$ rpki-client -vvf repo-rpki.idnic.net/repo/7f4b53d8-b2ff-4973-b1ac-6f85faeadbe5/0/B8D444C5B3184A4F8C8F199A432242C44E19EACB.mft File: B8D444C5B3184A4F8C8F199A432242C44E19EACB.mft (raw, json) Hash identifier: TTGsp1L0MX0sYfyS5TGp5LA81a8YYzQc/2SGnCkMcU0= Subject key identifier: 3C:A7:1D:A0:1D:D5:86:EB:6F:E5:30:B8:A7:DB:1C:B2:1B:9F:D4:F9 Authority key identifier: B8:D4:44:C5:B3:18:4A:4F:8C:8F:19:9A:43:22:42:C4:4E:19:EA:CB Certificate issuer: /CN=B8D444C5B3184A4F8C8F199A432242C44E19EACB Certificate serial: 57B1B08EB8ADC28ED342910D07F6816356116FF5 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/B8D444C5B3184A4F8C8F199A432242C44E19EACB.cer Subject info access: rsync://repo-rpki.idnic.net/repo/7f4b53d8-b2ff-4973-b1ac-6f85faeadbe5/0/B8D444C5B3184A4F8C8F199A432242C44E19EACB.mft Manifest number: D8 Signing time: Mon 03 Nov 2025 01:01:55 +0000 Manifest this update: Mon 03 Nov 2025 00:56:55 +0000 Manifest next update: Thu 06 Nov 2025 04:42:55 +0000 Files and hashes: 1: 3136302e32352e33372e302f32342d3234203d3e20313532383332.roa (hash: 2EK7G4yp/ra7lqC0aFCR3YZxswSuxrQQ2ZJJKEPHMZg=) 2: 3136302e32352e33362e302f32342d3234203d3e20313532383332.roa (hash: 1SJ9LA44FkXb29+CiOLplkV9zxTaWTCw2H5Ki5oako8=) 3: 3136302e32352e33362e302f32332d3234203d3e20313532383332.roa (hash: 9wCzZBokUdgA6nDZL9CPWVnRmT/IcfmN/N7BSRO44UA=) 4: B8D444C5B3184A4F8C8F199A432242C44E19EACB.crl (hash: cHGNhDJa3RrtvOsASETKBPv06c90/x/ihBtaSpWyIvc=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/7f4b53d8-b2ff-4973-b1ac-6f85faeadbe5/0/B8D444C5B3184A4F8C8F199A432242C44E19EACB.crl rsync://repo-rpki.idnic.net/repo/7f4b53d8-b2ff-4973-b1ac-6f85faeadbe5/0/B8D444C5B3184A4F8C8F199A432242C44E19EACB.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/B8D444C5B3184A4F8C8F199A432242C44E19EACB.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 06 Nov 2025 04:42:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 57:b1:b0:8e:b8:ad:c2:8e:d3:42:91:0d:07:f6:81:63:56:11:6f:f5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B8D444C5B3184A4F8C8F199A432242C44E19EACB Validity Not Before: Nov 3 00:56:55 2025 GMT Not After : Nov 6 04:42:55 2025 GMT Subject: CN=3CA71DA01DD586EB6FE530B8A7DB1CB21B9FD4F9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:83:7b:6b:37:af:8c:75:9e:f9:77:f4:3c:d5: 30:f1:76:10:b0:c2:40:3e:69:10:11:68:08:49:e3: 8d:2f:f1:d5:ef:1f:6c:fb:ba:e8:be:cc:ac:53:1b: fe:16:d9:54:4c:45:22:b8:51:72:de:59:46:a7:08: 63:8d:e0:8e:51:b0:94:87:69:90:be:34:ba:c2:52: 40:74:7b:ca:12:80:26:4f:89:af:4b:4d:30:db:db: b1:d1:ca:23:d1:52:b7:4b:15:3a:8d:66:55:0a:01: 22:07:10:f3:0c:56:6a:71:f6:d5:49:a4:39:c9:a7: 3c:44:88:f7:3c:66:e3:b5:9e:c9:a4:50:a3:59:fc: 8c:66:d2:e0:7d:2f:4a:39:02:44:29:69:d6:f1:d8: 46:f8:91:d5:d3:47:fa:b9:f6:f9:eb:b6:b0:26:e5: c8:15:7f:33:7c:25:63:a7:f6:ec:fb:b0:c5:d0:7a: 7d:e9:b7:58:07:55:4c:c2:5f:a7:0d:27:34:1b:95: 1a:9e:a0:45:20:07:13:97:2b:40:1a:d7:29:26:ac: f0:8b:a3:fb:35:e2:59:7e:59:bd:24:1e:ca:c1:c9: b7:dd:4c:2e:13:34:52:ed:88:89:c8:23:ce:0c:0f: b9:19:59:dd:e3:3c:48:9e:a6:27:5c:70:1b:eb:9b: eb:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:A7:1D:A0:1D:D5:86:EB:6F:E5:30:B8:A7:DB:1C:B2:1B:9F:D4:F9 X509v3 Authority Key Identifier: keyid:B8:D4:44:C5:B3:18:4A:4F:8C:8F:19:9A:43:22:42:C4:4E:19:EA:CB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/7f4b53d8-b2ff-4973-b1ac-6f85faeadbe5/0/B8D444C5B3184A4F8C8F199A432242C44E19EACB.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/B8D444C5B3184A4F8C8F199A432242C44E19EACB.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/7f4b53d8-b2ff-4973-b1ac-6f85faeadbe5/0/B8D444C5B3184A4F8C8F199A432242C44E19EACB.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 24:bc:44:20:d0:0c:83:74:17:b0:72:8d:9e:69:a1:78:ae:b4: fa:e7:d7:20:6f:82:0c:65:e5:25:6e:55:d6:34:f7:42:c7:d6: ec:e8:74:40:a5:b3:80:1b:ae:d9:8f:af:9b:7b:d4:28:93:8d: f7:b9:6b:55:ca:02:55:38:18:ee:c3:39:1f:91:ff:ca:59:3e: e0:dd:64:56:c2:05:2e:b8:7e:e0:de:e0:8c:89:70:e1:ac:83: e3:12:da:bf:3e:6e:f6:84:3b:55:e4:fa:c7:7f:7b:e0:05:60: 8b:7e:d2:a6:85:31:d2:f6:42:77:42:4f:87:c7:6b:5a:6a:cf: ea:bc:df:24:26:d4:71:8a:3e:4d:d5:58:1e:56:58:5a:aa:86: 3a:9f:dd:b0:9d:1e:1f:82:82:2a:6f:70:a4:1c:c4:88:f6:f8: 5d:28:25:c7:88:ec:11:cb:eb:60:a3:73:26:6d:de:0d:ff:d1: 61:76:62:5b:61:0a:23:70:1d:30:6b:9d:23:b5:11:63:56:cc: 4c:47:a7:84:44:dd:99:70:b0:84:5f:82:7c:a3:09:aa:92:f9: 59:03:ef:0b:ea:0d:8c:73:1b:f7:78:9b:c4:45:fe:4d:54:af: 3b:f3:99:d6:f7:83:d9:b8:a3:33:f8:21:cd:6e:68:d6:8b:82: 36:aa:dc:96 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUV7Gwjritwo7TQpENB/aBY1YRb/UwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjhENDQ0QzVCMzE4NEE0RjhDOEYxOTlBNDMyMjQyQzQ0 RTE5RUFDQjAeFw0yNTExMDMwMDU2NTVaFw0yNTExMDYwNDQyNTVaMDMxMTAvBgNV BAMTKDNDQTcxREEwMURENTg2RUI2RkU1MzBCOEE3REIxQ0IyMUI5RkQ0RjkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDjg3trN6+MdZ75d/Q81TDxdhCw wkA+aRARaAhJ440v8dXvH2z7uui+zKxTG/4W2VRMRSK4UXLeWUanCGON4I5RsJSH aZC+NLrCUkB0e8oSgCZPia9LTTDb27HRyiPRUrdLFTqNZlUKASIHEPMMVmpx9tVJ pDnJpzxEiPc8ZuO1nsmkUKNZ/Ixm0uB9L0o5AkQpadbx2Eb4kdXTR/q59vnrtrAm 5cgVfzN8JWOn9uz7sMXQen3pt1gHVUzCX6cNJzQblRqeoEUgBxOXK0Aa1ykmrPCL o/s14ll+Wb0kHsrBybfdTC4TNFLtiInII84MD7kZWd3jPEiepidccBvrm+vLAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUPKcdoB3Vhutv5TC4p9scshuf1PkwHwYDVR0j BBgwFoAUuNRExbMYSk+MjxmaQyJCxE4Z6sswDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 ZjRiNTNkOC1iMmZmLTQ5NzMtYjFhYy02Zjg1ZmFlYWRiZTUvMC9COEQ0NDRDNUIz MTg0QTRGOEM4RjE5OUE0MzIyNDJDNDRFMTlFQUNCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvQjhENDQ0QzVCMzE4NEE0RjhDOEYxOTlBNDMyMjQyQzQ0RTE5 RUFDQi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vN2Y0YjUzZDgtYjJmZi00OTczLWIx YWMtNmY4NWZhZWFkYmU1LzAvQjhENDQ0QzVCMzE4NEE0RjhDOEYxOTlBNDMyMjQy QzQ0RTE5RUFDQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACS8RCDQDIN0F7ByjZ5poXiutPrn1yBvggxl 5SVuVdY090LH1uzodECls4AbrtmPr5t71CiTjfe5a1XKAlU4GO7DOR+R/8pZPuDd ZFbCBS64fuDe4IyJcOGsg+MS2r8+bvaEO1Xk+sd/e+AFYIt+0qaFMdL2QndCT4fH a1pqz+q83yQm1HGKPk3VWB5WWFqqhjqf3bCdHh+CgipvcKQcxIj2+F0oJceI7BHL 62CjcyZt3g3/0WF2YlthCiNwHTBrnSO1EWNWzExHp4RE3ZlwsIRfgnyjCaqS+VkD 7wvqDYxzG/d4m8RF/k1Urzvzmdb3g9m4ozP4Ic1uaNaLgjaq3JY= -----END CERTIFICATE-----Generated at Wed Nov 5 01:10:38 2025 by rpki-client