$ rpki-client -vvf repo-rpki.idnic.net/repo/758db87b-16cd-437a-a5b5-08cb35da97f0/0/8CBCE2EE006256C9A6207949314A7D1FCC415B5A.mft File: 8CBCE2EE006256C9A6207949314A7D1FCC415B5A.mft (raw, json) Hash identifier: NO45oRcADtvVdNFO11W8HzO5meSBgN6UuJ8DwyDvZfk= Subject key identifier: EA:85:91:E2:65:EF:CD:38:6C:17:B5:EC:5E:EC:45:00:7D:D8:FC:BF Authority key identifier: 8C:BC:E2:EE:00:62:56:C9:A6:20:79:49:31:4A:7D:1F:CC:41:5B:5A Certificate issuer: /CN=8CBCE2EE006256C9A6207949314A7D1FCC415B5A Certificate serial: 5E3A284A394880E0203A300A74091C9E623E7E7D Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8CBCE2EE006256C9A6207949314A7D1FCC415B5A.cer Subject info access: rsync://repo-rpki.idnic.net/repo/758db87b-16cd-437a-a5b5-08cb35da97f0/0/8CBCE2EE006256C9A6207949314A7D1FCC415B5A.mft Manifest number: 022C Signing time: Tue 04 Nov 2025 13:11:32 +0000 Manifest this update: Tue 04 Nov 2025 13:06:32 +0000 Manifest next update: Fri 07 Nov 2025 17:06:32 +0000 Files and hashes: 1: 3130332e3138372e3131322e302f32332d3234203d3e20313439373230.roa (hash: tJd9lCwOT2E5aUEAYGLVk9Vox9W7mUTKc82A3hANFMo=) 2: 8CBCE2EE006256C9A6207949314A7D1FCC415B5A.crl (hash: 9TRTEMSeQSn8ea7sJkAh0Aut3O9OR8O478xQJbhMZIg=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/758db87b-16cd-437a-a5b5-08cb35da97f0/0/8CBCE2EE006256C9A6207949314A7D1FCC415B5A.crl rsync://repo-rpki.idnic.net/repo/758db87b-16cd-437a-a5b5-08cb35da97f0/0/8CBCE2EE006256C9A6207949314A7D1FCC415B5A.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8CBCE2EE006256C9A6207949314A7D1FCC415B5A.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 07 Nov 2025 17:06:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5e:3a:28:4a:39:48:80:e0:20:3a:30:0a:74:09:1c:9e:62:3e:7e:7d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8CBCE2EE006256C9A6207949314A7D1FCC415B5A Validity Not Before: Nov 4 13:06:32 2025 GMT Not After : Nov 7 17:06:32 2025 GMT Subject: CN=EA8591E265EFCD386C17B5EC5EEC45007DD8FCBF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:81:73:c7:0f:c8:5a:cc:48:79:96:d4:1a:c6: 23:b9:b4:3b:61:b4:e0:e5:94:23:08:a9:0e:3a:36: 21:09:35:79:e0:be:f4:8f:18:7d:e6:85:54:06:29: b2:1f:3f:db:3b:f5:64:b8:7f:a8:7f:74:e0:f7:b3: d4:b0:d4:c6:92:0d:29:ae:46:d3:e9:d8:2c:58:37: 2c:f3:63:61:1e:7b:0c:96:e8:a1:bc:25:f8:f3:13: 51:88:bf:58:30:60:7c:7e:c2:5e:a4:14:c8:5d:87: ff:e6:b3:ab:5c:c6:4a:17:e4:c0:ec:17:15:b4:d6: a2:88:93:61:c4:dd:c2:51:53:d9:16:62:3c:d7:98: c2:9b:56:16:39:33:27:02:dd:d7:9b:bd:9b:c2:8f: 43:6b:4d:d7:40:38:63:8d:da:00:f4:d9:85:70:ef: 89:a9:14:3f:9e:91:11:37:64:61:c5:08:3d:5b:57: bd:db:8d:12:52:87:ef:58:0d:84:77:81:31:86:a2: 33:49:74:e8:fb:16:67:0f:3f:58:0e:28:ec:e1:b1: d8:9a:6b:0b:f1:46:6a:e2:26:ee:9c:38:8f:ae:e7: 57:00:51:2c:19:72:56:ae:36:28:15:27:88:fb:00: f1:8a:33:a3:2e:0a:e1:07:c9:92:34:f6:cb:bb:02: bc:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EA:85:91:E2:65:EF:CD:38:6C:17:B5:EC:5E:EC:45:00:7D:D8:FC:BF X509v3 Authority Key Identifier: keyid:8C:BC:E2:EE:00:62:56:C9:A6:20:79:49:31:4A:7D:1F:CC:41:5B:5A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/758db87b-16cd-437a-a5b5-08cb35da97f0/0/8CBCE2EE006256C9A6207949314A7D1FCC415B5A.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8CBCE2EE006256C9A6207949314A7D1FCC415B5A.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/758db87b-16cd-437a-a5b5-08cb35da97f0/0/8CBCE2EE006256C9A6207949314A7D1FCC415B5A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 45:db:28:3e:80:32:d3:98:2e:a4:5a:e1:8b:6a:ee:a0:17:82: 98:24:cf:b5:a7:93:5d:f6:10:3b:1d:63:80:b5:d1:0a:aa:a9: ee:06:f2:87:1e:10:46:a1:17:ce:7a:9a:60:47:8e:39:13:b1: c0:35:79:35:f4:04:b6:96:cf:0b:8f:6d:b8:ee:df:9d:b9:3f: 3c:ee:d1:b9:93:92:da:4f:23:de:17:c0:9e:43:a6:f2:94:20: 8b:61:ae:c6:a4:3b:ff:00:78:cc:34:a4:69:d6:a0:fb:8f:6b: 2b:81:ce:c9:f8:11:0c:3a:d5:14:03:a3:87:3d:2e:dd:b5:5e: ee:ab:a9:e9:16:89:6b:dd:68:0a:2d:ef:59:f7:c2:cd:47:e0: 74:b2:09:9a:38:3e:9e:77:af:ed:38:37:f1:4c:01:76:e5:7c: 3b:0c:b9:d4:0d:0b:1d:ee:64:e8:13:2d:98:b2:aa:92:e4:ac: 09:65:d5:ad:e8:14:41:14:4f:1b:30:e5:70:dc:af:e7:fc:47: 42:ec:9b:b6:ca:06:51:7e:96:ea:32:3f:31:8f:99:ce:ea:99: 32:80:4a:36:78:3f:04:89:c2:78:5d:5a:7d:d2:7c:61:75:e8: eb:ce:bb:67:b7:24:36:1a:18:83:5f:fc:fe:78:bb:ec:07:ea: ca:a6:0b:f3 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUXjooSjlIgOAgOjAKdAkcnmI+fn0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOENCQ0UyRUUwMDYyNTZDOUE2MjA3OTQ5MzE0QTdEMUZD QzQxNUI1QTAeFw0yNTExMDQxMzA2MzJaFw0yNTExMDcxNzA2MzJaMDMxMTAvBgNV BAMTKEVBODU5MUUyNjVFRkNEMzg2QzE3QjVFQzVFRUM0NTAwN0REOEZDQkYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDWgXPHD8hazEh5ltQaxiO5tDth tODllCMIqQ46NiEJNXngvvSPGH3mhVQGKbIfP9s79WS4f6h/dOD3s9Sw1MaSDSmu RtPp2CxYNyzzY2EeewyW6KG8JfjzE1GIv1gwYHx+wl6kFMhdh//ms6tcxkoX5MDs FxW01qKIk2HE3cJRU9kWYjzXmMKbVhY5MycC3debvZvCj0NrTddAOGON2gD02YVw 74mpFD+ekRE3ZGHFCD1bV73bjRJSh+9YDYR3gTGGojNJdOj7FmcPP1gOKOzhsdia awvxRmriJu6cOI+u51cAUSwZclauNigVJ4j7APGKM6MuCuEHyZI09su7Arx5AgMB AAGjggI8MIICODAdBgNVHQ4EFgQU6oWR4mXvzThsF7XsXuxFAH3Y/L8wHwYDVR0j BBgwFoAUjLzi7gBiVsmmIHlJMUp9H8xBW1owDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 NThkYjg3Yi0xNmNkLTQzN2EtYTViNS0wOGNiMzVkYTk3ZjAvMC84Q0JDRTJFRTAw NjI1NkM5QTYyMDc5NDkzMTRBN0QxRkNDNDE1QjVBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOENCQ0UyRUUwMDYyNTZDOUE2MjA3OTQ5MzE0QTdEMUZDQzQx NUI1QS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNzU4ZGI4N2ItMTZjZC00MzdhLWE1 YjUtMDhjYjM1ZGE5N2YwLzAvOENCQ0UyRUUwMDYyNTZDOUE2MjA3OTQ5MzE0QTdE MUZDQzQxNUI1QS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEXbKD6AMtOYLqRa4Ytq7qAXgpgkz7Wnk132 EDsdY4C10Qqqqe4G8oceEEahF856mmBHjjkTscA1eTX0BLaWzwuPbbju3525Pzzu 0bmTktpPI94XwJ5DpvKUIIthrsakO/8AeMw0pGnWoPuPayuBzsn4EQw61RQDo4c9 Lt21Xu6rqekWiWvdaAot71n3ws1H4HSyCZo4Pp53r+04N/FMAXblfDsMudQNCx3u ZOgTLZiyqpLkrAll1a3oFEEUTxsw5XDcr+f8R0Lsm7bKBlF+luoyPzGPmc7qmTKA SjZ4PwSJwnhdWn3SfGF16OvOu2e3JDYaGINf/P54u+wH6sqmC/M= -----END CERTIFICATE-----Generated at Wed Nov 5 23:37:31 2025 by rpki-client