$ rpki-client -vvf repo-rpki.idnic.net/repo/a2e5ff81-b082-4334-ad29-55dc8d1e53b9/0/A8CDD576A9B5E448A869BEA4D516BAFC5A879503.mft File: A8CDD576A9B5E448A869BEA4D516BAFC5A879503.mft (raw, json) Hash identifier: bQrYQChOAtx3Gi4mfqdvyX8r+EgmQkLLh6Ku62F3/Gc= Subject key identifier: F6:2B:A3:E4:7F:1F:6F:D0:8D:F5:4E:19:F3:E1:00:A0:A9:B4:40:99 Authority key identifier: A8:CD:D5:76:A9:B5:E4:48:A8:69:BE:A4:D5:16:BA:FC:5A:87:95:03 Certificate issuer: /CN=A8CDD576A9B5E448A869BEA4D516BAFC5A879503 Certificate serial: 6991A32EF88A36BD47F65298066C66579986F2F5 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/A8CDD576A9B5E448A869BEA4D516BAFC5A879503.cer Subject info access: rsync://repo-rpki.idnic.net/repo/a2e5ff81-b082-4334-ad29-55dc8d1e53b9/0/A8CDD576A9B5E448A869BEA4D516BAFC5A879503.mft Manifest number: E7 Signing time: Mon 17 Nov 2025 08:12:30 +0000 Manifest this update: Mon 17 Nov 2025 08:07:30 +0000 Manifest next update: Thu 20 Nov 2025 17:32:30 +0000 Files and hashes: 1: A8CDD576A9B5E448A869BEA4D516BAFC5A879503.crl (hash: Z+2NR8niyH2ltEiZn+a25rYWkYWUOlty4Wnjgc0Q/RI=) 2: 3136302e31392e3134342e302f32342d3234203d3e20313532373838.roa (hash: zcdVZSiLzuXwzNXJqyWuf4sDbiVxTodHTiD95Tvz7k8=) 3: 3136302e31392e3134352e302f32342d3234203d3e203435333035.roa (hash: b0d54b5VfP0y4Y/gj0JeZ9te1p1dA7COr+bHtkAFBE4=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/a2e5ff81-b082-4334-ad29-55dc8d1e53b9/0/A8CDD576A9B5E448A869BEA4D516BAFC5A879503.crl rsync://repo-rpki.idnic.net/repo/a2e5ff81-b082-4334-ad29-55dc8d1e53b9/0/A8CDD576A9B5E448A869BEA4D516BAFC5A879503.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/A8CDD576A9B5E448A869BEA4D516BAFC5A879503.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 20 Nov 2025 14:34:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 69:91:a3:2e:f8:8a:36:bd:47:f6:52:98:06:6c:66:57:99:86:f2:f5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A8CDD576A9B5E448A869BEA4D516BAFC5A879503 Validity Not Before: Nov 17 08:07:30 2025 GMT Not After : Nov 20 17:32:30 2025 GMT Subject: CN=F62BA3E47F1F6FD08DF54E19F3E100A0A9B44099 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:b9:0e:f2:1e:27:8e:da:54:46:21:ff:36:29: 41:70:78:9f:7f:94:57:45:97:d5:06:dc:b3:1a:e7: 79:99:6b:07:6e:3e:34:6f:fe:d4:c7:b3:35:5f:02: f7:0f:bf:47:1e:23:78:ce:eb:ee:a4:55:af:64:f0: 4d:18:c7:e8:7d:9c:ea:d2:fc:9a:9a:1f:f4:e7:bd: 52:2c:53:4b:4f:92:06:70:1c:ab:7e:02:52:07:45: fd:fe:0b:45:f5:72:a7:c8:68:0d:4f:13:22:1a:c8: 7f:c1:45:2b:69:3c:86:fc:0e:37:e4:56:11:e1:c8: eb:8d:8c:bc:00:59:e6:06:64:a2:c6:c4:ec:74:30: 80:f4:3f:fe:de:17:cb:88:bb:b5:9d:bf:88:52:23: d0:ff:3a:1f:2b:b6:38:6c:9f:45:a6:d6:47:40:6d: 23:21:c8:30:f7:15:5b:db:81:a5:74:a2:a4:e4:26: 6a:28:83:86:d6:87:ad:3e:ec:7d:48:1a:22:78:65: 38:e0:0b:82:01:12:fd:72:bd:e2:da:47:ad:5b:93: 95:cd:1d:94:27:1c:13:dd:b9:b7:7a:cf:e2:a9:eb: e0:11:ab:46:a5:43:3e:01:b8:04:1f:d5:56:55:f3: 24:6c:76:6f:29:90:29:29:3b:3e:06:86:17:50:9c: c8:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F6:2B:A3:E4:7F:1F:6F:D0:8D:F5:4E:19:F3:E1:00:A0:A9:B4:40:99 X509v3 Authority Key Identifier: keyid:A8:CD:D5:76:A9:B5:E4:48:A8:69:BE:A4:D5:16:BA:FC:5A:87:95:03 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/a2e5ff81-b082-4334-ad29-55dc8d1e53b9/0/A8CDD576A9B5E448A869BEA4D516BAFC5A879503.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/A8CDD576A9B5E448A869BEA4D516BAFC5A879503.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a2e5ff81-b082-4334-ad29-55dc8d1e53b9/0/A8CDD576A9B5E448A869BEA4D516BAFC5A879503.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a0:a4:02:98:36:21:cb:98:7a:cf:2c:5b:ad:31:aa:c9:2f:fb: 3c:ca:ec:81:08:fb:33:c9:5c:06:6e:69:16:80:48:ea:d7:3c: f1:ef:c5:65:4c:52:02:ee:8a:a3:98:d1:ed:3f:05:16:a2:f7: 6a:40:26:9b:51:69:1b:73:5c:56:a2:88:57:ff:ed:5f:63:98: dd:f4:f8:49:01:de:ad:39:65:a9:8e:7b:fb:33:f9:0d:3b:71: 1e:c5:b7:73:6c:7f:91:24:59:18:2f:a3:3e:55:2a:09:36:ab: fc:b0:8d:59:ae:1a:75:ae:af:26:be:e9:b0:e5:de:ae:15:81: 5b:d7:7e:22:28:a9:2f:7f:e6:86:ea:36:dd:1d:3c:3d:29:0c: 19:04:06:c8:ad:f1:fe:f4:78:0b:f6:be:2a:1b:06:b2:4a:58: b1:b7:bd:22:b7:bb:2b:0e:50:9e:3a:f7:06:87:2b:12:c6:35: 0a:90:f4:b8:d6:4e:e7:ec:f6:9f:cd:b7:44:ac:54:ed:47:97: c0:42:11:98:22:c2:a0:b6:4b:06:b8:6c:d5:96:75:7a:08:ec: 53:1d:d2:c2:4d:49:e4:0c:c9:bd:28:ef:53:13:27:8b:e4:17: 3a:d6:77:c8:50:a8:61:0b:71:e9:de:c5:66:31:c1:34:72:65: af:e6:c9:ec -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUaZGjLviKNr1H9lKYBmxmV5mG8vUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQThDREQ1NzZBOUI1RTQ0OEE4NjlCRUE0RDUxNkJBRkM1 QTg3OTUwMzAeFw0yNTExMTcwODA3MzBaFw0yNTExMjAxNzMyMzBaMDMxMTAvBgNV BAMTKEY2MkJBM0U0N0YxRjZGRDA4REY1NEUxOUYzRTEwMEEwQTlCNDQwOTkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDXuQ7yHieO2lRGIf82KUFweJ9/ lFdFl9UG3LMa53mZawduPjRv/tTHszVfAvcPv0ceI3jO6+6kVa9k8E0Yx+h9nOrS /JqaH/TnvVIsU0tPkgZwHKt+AlIHRf3+C0X1cqfIaA1PEyIayH/BRStpPIb8Djfk VhHhyOuNjLwAWeYGZKLGxOx0MID0P/7eF8uIu7Wdv4hSI9D/Oh8rtjhsn0Wm1kdA bSMhyDD3FVvbgaV0oqTkJmoog4bWh60+7H1IGiJ4ZTjgC4IBEv1yveLaR61bk5XN HZQnHBPdubd6z+Kp6+ARq0alQz4BuAQf1VZV8yRsdm8pkCkpOz4GhhdQnMhVAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU9iuj5H8fb9CN9U4Z8+EAoKm0QJkwHwYDVR0j BBgwFoAUqM3Vdqm15Eioab6k1Ra6/FqHlQMwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h MmU1ZmY4MS1iMDgyLTQzMzQtYWQyOS01NWRjOGQxZTUzYjkvMC9BOENERDU3NkE5 QjVFNDQ4QTg2OUJFQTRENTE2QkFGQzVBODc5NTAzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvQThDREQ1NzZBOUI1RTQ0OEE4NjlCRUE0RDUxNkJBRkM1QTg3 OTUwMy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYTJlNWZmODEtYjA4Mi00MzM0LWFk MjktNTVkYzhkMWU1M2I5LzAvQThDREQ1NzZBOUI1RTQ0OEE4NjlCRUE0RDUxNkJB RkM1QTg3OTUwMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKCkApg2IcuYes8sW60xqskv+zzK7IEI+zPJ XAZuaRaASOrXPPHvxWVMUgLuiqOY0e0/BRai92pAJptRaRtzXFaiiFf/7V9jmN30 +EkB3q05ZamOe/sz+Q07cR7Ft3Nsf5EkWRgvoz5VKgk2q/ywjVmuGnWurya+6bDl 3q4VgVvXfiIoqS9/5obqNt0dPD0pDBkEBsit8f70eAv2viobBrJKWLG3vSK3uysO UJ469waHKxLGNQqQ9LjWTufs9p/Nt0SsVO1Hl8BCEZgiwqC2Swa4bNWWdXoI7FMd 0sJNSeQMyb0o71MTJ4vkFzrWd8hQqGELcenexWYxwTRyZa/myew= -----END CERTIFICATE-----Generated at Mon Nov 17 12:09:59 2025 by rpki-client