$ rpki-client -vvf repo-rpki.idnic.net/repo/f9d6acc6-0af3-4b97-99a4-0f45e8ecf576/0/0A8E8E063785238467D4AD1F507CC97B30DBB959.mft File: 0A8E8E063785238467D4AD1F507CC97B30DBB959.mft (raw, json) Hash identifier: qykL+a7T5Z+by8r8QctsI6Q8xL5k4SDdYyrLclreD0o= Subject key identifier: 58:EC:8F:7B:0F:75:A6:A0:1D:FF:3C:82:CD:A4:4E:D8:6D:33:AC:F3 Authority key identifier: 0A:8E:8E:06:37:85:23:84:67:D4:AD:1F:50:7C:C9:7B:30:DB:B9:59 Certificate issuer: /CN=0A8E8E063785238467D4AD1F507CC97B30DBB959 Certificate serial: 134F39C929D8002F325C814FADE88820C15E4A1B Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0A8E8E063785238467D4AD1F507CC97B30DBB959.cer Subject info access: rsync://repo-rpki.idnic.net/repo/f9d6acc6-0af3-4b97-99a4-0f45e8ecf576/0/0A8E8E063785238467D4AD1F507CC97B30DBB959.mft Manifest number: 0180 Signing time: Sat 18 Oct 2025 18:01:18 +0000 Manifest this update: Sat 18 Oct 2025 17:56:18 +0000 Manifest next update: Tue 21 Oct 2025 20:34:18 +0000 Files and hashes: 1: 323430363a356334303a373737373a3a2f34382d3438203d3e20313331373035.roa (hash: uxf3gr1qNXj16NXsE/3S99HOdYs6kHV+q6L/TWnS+ag=) 2: 323430363a356334303a323030303a3a2f33362d3438203d3e20313331373035.roa (hash: 34w8SIWSSd8kqURH0Jn+B/R9XKBmDHxtyVWAlqGJxJo=) 3: 3130332e3135342e3137392e302f32342d3234203d3e20313331373035.roa (hash: fuYAXhPxVSs3uQDGyVoloAUdGAB1vPzhCZLoObuSwWo=) 4: 3130332e3135342e3137382e302f32342d3234203d3e20313331373035.roa (hash: dY5S+6E2tTu7kTt3kud9rHyNZ8ICT/4MYY6A5gKdkm0=) 5: 323430363a356334303a383838383a3a2f34382d3438203d3e20313331373035.roa (hash: xhrHJkeZ6ORZKPQ3ePW270bQNoXqgZH/hWdzMzXe/Ng=) 6: 323430363a356334303a3a2f33362d3438203d3e20313331373035.roa (hash: vVX9J+iIt5S0zLOqjzNP9A3DgvrDc3RqZLM36XJo31Q=) 7: 3130332e3135342e3137382e302f32332d3234203d3e20313331373035.roa (hash: z6Vlo67b6HowiJ4eNQMIImpcN0YW2LjWV36x2SeZA5M=) 8: 323430363a356334303a313030303a3a2f33362d3438203d3e20313331373035.roa (hash: Mk93/Py1aNdqibCxnW5rDhu68jIUBJ5f2wQcM99902Q=) 9: 323430363a356334303a3a2f33322d3438203d3e20313331373035.roa (hash: ZrrNvfIdpKFxME3MijZJjel9mkVCFWr1LKlyTLKuOmk=) 10: 323430363a356334303a393939393a3a2f34382d3438203d3e20313331373035.roa (hash: cSd8oWkoy/PciTBhaM2sT+kEpSFLFHXqmquC1grDeYk=) 11: 0A8E8E063785238467D4AD1F507CC97B30DBB959.crl (hash: BlObTIMZRrTl5d/V4bZvwnrRLNaiWrr0yIVh7B3Iwng=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/f9d6acc6-0af3-4b97-99a4-0f45e8ecf576/0/0A8E8E063785238467D4AD1F507CC97B30DBB959.crl rsync://repo-rpki.idnic.net/repo/f9d6acc6-0af3-4b97-99a4-0f45e8ecf576/0/0A8E8E063785238467D4AD1F507CC97B30DBB959.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0A8E8E063785238467D4AD1F507CC97B30DBB959.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 21 Oct 2025 20:34:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13:4f:39:c9:29:d8:00:2f:32:5c:81:4f:ad:e8:88:20:c1:5e:4a:1b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0A8E8E063785238467D4AD1F507CC97B30DBB959 Validity Not Before: Oct 18 17:56:18 2025 GMT Not After : Oct 21 20:34:18 2025 GMT Subject: CN=58EC8F7B0F75A6A01DFF3C82CDA44ED86D33ACF3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:9e:20:f2:60:49:8e:08:33:2f:20:4c:1c:c2: 24:45:ce:55:34:4e:ad:a9:61:36:a0:bb:f9:c9:89: 85:fd:fd:11:ec:f2:e5:b9:9c:d8:a9:a9:69:8c:fc: b4:e0:4e:64:7e:1f:9d:09:99:f0:f2:03:59:a7:92: 97:fd:ed:c1:d2:1d:85:17:40:04:b1:42:d3:0e:d4: 17:0c:b8:1d:17:83:63:19:1a:5d:96:d1:f9:3b:0b: 8c:55:41:7a:12:ed:35:3d:31:e0:e9:fd:2a:f3:be: 67:66:75:5e:bf:7a:a4:e2:73:2d:8a:fa:ac:2b:eb: 8b:3b:2a:e0:c2:8e:0d:a8:01:f2:de:82:db:03:14: 4c:bd:eb:c8:2e:1e:2d:d0:2b:06:94:a8:4c:68:06: c5:b9:56:f3:6e:3b:e7:30:9c:b7:47:86:60:e0:ab: 31:22:1a:73:d3:8a:81:2f:2b:19:e7:e6:e3:98:50: 6c:ba:1a:11:74:51:7c:01:48:f0:04:b5:9b:66:00: ed:95:9b:5d:de:c1:f6:e1:40:ef:e5:2e:d6:2c:7b: be:b7:22:ee:32:ac:e1:0c:42:d7:f7:ff:03:3e:3d: ef:44:08:fb:3a:b1:e9:ac:ba:1e:7b:0b:2a:80:fa: 9f:ec:c8:7c:01:06:71:84:e8:5b:04:41:ae:24:0d: e2:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:EC:8F:7B:0F:75:A6:A0:1D:FF:3C:82:CD:A4:4E:D8:6D:33:AC:F3 X509v3 Authority Key Identifier: keyid:0A:8E:8E:06:37:85:23:84:67:D4:AD:1F:50:7C:C9:7B:30:DB:B9:59 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/f9d6acc6-0af3-4b97-99a4-0f45e8ecf576/0/0A8E8E063785238467D4AD1F507CC97B30DBB959.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0A8E8E063785238467D4AD1F507CC97B30DBB959.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f9d6acc6-0af3-4b97-99a4-0f45e8ecf576/0/0A8E8E063785238467D4AD1F507CC97B30DBB959.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9f:ec:aa:4c:92:75:b7:4d:56:8f:19:59:5e:a6:a6:40:26:f6: 94:3a:6f:d8:77:0f:54:c6:6c:f8:b9:ff:ce:71:c6:5a:64:b1: 22:7d:dd:35:87:5b:89:7e:be:e2:54:86:c5:2f:ca:fb:76:e8: 70:f3:5b:4f:ae:ee:e5:35:a3:50:6c:69:db:9f:bc:47:5e:97: 33:7c:4f:90:87:7b:a7:70:35:74:fa:c9:fa:08:b0:b7:11:86: ba:54:9f:a7:32:aa:5b:8a:8f:00:db:55:8a:9c:8d:e1:7b:54: 3b:15:9c:1c:80:e4:15:78:46:17:ce:7e:33:6d:00:ec:c1:7b: e8:36:66:b3:56:5a:3a:26:1c:58:0f:63:16:2d:54:aa:6d:e8: b7:a4:74:48:bc:14:02:af:be:6e:c3:02:97:e6:f2:3c:97:fe: ac:48:e8:e9:6e:b6:22:9a:c4:f8:e0:ef:8f:85:13:a6:8d:21: b3:66:27:e9:cf:06:f9:ad:23:30:a5:ae:70:a3:ae:b3:b9:37: 16:8f:ec:25:68:3a:55:ab:3b:2e:e2:0f:0e:84:c0:4a:0d:e4: 5a:8d:67:31:ac:7c:1e:0e:72:f5:d7:bb:4c:d7:d5:66:28:b0: 87:a9:8e:5e:25:5b:1e:ff:0a:09:75:d9:4d:2b:e8:b2:08:a5: 75:81:38:6f -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUE085ySnYAC8yXIFPreiIIMFeShswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMEE4RThFMDYzNzg1MjM4NDY3RDRBRDFGNTA3Q0M5N0Iz MERCQjk1OTAeFw0yNTEwMTgxNzU2MThaFw0yNTEwMjEyMDM0MThaMDMxMTAvBgNV BAMTKDU4RUM4RjdCMEY3NUE2QTAxREZGM0M4MkNEQTQ0RUQ4NkQzM0FDRjMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCaniDyYEmOCDMvIEwcwiRFzlU0 Tq2pYTagu/nJiYX9/RHs8uW5nNipqWmM/LTgTmR+H50JmfDyA1mnkpf97cHSHYUX QASxQtMO1BcMuB0Xg2MZGl2W0fk7C4xVQXoS7TU9MeDp/SrzvmdmdV6/eqTicy2K +qwr64s7KuDCjg2oAfLegtsDFEy968guHi3QKwaUqExoBsW5VvNuO+cwnLdHhmDg qzEiGnPTioEvKxnn5uOYUGy6GhF0UXwBSPAEtZtmAO2Vm13ewfbhQO/lLtYse763 Iu4yrOEMQtf3/wM+Pe9ECPs6semsuh57CyqA+p/syHwBBnGE6FsEQa4kDeKZAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUWOyPew91pqAd/zyCzaRO2G0zrPMwHwYDVR0j BBgwFoAUCo6OBjeFI4Rn1K0fUHzJezDbuVkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m OWQ2YWNjNi0wYWYzLTRiOTctOTlhNC0wZjQ1ZThlY2Y1NzYvMC8wQThFOEUwNjM3 ODUyMzg0NjdENEFEMUY1MDdDQzk3QjMwREJCOTU5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMEE4RThFMDYzNzg1MjM4NDY3RDRBRDFGNTA3Q0M5N0IzMERC Qjk1OS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZjlkNmFjYzYtMGFmMy00Yjk3LTk5 YTQtMGY0NWU4ZWNmNTc2LzAvMEE4RThFMDYzNzg1MjM4NDY3RDRBRDFGNTA3Q0M5 N0IzMERCQjk1OS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJ/sqkySdbdNVo8ZWV6mpkAm9pQ6b9h3D1TG bPi5/85xxlpksSJ93TWHW4l+vuJUhsUvyvt26HDzW0+u7uU1o1BsadufvEdelzN8 T5CHe6dwNXT6yfoIsLcRhrpUn6cyqluKjwDbVYqcjeF7VDsVnByA5BV4RhfOfjNt AOzBe+g2ZrNWWjomHFgPYxYtVKpt6LekdEi8FAKvvm7DApfm8jyX/qxI6OlutiKa xPjg74+FE6aNIbNmJ+nPBvmtIzClrnCjrrO5NxaP7CVoOlWrOy7iDw6EwEoN5FqN ZzGsfB4OcvXXu0zX1WYosIepjl4lWx7/Cgl12U0r6LIIpXWBOG8= -----END CERTIFICATE-----Generated at Mon Oct 20 12:30:49 2025 by rpki-client