$ rpki-client -vvf repo-rpki.idnic.net/repo/9338bdad-d2dd-4f07-ae84-c540612baf6a/0/8C3462809943E9E8E8E89052BF9B9C3DDC60EE22.mft File: 8C3462809943E9E8E8E89052BF9B9C3DDC60EE22.mft (raw, json) Hash identifier: kKnPh/N++QVw/61YCs7/tpskQaZCak8v8JZ/LqkDSfc= Subject key identifier: 19:B6:3E:46:FE:8F:EB:EC:09:FC:83:91:B9:8F:4F:18:89:F4:B5:6C Authority key identifier: 8C:34:62:80:99:43:E9:E8:E8:E8:90:52:BF:9B:9C:3D:DC:60:EE:22 Certificate issuer: /CN=8C3462809943E9E8E8E89052BF9B9C3DDC60EE22 Certificate serial: 934464ABEFFD5B0490F2B596B5C861E0E27FFB Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8C3462809943E9E8E8E89052BF9B9C3DDC60EE22.cer Subject info access: rsync://repo-rpki.idnic.net/repo/9338bdad-d2dd-4f07-ae84-c540612baf6a/0/8C3462809943E9E8E8E89052BF9B9C3DDC60EE22.mft Manifest number: 0263 Signing time: Tue 04 Nov 2025 12:50:46 +0000 Manifest this update: Tue 04 Nov 2025 12:45:46 +0000 Manifest next update: Fri 07 Nov 2025 17:08:46 +0000 Files and hashes: 1: 8C3462809943E9E8E8E89052BF9B9C3DDC60EE22.crl (hash: D0+MjtmmxwFL7oCe893/PZSxRW33oecGfNbDobDAuH4=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/9338bdad-d2dd-4f07-ae84-c540612baf6a/0/8C3462809943E9E8E8E89052BF9B9C3DDC60EE22.crl rsync://repo-rpki.idnic.net/repo/9338bdad-d2dd-4f07-ae84-c540612baf6a/0/8C3462809943E9E8E8E89052BF9B9C3DDC60EE22.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8C3462809943E9E8E8E89052BF9B9C3DDC60EE22.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 07 Nov 2025 17:08:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 93:44:64:ab:ef:fd:5b:04:90:f2:b5:96:b5:c8:61:e0:e2:7f:fb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8C3462809943E9E8E8E89052BF9B9C3DDC60EE22 Validity Not Before: Nov 4 12:45:46 2025 GMT Not After : Nov 7 17:08:46 2025 GMT Subject: CN=19B63E46FE8FEBEC09FC8391B98F4F1889F4B56C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:e4:2d:93:c9:d4:ae:cd:ae:c6:b1:e1:48:40: f5:a6:ed:85:bb:a9:01:d9:3a:78:f1:1d:6a:d7:83: d3:92:8e:c6:12:44:80:db:3c:bd:9e:23:46:de:74: d1:c9:8c:84:1d:af:7f:98:47:08:57:f2:c1:e4:f2: 92:26:ca:db:bf:24:53:eb:e5:fd:b3:34:ad:08:cf: de:7f:8a:d9:3f:a1:4a:b3:cc:0b:ad:24:72:9a:7b: 5e:42:16:0f:b3:13:f5:ad:0a:f3:7b:be:47:cd:a6: 57:2e:64:19:ad:41:16:7b:d2:94:0d:ca:8a:dc:36: 86:69:48:fa:72:43:10:fd:98:4f:78:4f:2f:57:cd: bc:3e:d5:87:0c:69:9e:58:8e:9e:cb:2b:48:5c:79: 86:53:34:f1:1c:da:e9:d0:d6:29:cf:f9:75:16:c5: c5:33:64:4f:1c:03:0c:42:2d:4e:b5:05:94:36:cc: 6a:25:b7:52:3d:00:6d:fe:ae:61:d4:42:75:02:3d: 4c:1b:65:3d:03:84:7f:29:40:a8:3a:97:c1:05:ef: 83:d4:b4:f4:49:e2:64:d0:47:6f:89:61:0c:6c:fd: 77:80:87:32:69:7d:f6:98:ac:8a:84:d2:8b:07:c6: ed:26:64:32:83:6f:95:73:bf:c0:52:96:c0:2e:c9: 65:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 19:B6:3E:46:FE:8F:EB:EC:09:FC:83:91:B9:8F:4F:18:89:F4:B5:6C X509v3 Authority Key Identifier: keyid:8C:34:62:80:99:43:E9:E8:E8:E8:90:52:BF:9B:9C:3D:DC:60:EE:22 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/9338bdad-d2dd-4f07-ae84-c540612baf6a/0/8C3462809943E9E8E8E89052BF9B9C3DDC60EE22.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8C3462809943E9E8E8E89052BF9B9C3DDC60EE22.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/9338bdad-d2dd-4f07-ae84-c540612baf6a/0/8C3462809943E9E8E8E89052BF9B9C3DDC60EE22.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 71:fc:66:e0:8b:e0:08:63:4d:9a:e2:34:81:c8:85:e9:36:3a: 1e:94:3a:95:1a:96:12:46:d1:e2:a4:d4:bb:01:f1:4b:f9:bc: 56:c4:a0:c2:b3:0b:9c:15:6f:81:01:04:6c:f9:c8:43:3a:69: 63:d0:60:49:1d:0b:06:e7:c0:41:9a:2c:94:bf:81:34:be:88: 11:ae:4f:ac:86:97:d5:e9:2c:c3:ff:a0:1a:24:70:16:92:43: 11:9f:f4:99:b8:e3:f3:32:93:13:bb:17:30:01:42:42:ec:ba: e5:de:f8:4c:b4:db:b7:52:2b:9f:c9:1e:3e:0a:34:4b:90:50: 6d:ad:53:a0:66:b3:21:37:0c:58:15:97:a5:5f:32:15:1e:f5: 77:b5:0f:a9:06:e9:9e:e4:49:5c:6a:5b:2f:2c:20:7b:fd:86: 62:18:b0:02:a0:18:63:eb:41:84:82:dc:77:e0:27:f8:7a:c2: 1a:ba:b7:c2:4a:46:7b:7b:48:94:3e:f5:e9:64:32:89:db:fd: e4:19:b9:64:4c:a6:97:c8:99:59:31:b6:ea:18:09:44:07:1f: 21:97:21:3b:9d:c9:9e:79:f0:66:f3:f8:a7:1a:ae:73:7f:80: 22:df:cf:dc:cf:5f:02:9c:db:f8:71:01:ed:8a:96:c2:a2:6d: 0c:57:09:59 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUAJNEZKvv/VsEkPK1lrXIYeDif/swDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEMzNDYyODA5OTQzRTlFOEU4RTg5MDUyQkY5QjlDM0RE QzYwRUUyMjAeFw0yNTExMDQxMjQ1NDZaFw0yNTExMDcxNzA4NDZaMDMxMTAvBgNV BAMTKDE5QjYzRTQ2RkU4RkVCRUMwOUZDODM5MUI5OEY0RjE4ODlGNEI1NkMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDW5C2TydSuza7GseFIQPWm7YW7 qQHZOnjxHWrXg9OSjsYSRIDbPL2eI0bedNHJjIQdr3+YRwhX8sHk8pImytu/JFPr 5f2zNK0Iz95/itk/oUqzzAutJHKae15CFg+zE/WtCvN7vkfNplcuZBmtQRZ70pQN yorcNoZpSPpyQxD9mE94Ty9Xzbw+1YcMaZ5Yjp7LK0hceYZTNPEc2unQ1inP+XUW xcUzZE8cAwxCLU61BZQ2zGolt1I9AG3+rmHUQnUCPUwbZT0DhH8pQKg6l8EF74PU tPRJ4mTQR2+JYQxs/XeAhzJpffaYrIqE0osHxu0mZDKDb5Vzv8BSlsAuyWX3AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUGbY+Rv6P6+wJ/IORuY9PGIn0tWwwHwYDVR0j BBgwFoAUjDRigJlD6ejo6JBSv5ucPdxg7iIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 MzM4YmRhZC1kMmRkLTRmMDctYWU4NC1jNTQwNjEyYmFmNmEvMC84QzM0NjI4MDk5 NDNFOUU4RThFODkwNTJCRjlCOUMzRERDNjBFRTIyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOEMzNDYyODA5OTQzRTlFOEU4RTg5MDUyQkY5QjlDM0REQzYw RUUyMi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOTMzOGJkYWQtZDJkZC00ZjA3LWFl ODQtYzU0MDYxMmJhZjZhLzAvOEMzNDYyODA5OTQzRTlFOEU4RTg5MDUyQkY5QjlD M0REQzYwRUUyMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHH8ZuCL4AhjTZriNIHIhek2Oh6UOpUalhJG 0eKk1LsB8Uv5vFbEoMKzC5wVb4EBBGz5yEM6aWPQYEkdCwbnwEGaLJS/gTS+iBGu T6yGl9XpLMP/oBokcBaSQxGf9Jm44/MykxO7FzABQkLsuuXe+Ey027dSK5/JHj4K NEuQUG2tU6BmsyE3DFgVl6VfMhUe9Xe1D6kG6Z7kSVxqWy8sIHv9hmIYsAKgGGPr QYSC3HfgJ/h6whq6t8JKRnt7SJQ+9elkMonb/eQZuWRMppfImVkxtuoYCUQHHyGX ITudyZ558Gbz+KcarnN/gCLfz9zPXwKc2/hxAe2KlsKibQxXCVk= -----END CERTIFICATE-----Generated at Wed Nov 5 19:21:22 2025 by rpki-client