$ rpki-client -vvf repo-rpki.idnic.net/repo/f9d6acc6-0af3-4b97-99a4-0f45e8ecf576/0/0A8E8E063785238467D4AD1F507CC97B30DBB959.mft File: 0A8E8E063785238467D4AD1F507CC97B30DBB959.mft (raw, json) Hash identifier: 8975iOV+X1rxEFchszx2GDe1RiihX87g6wuZL/3SYiM= Subject key identifier: 98:70:E6:CA:62:D6:D5:B8:D6:ED:E1:6A:51:DB:76:90:2F:CF:28:AE Authority key identifier: 0A:8E:8E:06:37:85:23:84:67:D4:AD:1F:50:7C:C9:7B:30:DB:B9:59 Certificate issuer: /CN=0A8E8E063785238467D4AD1F507CC97B30DBB959 Certificate serial: 4AABAC0466EDC76B44767DFFBA6D3D78C3B3FCF7 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0A8E8E063785238467D4AD1F507CC97B30DBB959.cer Subject info access: rsync://repo-rpki.idnic.net/repo/f9d6acc6-0af3-4b97-99a4-0f45e8ecf576/0/0A8E8E063785238467D4AD1F507CC97B30DBB959.mft Manifest number: 016E Signing time: Sun 07 Sep 2025 21:31:18 +0000 Manifest this update: Sun 07 Sep 2025 21:26:18 +0000 Manifest next update: Thu 11 Sep 2025 08:44:18 +0000 Files and hashes: 1: 323430363a356334303a313030303a3a2f33362d3438203d3e20313331373035.roa (hash: Mk93/Py1aNdqibCxnW5rDhu68jIUBJ5f2wQcM99902Q=) 2: 3130332e3135342e3137392e302f32342d3234203d3e20313331373035.roa (hash: fuYAXhPxVSs3uQDGyVoloAUdGAB1vPzhCZLoObuSwWo=) 3: 3130332e3135342e3137382e302f32332d3234203d3e20313331373035.roa (hash: z6Vlo67b6HowiJ4eNQMIImpcN0YW2LjWV36x2SeZA5M=) 4: 0A8E8E063785238467D4AD1F507CC97B30DBB959.crl (hash: 20HNtcG9qax+H4ReBeWyFEfIfaAGyuq9UEKgwbS18HU=) 5: 323430363a356334303a3a2f33322d3438203d3e20313331373035.roa (hash: ZrrNvfIdpKFxME3MijZJjel9mkVCFWr1LKlyTLKuOmk=) 6: 3130332e3135342e3137382e302f32342d3234203d3e20313331373035.roa (hash: dY5S+6E2tTu7kTt3kud9rHyNZ8ICT/4MYY6A5gKdkm0=) 7: 323430363a356334303a383838383a3a2f34382d3438203d3e20313331373035.roa (hash: xhrHJkeZ6ORZKPQ3ePW270bQNoXqgZH/hWdzMzXe/Ng=) 8: 323430363a356334303a323030303a3a2f33362d3438203d3e20313331373035.roa (hash: 34w8SIWSSd8kqURH0Jn+B/R9XKBmDHxtyVWAlqGJxJo=) 9: 323430363a356334303a393939393a3a2f34382d3438203d3e20313331373035.roa (hash: cSd8oWkoy/PciTBhaM2sT+kEpSFLFHXqmquC1grDeYk=) 10: 323430363a356334303a373737373a3a2f34382d3438203d3e20313331373035.roa (hash: uxf3gr1qNXj16NXsE/3S99HOdYs6kHV+q6L/TWnS+ag=) 11: 323430363a356334303a3a2f33362d3438203d3e20313331373035.roa (hash: vVX9J+iIt5S0zLOqjzNP9A3DgvrDc3RqZLM36XJo31Q=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/f9d6acc6-0af3-4b97-99a4-0f45e8ecf576/0/0A8E8E063785238467D4AD1F507CC97B30DBB959.crl rsync://repo-rpki.idnic.net/repo/f9d6acc6-0af3-4b97-99a4-0f45e8ecf576/0/0A8E8E063785238467D4AD1F507CC97B30DBB959.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0A8E8E063785238467D4AD1F507CC97B30DBB959.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 11 Sep 2025 08:44:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4a:ab:ac:04:66:ed:c7:6b:44:76:7d:ff:ba:6d:3d:78:c3:b3:fc:f7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0A8E8E063785238467D4AD1F507CC97B30DBB959 Validity Not Before: Sep 7 21:26:18 2025 GMT Not After : Sep 11 08:44:18 2025 GMT Subject: CN=9870E6CA62D6D5B8D6EDE16A51DB76902FCF28AE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:16:f7:e6:e2:21:72:c7:16:3b:9b:6e:0e:d6: af:44:0e:04:d8:a0:a2:82:86:29:b9:fa:65:b0:2c: 98:b6:5e:b3:7a:cf:40:e1:2f:b5:62:66:86:e5:da: 73:79:c7:95:0b:df:d8:f5:35:f6:9a:38:03:9b:2d: 38:94:2d:94:5c:fe:7e:1d:d4:58:90:fb:29:56:92: e8:33:02:89:80:d8:fd:b0:e6:cf:1b:e1:71:eb:a1: 2d:5c:cc:36:f6:fe:53:33:63:b2:7e:10:dc:bf:96: e8:b7:58:a8:4a:c4:b9:69:3b:be:da:ec:82:dd:35: 7f:10:09:16:71:d1:75:c2:37:1d:bb:56:e9:8e:79: 5f:80:4a:bd:12:f7:db:a5:c2:ae:0c:03:67:83:1f: 8f:d4:c2:43:6c:28:4f:46:5a:55:ae:73:55:9f:5a: 1b:d6:05:f5:32:30:76:fb:cb:05:f4:12:28:b5:dd: 68:2b:87:0f:c3:a1:ec:a3:b6:23:9a:d2:ba:99:11: a0:f9:54:1a:d4:42:cf:7a:72:1c:9a:28:6f:50:a6: 6f:6e:ee:28:ec:6a:98:8c:d8:96:f6:8b:b6:7a:1a: 34:f0:10:7f:d3:f9:8e:0c:a2:47:e9:c0:ba:84:1f: 44:8c:67:62:8f:3d:a2:78:85:4f:59:b1:af:bd:a5: b8:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 98:70:E6:CA:62:D6:D5:B8:D6:ED:E1:6A:51:DB:76:90:2F:CF:28:AE X509v3 Authority Key Identifier: keyid:0A:8E:8E:06:37:85:23:84:67:D4:AD:1F:50:7C:C9:7B:30:DB:B9:59 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/f9d6acc6-0af3-4b97-99a4-0f45e8ecf576/0/0A8E8E063785238467D4AD1F507CC97B30DBB959.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0A8E8E063785238467D4AD1F507CC97B30DBB959.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f9d6acc6-0af3-4b97-99a4-0f45e8ecf576/0/0A8E8E063785238467D4AD1F507CC97B30DBB959.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4c:44:96:21:76:0e:3a:16:84:83:d1:ab:56:d2:10:c3:d6:00: 7c:a1:c3:ca:26:3a:74:cb:ec:9f:80:99:54:f8:46:9b:24:fd: 6d:9b:23:96:16:74:b5:89:59:4b:00:f9:aa:c7:42:4b:47:6c: aa:07:78:87:b1:4b:90:a3:7e:75:b3:2d:95:9f:28:d2:5b:0d: a6:64:f4:2e:1a:17:64:2e:22:d1:3b:eb:41:7f:32:2c:0c:d9: ab:74:5c:5b:74:b3:46:47:88:ab:de:c6:39:45:e0:30:eb:42: 51:17:26:a0:d2:0f:8d:ca:71:0b:92:2c:a9:42:7e:0c:95:a1: a0:5c:36:f8:28:de:c9:82:92:59:82:d2:07:57:61:ed:0b:b3: 78:b7:95:e5:11:12:14:85:29:8a:7d:f6:7d:89:9e:56:d8:85: d6:b4:1f:94:0f:f3:9c:dc:0e:f9:8e:69:c4:20:30:3a:e5:92: 70:f7:2d:68:e8:4e:75:29:ad:ac:af:73:b8:43:73:11:61:98: 00:13:f7:ef:da:96:c2:d8:c1:1f:2a:06:44:8d:8b:98:fc:30: 54:3b:5d:ce:1d:b1:b1:98:d6:e7:2a:c9:b2:18:4f:79:96:43: 46:6b:84:39:c6:e4:8c:e8:12:41:73:ab:4c:5e:30:cd:de:cf: 67:77:2d:a9 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUSqusBGbtx2tEdn3/um09eMOz/PcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMEE4RThFMDYzNzg1MjM4NDY3RDRBRDFGNTA3Q0M5N0Iz MERCQjk1OTAeFw0yNTA5MDcyMTI2MThaFw0yNTA5MTEwODQ0MThaMDMxMTAvBgNV BAMTKDk4NzBFNkNBNjJENkQ1QjhENkVERTE2QTUxREI3NjkwMkZDRjI4QUUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/Fvfm4iFyxxY7m24O1q9EDgTY oKKChim5+mWwLJi2XrN6z0DhL7ViZobl2nN5x5UL39j1NfaaOAObLTiULZRc/n4d 1FiQ+ylWkugzAomA2P2w5s8b4XHroS1czDb2/lMzY7J+ENy/lui3WKhKxLlpO77a 7ILdNX8QCRZx0XXCNx27VumOeV+ASr0S99ulwq4MA2eDH4/UwkNsKE9GWlWuc1Wf WhvWBfUyMHb7ywX0Eii13Wgrhw/DoeyjtiOa0rqZEaD5VBrUQs96chyaKG9Qpm9u 7ijsapiM2Jb2i7Z6GjTwEH/T+Y4MokfpwLqEH0SMZ2KPPaJ4hU9Zsa+9pbifAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUmHDmymLW1bjW7eFqUdt2kC/PKK4wHwYDVR0j BBgwFoAUCo6OBjeFI4Rn1K0fUHzJezDbuVkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m OWQ2YWNjNi0wYWYzLTRiOTctOTlhNC0wZjQ1ZThlY2Y1NzYvMC8wQThFOEUwNjM3 ODUyMzg0NjdENEFEMUY1MDdDQzk3QjMwREJCOTU5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMEE4RThFMDYzNzg1MjM4NDY3RDRBRDFGNTA3Q0M5N0IzMERC Qjk1OS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZjlkNmFjYzYtMGFmMy00Yjk3LTk5 YTQtMGY0NWU4ZWNmNTc2LzAvMEE4RThFMDYzNzg1MjM4NDY3RDRBRDFGNTA3Q0M5 N0IzMERCQjk1OS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAExEliF2DjoWhIPRq1bSEMPWAHyhw8omOnTL 7J+AmVT4Rpsk/W2bI5YWdLWJWUsA+arHQktHbKoHeIexS5CjfnWzLZWfKNJbDaZk 9C4aF2QuItE760F/MiwM2at0XFt0s0ZHiKvexjlF4DDrQlEXJqDSD43KcQuSLKlC fgyVoaBcNvgo3smCklmC0gdXYe0Ls3i3leUREhSFKYp99n2JnlbYhda0H5QP85zc DvmOacQgMDrlknD3LWjoTnUprayvc7hDcxFhmAAT9+/alsLYwR8qBkSNi5j8MFQ7 Xc4dsbGY1ucqybIYT3mWQ0ZrhDnG5IzoEkFzq0xeMM3ez2d3Lak= -----END CERTIFICATE-----Generated at Mon Sep 8 12:10:19 2025 by rpki-client