$ rpki-client -vvf repo-rpki.idnic.net/repo/d8b98722-1cb4-40d4-ac8b-c3bca2bca217/0/8A95FAF723EC129E336E75ACE1CD4F3094FB6481.mft File: 8A95FAF723EC129E336E75ACE1CD4F3094FB6481.mft (raw, json) Hash identifier: JOpkTkFCpfirjm/8rQK3Odnp3NlRy3iJ6+uAfJioOFg= Subject key identifier: C5:B5:AA:B3:62:32:48:92:5C:1D:8F:8A:7E:18:4E:96:7A:6C:49:0E Authority key identifier: 8A:95:FA:F7:23:EC:12:9E:33:6E:75:AC:E1:CD:4F:30:94:FB:64:81 Certificate issuer: /CN=8A95FAF723EC129E336E75ACE1CD4F3094FB6481 Certificate serial: 476DDC479E47658D93604D7FDE53FB29F0C7CBEB Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8A95FAF723EC129E336E75ACE1CD4F3094FB6481.cer Subject info access: rsync://repo-rpki.idnic.net/repo/d8b98722-1cb4-40d4-ac8b-c3bca2bca217/0/8A95FAF723EC129E336E75ACE1CD4F3094FB6481.mft Manifest number: 046A Signing time: Tue 04 Nov 2025 23:51:40 +0000 Manifest this update: Tue 04 Nov 2025 23:46:40 +0000 Manifest next update: Sat 08 Nov 2025 09:02:40 +0000 Files and hashes: 1: 8A95FAF723EC129E336E75ACE1CD4F3094FB6481.crl (hash: N+d5rZfZAqXkyy0cCDSrA/U9Sworu30QOglGzqcHl9I=) 2: 323030313a6466303a663830303a3a2f34382d3438203d3e203538333937.roa (hash: 8qFDAcssXXUuL7jdU+5MBpRRNuUnSR4XPXnprUszlok=) 3: 3130332e32332e32302e302f32322d3234203d3e203538333937.roa (hash: fxRWeEdUZsQcOgrNyDGJ7oXqFe+EeQD/MHcFmS1cl7s=) 4: 34332e3234352e3138302e302f32322d3234203d3e203538333937.roa (hash: THVSHOfDNgrFd49wZlYvuTuPkWSURiIGaUg0EUGrcPM=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/d8b98722-1cb4-40d4-ac8b-c3bca2bca217/0/8A95FAF723EC129E336E75ACE1CD4F3094FB6481.crl rsync://repo-rpki.idnic.net/repo/d8b98722-1cb4-40d4-ac8b-c3bca2bca217/0/8A95FAF723EC129E336E75ACE1CD4F3094FB6481.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8A95FAF723EC129E336E75ACE1CD4F3094FB6481.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 08 Nov 2025 09:02:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 47:6d:dc:47:9e:47:65:8d:93:60:4d:7f:de:53:fb:29:f0:c7:cb:eb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8A95FAF723EC129E336E75ACE1CD4F3094FB6481 Validity Not Before: Nov 4 23:46:40 2025 GMT Not After : Nov 8 09:02:40 2025 GMT Subject: CN=C5B5AAB3623248925C1D8F8A7E184E967A6C490E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:d8:97:bb:30:ff:36:f9:83:31:e8:50:3d:9d: 81:90:4c:d1:13:14:ca:f1:64:ec:6d:a4:cd:3a:53: 51:4e:7a:38:66:4e:69:b1:94:58:0e:ac:3d:56:fe: 9f:40:78:a2:e4:08:43:7c:69:43:0b:9a:7c:90:ea: 00:0d:a7:6b:6c:57:50:57:56:e0:7f:bf:95:eb:11: 28:94:c9:72:7b:b6:99:1c:3d:96:24:ff:42:24:3e: 3f:fc:81:2b:e5:42:aa:82:63:23:5b:25:fb:03:41: 84:85:42:18:4d:7d:17:61:17:3c:4f:6c:32:bd:93: 64:52:5c:81:a4:f9:b8:4c:4e:07:d1:70:a3:c0:85: a9:cc:df:c8:06:6c:10:2b:81:c1:3c:10:1a:eb:15: 00:8d:37:7d:a4:91:42:ab:54:79:d8:47:7c:ff:8c: 75:d5:ec:7a:28:14:aa:74:14:4c:0c:b1:c7:d9:92: d9:cf:01:20:62:db:67:03:56:c8:7d:2b:14:e7:dd: f9:f6:20:dd:d6:9f:67:8f:dd:69:33:c6:05:8b:2c: 07:36:02:77:75:37:2f:6a:94:5c:96:f9:4e:ca:d0: 37:e8:54:3b:e0:c0:30:8a:f2:0d:bb:16:0b:c0:00: 84:1f:72:04:57:d8:04:f7:81:63:a7:18:60:74:6e: 5d:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:B5:AA:B3:62:32:48:92:5C:1D:8F:8A:7E:18:4E:96:7A:6C:49:0E X509v3 Authority Key Identifier: keyid:8A:95:FA:F7:23:EC:12:9E:33:6E:75:AC:E1:CD:4F:30:94:FB:64:81 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/d8b98722-1cb4-40d4-ac8b-c3bca2bca217/0/8A95FAF723EC129E336E75ACE1CD4F3094FB6481.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8A95FAF723EC129E336E75ACE1CD4F3094FB6481.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d8b98722-1cb4-40d4-ac8b-c3bca2bca217/0/8A95FAF723EC129E336E75ACE1CD4F3094FB6481.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ab:25:e7:ac:65:1c:fe:1c:b8:2b:17:e9:a0:f1:cf:83:66:15: 1a:c5:3c:9d:9e:37:af:c3:f2:82:c8:cb:06:10:ff:06:d9:6c: 75:be:f1:c4:97:e5:f9:d5:99:6a:54:d9:5c:a1:d1:9c:1e:28: b9:f9:30:0c:fc:f3:80:96:77:58:b1:49:4f:24:2a:40:9a:6e: 29:eb:09:69:38:d3:b4:1f:bf:35:04:db:a2:4e:76:19:34:5d: f6:43:9a:8c:82:8c:9e:e3:fb:ed:bc:3c:46:71:13:c8:70:d5: e5:a1:dd:91:c9:4d:ef:2a:13:c5:f8:81:62:5d:5c:42:2d:ae: ec:b0:8e:db:36:4a:1d:c5:5e:fd:ff:df:d3:5f:5c:a6:b8:8d: 63:13:d9:25:53:ae:bd:db:82:f7:74:39:88:ac:21:3b:4a:cc: 73:69:2f:0e:18:59:59:4e:80:47:c8:23:9b:98:a4:15:c4:e7: 1a:37:47:e9:2a:3b:34:65:5d:f5:d8:0e:4d:ac:3c:39:fd:a1: 9e:c3:aa:48:5e:05:ee:3d:3b:7f:d8:df:73:86:dc:35:33:89: 55:2a:ce:85:1e:fa:0e:2b:d2:df:f4:9f:c0:9d:7d:f7:9b:ad: dc:c3:8c:99:e2:2d:e7:8c:62:a9:29:2c:a1:91:1a:4f:41:5b: 47:00:65:d2 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUR23cR55HZY2TYE1/3lP7KfDHy+swDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEE5NUZBRjcyM0VDMTI5RTMzNkU3NUFDRTFDRDRGMzA5 NEZCNjQ4MTAeFw0yNTExMDQyMzQ2NDBaFw0yNTExMDgwOTAyNDBaMDMxMTAvBgNV BAMTKEM1QjVBQUIzNjIzMjQ4OTI1QzFEOEY4QTdFMTg0RTk2N0E2QzQ5MEUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCa2Je7MP82+YMx6FA9nYGQTNET FMrxZOxtpM06U1FOejhmTmmxlFgOrD1W/p9AeKLkCEN8aUMLmnyQ6gANp2tsV1BX VuB/v5XrESiUyXJ7tpkcPZYk/0IkPj/8gSvlQqqCYyNbJfsDQYSFQhhNfRdhFzxP bDK9k2RSXIGk+bhMTgfRcKPAhanM38gGbBArgcE8EBrrFQCNN32kkUKrVHnYR3z/ jHXV7HooFKp0FEwMscfZktnPASBi22cDVsh9KxTn3fn2IN3Wn2eP3WkzxgWLLAc2 And1Ny9qlFyW+U7K0DfoVDvgwDCK8g27FgvAAIQfcgRX2AT3gWOnGGB0bl2dAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUxbWqs2IySJJcHY+KfhhOlnpsSQ4wHwYDVR0j BBgwFoAUipX69yPsEp4zbnWs4c1PMJT7ZIEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k OGI5ODcyMi0xY2I0LTQwZDQtYWM4Yi1jM2JjYTJiY2EyMTcvMC84QTk1RkFGNzIz RUMxMjlFMzM2RTc1QUNFMUNENEYzMDk0RkI2NDgxLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOEE5NUZBRjcyM0VDMTI5RTMzNkU3NUFDRTFDRDRGMzA5NEZC NjQ4MS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZDhiOTg3MjItMWNiNC00MGQ0LWFj OGItYzNiY2EyYmNhMjE3LzAvOEE5NUZBRjcyM0VDMTI5RTMzNkU3NUFDRTFDRDRG MzA5NEZCNjQ4MS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKsl56xlHP4cuCsX6aDxz4NmFRrFPJ2eN6/D 8oLIywYQ/wbZbHW+8cSX5fnVmWpU2Vyh0ZweKLn5MAz884CWd1ixSU8kKkCabinr CWk407QfvzUE26JOdhk0XfZDmoyCjJ7j++28PEZxE8hw1eWh3ZHJTe8qE8X4gWJd XEItruywjts2Sh3FXv3/39NfXKa4jWMT2SVTrr3bgvd0OYisITtKzHNpLw4YWVlO gEfII5uYpBXE5xo3R+kqOzRlXfXYDk2sPDn9oZ7DqkheBe49O3/Y33OG3DUziVUq zoUe+g4r0t/0n8CdffebrdzDjJniLeeMYqkpLKGRGk9BW0cAZdI= -----END CERTIFICATE-----Generated at Wed Nov 5 08:39:09 2025 by rpki-client