$ rpki-client -vvf repo-rpki.idnic.net/repo/7e8cbdc8-d195-4c7d-b3e8-0a8fbae8c284/0/8790EFE9518BF8664B34E1227585F3516FDC5367.mft File: 8790EFE9518BF8664B34E1227585F3516FDC5367.mft (raw, json) Hash identifier: 05OO5pOge+P9TMC7UH1xdKh/e8LCYxmgYg581ASjadw= Subject key identifier: A1:0C:4A:24:62:A0:51:04:20:B9:19:FB:CC:A3:9C:78:92:5D:4E:19 Authority key identifier: 87:90:EF:E9:51:8B:F8:66:4B:34:E1:22:75:85:F3:51:6F:DC:53:67 Certificate issuer: /CN=8790EFE9518BF8664B34E1227585F3516FDC5367 Certificate serial: 49BC806518F56F6D57E2D669C0CDE923AE4725F0 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8790EFE9518BF8664B34E1227585F3516FDC5367.cer Subject info access: rsync://repo-rpki.idnic.net/repo/7e8cbdc8-d195-4c7d-b3e8-0a8fbae8c284/0/8790EFE9518BF8664B34E1227585F3516FDC5367.mft Manifest number: 021D Signing time: Mon 03 Nov 2025 03:11:30 +0000 Manifest this update: Mon 03 Nov 2025 03:06:30 +0000 Manifest next update: Thu 06 Nov 2025 05:13:30 +0000 Files and hashes: 1: 8790EFE9518BF8664B34E1227585F3516FDC5367.crl (hash: mFOF6Uy3dZVglWSiD31J+ZvHa1WcLtNofaSiMDekE5g=) 2: 3130332e3136362e39302e302f32332d3234203d3e20313431393431.roa (hash: u/DfRKi6okqGd/2PRwDyTkJXR+LfAGJBXiMbBVUigkU=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/7e8cbdc8-d195-4c7d-b3e8-0a8fbae8c284/0/8790EFE9518BF8664B34E1227585F3516FDC5367.crl rsync://repo-rpki.idnic.net/repo/7e8cbdc8-d195-4c7d-b3e8-0a8fbae8c284/0/8790EFE9518BF8664B34E1227585F3516FDC5367.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8790EFE9518BF8664B34E1227585F3516FDC5367.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 06 Nov 2025 05:13:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 49:bc:80:65:18:f5:6f:6d:57:e2:d6:69:c0:cd:e9:23:ae:47:25:f0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8790EFE9518BF8664B34E1227585F3516FDC5367 Validity Not Before: Nov 3 03:06:30 2025 GMT Not After : Nov 6 05:13:30 2025 GMT Subject: CN=A10C4A2462A0510420B919FBCCA39C78925D4E19 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:a5:ca:12:10:5b:26:a2:11:85:9e:40:96:22: d4:60:51:ec:d9:d1:05:ea:82:0d:b8:1b:2e:e8:4c: 92:ea:87:b2:64:31:62:fa:a4:50:61:8a:50:51:d8: c6:98:b7:ba:09:ea:28:48:79:ea:e0:48:0a:c9:38: 37:b6:67:da:0a:09:8c:13:e6:e7:91:7e:81:51:79: 94:eb:05:7f:bf:d3:d6:8b:ee:22:21:e7:ec:7e:15: 72:73:95:b2:0d:6c:bb:63:d4:9d:4d:eb:33:86:79: 81:09:c9:e8:03:92:98:4d:36:98:54:df:1d:4d:dc: ba:c9:c5:da:7c:b1:20:59:99:78:de:43:f6:96:62: cd:1d:38:59:d7:e1:a2:2e:3d:ae:de:b8:74:46:58: 35:fa:51:b9:a0:0e:8b:f0:b7:f0:ce:37:1a:82:51: 46:7d:2a:d5:f4:9a:9e:2e:c3:91:7d:45:10:ee:43: d2:f3:f0:d2:11:45:fd:66:93:c9:3f:f5:f2:bb:fb: f0:77:ed:4d:3d:54:c4:91:19:5e:be:35:85:21:51: 63:43:37:67:18:a9:a9:c9:cb:eb:d6:13:c1:71:5b: 2b:f6:87:73:c2:62:05:f1:2f:70:2e:9e:8c:3b:f5: 5d:31:c4:83:5c:c2:a6:8e:11:f7:9d:d3:62:b9:d6: 17:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A1:0C:4A:24:62:A0:51:04:20:B9:19:FB:CC:A3:9C:78:92:5D:4E:19 X509v3 Authority Key Identifier: keyid:87:90:EF:E9:51:8B:F8:66:4B:34:E1:22:75:85:F3:51:6F:DC:53:67 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/7e8cbdc8-d195-4c7d-b3e8-0a8fbae8c284/0/8790EFE9518BF8664B34E1227585F3516FDC5367.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8790EFE9518BF8664B34E1227585F3516FDC5367.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/7e8cbdc8-d195-4c7d-b3e8-0a8fbae8c284/0/8790EFE9518BF8664B34E1227585F3516FDC5367.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption d8:05:77:48:09:02:dd:03:c6:19:4f:34:58:0a:fd:6d:73:f6: 4b:0a:5d:b9:32:e9:ea:a2:fa:c3:f7:b5:b9:61:9f:57:96:db: 10:35:e5:a4:71:0d:7e:37:6d:c9:eb:61:95:62:f6:35:91:7a: 3f:2a:85:da:01:85:70:64:cf:2b:e4:42:d8:d3:6c:a0:8e:d0: fd:5f:ba:cf:81:4b:b6:4a:7e:23:86:b8:b3:d5:68:01:91:be: 5b:ea:57:04:8d:ea:fb:61:3a:ef:a8:ba:b1:d1:83:c2:06:b3: 5c:ad:d1:a2:ee:71:89:cf:50:20:06:72:a6:ea:29:2b:43:af: a5:cf:1a:b9:29:7d:a1:8a:0c:51:1d:1a:7c:11:cb:16:cc:5d: ac:01:6e:77:24:33:77:fd:38:ea:cb:66:7d:d7:82:af:59:70: 69:d5:fc:78:66:8b:a8:cd:00:2e:bf:08:d6:e4:f5:83:0e:fd: b9:be:10:c3:a7:0f:d0:ee:e2:05:83:b3:b7:21:21:c4:6a:45: aa:83:53:5b:a6:5e:30:66:a5:ef:44:70:e9:2e:0d:88:e0:ed: 71:16:5e:a8:b7:9b:3c:55:0a:e4:e2:d4:f1:55:6f:07:d2:01: 26:5d:a7:57:2b:3a:99:78:c6:30:ce:c5:1f:54:c8:d9:e4:6a: 55:f2:ae:c5 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUSbyAZRj1b21X4tZpwM3pI65HJfAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODc5MEVGRTk1MThCRjg2NjRCMzRFMTIyNzU4NUYzNTE2 RkRDNTM2NzAeFw0yNTExMDMwMzA2MzBaFw0yNTExMDYwNTEzMzBaMDMxMTAvBgNV BAMTKEExMEM0QTI0NjJBMDUxMDQyMEI5MTlGQkNDQTM5Qzc4OTI1RDRFMTkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDRpcoSEFsmohGFnkCWItRgUezZ 0QXqgg24Gy7oTJLqh7JkMWL6pFBhilBR2MaYt7oJ6ihIeergSArJODe2Z9oKCYwT 5ueRfoFReZTrBX+/09aL7iIh5+x+FXJzlbINbLtj1J1N6zOGeYEJyegDkphNNphU 3x1N3LrJxdp8sSBZmXjeQ/aWYs0dOFnX4aIuPa7euHRGWDX6UbmgDovwt/DONxqC UUZ9KtX0mp4uw5F9RRDuQ9Lz8NIRRf1mk8k/9fK7+/B37U09VMSRGV6+NYUhUWND N2cYqanJy+vWE8FxWyv2h3PCYgXxL3Aunow79V0xxINcwqaOEfed02K51he/AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUoQxKJGKgUQQguRn7zKOceJJdThkwHwYDVR0j BBgwFoAUh5Dv6VGL+GZLNOEidYXzUW/cU2cwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 ZThjYmRjOC1kMTk1LTRjN2QtYjNlOC0wYThmYmFlOGMyODQvMC84NzkwRUZFOTUx OEJGODY2NEIzNEUxMjI3NTg1RjM1MTZGREM1MzY3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvODc5MEVGRTk1MThCRjg2NjRCMzRFMTIyNzU4NUYzNTE2RkRD NTM2Ny5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vN2U4Y2JkYzgtZDE5NS00YzdkLWIz ZTgtMGE4ZmJhZThjMjg0LzAvODc5MEVGRTk1MThCRjg2NjRCMzRFMTIyNzU4NUYz NTE2RkRDNTM2Ny5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBANgFd0gJAt0DxhlPNFgK/W1z9ksKXbky6eqi +sP3tblhn1eW2xA15aRxDX43bcnrYZVi9jWRej8qhdoBhXBkzyvkQtjTbKCO0P1f us+BS7ZKfiOGuLPVaAGRvlvqVwSN6vthOu+ourHRg8IGs1yt0aLucYnPUCAGcqbq KStDr6XPGrkpfaGKDFEdGnwRyxbMXawBbnckM3f9OOrLZn3Xgq9ZcGnV/Hhmi6jN AC6/CNbk9YMO/bm+EMOnD9Du4gWDs7chIcRqRaqDU1umXjBmpe9EcOkuDYjg7XEW Xqi3mzxVCuTi1PFVbwfSASZdp1crOpl4xjDOxR9UyNnkalXyrsU= -----END CERTIFICATE-----Generated at Tue Nov 4 12:48:23 2025 by rpki-client