$ rpki-client -vvf repo-rpki.idnic.net/repo/5252ead3-dc8f-4d86-afcf-a140e5b87532/0/8CFB227DA1EF51DB23364BBA034D0F68A09A5F59.mft File: 8CFB227DA1EF51DB23364BBA034D0F68A09A5F59.mft (raw, json) Hash identifier: Gs68uXtlhuKWdj6gtOwFgjzFvyzM2h8YVmtUD+FxXj8= Subject key identifier: 5A:31:E9:0D:6F:6F:B5:8A:CD:D5:34:9D:E0:47:51:57:5A:84:E0:02 Authority key identifier: 8C:FB:22:7D:A1:EF:51:DB:23:36:4B:BA:03:4D:0F:68:A0:9A:5F:59 Certificate issuer: /CN=8CFB227DA1EF51DB23364BBA034D0F68A09A5F59 Certificate serial: 0D273B4EF3D24BC18B3053E2FA9F7B41C7CABBA5 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8CFB227DA1EF51DB23364BBA034D0F68A09A5F59.cer Subject info access: rsync://repo-rpki.idnic.net/repo/5252ead3-dc8f-4d86-afcf-a140e5b87532/0/8CFB227DA1EF51DB23364BBA034D0F68A09A5F59.mft Manifest number: 023D Signing time: Mon 03 Nov 2025 16:01:32 +0000 Manifest this update: Mon 03 Nov 2025 15:56:32 +0000 Manifest next update: Fri 07 Nov 2025 02:42:32 +0000 Files and hashes: 1: 3130332e3138362e3139342e302f32332d3234203d3e20313439373132.roa (hash: S9MFaIq/j9TJ63dOJfnzWaZP6j2QyCQRqTU45iGYFSM=) 2: 3130332e3138362e3139352e302f32342d3234203d3e203438343635.roa (hash: 9nS/psP6uP/NgK0GsDYJioeVISZGFYj6wNXBWyPXoig=) 3: 3130332e3138362e3139342e302f32342d3234203d3e20313439373132.roa (hash: uzPIoUslKlL0kCJ3Mr8GlDHsPvFS4WU5l7ZsMhLtDsU=) 4: 8CFB227DA1EF51DB23364BBA034D0F68A09A5F59.crl (hash: rmX7dGwNFxlGyOrp4swgHSpE2MDz8XlCKYrz+6LfhP4=) 5: 3130332e3138362e3139342e302f32332d3233203d3e20313439373132.roa (hash: swBTOVyl/nQxFd9eqJx6PzMQ7ExSAWTFjV6g64/KqU0=) 6: 3130332e3138362e3139342e302f32342d3234203d3e203438343635.roa (hash: nuw56AWJFQx7bF2mLso7Fp7ypapHW7bx18alMUZHm9U=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/5252ead3-dc8f-4d86-afcf-a140e5b87532/0/8CFB227DA1EF51DB23364BBA034D0F68A09A5F59.crl rsync://repo-rpki.idnic.net/repo/5252ead3-dc8f-4d86-afcf-a140e5b87532/0/8CFB227DA1EF51DB23364BBA034D0F68A09A5F59.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8CFB227DA1EF51DB23364BBA034D0F68A09A5F59.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 07 Nov 2025 02:42:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0d:27:3b:4e:f3:d2:4b:c1:8b:30:53:e2:fa:9f:7b:41:c7:ca:bb:a5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8CFB227DA1EF51DB23364BBA034D0F68A09A5F59 Validity Not Before: Nov 3 15:56:32 2025 GMT Not After : Nov 7 02:42:32 2025 GMT Subject: CN=5A31E90D6F6FB58ACDD5349DE04751575A84E002 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:34:93:b8:4f:25:df:bc:b8:22:d6:e0:05:02: ca:52:5e:bc:82:ec:38:bd:9f:40:29:02:89:0a:9f: a1:f9:bf:43:43:d0:d4:9f:e0:7f:ec:43:f0:b4:43: 71:6d:ce:5a:0b:19:ab:8f:6f:fe:5d:76:de:ad:14: 6c:2f:24:5b:a4:7a:e1:e9:4c:78:fc:80:20:28:58: 24:3b:81:e1:e2:4f:b7:ed:44:b5:cc:4d:93:0b:69: 56:85:aa:f9:e5:a9:19:eb:e5:71:67:c4:ba:9c:91: 5a:96:c4:7c:2d:07:98:a7:a7:0a:00:dd:08:69:56: e4:3f:65:75:ac:29:00:5b:c3:7c:29:c9:b3:e2:6f: 87:27:fd:ba:20:04:b7:09:ed:98:08:a1:bf:0a:85: 0e:ce:72:69:29:54:6a:c9:9d:ac:70:3d:78:cd:75: d7:24:61:31:a6:77:17:b2:3c:cd:7e:87:2d:65:3a: a9:1a:8e:55:b4:b6:3f:54:f9:da:4d:c0:3f:6d:3c: b9:a5:1c:33:b2:2c:f5:dc:0e:bc:4c:8e:f6:d5:fd: 79:c0:fd:6e:55:79:38:7d:ad:a3:fe:0c:91:2c:28: b2:a1:fb:ca:fb:eb:e0:49:80:d0:27:d1:24:94:9c: b4:f7:74:ca:fb:d8:27:30:38:0b:ea:23:21:0d:6c: a2:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:31:E9:0D:6F:6F:B5:8A:CD:D5:34:9D:E0:47:51:57:5A:84:E0:02 X509v3 Authority Key Identifier: keyid:8C:FB:22:7D:A1:EF:51:DB:23:36:4B:BA:03:4D:0F:68:A0:9A:5F:59 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/5252ead3-dc8f-4d86-afcf-a140e5b87532/0/8CFB227DA1EF51DB23364BBA034D0F68A09A5F59.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8CFB227DA1EF51DB23364BBA034D0F68A09A5F59.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/5252ead3-dc8f-4d86-afcf-a140e5b87532/0/8CFB227DA1EF51DB23364BBA034D0F68A09A5F59.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c0:ee:7d:c9:91:ac:48:05:f3:51:4f:7a:6d:05:60:c4:c8:70: 51:19:be:b8:36:bf:ee:68:b9:ab:60:1d:7a:57:b7:d8:36:ac: fd:97:c2:33:0b:60:50:73:eb:2d:ee:60:52:03:da:da:c1:8c: a9:68:04:a0:eb:5b:d7:d9:8e:e0:fa:92:aa:00:2d:f7:64:b1: 50:c8:34:db:ff:a5:3a:11:ae:e0:34:42:cd:09:cb:75:b0:f3: 25:df:79:7d:67:77:c0:3b:47:1c:d2:12:1a:c8:32:df:07:de: bb:63:b9:81:63:36:40:29:84:2d:d3:fc:db:58:ea:0d:a5:5d: 58:5b:38:6c:e9:49:09:97:70:19:12:b2:1d:88:20:e3:6a:91: 95:cc:60:0a:b4:ee:33:14:ec:0b:d9:6d:70:24:1e:5c:d3:b0: f2:2b:8a:a0:25:0d:7f:17:af:1f:cf:0b:70:60:2e:27:e3:ff: a9:fc:c1:82:ba:cc:40:a2:ea:2a:3e:bb:ed:fd:fd:65:49:cc: ec:d6:8f:ae:2d:0e:84:b0:5d:ae:ff:4e:97:8c:af:e5:57:7f: 2a:82:cf:51:6b:ce:87:4a:c1:3d:47:81:e3:d6:c9:dd:bd:a4: 0d:6c:d8:1b:1e:ea:1d:a1:7a:93:a9:38:6d:11:d6:7d:51:a8: e7:89:41:5b -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUDSc7TvPSS8GLMFPi+p97QcfKu6UwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOENGQjIyN0RBMUVGNTFEQjIzMzY0QkJBMDM0RDBGNjhB MDlBNUY1OTAeFw0yNTExMDMxNTU2MzJaFw0yNTExMDcwMjQyMzJaMDMxMTAvBgNV BAMTKDVBMzFFOTBENkY2RkI1OEFDREQ1MzQ5REUwNDc1MTU3NUE4NEUwMDIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDBNJO4TyXfvLgi1uAFAspSXryC 7Di9n0ApAokKn6H5v0ND0NSf4H/sQ/C0Q3FtzloLGauPb/5ddt6tFGwvJFukeuHp THj8gCAoWCQ7geHiT7ftRLXMTZMLaVaFqvnlqRnr5XFnxLqckVqWxHwtB5inpwoA 3QhpVuQ/ZXWsKQBbw3wpybPib4cn/bogBLcJ7ZgIob8KhQ7OcmkpVGrJnaxwPXjN ddckYTGmdxeyPM1+hy1lOqkajlW0tj9U+dpNwD9tPLmlHDOyLPXcDrxMjvbV/XnA /W5VeTh9raP+DJEsKLKh+8r76+BJgNAn0SSUnLT3dMr72CcwOAvqIyENbKJXAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUWjHpDW9vtYrN1TSd4EdRV1qE4AIwHwYDVR0j BBgwFoAUjPsifaHvUdsjNku6A00PaKCaX1kwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 MjUyZWFkMy1kYzhmLTRkODYtYWZjZi1hMTQwZTViODc1MzIvMC84Q0ZCMjI3REEx RUY1MURCMjMzNjRCQkEwMzREMEY2OEEwOUE1RjU5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOENGQjIyN0RBMUVGNTFEQjIzMzY0QkJBMDM0RDBGNjhBMDlB NUY1OS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNTI1MmVhZDMtZGM4Zi00ZDg2LWFm Y2YtYTE0MGU1Yjg3NTMyLzAvOENGQjIyN0RBMUVGNTFEQjIzMzY0QkJBMDM0RDBG NjhBMDlBNUY1OS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAMDufcmRrEgF81FPem0FYMTIcFEZvrg2v+5o uatgHXpXt9g2rP2XwjMLYFBz6y3uYFID2trBjKloBKDrW9fZjuD6kqoALfdksVDI NNv/pToRruA0Qs0Jy3Ww8yXfeX1nd8A7RxzSEhrIMt8H3rtjuYFjNkAphC3T/NtY 6g2lXVhbOGzpSQmXcBkSsh2IIONqkZXMYAq07jMU7AvZbXAkHlzTsPIriqAlDX8X rx/PC3BgLifj/6n8wYK6zECi6io+u+39/WVJzOzWj64tDoSwXa7/TpeMr+VXfyqC z1FrzodKwT1HgePWyd29pA1s2Bse6h2hepOpOG0R1n1RqOeJQVs= -----END CERTIFICATE-----Generated at Tue Nov 4 18:52:24 2025 by rpki-client