$ rpki-client -vvf repo-rpki.idnic.net/repo/2f8d1594-43e9-432d-be82-dc0b9767dcb6/0/0A84F918C6DCC0E4A989AE30553E8D7FB13ACC99.mft File: 0A84F918C6DCC0E4A989AE30553E8D7FB13ACC99.mft (raw, json) Hash identifier: LOI15nSGR2gnBOkChImnp/dHSJfuAH1s2OrpgjLGr4g= Subject key identifier: 69:31:F2:72:39:59:57:9E:8A:B8:23:4F:64:30:E3:A5:15:98:C5:5F Authority key identifier: 0A:84:F9:18:C6:DC:C0:E4:A9:89:AE:30:55:3E:8D:7F:B1:3A:CC:99 Certificate issuer: /CN=0A84F918C6DCC0E4A989AE30553E8D7FB13ACC99 Certificate serial: 43D262DB2BCCDDA5B0220FBAD7D26160527EC892 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0A84F918C6DCC0E4A989AE30553E8D7FB13ACC99.cer Subject info access: rsync://repo-rpki.idnic.net/repo/2f8d1594-43e9-432d-be82-dc0b9767dcb6/0/0A84F918C6DCC0E4A989AE30553E8D7FB13ACC99.mft Manifest number: 01F3 Signing time: Sun 19 Oct 2025 17:31:32 +0000 Manifest this update: Sun 19 Oct 2025 17:26:32 +0000 Manifest next update: Wed 22 Oct 2025 21:58:32 +0000 Files and hashes: 1: 0A84F918C6DCC0E4A989AE30553E8D7FB13ACC99.crl (hash: BePAMkM639a4fi4VNG7wgaYHOAcePxN3JYG2t2yySIE=) 2: 3130332e31332e3136342e302f32332d3234203d3e2034383030.roa (hash: OqpnIfufFkUk9uEkoqYiBI5WHl9fDVigbax5pOSdLxE=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/2f8d1594-43e9-432d-be82-dc0b9767dcb6/0/0A84F918C6DCC0E4A989AE30553E8D7FB13ACC99.crl rsync://repo-rpki.idnic.net/repo/2f8d1594-43e9-432d-be82-dc0b9767dcb6/0/0A84F918C6DCC0E4A989AE30553E8D7FB13ACC99.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0A84F918C6DCC0E4A989AE30553E8D7FB13ACC99.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 Oct 2025 17:51:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 43:d2:62:db:2b:cc:dd:a5:b0:22:0f:ba:d7:d2:61:60:52:7e:c8:92 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0A84F918C6DCC0E4A989AE30553E8D7FB13ACC99 Validity Not Before: Oct 19 17:26:32 2025 GMT Not After : Oct 22 21:58:32 2025 GMT Subject: CN=6931F2723959579E8AB8234F6430E3A51598C55F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:45:fd:92:e1:1c:6f:0f:cb:4d:1f:76:f3:f3: 96:e5:a1:2f:be:b4:b9:a7:f2:43:7a:2d:28:9b:a7: 91:a9:62:83:95:11:ae:e6:62:d7:34:c1:3f:ac:8d: da:7e:08:f0:db:d9:6a:d6:98:ff:4d:54:eb:9a:8f: 31:70:8e:7f:6a:3c:ff:b9:3e:18:90:eb:76:3e:66: a5:92:18:90:05:8c:e7:f5:4b:d9:f5:4f:01:03:e4: 66:11:8b:11:a4:8e:29:33:d4:6b:e0:0e:4e:c1:d8: 8f:b4:2e:69:49:cc:c4:a4:d6:ef:2d:a2:7e:a5:b7: a1:e0:fe:45:05:71:bc:ea:40:9a:22:c5:69:7a:08: c6:7f:c1:df:f3:da:d7:b0:93:68:c7:a3:a1:a7:a0: 52:4c:e6:a2:11:d5:e2:c2:db:87:1a:8e:31:41:19: 44:6a:5a:08:cb:b9:d6:7f:ba:09:13:de:57:29:88: e9:0e:ec:66:a2:fa:c5:db:99:94:fb:32:d5:06:1c: e3:37:bb:ae:de:26:54:b1:87:00:0f:94:e0:70:1a: 55:b1:6a:b9:f6:7a:e9:40:b7:6c:20:a6:d1:49:82: 4f:43:41:70:24:9d:01:02:80:d0:0f:b7:8d:63:83: b0:46:5f:19:46:fa:6c:18:fa:fb:31:91:f5:30:82: 55:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 69:31:F2:72:39:59:57:9E:8A:B8:23:4F:64:30:E3:A5:15:98:C5:5F X509v3 Authority Key Identifier: keyid:0A:84:F9:18:C6:DC:C0:E4:A9:89:AE:30:55:3E:8D:7F:B1:3A:CC:99 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/2f8d1594-43e9-432d-be82-dc0b9767dcb6/0/0A84F918C6DCC0E4A989AE30553E8D7FB13ACC99.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0A84F918C6DCC0E4A989AE30553E8D7FB13ACC99.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/2f8d1594-43e9-432d-be82-dc0b9767dcb6/0/0A84F918C6DCC0E4A989AE30553E8D7FB13ACC99.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption d4:3f:5c:b9:93:35:96:b5:93:47:b5:21:25:4a:b8:25:67:d6: e1:bc:e3:97:49:74:0b:dd:f5:87:c5:59:cc:4f:fd:25:9a:b5: 79:eb:95:4d:84:c9:0b:4c:72:40:e5:50:18:84:67:cb:8d:42: 3e:46:49:3a:84:c1:fc:18:a2:ce:00:ff:bd:0d:f7:56:59:5f: e5:35:6d:0c:45:ff:28:2f:53:18:bc:08:8e:72:c0:5b:3d:2b: 8d:d4:3e:f2:71:ca:90:46:cd:aa:d7:96:1a:ec:3a:a5:3f:1f: 70:d2:81:4d:58:f5:47:de:a9:84:17:f6:25:6e:c6:6f:ba:5c: ca:95:73:44:10:f7:2c:d7:c0:8f:4a:65:03:17:4a:29:b9:7b: 00:91:56:6f:70:b5:82:81:c2:7d:e6:d0:6e:55:11:ab:46:a7: c7:7d:4a:dd:97:48:6e:86:2f:ef:fa:ec:09:fd:77:ea:bb:fd: f4:83:24:ae:11:e4:0f:4c:39:b8:a1:cc:e8:1a:07:dd:a1:56: 63:ef:9b:07:bc:00:c7:23:f1:7c:5e:6e:18:aa:cf:00:c7:dc: c2:e2:26:b5:43:61:03:73:50:04:84:ff:d3:a8:d8:fa:02:91: 57:df:19:43:2b:ce:ec:55:f4:fc:21:0f:d5:72:f5:6b:84:cd: 9c:2a:d7:4f -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUQ9Ji2yvM3aWwIg+619JhYFJ+yJIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMEE4NEY5MThDNkRDQzBFNEE5ODlBRTMwNTUzRThEN0ZC MTNBQ0M5OTAeFw0yNTEwMTkxNzI2MzJaFw0yNTEwMjIyMTU4MzJaMDMxMTAvBgNV BAMTKDY5MzFGMjcyMzk1OTU3OUU4QUI4MjM0RjY0MzBFM0E1MTU5OEM1NUYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC1Rf2S4RxvD8tNH3bz85bloS++ tLmn8kN6LSibp5GpYoOVEa7mYtc0wT+sjdp+CPDb2WrWmP9NVOuajzFwjn9qPP+5 PhiQ63Y+ZqWSGJAFjOf1S9n1TwED5GYRixGkjikz1GvgDk7B2I+0LmlJzMSk1u8t on6lt6Hg/kUFcbzqQJoixWl6CMZ/wd/z2tewk2jHo6GnoFJM5qIR1eLC24cajjFB GURqWgjLudZ/ugkT3lcpiOkO7Gai+sXbmZT7MtUGHOM3u67eJlSxhwAPlOBwGlWx arn2eulAt2wgptFJgk9DQXAknQECgNAPt41jg7BGXxlG+mwY+vsxkfUwglX3AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUaTHycjlZV56KuCNPZDDjpRWYxV8wHwYDVR0j BBgwFoAUCoT5GMbcwOSpia4wVT6Nf7E6zJkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y ZjhkMTU5NC00M2U5LTQzMmQtYmU4Mi1kYzBiOTc2N2RjYjYvMC8wQTg0RjkxOEM2 RENDMEU0QTk4OUFFMzA1NTNFOEQ3RkIxM0FDQzk5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMEE4NEY5MThDNkRDQzBFNEE5ODlBRTMwNTUzRThEN0ZCMTNB Q0M5OS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMmY4ZDE1OTQtNDNlOS00MzJkLWJl ODItZGMwYjk3NjdkY2I2LzAvMEE4NEY5MThDNkRDQzBFNEE5ODlBRTMwNTUzRThE N0ZCMTNBQ0M5OS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBANQ/XLmTNZa1k0e1ISVKuCVn1uG845dJdAvd 9YfFWcxP/SWatXnrlU2EyQtMckDlUBiEZ8uNQj5GSTqEwfwYos4A/70N91ZZX+U1 bQxF/ygvUxi8CI5ywFs9K43UPvJxypBGzarXlhrsOqU/H3DSgU1Y9UfeqYQX9iVu xm+6XMqVc0QQ9yzXwI9KZQMXSim5ewCRVm9wtYKBwn3m0G5VEatGp8d9St2XSG6G L+/67An9d+q7/fSDJK4R5A9MObihzOgaB92hVmPvmwe8AMcj8XxebhiqzwDH3MLi JrVDYQNzUASE/9Oo2PoCkVffGUMrzuxV9PwhD9Vy9WuEzZwq108= -----END CERTIFICATE-----Generated at Mon Oct 20 01:18:03 2025 by rpki-client