:50:d8 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUGMq07T1aqYEjagXLklufGFmBEGMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMEE4QzBCQjQ1Rjg0MTJGN0YyREMyRjQ0MkY1RkNFQjc5 MkEyREJGRjAeFw0yNTEwMTkyMDA2MDRaFw0yNTEwMjMwNTIxMDRaMDMxMTAvBgNV BAMTKDFCQzJCMEM4NEVEQUU5MDg0RTAyNkU0RkFDOEFFMkIwNTMwNzAyODIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQChoTslnE0EbjEpkMYgMANgXr+K paENNogK4WiARLfsc6SlCksKCr3tDaejhQuicVNa+yTpPLAqLtyaasV+lh0jCp+3 /fVaCHTQbP6DPSjwmnCWL9jELjJM6sFM2VRzO93I8g1g1ECFpbCCVHKQ31qCCkzA yRESGw1vf0lkFfddNG9YrhCJjFbF9fG6zLs3pAoXpygUww76d+RfsnEQvyOxNBpY w26PYf0mdU3OHYcdpRgZsT/fVgedRWR1RSgpJsRLpJFTtXNmdJr8teQ6N/ddA36p 5undXXAYtJxFZRY1uICb2bzL28hqv5tF779bnedyoNiuVlLZ0/ZFLQQXLDC9AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUG8KwyE7a6QhOAm5PrIrisFMHAoIwHwYDVR0j BBgwFoAUCowLtF+EEvfy3C9EL1/Ot5Ki2/8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 YmNjNjJhZS0yMGM4LTQ5NzQtYWFlOS1iMTA4ZGY4ZTJmNTkvMC8wQThDMEJCNDVG ODQxMkY3RjJEQzJGNDQyRjVGQ0VCNzkyQTJEQkZGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvMEE4QzBCQjQ1Rjg0MTJGN0YyREMyRjQ0MkY1RkNFQjc5MkEy REJGRi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOWJjYzYyYWUtMjBjOC00OTc0LWFh ZTktYjEwOGRmOGUyZjU5LzAvMEE4QzBCQjQ1Rjg0MTJGN0YyREMyRjQ0MkY1RkNF Qjc5MkEyREJGRi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAChb5sPmNzQzZeqY5kHCc5M3ncExFmh/Jk5H /rAngL8rjnq/CQCDFNcPG53Zxt5N0B/NBHaoBi+VJ51XqYGIr/r53wu/3BTkaAYR 9P35gj94/WvOut/ervhwD8FOu/ktgM5+KYlnnkgKk1PkEDhWvO++z+CaU0he9PFX E/xSVCN7NFJEajaY4Lg+Vyabz6Mt+gL2hIj+xJ+TuQzSeKhJS8w1uRBbPP3DtxeA bc7TX5ezqa1OEN8kjdyHZG6I56Gx/D6sr5NoQSqJ1OXl/d5Gbf7pBV1PtQbcqR6W QJDVT/GUUF2iqK/tgT27CG6+Q2virdilH06kO1qrYFmUmCPoUNg= -----END CERTIFICATE-----Generated at Mon Oct 20 19:17:53 2025 by rpki-client