$ rpki-client -vvf repo-rpki.idnic.net/repo/14758e8e-49c8-48b8-bdcb-35339e2ae601/0/8F9164714A1B3B906CF8A8B371F342EBA3540CD9.mft File: 8F9164714A1B3B906CF8A8B371F342EBA3540CD9.mft (raw, json) Hash identifier: HAcCTe/K2VW0XFKaG2zZMu7W047tNAiyH1+2d5ua/DA= Subject key identifier: 02:F1:28:F8:BE:B4:86:99:45:ED:91:AF:28:36:56:2C:97:FC:0F:04 Authority key identifier: 8F:91:64:71:4A:1B:3B:90:6C:F8:A8:B3:71:F3:42:EB:A3:54:0C:D9 Certificate issuer: /CN=8F9164714A1B3B906CF8A8B371F342EBA3540CD9 Certificate serial: 393F9A7B0A4509B4816089C3AE16A95861FF6FD2 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8F9164714A1B3B906CF8A8B371F342EBA3540CD9.cer Subject info access: rsync://repo-rpki.idnic.net/repo/14758e8e-49c8-48b8-bdcb-35339e2ae601/0/8F9164714A1B3B906CF8A8B371F342EBA3540CD9.mft Manifest number: 0219 Signing time: Mon 03 Nov 2025 07:10:36 +0000 Manifest this update: Mon 03 Nov 2025 07:05:36 +0000 Manifest next update: Thu 06 Nov 2025 17:11:36 +0000 Files and hashes: 1: 8F9164714A1B3B906CF8A8B371F342EBA3540CD9.crl (hash: vutlhp7BR/kZtUyQOfDWIKFAazukT2jo6XTRgn3sEf4=) 2: 3130332e3138382e3131392e302f32342d3234203d3e20313439373435.roa (hash: VHhhP8m98Q6XFX6o9Io0DEj5+ACOMVpb0NESi8BC7x8=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/14758e8e-49c8-48b8-bdcb-35339e2ae601/0/8F9164714A1B3B906CF8A8B371F342EBA3540CD9.crl rsync://repo-rpki.idnic.net/repo/14758e8e-49c8-48b8-bdcb-35339e2ae601/0/8F9164714A1B3B906CF8A8B371F342EBA3540CD9.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8F9164714A1B3B906CF8A8B371F342EBA3540CD9.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 06 Nov 2025 17:11:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 39:3f:9a:7b:0a:45:09:b4:81:60:89:c3:ae:16:a9:58:61:ff:6f:d2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8F9164714A1B3B906CF8A8B371F342EBA3540CD9 Validity Not Before: Nov 3 07:05:36 2025 GMT Not After : Nov 6 17:11:36 2025 GMT Subject: CN=02F128F8BEB4869945ED91AF2836562C97FC0F04 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:aa:55:ed:f6:e8:0f:26:6d:17:ca:5f:d6:94: 5d:df:93:9f:a7:cf:24:9f:57:c2:ef:27:81:c3:9c: 04:cd:57:2c:4f:f2:9f:ee:01:c3:3d:c9:33:00:ca: 8d:08:b1:ba:70:de:00:60:0b:3a:1d:54:dd:39:ae: b9:bb:7e:b2:5d:b0:d8:97:27:a9:a1:38:c5:df:cf: a3:17:4b:26:2b:bf:5a:30:31:0c:66:1f:4c:0d:41: 1c:37:9a:8a:45:c9:c7:b9:1b:52:6c:f5:ce:f6:45: 9d:dd:1b:e5:89:e3:0b:2e:42:82:dc:e0:e1:ad:e8: 37:b6:df:f2:e9:49:82:a6:da:d2:c2:69:20:09:f4: 71:38:30:9b:a6:69:72:89:00:87:20:c8:39:ac:15: 98:b5:7b:f5:de:04:ee:a3:0e:0b:46:12:d5:2c:dd: 82:a3:4b:43:c5:dc:1b:74:59:f9:85:ad:bf:58:2c: 81:61:53:4e:8b:48:0b:e2:bf:7a:34:84:4a:ca:9e: 38:e8:a0:d7:03:c9:05:28:bf:02:73:21:69:0e:c3: a5:1f:62:a4:5b:30:89:8f:d8:a2:4f:21:06:c9:7c: fe:07:e5:57:09:09:3a:a9:75:6e:df:2d:a4:eb:a7: 1f:53:ef:28:43:b2:d3:c7:7d:90:70:97:c8:09:a0: b0:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:F1:28:F8:BE:B4:86:99:45:ED:91:AF:28:36:56:2C:97:FC:0F:04 X509v3 Authority Key Identifier: keyid:8F:91:64:71:4A:1B:3B:90:6C:F8:A8:B3:71:F3:42:EB:A3:54:0C:D9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/14758e8e-49c8-48b8-bdcb-35339e2ae601/0/8F9164714A1B3B906CF8A8B371F342EBA3540CD9.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8F9164714A1B3B906CF8A8B371F342EBA3540CD9.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/14758e8e-49c8-48b8-bdcb-35339e2ae601/0/8F9164714A1B3B906CF8A8B371F342EBA3540CD9.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5f:ba:05:8e:dc:c3:43:72:3a:e3:05:77:a9:ed:5f:76:14:c7: 80:c3:f6:93:73:39:54:5a:e8:89:d3:46:69:19:45:15:f0:5e: 8f:cc:89:33:e9:77:60:da:e7:e3:86:c9:19:64:a6:63:43:de: bd:fb:c2:df:f6:af:9d:3e:d8:fe:2e:37:ac:b0:d5:d3:2c:d6: 58:d4:4d:f1:0b:35:a6:59:da:72:7b:41:80:75:9b:66:f2:c3: 8d:6a:07:41:83:db:a2:ad:c9:17:0d:e3:93:ca:5b:1d:00:bd: 44:aa:f9:ca:6e:31:18:98:2f:8e:57:a0:be:ea:6c:d3:6b:79: 59:5b:02:d7:c6:76:77:e3:c0:46:7c:57:2a:1e:cd:37:eb:73: bc:32:e0:d3:3e:86:89:04:62:17:e6:74:51:78:28:91:e6:2e: ed:ae:1a:65:c0:05:c9:4f:e0:28:df:a9:2c:51:b8:ec:7f:13: c7:aa:ef:b6:58:20:48:b2:ac:46:2a:3c:a0:d4:83:e0:c0:66: e7:48:a7:aa:2a:fe:d5:ab:db:25:3c:35:35:53:a1:b7:6c:ba: 8e:b6:bf:33:ab:40:fd:76:4a:65:95:1f:f1:d0:5f:8a:7c:aa: 63:d7:ab:e5:44:cc:2f:19:d0:a2:45:5d:25:ef:72:e1:de:69: 1f:3b:9d:c9 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUOT+aewpFCbSBYInDrhapWGH/b9IwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEY5MTY0NzE0QTFCM0I5MDZDRjhBOEIzNzFGMzQyRUJB MzU0MENEOTAeFw0yNTExMDMwNzA1MzZaFw0yNTExMDYxNzExMzZaMDMxMTAvBgNV BAMTKDAyRjEyOEY4QkVCNDg2OTk0NUVEOTFBRjI4MzY1NjJDOTdGQzBGMDQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC3qlXt9ugPJm0Xyl/WlF3fk5+n zySfV8LvJ4HDnATNVyxP8p/uAcM9yTMAyo0Isbpw3gBgCzodVN05rrm7frJdsNiX J6mhOMXfz6MXSyYrv1owMQxmH0wNQRw3mopFyce5G1Js9c72RZ3dG+WJ4wsuQoLc 4OGt6De23/LpSYKm2tLCaSAJ9HE4MJumaXKJAIcgyDmsFZi1e/XeBO6jDgtGEtUs 3YKjS0PF3Bt0WfmFrb9YLIFhU06LSAviv3o0hErKnjjooNcDyQUovwJzIWkOw6Uf YqRbMImP2KJPIQbJfP4H5VcJCTqpdW7fLaTrpx9T7yhDstPHfZBwl8gJoLDFAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUAvEo+L60hplF7ZGvKDZWLJf8DwQwHwYDVR0j BBgwFoAUj5FkcUobO5Bs+KizcfNC66NUDNkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x NDc1OGU4ZS00OWM4LTQ4YjgtYmRjYi0zNTMzOWUyYWU2MDEvMC84RjkxNjQ3MTRB MUIzQjkwNkNGOEE4QjM3MUYzNDJFQkEzNTQwQ0Q5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOEY5MTY0NzE0QTFCM0I5MDZDRjhBOEIzNzFGMzQyRUJBMzU0 MENEOS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMTQ3NThlOGUtNDljOC00OGI4LWJk Y2ItMzUzMzllMmFlNjAxLzAvOEY5MTY0NzE0QTFCM0I5MDZDRjhBOEIzNzFGMzQy RUJBMzU0MENEOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAF+6BY7cw0NyOuMFd6ntX3YUx4DD9pNzOVRa 6InTRmkZRRXwXo/MiTPpd2Da5+OGyRlkpmND3r37wt/2r50+2P4uN6yw1dMs1ljU TfELNaZZ2nJ7QYB1m2byw41qB0GD26KtyRcN45PKWx0AvUSq+cpuMRiYL45XoL7q bNNreVlbAtfGdnfjwEZ8VyoezTfrc7wy4NM+hokEYhfmdFF4KJHmLu2uGmXABclP 4CjfqSxRuOx/E8eq77ZYIEiyrEYqPKDUg+DAZudIp6oq/tWr2yU8NTVTobdsuo62 vzOrQP12SmWVH/HQX4p8qmPXq+VEzC8Z0KJFXSXvcuHeaR87nck= -----END CERTIFICATE-----Generated at Tue Nov 4 21:09:14 2025 by rpki-client