$ rpki-client -vvf repo-rpki.idnic.net/repo/9e47847c-bc2c-40da-b2aa-915951428aad/0/A8104CA9AA31459E18BB7A597857DDA711E3E7FA.mft File: A8104CA9AA31459E18BB7A597857DDA711E3E7FA.mft (raw, json) Hash identifier: jACNyZyb0WJfj80fwBMA+BLFTYHR8mrkeAjHToGQKzE= Subject key identifier: EF:A1:60:8B:F2:DF:D2:6C:0D:DC:BA:32:EE:AD:A6:C2:D7:D7:73:D5 Authority key identifier: A8:10:4C:A9:AA:31:45:9E:18:BB:7A:59:78:57:DD:A7:11:E3:E7:FA Certificate issuer: /CN=A8104CA9AA31459E18BB7A597857DDA711E3E7FA Certificate serial: 2DAA4687C508CAC6AA1D158FC5BE6B61CB38A155 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A8104CA9AA31459E18BB7A597857DDA711E3E7FA.cer Subject info access: rsync://repo-rpki.idnic.net/repo/9e47847c-bc2c-40da-b2aa-915951428aad/0/A8104CA9AA31459E18BB7A597857DDA711E3E7FA.mft Manifest number: 0210 Signing time: Sun 19 Oct 2025 07:11:52 +0000 Manifest this update: Sun 19 Oct 2025 07:06:52 +0000 Manifest next update: Wed 22 Oct 2025 08:11:52 +0000 Files and hashes: 1: 3130332e3139312e3231362e302f32332d3234203d3e20313439393239.roa (hash: EzMh3H3LMpcsDj1VtV66jHz9y8osKoSaALLtXZ0KBbY=) 2: A8104CA9AA31459E18BB7A597857DDA711E3E7FA.crl (hash: 2BHgsy5RXYJLh/N2C1TyarVapmPJk6HOsDXTP2ZAeek=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/9e47847c-bc2c-40da-b2aa-915951428aad/0/A8104CA9AA31459E18BB7A597857DDA711E3E7FA.crl rsync://repo-rpki.idnic.net/repo/9e47847c-bc2c-40da-b2aa-915951428aad/0/A8104CA9AA31459E18BB7A597857DDA711E3E7FA.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A8104CA9AA31459E18BB7A597857DDA711E3E7FA.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 Oct 2025 08:11:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2d:aa:46:87:c5:08:ca:c6:aa:1d:15:8f:c5:be:6b:61:cb:38:a1:55 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A8104CA9AA31459E18BB7A597857DDA711E3E7FA Validity Not Before: Oct 19 07:06:52 2025 GMT Not After : Oct 22 08:11:52 2025 GMT Subject: CN=EFA1608BF2DFD26C0DDCBA32EEADA6C2D7D773D5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:9e:bf:6f:e1:d2:b3:0e:47:d5:51:3c:a0:ae: 29:0e:ee:34:4e:50:2f:c0:c2:64:cc:52:df:e4:57: 54:83:50:7b:42:6c:8d:33:a8:15:44:bc:d2:4c:fc: c6:cd:45:56:6e:d6:b2:73:bd:88:d5:50:03:77:21: bd:15:5e:b8:b9:40:fe:41:24:f3:d6:fd:78:ce:40: aa:df:53:35:98:82:60:b2:10:f7:1e:f4:14:e1:5b: af:45:b9:04:67:fa:5b:88:15:9c:20:45:47:ba:ed: c6:60:19:f9:07:cf:eb:24:8c:c7:1d:e4:9d:d2:91: 2c:5d:14:91:78:d2:1f:19:44:a9:5c:cb:e3:c7:82: 11:60:ea:f9:6b:02:1e:9e:60:42:bb:39:3b:00:c6: 34:37:f5:fb:d8:94:67:16:57:41:5e:f4:3b:86:c3: ab:db:f7:1c:65:db:f7:2e:49:32:80:3d:01:a7:48: 0c:99:77:e2:87:29:d7:34:67:7c:f7:ee:91:1d:da: 9b:d7:3e:67:9e:96:62:e8:99:1e:00:27:07:7b:be: 29:17:cd:20:0c:79:9e:e3:e9:87:56:ab:80:40:19: 51:71:b5:61:a1:5d:5b:24:d3:8c:44:9d:ed:8b:83: 55:18:bb:b6:cd:d3:6f:9e:48:68:3a:19:76:04:b0: a7:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EF:A1:60:8B:F2:DF:D2:6C:0D:DC:BA:32:EE:AD:A6:C2:D7:D7:73:D5 X509v3 Authority Key Identifier: keyid:A8:10:4C:A9:AA:31:45:9E:18:BB:7A:59:78:57:DD:A7:11:E3:E7:FA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/9e47847c-bc2c-40da-b2aa-915951428aad/0/A8104CA9AA31459E18BB7A597857DDA711E3E7FA.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A8104CA9AA31459E18BB7A597857DDA711E3E7FA.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/9e47847c-bc2c-40da-b2aa-915951428aad/0/A8104CA9AA31459E18BB7A597857DDA711E3E7FA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3b:21:b6:c7:71:f1:54:b8:ae:ae:7f:b0:fa:e1:09:91:52:58: 8c:d0:00:6a:0f:c4:e8:d7:96:0e:fd:6c:4f:d6:31:22:b1:fe: dc:f2:d4:6b:5a:ce:c1:ab:0d:98:00:1b:8c:44:c4:c1:14:00: b5:e1:55:4f:be:b4:50:99:fe:e9:8b:cd:6a:03:d5:bb:dd:85: 99:58:58:b0:2e:8d:b9:24:80:b3:a6:e5:1c:fd:40:7f:e1:9f: 3a:04:cc:33:60:f0:f9:f7:c2:c8:14:82:e6:40:40:30:b6:b7: 69:9d:f6:45:b4:1f:4f:e6:14:16:55:6c:00:fc:5e:c7:78:a1: 6e:fa:f5:12:be:5c:85:7d:fd:7d:41:e3:0a:12:35:e7:5d:e8: e7:ba:04:b9:b5:22:f1:62:1e:84:8c:05:8f:70:a5:14:58:fa: 44:cd:5b:c5:b9:81:aa:5a:c2:66:d6:11:c3:4b:91:76:4d:9a: cc:b8:18:e0:68:77:c0:2f:92:92:13:55:67:01:e0:d2:89:c6: 7c:0e:40:27:84:f0:75:21:9b:fd:6f:ab:e4:9f:c3:ae:2d:3f: 28:b9:d0:e3:13:75:26:ab:2b:cd:51:45:8a:30:22:eb:18:50: a1:7a:3a:39:5d:77:18:85:24:c4:aa:30:59:0e:10:84:13:08: 05:e0:43:24 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIULapGh8UIysaqHRWPxb5rYcs4oVUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTgxMDRDQTlBQTMxNDU5RTE4QkI3QTU5Nzg1N0REQTcx MUUzRTdGQTAeFw0yNTEwMTkwNzA2NTJaFw0yNTEwMjIwODExNTJaMDMxMTAvBgNV BAMTKEVGQTE2MDhCRjJERkQyNkMwRERDQkEzMkVFQURBNkMyRDdENzczRDUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDenr9v4dKzDkfVUTygrikO7jRO UC/AwmTMUt/kV1SDUHtCbI0zqBVEvNJM/MbNRVZu1rJzvYjVUAN3Ib0VXri5QP5B JPPW/XjOQKrfUzWYgmCyEPce9BThW69FuQRn+luIFZwgRUe67cZgGfkHz+skjMcd 5J3SkSxdFJF40h8ZRKlcy+PHghFg6vlrAh6eYEK7OTsAxjQ39fvYlGcWV0Fe9DuG w6vb9xxl2/cuSTKAPQGnSAyZd+KHKdc0Z3z37pEd2pvXPmeelmLomR4AJwd7vikX zSAMeZ7j6YdWq4BAGVFxtWGhXVsk04xEne2Lg1UYu7bN02+eSGg6GXYEsKdLAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU76Fgi/Lf0mwN3Loy7q2mwtfXc9UwHwYDVR0j BBgwFoAUqBBMqaoxRZ4Yu3pZeFfdpxHj5/owDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 ZTQ3ODQ3Yy1iYzJjLTQwZGEtYjJhYS05MTU5NTE0MjhhYWQvMC9BODEwNENBOUFB MzE0NTlFMThCQjdBNTk3ODU3RERBNzExRTNFN0ZBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQTgxMDRDQTlBQTMxNDU5RTE4QkI3QTU5Nzg1N0REQTcxMUUz RTdGQS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOWU0Nzg0N2MtYmMyYy00MGRhLWIy YWEtOTE1OTUxNDI4YWFkLzAvQTgxMDRDQTlBQTMxNDU5RTE4QkI3QTU5Nzg1N0RE QTcxMUUzRTdGQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADshtsdx8VS4rq5/sPrhCZFSWIzQAGoPxOjX lg79bE/WMSKx/tzy1GtazsGrDZgAG4xExMEUALXhVU++tFCZ/umLzWoD1bvdhZlY WLAujbkkgLOm5Rz9QH/hnzoEzDNg8Pn3wsgUguZAQDC2t2md9kW0H0/mFBZVbAD8 Xsd4oW769RK+XIV9/X1B4woSNedd6Oe6BLm1IvFiHoSMBY9wpRRY+kTNW8W5gapa wmbWEcNLkXZNmsy4GOBod8AvkpITVWcB4NKJxnwOQCeE8HUhm/1vq+Sfw64tPyi5 0OMTdSarK81RRYowIusYUKF6OjlddxiFJMSqMFkOEIQTCAXgQyQ= -----END CERTIFICATE-----Generated at Mon Oct 20 09:44:48 2025 by rpki-client