$ rpki-client -vvf repo-rpki.idnic.net/repo/506cd155-b53f-4146-a17c-7f1375eca24a/0/A8ACDEBC6EB4FF09A48B38FEB17CC145AA5E9F36.mft File: A8ACDEBC6EB4FF09A48B38FEB17CC145AA5E9F36.mft (raw, json) Hash identifier: /LsY/JS+GUqpWiNTA5YFTLUVekwZL3fgtqCdyWiY7Gg= Subject key identifier: 90:69:A8:F5:AC:C0:01:6C:C4:0F:07:B6:D4:9E:40:A1:31:DE:02:86 Authority key identifier: A8:AC:DE:BC:6E:B4:FF:09:A4:8B:38:FE:B1:7C:C1:45:AA:5E:9F:36 Certificate issuer: /CN=A8ACDEBC6EB4FF09A48B38FEB17CC145AA5E9F36 Certificate serial: 1212993B564FF7BF175EADA0F9122609BD1F91FD Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A8ACDEBC6EB4FF09A48B38FEB17CC145AA5E9F36.cer Subject info access: rsync://repo-rpki.idnic.net/repo/506cd155-b53f-4146-a17c-7f1375eca24a/0/A8ACDEBC6EB4FF09A48B38FEB17CC145AA5E9F36.mft Manifest number: 0520 Signing time: Sun 02 Nov 2025 06:50:02 +0000 Manifest this update: Sun 02 Nov 2025 06:45:02 +0000 Manifest next update: Wed 05 Nov 2025 12:40:02 +0000 Files and hashes: 1: 3130332e37392e39362e302f32342d3234203d3e203634333038.roa (hash: wGapFjIoWrukGBmT8iRgZP0dNhbzHUcz+UdRp6Wb0WM=) 2: A8ACDEBC6EB4FF09A48B38FEB17CC145AA5E9F36.crl (hash: qqRmS1ndIQIF/UL8ADoSXFfGA/zoCTuD8cJIv3Yt2xI=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/506cd155-b53f-4146-a17c-7f1375eca24a/0/A8ACDEBC6EB4FF09A48B38FEB17CC145AA5E9F36.crl rsync://repo-rpki.idnic.net/repo/506cd155-b53f-4146-a17c-7f1375eca24a/0/A8ACDEBC6EB4FF09A48B38FEB17CC145AA5E9F36.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A8ACDEBC6EB4FF09A48B38FEB17CC145AA5E9F36.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 05 Nov 2025 12:40:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 12:12:99:3b:56:4f:f7:bf:17:5e:ad:a0:f9:12:26:09:bd:1f:91:fd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A8ACDEBC6EB4FF09A48B38FEB17CC145AA5E9F36 Validity Not Before: Nov 2 06:45:02 2025 GMT Not After : Nov 5 12:40:02 2025 GMT Subject: CN=9069A8F5ACC0016CC40F07B6D49E40A131DE0286 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:f8:49:6e:24:7f:d0:2b:08:fa:81:bb:8b:3d: e2:b7:8f:20:0b:63:14:2f:c9:d8:42:5f:0a:16:36: 2c:49:a7:cc:02:60:07:23:9d:f4:f2:fb:2b:86:fe: 69:44:50:3e:06:19:12:09:e6:08:f6:81:0e:00:93: d3:81:cb:fa:55:d3:65:dd:06:54:e8:fb:8a:ec:d8: fc:91:92:32:d2:08:0e:50:61:81:bc:2b:c7:1d:12: 3a:be:33:98:ab:88:53:30:5e:98:88:bf:cd:4b:51: de:90:93:bc:83:de:d4:09:c8:bb:1f:e8:7d:88:58: 4c:16:b5:0e:54:87:78:06:bf:2e:0e:d3:01:3c:d9: d8:9e:c5:45:22:f4:48:c5:28:fa:13:37:59:6b:ab: 3f:de:03:e0:67:e7:72:d4:77:b4:47:23:0c:e1:bf: 0c:f0:5f:6c:94:e0:ff:fd:45:98:01:4a:8c:55:0c: 1d:97:46:fc:6b:34:e9:c5:ad:d6:98:47:f2:7a:c7: 74:b8:d3:5b:5a:2f:3c:7b:b8:5e:ee:8e:7e:b4:5f: e7:b1:3a:17:a0:48:92:70:b4:3b:6c:90:a1:fd:e9: 20:99:3b:78:06:60:a9:35:22:ff:78:78:3b:ca:b3: af:03:fb:a1:67:53:16:a0:51:ae:9c:76:6e:53:d7: b5:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 90:69:A8:F5:AC:C0:01:6C:C4:0F:07:B6:D4:9E:40:A1:31:DE:02:86 X509v3 Authority Key Identifier: keyid:A8:AC:DE:BC:6E:B4:FF:09:A4:8B:38:FE:B1:7C:C1:45:AA:5E:9F:36 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/506cd155-b53f-4146-a17c-7f1375eca24a/0/A8ACDEBC6EB4FF09A48B38FEB17CC145AA5E9F36.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A8ACDEBC6EB4FF09A48B38FEB17CC145AA5E9F36.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/506cd155-b53f-4146-a17c-7f1375eca24a/0/A8ACDEBC6EB4FF09A48B38FEB17CC145AA5E9F36.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 43:18:af:f4:45:fc:9c:8b:b0:fe:6c:0d:c9:0a:53:70:51:74: 7a:55:92:0a:c0:0a:b0:8a:22:61:67:5a:8b:da:71:64:30:c1: cf:56:a7:ee:40:f8:73:0c:45:ac:30:0c:20:76:39:e1:5d:cf: bf:d3:e0:c9:fc:fd:ca:7f:23:6f:fa:cd:6b:22:a8:ca:c5:f6: 3c:67:31:df:f2:19:e8:ed:cb:cd:d4:c9:19:b4:6e:96:3a:fb: 99:29:11:3c:b3:c1:d9:70:0c:09:ef:b8:c7:9c:f3:8a:1f:dd: 21:2e:cf:fa:05:b0:c0:6e:68:3b:bf:80:e5:29:7d:b6:76:28: 60:db:5e:47:57:49:77:0f:7f:fa:19:26:9e:7e:10:43:4d:88: f3:3b:c9:8e:2b:cc:44:a6:cf:1b:bd:62:57:15:9e:7d:8a:e3: b9:86:c4:1f:41:04:3d:73:c1:f2:46:30:f0:a3:0c:a7:6a:c5: 0c:34:99:9c:b2:66:32:50:3d:7c:2c:91:4d:19:f2:99:f8:09: ce:69:21:a0:6a:51:a3:5b:a3:40:3d:a1:c3:99:fa:be:dd:3f: bf:e1:3c:f2:f6:b9:15:fa:80:42:37:fe:69:17:4b:1e:ed:1d: ba:b0:f1:22:b5:1f:05:4e:1e:67:ba:0e:56:8f:65:b4:4d:fe: 4d:79:aa:6b -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUEhKZO1ZP978XXq2g+RImCb0fkf0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQThBQ0RFQkM2RUI0RkYwOUE0OEIzOEZFQjE3Q0MxNDVB QTVFOUYzNjAeFw0yNTExMDIwNjQ1MDJaFw0yNTExMDUxMjQwMDJaMDMxMTAvBgNV BAMTKDkwNjlBOEY1QUNDMDAxNkNDNDBGMDdCNkQ0OUU0MEExMzFERTAyODYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCZ+EluJH/QKwj6gbuLPeK3jyAL YxQvydhCXwoWNixJp8wCYAcjnfTy+yuG/mlEUD4GGRIJ5gj2gQ4Ak9OBy/pV02Xd BlTo+4rs2PyRkjLSCA5QYYG8K8cdEjq+M5iriFMwXpiIv81LUd6Qk7yD3tQJyLsf 6H2IWEwWtQ5Uh3gGvy4O0wE82diexUUi9EjFKPoTN1lrqz/eA+Bn53LUd7RHIwzh vwzwX2yU4P/9RZgBSoxVDB2XRvxrNOnFrdaYR/J6x3S401taLzx7uF7ujn60X+ex OhegSJJwtDtskKH96SCZO3gGYKk1Iv94eDvKs68D+6FnUxagUa6cdm5T17W9AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUkGmo9azAAWzEDwe21J5AoTHeAoYwHwYDVR0j BBgwFoAUqKzevG60/wmkizj+sXzBRapenzYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 MDZjZDE1NS1iNTNmLTQxNDYtYTE3Yy03ZjEzNzVlY2EyNGEvMC9BOEFDREVCQzZF QjRGRjA5QTQ4QjM4RkVCMTdDQzE0NUFBNUU5RjM2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQThBQ0RFQkM2RUI0RkYwOUE0OEIzOEZFQjE3Q0MxNDVBQTVF OUYzNi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNTA2Y2QxNTUtYjUzZi00MTQ2LWEx N2MtN2YxMzc1ZWNhMjRhLzAvQThBQ0RFQkM2RUI0RkYwOUE0OEIzOEZFQjE3Q0Mx NDVBQTVFOUYzNi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEMYr/RF/JyLsP5sDckKU3BRdHpVkgrACrCK ImFnWovacWQwwc9Wp+5A+HMMRawwDCB2OeFdz7/T4Mn8/cp/I2/6zWsiqMrF9jxn Md/yGejty83UyRm0bpY6+5kpETyzwdlwDAnvuMec84of3SEuz/oFsMBuaDu/gOUp fbZ2KGDbXkdXSXcPf/oZJp5+EENNiPM7yY4rzESmzxu9YlcVnn2K47mGxB9BBD1z wfJGMPCjDKdqxQw0mZyyZjJQPXwskU0Z8pn4Cc5pIaBqUaNbo0A9ocOZ+r7dP7/h PPL2uRX6gEI3/mkXSx7tHbqw8SK1HwVOHme6DlaPZbRN/k15qms= -----END CERTIFICATE-----Generated at Sun Nov 2 17:55:29 2025 by rpki-client