$ rpki-client -vvf repo-rpki.idnic.net/repo/09a88897-c387-4735-acd8-1d1c53cde264/0/8B7E0099F26BEEE90826C9B0E424575BDE128403.mft File: 8B7E0099F26BEEE90826C9B0E424575BDE128403.mft (raw, json) Hash identifier: f2LtUuYeH3x18/1cHX+/BpxWkNvhCVCycRJhNtmm9kc= Subject key identifier: B4:9D:C6:81:1D:9E:B1:CC:91:CE:57:07:63:F6:E3:16:CD:CA:A7:7A Authority key identifier: 8B:7E:00:99:F2:6B:EE:E9:08:26:C9:B0:E4:24:57:5B:DE:12:84:03 Certificate issuer: /CN=8B7E0099F26BEEE90826C9B0E424575BDE128403 Certificate serial: 3AB328F575CC29AC2E960779440BFC06449E94BB Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8B7E0099F26BEEE90826C9B0E424575BDE128403.cer Subject info access: rsync://repo-rpki.idnic.net/repo/09a88897-c387-4735-acd8-1d1c53cde264/0/8B7E0099F26BEEE90826C9B0E424575BDE128403.mft Manifest number: 02A7 Signing time: Mon 03 Nov 2025 07:12:06 +0000 Manifest this update: Mon 03 Nov 2025 07:07:06 +0000 Manifest next update: Thu 06 Nov 2025 07:50:06 +0000 Files and hashes: 1: 8B7E0099F26BEEE90826C9B0E424575BDE128403.crl (hash: 8jv8qEFjNFJH7KJZ2uYL6C3y185a+07U9qceHgKBMlo=) 2: 3130332e3137392e38362e302f32332d3234203d3e20313430333839.roa (hash: E6T8Gt5EtL567pGgeSiX6DPJMeUcOvm0iW+qF8Vx1Vo=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/09a88897-c387-4735-acd8-1d1c53cde264/0/8B7E0099F26BEEE90826C9B0E424575BDE128403.crl rsync://repo-rpki.idnic.net/repo/09a88897-c387-4735-acd8-1d1c53cde264/0/8B7E0099F26BEEE90826C9B0E424575BDE128403.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8B7E0099F26BEEE90826C9B0E424575BDE128403.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 06 Nov 2025 07:50:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3a:b3:28:f5:75:cc:29:ac:2e:96:07:79:44:0b:fc:06:44:9e:94:bb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8B7E0099F26BEEE90826C9B0E424575BDE128403 Validity Not Before: Nov 3 07:07:06 2025 GMT Not After : Nov 6 07:50:06 2025 GMT Subject: CN=B49DC6811D9EB1CC91CE570763F6E316CDCAA77A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:f3:90:b5:64:13:b5:12:98:c9:9f:84:08:98: 53:83:03:70:06:d8:d9:5b:14:91:97:c9:13:c4:80: 58:8d:cb:74:3d:31:da:ce:fb:05:81:68:49:59:25: e2:e1:ab:b8:52:b3:02:db:56:f3:5f:aa:ac:f3:70: 9f:0b:85:f1:fa:6a:18:9e:e1:f1:97:32:64:9e:e7: db:5a:30:5e:80:cb:b6:4d:fa:f6:64:8b:b7:8b:64: 5e:47:7a:d7:7e:23:71:eb:fb:85:d0:16:2b:ed:2f: 2f:ab:ed:22:3a:e8:38:4b:cc:57:51:d4:07:9a:a1: 34:ba:e3:04:2e:f1:ba:2c:8a:7d:94:5b:5a:0f:b3: e1:fa:32:b8:49:02:30:f7:03:04:3f:e2:b5:71:b4: c8:46:7c:23:79:b8:6c:ae:44:b7:f6:2c:16:dd:fd: ad:ed:2e:29:4b:e3:1c:f7:ba:fb:ea:5c:69:fc:76: 14:96:28:cf:8e:ce:10:cd:7d:09:9a:99:b5:75:b9: cf:b1:c5:f9:54:da:d6:14:9a:98:5d:c9:a0:88:e1: 90:9d:8b:dc:df:1e:cf:e8:2f:30:f8:43:e5:e7:e7: 6c:ec:83:9e:af:73:98:e4:72:eb:17:a1:ba:28:2c: 15:d6:45:96:52:f1:39:19:72:08:4d:e7:25:4c:aa: eb:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B4:9D:C6:81:1D:9E:B1:CC:91:CE:57:07:63:F6:E3:16:CD:CA:A7:7A X509v3 Authority Key Identifier: keyid:8B:7E:00:99:F2:6B:EE:E9:08:26:C9:B0:E4:24:57:5B:DE:12:84:03 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/09a88897-c387-4735-acd8-1d1c53cde264/0/8B7E0099F26BEEE90826C9B0E424575BDE128403.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8B7E0099F26BEEE90826C9B0E424575BDE128403.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/09a88897-c387-4735-acd8-1d1c53cde264/0/8B7E0099F26BEEE90826C9B0E424575BDE128403.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 60:0b:ba:e8:7b:4d:1e:ce:65:67:de:ec:ef:21:bf:b9:e5:5b: 16:eb:7c:bf:90:fc:01:da:01:28:63:ce:39:37:d1:6e:c4:36: d1:4a:5a:90:32:be:fc:4f:bc:a0:5d:0f:39:85:c9:91:49:a2: a0:c4:af:06:83:78:4f:d8:71:8b:da:90:5d:a0:c6:89:f2:fe: a1:08:d4:fb:08:0d:1c:15:86:06:ab:5f:f5:4f:f5:10:8d:0c: dc:19:57:c9:95:2a:53:66:86:6e:c0:cc:84:d9:a9:11:80:7d: 65:76:9e:4c:ce:d0:02:85:db:a0:6e:4e:04:ec:2c:1c:ae:27: 69:05:12:6a:c2:25:b5:8c:d9:47:07:7f:eb:5e:61:a4:64:c2: 5d:b8:05:f8:9a:28:20:0f:9a:70:b2:bc:b5:ac:48:c4:16:52: 9f:ae:3e:2a:22:47:5a:5a:22:91:b7:12:5f:12:47:44:20:20: b4:65:0c:a7:1a:15:d2:b9:32:f4:32:6c:be:46:c0:89:e7:80: e3:28:c4:08:f6:87:54:0f:3b:9d:aa:f0:90:f1:38:93:27:5b: bd:25:e2:11:92:cc:fa:f8:e6:70:ce:4f:72:f2:68:7e:08:9f: 8a:80:3a:bf:d8:1c:16:97:97:00:31:de:92:cc:4a:95:70:c9: f1:4e:f9:f8 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUOrMo9XXMKawulgd5RAv8BkSelLswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEI3RTAwOTlGMjZCRUVFOTA4MjZDOUIwRTQyNDU3NUJE RTEyODQwMzAeFw0yNTExMDMwNzA3MDZaFw0yNTExMDYwNzUwMDZaMDMxMTAvBgNV BAMTKEI0OURDNjgxMUQ5RUIxQ0M5MUNFNTcwNzYzRjZFMzE2Q0RDQUE3N0EwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDF85C1ZBO1EpjJn4QImFODA3AG 2NlbFJGXyRPEgFiNy3Q9MdrO+wWBaElZJeLhq7hSswLbVvNfqqzzcJ8LhfH6ahie 4fGXMmSe59taMF6Ay7ZN+vZki7eLZF5Hetd+I3Hr+4XQFivtLy+r7SI66DhLzFdR 1AeaoTS64wQu8bosin2UW1oPs+H6MrhJAjD3AwQ/4rVxtMhGfCN5uGyuRLf2LBbd /a3tLilL4xz3uvvqXGn8dhSWKM+OzhDNfQmambV1uc+xxflU2tYUmphdyaCI4ZCd i9zfHs/oLzD4Q+Xn52zsg56vc5jkcusXobooLBXWRZZS8TkZcghN5yVMqut7AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUtJ3GgR2escyRzlcHY/bjFs3Kp3owHwYDVR0j BBgwFoAUi34AmfJr7ukIJsmw5CRXW94ShAMwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w OWE4ODg5Ny1jMzg3LTQ3MzUtYWNkOC0xZDFjNTNjZGUyNjQvMC84QjdFMDA5OUYy NkJFRUU5MDgyNkM5QjBFNDI0NTc1QkRFMTI4NDAzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOEI3RTAwOTlGMjZCRUVFOTA4MjZDOUIwRTQyNDU3NUJERTEy ODQwMy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMDlhODg4OTctYzM4Ny00NzM1LWFj ZDgtMWQxYzUzY2RlMjY0LzAvOEI3RTAwOTlGMjZCRUVFOTA4MjZDOUIwRTQyNDU3 NUJERTEyODQwMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGALuuh7TR7OZWfe7O8hv7nlWxbrfL+Q/AHa AShjzjk30W7ENtFKWpAyvvxPvKBdDzmFyZFJoqDErwaDeE/YcYvakF2gxony/qEI 1PsIDRwVhgarX/VP9RCNDNwZV8mVKlNmhm7AzITZqRGAfWV2nkzO0AKF26BuTgTs LByuJ2kFEmrCJbWM2UcHf+teYaRkwl24BfiaKCAPmnCyvLWsSMQWUp+uPioiR1pa IpG3El8SR0QgILRlDKcaFdK5MvQybL5GwInngOMoxAj2h1QPO52q8JDxOJMnW70l 4hGSzPr45nDOT3LyaH4In4qAOr/YHBaXlwAx3pLMSpVwyfFO+fg= -----END CERTIFICATE-----Generated at Tue Nov 4 08:12:39 2025 by rpki-client