$ rpki-client -vvf repo-rpki.idnic.net/repo/836fd551-6aba-4222-8a26-986346825b38/0/C8175E7E9E15E565FE697292A37E14BFE067CAF7.mft File: C8175E7E9E15E565FE697292A37E14BFE067CAF7.mft (raw, json) Hash identifier: jJ8X31gjhw4rA6WuMa2g9FZ+1ep3tLmI+8nq0dz2J6U= Subject key identifier: 96:35:2B:A4:ED:4E:BF:AB:6D:6A:D9:65:13:93:60:B8:1B:A0:DF:23 Authority key identifier: C8:17:5E:7E:9E:15:E5:65:FE:69:72:92:A3:7E:14:BF:E0:67:CA:F7 Certificate issuer: /CN=C8175E7E9E15E565FE697292A37E14BFE067CAF7 Certificate serial: 7A4804A2EF42D68A16D5CF409DD8079CE2C81556 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C8175E7E9E15E565FE697292A37E14BFE067CAF7.cer Subject info access: rsync://repo-rpki.idnic.net/repo/836fd551-6aba-4222-8a26-986346825b38/0/C8175E7E9E15E565FE697292A37E14BFE067CAF7.mft Manifest number: 0198 Signing time: Mon 03 Nov 2025 23:00:02 +0000 Manifest this update: Mon 03 Nov 2025 22:55:02 +0000 Manifest next update: Fri 07 Nov 2025 08:18:02 +0000 Files and hashes: 1: 3130332e3135382e31332e302f32342d3234203d3e20313338303839.roa (hash: M+WZc7qSf2CmAB/JGuGAm2J24ap4dhEUP+j6m1qwiAs=) 2: C8175E7E9E15E565FE697292A37E14BFE067CAF7.crl (hash: 3XQw+BrkxvzrY8jJRBLeFQhhOeD2WjVhWdQ6VU5RwN8=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/836fd551-6aba-4222-8a26-986346825b38/0/C8175E7E9E15E565FE697292A37E14BFE067CAF7.crl rsync://repo-rpki.idnic.net/repo/836fd551-6aba-4222-8a26-986346825b38/0/C8175E7E9E15E565FE697292A37E14BFE067CAF7.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C8175E7E9E15E565FE697292A37E14BFE067CAF7.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 07 Nov 2025 08:18:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7a:48:04:a2:ef:42:d6:8a:16:d5:cf:40:9d:d8:07:9c:e2:c8:15:56 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C8175E7E9E15E565FE697292A37E14BFE067CAF7 Validity Not Before: Nov 3 22:55:02 2025 GMT Not After : Nov 7 08:18:02 2025 GMT Subject: CN=96352BA4ED4EBFAB6D6AD965139360B81BA0DF23 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:21:d6:35:a3:72:cf:50:09:c8:40:b2:5f:2c: 5c:0d:b2:cf:ea:48:6e:34:a9:6a:5b:7b:0d:43:7c: a6:61:ea:38:61:48:57:22:b5:ff:72:4b:e7:d5:20: fd:26:2c:8e:e2:d3:93:db:a4:7b:6f:f9:95:66:20: e1:e5:60:a3:6f:10:d6:b3:d8:41:2c:b4:2f:70:e2: 29:fd:a2:73:e9:25:c2:4f:c9:61:cb:a3:8e:dc:02: ac:bf:0e:cc:ed:12:f6:34:21:e1:2e:82:5b:1d:90: bc:ef:e0:d2:ca:d4:b7:ee:ed:05:c0:f4:03:f2:fe: aa:d6:7c:13:cf:8c:28:fd:56:ea:66:92:1b:9b:96: ff:f1:fa:e1:b6:49:24:fd:00:27:80:3d:f1:9d:28: 1a:58:aa:90:64:e6:d2:df:7d:89:a0:6a:51:7c:52: aa:5f:7b:40:af:52:5e:d2:48:f3:4d:05:29:fa:23: 15:33:62:2e:61:1a:05:28:06:4b:82:03:73:e6:39: c8:f4:41:73:4f:84:bd:6c:2a:c8:05:b7:19:c7:4f: d0:6f:fd:74:aa:21:ae:a5:5a:90:9f:58:f2:81:1e: 57:78:f4:8c:0b:0a:88:7e:dd:31:93:7b:6f:84:a4: 17:2d:53:3b:01:f3:28:2d:28:f7:68:71:3c:1c:0e: 49:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:35:2B:A4:ED:4E:BF:AB:6D:6A:D9:65:13:93:60:B8:1B:A0:DF:23 X509v3 Authority Key Identifier: keyid:C8:17:5E:7E:9E:15:E5:65:FE:69:72:92:A3:7E:14:BF:E0:67:CA:F7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/836fd551-6aba-4222-8a26-986346825b38/0/C8175E7E9E15E565FE697292A37E14BFE067CAF7.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C8175E7E9E15E565FE697292A37E14BFE067CAF7.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/836fd551-6aba-4222-8a26-986346825b38/0/C8175E7E9E15E565FE697292A37E14BFE067CAF7.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a9:f0:fc:b4:dc:5a:43:d1:19:a4:47:b6:d0:71:f0:4b:9a:2d: 7a:99:ce:8b:7c:e8:10:89:14:17:cc:2e:2e:5e:ef:2d:de:c0: 8e:cd:8a:c6:23:fb:1e:88:2d:3e:7d:94:80:53:98:65:11:d3: 83:7a:08:27:b2:0c:84:dd:0b:64:39:6a:36:68:66:bb:c6:31: e7:5a:21:c2:2e:42:95:0e:57:27:6b:bc:73:82:92:32:93:8b: ed:8e:b9:b6:25:f5:40:31:e1:91:42:90:5a:ed:aa:77:48:67: 22:a6:12:76:9f:b6:b3:ba:16:07:da:30:5a:e6:7a:a2:49:ca: 57:09:75:13:98:25:a7:b4:69:26:c2:6b:ef:58:d6:92:eb:2e: 04:08:ea:d1:3c:3e:31:b1:14:ad:53:f1:91:af:32:17:a8:00: da:86:d6:82:21:ab:01:9b:11:40:02:db:86:c4:58:8f:1b:ee: 7a:91:ed:d6:62:6e:58:5a:a9:b0:3f:c9:fb:71:07:4b:a2:b6: 06:7e:59:ef:44:72:10:1f:6b:9b:2f:69:f0:25:74:83:25:6e: ef:cf:3a:6a:e7:fd:81:99:c5:6a:56:d9:6c:68:cc:8f:7f:fa: 55:67:61:09:ff:d1:79:f1:12:08:53:15:61:87:bd:8a:e9:6b: a2:ac:19:0b -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUekgEou9C1ooW1c9AndgHnOLIFVYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzgxNzVFN0U5RTE1RTU2NUZFNjk3MjkyQTM3RTE0QkZF MDY3Q0FGNzAeFw0yNTExMDMyMjU1MDJaFw0yNTExMDcwODE4MDJaMDMxMTAvBgNV BAMTKDk2MzUyQkE0RUQ0RUJGQUI2RDZBRDk2NTEzOTM2MEI4MUJBMERGMjMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDYIdY1o3LPUAnIQLJfLFwNss/q SG40qWpbew1DfKZh6jhhSFcitf9yS+fVIP0mLI7i05PbpHtv+ZVmIOHlYKNvENaz 2EEstC9w4in9onPpJcJPyWHLo47cAqy/DsztEvY0IeEuglsdkLzv4NLK1Lfu7QXA 9APy/qrWfBPPjCj9Vupmkhublv/x+uG2SST9ACeAPfGdKBpYqpBk5tLffYmgalF8 Uqpfe0CvUl7SSPNNBSn6IxUzYi5hGgUoBkuCA3PmOcj0QXNPhL1sKsgFtxnHT9Bv /XSqIa6lWpCfWPKBHld49IwLCoh+3TGTe2+EpBctUzsB8ygtKPdocTwcDknNAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUljUrpO1Ov6ttatllE5NguBug3yMwHwYDVR0j BBgwFoAUyBdefp4V5WX+aXKSo34Uv+BnyvcwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 MzZmZDU1MS02YWJhLTQyMjItOGEyNi05ODYzNDY4MjViMzgvMC9DODE3NUU3RTlF MTVFNTY1RkU2OTcyOTJBMzdFMTRCRkUwNjdDQUY3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQzgxNzVFN0U5RTE1RTU2NUZFNjk3MjkyQTM3RTE0QkZFMDY3 Q0FGNy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vODM2ZmQ1NTEtNmFiYS00MjIyLThh MjYtOTg2MzQ2ODI1YjM4LzAvQzgxNzVFN0U5RTE1RTU2NUZFNjk3MjkyQTM3RTE0 QkZFMDY3Q0FGNy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKnw/LTcWkPRGaRHttBx8EuaLXqZzot86BCJ FBfMLi5e7y3ewI7NisYj+x6ILT59lIBTmGUR04N6CCeyDITdC2Q5ajZoZrvGMeda IcIuQpUOVydrvHOCkjKTi+2OubYl9UAx4ZFCkFrtqndIZyKmEnaftrO6FgfaMFrm eqJJylcJdROYJae0aSbCa+9Y1pLrLgQI6tE8PjGxFK1T8ZGvMheoANqG1oIhqwGb EUAC24bEWI8b7nqR7dZiblhaqbA/yftxB0uitgZ+We9EchAfa5svafAldIMlbu/P Omrn/YGZxWpW2WxozI9/+lVnYQn/0XnxEghTFWGHvYrpa6KsGQs= -----END CERTIFICATE-----Generated at Wed Nov 5 22:08:36 2025 by rpki-client