$ rpki-client -vvf repo-rpki.idnic.net/repo/a2e5ff81-b082-4334-ad29-55dc8d1e53b9/0/A8CDD576A9B5E448A869BEA4D516BAFC5A879503.mft File: A8CDD576A9B5E448A869BEA4D516BAFC5A879503.mft (raw, json) Hash identifier: tbcX+XnQ1oJeIPo6gEA3grNvK2yI4Bu4LSnaE7EEeHo= Subject key identifier: 94:DB:FE:EB:7A:EE:9C:5B:27:F7:73:F8:BF:5D:A8:8A:4A:BE:E2:5A Authority key identifier: A8:CD:D5:76:A9:B5:E4:48:A8:69:BE:A4:D5:16:BA:FC:5A:87:95:03 Certificate issuer: /CN=A8CDD576A9B5E448A869BEA4D516BAFC5A879503 Certificate serial: 5D195AC455EF2F686144597D83235FA8706C23BE Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/A8CDD576A9B5E448A869BEA4D516BAFC5A879503.cer Subject info access: rsync://repo-rpki.idnic.net/repo/a2e5ff81-b082-4334-ad29-55dc8d1e53b9/0/A8CDD576A9B5E448A869BEA4D516BAFC5A879503.mft Manifest number: DA Signing time: Sun 19 Oct 2025 23:12:24 +0000 Manifest this update: Sun 19 Oct 2025 23:07:24 +0000 Manifest next update: Thu 23 Oct 2025 06:12:24 +0000 Files and hashes: 1: 3136302e31392e3134352e302f32342d3234203d3e203435333035.roa (hash: b0d54b5VfP0y4Y/gj0JeZ9te1p1dA7COr+bHtkAFBE4=) 2: A8CDD576A9B5E448A869BEA4D516BAFC5A879503.crl (hash: lq9+ixoLIu3JLMvPCd+DnyMPJVhlJjSS1t4uItrODoY=) 3: 3136302e31392e3134342e302f32342d3234203d3e20313532373838.roa (hash: zcdVZSiLzuXwzNXJqyWuf4sDbiVxTodHTiD95Tvz7k8=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/a2e5ff81-b082-4334-ad29-55dc8d1e53b9/0/A8CDD576A9B5E448A869BEA4D516BAFC5A879503.crl rsync://repo-rpki.idnic.net/repo/a2e5ff81-b082-4334-ad29-55dc8d1e53b9/0/A8CDD576A9B5E448A869BEA4D516BAFC5A879503.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/A8CDD576A9B5E448A869BEA4D516BAFC5A879503.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 Oct 2025 03:04:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5d:19:5a:c4:55:ef:2f:68:61:44:59:7d:83:23:5f:a8:70:6c:23:be Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A8CDD576A9B5E448A869BEA4D516BAFC5A879503 Validity Not Before: Oct 19 23:07:24 2025 GMT Not After : Oct 23 06:12:24 2025 GMT Subject: CN=94DBFEEB7AEE9C5B27F773F8BF5DA88A4ABEE25A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:42:b0:34:29:4e:18:fe:e6:c9:16:50:65:f4: e9:de:19:dd:e7:d2:67:43:5a:f1:af:70:13:6f:ba: bf:c1:36:70:e8:e0:aa:31:a8:ab:5b:ec:f2:2e:7c: 18:de:88:33:bc:4e:3f:57:3b:da:32:2c:81:12:0d: bd:81:b1:5e:35:de:8d:6f:b1:26:9b:ac:73:37:c5: 24:58:77:71:0d:c9:ce:de:f0:20:d1:d7:3d:4e:ca: af:6b:e7:6d:39:4e:26:00:0b:88:ed:29:84:85:41: 36:fb:d5:1c:3d:6e:89:e5:cb:de:90:d8:9f:9b:ba: e4:e9:1d:43:66:65:43:8b:5c:fb:e8:31:a7:43:6f: 4c:26:b1:38:d4:c4:6b:b6:76:14:03:98:00:ba:7c: 73:ca:fc:37:96:68:d1:ac:a3:51:5e:fc:80:40:cb: 99:0c:c7:18:98:98:92:99:c2:58:c6:26:c3:cb:90: f6:6e:8e:ed:72:a8:54:d7:be:4d:86:a4:9f:fc:73: 66:fc:8f:16:1e:13:1d:fa:5e:28:23:0c:0f:55:f1: 84:eb:ce:08:9b:41:a9:f7:fb:77:f1:ec:97:5c:ea: 96:d6:4b:0b:4a:5e:05:86:6c:4d:dd:e5:e9:86:64: 74:d8:78:06:7f:8b:a9:56:81:dc:57:2e:18:b4:a9: 4b:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 94:DB:FE:EB:7A:EE:9C:5B:27:F7:73:F8:BF:5D:A8:8A:4A:BE:E2:5A X509v3 Authority Key Identifier: keyid:A8:CD:D5:76:A9:B5:E4:48:A8:69:BE:A4:D5:16:BA:FC:5A:87:95:03 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/a2e5ff81-b082-4334-ad29-55dc8d1e53b9/0/A8CDD576A9B5E448A869BEA4D516BAFC5A879503.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/A8CDD576A9B5E448A869BEA4D516BAFC5A879503.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a2e5ff81-b082-4334-ad29-55dc8d1e53b9/0/A8CDD576A9B5E448A869BEA4D516BAFC5A879503.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 57:ca:8c:5a:85:bd:56:59:03:12:40:ab:53:3e:7c:aa:c5:ad: 39:f9:d9:ea:08:6e:fe:a7:ed:32:fd:94:05:0d:06:80:b2:0a: ef:72:d9:df:45:19:fd:bf:62:e9:3c:a2:2b:40:b9:9b:5e:ef: fb:ae:cb:7c:64:4f:b8:3b:69:54:e1:e6:b3:cb:3d:c1:77:05: 7e:80:6f:16:01:05:3d:c0:cd:a9:8c:d6:f7:ab:d3:7f:f2:67: cd:e6:54:16:4f:ed:c1:7e:4a:01:06:e6:e7:eb:6e:96:c7:a3: 00:d4:3d:96:78:72:ae:56:0a:13:9b:77:91:0f:66:6f:1a:6e: 1b:42:72:41:e9:a5:94:51:60:d8:73:d1:d3:63:46:82:e8:5d: 62:69:eb:90:2f:85:51:09:47:50:34:a0:5e:b6:b4:eb:e2:08: 77:7a:da:c8:da:72:07:09:65:3d:6c:d6:2e:4c:ef:2a:2d:cf: db:f4:e3:42:0c:f1:74:5d:68:6b:a2:d3:92:1c:a8:06:e7:ad: 9d:48:c6:14:b0:35:38:ef:9c:f4:dd:79:a0:f1:78:31:bb:e6: b2:82:d3:0f:78:ad:e4:b1:90:5f:67:e5:bd:fe:f0:49:3a:75: 1c:db:f0:41:ec:7f:bb:36:4d:3d:ba:76:26:a7:21:89:02:de: 4f:cc:0b:cc -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUXRlaxFXvL2hhRFl9gyNfqHBsI74wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQThDREQ1NzZBOUI1RTQ0OEE4NjlCRUE0RDUxNkJBRkM1 QTg3OTUwMzAeFw0yNTEwMTkyMzA3MjRaFw0yNTEwMjMwNjEyMjRaMDMxMTAvBgNV BAMTKDk0REJGRUVCN0FFRTlDNUIyN0Y3NzNGOEJGNURBODhBNEFCRUUyNUEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDQQrA0KU4Y/ubJFlBl9OneGd3n 0mdDWvGvcBNvur/BNnDo4KoxqKtb7PIufBjeiDO8Tj9XO9oyLIESDb2BsV413o1v sSabrHM3xSRYd3ENyc7e8CDR1z1Oyq9r5205TiYAC4jtKYSFQTb71Rw9bonly96Q 2J+buuTpHUNmZUOLXPvoMadDb0wmsTjUxGu2dhQDmAC6fHPK/DeWaNGso1Fe/IBA y5kMxxiYmJKZwljGJsPLkPZuju1yqFTXvk2GpJ/8c2b8jxYeEx36XigjDA9V8YTr zgibQan3+3fx7Jdc6pbWSwtKXgWGbE3d5emGZHTYeAZ/i6lWgdxXLhi0qUsbAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUlNv+63runFsn93P4v12oikq+4lowHwYDVR0j BBgwFoAUqM3Vdqm15Eioab6k1Ra6/FqHlQMwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h MmU1ZmY4MS1iMDgyLTQzMzQtYWQyOS01NWRjOGQxZTUzYjkvMC9BOENERDU3NkE5 QjVFNDQ4QTg2OUJFQTRENTE2QkFGQzVBODc5NTAzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvQThDREQ1NzZBOUI1RTQ0OEE4NjlCRUE0RDUxNkJBRkM1QTg3 OTUwMy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYTJlNWZmODEtYjA4Mi00MzM0LWFk MjktNTVkYzhkMWU1M2I5LzAvQThDREQ1NzZBOUI1RTQ0OEE4NjlCRUE0RDUxNkJB RkM1QTg3OTUwMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFfKjFqFvVZZAxJAq1M+fKrFrTn52eoIbv6n 7TL9lAUNBoCyCu9y2d9FGf2/Yuk8oitAuZte7/uuy3xkT7g7aVTh5rPLPcF3BX6A bxYBBT3AzamM1ver03/yZ83mVBZP7cF+SgEG5ufrbpbHowDUPZZ4cq5WChObd5EP Zm8abhtCckHppZRRYNhz0dNjRoLoXWJp65AvhVEJR1A0oF62tOviCHd62sjacgcJ ZT1s1i5M7yotz9v040IM8XRdaGui05IcqAbnrZ1IxhSwNTjvnPTdeaDxeDG75rKC 0w94reSxkF9n5b3+8Ek6dRzb8EHsf7s2TT26dianIYkC3k/MC8w= -----END CERTIFICATE-----Generated at Mon Oct 20 15:02:11 2025 by rpki-client