$ rpki-client -vvf repo-rpki.idnic.net/repo/d7ff01d0-26f9-4b20-a318-c311c267f2af/0/8A54C81A444D07051A24AACF743F01863F8129AB.mft File: 8A54C81A444D07051A24AACF743F01863F8129AB.mft (raw, json) Hash identifier: mf9fPh7jUtWE9I6bh4JY6FKV5CgXrPK56Wuhuag9vdY= Subject key identifier: 12:20:AE:D3:37:DC:B7:51:2D:84:95:70:29:61:82:83:0F:A3:0B:6E Authority key identifier: 8A:54:C8:1A:44:4D:07:05:1A:24:AA:CF:74:3F:01:86:3F:81:29:AB Certificate issuer: /CN=8A54C81A444D07051A24AACF743F01863F8129AB Certificate serial: 24EE4E754A1D893FEF633016D5A13D20904CD9A7 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8A54C81A444D07051A24AACF743F01863F8129AB.cer Subject info access: rsync://repo-rpki.idnic.net/repo/d7ff01d0-26f9-4b20-a318-c311c267f2af/0/8A54C81A444D07051A24AACF743F01863F8129AB.mft Manifest number: 02F7 Signing time: Sun 19 Oct 2025 19:50:39 +0000 Manifest this update: Sun 19 Oct 2025 19:45:39 +0000 Manifest next update: Wed 22 Oct 2025 21:26:39 +0000 Files and hashes: 1: 3130332e3136362e3135392e302f32342d3234203d3e20313431393535.roa (hash: pYma4CnUYsvh/GHuj1AR+RzC7f0+QOGrW+zKFaT9Mpo=) 2: 8A54C81A444D07051A24AACF743F01863F8129AB.crl (hash: ueKagIGaU4Wp47qwgjOQhgjKS8xr0JRVRSbi/yU2OYE=) 3: 3130332e3136362e3135382e302f32342d3234203d3e20313431393535.roa (hash: E7SXMeinhYEx1nTb2SA2Sxos/hegF9SdTdiRzIK1k28=) 4: 3130332e3136362e3135382e302f32332d3233203d3e20313431393535.roa (hash: 8iqd/DLPSKXzm6qMwrWasV0WJDuso56p2m5ElmgcTDA=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/d7ff01d0-26f9-4b20-a318-c311c267f2af/0/8A54C81A444D07051A24AACF743F01863F8129AB.crl rsync://repo-rpki.idnic.net/repo/d7ff01d0-26f9-4b20-a318-c311c267f2af/0/8A54C81A444D07051A24AACF743F01863F8129AB.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8A54C81A444D07051A24AACF743F01863F8129AB.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 Oct 2025 21:26:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 24:ee:4e:75:4a:1d:89:3f:ef:63:30:16:d5:a1:3d:20:90:4c:d9:a7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8A54C81A444D07051A24AACF743F01863F8129AB Validity Not Before: Oct 19 19:45:39 2025 GMT Not After : Oct 22 21:26:39 2025 GMT Subject: CN=1220AED337DCB7512D849570296182830FA30B6E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:32:12:81:38:d9:e0:e8:5a:73:ab:d4:9c:81: f7:91:84:97:7b:70:3f:20:23:51:48:54:86:ba:8d: 69:92:43:f4:89:40:5f:02:bd:f9:6f:f0:98:b6:da: 57:5d:f3:52:cb:c1:c2:90:ae:38:67:ef:98:ae:af: 63:be:d3:1e:c6:a2:d4:34:8f:0c:8c:8b:20:44:13: f0:ce:47:7a:d7:59:cc:6d:14:19:a8:4d:57:20:da: 96:58:2b:31:2f:8c:c9:ed:e3:14:1c:58:bc:39:09: 4d:df:80:e5:41:2c:2c:07:35:b7:b4:79:f2:7e:19: aa:df:54:49:0b:ab:c9:bd:52:b3:32:ca:7f:d0:1a: 70:e5:81:42:46:b7:34:6e:83:64:87:01:70:1f:25: 01:76:55:40:0d:30:fe:7d:7f:f5:3b:60:77:c0:80: f1:41:cc:57:2c:8b:2b:33:8b:13:c0:08:d9:b5:65: 7a:cc:6a:b5:f3:92:9d:7b:11:64:d3:31:3c:26:0c: 91:25:cc:c9:4a:43:0d:cc:e6:75:6e:5a:08:f2:ce: f7:99:ec:aa:06:a5:60:d2:d5:9e:a2:7b:e0:5c:80: 1d:79:48:a7:e7:5c:5d:f3:63:b7:fe:85:4d:15:6a: 15:64:d7:30:3d:a8:8c:9c:c5:df:0f:32:51:e6:42: 83:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:20:AE:D3:37:DC:B7:51:2D:84:95:70:29:61:82:83:0F:A3:0B:6E X509v3 Authority Key Identifier: keyid:8A:54:C8:1A:44:4D:07:05:1A:24:AA:CF:74:3F:01:86:3F:81:29:AB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/d7ff01d0-26f9-4b20-a318-c311c267f2af/0/8A54C81A444D07051A24AACF743F01863F8129AB.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8A54C81A444D07051A24AACF743F01863F8129AB.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d7ff01d0-26f9-4b20-a318-c311c267f2af/0/8A54C81A444D07051A24AACF743F01863F8129AB.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 04:90:02:0d:f8:bb:96:a9:f2:8d:12:c8:52:54:ff:24:84:f8: 69:62:2d:49:f0:d2:96:27:1f:27:7a:80:d1:5f:3e:4b:d0:07: 58:14:d2:64:ef:c8:43:fe:ba:f1:70:01:79:16:b8:61:c3:f0: 23:04:35:59:54:0c:ce:70:c0:08:ef:01:ef:87:73:55:58:60: da:ea:91:32:55:90:a0:a1:ee:b6:f5:b6:b6:ff:fc:ae:44:19: 06:70:c6:cc:c5:a5:b1:bf:f3:e7:a4:7a:8c:7a:c8:93:42:0c: 35:9f:91:60:46:94:98:6b:a7:9b:ea:3e:b3:31:07:15:d3:76: 0c:ce:1a:48:9b:dc:be:55:71:4c:ba:ef:6f:96:c2:2f:7b:75: 18:a2:cc:37:dc:81:60:17:7f:64:4c:cc:1f:22:af:0e:96:1a: 3f:40:ce:83:3b:53:8c:2f:08:98:61:6e:4b:ad:ba:eb:38:e0: 84:9f:05:db:f8:39:52:96:b2:7e:01:83:0a:35:a8:f2:88:cb: 77:a0:8d:b9:ab:a1:6d:fc:20:05:11:46:2c:48:fa:06:45:4d: d7:65:3a:db:21:df:e3:83:6c:7e:b5:a9:6c:7a:f4:1a:e1:5d: 16:9d:3c:a0:fc:9c:ed:a9:fa:39:36:54:65:7d:12:37:e1:6d: 75:1e:86:83 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUJO5OdUodiT/vYzAW1aE9IJBM2acwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEE1NEM4MUE0NDREMDcwNTFBMjRBQUNGNzQzRjAxODYz RjgxMjlBQjAeFw0yNTEwMTkxOTQ1MzlaFw0yNTEwMjIyMTI2MzlaMDMxMTAvBgNV BAMTKDEyMjBBRUQzMzdEQ0I3NTEyRDg0OTU3MDI5NjE4MjgzMEZBMzBCNkUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDBMhKBONng6Fpzq9ScgfeRhJd7 cD8gI1FIVIa6jWmSQ/SJQF8Cvflv8Ji22ldd81LLwcKQrjhn75iur2O+0x7GotQ0 jwyMiyBEE/DOR3rXWcxtFBmoTVcg2pZYKzEvjMnt4xQcWLw5CU3fgOVBLCwHNbe0 efJ+GarfVEkLq8m9UrMyyn/QGnDlgUJGtzRug2SHAXAfJQF2VUANMP59f/U7YHfA gPFBzFcsiyszixPACNm1ZXrMarXzkp17EWTTMTwmDJElzMlKQw3M5nVuWgjyzveZ 7KoGpWDS1Z6ie+BcgB15SKfnXF3zY7f+hU0VahVk1zA9qIycxd8PMlHmQoOdAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUEiCu0zfct1EthJVwKWGCgw+jC24wHwYDVR0j BBgwFoAUilTIGkRNBwUaJKrPdD8Bhj+BKaswDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k N2ZmMDFkMC0yNmY5LTRiMjAtYTMxOC1jMzExYzI2N2YyYWYvMC84QTU0QzgxQTQ0 NEQwNzA1MUEyNEFBQ0Y3NDNGMDE4NjNGODEyOUFCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOEE1NEM4MUE0NDREMDcwNTFBMjRBQUNGNzQzRjAxODYzRjgx MjlBQi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZDdmZjAxZDAtMjZmOS00YjIwLWEz MTgtYzMxMWMyNjdmMmFmLzAvOEE1NEM4MUE0NDREMDcwNTFBMjRBQUNGNzQzRjAx ODYzRjgxMjlBQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAASQAg34u5ap8o0SyFJU/ySE+GliLUnw0pYn Hyd6gNFfPkvQB1gU0mTvyEP+uvFwAXkWuGHD8CMENVlUDM5wwAjvAe+Hc1VYYNrq kTJVkKCh7rb1trb//K5EGQZwxszFpbG/8+ekeox6yJNCDDWfkWBGlJhrp5vqPrMx BxXTdgzOGkib3L5VcUy672+Wwi97dRiizDfcgWAXf2RMzB8irw6WGj9AzoM7U4wv CJhhbkutuus44ISfBdv4OVKWsn4Bgwo1qPKIy3egjbmroW38IAURRixI+gZFTddl Otsh3+ODbH61qWx69BrhXRadPKD8nO2p+jk2VGV9EjfhbXUehoM= -----END CERTIFICATE-----Generated at Mon Oct 20 12:34:18 2025 by rpki-client