$ rpki-client -vvf repo-rpki.idnic.net/repo/4157c9ac-52db-4dba-ac77-845e2ddd8879/0/8D7AD1F796C88BCD49E1BEC42851AFA58BD78588.mft File: 8D7AD1F796C88BCD49E1BEC42851AFA58BD78588.mft (raw, json) Hash identifier: Xwr/mrZc2DIxLL0oVVgrdoo1IfIFXE9PEil2Pfdi0s8= Subject key identifier: 11:03:C8:4D:02:DC:54:88:B6:6C:AC:00:1B:FD:BE:89:C8:F0:E2:E4 Authority key identifier: 8D:7A:D1:F7:96:C8:8B:CD:49:E1:BE:C4:28:51:AF:A5:8B:D7:85:88 Certificate issuer: /CN=8D7AD1F796C88BCD49E1BEC42851AFA58BD78588 Certificate serial: 458751B305BC4F98F7DC5A1FA2E0BD9B4011AB39 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8D7AD1F796C88BCD49E1BEC42851AFA58BD78588.cer Subject info access: rsync://repo-rpki.idnic.net/repo/4157c9ac-52db-4dba-ac77-845e2ddd8879/0/8D7AD1F796C88BCD49E1BEC42851AFA58BD78588.mft Manifest number: 01A8 Signing time: Sun 02 Nov 2025 22:01:38 +0000 Manifest this update: Sun 02 Nov 2025 21:56:38 +0000 Manifest next update: Thu 06 Nov 2025 07:53:38 +0000 Files and hashes: 1: 3130332e3130312e39362e302f32332d3233203d3e20313530393430.roa (hash: lwBU7RZrxpXV+tNL6ldwUUEfAC8x198/UcNXhcVqIDE=) 2: 3130332e3130312e39362e302f32342d3234203d3e20313530393430.roa (hash: S5y/AAm56aWRItZwk28UKrK77+5w1nu1pwxZLQMOads=) 3: 3130332e3130312e39372e302f32342d3234203d3e20313530393430.roa (hash: aTXk/DsjXzFyIklyAQb47qbqcaGolhR0lzBTP747Tls=) 4: 8D7AD1F796C88BCD49E1BEC42851AFA58BD78588.crl (hash: znp9fkCIBPf4WUK1QZwn8gKCX4RFdxKbE9PTZi10mLM=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/4157c9ac-52db-4dba-ac77-845e2ddd8879/0/8D7AD1F796C88BCD49E1BEC42851AFA58BD78588.crl rsync://repo-rpki.idnic.net/repo/4157c9ac-52db-4dba-ac77-845e2ddd8879/0/8D7AD1F796C88BCD49E1BEC42851AFA58BD78588.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8D7AD1F796C88BCD49E1BEC42851AFA58BD78588.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 06 Nov 2025 07:53:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 45:87:51:b3:05:bc:4f:98:f7:dc:5a:1f:a2:e0:bd:9b:40:11:ab:39 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8D7AD1F796C88BCD49E1BEC42851AFA58BD78588 Validity Not Before: Nov 2 21:56:38 2025 GMT Not After : Nov 6 07:53:38 2025 GMT Subject: CN=1103C84D02DC5488B66CAC001BFDBE89C8F0E2E4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:5e:73:fb:b9:31:5f:6f:dd:82:b4:7e:37:5a: 29:77:ad:5d:cd:1b:41:d9:02:c2:48:66:19:3b:ed: bd:26:c9:6f:2f:6e:5b:70:73:7c:8f:ea:04:9e:a8: 54:38:8b:3e:a1:65:44:d0:c1:6c:75:a0:55:27:96: be:35:ae:1d:86:ee:de:73:d6:3d:c2:ad:90:5f:b2: d4:4e:fe:8e:26:c0:5e:58:58:e1:de:34:d4:08:f9: 57:d6:75:25:f8:d8:ee:4e:ed:56:d1:f2:b6:f7:d4: 29:82:35:d6:d2:b6:ec:07:d4:cc:58:43:f3:4e:13: b4:15:a2:c7:93:26:0b:13:7e:b7:a7:61:80:88:48: a5:ba:cd:bf:cc:06:ce:8a:3c:86:87:29:23:ca:98: 01:ce:5b:77:22:90:d1:04:34:94:81:5c:18:64:a6: 5c:e9:f2:42:a2:c4:47:03:b0:d7:2f:05:6b:ff:6c: 1b:50:35:42:e2:90:82:fc:1a:dd:bf:37:c1:c8:9f: d2:f7:d6:fa:7e:e3:e8:1b:7d:74:be:5a:7c:5d:e3: 26:0b:51:da:1a:aa:3e:ac:4b:f8:17:e3:bb:5a:4a: 3d:0d:41:a0:77:d4:d0:16:98:28:d2:49:22:d8:31: fc:db:29:f2:56:0e:ab:24:bd:56:9b:06:24:af:49: 5c:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:03:C8:4D:02:DC:54:88:B6:6C:AC:00:1B:FD:BE:89:C8:F0:E2:E4 X509v3 Authority Key Identifier: keyid:8D:7A:D1:F7:96:C8:8B:CD:49:E1:BE:C4:28:51:AF:A5:8B:D7:85:88 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/4157c9ac-52db-4dba-ac77-845e2ddd8879/0/8D7AD1F796C88BCD49E1BEC42851AFA58BD78588.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8D7AD1F796C88BCD49E1BEC42851AFA58BD78588.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/4157c9ac-52db-4dba-ac77-845e2ddd8879/0/8D7AD1F796C88BCD49E1BEC42851AFA58BD78588.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 76:4d:2c:e6:32:8b:26:a7:82:4f:58:80:8f:79:09:d5:1c:52: 93:5b:c9:4f:5e:ba:b3:26:47:11:36:04:13:f3:30:69:5b:0e: 2c:5e:a4:ca:9b:df:db:86:26:45:cd:d4:1e:60:d2:86:9c:27: 3e:3b:ed:04:99:db:dc:82:9c:49:85:7e:af:1d:44:05:d2:99: f1:05:bf:9e:13:0d:86:59:ca:a5:88:96:54:f0:fc:7d:09:db: 65:5e:3a:4f:9a:03:76:83:d4:b3:61:e8:bb:9d:c0:b3:51:0e: e5:52:70:78:25:67:4c:ef:36:0f:ef:9e:7f:8a:20:c4:e4:c9: e4:9c:27:99:81:cc:02:5a:b2:ad:85:08:c3:29:8c:b9:e8:ff: 23:87:2e:5a:0e:a1:36:43:b4:29:a9:fb:be:4b:aa:79:8d:3c: 13:73:29:b0:42:d8:13:51:8f:f0:94:1d:59:cf:7d:ab:a9:7c: 98:12:eb:0d:14:fb:b0:7d:10:db:4e:b2:e3:fb:7b:32:29:13: 05:3d:a9:d7:7b:7f:30:c1:0c:55:dd:43:3c:78:4d:72:16:15: 0b:35:e9:2c:63:98:d2:b5:06:93:18:51:5b:19:c8:50:9d:96: 66:af:d4:f1:f9:53:b5:23:ce:9f:b2:a7:29:77:4b:39:6d:bc: 03:f3:3f:0a -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIURYdRswW8T5j33FofouC9m0ARqzkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEQ3QUQxRjc5NkM4OEJDRDQ5RTFCRUM0Mjg1MUFGQTU4 QkQ3ODU4ODAeFw0yNTExMDIyMTU2MzhaFw0yNTExMDYwNzUzMzhaMDMxMTAvBgNV BAMTKDExMDNDODREMDJEQzU0ODhCNjZDQUMwMDFCRkRCRTg5QzhGMEUyRTQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDBXnP7uTFfb92CtH43Wil3rV3N G0HZAsJIZhk77b0myW8vbltwc3yP6gSeqFQ4iz6hZUTQwWx1oFUnlr41rh2G7t5z 1j3CrZBfstRO/o4mwF5YWOHeNNQI+VfWdSX42O5O7VbR8rb31CmCNdbStuwH1MxY Q/NOE7QVoseTJgsTfrenYYCISKW6zb/MBs6KPIaHKSPKmAHOW3cikNEENJSBXBhk plzp8kKixEcDsNcvBWv/bBtQNULikIL8Gt2/N8HIn9L31vp+4+gbfXS+Wnxd4yYL Udoaqj6sS/gX47taSj0NQaB31NAWmCjSSSLYMfzbKfJWDqskvVabBiSvSVyhAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUEQPITQLcVIi2bKwAG/2+icjw4uQwHwYDVR0j BBgwFoAUjXrR95bIi81J4b7EKFGvpYvXhYgwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 MTU3YzlhYy01MmRiLTRkYmEtYWM3Ny04NDVlMmRkZDg4NzkvMC84RDdBRDFGNzk2 Qzg4QkNENDlFMUJFQzQyODUxQUZBNThCRDc4NTg4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOEQ3QUQxRjc5NkM4OEJDRDQ5RTFCRUM0Mjg1MUFGQTU4QkQ3 ODU4OC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNDE1N2M5YWMtNTJkYi00ZGJhLWFj NzctODQ1ZTJkZGQ4ODc5LzAvOEQ3QUQxRjc5NkM4OEJDRDQ5RTFCRUM0Mjg1MUFG QTU4QkQ3ODU4OC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHZNLOYyiyangk9YgI95CdUcUpNbyU9eurMm RxE2BBPzMGlbDixepMqb39uGJkXN1B5g0oacJz477QSZ29yCnEmFfq8dRAXSmfEF v54TDYZZyqWIllTw/H0J22VeOk+aA3aD1LNh6LudwLNRDuVScHglZ0zvNg/vnn+K IMTkyeScJ5mBzAJasq2FCMMpjLno/yOHLloOoTZDtCmp+75LqnmNPBNzKbBC2BNR j/CUHVnPfaupfJgS6w0U+7B9ENtOsuP7ezIpEwU9qdd7fzDBDFXdQzx4TXIWFQs1 6SxjmNK1BpMYUVsZyFCdlmav1PH5U7Ujzp+ypyl3SzltvAPzPwo= -----END CERTIFICATE-----Generated at Tue Nov 4 12:55:28 2025 by rpki-client