$ rpki-client -vvf repo-rpki.idnic.net/repo/a13de3ec-4d3c-4402-a7b8-8a1b96226e75/0/0F44BF258D75F2D1C445D529C3015F9FE51B280F.mft File: 0F44BF258D75F2D1C445D529C3015F9FE51B280F.mft (raw, json) Hash identifier: EhaZcofRk3nvfLxuvITkqLggr3wozsHSg7oc/lWNQ9Y= Subject key identifier: AA:B4:39:4D:86:D7:A1:6B:4F:3E:7E:A0:A4:B1:59:0C:22:21:E7:DC Authority key identifier: 0F:44:BF:25:8D:75:F2:D1:C4:45:D5:29:C3:01:5F:9F:E5:1B:28:0F Certificate issuer: /CN=0F44BF258D75F2D1C445D529C3015F9FE51B280F Certificate serial: 302D79A1EC8570C6BD63F14B36FFE092FE67D537 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/0F44BF258D75F2D1C445D529C3015F9FE51B280F.cer Subject info access: rsync://repo-rpki.idnic.net/repo/a13de3ec-4d3c-4402-a7b8-8a1b96226e75/0/0F44BF258D75F2D1C445D529C3015F9FE51B280F.mft Manifest number: 8F Signing time: Mon 20 Oct 2025 07:11:15 +0000 Manifest this update: Mon 20 Oct 2025 07:06:15 +0000 Manifest next update: Thu 23 Oct 2025 11:02:15 +0000 Files and hashes: 1: 0F44BF258D75F2D1C445D529C3015F9FE51B280F.crl (hash: C1/5b2Eztq6xdyYJFgVTQfYq9t/OqjyxjW0v86rKnFY=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/a13de3ec-4d3c-4402-a7b8-8a1b96226e75/0/0F44BF258D75F2D1C445D529C3015F9FE51B280F.crl rsync://repo-rpki.idnic.net/repo/a13de3ec-4d3c-4402-a7b8-8a1b96226e75/0/0F44BF258D75F2D1C445D529C3015F9FE51B280F.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/0F44BF258D75F2D1C445D529C3015F9FE51B280F.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 Oct 2025 03:04:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 30:2d:79:a1:ec:85:70:c6:bd:63:f1:4b:36:ff:e0:92:fe:67:d5:37 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0F44BF258D75F2D1C445D529C3015F9FE51B280F Validity Not Before: Oct 20 07:06:15 2025 GMT Not After : Oct 23 11:02:15 2025 GMT Subject: CN=AAB4394D86D7A16B4F3E7EA0A4B1590C2221E7DC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:b6:e4:67:ef:e5:11:56:ec:ee:4f:33:0a:42: 50:09:82:95:38:b8:71:0f:b8:71:b3:e9:ab:e5:3b: 3d:ac:02:da:63:01:51:3c:7a:f7:fa:4c:51:3f:93: b1:74:f3:93:97:14:ef:a7:6c:99:b1:26:cf:05:e8: 41:f8:c8:d0:b5:0c:b8:65:53:40:57:97:c5:8c:5b: b8:1c:23:53:ae:8b:6f:d3:7f:2b:d5:03:86:ba:0d: b9:aa:72:71:d2:34:47:88:40:d2:74:9a:75:2f:a2: ca:7d:bf:91:2a:97:b3:30:bf:10:dd:76:0f:c7:f7: c7:90:a5:a9:d5:9a:d2:c2:da:b6:a1:4a:23:14:3c: 04:40:73:ca:82:7e:49:1f:a7:18:21:52:40:4d:a0: 37:e2:6b:02:ed:6c:17:36:1c:ad:fd:e7:14:a8:ea: ff:98:bb:0e:87:be:53:4a:00:6d:29:37:7e:91:64: 30:c2:63:98:14:60:77:3c:e7:33:19:39:83:fe:51: bd:62:d7:b8:e3:d7:71:59:c0:6a:67:43:5b:7f:a4: ab:77:47:97:d3:dc:4d:aa:50:2a:cd:c8:b9:f1:48: 4d:15:3b:80:25:2c:d9:e7:94:b0:ea:12:51:30:bd: df:89:12:e2:73:a4:ce:1d:26:3f:b8:95:9c:fb:4b: 68:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AA:B4:39:4D:86:D7:A1:6B:4F:3E:7E:A0:A4:B1:59:0C:22:21:E7:DC X509v3 Authority Key Identifier: keyid:0F:44:BF:25:8D:75:F2:D1:C4:45:D5:29:C3:01:5F:9F:E5:1B:28:0F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/a13de3ec-4d3c-4402-a7b8-8a1b96226e75/0/0F44BF258D75F2D1C445D529C3015F9FE51B280F.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/0F44BF258D75F2D1C445D529C3015F9FE51B280F.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a13de3ec-4d3c-4402-a7b8-8a1b96226e75/0/0F44BF258D75F2D1C445D529C3015F9FE51B280F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 42:e9:a6:e3:45:27:8a:e4:39:86:ea:60:40:cb:71:75:9e:e9: 82:e2:90:89:b7:96:51:57:63:85:43:73:e0:a0:83:43:96:54: f1:fa:d8:d5:7d:0d:18:7a:ae:73:34:24:bc:cc:17:6f:12:4c: 47:c4:ca:bd:07:9d:54:99:4a:4a:05:39:83:53:5e:39:ea:bd: 5c:d0:70:0d:31:0a:44:a3:85:fa:74:f2:96:ef:f4:79:ff:f9: 61:30:23:e0:11:17:fc:2c:57:7d:8f:12:ce:f4:59:8e:14:64: 78:86:1c:7d:84:33:ba:67:b4:08:b9:8f:ca:9e:27:b5:77:24: 68:d4:41:92:5b:f9:5a:c7:f7:aa:08:63:b2:70:62:a7:e2:50: 8b:4c:ee:38:13:85:ed:ab:0f:70:c7:1e:c5:7f:a8:4d:7b:97: 3c:7c:43:35:72:19:86:d5:15:99:9a:38:67:87:c4:7f:de:f3: ac:64:fa:ac:1d:1a:35:bd:02:85:8e:5d:67:b7:80:be:0b:75: 6a:ec:30:f2:95:cd:5b:26:26:52:a0:ae:dc:50:d8:31:0a:e3: c2:89:6a:4c:82:20:c3:55:2c:4e:77:f4:34:7e:ae:08:61:7f: ec:95:70:d9:81:98:42:4a:fa:08:48:c0:0d:62:b0:7c:d6:21: 57:9a:41:19 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUMC15oeyFcMa9Y/FLNv/gkv5n1TcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMEY0NEJGMjU4RDc1RjJEMUM0NDVENTI5QzMwMTVGOUZF NTFCMjgwRjAeFw0yNTEwMjAwNzA2MTVaFw0yNTEwMjMxMTAyMTVaMDMxMTAvBgNV BAMTKEFBQjQzOTREODZEN0ExNkI0RjNFN0VBMEE0QjE1OTBDMjIyMUU3REMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/tuRn7+URVuzuTzMKQlAJgpU4 uHEPuHGz6avlOz2sAtpjAVE8evf6TFE/k7F085OXFO+nbJmxJs8F6EH4yNC1DLhl U0BXl8WMW7gcI1Oui2/TfyvVA4a6DbmqcnHSNEeIQNJ0mnUvosp9v5Eql7MwvxDd dg/H98eQpanVmtLC2rahSiMUPARAc8qCfkkfpxghUkBNoDfiawLtbBc2HK395xSo 6v+Yuw6HvlNKAG0pN36RZDDCY5gUYHc85zMZOYP+Ub1i17jj13FZwGpnQ1t/pKt3 R5fT3E2qUCrNyLnxSE0VO4AlLNnnlLDqElEwvd+JEuJzpM4dJj+4lZz7S2hTAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUqrQ5TYbXoWtPPn6gpLFZDCIh59wwHwYDVR0j BBgwFoAUD0S/JY118tHERdUpwwFfn+UbKA8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h MTNkZTNlYy00ZDNjLTQ0MDItYTdiOC04YTFiOTYyMjZlNzUvMC8wRjQ0QkYyNThE NzVGMkQxQzQ0NUQ1MjlDMzAxNUY5RkU1MUIyODBGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvMEY0NEJGMjU4RDc1RjJEMUM0NDVENTI5QzMwMTVGOUZFNTFC MjgwRi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYTEzZGUzZWMtNGQzYy00NDAyLWE3 YjgtOGExYjk2MjI2ZTc1LzAvMEY0NEJGMjU4RDc1RjJEMUM0NDVENTI5QzMwMTVG OUZFNTFCMjgwRi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAELppuNFJ4rkOYbqYEDLcXWe6YLikIm3llFX Y4VDc+Cgg0OWVPH62NV9DRh6rnM0JLzMF28STEfEyr0HnVSZSkoFOYNTXjnqvVzQ cA0xCkSjhfp08pbv9Hn/+WEwI+ARF/wsV32PEs70WY4UZHiGHH2EM7pntAi5j8qe J7V3JGjUQZJb+VrH96oIY7JwYqfiUItM7jgThe2rD3DHHsV/qE17lzx8QzVyGYbV FZmaOGeHxH/e86xk+qwdGjW9AoWOXWe3gL4LdWrsMPKVzVsmJlKgrtxQ2DEK48KJ akyCIMNVLE539DR+rghhf+yVcNmBmEJK+ghIwA1isHzWIVeaQRk= -----END CERTIFICATE-----Generated at Tue Oct 21 00:38:58 2025 by rpki-client