$ rpki-client -vvf repo-rpki.idnic.net/repo/8919b80d-4693-4095-a9e3-412e12828ff2/0/8DC2ED0870A005152606E2E6BEB6B6C78A522AF4.mft File: 8DC2ED0870A005152606E2E6BEB6B6C78A522AF4.mft (raw, json) Hash identifier: Q2Ls2k4FuSklGW/UmNoPKOOXqI/PtSAc1I134WEZvRY= Subject key identifier: 3D:A5:F8:20:42:67:61:DB:E1:00:02:37:7B:D8:D1:31:2B:A3:11:A3 Authority key identifier: 8D:C2:ED:08:70:A0:05:15:26:06:E2:E6:BE:B6:B6:C7:8A:52:2A:F4 Certificate issuer: /CN=8DC2ED0870A005152606E2E6BEB6B6C78A522AF4 Certificate serial: 2E1B637B665EABD34F4B6D7D334F15846F61093A Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8DC2ED0870A005152606E2E6BEB6B6C78A522AF4.cer Subject info access: rsync://repo-rpki.idnic.net/repo/8919b80d-4693-4095-a9e3-412e12828ff2/0/8DC2ED0870A005152606E2E6BEB6B6C78A522AF4.mft Manifest number: 02E8 Signing time: Sat 01 Nov 2025 18:50:56 +0000 Manifest this update: Sat 01 Nov 2025 18:45:56 +0000 Manifest next update: Wed 05 Nov 2025 01:58:56 +0000 Files and hashes: 1: 3130332e3137322e33302e302f32342d3234203d3e20313437303737.roa (hash: ino1QDYQDx2pfUj3BL+ZlKpPJfUhXo1WbnH0JMrs73I=) 2: 8DC2ED0870A005152606E2E6BEB6B6C78A522AF4.crl (hash: BC/UA3FcQr9wjmrKqp7JObUz22CuqYmXShoO369tngA=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/8919b80d-4693-4095-a9e3-412e12828ff2/0/8DC2ED0870A005152606E2E6BEB6B6C78A522AF4.crl rsync://repo-rpki.idnic.net/repo/8919b80d-4693-4095-a9e3-412e12828ff2/0/8DC2ED0870A005152606E2E6BEB6B6C78A522AF4.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8DC2ED0870A005152606E2E6BEB6B6C78A522AF4.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 05 Nov 2025 01:58:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2e:1b:63:7b:66:5e:ab:d3:4f:4b:6d:7d:33:4f:15:84:6f:61:09:3a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8DC2ED0870A005152606E2E6BEB6B6C78A522AF4 Validity Not Before: Nov 1 18:45:56 2025 GMT Not After : Nov 5 01:58:56 2025 GMT Subject: CN=3DA5F820426761DBE10002377BD8D1312BA311A3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:1f:26:64:8b:44:1e:15:b9:9d:cd:8b:61:a8: 5c:04:99:b0:6f:ae:71:99:f4:80:02:f6:aa:49:66: e7:39:4a:30:66:d9:77:f8:bd:b6:45:95:65:ac:fb: a0:8d:8f:d9:e2:68:b8:e6:e9:0b:d5:4f:e1:be:6a: 9e:1c:2a:a6:ee:ab:39:c8:7c:fc:f3:aa:33:89:b9: 3f:cd:10:48:84:a2:6d:13:b3:2d:01:3f:e4:dc:9e: 77:fc:c7:b0:76:4c:4c:ec:4e:5b:fa:7d:ce:12:66: e6:10:17:b8:37:ee:57:23:62:16:0f:af:84:c6:de: 6a:90:09:53:59:d9:d1:bb:0b:33:92:44:7c:ae:ea: a7:a2:8e:8c:db:84:e7:df:a9:ac:b6:42:6a:6a:d3: 05:2e:d7:46:ab:46:03:51:b1:63:78:be:32:c2:2b: da:7d:f5:cf:93:3f:eb:58:77:d8:3a:c4:34:39:fa: 6d:82:79:a3:61:a5:73:7c:97:d2:0e:94:e3:db:a5: 55:3d:e1:f8:a8:35:39:05:af:3f:af:70:f5:3d:87: 31:9e:f5:5c:a5:38:ed:5f:3b:6e:90:5a:82:95:51: 2f:9e:9c:29:4e:2b:74:3d:bb:8b:4c:e0:2b:4b:e3: 91:f4:21:8d:aa:e3:8b:1d:95:c2:2f:e6:ab:d0:60: 92:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3D:A5:F8:20:42:67:61:DB:E1:00:02:37:7B:D8:D1:31:2B:A3:11:A3 X509v3 Authority Key Identifier: keyid:8D:C2:ED:08:70:A0:05:15:26:06:E2:E6:BE:B6:B6:C7:8A:52:2A:F4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/8919b80d-4693-4095-a9e3-412e12828ff2/0/8DC2ED0870A005152606E2E6BEB6B6C78A522AF4.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8DC2ED0870A005152606E2E6BEB6B6C78A522AF4.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/8919b80d-4693-4095-a9e3-412e12828ff2/0/8DC2ED0870A005152606E2E6BEB6B6C78A522AF4.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 38:74:38:36:e5:c6:87:0c:bf:a8:99:89:94:2f:db:c2:78:2c: ff:d3:56:f1:a2:6e:46:3a:d7:b3:ae:03:b2:34:2a:fe:10:39: 73:80:88:d8:6e:7e:0a:0d:5a:fe:fe:62:4e:da:ff:ac:67:4d: 04:e9:1b:51:ee:89:27:c3:04:d9:86:2a:b9:c3:36:52:86:97: 8c:de:d7:76:b6:bb:35:0a:d5:8b:df:14:e9:ec:4d:3d:e9:cc: b2:54:52:42:fc:49:98:87:70:12:6d:bf:ae:cf:5a:ed:08:1a: d7:45:3d:48:81:bf:d3:90:b4:7e:35:20:f2:40:40:74:56:ef: b8:4d:12:74:89:6e:7e:98:f4:d3:26:56:e5:1a:33:12:16:44: f3:1c:5e:0f:9f:23:38:25:31:63:ea:0c:e2:00:38:a2:eb:98: 22:81:4e:f6:26:4f:3a:d4:ca:8a:78:2b:e5:d2:bf:4f:92:bc: 3b:54:71:c6:e5:2f:b9:a7:98:40:62:ea:83:6e:e9:59:1f:7b: 5c:05:0b:cd:4d:c2:70:0a:a0:4a:1c:f5:af:64:67:e2:b3:89: c7:0b:e8:c5:41:85:60:e8:4c:33:85:3c:06:3d:0e:a9:03:98: 53:be:97:08:5e:60:58:99:56:b5:a4:10:c8:75:53:22:0b:3b: b4:73:48:6a -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIULhtje2Zeq9NPS219M08VhG9hCTowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOERDMkVEMDg3MEEwMDUxNTI2MDZFMkU2QkVCNkI2Qzc4 QTUyMkFGNDAeFw0yNTExMDExODQ1NTZaFw0yNTExMDUwMTU4NTZaMDMxMTAvBgNV BAMTKDNEQTVGODIwNDI2NzYxREJFMTAwMDIzNzdCRDhEMTMxMkJBMzExQTMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDpHyZki0QeFbmdzYthqFwEmbBv rnGZ9IAC9qpJZuc5SjBm2Xf4vbZFlWWs+6CNj9niaLjm6QvVT+G+ap4cKqbuqznI fPzzqjOJuT/NEEiEom0Tsy0BP+Tcnnf8x7B2TEzsTlv6fc4SZuYQF7g37lcjYhYP r4TG3mqQCVNZ2dG7CzOSRHyu6qeijozbhOffqay2Qmpq0wUu10arRgNRsWN4vjLC K9p99c+TP+tYd9g6xDQ5+m2CeaNhpXN8l9IOlOPbpVU94fioNTkFrz+vcPU9hzGe 9VylOO1fO26QWoKVUS+enClOK3Q9u4tM4CtL45H0IY2q44sdlcIv5qvQYJKrAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUPaX4IEJnYdvhAAI3e9jRMSujEaMwHwYDVR0j BBgwFoAUjcLtCHCgBRUmBuLmvra2x4pSKvQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 OTE5YjgwZC00NjkzLTQwOTUtYTllMy00MTJlMTI4MjhmZjIvMC84REMyRUQwODcw QTAwNTE1MjYwNkUyRTZCRUI2QjZDNzhBNTIyQUY0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOERDMkVEMDg3MEEwMDUxNTI2MDZFMkU2QkVCNkI2Qzc4QTUy MkFGNC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vODkxOWI4MGQtNDY5My00MDk1LWE5 ZTMtNDEyZTEyODI4ZmYyLzAvOERDMkVEMDg3MEEwMDUxNTI2MDZFMkU2QkVCNkI2 Qzc4QTUyMkFGNC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADh0ODblxocMv6iZiZQv28J4LP/TVvGibkY6 17OuA7I0Kv4QOXOAiNhufgoNWv7+Yk7a/6xnTQTpG1HuiSfDBNmGKrnDNlKGl4ze 13a2uzUK1YvfFOnsTT3pzLJUUkL8SZiHcBJtv67PWu0IGtdFPUiBv9OQtH41IPJA QHRW77hNEnSJbn6Y9NMmVuUaMxIWRPMcXg+fIzglMWPqDOIAOKLrmCKBTvYmTzrU yop4K+XSv0+SvDtUccblL7mnmEBi6oNu6Vkfe1wFC81NwnAKoEoc9a9kZ+KziccL 6MVBhWDoTDOFPAY9DqkDmFO+lwheYFiZVrWkEMh1UyILO7RzSGo= -----END CERTIFICATE-----Generated at Tue Nov 4 02:20:24 2025 by rpki-client