$ rpki-client -vvf repo-rpki.idnic.net/repo/3c86cb5d-f07d-426a-8e5e-a77a978dd2ee/0/8DA8C02216F0C7D625FEFA7EF659021425920442.mft File: 8DA8C02216F0C7D625FEFA7EF659021425920442.mft (raw, json) Hash identifier: nj0O9OPD39tQykk27yzzOS/oYIdiC2ATq3cG6ycTKjE= Subject key identifier: 3E:68:45:FB:B7:C3:BA:C2:52:C0:F0:CF:70:D5:80:31:C7:CC:22:38 Authority key identifier: 8D:A8:C0:22:16:F0:C7:D6:25:FE:FA:7E:F6:59:02:14:25:92:04:42 Certificate issuer: /CN=8DA8C02216F0C7D625FEFA7EF659021425920442 Certificate serial: 34867021595D6C2B5F42F602F2820362334E05B8 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8DA8C02216F0C7D625FEFA7EF659021425920442.cer Subject info access: rsync://repo-rpki.idnic.net/repo/3c86cb5d-f07d-426a-8e5e-a77a978dd2ee/0/8DA8C02216F0C7D625FEFA7EF659021425920442.mft Manifest number: 01DE Signing time: Tue 04 Nov 2025 10:51:44 +0000 Manifest this update: Tue 04 Nov 2025 10:46:44 +0000 Manifest next update: Fri 07 Nov 2025 22:26:44 +0000 Files and hashes: 1: 8DA8C02216F0C7D625FEFA7EF659021425920442.crl (hash: c1UbsA/482QosGiq93aCjJBHrsOsiNe3s5l2d2w4hXc=) 2: 3130332e37312e32352e302f32342d3234203d3e20313530323333.roa (hash: 75IsX464I80YzdtDMOG0/64Es8A4yar1LsqWA90nFOo=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/3c86cb5d-f07d-426a-8e5e-a77a978dd2ee/0/8DA8C02216F0C7D625FEFA7EF659021425920442.crl rsync://repo-rpki.idnic.net/repo/3c86cb5d-f07d-426a-8e5e-a77a978dd2ee/0/8DA8C02216F0C7D625FEFA7EF659021425920442.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8DA8C02216F0C7D625FEFA7EF659021425920442.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 07 Nov 2025 22:26:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 34:86:70:21:59:5d:6c:2b:5f:42:f6:02:f2:82:03:62:33:4e:05:b8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8DA8C02216F0C7D625FEFA7EF659021425920442 Validity Not Before: Nov 4 10:46:44 2025 GMT Not After : Nov 7 22:26:44 2025 GMT Subject: CN=3E6845FBB7C3BAC252C0F0CF70D58031C7CC2238 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:39:bb:d7:45:df:22:ba:d2:7c:d5:50:f8:5a: 3d:1a:fa:0f:85:f7:4c:9d:4f:ad:71:8d:d0:52:1d: 40:cd:85:8e:4f:7f:82:b6:c6:7b:2d:5f:e5:aa:76: f4:1a:45:e2:a2:45:d4:f6:df:d0:03:93:e5:eb:f6: e6:b1:00:82:84:65:15:b0:9b:4d:d8:1b:a0:db:a1: 4e:44:5d:23:28:e5:92:c1:86:bb:36:6c:65:ab:8c: e0:80:d0:30:aa:0f:15:85:ad:65:82:57:0d:c8:a6: f1:f3:de:f3:8c:6e:5f:f9:dd:8a:b9:80:ae:f2:25: f9:e1:70:2e:ad:7c:56:b0:65:35:5a:6d:49:7b:b1: 69:b8:e9:ae:4a:93:6e:3d:82:90:04:81:8e:a3:fa: 2b:7a:32:ee:14:db:58:a5:c9:b1:74:28:fc:9e:f9: 10:8f:14:65:5a:ba:90:d1:cb:e4:30:cb:39:e0:61: b8:cc:78:6c:a3:2e:f4:14:a0:f8:51:60:63:73:21: 11:b4:c0:78:46:ec:b6:28:ad:79:19:17:dd:0f:e2: 87:22:8d:e3:7f:76:82:6f:64:a5:1f:52:7b:40:3c: 62:09:3f:4b:e0:50:56:48:22:32:5f:26:f8:71:f9: 3e:2d:b9:9f:dc:2a:c1:0d:2f:93:b4:c6:a8:fd:b5: e8:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3E:68:45:FB:B7:C3:BA:C2:52:C0:F0:CF:70:D5:80:31:C7:CC:22:38 X509v3 Authority Key Identifier: keyid:8D:A8:C0:22:16:F0:C7:D6:25:FE:FA:7E:F6:59:02:14:25:92:04:42 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/3c86cb5d-f07d-426a-8e5e-a77a978dd2ee/0/8DA8C02216F0C7D625FEFA7EF659021425920442.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8DA8C02216F0C7D625FEFA7EF659021425920442.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3c86cb5d-f07d-426a-8e5e-a77a978dd2ee/0/8DA8C02216F0C7D625FEFA7EF659021425920442.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c0:21:62:22:b9:c6:8f:28:f1:7f:6a:27:7f:66:88:66:86:3a: a7:96:a1:a8:a7:9e:9d:d8:3f:cd:db:1a:64:c5:65:37:ed:0d: ec:9a:8f:c3:b4:79:55:0c:ad:3b:28:40:c7:f9:7e:4c:9b:5e: fd:08:52:6c:6c:34:9e:a2:10:62:b5:20:27:6e:6f:15:8a:d4: 23:ff:a4:63:2d:f8:aa:e8:f0:11:84:87:b3:55:c1:8c:f3:f3: a4:54:2b:83:e6:c3:78:96:7b:d3:ab:49:62:8b:08:87:61:1b: 48:a0:0e:92:2e:38:8e:cb:fa:7f:c4:5d:21:3b:2d:8c:30:7a: 32:53:b4:81:da:c8:28:d3:87:b4:fa:fa:e3:e6:0b:26:98:0d: 85:f9:a2:bd:da:d7:c7:b3:fe:f4:a9:6d:25:40:bb:38:e2:05: ed:9a:f0:fb:19:c8:c4:31:fa:b6:09:00:44:53:1e:8c:d8:aa: c1:15:2a:1c:21:ec:35:4b:43:89:f7:4b:13:ba:5c:c0:c6:3e: 7f:45:f0:ca:43:ca:54:92:aa:07:d3:04:30:0f:17:4a:35:d9: a6:90:3e:16:b9:c3:50:20:3d:2f:70:76:19:85:bc:41:c1:dd: 4f:6c:d1:c8:ab:ee:90:48:42:c9:25:58:4e:64:5c:83:ad:a4: 76:7a:2b:b6 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUNIZwIVldbCtfQvYC8oIDYjNOBbgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOERBOEMwMjIxNkYwQzdENjI1RkVGQTdFRjY1OTAyMTQy NTkyMDQ0MjAeFw0yNTExMDQxMDQ2NDRaFw0yNTExMDcyMjI2NDRaMDMxMTAvBgNV BAMTKDNFNjg0NUZCQjdDM0JBQzI1MkMwRjBDRjcwRDU4MDMxQzdDQzIyMzgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC5ObvXRd8iutJ81VD4Wj0a+g+F 90ydT61xjdBSHUDNhY5Pf4K2xnstX+WqdvQaReKiRdT239ADk+Xr9uaxAIKEZRWw m03YG6DboU5EXSMo5ZLBhrs2bGWrjOCA0DCqDxWFrWWCVw3IpvHz3vOMbl/53Yq5 gK7yJfnhcC6tfFawZTVabUl7sWm46a5Kk249gpAEgY6j+it6Mu4U21ilybF0KPye +RCPFGVaupDRy+QwyzngYbjMeGyjLvQUoPhRYGNzIRG0wHhG7LYorXkZF90P4oci jeN/doJvZKUfUntAPGIJP0vgUFZIIjJfJvhx+T4tuZ/cKsENL5O0xqj9tejxAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUPmhF+7fDusJSwPDPcNWAMcfMIjgwHwYDVR0j BBgwFoAUjajAIhbwx9Yl/vp+9lkCFCWSBEIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z Yzg2Y2I1ZC1mMDdkLTQyNmEtOGU1ZS1hNzdhOTc4ZGQyZWUvMC84REE4QzAyMjE2 RjBDN0Q2MjVGRUZBN0VGNjU5MDIxNDI1OTIwNDQyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOERBOEMwMjIxNkYwQzdENjI1RkVGQTdFRjY1OTAyMTQyNTky MDQ0Mi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vM2M4NmNiNWQtZjA3ZC00MjZhLThl NWUtYTc3YTk3OGRkMmVlLzAvOERBOEMwMjIxNkYwQzdENjI1RkVGQTdFRjY1OTAy MTQyNTkyMDQ0Mi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAMAhYiK5xo8o8X9qJ39miGaGOqeWoainnp3Y P83bGmTFZTftDeyaj8O0eVUMrTsoQMf5fkybXv0IUmxsNJ6iEGK1ICdubxWK1CP/ pGMt+Kro8BGEh7NVwYzz86RUK4Pmw3iWe9OrSWKLCIdhG0igDpIuOI7L+n/EXSE7 LYwwejJTtIHayCjTh7T6+uPmCyaYDYX5or3a18ez/vSpbSVAuzjiBe2a8PsZyMQx +rYJAERTHozYqsEVKhwh7DVLQ4n3SxO6XMDGPn9F8MpDylSSqgfTBDAPF0o12aaQ Pha5w1AgPS9wdhmFvEHB3U9s0cir7pBIQsklWE5kXIOtpHZ6K7Y= -----END CERTIFICATE-----Generated at Thu Nov 6 04:21:01 2025 by rpki-client