$ rpki-client -vvf repo-rpki.idnic.net/repo/f0a929c6-1e25-494a-b0f9-55fc4fc94fbc/0/8A0F7659BE6C916702994F1B653CA6335CF48F9F.mft File: 8A0F7659BE6C916702994F1B653CA6335CF48F9F.mft (raw, json) Hash identifier: xN339pr4RyyZtVPytKNpl6X3AOKp8f5oSDZvmRYVJjA= Subject key identifier: 31:C6:DA:FE:EE:84:3F:D6:06:32:87:D7:10:FB:F2:CB:7D:F2:6A:43 Authority key identifier: 8A:0F:76:59:BE:6C:91:67:02:99:4F:1B:65:3C:A6:33:5C:F4:8F:9F Certificate issuer: /CN=8A0F7659BE6C916702994F1B653CA6335CF48F9F Certificate serial: 16B3BD54DBE363DAECE0F9048ECC0B4F79628612 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8A0F7659BE6C916702994F1B653CA6335CF48F9F.cer Subject info access: rsync://repo-rpki.idnic.net/repo/f0a929c6-1e25-494a-b0f9-55fc4fc94fbc/0/8A0F7659BE6C916702994F1B653CA6335CF48F9F.mft Manifest number: 0404 Signing time: Mon 20 Oct 2025 00:42:06 +0000 Manifest this update: Mon 20 Oct 2025 00:37:06 +0000 Manifest next update: Thu 23 Oct 2025 03:17:06 +0000 Files and hashes: 1: 323430343a3530303a3a2f33322d3438203d3e203234323031.roa (hash: ZncYvkH3fAKDn8QBBs6vlpl5n6FCs5nY6O2LpIihUog=) 2: 8A0F7659BE6C916702994F1B653CA6335CF48F9F.crl (hash: ftCIFdhnIJF48D0IKzQCaniLE6pC5V+4VRiYYMgJkgA=) 3: 3230322e38372e3234382e302f32312d3234203d3e203234323031.roa (hash: YIGWj76AnaLSHaaCNOVsCHFGKespwS6XW2pML5MbQts=) 4: 3130332e3232382e3234302e302f32322d3234203d3e203435373030.roa (hash: q34ctZRabkzgVMwhpjzkGD0HvYBu2zTW+lnhs8q/u94=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/f0a929c6-1e25-494a-b0f9-55fc4fc94fbc/0/8A0F7659BE6C916702994F1B653CA6335CF48F9F.crl rsync://repo-rpki.idnic.net/repo/f0a929c6-1e25-494a-b0f9-55fc4fc94fbc/0/8A0F7659BE6C916702994F1B653CA6335CF48F9F.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8A0F7659BE6C916702994F1B653CA6335CF48F9F.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 Oct 2025 03:17:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 16:b3:bd:54:db:e3:63:da:ec:e0:f9:04:8e:cc:0b:4f:79:62:86:12 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8A0F7659BE6C916702994F1B653CA6335CF48F9F Validity Not Before: Oct 20 00:37:06 2025 GMT Not After : Oct 23 03:17:06 2025 GMT Subject: CN=31C6DAFEEE843FD6063287D710FBF2CB7DF26A43 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:a0:68:c9:a4:65:7e:85:ed:e0:77:80:c8:ce: 30:70:76:43:b3:08:f1:16:e0:d6:1c:04:5b:5e:06: 06:b5:87:72:97:c4:48:b0:68:b9:64:58:d5:e3:b2: ef:2f:62:e0:4a:95:e5:09:af:44:59:ca:34:b3:41: 08:0c:fc:f8:56:19:81:f4:d7:6b:c2:76:cf:cf:c3: 86:18:0a:83:8f:a5:b4:f2:85:f5:5d:de:99:f7:53: 5c:c8:0a:9d:30:7a:04:78:92:e3:1d:88:d6:a5:8a: 00:76:cf:07:5b:81:a7:00:bb:78:21:da:af:06:5c: ce:23:f2:35:1a:91:2b:85:a9:2c:43:d1:7b:4b:8b: 85:c5:52:28:a3:fd:8e:90:cb:57:cc:5d:b8:76:94: 6c:b9:c4:66:5a:11:82:b0:7a:78:eb:23:73:7e:a1: 21:18:9a:38:61:c3:35:9d:b3:8e:31:f4:77:bd:18: fa:5a:92:9f:f8:c0:62:80:4e:30:53:dc:f1:39:1d: 6b:99:14:c8:a9:5b:56:fc:83:f2:cb:44:4f:d6:d4: d9:28:d9:6d:44:f1:67:3a:b1:f7:2a:d8:a0:34:ae: ef:ad:10:4f:32:39:be:ce:7c:6f:00:e7:a2:d9:c2: e3:65:d5:89:84:a3:82:e2:ab:85:bc:2e:b0:00:6a: 68:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 31:C6:DA:FE:EE:84:3F:D6:06:32:87:D7:10:FB:F2:CB:7D:F2:6A:43 X509v3 Authority Key Identifier: keyid:8A:0F:76:59:BE:6C:91:67:02:99:4F:1B:65:3C:A6:33:5C:F4:8F:9F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/f0a929c6-1e25-494a-b0f9-55fc4fc94fbc/0/8A0F7659BE6C916702994F1B653CA6335CF48F9F.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8A0F7659BE6C916702994F1B653CA6335CF48F9F.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f0a929c6-1e25-494a-b0f9-55fc4fc94fbc/0/8A0F7659BE6C916702994F1B653CA6335CF48F9F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8f:ab:ef:93:42:55:ce:f8:ef:16:12:ac:1e:7d:fc:90:14:f7: 7e:5c:db:a3:0e:4b:46:c5:be:74:27:aa:e8:97:e4:04:7f:20: a6:02:6c:f4:c1:1b:d0:fe:1a:57:16:e8:d5:9c:5e:bc:c6:c7: fa:0d:ca:81:10:71:a6:d0:fd:da:a0:ce:d1:78:ed:4c:67:c3: 48:94:84:c7:2d:15:9e:7f:26:93:3d:33:59:15:7a:51:26:f6: 15:89:69:ce:7a:75:78:f0:a7:a2:f0:6b:53:27:8e:0b:4d:09: fb:6b:f0:89:32:27:b9:01:47:18:8d:68:22:17:42:c2:b8:5d: 80:f8:7b:35:4f:dd:42:44:a2:6e:c2:d5:18:38:15:a7:ca:41: f8:e1:0f:02:9d:3d:85:bc:25:b8:04:cb:a9:68:52:94:9c:2c: fe:97:31:5b:a3:2d:c3:61:b3:5a:52:40:05:0c:07:aa:e6:9a: a9:e4:5b:95:b3:c1:ce:62:77:56:d5:2f:82:aa:70:1f:43:84: ea:ab:d6:78:a4:b1:43:6f:61:8c:6d:c4:75:cc:0f:4d:70:8c: f0:b9:ca:ca:e3:90:6a:bb:42:7c:45:84:fc:21:df:14:14:9d: 31:0a:f4:2b:b8:dd:71:10:bf:61:91:94:0c:04:c2:14:5c:fc: b2:e1:87:be -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUFrO9VNvjY9rs4PkEjswLT3lihhIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEEwRjc2NTlCRTZDOTE2NzAyOTk0RjFCNjUzQ0E2MzM1 Q0Y0OEY5RjAeFw0yNTEwMjAwMDM3MDZaFw0yNTEwMjMwMzE3MDZaMDMxMTAvBgNV BAMTKDMxQzZEQUZFRUU4NDNGRDYwNjMyODdENzEwRkJGMkNCN0RGMjZBNDMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCroGjJpGV+he3gd4DIzjBwdkOz CPEW4NYcBFteBga1h3KXxEiwaLlkWNXjsu8vYuBKleUJr0RZyjSzQQgM/PhWGYH0 12vCds/Pw4YYCoOPpbTyhfVd3pn3U1zICp0wegR4kuMdiNaligB2zwdbgacAu3gh 2q8GXM4j8jUakSuFqSxD0XtLi4XFUiij/Y6Qy1fMXbh2lGy5xGZaEYKwenjrI3N+ oSEYmjhhwzWds44x9He9GPpakp/4wGKATjBT3PE5HWuZFMipW1b8g/LLRE/W1Nko 2W1E8Wc6sfcq2KA0ru+tEE8yOb7OfG8A56LZwuNl1YmEo4Liq4W8LrAAamjFAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUMcba/u6EP9YGMofXEPvyy33yakMwHwYDVR0j BBgwFoAUig92Wb5skWcCmU8bZTymM1z0j58wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m MGE5MjljNi0xZTI1LTQ5NGEtYjBmOS01NWZjNGZjOTRmYmMvMC84QTBGNzY1OUJF NkM5MTY3MDI5OTRGMUI2NTNDQTYzMzVDRjQ4RjlGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOEEwRjc2NTlCRTZDOTE2NzAyOTk0RjFCNjUzQ0E2MzM1Q0Y0 OEY5Ri5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZjBhOTI5YzYtMWUyNS00OTRhLWIw ZjktNTVmYzRmYzk0ZmJjLzAvOEEwRjc2NTlCRTZDOTE2NzAyOTk0RjFCNjUzQ0E2 MzM1Q0Y0OEY5Ri5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAI+r75NCVc747xYSrB59/JAU935c26MOS0bF vnQnquiX5AR/IKYCbPTBG9D+GlcW6NWcXrzGx/oNyoEQcabQ/dqgztF47Uxnw0iU hMctFZ5/JpM9M1kVelEm9hWJac56dXjwp6Lwa1MnjgtNCftr8IkyJ7kBRxiNaCIX QsK4XYD4ezVP3UJEom7C1Rg4FafKQfjhDwKdPYW8JbgEy6loUpScLP6XMVujLcNh s1pSQAUMB6rmmqnkW5Wzwc5id1bVL4KqcB9DhOqr1niksUNvYYxtxHXMD01wjPC5 ysrjkGq7QnxFhPwh3xQUnTEK9Cu43XEQv2GRlAwEwhRc/LLhh74= -----END CERTIFICATE-----Generated at Mon Oct 20 15:32:34 2025 by rpki-client