$ rpki-client -vvf repo-rpki.idnic.net/repo/0a75d371-18c7-48df-8f61-1d404b646413/0/8EEE0584B224A95915512EA70FE012A4AF134C7A.mft File: 8EEE0584B224A95915512EA70FE012A4AF134C7A.mft (raw, json) Hash identifier: 55PqIbpkvK0PKGaJHPVIa3h42wVBaCMz6t2xr0g6B68= Subject key identifier: 66:8A:2C:FA:ED:F0:C7:F7:56:E3:60:B4:F5:49:A7:93:C2:32:61:90 Authority key identifier: 8E:EE:05:84:B2:24:A9:59:15:51:2E:A7:0F:E0:12:A4:AF:13:4C:7A Certificate issuer: /CN=8EEE0584B224A95915512EA70FE012A4AF134C7A Certificate serial: 43AC205946CFFEFB5EACCA546FAD8BCB0DE17875 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8EEE0584B224A95915512EA70FE012A4AF134C7A.cer Subject info access: rsync://repo-rpki.idnic.net/repo/0a75d371-18c7-48df-8f61-1d404b646413/0/8EEE0584B224A95915512EA70FE012A4AF134C7A.mft Manifest number: 051F Signing time: Tue 04 Nov 2025 03:11:12 +0000 Manifest this update: Tue 04 Nov 2025 03:06:12 +0000 Manifest next update: Fri 07 Nov 2025 06:38:12 +0000 Files and hashes: 1: 8EEE0584B224A95915512EA70FE012A4AF134C7A.crl (hash: 1UXx4fVD7m7GFZI6lXveZqfIi7dX6DSpo5fTk0Gxxhg=) 2: 3130332e39352e3136302e302f32332d3234203d3e20313336313236.roa (hash: KD7T4Ue/VEXioee+nFto/OfNIEmRxJwHxyIAd7JKH2Q=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/0a75d371-18c7-48df-8f61-1d404b646413/0/8EEE0584B224A95915512EA70FE012A4AF134C7A.crl rsync://repo-rpki.idnic.net/repo/0a75d371-18c7-48df-8f61-1d404b646413/0/8EEE0584B224A95915512EA70FE012A4AF134C7A.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8EEE0584B224A95915512EA70FE012A4AF134C7A.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 07 Nov 2025 06:38:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 43:ac:20:59:46:cf:fe:fb:5e:ac:ca:54:6f:ad:8b:cb:0d:e1:78:75 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8EEE0584B224A95915512EA70FE012A4AF134C7A Validity Not Before: Nov 4 03:06:12 2025 GMT Not After : Nov 7 06:38:12 2025 GMT Subject: CN=668A2CFAEDF0C7F756E360B4F549A793C2326190 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:c0:f4:a8:0d:86:69:8c:07:52:02:e6:a6:41: 7d:e9:9c:1f:ba:16:b4:fa:8b:46:02:7e:6d:1b:9e: fe:f6:d3:62:c3:93:22:c6:d7:ef:65:9f:60:c3:ec: d7:01:b1:57:d2:c8:fc:5a:71:0f:c4:33:3d:e0:85: 83:7c:13:5b:d1:77:24:ac:e0:78:13:7c:0a:8c:a6: 85:34:50:18:c3:63:2c:87:84:21:ef:f2:b6:57:60: 09:c3:db:82:91:f3:16:3c:71:5a:63:3f:5b:53:d3: 77:9b:9a:38:b4:e8:35:36:7b:3d:99:39:15:dd:1a: 26:1c:0a:b0:58:47:63:52:3b:b4:8e:1d:6b:ab:ef: cb:dc:b7:c3:1a:a3:14:7f:20:df:6b:d6:60:f4:77: 03:6b:e6:68:1b:28:9f:b0:c1:61:eb:43:a8:2d:51: d8:a3:ed:1b:ff:c9:a9:74:0b:41:cb:ca:b2:43:97: a9:ad:a9:dd:9a:a6:bd:2e:0b:bd:56:0e:16:f7:12: d8:d7:b2:d2:81:b2:3c:28:8c:62:57:3d:17:06:ed: c9:53:fd:b9:c0:27:9d:16:d7:75:4e:48:aa:58:c1: 0c:07:90:7a:a9:0b:b9:c1:e3:09:f2:a9:71:0e:3a: ef:0f:67:25:ef:67:9c:48:8c:5a:86:57:c7:5e:d5: 08:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:8A:2C:FA:ED:F0:C7:F7:56:E3:60:B4:F5:49:A7:93:C2:32:61:90 X509v3 Authority Key Identifier: keyid:8E:EE:05:84:B2:24:A9:59:15:51:2E:A7:0F:E0:12:A4:AF:13:4C:7A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/0a75d371-18c7-48df-8f61-1d404b646413/0/8EEE0584B224A95915512EA70FE012A4AF134C7A.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8EEE0584B224A95915512EA70FE012A4AF134C7A.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/0a75d371-18c7-48df-8f61-1d404b646413/0/8EEE0584B224A95915512EA70FE012A4AF134C7A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 14:95:1e:4c:25:8d:fb:ee:5f:82:14:9f:71:76:44:9a:d7:b8: c1:e4:35:76:e4:99:86:04:4f:e8:aa:fd:81:84:1a:09:7f:3b: 0b:b3:24:18:55:c7:f2:3c:90:db:b6:24:5e:48:08:30:19:3e: 1c:7c:fc:9c:e3:be:da:c2:da:38:f5:93:65:bf:99:fb:cc:a6: 37:00:34:a3:e1:3f:4b:0b:ea:49:a5:52:aa:5a:27:c6:c3:60: a1:8e:21:a7:8b:0b:18:33:09:70:95:c5:8d:dd:75:19:06:45: 8b:2f:27:49:69:f1:e6:24:e8:27:4e:06:aa:ad:9a:5b:c4:71: d0:45:55:b0:d1:fb:01:0a:bf:aa:7b:e9:60:39:dc:6d:a4:09: b7:5d:b8:7c:25:32:64:b0:c6:67:a4:9e:6f:42:23:9a:9d:55: e8:fb:25:6c:ea:2f:6a:01:7e:ef:02:b0:ee:5b:ab:4d:6e:1d: f7:b6:03:b5:e7:47:bf:b9:bb:29:31:55:1c:09:06:d9:f3:a5: 71:5a:13:38:2b:d1:3d:b2:d1:ef:48:ec:9c:ca:a2:53:b6:f7: d8:5b:de:8f:17:8c:c4:b0:2c:04:17:ff:11:08:ae:eb:1e:56: 24:1c:fd:ca:78:32:38:6b:3a:54:7d:4b:5c:f8:29:95:e8:03: ef:c1:3a:af -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUQ6wgWUbP/vterMpUb62Lyw3heHUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEVFRTA1ODRCMjI0QTk1OTE1NTEyRUE3MEZFMDEyQTRB RjEzNEM3QTAeFw0yNTExMDQwMzA2MTJaFw0yNTExMDcwNjM4MTJaMDMxMTAvBgNV BAMTKDY2OEEyQ0ZBRURGMEM3Rjc1NkUzNjBCNEY1NDlBNzkzQzIzMjYxOTAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+wPSoDYZpjAdSAuamQX3pnB+6 FrT6i0YCfm0bnv7202LDkyLG1+9ln2DD7NcBsVfSyPxacQ/EMz3ghYN8E1vRdySs 4HgTfAqMpoU0UBjDYyyHhCHv8rZXYAnD24KR8xY8cVpjP1tT03ebmji06DU2ez2Z ORXdGiYcCrBYR2NSO7SOHWur78vct8MaoxR/IN9r1mD0dwNr5mgbKJ+wwWHrQ6gt Udij7Rv/yal0C0HLyrJDl6mtqd2apr0uC71WDhb3EtjXstKBsjwojGJXPRcG7clT /bnAJ50W13VOSKpYwQwHkHqpC7nB4wnyqXEOOu8PZyXvZ5xIjFqGV8de1QhLAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUZoos+u3wx/dW42C09Umnk8IyYZAwHwYDVR0j BBgwFoAUju4FhLIkqVkVUS6nD+ASpK8TTHowDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w YTc1ZDM3MS0xOGM3LTQ4ZGYtOGY2MS0xZDQwNGI2NDY0MTMvMC84RUVFMDU4NEIy MjRBOTU5MTU1MTJFQTcwRkUwMTJBNEFGMTM0QzdBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOEVFRTA1ODRCMjI0QTk1OTE1NTEyRUE3MEZFMDEyQTRBRjEz NEM3QS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMGE3NWQzNzEtMThjNy00OGRmLThm NjEtMWQ0MDRiNjQ2NDEzLzAvOEVFRTA1ODRCMjI0QTk1OTE1NTEyRUE3MEZFMDEy QTRBRjEzNEM3QS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABSVHkwljfvuX4IUn3F2RJrXuMHkNXbkmYYE T+iq/YGEGgl/OwuzJBhVx/I8kNu2JF5ICDAZPhx8/JzjvtrC2jj1k2W/mfvMpjcA NKPhP0sL6kmlUqpaJ8bDYKGOIaeLCxgzCXCVxY3ddRkGRYsvJ0lp8eYk6CdOBqqt mlvEcdBFVbDR+wEKv6p76WA53G2kCbdduHwlMmSwxmeknm9CI5qdVej7JWzqL2oB fu8CsO5bq01uHfe2A7XnR7+5uykxVRwJBtnzpXFaEzgr0T2y0e9I7JzKolO299hb 3o8XjMSwLAQX/xEIruseViQc/cp4MjhrOlR9S1z4KZXoA+/BOq8= -----END CERTIFICATE-----Generated at Tue Nov 4 12:55:14 2025 by rpki-client