$ rpki-client -vvf repo-rpki.idnic.net/repo/62f5986b-c764-4cd7-b414-a25bd05c3f92/0/8D5A49C9E42E371BFD1E67ACE1B3D55EC1ABF73F.mft File: 8D5A49C9E42E371BFD1E67ACE1B3D55EC1ABF73F.mft (raw, json) Hash identifier: HsnZkxYWjcnJmDfy3x88KSAftXz3ThGL8/sS0dCCtZo= Subject key identifier: 62:44:B7:68:E5:6A:BA:79:45:63:8C:16:40:21:B3:1E:D8:03:F0:E8 Authority key identifier: 8D:5A:49:C9:E4:2E:37:1B:FD:1E:67:AC:E1:B3:D5:5E:C1:AB:F7:3F Certificate issuer: /CN=8D5A49C9E42E371BFD1E67ACE1B3D55EC1ABF73F Certificate serial: 3A45C59159E0C652E75F482308B8003DCA6F464A Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8D5A49C9E42E371BFD1E67ACE1B3D55EC1ABF73F.cer Subject info access: rsync://repo-rpki.idnic.net/repo/62f5986b-c764-4cd7-b414-a25bd05c3f92/0/8D5A49C9E42E371BFD1E67ACE1B3D55EC1ABF73F.mft Manifest number: B4 Signing time: Sun 02 Nov 2025 10:20:54 +0000 Manifest this update: Sun 02 Nov 2025 10:15:54 +0000 Manifest next update: Wed 05 Nov 2025 18:00:54 +0000 Files and hashes: 1: 8D5A49C9E42E371BFD1E67ACE1B3D55EC1ABF73F.crl (hash: wAB/1t3e0uAZ7F8IPwzysO7qNt8CRUFt6hvucZxWAp8=) 2: 3130332e3231362e3130352e302f32342d3234203d3e20313531353830.roa (hash: LW5rOerEeQ4o2LL00sXUmEen9sAHKxhrciVztv4Q/SE=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/62f5986b-c764-4cd7-b414-a25bd05c3f92/0/8D5A49C9E42E371BFD1E67ACE1B3D55EC1ABF73F.crl rsync://repo-rpki.idnic.net/repo/62f5986b-c764-4cd7-b414-a25bd05c3f92/0/8D5A49C9E42E371BFD1E67ACE1B3D55EC1ABF73F.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8D5A49C9E42E371BFD1E67ACE1B3D55EC1ABF73F.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 05 Nov 2025 18:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3a:45:c5:91:59:e0:c6:52:e7:5f:48:23:08:b8:00:3d:ca:6f:46:4a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8D5A49C9E42E371BFD1E67ACE1B3D55EC1ABF73F Validity Not Before: Nov 2 10:15:54 2025 GMT Not After : Nov 5 18:00:54 2025 GMT Subject: CN=6244B768E56ABA7945638C164021B31ED803F0E8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:c1:8d:90:3f:86:11:e8:98:81:76:99:96:aa: 10:69:37:59:14:4f:c3:d0:df:02:d7:e9:14:d6:cb: d9:37:dd:18:cf:e8:ee:e8:e9:02:d9:4a:33:ff:dc: e0:76:e0:35:2c:2c:ff:bc:7f:e5:53:53:e2:63:4a: e2:b7:ff:07:20:9c:b3:53:90:5e:cc:e6:c3:b8:36: 74:69:64:da:2c:94:ab:b8:a8:25:ba:f0:ef:64:19: 04:1e:ea:af:3d:7c:0d:d2:82:14:9f:50:e6:88:98: da:6e:47:75:f9:4e:24:51:12:07:a1:98:25:55:80: 14:f7:2f:8f:58:c5:db:e5:f4:97:5e:7f:1e:ec:05: 7e:73:a3:d3:53:e4:31:62:1e:c0:59:04:fc:06:ca: 71:4f:77:ed:54:4e:52:13:6c:90:ec:a9:1c:fa:1e: 0a:48:9a:2f:f5:d1:2f:b6:ec:ae:b4:cc:87:31:6f: 83:b4:59:d6:15:ac:e3:bb:c4:f4:2c:33:ce:ff:55: d0:ed:ab:7d:2a:44:89:f4:9e:18:61:17:33:49:e0: 4f:9e:52:2a:28:7e:3a:85:6c:9a:98:1e:cc:05:ea: 28:3e:2d:65:3b:1b:da:6b:0f:13:a1:32:40:a1:75: 44:b0:16:ca:96:4c:93:8e:5e:86:e7:0b:d6:3a:70: 03:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 62:44:B7:68:E5:6A:BA:79:45:63:8C:16:40:21:B3:1E:D8:03:F0:E8 X509v3 Authority Key Identifier: keyid:8D:5A:49:C9:E4:2E:37:1B:FD:1E:67:AC:E1:B3:D5:5E:C1:AB:F7:3F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/62f5986b-c764-4cd7-b414-a25bd05c3f92/0/8D5A49C9E42E371BFD1E67ACE1B3D55EC1ABF73F.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8D5A49C9E42E371BFD1E67ACE1B3D55EC1ABF73F.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/62f5986b-c764-4cd7-b414-a25bd05c3f92/0/8D5A49C9E42E371BFD1E67ACE1B3D55EC1ABF73F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 80:04:8c:bf:80:5a:1c:2e:bc:07:8e:4e:ee:01:a2:df:9e:1c: 85:b1:70:31:be:fb:41:a1:8d:62:0f:e1:40:13:bb:ac:a1:9f: bf:b7:7e:97:b3:c8:b9:12:fb:51:66:b4:61:ed:6e:1f:10:b3: 9d:48:01:cb:a0:98:80:df:f9:23:69:e6:ab:de:0f:a3:ca:3a: 37:2a:d9:6b:98:f7:5a:e9:b3:e7:e5:d5:90:1b:2c:15:6e:15: 78:73:04:52:52:79:45:31:4d:42:a4:2c:19:6e:b2:36:16:6c: ce:a0:61:20:99:f9:f3:fd:da:ca:e1:24:db:c8:7d:81:10:f7: 30:60:11:4f:e8:0a:e6:0e:60:1d:d7:ec:a7:6e:e4:3b:a6:9d: bc:45:d7:ec:7d:2c:88:b3:0e:42:6b:63:a4:d5:80:d1:0d:09: fc:cb:81:1e:8b:26:b2:23:40:2e:d2:1d:7b:1b:6c:d4:d8:47: c7:32:73:d9:1a:69:8c:46:85:d0:ab:87:68:45:dd:e1:ff:64: 75:5f:bb:0c:86:e4:4d:96:e2:0d:48:38:9d:47:a2:ed:6c:a2: 7e:a4:9b:32:b7:cd:47:e1:ba:d2:ed:22:90:18:ec:a4:d7:66: 88:07:a7:73:83:45:51:a8:0a:10:3e:3b:ce:b3:13:41:bf:54: ff:36:3f:ba -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUOkXFkVngxlLnX0gjCLgAPcpvRkowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEQ1QTQ5QzlFNDJFMzcxQkZEMUU2N0FDRTFCM0Q1NUVD MUFCRjczRjAeFw0yNTExMDIxMDE1NTRaFw0yNTExMDUxODAwNTRaMDMxMTAvBgNV BAMTKDYyNDRCNzY4RTU2QUJBNzk0NTYzOEMxNjQwMjFCMzFFRDgwM0YwRTgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCuwY2QP4YR6JiBdpmWqhBpN1kU T8PQ3wLX6RTWy9k33RjP6O7o6QLZSjP/3OB24DUsLP+8f+VTU+JjSuK3/wcgnLNT kF7M5sO4NnRpZNoslKu4qCW68O9kGQQe6q89fA3SghSfUOaImNpuR3X5TiRREgeh mCVVgBT3L49Yxdvl9Jdefx7sBX5zo9NT5DFiHsBZBPwGynFPd+1UTlITbJDsqRz6 HgpImi/10S+27K60zIcxb4O0WdYVrOO7xPQsM87/VdDtq30qRIn0nhhhFzNJ4E+e UioofjqFbJqYHswF6ig+LWU7G9prDxOhMkChdUSwFsqWTJOOXobnC9Y6cANJAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUYkS3aOVqunlFY4wWQCGzHtgD8OgwHwYDVR0j BBgwFoAUjVpJyeQuNxv9Hmes4bPVXsGr9z8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 MmY1OTg2Yi1jNzY0LTRjZDctYjQxNC1hMjViZDA1YzNmOTIvMC84RDVBNDlDOUU0 MkUzNzFCRkQxRTY3QUNFMUIzRDU1RUMxQUJGNzNGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOEQ1QTQ5QzlFNDJFMzcxQkZEMUU2N0FDRTFCM0Q1NUVDMUFC RjczRi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNjJmNTk4NmItYzc2NC00Y2Q3LWI0 MTQtYTI1YmQwNWMzZjkyLzAvOEQ1QTQ5QzlFNDJFMzcxQkZEMUU2N0FDRTFCM0Q1 NUVDMUFCRjczRi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIAEjL+AWhwuvAeOTu4Bot+eHIWxcDG++0Gh jWIP4UATu6yhn7+3fpezyLkS+1FmtGHtbh8Qs51IAcugmIDf+SNp5qveD6PKOjcq 2WuY91rps+fl1ZAbLBVuFXhzBFJSeUUxTUKkLBlusjYWbM6gYSCZ+fP92srhJNvI fYEQ9zBgEU/oCuYOYB3X7Kdu5DumnbxF1+x9LIizDkJrY6TVgNENCfzLgR6LJrIj QC7SHXsbbNTYR8cyc9kaaYxGhdCrh2hF3eH/ZHVfuwyG5E2W4g1IOJ1Hou1son6k mzK3zUfhutLtIpAY7KTXZogHp3ODRVGoChA+O86zE0G/VP82P7o= -----END CERTIFICATE-----Generated at Tue Nov 4 12:11:20 2025 by rpki-client