$ rpki-client -vvf repo-rpki.idnic.net/repo/12307390-6ef3-4476-a6aa-d0c5783e1f37/0/8A05EBF58BEC96D946EE85F0F0F85701A0A72799.mft File: 8A05EBF58BEC96D946EE85F0F0F85701A0A72799.mft (raw, json) Hash identifier: X5noS3jk5XqpEJJ/HWnaIZha/9HXKJrjKxt+w8aafeI= Subject key identifier: 3A:B5:A9:B0:42:5C:90:F8:9D:69:38:24:15:2F:D0:48:70:A8:67:92 Authority key identifier: 8A:05:EB:F5:8B:EC:96:D9:46:EE:85:F0:F0:F8:57:01:A0:A7:27:99 Certificate issuer: /CN=8A05EBF58BEC96D946EE85F0F0F85701A0A72799 Certificate serial: 7ACDCFC225B94AA495D02EC2D83E0982A9EE5342 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8A05EBF58BEC96D946EE85F0F0F85701A0A72799.cer Subject info access: rsync://repo-rpki.idnic.net/repo/12307390-6ef3-4476-a6aa-d0c5783e1f37/0/8A05EBF58BEC96D946EE85F0F0F85701A0A72799.mft Manifest number: 0522 Signing time: Sat 08 Nov 2025 17:21:05 +0000 Manifest this update: Sat 08 Nov 2025 17:16:05 +0000 Manifest next update: Wed 12 Nov 2025 01:51:05 +0000 Files and hashes: 1: 8A05EBF58BEC96D946EE85F0F0F85701A0A72799.crl (hash: zVISsmgXadKqpQWlBhZOs40oIhke2KhwoorvK0dJNvE=) 2: 3130332e3133392e34362e302f32342d3234203d3e203137393935.roa (hash: hthNpAwJxjCDLni6mv2Gc1l+BPz0lcv9dxQLklW+A64=) 3: 3130332e3133392e34372e302f32342d3234203d3e203137393935.roa (hash: hRDdGequ+GhEEqBrX8O9Zq6WRslymD5ehiejKAFbvr0=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/12307390-6ef3-4476-a6aa-d0c5783e1f37/0/8A05EBF58BEC96D946EE85F0F0F85701A0A72799.crl rsync://repo-rpki.idnic.net/repo/12307390-6ef3-4476-a6aa-d0c5783e1f37/0/8A05EBF58BEC96D946EE85F0F0F85701A0A72799.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8A05EBF58BEC96D946EE85F0F0F85701A0A72799.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 01:51:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7a:cd:cf:c2:25:b9:4a:a4:95:d0:2e:c2:d8:3e:09:82:a9:ee:53:42 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8A05EBF58BEC96D946EE85F0F0F85701A0A72799 Validity Not Before: Nov 8 17:16:05 2025 GMT Not After : Nov 12 01:51:05 2025 GMT Subject: CN=3AB5A9B0425C90F89D693824152FD04870A86792 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:a4:6b:79:92:d8:61:5a:81:07:41:25:cf:51: 24:eb:09:17:9f:ac:ee:8d:3f:16:bb:66:07:92:66: 85:30:de:b9:7f:16:ff:be:12:68:0a:8e:ae:bf:3a: a5:07:1a:98:fb:06:3a:08:be:fa:f4:f1:b1:33:04: d5:8d:12:87:2c:a9:c4:2c:4b:aa:71:ac:06:ff:01: 30:02:44:a6:16:c6:76:d0:e5:67:e6:fc:4a:b9:f7: de:7e:33:de:1f:0e:06:4f:8c:38:49:21:7c:e3:df: 13:cb:8e:b3:01:96:cf:51:c6:8f:c0:cd:f0:eb:46: a0:7b:da:79:b3:1d:71:ef:4f:2f:8e:82:4b:64:a9: 24:6a:7b:64:c2:58:be:41:f0:80:02:36:67:ec:dd: c8:1c:39:40:de:2e:b9:32:c0:9a:44:70:24:71:1a: 47:04:fa:3f:ac:ba:fb:ed:91:a3:ab:f6:f8:5b:36: 2a:7e:f0:5d:10:7d:a5:5e:e1:ca:e9:d4:35:a7:d6: 04:67:68:2a:5a:7e:02:b1:f4:55:ca:7d:a4:cc:ba: 7e:ef:1a:00:f4:41:f1:d8:4c:70:14:69:e8:4a:a7: 8b:a6:cb:3f:d0:fd:e1:8c:95:e5:ad:2e:9f:96:1e: bc:71:92:e8:38:70:ad:3e:51:66:ec:6f:2c:40:4a: c8:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:B5:A9:B0:42:5C:90:F8:9D:69:38:24:15:2F:D0:48:70:A8:67:92 X509v3 Authority Key Identifier: keyid:8A:05:EB:F5:8B:EC:96:D9:46:EE:85:F0:F0:F8:57:01:A0:A7:27:99 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/12307390-6ef3-4476-a6aa-d0c5783e1f37/0/8A05EBF58BEC96D946EE85F0F0F85701A0A72799.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8A05EBF58BEC96D946EE85F0F0F85701A0A72799.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/12307390-6ef3-4476-a6aa-d0c5783e1f37/0/8A05EBF58BEC96D946EE85F0F0F85701A0A72799.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 29:dd:ba:10:6c:cc:4c:2a:4a:71:2b:91:7e:96:25:c7:04:63: 79:8b:f0:a1:53:dd:db:93:7b:61:c4:fe:f2:b6:31:c9:53:e8: 34:ae:89:77:19:9b:79:0f:2d:9f:34:49:51:ee:4e:d5:d9:c3: 90:92:8a:a3:2c:05:ae:4c:ea:8e:64:75:5b:90:61:ea:91:1c: bb:de:76:35:66:85:57:9b:ad:11:fd:3d:91:57:be:63:de:4d: f9:6f:9c:f2:36:38:01:2a:de:d6:e3:0d:f5:8d:95:0a:a0:29: a0:cd:2c:f6:9a:8d:ae:d0:72:93:e0:d8:d2:40:12:03:d1:43: e2:c6:ad:cd:af:15:63:7e:03:8f:00:87:f9:4c:74:d6:50:5c: a2:d3:37:66:ce:3d:4d:22:a6:34:4e:ad:57:13:a6:e3:d0:33: ea:ae:2b:b8:55:91:83:24:34:40:57:4f:7b:5c:50:55:89:d8: 89:b9:31:34:03:81:f4:29:aa:38:71:0e:e7:b5:7e:6c:af:30: 48:e8:d6:0a:0c:0b:da:20:24:61:b3:da:63:db:6b:df:67:24: 7e:c9:74:0e:ab:da:6a:91:14:3d:36:1d:af:07:e6:59:fc:10: 43:73:46:32:95:5d:8a:49:77:bf:00:71:c3:08:02:1b:96:71: 89:38:f5:c2 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUes3PwiW5SqSV0C7C2D4JgqnuU0IwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEEwNUVCRjU4QkVDOTZEOTQ2RUU4NUYwRjBGODU3MDFB MEE3Mjc5OTAeFw0yNTExMDgxNzE2MDVaFw0yNTExMTIwMTUxMDVaMDMxMTAvBgNV BAMTKDNBQjVBOUIwNDI1QzkwRjg5RDY5MzgyNDE1MkZEMDQ4NzBBODY3OTIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDlpGt5kthhWoEHQSXPUSTrCRef rO6NPxa7ZgeSZoUw3rl/Fv++EmgKjq6/OqUHGpj7BjoIvvr08bEzBNWNEocsqcQs S6pxrAb/ATACRKYWxnbQ5Wfm/Eq5995+M94fDgZPjDhJIXzj3xPLjrMBls9Rxo/A zfDrRqB72nmzHXHvTy+OgktkqSRqe2TCWL5B8IACNmfs3cgcOUDeLrkywJpEcCRx GkcE+j+suvvtkaOr9vhbNip+8F0QfaVe4crp1DWn1gRnaCpafgKx9FXKfaTMun7v GgD0QfHYTHAUaehKp4umyz/Q/eGMleWtLp+WHrxxkug4cK0+UWbsbyxASsj1AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUOrWpsEJckPidaTgkFS/QSHCoZ5IwHwYDVR0j BBgwFoAUigXr9YvsltlG7oXw8PhXAaCnJ5kwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x MjMwNzM5MC02ZWYzLTQ0NzYtYTZhYS1kMGM1NzgzZTFmMzcvMC84QTA1RUJGNThC RUM5NkQ5NDZFRTg1RjBGMEY4NTcwMUEwQTcyNzk5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOEEwNUVCRjU4QkVDOTZEOTQ2RUU4NUYwRjBGODU3MDFBMEE3 Mjc5OS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMTIzMDczOTAtNmVmMy00NDc2LWE2 YWEtZDBjNTc4M2UxZjM3LzAvOEEwNUVCRjU4QkVDOTZEOTQ2RUU4NUYwRjBGODU3 MDFBMEE3Mjc5OS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACnduhBszEwqSnErkX6WJccEY3mL8KFT3duT e2HE/vK2MclT6DSuiXcZm3kPLZ80SVHuTtXZw5CSiqMsBa5M6o5kdVuQYeqRHLve djVmhVebrRH9PZFXvmPeTflvnPI2OAEq3tbjDfWNlQqgKaDNLPaaja7QcpPg2NJA EgPRQ+LGrc2vFWN+A48Ah/lMdNZQXKLTN2bOPU0ipjROrVcTpuPQM+quK7hVkYMk NEBXT3tcUFWJ2Im5MTQDgfQpqjhxDue1fmyvMEjo1goMC9ogJGGz2mPba99nJH7J dA6r2mqRFD02Ha8H5ln8EENzRjKVXYpJd78AccMIAhuWcYk49cI= -----END CERTIFICATE-----Generated at Sun Nov 9 05:37:40 2025 by rpki-client