$ rpki-client -vvf repo-rpki.idnic.net/repo/ca96f458-ce5e-41a2-a232-9964f4988a06/0/0D800491C03BFB579D58FFC7A24CAA8710845A9C.mft File: 0D800491C03BFB579D58FFC7A24CAA8710845A9C.mft (raw, json) Hash identifier: 7i4hl/nmLZ/in8Ra3BNoKZ5V9zcNYuHjEFuLtNa8lR8= Subject key identifier: EB:E5:98:2F:A3:5D:EC:75:8E:76:47:00:C0:40:B1:AD:11:18:B4:F9 Authority key identifier: 0D:80:04:91:C0:3B:FB:57:9D:58:FF:C7:A2:4C:AA:87:10:84:5A:9C Certificate issuer: /CN=0D800491C03BFB579D58FFC7A24CAA8710845A9C Certificate serial: 3D0198029DB61BA415A8294EBC63161C037F6BA4 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0D800491C03BFB579D58FFC7A24CAA8710845A9C.cer Subject info access: rsync://repo-rpki.idnic.net/repo/ca96f458-ce5e-41a2-a232-9964f4988a06/0/0D800491C03BFB579D58FFC7A24CAA8710845A9C.mft Manifest number: 0140 Signing time: Sat 18 Oct 2025 08:31:25 +0000 Manifest this update: Sat 18 Oct 2025 08:26:25 +0000 Manifest next update: Tue 21 Oct 2025 18:55:25 +0000 Files and hashes: 1: 3130332e3134342e3132382e302f32342d3234203d3e20313339343333.roa (hash: DWfEMEPWxsUozNiwbgr8ihU7QhgizyAKxGEXUL32Nzc=) 2: 0D800491C03BFB579D58FFC7A24CAA8710845A9C.crl (hash: 2Mt6D7GmJC2rfwpDGKzwjtDFmLHlfYnenvkC5+TUmGU=) 3: 3130332e3134342e3132392e302f32342d3234203d3e20313339343333.roa (hash: vmmdKTzGdj+WW7oR5Y7BlF5cHcjcyn2ZeY0vBD9tiWM=) 4: 3130332e3134342e3132382e302f32332d3233203d3e20313339343333.roa (hash: +5s73n1GRDKOs1PLsu8AmlmjjmE1TE3hQKNaKdkD1e0=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/ca96f458-ce5e-41a2-a232-9964f4988a06/0/0D800491C03BFB579D58FFC7A24CAA8710845A9C.crl rsync://repo-rpki.idnic.net/repo/ca96f458-ce5e-41a2-a232-9964f4988a06/0/0D800491C03BFB579D58FFC7A24CAA8710845A9C.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0D800491C03BFB579D58FFC7A24CAA8710845A9C.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 21 Oct 2025 18:55:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3d:01:98:02:9d:b6:1b:a4:15:a8:29:4e:bc:63:16:1c:03:7f:6b:a4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0D800491C03BFB579D58FFC7A24CAA8710845A9C Validity Not Before: Oct 18 08:26:25 2025 GMT Not After : Oct 21 18:55:25 2025 GMT Subject: CN=EBE5982FA35DEC758E764700C040B1AD1118B4F9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:b9:2c:1f:53:23:02:1f:ec:76:73:db:96:b1: bb:74:cb:e6:29:27:d5:c5:d9:99:d2:d9:80:54:06: 55:7b:eb:c7:16:63:e2:cf:7a:74:5a:c8:08:a5:32: 17:49:8c:7a:0c:ef:e3:08:58:9d:a2:26:66:c8:f0: f5:3f:5c:c0:0e:d5:4d:b6:b6:c8:38:2f:da:18:5a: 3f:5c:09:38:a1:1c:1e:b2:a4:bc:f0:dc:99:e0:4b: 1b:bd:5e:72:d0:13:41:58:4a:48:7e:ca:53:c9:a0: e4:d7:06:b9:d7:d3:cf:46:a9:ca:91:8f:d3:04:9a: 49:ca:34:1c:a2:14:3b:25:da:4f:3f:75:50:d5:58: f7:a7:13:58:ee:43:dc:85:60:c9:a3:da:0a:1d:a9: 49:2d:ba:0e:39:7a:f3:09:08:70:f1:57:37:51:91: dd:2b:84:55:42:a1:44:39:85:4b:56:bf:73:f8:0c: 48:4c:ab:22:86:73:b2:c8:1a:64:09:3e:73:d0:c5: 75:38:b7:0d:db:aa:4c:24:5b:66:bb:7f:ae:86:46: 85:15:2b:bd:c1:4b:e3:d2:7e:81:c1:2b:7c:12:ed: 21:61:ac:42:e9:10:fb:77:b5:85:21:f5:6f:d9:10: 7e:9b:ca:7b:09:4b:a1:88:7d:9f:59:7e:d6:dd:14: b2:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EB:E5:98:2F:A3:5D:EC:75:8E:76:47:00:C0:40:B1:AD:11:18:B4:F9 X509v3 Authority Key Identifier: keyid:0D:80:04:91:C0:3B:FB:57:9D:58:FF:C7:A2:4C:AA:87:10:84:5A:9C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/ca96f458-ce5e-41a2-a232-9964f4988a06/0/0D800491C03BFB579D58FFC7A24CAA8710845A9C.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0D800491C03BFB579D58FFC7A24CAA8710845A9C.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ca96f458-ce5e-41a2-a232-9964f4988a06/0/0D800491C03BFB579D58FFC7A24CAA8710845A9C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 34:18:f5:fd:b6:2a:8d:f6:a5:4d:de:5e:49:74:c9:75:58:ff: b2:3b:00:08:26:51:60:58:5a:53:a9:71:1e:9d:05:ea:6b:c3: fc:0a:4c:4c:48:bf:de:39:4f:6d:af:fa:74:54:60:c4:0b:4c: 58:0e:fa:4e:ad:e7:c5:e3:70:8a:e0:e2:79:ba:4c:bf:23:0f: 71:58:48:0f:dd:47:5a:b3:80:af:0a:f2:6f:d7:89:d3:bf:57: 59:fa:5b:c1:f8:7a:57:d9:7a:3a:82:70:14:9e:8a:0a:96:b2: 80:9c:b9:a2:ed:07:23:c0:36:2a:ee:15:70:97:56:fc:72:32: f8:7b:12:6a:c5:84:0f:da:c5:b6:39:92:48:eb:96:04:7c:ab: 98:af:00:0b:68:0a:b2:54:79:dc:3a:ee:79:b1:98:8d:05:f5: f3:f7:fd:7d:94:76:6e:76:a6:ed:ad:d5:e0:09:ab:36:85:9f: d1:c9:e7:ac:ae:09:28:d3:80:47:d2:f3:4e:d5:74:7f:cf:dd: 3f:60:d3:22:a6:ba:7f:6f:9c:20:e1:2c:28:a6:af:90:4c:3f: 5d:bb:d4:ae:92:2a:9d:2b:87:e1:0e:68:b1:5c:ee:d5:c0:54: 93:74:8f:ed:ed:7d:cc:38:bd:a2:b9:fd:92:9a:71:31:e2:f6: c6:04:e0:ee -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUPQGYAp22G6QVqClOvGMWHAN/a6QwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMEQ4MDA0OTFDMDNCRkI1NzlENThGRkM3QTI0Q0FBODcx MDg0NUE5QzAeFw0yNTEwMTgwODI2MjVaFw0yNTEwMjExODU1MjVaMDMxMTAvBgNV BAMTKEVCRTU5ODJGQTM1REVDNzU4RTc2NDcwMEMwNDBCMUFEMTExOEI0RjkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCeuSwfUyMCH+x2c9uWsbt0y+Yp J9XF2ZnS2YBUBlV768cWY+LPenRayAilMhdJjHoM7+MIWJ2iJmbI8PU/XMAO1U22 tsg4L9oYWj9cCTihHB6ypLzw3JngSxu9XnLQE0FYSkh+ylPJoOTXBrnX089GqcqR j9MEmknKNByiFDsl2k8/dVDVWPenE1juQ9yFYMmj2godqUktug45evMJCHDxVzdR kd0rhFVCoUQ5hUtWv3P4DEhMqyKGc7LIGmQJPnPQxXU4tw3bqkwkW2a7f66GRoUV K73BS+PSfoHBK3wS7SFhrELpEPt3tYUh9W/ZEH6bynsJS6GIfZ9ZftbdFLI/AgMB AAGjggI8MIICODAdBgNVHQ4EFgQU6+WYL6Nd7HWOdkcAwECxrREYtPkwHwYDVR0j BBgwFoAUDYAEkcA7+1edWP/HokyqhxCEWpwwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j YTk2ZjQ1OC1jZTVlLTQxYTItYTIzMi05OTY0ZjQ5ODhhMDYvMC8wRDgwMDQ5MUMw M0JGQjU3OUQ1OEZGQzdBMjRDQUE4NzEwODQ1QTlDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMEQ4MDA0OTFDMDNCRkI1NzlENThGRkM3QTI0Q0FBODcxMDg0 NUE5Qy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vY2E5NmY0NTgtY2U1ZS00MWEyLWEy MzItOTk2NGY0OTg4YTA2LzAvMEQ4MDA0OTFDMDNCRkI1NzlENThGRkM3QTI0Q0FB ODcxMDg0NUE5Qy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADQY9f22Ko32pU3eXkl0yXVY/7I7AAgmUWBY WlOpcR6dBeprw/wKTExIv945T22v+nRUYMQLTFgO+k6t58XjcIrg4nm6TL8jD3FY SA/dR1qzgK8K8m/XidO/V1n6W8H4elfZejqCcBSeigqWsoCcuaLtByPANiruFXCX VvxyMvh7EmrFhA/axbY5kkjrlgR8q5ivAAtoCrJUedw67nmxmI0F9fP3/X2Udm52 pu2t1eAJqzaFn9HJ56yuCSjTgEfS807VdH/P3T9g0yKmun9vnCDhLCimr5BMP127 1K6SKp0rh+EOaLFc7tXAVJN0j+3tfcw4vaK5/ZKacTHi9sYE4O4= -----END CERTIFICATE-----Generated at Mon Oct 20 13:55:40 2025 by rpki-client