$ rpki-client -vvf repo-rpki.idnic.net/repo/33dc034f-3823-48af-953d-aaa873b0fb6a/0/8B30167CDA20FE7EDCFC647AC86B14BB27E430C8.mft File: 8B30167CDA20FE7EDCFC647AC86B14BB27E430C8.mft (raw, json) Hash identifier: gutKV7atST89GSvB5pw2LP5gpgQRkFhGD0l7tc0+SN4= Subject key identifier: 8B:79:78:05:E2:5A:D9:A7:C5:19:DF:88:C1:FF:34:3E:17:1C:EF:32 Authority key identifier: 8B:30:16:7C:DA:20:FE:7E:DC:FC:64:7A:C8:6B:14:BB:27:E4:30:C8 Certificate issuer: /CN=8B30167CDA20FE7EDCFC647AC86B14BB27E430C8 Certificate serial: 4050181DAF7499B7E241E2CEC337C14A4C3F1730 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/8B30167CDA20FE7EDCFC647AC86B14BB27E430C8.cer Subject info access: rsync://repo-rpki.idnic.net/repo/33dc034f-3823-48af-953d-aaa873b0fb6a/0/8B30167CDA20FE7EDCFC647AC86B14BB27E430C8.mft Manifest number: 98 Signing time: Wed 05 Nov 2025 08:02:23 +0000 Manifest this update: Wed 05 Nov 2025 07:57:23 +0000 Manifest next update: Sat 08 Nov 2025 11:28:23 +0000 Files and hashes: 1: 3136302e3139312e3233352e302f32342d3234203d3e20313533313439.roa (hash: 057q45kqdRxLvAiRPvpE9xTv/5F62FgJizN22DjE3/s=) 2: 8B30167CDA20FE7EDCFC647AC86B14BB27E430C8.crl (hash: RR+cHqfsvbuoRuvVthygm98ERPoTwHM+t6n9AO842Sc=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/33dc034f-3823-48af-953d-aaa873b0fb6a/0/8B30167CDA20FE7EDCFC647AC86B14BB27E430C8.crl rsync://repo-rpki.idnic.net/repo/33dc034f-3823-48af-953d-aaa873b0fb6a/0/8B30167CDA20FE7EDCFC647AC86B14BB27E430C8.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/8B30167CDA20FE7EDCFC647AC86B14BB27E430C8.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 08 Nov 2025 08:40:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 40:50:18:1d:af:74:99:b7:e2:41:e2:ce:c3:37:c1:4a:4c:3f:17:30 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8B30167CDA20FE7EDCFC647AC86B14BB27E430C8 Validity Not Before: Nov 5 07:57:23 2025 GMT Not After : Nov 8 11:28:23 2025 GMT Subject: CN=8B797805E25AD9A7C519DF88C1FF343E171CEF32 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:55:78:7a:96:dd:8c:a1:3c:8b:50:19:94:68: d2:23:e5:ed:c2:16:89:9c:e1:71:ca:17:17:45:bf: 37:c9:da:b8:38:21:99:b2:5e:4c:da:08:d4:cf:0f: 98:3f:e3:52:3d:7a:f0:be:b4:3f:d9:c6:59:2c:b8: 82:02:a5:26:38:61:12:b4:00:93:18:90:c0:c1:62: cb:33:16:75:69:df:72:d3:d6:11:cc:e7:a4:8a:65: 9d:a1:83:90:87:15:53:c2:ec:af:d7:01:27:59:18: 83:46:c3:76:56:f6:a0:76:77:93:97:7a:e7:13:ee: e0:05:d8:33:fa:cf:c8:02:d9:92:d7:91:14:63:58: a5:39:bb:91:0b:2c:d1:c5:70:95:c5:3e:19:5d:38: 35:c5:1c:e0:df:44:08:22:34:f8:99:09:24:22:9d: e1:0f:fb:a7:3e:fc:6d:ee:d7:63:08:6f:36:bf:2b: 94:85:f1:59:0e:79:a6:66:5e:7d:47:ee:b6:28:5a: 3e:ed:89:a8:7b:16:f5:5d:50:b2:ca:a1:36:66:38: 8c:37:66:e3:11:fd:2a:73:52:29:5c:e8:5e:2d:cd: e6:9d:8a:8f:3f:dd:42:03:31:0c:6f:5f:58:88:dc: ea:aa:6d:a5:1e:98:36:b9:6f:84:a3:b3:50:c3:32: 55:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8B:79:78:05:E2:5A:D9:A7:C5:19:DF:88:C1:FF:34:3E:17:1C:EF:32 X509v3 Authority Key Identifier: keyid:8B:30:16:7C:DA:20:FE:7E:DC:FC:64:7A:C8:6B:14:BB:27:E4:30:C8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/33dc034f-3823-48af-953d-aaa873b0fb6a/0/8B30167CDA20FE7EDCFC647AC86B14BB27E430C8.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/8B30167CDA20FE7EDCFC647AC86B14BB27E430C8.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/33dc034f-3823-48af-953d-aaa873b0fb6a/0/8B30167CDA20FE7EDCFC647AC86B14BB27E430C8.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a7:0e:a7:99:9f:04:4a:85:3f:c3:f9:5e:59:8a:7a:2c:1f:3e: eb:ec:06:98:8d:69:1b:35:bb:c8:c2:99:3a:35:0e:d3:1a:a3: 99:b4:27:ce:1c:12:8c:77:34:ef:87:01:51:ce:58:a9:c0:39: 2b:b8:30:d4:47:bb:c6:ae:fe:25:96:83:13:65:7d:d6:92:38: a6:4d:2f:ad:b0:1a:2b:db:96:16:04:d7:03:52:65:9f:2b:49: 54:92:49:1b:0f:63:7d:39:41:dd:a2:63:d4:1c:fd:3e:38:93: 05:90:cf:ea:72:69:e5:22:9d:b4:b2:c8:48:81:a5:a9:56:66: 49:c4:7a:c0:92:fd:cd:b2:9f:36:e1:d0:97:6e:cc:d1:ac:d4: 49:f6:98:ad:c2:1a:f6:85:50:eb:53:7e:ac:92:b7:8f:c0:0d: 5a:77:f8:ef:b6:55:4a:07:ed:8b:96:48:93:51:93:3c:f9:7e: da:cf:8b:72:1f:02:68:45:8c:c3:3c:9b:a2:1d:a8:9a:50:44: 1e:35:fe:95:3f:35:2d:0a:75:ef:cb:66:eb:d7:e2:f5:b9:b3: a3:04:b7:aa:ba:92:aa:38:d2:6c:b5:e3:68:dd:36:07:44:70: ea:c6:09:75:3b:6e:2f:22:ff:82:86:cd:da:54:d8:44:53:81: c4:7f:ae:30 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUQFAYHa90mbfiQeLOwzfBSkw/FzAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEIzMDE2N0NEQTIwRkU3RURDRkM2NDdBQzg2QjE0QkIy N0U0MzBDODAeFw0yNTExMDUwNzU3MjNaFw0yNTExMDgxMTI4MjNaMDMxMTAvBgNV BAMTKDhCNzk3ODA1RTI1QUQ5QTdDNTE5REY4OEMxRkYzNDNFMTcxQ0VGMzIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDBVXh6lt2MoTyLUBmUaNIj5e3C Fomc4XHKFxdFvzfJ2rg4IZmyXkzaCNTPD5g/41I9evC+tD/ZxlksuIICpSY4YRK0 AJMYkMDBYsszFnVp33LT1hHM56SKZZ2hg5CHFVPC7K/XASdZGINGw3ZW9qB2d5OX eucT7uAF2DP6z8gC2ZLXkRRjWKU5u5ELLNHFcJXFPhldODXFHODfRAgiNPiZCSQi neEP+6c+/G3u12MIbza/K5SF8VkOeaZmXn1H7rYoWj7tiah7FvVdULLKoTZmOIw3 ZuMR/SpzUilc6F4tzeadio8/3UIDMQxvX1iI3OqqbaUemDa5b4Sjs1DDMlW9AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUi3l4BeJa2afFGd+Iwf80Phcc7zIwHwYDVR0j BBgwFoAUizAWfNog/n7c/GR6yGsUuyfkMMgwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z M2RjMDM0Zi0zODIzLTQ4YWYtOTUzZC1hYWE4NzNiMGZiNmEvMC84QjMwMTY3Q0RB MjBGRTdFRENGQzY0N0FDODZCMTRCQjI3RTQzMEM4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvOEIzMDE2N0NEQTIwRkU3RURDRkM2NDdBQzg2QjE0QkIyN0U0 MzBDOC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMzNkYzAzNGYtMzgyMy00OGFmLTk1 M2QtYWFhODczYjBmYjZhLzAvOEIzMDE2N0NEQTIwRkU3RURDRkM2NDdBQzg2QjE0 QkIyN0U0MzBDOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKcOp5mfBEqFP8P5XlmKeiwfPuvsBpiNaRs1 u8jCmTo1DtMao5m0J84cEox3NO+HAVHOWKnAOSu4MNRHu8au/iWWgxNlfdaSOKZN L62wGivblhYE1wNSZZ8rSVSSSRsPY305Qd2iY9Qc/T44kwWQz+pyaeUinbSyyEiB palWZknEesCS/c2ynzbh0JduzNGs1En2mK3CGvaFUOtTfqySt4/ADVp3+O+2VUoH 7YuWSJNRkzz5ftrPi3IfAmhFjMM8m6IdqJpQRB41/pU/NS0Kde/LZuvX4vW5s6ME t6q6kqo40my142jdNgdEcOrGCXU7bi8i/4KGzdpU2ERTgcR/rjA= -----END CERTIFICATE-----Generated at Wed Nov 5 10:17:55 2025 by rpki-client