$ rpki-client -vvf repo-rpki.idnic.net/repo/d8b98722-1cb4-40d4-ac8b-c3bca2bca217/0/8A95FAF723EC129E336E75ACE1CD4F3094FB6481.mft File: 8A95FAF723EC129E336E75ACE1CD4F3094FB6481.mft (raw, json) Hash identifier: z0JiStjd/wzVeKQ3aT4O4RPPKZ5u6vRnff6pd7Se87M= Subject key identifier: 18:6F:DA:96:A1:9B:AD:45:A7:EE:2C:91:E9:18:25:84:ED:C4:95:23 Authority key identifier: 8A:95:FA:F7:23:EC:12:9E:33:6E:75:AC:E1:CD:4F:30:94:FB:64:81 Certificate issuer: /CN=8A95FAF723EC129E336E75ACE1CD4F3094FB6481 Certificate serial: 3DC760237B52899DF77A29C8D6ED0FD7DC316C60 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8A95FAF723EC129E336E75ACE1CD4F3094FB6481.cer Subject info access: rsync://repo-rpki.idnic.net/repo/d8b98722-1cb4-40d4-ac8b-c3bca2bca217/0/8A95FAF723EC129E336E75ACE1CD4F3094FB6481.mft Manifest number: 0462 Signing time: Sat 18 Oct 2025 13:01:26 +0000 Manifest this update: Sat 18 Oct 2025 12:56:26 +0000 Manifest next update: Tue 21 Oct 2025 22:27:26 +0000 Files and hashes: 1: 8A95FAF723EC129E336E75ACE1CD4F3094FB6481.crl (hash: t+7P9gDazTKJYKp5SBC5yvhg1xpG2g+siFshgycyo3M=) 2: 3130332e32332e32302e302f32322d3234203d3e203538333937.roa (hash: fxRWeEdUZsQcOgrNyDGJ7oXqFe+EeQD/MHcFmS1cl7s=) 3: 323030313a6466303a663830303a3a2f34382d3438203d3e203538333937.roa (hash: 8qFDAcssXXUuL7jdU+5MBpRRNuUnSR4XPXnprUszlok=) 4: 34332e3234352e3138302e302f32322d3234203d3e203538333937.roa (hash: THVSHOfDNgrFd49wZlYvuTuPkWSURiIGaUg0EUGrcPM=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/d8b98722-1cb4-40d4-ac8b-c3bca2bca217/0/8A95FAF723EC129E336E75ACE1CD4F3094FB6481.crl rsync://repo-rpki.idnic.net/repo/d8b98722-1cb4-40d4-ac8b-c3bca2bca217/0/8A95FAF723EC129E336E75ACE1CD4F3094FB6481.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8A95FAF723EC129E336E75ACE1CD4F3094FB6481.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 21 Oct 2025 22:27:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3d:c7:60:23:7b:52:89:9d:f7:7a:29:c8:d6:ed:0f:d7:dc:31:6c:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8A95FAF723EC129E336E75ACE1CD4F3094FB6481 Validity Not Before: Oct 18 12:56:26 2025 GMT Not After : Oct 21 22:27:26 2025 GMT Subject: CN=186FDA96A19BAD45A7EE2C91E9182584EDC49523 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:32:75:25:cc:c1:55:95:24:fb:5c:3f:4a:91: 10:01:d5:13:49:46:66:ea:37:ca:8f:c3:38:3f:9b: 7a:5d:4d:ac:56:22:4a:8c:ca:3a:4d:c0:6c:a1:6e: f4:a2:48:15:05:ae:84:f3:65:1b:15:62:9c:be:6e: 91:a9:34:4f:20:83:9b:1e:78:b8:f2:b9:e7:8e:63: 60:20:c5:17:9d:e4:b7:07:f3:1d:1e:2f:19:1a:f8: b8:d8:b0:ee:10:40:f7:e2:cc:a2:c2:38:e7:12:70: cf:f2:23:0e:dd:7b:82:aa:a0:96:08:18:f2:e4:24: c9:4d:7d:b0:34:d5:cb:2d:17:9e:76:2f:df:2b:b8: f5:c7:ca:64:0d:17:e7:bd:f4:de:1b:8d:bf:b5:12: cb:f8:94:f7:ee:33:a7:9f:3e:90:08:cc:a5:a8:8d: 53:56:e7:5a:99:71:8d:0c:5f:2f:d9:ec:1a:56:8c: 60:94:4f:3b:23:93:67:ec:9e:5c:fc:db:51:a8:8f: aa:3a:a3:bb:b3:89:b5:a7:24:a6:df:95:03:5c:1c: 76:19:4f:e1:85:60:56:a2:69:61:4b:f5:33:5f:ff: 0f:0c:b7:ab:50:41:92:8b:7c:e1:60:54:7f:07:26: 8b:0b:fd:03:a2:df:02:15:ec:a0:76:f5:9e:ae:a1: 6a:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 18:6F:DA:96:A1:9B:AD:45:A7:EE:2C:91:E9:18:25:84:ED:C4:95:23 X509v3 Authority Key Identifier: keyid:8A:95:FA:F7:23:EC:12:9E:33:6E:75:AC:E1:CD:4F:30:94:FB:64:81 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/d8b98722-1cb4-40d4-ac8b-c3bca2bca217/0/8A95FAF723EC129E336E75ACE1CD4F3094FB6481.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8A95FAF723EC129E336E75ACE1CD4F3094FB6481.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d8b98722-1cb4-40d4-ac8b-c3bca2bca217/0/8A95FAF723EC129E336E75ACE1CD4F3094FB6481.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 99:6c:ef:ff:71:49:fa:4d:8f:2c:f8:76:62:19:b5:d1:ea:c4: c9:36:ba:3b:a1:10:1c:c6:90:93:34:07:df:a5:40:4d:a8:91: bd:42:a5:69:86:34:5e:ca:ea:8c:2e:bb:71:a2:48:1b:15:76: 96:2c:e5:fe:44:30:b5:e1:43:78:90:46:32:76:f5:bf:e5:76: 8a:7f:2a:19:18:d6:1e:c6:ef:f4:54:49:28:66:aa:69:56:48: 48:93:a9:5e:69:c0:2b:38:fb:78:0d:e2:08:64:a2:03:05:31: 0f:d0:62:35:f0:f8:69:de:0f:fe:82:00:85:2e:b8:fd:64:24: 5e:0c:ff:e3:52:ea:47:c2:1d:99:33:09:7e:b2:00:1a:9a:5b: 2c:34:9f:15:b4:5a:fe:29:c5:10:aa:ca:88:76:84:f3:28:e5: b0:7e:81:30:2b:75:6b:27:04:e3:25:74:89:d6:91:b4:07:1a: ca:75:aa:60:73:0d:96:ae:89:9b:a3:6b:83:00:43:21:2b:73: 50:59:6a:74:e7:42:63:19:93:94:81:f1:a3:f8:3f:3b:80:ac: 97:31:69:c5:bf:4a:ec:8d:ef:93:f2:86:a1:bc:59:0a:9e:18: 11:06:08:37:5c:02:4a:a7:7a:e8:27:fe:e8:2d:29:fb:80:b5: 48:24:b0:a0 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUPcdgI3tSiZ33einI1u0P19wxbGAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEE5NUZBRjcyM0VDMTI5RTMzNkU3NUFDRTFDRDRGMzA5 NEZCNjQ4MTAeFw0yNTEwMTgxMjU2MjZaFw0yNTEwMjEyMjI3MjZaMDMxMTAvBgNV BAMTKDE4NkZEQTk2QTE5QkFENDVBN0VFMkM5MUU5MTgyNTg0RURDNDk1MjMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDQMnUlzMFVlST7XD9KkRAB1RNJ RmbqN8qPwzg/m3pdTaxWIkqMyjpNwGyhbvSiSBUFroTzZRsVYpy+bpGpNE8gg5se eLjyueeOY2AgxRed5LcH8x0eLxka+LjYsO4QQPfizKLCOOcScM/yIw7de4KqoJYI GPLkJMlNfbA01cstF552L98ruPXHymQNF+e99N4bjb+1Esv4lPfuM6efPpAIzKWo jVNW51qZcY0MXy/Z7BpWjGCUTzsjk2fsnlz821Goj6o6o7uzibWnJKbflQNcHHYZ T+GFYFaiaWFL9TNf/w8Mt6tQQZKLfOFgVH8HJosL/QOi3wIV7KB29Z6uoWqRAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUGG/alqGbrUWn7iyR6RglhO3ElSMwHwYDVR0j BBgwFoAUipX69yPsEp4zbnWs4c1PMJT7ZIEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k OGI5ODcyMi0xY2I0LTQwZDQtYWM4Yi1jM2JjYTJiY2EyMTcvMC84QTk1RkFGNzIz RUMxMjlFMzM2RTc1QUNFMUNENEYzMDk0RkI2NDgxLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOEE5NUZBRjcyM0VDMTI5RTMzNkU3NUFDRTFDRDRGMzA5NEZC NjQ4MS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZDhiOTg3MjItMWNiNC00MGQ0LWFj OGItYzNiY2EyYmNhMjE3LzAvOEE5NUZBRjcyM0VDMTI5RTMzNkU3NUFDRTFDRDRG MzA5NEZCNjQ4MS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJls7/9xSfpNjyz4dmIZtdHqxMk2ujuhEBzG kJM0B9+lQE2okb1CpWmGNF7K6owuu3GiSBsVdpYs5f5EMLXhQ3iQRjJ29b/ldop/ KhkY1h7G7/RUSShmqmlWSEiTqV5pwCs4+3gN4ghkogMFMQ/QYjXw+GneD/6CAIUu uP1kJF4M/+NS6kfCHZkzCX6yABqaWyw0nxW0Wv4pxRCqyoh2hPMo5bB+gTArdWsn BOMldInWkbQHGsp1qmBzDZauiZuja4MAQyErc1BZanTnQmMZk5SB8aP4PzuArJcx acW/SuyN75PyhqG8WQqeGBEGCDdcAkqneugn/ugtKfuAtUgksKA= -----END CERTIFICATE-----Generated at Mon Oct 20 09:19:42 2025 by rpki-client