$ rpki-client -vvf repo-rpki.idnic.net/repo/5e6c2a91-6afc-4767-bbc1-750613264585/0/8BF02D8172D4CA8A00A9EE2EB8CC099F0727F1CB.mft File: 8BF02D8172D4CA8A00A9EE2EB8CC099F0727F1CB.mft (raw, json) Hash identifier: BW1pWzTAeI7VT1iS6n2xAl7vWFnUUHI4lLlPfRsDM/I= Subject key identifier: 1B:69:53:80:39:F9:9B:4A:52:B9:A5:40:2D:6B:50:2D:D7:41:C9:8E Authority key identifier: 8B:F0:2D:81:72:D4:CA:8A:00:A9:EE:2E:B8:CC:09:9F:07:27:F1:CB Certificate issuer: /CN=8BF02D8172D4CA8A00A9EE2EB8CC099F0727F1CB Certificate serial: 07B5A4B983E071C8EFC03E77A6E17251131134EF Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8BF02D8172D4CA8A00A9EE2EB8CC099F0727F1CB.cer Subject info access: rsync://repo-rpki.idnic.net/repo/5e6c2a91-6afc-4767-bbc1-750613264585/0/8BF02D8172D4CA8A00A9EE2EB8CC099F0727F1CB.mft Manifest number: 021C Signing time: Mon 03 Nov 2025 20:41:46 +0000 Manifest this update: Mon 03 Nov 2025 20:36:46 +0000 Manifest next update: Fri 07 Nov 2025 05:30:46 +0000 Files and hashes: 1: 3130332e3133352e342e302f32322d3234203d3e203338333230.roa (hash: 8BpU0pm5UxOt5Z/5pCKxKlre5ZOR7m9ogADS2QXiNkA=) 2: 8BF02D8172D4CA8A00A9EE2EB8CC099F0727F1CB.crl (hash: sJuqjClzKn1lhsRcc7unAfxGq+6Nmyd+T5iR6Gvzx7Q=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/5e6c2a91-6afc-4767-bbc1-750613264585/0/8BF02D8172D4CA8A00A9EE2EB8CC099F0727F1CB.crl rsync://repo-rpki.idnic.net/repo/5e6c2a91-6afc-4767-bbc1-750613264585/0/8BF02D8172D4CA8A00A9EE2EB8CC099F0727F1CB.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8BF02D8172D4CA8A00A9EE2EB8CC099F0727F1CB.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 07 Nov 2025 05:30:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 07:b5:a4:b9:83:e0:71:c8:ef:c0:3e:77:a6:e1:72:51:13:11:34:ef Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8BF02D8172D4CA8A00A9EE2EB8CC099F0727F1CB Validity Not Before: Nov 3 20:36:46 2025 GMT Not After : Nov 7 05:30:46 2025 GMT Subject: CN=1B69538039F99B4A52B9A5402D6B502DD741C98E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:6d:3e:4a:36:43:c0:54:dc:4d:d4:85:58:c6: 8c:0c:98:21:5e:52:c0:0b:13:e9:be:7a:49:17:23: e5:d5:aa:80:52:33:fc:21:3b:ff:79:ce:ea:af:ca: 5d:c9:b1:5b:e4:6d:1a:9f:06:26:fb:16:81:dc:45: f3:55:35:87:cc:b8:b7:e5:ea:73:fe:30:38:88:cd: 77:48:01:b3:f1:78:8e:c0:17:03:97:9e:87:14:6b: 32:dc:2a:7e:99:cc:68:ed:f3:7c:25:5a:55:6d:0e: 2f:38:a1:9c:7f:cb:13:b8:46:04:6a:c4:a0:9a:9e: bd:6d:34:bb:b3:13:2b:e0:ae:49:7b:5e:6d:c0:88: 57:cb:51:a6:10:f9:22:e4:c6:f7:a5:28:98:5e:32: 7f:71:4d:80:01:cf:69:7c:df:bc:01:23:2e:6a:7f: 79:9e:9b:cb:b8:e8:61:4f:99:a5:c3:95:38:d7:f4: bc:46:37:31:d1:2e:ca:a4:14:04:5d:bc:fc:37:53: e7:85:b6:75:ef:98:9a:e4:8a:a6:8d:8a:3c:4b:2c: bd:d2:77:d3:4f:3d:a6:3a:6d:3d:d1:e9:28:9f:3a: 71:e3:12:ad:7e:19:9e:09:5c:0d:b7:ab:e9:26:9c: e4:4d:c2:3b:4f:64:7b:18:dc:aa:17:3d:48:64:f4: 42:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1B:69:53:80:39:F9:9B:4A:52:B9:A5:40:2D:6B:50:2D:D7:41:C9:8E X509v3 Authority Key Identifier: keyid:8B:F0:2D:81:72:D4:CA:8A:00:A9:EE:2E:B8:CC:09:9F:07:27:F1:CB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/5e6c2a91-6afc-4767-bbc1-750613264585/0/8BF02D8172D4CA8A00A9EE2EB8CC099F0727F1CB.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8BF02D8172D4CA8A00A9EE2EB8CC099F0727F1CB.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/5e6c2a91-6afc-4767-bbc1-750613264585/0/8BF02D8172D4CA8A00A9EE2EB8CC099F0727F1CB.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0b:3d:77:a4:db:4a:ab:02:d8:11:90:08:06:a7:ac:ff:c2:fe: b3:8a:bb:74:77:ef:34:44:80:9e:4d:22:7f:8c:a1:f4:dc:3c: 9c:82:aa:6f:98:3a:18:20:ef:dd:58:be:63:04:99:66:e5:6b: f5:96:83:5e:82:4f:3b:3c:5c:66:d5:27:b4:b0:23:27:55:e8: a7:b3:24:53:db:0d:49:ab:2b:3c:05:0c:f8:9a:9d:11:94:15: f4:fb:de:03:30:c3:1f:71:c6:cb:c7:3a:03:65:19:d2:9f:30: 7e:2c:dd:46:f6:30:dd:1a:cd:b0:8b:e4:13:83:29:90:e7:d5: 54:1a:5b:3f:83:df:37:b5:1e:41:29:33:86:38:f3:ce:4c:c5: a8:d3:55:bc:71:f1:57:7b:06:90:07:16:11:60:f6:2e:36:0d: 12:0b:d1:48:e9:ee:e0:74:bd:df:6b:10:36:b6:eb:09:a5:3f: 0e:51:3d:33:39:0c:8d:85:e6:8c:2e:a6:1a:56:ff:af:a7:ce: 41:5a:65:44:ff:1f:f6:9f:22:f1:cf:cf:67:36:8b:2c:1d:68: 12:d7:40:27:bf:7b:76:0d:51:64:48:d1:dc:1d:87:90:f2:fa: ef:b8:ca:e9:8a:2e:fb:6b:0a:5f:4c:89:4c:de:21:b6:1f:b1: b5:4e:e1:33 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUB7WkuYPgccjvwD53puFyURMRNO8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEJGMDJEODE3MkQ0Q0E4QTAwQTlFRTJFQjhDQzA5OUYw NzI3RjFDQjAeFw0yNTExMDMyMDM2NDZaFw0yNTExMDcwNTMwNDZaMDMxMTAvBgNV BAMTKDFCNjk1MzgwMzlGOTlCNEE1MkI5QTU0MDJENkI1MDJERDc0MUM5OEUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCrbT5KNkPAVNxN1IVYxowMmCFe UsALE+m+ekkXI+XVqoBSM/whO/95zuqvyl3JsVvkbRqfBib7FoHcRfNVNYfMuLfl 6nP+MDiIzXdIAbPxeI7AFwOXnocUazLcKn6ZzGjt83wlWlVtDi84oZx/yxO4RgRq xKCanr1tNLuzEyvgrkl7Xm3AiFfLUaYQ+SLkxvelKJheMn9xTYABz2l837wBIy5q f3mem8u46GFPmaXDlTjX9LxGNzHRLsqkFARdvPw3U+eFtnXvmJrkiqaNijxLLL3S d9NPPaY6bT3R6SifOnHjEq1+GZ4JXA23q+kmnORNwjtPZHsY3KoXPUhk9ELjAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUG2lTgDn5m0pSuaVALWtQLddByY4wHwYDVR0j BBgwFoAUi/AtgXLUyooAqe4uuMwJnwcn8cswDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 ZTZjMmE5MS02YWZjLTQ3NjctYmJjMS03NTA2MTMyNjQ1ODUvMC84QkYwMkQ4MTcy RDRDQThBMDBBOUVFMkVCOENDMDk5RjA3MjdGMUNCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOEJGMDJEODE3MkQ0Q0E4QTAwQTlFRTJFQjhDQzA5OUYwNzI3 RjFDQi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNWU2YzJhOTEtNmFmYy00NzY3LWJi YzEtNzUwNjEzMjY0NTg1LzAvOEJGMDJEODE3MkQ0Q0E4QTAwQTlFRTJFQjhDQzA5 OUYwNzI3RjFDQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAs9d6TbSqsC2BGQCAanrP/C/rOKu3R37zRE gJ5NIn+MofTcPJyCqm+YOhgg791YvmMEmWbla/WWg16CTzs8XGbVJ7SwIydV6Kez JFPbDUmrKzwFDPianRGUFfT73gMwwx9xxsvHOgNlGdKfMH4s3Ub2MN0azbCL5BOD KZDn1VQaWz+D3ze1HkEpM4Y4885MxajTVbxx8Vd7BpAHFhFg9i42DRIL0Ujp7uB0 vd9rEDa26wmlPw5RPTM5DI2F5owuphpW/6+nzkFaZUT/H/afIvHPz2c2iywdaBLX QCe/e3YNUWRI0dwdh5Dy+u+4yumKLvtrCl9MiUzeIbYfsbVO4TM= -----END CERTIFICATE-----Generated at Tue Nov 4 23:25:58 2025 by rpki-client