$ rpki-client -vvf repo-rpki.idnic.net/repo/f04e97d3-71c3-4d0a-8b04-7088fe382bc3/0/082F7822D1C63E1ED5DA833913215FE68925FF6E.mft File: 082F7822D1C63E1ED5DA833913215FE68925FF6E.mft (raw, json) Hash identifier: M/H1h9Y+gmpWYS5Zwno1x8EkBs08mjRmm/Md26snBxY= Subject key identifier: 36:81:19:0D:2F:6E:F5:8C:C0:63:6C:DF:3E:FF:38:57:84:7F:BA:4F Authority key identifier: 08:2F:78:22:D1:C6:3E:1E:D5:DA:83:39:13:21:5F:E6:89:25:FF:6E Certificate issuer: /CN=082F7822D1C63E1ED5DA833913215FE68925FF6E Certificate serial: 4A773D722CECA052ABFD2F7143298DF0D3CD4A8C Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/082F7822D1C63E1ED5DA833913215FE68925FF6E.cer Subject info access: rsync://repo-rpki.idnic.net/repo/f04e97d3-71c3-4d0a-8b04-7088fe382bc3/0/082F7822D1C63E1ED5DA833913215FE68925FF6E.mft Manifest number: 0353 Signing time: Sat 18 Oct 2025 09:10:37 +0000 Manifest this update: Sat 18 Oct 2025 09:05:37 +0000 Manifest next update: Tue 21 Oct 2025 15:21:37 +0000 Files and hashes: 1: 3130332e3137322e3131382e302f32332d3234203d3e20313432333935.roa (hash: HP+xeHwMe/Q1Tf4Xq/63+A27OrwucM8iR00HxSt8dQE=) 2: 082F7822D1C63E1ED5DA833913215FE68925FF6E.crl (hash: 2lqC3TQsYySMOfgg8ynKqR+DwzTWzlpsUtKG4VMH3ro=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/f04e97d3-71c3-4d0a-8b04-7088fe382bc3/0/082F7822D1C63E1ED5DA833913215FE68925FF6E.crl rsync://repo-rpki.idnic.net/repo/f04e97d3-71c3-4d0a-8b04-7088fe382bc3/0/082F7822D1C63E1ED5DA833913215FE68925FF6E.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/082F7822D1C63E1ED5DA833913215FE68925FF6E.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 21 Oct 2025 15:21:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4a:77:3d:72:2c:ec:a0:52:ab:fd:2f:71:43:29:8d:f0:d3:cd:4a:8c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=082F7822D1C63E1ED5DA833913215FE68925FF6E Validity Not Before: Oct 18 09:05:37 2025 GMT Not After : Oct 21 15:21:37 2025 GMT Subject: CN=3681190D2F6EF58CC0636CDF3EFF3857847FBA4F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:39:89:e1:c7:97:a2:19:88:5e:23:73:f6:d0: 5c:47:e6:03:89:ab:1c:d3:0d:c3:cb:a6:5d:fd:dc: 85:55:be:73:5f:49:71:e6:13:83:41:21:58:bf:b8: c0:e2:26:18:93:83:de:00:31:7e:26:46:37:70:bc: b0:4b:df:2f:5a:40:df:fb:0c:6d:0d:48:7c:60:04: 5f:05:b1:32:39:9f:62:6f:62:e2:a5:fe:b8:34:c7: 96:b6:89:39:db:74:77:89:aa:b1:60:57:1e:02:41: 01:ae:0b:a4:8a:2d:3d:9f:18:9f:2c:c7:b1:5c:ad: 3a:7c:cf:5c:34:5b:c3:ec:4d:28:33:6f:f6:92:cd: fc:dd:d7:d0:61:3a:69:d3:cb:ad:33:d6:d3:47:c8: 33:45:dc:1f:7f:51:cf:65:b8:63:2c:8f:d5:d6:ff: 21:aa:2a:bf:4f:8a:8b:06:88:e6:e6:59:9a:1f:7c: 53:9f:8c:51:ac:8b:d2:2d:90:15:e6:92:32:d9:3b: b5:f2:90:44:aa:43:d5:ed:8f:e2:b7:2a:20:3b:c4: 2d:14:84:38:3c:8c:2c:fa:ac:e7:35:34:01:50:eb: bf:82:6b:8a:c2:6e:c2:20:80:a0:f6:35:ef:e4:97: 04:df:8f:ee:dd:a3:39:e9:54:23:57:c8:96:79:9a: f0:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 36:81:19:0D:2F:6E:F5:8C:C0:63:6C:DF:3E:FF:38:57:84:7F:BA:4F X509v3 Authority Key Identifier: keyid:08:2F:78:22:D1:C6:3E:1E:D5:DA:83:39:13:21:5F:E6:89:25:FF:6E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/f04e97d3-71c3-4d0a-8b04-7088fe382bc3/0/082F7822D1C63E1ED5DA833913215FE68925FF6E.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/082F7822D1C63E1ED5DA833913215FE68925FF6E.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f04e97d3-71c3-4d0a-8b04-7088fe382bc3/0/082F7822D1C63E1ED5DA833913215FE68925FF6E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1f:90:8f:88:82:4b:24:ba:7f:8e:c4:5c:f4:a5:04:71:1e:a1: 8f:a5:55:6b:e8:29:75:67:3a:bd:29:46:7c:46:a8:1f:bc:61: ba:2e:b8:fe:6b:9c:71:42:52:bc:95:38:cd:a9:da:a2:78:43: 44:44:ed:94:bf:73:b0:10:ff:20:3a:fb:9f:2f:3c:48:54:dc: 19:c6:9d:c6:5b:a4:56:e3:fa:68:1c:2d:03:c3:21:29:30:ee: 30:37:3d:be:18:df:36:96:33:69:0b:82:43:2d:b3:90:d4:37: 67:95:ff:5d:26:ca:45:b9:4c:e5:9b:7f:9b:f8:55:cc:97:0b: 4d:16:a1:ef:c1:08:24:24:fc:04:18:92:4a:1a:5f:2f:45:d0: 05:7a:a1:83:82:11:75:41:58:81:7d:a2:ff:64:e0:bd:81:57: 11:cb:fa:61:a8:39:f9:c1:c3:f8:e9:dd:91:7c:3d:a9:40:55: 0d:d3:86:06:10:75:68:48:c2:0a:91:98:75:c8:89:99:3f:28: 6e:d6:31:67:a2:ac:cf:31:1d:7e:e7:7a:b6:3d:3a:e0:9a:fa: f0:98:45:18:d1:ef:0d:c1:52:7f:06:d0:5f:11:80:c4:ea:90: cf:8f:5d:1b:64:cd:14:49:79:52:b8:79:43:92:b8:89:68:ed: 2e:55:32:40 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUSnc9cizsoFKr/S9xQymN8NPNSowwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDgyRjc4MjJEMUM2M0UxRUQ1REE4MzM5MTMyMTVGRTY4 OTI1RkY2RTAeFw0yNTEwMTgwOTA1MzdaFw0yNTEwMjExNTIxMzdaMDMxMTAvBgNV BAMTKDM2ODExOTBEMkY2RUY1OENDMDYzNkNERjNFRkYzODU3ODQ3RkJBNEYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCdOYnhx5eiGYheI3P20FxH5gOJ qxzTDcPLpl393IVVvnNfSXHmE4NBIVi/uMDiJhiTg94AMX4mRjdwvLBL3y9aQN/7 DG0NSHxgBF8FsTI5n2JvYuKl/rg0x5a2iTnbdHeJqrFgVx4CQQGuC6SKLT2fGJ8s x7FcrTp8z1w0W8PsTSgzb/aSzfzd19BhOmnTy60z1tNHyDNF3B9/Uc9luGMsj9XW /yGqKr9PiosGiObmWZoffFOfjFGsi9ItkBXmkjLZO7XykESqQ9Xtj+K3KiA7xC0U hDg8jCz6rOc1NAFQ67+Ca4rCbsIggKD2Ne/klwTfj+7doznpVCNXyJZ5mvCJAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUNoEZDS9u9YzAY2zfPv84V4R/uk8wHwYDVR0j BBgwFoAUCC94ItHGPh7V2oM5EyFf5okl/24wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m MDRlOTdkMy03MWMzLTRkMGEtOGIwNC03MDg4ZmUzODJiYzMvMC8wODJGNzgyMkQx QzYzRTFFRDVEQTgzMzkxMzIxNUZFNjg5MjVGRjZFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMDgyRjc4MjJEMUM2M0UxRUQ1REE4MzM5MTMyMTVGRTY4OTI1 RkY2RS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZjA0ZTk3ZDMtNzFjMy00ZDBhLThi MDQtNzA4OGZlMzgyYmMzLzAvMDgyRjc4MjJEMUM2M0UxRUQ1REE4MzM5MTMyMTVG RTY4OTI1RkY2RS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAB+Qj4iCSyS6f47EXPSlBHEeoY+lVWvoKXVn Or0pRnxGqB+8YbouuP5rnHFCUryVOM2p2qJ4Q0RE7ZS/c7AQ/yA6+58vPEhU3BnG ncZbpFbj+mgcLQPDISkw7jA3Pb4Y3zaWM2kLgkMts5DUN2eV/10mykW5TOWbf5v4 VcyXC00Woe/BCCQk/AQYkkoaXy9F0AV6oYOCEXVBWIF9ov9k4L2BVxHL+mGoOfnB w/jp3ZF8PalAVQ3ThgYQdWhIwgqRmHXIiZk/KG7WMWeirM8xHX7nerY9OuCa+vCY RRjR7w3BUn8G0F8RgMTqkM+PXRtkzRRJeVK4eUOSuIlo7S5VMkA= -----END CERTIFICATE-----Generated at Mon Oct 20 10:06:34 2025 by rpki-client