$ rpki-client -vvf repo-rpki.idnic.net/repo/02913fa1-33ae-4e33-bbe2-81bd9f03c84b/0/8C57C5860BF938BB57E0B7ED0F890D70BFEE55A0.mft File: 8C57C5860BF938BB57E0B7ED0F890D70BFEE55A0.mft (raw, json) Hash identifier: xMZP5Ly7T+OjC+FDh+jh7VzM2cCTqqfsW9rK1QZc9YA= Subject key identifier: 03:A4:E3:D5:5C:56:15:6D:FF:26:9B:BD:38:2E:70:53:68:7F:EF:87 Authority key identifier: 8C:57:C5:86:0B:F9:38:BB:57:E0:B7:ED:0F:89:0D:70:BF:EE:55:A0 Certificate issuer: /CN=8C57C5860BF938BB57E0B7ED0F890D70BFEE55A0 Certificate serial: 2DE7B1239D206D7E773A2D8DBB9AFCE914BE5221 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8C57C5860BF938BB57E0B7ED0F890D70BFEE55A0.cer Subject info access: rsync://repo-rpki.idnic.net/repo/02913fa1-33ae-4e33-bbe2-81bd9f03c84b/0/8C57C5860BF938BB57E0B7ED0F890D70BFEE55A0.mft Manifest number: 034C Signing time: Mon 03 Nov 2025 11:10:03 +0000 Manifest this update: Mon 03 Nov 2025 11:05:03 +0000 Manifest next update: Thu 06 Nov 2025 20:01:03 +0000 Files and hashes: 1: 3130332e3135392e3230322e302f32332d3234203d3e20313331313131.roa (hash: Ho5Y5TOHX49gl1fZYVO+j2M3OjYa1AKAk+KnhAmd/6M=) 2: 8C57C5860BF938BB57E0B7ED0F890D70BFEE55A0.crl (hash: 1DI1XHCkDeVqlM6IWKTH5oa51adARKJvLTqS8Ky6Oak=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/02913fa1-33ae-4e33-bbe2-81bd9f03c84b/0/8C57C5860BF938BB57E0B7ED0F890D70BFEE55A0.crl rsync://repo-rpki.idnic.net/repo/02913fa1-33ae-4e33-bbe2-81bd9f03c84b/0/8C57C5860BF938BB57E0B7ED0F890D70BFEE55A0.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8C57C5860BF938BB57E0B7ED0F890D70BFEE55A0.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 06 Nov 2025 20:01:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2d:e7:b1:23:9d:20:6d:7e:77:3a:2d:8d:bb:9a:fc:e9:14:be:52:21 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8C57C5860BF938BB57E0B7ED0F890D70BFEE55A0 Validity Not Before: Nov 3 11:05:03 2025 GMT Not After : Nov 6 20:01:03 2025 GMT Subject: CN=03A4E3D55C56156DFF269BBD382E7053687FEF87 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:e5:5a:ed:02:65:a8:fb:a1:c0:62:01:05:a4: 39:17:35:4b:ba:a4:e0:5e:26:5c:4d:cd:86:11:c5: e7:c8:20:5a:a2:48:a7:bc:2f:b4:44:fe:08:fc:f3: 9e:cc:1f:b8:6b:ea:5c:2d:29:fb:e4:d2:99:9f:2a: 2d:13:d9:52:54:b7:d0:72:2a:2b:84:b3:b3:ea:9c: f5:69:09:9b:7e:20:19:ab:22:78:4b:63:a0:4b:4c: 57:97:21:51:33:3d:1d:66:6a:ec:36:c3:74:fe:3e: 58:dc:69:a4:82:ec:1b:65:cc:41:e5:e1:bd:9b:68: c8:2f:7b:3b:89:e2:d2:e9:ca:54:db:94:1e:cf:a5: 15:7f:87:af:e9:e2:0a:c7:c2:0b:27:45:2c:0b:8e: 43:ac:b2:21:68:48:d0:44:a8:09:3b:0a:75:b9:87: 2a:f1:2b:58:8a:dd:a0:1c:6e:2b:0c:d0:3c:d6:10: 6e:c5:ff:e3:d9:7f:9f:8a:d6:88:48:41:a0:b6:9d: 76:2e:18:d4:ca:df:62:1d:5d:f9:c5:7d:12:76:4e: 4f:9e:06:24:b4:66:85:32:c4:e4:85:1d:88:30:b0: a7:62:12:14:43:c6:3f:60:e3:24:28:a5:ee:60:bd: 0b:b0:b3:36:bd:4b:b9:97:60:42:d7:e7:4c:ea:32: f4:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 03:A4:E3:D5:5C:56:15:6D:FF:26:9B:BD:38:2E:70:53:68:7F:EF:87 X509v3 Authority Key Identifier: keyid:8C:57:C5:86:0B:F9:38:BB:57:E0:B7:ED:0F:89:0D:70:BF:EE:55:A0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/02913fa1-33ae-4e33-bbe2-81bd9f03c84b/0/8C57C5860BF938BB57E0B7ED0F890D70BFEE55A0.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8C57C5860BF938BB57E0B7ED0F890D70BFEE55A0.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/02913fa1-33ae-4e33-bbe2-81bd9f03c84b/0/8C57C5860BF938BB57E0B7ED0F890D70BFEE55A0.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 61:89:78:0b:7a:4e:35:59:1c:7b:5b:1b:1d:f1:41:52:cc:20: 36:7f:5e:0d:e4:77:42:11:fe:88:4f:ce:ad:bd:a3:5b:66:f8: 6c:5b:9e:1e:ec:55:fe:7c:a0:69:99:bd:8e:b9:06:98:03:2b: 11:8e:dd:15:c4:79:1f:df:57:90:4d:39:9f:75:bc:fd:5f:34: 06:6c:9d:36:e6:4b:72:e2:cd:57:8d:64:a7:d3:a0:32:7d:3c: 3b:4f:2b:d3:f2:ff:1a:c4:88:c3:a4:47:2a:ea:a4:e1:40:25: 29:c2:9c:f3:14:80:78:9c:0f:cc:dc:f1:cb:26:95:01:c3:56: 1d:64:1d:4c:cc:43:65:f3:6b:5c:a1:71:97:0b:ce:47:f4:0a: 78:d9:1d:d9:fe:53:03:e3:fb:63:9f:b8:24:dd:07:07:68:46: 83:94:20:9a:2f:b0:c3:79:31:e4:fd:9e:76:e1:94:da:75:3c: 8f:46:30:90:a0:30:aa:29:b8:fe:b1:6e:41:cd:d0:68:92:d8: 60:f0:9d:06:2d:a9:4e:d7:0e:66:79:8e:f9:b6:de:b5:a2:4c: b6:88:ef:23:3b:cd:c4:80:1c:b2:a2:db:32:79:cc:a9:71:1f: c6:05:1d:d4:eb:ff:66:d6:b5:a5:47:de:a2:9d:42:44:0c:ed: 8b:5d:e2:cc -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIULeexI50gbX53Oi2Nu5r86RS+UiEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEM1N0M1ODYwQkY5MzhCQjU3RTBCN0VEMEY4OTBENzBC RkVFNTVBMDAeFw0yNTExMDMxMTA1MDNaFw0yNTExMDYyMDAxMDNaMDMxMTAvBgNV BAMTKDAzQTRFM0Q1NUM1NjE1NkRGRjI2OUJCRDM4MkU3MDUzNjg3RkVGODcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCb5VrtAmWo+6HAYgEFpDkXNUu6 pOBeJlxNzYYRxefIIFqiSKe8L7RE/gj8857MH7hr6lwtKfvk0pmfKi0T2VJUt9By KiuEs7PqnPVpCZt+IBmrInhLY6BLTFeXIVEzPR1mauw2w3T+PljcaaSC7BtlzEHl 4b2baMgvezuJ4tLpylTblB7PpRV/h6/p4grHwgsnRSwLjkOssiFoSNBEqAk7CnW5 hyrxK1iK3aAcbisM0DzWEG7F/+PZf5+K1ohIQaC2nXYuGNTK32IdXfnFfRJ2Tk+e BiS0ZoUyxOSFHYgwsKdiEhRDxj9g4yQope5gvQuwsza9S7mXYELX50zqMvQJAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUA6Tj1VxWFW3/Jpu9OC5wU2h/74cwHwYDVR0j BBgwFoAUjFfFhgv5OLtX4LftD4kNcL/uVaAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w MjkxM2ZhMS0zM2FlLTRlMzMtYmJlMi04MWJkOWYwM2M4NGIvMC84QzU3QzU4NjBC RjkzOEJCNTdFMEI3RUQwRjg5MEQ3MEJGRUU1NUEwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOEM1N0M1ODYwQkY5MzhCQjU3RTBCN0VEMEY4OTBENzBCRkVF NTVBMC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMDI5MTNmYTEtMzNhZS00ZTMzLWJi ZTItODFiZDlmMDNjODRiLzAvOEM1N0M1ODYwQkY5MzhCQjU3RTBCN0VEMEY4OTBE NzBCRkVFNTVBMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGGJeAt6TjVZHHtbGx3xQVLMIDZ/Xg3kd0IR /ohPzq29o1tm+Gxbnh7sVf58oGmZvY65BpgDKxGO3RXEeR/fV5BNOZ91vP1fNAZs nTbmS3LizVeNZKfToDJ9PDtPK9Py/xrEiMOkRyrqpOFAJSnCnPMUgHicD8zc8csm lQHDVh1kHUzMQ2Xza1yhcZcLzkf0CnjZHdn+UwPj+2OfuCTdBwdoRoOUIJovsMN5 MeT9nnbhlNp1PI9GMJCgMKopuP6xbkHN0GiS2GDwnQYtqU7XDmZ5jvm23rWiTLaI 7yM7zcSAHLKi2zJ5zKlxH8YFHdTr/2bWtaVH3qKdQkQM7Ytd4sw= -----END CERTIFICATE-----Generated at Wed Nov 5 04:05:20 2025 by rpki-client