$ rpki-client -vvf repo-rpki.idnic.net/repo/a6d57201-7e2f-49bb-941d-9fcabe8623f5/0/809C666CC84F942588E109E6E6C454A9CD0524EB.mft File: 809C666CC84F942588E109E6E6C454A9CD0524EB.mft (raw, json) Hash identifier: iMflkIgN/frqF8BTVhe/fkrED+Ivoz3J66h0xKdh3P8= Subject key identifier: 93:19:69:15:1B:1D:59:EB:08:D1:34:E6:66:74:80:34:B5:67:00:E4 Authority key identifier: 80:9C:66:6C:C8:4F:94:25:88:E1:09:E6:E6:C4:54:A9:CD:05:24:EB Certificate issuer: /CN=809C666CC84F942588E109E6E6C454A9CD0524EB Certificate serial: 56B49F4CC12D2CE5399E1995766A59EFC60EC022 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/809C666CC84F942588E109E6E6C454A9CD0524EB.cer Subject info access: rsync://repo-rpki.idnic.net/repo/a6d57201-7e2f-49bb-941d-9fcabe8623f5/0/809C666CC84F942588E109E6E6C454A9CD0524EB.mft Manifest number: 0204 Signing time: Sat 18 Oct 2025 11:20:46 +0000 Manifest this update: Sat 18 Oct 2025 11:15:46 +0000 Manifest next update: Tue 21 Oct 2025 22:51:46 +0000 Files and hashes: 1: 809C666CC84F942588E109E6E6C454A9CD0524EB.crl (hash: 2DPl9fJmikumvLFGWCJYcHyUaCEYS6lGDzkNsrAwJCQ=) 2: 3130332e3133312e36312e302f32342d3234203d3e20313338313236.roa (hash: AvZCtYXnhv2U+FmAw+wE/XOaPxSITmQuNQusEE4Cu6A=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/a6d57201-7e2f-49bb-941d-9fcabe8623f5/0/809C666CC84F942588E109E6E6C454A9CD0524EB.crl rsync://repo-rpki.idnic.net/repo/a6d57201-7e2f-49bb-941d-9fcabe8623f5/0/809C666CC84F942588E109E6E6C454A9CD0524EB.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/809C666CC84F942588E109E6E6C454A9CD0524EB.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 21 Oct 2025 22:51:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 56:b4:9f:4c:c1:2d:2c:e5:39:9e:19:95:76:6a:59:ef:c6:0e:c0:22 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=809C666CC84F942588E109E6E6C454A9CD0524EB Validity Not Before: Oct 18 11:15:46 2025 GMT Not After : Oct 21 22:51:46 2025 GMT Subject: CN=931969151B1D59EB08D134E666748034B56700E4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:1a:24:96:0b:e5:24:24:28:9d:52:20:31:cc: c7:0e:80:f2:a4:19:27:67:a8:27:22:8d:db:eb:d4: e1:e4:2e:e5:3f:60:6a:30:7d:52:6c:b5:d2:1e:30: 6d:74:56:20:9c:71:a3:ad:6f:a8:26:03:70:12:b0: f9:18:11:f8:7f:a5:13:b7:c8:59:ae:67:67:d6:5e: 5e:c9:fb:f0:86:8f:0e:73:4f:1d:d9:03:83:3d:f7: e2:13:29:46:ae:11:39:b3:79:7e:70:48:28:73:41: 36:6d:f8:56:ba:2f:de:41:99:2b:f0:f0:db:90:45: 38:b7:ee:fa:8e:d8:95:36:b7:7a:61:90:05:07:99: bc:fb:02:6d:ce:dc:2a:ef:c2:5c:cd:4f:08:61:dc: 9b:87:97:be:60:50:44:80:8c:e6:87:21:76:97:00: e7:f6:cd:bf:db:38:ba:97:12:06:14:e6:c9:05:08: c9:05:5c:d4:4e:e3:a7:e5:cb:e0:bd:e7:ac:9a:78: 05:83:3b:a8:e3:99:af:8b:d3:67:9f:47:ed:41:d6: dd:30:49:ce:0b:0e:b6:54:fd:8a:37:94:38:c4:11: 8b:65:16:cb:e0:39:bc:5b:03:6e:9d:6f:b6:6e:5c: 0d:a0:b4:98:5a:98:ce:c9:c0:84:60:76:4a:0e:46: a9:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 93:19:69:15:1B:1D:59:EB:08:D1:34:E6:66:74:80:34:B5:67:00:E4 X509v3 Authority Key Identifier: keyid:80:9C:66:6C:C8:4F:94:25:88:E1:09:E6:E6:C4:54:A9:CD:05:24:EB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/a6d57201-7e2f-49bb-941d-9fcabe8623f5/0/809C666CC84F942588E109E6E6C454A9CD0524EB.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/809C666CC84F942588E109E6E6C454A9CD0524EB.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a6d57201-7e2f-49bb-941d-9fcabe8623f5/0/809C666CC84F942588E109E6E6C454A9CD0524EB.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption d5:31:70:8b:c3:57:a8:7b:12:38:ac:95:cf:20:56:be:47:56: af:d0:4d:46:e3:f1:ef:13:0a:2e:32:88:fd:1f:10:9e:6b:89: 93:f4:e6:5b:be:ba:04:f7:ed:30:df:63:5f:62:79:d1:14:8b: 67:33:f5:4c:e1:fc:3d:ee:62:0f:10:77:bf:7f:6c:1f:ec:aa: 65:8b:09:c5:a7:31:20:c0:c8:60:e1:2f:70:eb:4a:53:65:56: ba:f1:b7:cc:75:28:c5:ed:3f:34:dc:3f:00:33:89:fa:9a:35: 07:48:4d:4d:f5:58:e0:43:f6:86:da:29:0b:05:1d:25:37:ee: 1e:44:c4:2a:9f:51:3f:d4:69:94:67:8f:a5:24:c6:ad:d0:e4: c5:30:ac:2b:bf:3f:b9:7b:5d:34:a6:7a:3d:42:60:38:ec:fd: f3:94:9d:ca:cc:96:15:28:68:80:e4:df:c6:9b:6d:58:52:d9: d9:33:29:31:b1:cb:ab:85:6b:ea:1b:8e:fd:89:9d:d4:93:44: a2:79:6c:87:da:9e:31:59:7d:af:11:89:0f:28:17:c1:ca:bf: 4c:0d:1b:70:1e:9c:3d:45:f0:ec:73:43:91:4a:4a:08:00:9f: e1:cd:c6:c8:b2:95:c9:bb:b3:70:f3:0e:2d:86:4d:d0:ff:de: fc:03:86:f1 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUVrSfTMEtLOU5nhmVdmpZ78YOwCIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODA5QzY2NkNDODRGOTQyNTg4RTEwOUU2RTZDNDU0QTlD RDA1MjRFQjAeFw0yNTEwMTgxMTE1NDZaFw0yNTEwMjEyMjUxNDZaMDMxMTAvBgNV BAMTKDkzMTk2OTE1MUIxRDU5RUIwOEQxMzRFNjY2NzQ4MDM0QjU2NzAwRTQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCjGiSWC+UkJCidUiAxzMcOgPKk GSdnqCcijdvr1OHkLuU/YGowfVJstdIeMG10ViCccaOtb6gmA3ASsPkYEfh/pRO3 yFmuZ2fWXl7J+/CGjw5zTx3ZA4M99+ITKUauETmzeX5wSChzQTZt+Fa6L95BmSvw 8NuQRTi37vqO2JU2t3phkAUHmbz7Am3O3CrvwlzNTwhh3JuHl75gUESAjOaHIXaX AOf2zb/bOLqXEgYU5skFCMkFXNRO46fly+C956yaeAWDO6jjma+L02efR+1B1t0w Sc4LDrZU/Yo3lDjEEYtlFsvgObxbA26db7ZuXA2gtJhamM7JwIRgdkoORqkBAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUkxlpFRsdWesI0TTmZnSANLVnAOQwHwYDVR0j BBgwFoAUgJxmbMhPlCWI4Qnm5sRUqc0FJOswDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h NmQ1NzIwMS03ZTJmLTQ5YmItOTQxZC05ZmNhYmU4NjIzZjUvMC84MDlDNjY2Q0M4 NEY5NDI1ODhFMTA5RTZFNkM0NTRBOUNEMDUyNEVCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvODA5QzY2NkNDODRGOTQyNTg4RTEwOUU2RTZDNDU0QTlDRDA1 MjRFQi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYTZkNTcyMDEtN2UyZi00OWJiLTk0 MWQtOWZjYWJlODYyM2Y1LzAvODA5QzY2NkNDODRGOTQyNTg4RTEwOUU2RTZDNDU0 QTlDRDA1MjRFQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBANUxcIvDV6h7Ejislc8gVr5HVq/QTUbj8e8T Ci4yiP0fEJ5riZP05lu+ugT37TDfY19iedEUi2cz9Uzh/D3uYg8Qd79/bB/sqmWL CcWnMSDAyGDhL3DrSlNlVrrxt8x1KMXtPzTcPwAzifqaNQdITU31WOBD9obaKQsF HSU37h5ExCqfUT/UaZRnj6Ukxq3Q5MUwrCu/P7l7XTSmej1CYDjs/fOUncrMlhUo aIDk38abbVhS2dkzKTGxy6uFa+objv2JndSTRKJ5bIfanjFZfa8RiQ8oF8HKv0wN G3AenD1F8OxzQ5FKSggAn+HNxsiylcm7s3DzDi2GTdD/3vwDhvE= -----END CERTIFICATE-----Generated at Mon Oct 20 21:15:18 2025 by rpki-client