$ rpki-client -vvf repo-rpki.idnic.net/repo/d7dd2519-3078-47d3-9e86-48fd3bde76c8/1/A8E6492B5EFE9362C2CCDB1C25DA022A2E157782.mft File: A8E6492B5EFE9362C2CCDB1C25DA022A2E157782.mft (raw, json) Hash identifier: DRK+Tiyj+oiHfx8pLXSq5Jv2uYcNuk+RVGCaV2PKJBE= Subject key identifier: 2B:3F:52:AE:35:1D:EF:BE:7C:7A:04:1C:81:91:96:1E:4B:A4:5E:A9 Authority key identifier: A8:E6:49:2B:5E:FE:93:62:C2:CC:DB:1C:25:DA:02:2A:2E:15:77:82 Certificate issuer: /CN=A8E6492B5EFE9362C2CCDB1C25DA022A2E157782 Certificate serial: 5298E5B13B6D467FAB31BDA9FBF269F8FCD93AAF Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A8E6492B5EFE9362C2CCDB1C25DA022A2E157782.cer Subject info access: rsync://repo-rpki.idnic.net/repo/d7dd2519-3078-47d3-9e86-48fd3bde76c8/1/A8E6492B5EFE9362C2CCDB1C25DA022A2E157782.mft Manifest number: 96 Signing time: Mon 20 Oct 2025 18:50:46 +0000 Manifest this update: Mon 20 Oct 2025 18:45:46 +0000 Manifest next update: Thu 23 Oct 2025 23:35:46 +0000 Files and hashes: 1: A8E6492B5EFE9362C2CCDB1C25DA022A2E157782.crl (hash: bjyYeHz6NEvsifze1NhedooyoAk+3xUzYdqg72bMlDc=) 2: 323030313a6466333a643163303a3a2f34382d3438203d3e20313532373538.roa (hash: nvp6aBQxjtptGYgUeLEHjxMFltaz+YvY0H1/2W6JEXw=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/d7dd2519-3078-47d3-9e86-48fd3bde76c8/1/A8E6492B5EFE9362C2CCDB1C25DA022A2E157782.crl rsync://repo-rpki.idnic.net/repo/d7dd2519-3078-47d3-9e86-48fd3bde76c8/1/A8E6492B5EFE9362C2CCDB1C25DA022A2E157782.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A8E6492B5EFE9362C2CCDB1C25DA022A2E157782.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 Oct 2025 11:48:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 52:98:e5:b1:3b:6d:46:7f:ab:31:bd:a9:fb:f2:69:f8:fc:d9:3a:af Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A8E6492B5EFE9362C2CCDB1C25DA022A2E157782 Validity Not Before: Oct 20 18:45:46 2025 GMT Not After : Oct 23 23:35:46 2025 GMT Subject: CN=2B3F52AE351DEFBE7C7A041C8191961E4BA45EA9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:e5:43:c3:af:85:cc:7e:9c:5b:98:24:18:5d: d3:67:03:40:fe:5b:60:ec:38:4e:b5:5b:c7:12:a4: f6:3a:b0:2b:ae:0b:42:09:d0:ac:a9:30:18:b3:ed: c9:c7:95:4f:2b:94:ae:ad:a6:08:89:92:79:41:a0: 5b:84:c8:30:a1:3d:1b:12:0e:71:37:bd:be:62:00: 8e:17:6e:83:cb:fc:74:32:c6:f5:7d:e9:a3:be:df: b7:f2:17:2d:bc:78:98:63:62:b0:34:24:93:77:58: d5:be:ce:bd:92:8a:15:79:a3:d3:ee:e1:cd:d9:90: 26:ee:ee:67:88:11:c4:7e:21:be:ae:58:7d:45:37: 39:3e:e7:6b:17:a4:57:ab:a7:7c:b5:0b:14:4c:7e: 26:19:27:a5:bc:b0:10:84:c8:00:21:89:7e:a4:e6: e2:a4:48:f1:5d:b1:3f:81:75:37:ef:3e:ff:03:2e: ed:ee:de:b7:50:75:e1:1d:5a:d5:8e:5f:d1:20:31: 5c:c8:92:d9:9a:6f:c0:b3:65:88:19:b8:e9:e6:18: fe:c4:56:7b:fb:8b:37:a5:cc:9e:22:ec:d4:a7:df: a7:0d:bd:9d:3a:fb:4c:2c:79:49:f3:97:60:eb:64: fb:ad:2c:4d:99:39:e4:a6:25:7f:50:67:db:6e:f5: 1a:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:3F:52:AE:35:1D:EF:BE:7C:7A:04:1C:81:91:96:1E:4B:A4:5E:A9 X509v3 Authority Key Identifier: keyid:A8:E6:49:2B:5E:FE:93:62:C2:CC:DB:1C:25:DA:02:2A:2E:15:77:82 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/d7dd2519-3078-47d3-9e86-48fd3bde76c8/1/A8E6492B5EFE9362C2CCDB1C25DA022A2E157782.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A8E6492B5EFE9362C2CCDB1C25DA022A2E157782.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d7dd2519-3078-47d3-9e86-48fd3bde76c8/1/A8E6492B5EFE9362C2CCDB1C25DA022A2E157782.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c2:dd:6b:25:75:92:47:d2:c3:39:fd:42:de:09:c8:76:9d:84: 08:f2:6b:db:41:a3:fa:b4:54:82:53:7e:5a:7d:1c:17:68:d6: e2:bb:9b:e2:d8:85:63:04:a0:3e:26:ed:02:f7:15:12:6e:f6: f7:ee:65:82:19:cf:09:92:61:c6:e6:da:6a:7b:02:e7:a1:ea: ba:7b:a6:98:1f:5f:09:1b:79:d1:d4:fa:88:73:42:80:bc:d8: ca:75:3c:36:a7:24:26:80:d3:e6:4e:27:4d:bd:e7:ac:c6:d7: a4:61:3b:99:2f:aa:43:20:a0:4d:62:56:3a:9b:e1:8f:23:a0: 6e:d9:2c:05:d1:45:f1:39:c4:25:93:21:60:c3:10:e1:12:a3: d2:9f:48:b9:ce:4f:ad:d6:38:ad:ab:6d:c7:40:f0:fd:40:2e: b3:6f:94:52:ff:b2:4a:72:d3:d2:64:3c:a5:53:ad:16:0b:0e: 21:a5:4c:3c:0c:09:5c:7d:03:7c:04:95:4a:a5:ff:6c:ad:c3: 40:c3:2f:ca:fa:7b:59:60:40:f4:8e:c0:8a:2d:4b:f0:19:33: d0:ae:a4:4c:20:05:6e:17:2c:f1:11:0b:18:bd:26:02:da:24: 4b:b4:87:1b:07:b0:41:fc:6c:b3:35:b6:9a:07:9d:3f:ec:09: 8f:41:a1:b5 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUUpjlsTttRn+rMb2p+/Jp+PzZOq8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQThFNjQ5MkI1RUZFOTM2MkMyQ0NEQjFDMjVEQTAyMkEy RTE1Nzc4MjAeFw0yNTEwMjAxODQ1NDZaFw0yNTEwMjMyMzM1NDZaMDMxMTAvBgNV BAMTKDJCM0Y1MkFFMzUxREVGQkU3QzdBMDQxQzgxOTE5NjFFNEJBNDVFQTkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC05UPDr4XMfpxbmCQYXdNnA0D+ W2DsOE61W8cSpPY6sCuuC0IJ0KypMBiz7cnHlU8rlK6tpgiJknlBoFuEyDChPRsS DnE3vb5iAI4XboPL/HQyxvV96aO+37fyFy28eJhjYrA0JJN3WNW+zr2SihV5o9Pu 4c3ZkCbu7meIEcR+Ib6uWH1FNzk+52sXpFerp3y1CxRMfiYZJ6W8sBCEyAAhiX6k 5uKkSPFdsT+BdTfvPv8DLu3u3rdQdeEdWtWOX9EgMVzIktmab8CzZYgZuOnmGP7E Vnv7izelzJ4i7NSn36cNvZ06+0wseUnzl2DrZPutLE2ZOeSmJX9QZ9tu9Rr9AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUKz9SrjUd7758egQcgZGWHkukXqkwHwYDVR0j BBgwFoAUqOZJK17+k2LCzNscJdoCKi4Vd4IwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k N2RkMjUxOS0zMDc4LTQ3ZDMtOWU4Ni00OGZkM2JkZTc2YzgvMS9BOEU2NDkyQjVF RkU5MzYyQzJDQ0RCMUMyNURBMDIyQTJFMTU3NzgyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQThFNjQ5MkI1RUZFOTM2MkMyQ0NEQjFDMjVEQTAyMkEyRTE1 Nzc4Mi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZDdkZDI1MTktMzA3OC00N2QzLTll ODYtNDhmZDNiZGU3NmM4LzEvQThFNjQ5MkI1RUZFOTM2MkMyQ0NEQjFDMjVEQTAy MkEyRTE1Nzc4Mi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAMLdayV1kkfSwzn9Qt4JyHadhAjya9tBo/q0 VIJTflp9HBdo1uK7m+LYhWMEoD4m7QL3FRJu9vfuZYIZzwmSYcbm2mp7Aueh6rp7 ppgfXwkbedHU+ohzQoC82Mp1PDanJCaA0+ZOJ02956zG16RhO5kvqkMgoE1iVjqb 4Y8joG7ZLAXRRfE5xCWTIWDDEOESo9KfSLnOT63WOK2rbcdA8P1ALrNvlFL/skpy 09JkPKVTrRYLDiGlTDwMCVx9A3wElUql/2ytw0DDL8r6e1lgQPSOwIotS/AZM9Cu pEwgBW4XLPERCxi9JgLaJEu0hxsHsEH8bLM1tpoHnT/sCY9BobU= -----END CERTIFICATE-----Generated at Mon Oct 20 20:28:16 2025 by rpki-client