$ rpki-client -vvf repo-rpki.idnic.net/repo/8d5bbd81-0332-4202-9c92-eb1746a8cd9d/0/8B0DC79B66A96FA7FA3180C20B06A5C43C9CFEA1.mft File: 8B0DC79B66A96FA7FA3180C20B06A5C43C9CFEA1.mft (raw, json) Hash identifier: TWxIyIsRl0zL1VlqKkDpVzDDqzTBB7osv5Zq3yDCHbE= Subject key identifier: 11:47:17:A1:9D:33:D5:D3:7A:65:5A:24:BB:02:23:B4:9C:C8:34:6F Authority key identifier: 8B:0D:C7:9B:66:A9:6F:A7:FA:31:80:C2:0B:06:A5:C4:3C:9C:FE:A1 Certificate issuer: /CN=8B0DC79B66A96FA7FA3180C20B06A5C43C9CFEA1 Certificate serial: 316D3D32221141081F9AA066E7728D9F176AA8AF Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8B0DC79B66A96FA7FA3180C20B06A5C43C9CFEA1.cer Subject info access: rsync://repo-rpki.idnic.net/repo/8d5bbd81-0332-4202-9c92-eb1746a8cd9d/0/8B0DC79B66A96FA7FA3180C20B06A5C43C9CFEA1.mft Manifest number: 032B Signing time: Sat 01 Nov 2025 14:12:18 +0000 Manifest this update: Sat 01 Nov 2025 14:07:18 +0000 Manifest next update: Wed 05 Nov 2025 01:20:18 +0000 Files and hashes: 1: 3130332e3131382e332e302f32342d3234203d3e20313337333732.roa (hash: CnYInR0edgXU+mYMJQGAiAKWjbNlk8PVPSzC/8WPG5g=) 2: 8B0DC79B66A96FA7FA3180C20B06A5C43C9CFEA1.crl (hash: IGLHVtVY79SUjvjm3KYpHAm+/ElhDcdqmNIyX2GQ5hs=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/8d5bbd81-0332-4202-9c92-eb1746a8cd9d/0/8B0DC79B66A96FA7FA3180C20B06A5C43C9CFEA1.crl rsync://repo-rpki.idnic.net/repo/8d5bbd81-0332-4202-9c92-eb1746a8cd9d/0/8B0DC79B66A96FA7FA3180C20B06A5C43C9CFEA1.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8B0DC79B66A96FA7FA3180C20B06A5C43C9CFEA1.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 05 Nov 2025 01:20:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 31:6d:3d:32:22:11:41:08:1f:9a:a0:66:e7:72:8d:9f:17:6a:a8:af Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8B0DC79B66A96FA7FA3180C20B06A5C43C9CFEA1 Validity Not Before: Nov 1 14:07:18 2025 GMT Not After : Nov 5 01:20:18 2025 GMT Subject: CN=114717A19D33D5D37A655A24BB0223B49CC8346F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:fb:27:dc:27:0d:3f:a6:5a:86:f2:11:97:99: 6d:da:9e:cb:f1:73:86:c0:a6:e1:39:a1:31:fc:ed: ab:6c:3e:1f:18:59:30:46:86:bf:8e:96:9e:6c:4b: e9:30:14:e9:b0:16:86:6b:55:1e:4f:bc:38:ee:d0: 5d:59:18:81:de:e8:93:19:0d:50:a9:a9:6c:ce:92: 9a:7d:e8:e2:cd:3c:bb:b2:54:f4:ae:dd:bb:e5:3e: 0e:ab:01:1e:8f:95:53:23:80:04:a4:d7:1b:77:d3: a4:b4:70:58:1d:6a:36:3e:8d:cc:cb:e1:a6:cf:1b: ca:78:74:56:31:bb:d3:19:4b:6f:33:c7:ab:d4:18: aa:6e:cf:45:b5:bc:27:5a:cb:0f:71:78:a2:5b:df: f7:cd:57:44:76:cf:f4:af:cf:fb:09:7b:b8:ad:e1: c1:0b:0b:e1:38:3e:73:3c:1f:1e:45:71:bb:c6:7d: 67:98:6f:9b:70:01:fb:a2:c1:e5:78:57:70:ea:be: fb:a8:1e:c6:a5:54:14:26:9f:f7:41:2d:e6:32:b7: 52:af:c7:a7:83:02:61:1b:12:05:5c:73:d3:36:45: 5b:04:cf:fa:39:43:e6:89:76:ad:7b:b6:d4:70:c6: f5:44:37:45:42:3e:fe:7c:32:e2:9f:a1:25:93:4a: da:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:47:17:A1:9D:33:D5:D3:7A:65:5A:24:BB:02:23:B4:9C:C8:34:6F X509v3 Authority Key Identifier: keyid:8B:0D:C7:9B:66:A9:6F:A7:FA:31:80:C2:0B:06:A5:C4:3C:9C:FE:A1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/8d5bbd81-0332-4202-9c92-eb1746a8cd9d/0/8B0DC79B66A96FA7FA3180C20B06A5C43C9CFEA1.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8B0DC79B66A96FA7FA3180C20B06A5C43C9CFEA1.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/8d5bbd81-0332-4202-9c92-eb1746a8cd9d/0/8B0DC79B66A96FA7FA3180C20B06A5C43C9CFEA1.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8e:90:ee:01:3e:14:b8:a8:bc:2d:77:b1:e6:6e:dd:0d:73:ab: 51:a1:4d:f3:d8:78:9b:31:49:ee:77:80:89:27:28:3c:75:10: f7:08:98:f6:1d:15:f2:65:24:fc:4e:c2:eb:a9:d7:9c:67:ab: 4a:40:67:48:16:14:f3:e1:8d:4e:4a:8f:bd:5d:24:81:c5:2a: 15:ef:b2:96:f7:29:71:c1:8a:3f:fd:bf:df:1f:bc:45:76:6e: 01:b9:e5:19:0c:e3:b4:25:76:50:2e:df:f7:c6:0e:03:f0:a4: 34:41:34:3f:6d:f6:1a:df:0b:14:c0:7b:dc:36:46:a0:3c:2f: 54:7f:30:f3:cd:c2:20:3d:ad:24:e2:0e:11:3d:92:66:46:d7: 17:82:31:a5:bb:8e:ba:cb:44:4c:e9:b2:57:4c:1f:17:9c:2c: f2:d1:ab:87:13:34:b0:64:d4:48:ec:62:f3:ab:e7:92:c5:6b: 9e:8b:8c:5c:78:29:3b:fb:25:14:9e:30:3e:33:90:50:2c:54: 83:bd:b3:66:f7:96:35:b1:53:c3:12:d9:7a:f7:f6:c9:6c:a9: bb:9a:22:86:cf:ec:68:10:79:8c:88:94:7c:eb:03:5b:aa:94: 82:38:e8:dc:ce:0a:39:a6:d8:17:b6:f0:5b:f5:ab:cc:a5:24: 0d:8b:f1:44 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUMW09MiIRQQgfmqBm53KNnxdqqK8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEIwREM3OUI2NkE5NkZBN0ZBMzE4MEMyMEIwNkE1QzQz QzlDRkVBMTAeFw0yNTExMDExNDA3MThaFw0yNTExMDUwMTIwMThaMDMxMTAvBgNV BAMTKDExNDcxN0ExOUQzM0Q1RDM3QTY1NUEyNEJCMDIyM0I0OUNDODM0NkYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC++yfcJw0/plqG8hGXmW3ansvx c4bApuE5oTH87atsPh8YWTBGhr+Olp5sS+kwFOmwFoZrVR5PvDju0F1ZGIHe6JMZ DVCpqWzOkpp96OLNPLuyVPSu3bvlPg6rAR6PlVMjgASk1xt306S0cFgdajY+jczL 4abPG8p4dFYxu9MZS28zx6vUGKpuz0W1vCdayw9xeKJb3/fNV0R2z/Svz/sJe7it 4cELC+E4PnM8Hx5FcbvGfWeYb5twAfuiweV4V3DqvvuoHsalVBQmn/dBLeYyt1Kv x6eDAmEbEgVcc9M2RVsEz/o5Q+aJdq17ttRwxvVEN0VCPv58MuKfoSWTStp3AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUEUcXoZ0z1dN6ZVokuwIjtJzING8wHwYDVR0j BBgwFoAUiw3Hm2apb6f6MYDCCwalxDyc/qEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 ZDViYmQ4MS0wMzMyLTQyMDItOWM5Mi1lYjE3NDZhOGNkOWQvMC84QjBEQzc5QjY2 QTk2RkE3RkEzMTgwQzIwQjA2QTVDNDNDOUNGRUExLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOEIwREM3OUI2NkE5NkZBN0ZBMzE4MEMyMEIwNkE1QzQzQzlD RkVBMS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOGQ1YmJkODEtMDMzMi00MjAyLTlj OTItZWIxNzQ2YThjZDlkLzAvOEIwREM3OUI2NkE5NkZBN0ZBMzE4MEMyMEIwNkE1 QzQzQzlDRkVBMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAI6Q7gE+FLiovC13seZu3Q1zq1GhTfPYeJsx Se53gIknKDx1EPcImPYdFfJlJPxOwuup15xnq0pAZ0gWFPPhjU5Kj71dJIHFKhXv spb3KXHBij/9v98fvEV2bgG55RkM47QldlAu3/fGDgPwpDRBND9t9hrfCxTAe9w2 RqA8L1R/MPPNwiA9rSTiDhE9kmZG1xeCMaW7jrrLREzpsldMHxecLPLRq4cTNLBk 1EjsYvOr55LFa56LjFx4KTv7JRSeMD4zkFAsVIO9s2b3ljWxU8MS2Xr39slsqbua IobP7GgQeYyIlHzrA1uqlII46NzOCjmm2Be28Fv1q8ylJA2L8UQ= -----END CERTIFICATE-----Generated at Tue Nov 4 02:20:30 2025 by rpki-client