$ rpki-client -vvf repo-rpki.idnic.net/repo/6e9b0bad-66b9-4f28-a7c5-e9a9fe120ad7/0/8DAFDBD814B60F568505D65130E4661FCD7D665F.mft File: 8DAFDBD814B60F568505D65130E4661FCD7D665F.mft (raw, json) Hash identifier: WJ8fUXpx1kFz1Io8GcIcI2KflunOS0EFfQF6VvhFsUM= Subject key identifier: 00:83:5A:50:DD:CD:D9:85:FE:C4:9F:44:D0:E0:CE:05:EC:F9:BF:8E Authority key identifier: 8D:AF:DB:D8:14:B6:0F:56:85:05:D6:51:30:E4:66:1F:CD:7D:66:5F Certificate issuer: /CN=8DAFDBD814B60F568505D65130E4661FCD7D665F Certificate serial: 35A2820907401D72797E5C8F9BD0FB3F83D03DCA Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8DAFDBD814B60F568505D65130E4661FCD7D665F.cer Subject info access: rsync://repo-rpki.idnic.net/repo/6e9b0bad-66b9-4f28-a7c5-e9a9fe120ad7/0/8DAFDBD814B60F568505D65130E4661FCD7D665F.mft Manifest number: 024C Signing time: Sun 02 Nov 2025 18:51:55 +0000 Manifest this update: Sun 02 Nov 2025 18:46:55 +0000 Manifest next update: Thu 06 Nov 2025 04:30:55 +0000 Files and hashes: 1: 8DAFDBD814B60F568505D65130E4661FCD7D665F.crl (hash: 0eW2UhmVe3uScwmzlZ/7A5nPSnTyQMfbo57NV/939Cc=) 2: 3130332e3136382e3139302e302f32342d3234203d3e20313432333139.roa (hash: /4nmgLfcCNw5dynQDZtGk4IBxc3BmveSB9gkF4R0RCk=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/6e9b0bad-66b9-4f28-a7c5-e9a9fe120ad7/0/8DAFDBD814B60F568505D65130E4661FCD7D665F.crl rsync://repo-rpki.idnic.net/repo/6e9b0bad-66b9-4f28-a7c5-e9a9fe120ad7/0/8DAFDBD814B60F568505D65130E4661FCD7D665F.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8DAFDBD814B60F568505D65130E4661FCD7D665F.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 06 Nov 2025 04:30:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 35:a2:82:09:07:40:1d:72:79:7e:5c:8f:9b:d0:fb:3f:83:d0:3d:ca Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8DAFDBD814B60F568505D65130E4661FCD7D665F Validity Not Before: Nov 2 18:46:55 2025 GMT Not After : Nov 6 04:30:55 2025 GMT Subject: CN=00835A50DDCDD985FEC49F44D0E0CE05ECF9BF8E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:bf:3c:63:30:de:96:a7:33:34:97:ed:2a:b1: f7:ea:72:6b:2f:1e:68:0c:09:4e:99:89:5e:d6:99: 7c:38:6a:e6:0e:e7:96:8b:d2:e7:54:eb:0c:13:6a: 7a:93:e3:22:65:83:ca:ea:03:83:16:6c:17:1a:81: 0b:ab:2f:ba:bf:61:67:e7:29:2d:52:a2:97:ef:98: 47:9c:6e:73:f2:a2:5b:f7:e2:ce:4d:44:38:d0:cc: 6a:4d:31:e0:a4:0d:eb:01:0f:67:85:f9:ca:dd:9a: 90:1d:f2:87:a4:c1:63:05:b1:ea:dc:fb:c5:34:11: 2d:18:35:87:cd:02:85:77:82:97:4b:c7:e7:d5:c3: aa:8b:ad:c4:51:77:f2:a2:78:0c:35:2f:10:2b:9c: 16:21:82:d8:1c:40:7b:a6:f0:74:28:a5:76:30:0d: c5:b3:34:70:4a:63:f4:54:ac:99:61:ba:5e:36:cd: 56:96:fc:37:4d:9c:1d:d0:81:79:d1:ec:47:29:0a: 50:c8:5c:1f:91:c9:22:92:d2:b3:ba:ea:71:27:fb: da:ea:1f:5f:5c:bd:2d:b9:21:b8:bc:86:4f:8b:c5: 05:6d:71:d9:3a:e9:23:ba:2f:93:b3:98:c1:ce:c6: cd:a9:d2:cd:e8:7e:2d:12:0b:34:7c:0a:9e:b9:5e: 79:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:83:5A:50:DD:CD:D9:85:FE:C4:9F:44:D0:E0:CE:05:EC:F9:BF:8E X509v3 Authority Key Identifier: keyid:8D:AF:DB:D8:14:B6:0F:56:85:05:D6:51:30:E4:66:1F:CD:7D:66:5F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/6e9b0bad-66b9-4f28-a7c5-e9a9fe120ad7/0/8DAFDBD814B60F568505D65130E4661FCD7D665F.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8DAFDBD814B60F568505D65130E4661FCD7D665F.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/6e9b0bad-66b9-4f28-a7c5-e9a9fe120ad7/0/8DAFDBD814B60F568505D65130E4661FCD7D665F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 28:d5:7e:87:d8:20:1a:b3:6f:5e:33:e7:5e:30:54:29:93:ef: ff:c5:9f:8a:d3:cd:0b:8b:0c:d2:8a:84:d8:4d:64:46:ec:fb: c1:b5:28:e0:27:cb:7c:a9:05:0c:df:de:05:f5:e9:f7:7e:b9: c8:7f:de:4a:0a:0b:95:e1:dd:78:59:16:eb:7a:28:5d:00:2c: 76:5b:26:0e:68:c3:09:66:23:25:4a:80:93:83:7d:18:c7:26: 6e:29:e3:a2:03:94:3d:a7:d2:b1:34:82:64:0e:ef:16:d1:dd: 50:0b:e3:aa:2b:53:e9:42:91:d1:48:ec:ff:1d:c6:33:24:26: 3f:45:6f:4f:67:a5:9f:ce:d4:40:d9:26:b1:2c:e8:31:68:6a: 81:14:c8:57:b4:42:3e:9c:30:e6:45:d2:ce:ed:34:ea:75:2e: 07:66:28:9f:bc:2d:61:f1:82:18:b6:21:e7:a1:d3:a1:1c:57: 12:e4:84:03:59:82:e9:7a:70:d9:5f:56:61:1b:ca:7e:bd:55: 00:54:c9:42:c1:c2:66:6f:d5:13:81:5c:65:f3:8c:6e:3e:5e: 6b:34:c0:be:42:96:e0:56:cd:b7:a9:66:34:35:ec:c6:e0:45: 2a:c6:67:f5:69:47:10:d8:f2:5b:df:7a:61:37:00:32:5e:9e: bc:3d:27:f6 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUNaKCCQdAHXJ5flyPm9D7P4PQPcowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOERBRkRCRDgxNEI2MEY1Njg1MDVENjUxMzBFNDY2MUZD RDdENjY1RjAeFw0yNTExMDIxODQ2NTVaFw0yNTExMDYwNDMwNTVaMDMxMTAvBgNV BAMTKDAwODM1QTUwRERDREQ5ODVGRUM0OUY0NEQwRTBDRTA1RUNGOUJGOEUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC7vzxjMN6WpzM0l+0qsffqcmsv HmgMCU6ZiV7WmXw4auYO55aL0udU6wwTanqT4yJlg8rqA4MWbBcagQurL7q/YWfn KS1SopfvmEecbnPyolv34s5NRDjQzGpNMeCkDesBD2eF+crdmpAd8oekwWMFserc +8U0ES0YNYfNAoV3gpdLx+fVw6qLrcRRd/KieAw1LxArnBYhgtgcQHum8HQopXYw DcWzNHBKY/RUrJlhul42zVaW/DdNnB3QgXnR7EcpClDIXB+RySKS0rO66nEn+9rq H19cvS25Ibi8hk+LxQVtcdk66SO6L5OzmMHOxs2p0s3ofi0SCzR8Cp65XnmbAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUAINaUN3N2YX+xJ9E0ODOBez5v44wHwYDVR0j BBgwFoAUja/b2BS2D1aFBdZRMORmH819Zl8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 ZTliMGJhZC02NmI5LTRmMjgtYTdjNS1lOWE5ZmUxMjBhZDcvMC84REFGREJEODE0 QjYwRjU2ODUwNUQ2NTEzMEU0NjYxRkNEN0Q2NjVGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOERBRkRCRDgxNEI2MEY1Njg1MDVENjUxMzBFNDY2MUZDRDdE NjY1Ri5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNmU5YjBiYWQtNjZiOS00ZjI4LWE3 YzUtZTlhOWZlMTIwYWQ3LzAvOERBRkRCRDgxNEI2MEY1Njg1MDVENjUxMzBFNDY2 MUZDRDdENjY1Ri5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACjVfofYIBqzb14z514wVCmT7//Fn4rTzQuL DNKKhNhNZEbs+8G1KOAny3ypBQzf3gX16fd+uch/3koKC5Xh3XhZFut6KF0ALHZb Jg5owwlmIyVKgJODfRjHJm4p46IDlD2n0rE0gmQO7xbR3VAL46orU+lCkdFI7P8d xjMkJj9Fb09npZ/O1EDZJrEs6DFoaoEUyFe0Qj6cMOZF0s7tNOp1LgdmKJ+8LWHx ghi2Ieeh06EcVxLkhANZgul6cNlfVmEbyn69VQBUyULBwmZv1ROBXGXzjG4+Xms0 wL5CluBWzbepZjQ17MbgRSrGZ/VpRxDY8lvfemE3ADJenrw9J/Y= -----END CERTIFICATE-----Generated at Tue Nov 4 18:57:42 2025 by rpki-client