$ rpki-client -vvf repo-rpki.idnic.net/repo/9497d828-984a-43f1-9b6e-a01ba21bb518/0/B8E467F9AD3F6AB1EEF3A9099A390231708C790A.mft File: B8E467F9AD3F6AB1EEF3A9099A390231708C790A.mft (raw, json) Hash identifier: oCsIZ8DhRbpOFZWUJ9uHFVOMMYbeAxnFn+2lbmdwmUw= Subject key identifier: 88:D3:21:42:E9:2C:23:B9:E4:88:4F:B5:07:BC:B3:1A:65:93:E8:88 Authority key identifier: B8:E4:67:F9:AD:3F:6A:B1:EE:F3:A9:09:9A:39:02:31:70:8C:79:0A Certificate issuer: /CN=B8E467F9AD3F6AB1EEF3A9099A390231708C790A Certificate serial: 5835144E5517980F01F83E3E284DE7F6871EB8FE Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B8E467F9AD3F6AB1EEF3A9099A390231708C790A.cer Subject info access: rsync://repo-rpki.idnic.net/repo/9497d828-984a-43f1-9b6e-a01ba21bb518/0/B8E467F9AD3F6AB1EEF3A9099A390231708C790A.mft Manifest number: 0213 Signing time: Tue 04 Nov 2025 15:20:37 +0000 Manifest this update: Tue 04 Nov 2025 15:15:37 +0000 Manifest next update: Sat 08 Nov 2025 01:25:37 +0000 Files and hashes: 1: B8E467F9AD3F6AB1EEF3A9099A390231708C790A.crl (hash: BGS5anCzSWGgKeLIiELQDFZPG5ltYjDBW3QUUUxpqtQ=) 2: 3130332e352e3134392e302f32342d3234203d3e20313439393338.roa (hash: aIp2Ip0KA7a4+VvE23OSDrVGb4sJGrWUPloeyjyWxtA=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/9497d828-984a-43f1-9b6e-a01ba21bb518/0/B8E467F9AD3F6AB1EEF3A9099A390231708C790A.crl rsync://repo-rpki.idnic.net/repo/9497d828-984a-43f1-9b6e-a01ba21bb518/0/B8E467F9AD3F6AB1EEF3A9099A390231708C790A.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B8E467F9AD3F6AB1EEF3A9099A390231708C790A.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 08 Nov 2025 01:25:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 58:35:14:4e:55:17:98:0f:01:f8:3e:3e:28:4d:e7:f6:87:1e:b8:fe Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B8E467F9AD3F6AB1EEF3A9099A390231708C790A Validity Not Before: Nov 4 15:15:37 2025 GMT Not After : Nov 8 01:25:37 2025 GMT Subject: CN=88D32142E92C23B9E4884FB507BCB31A6593E888 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:98:71:08:7c:89:9b:67:77:69:03:46:54:2a: 08:73:46:3d:55:ef:f8:0d:7e:1b:df:88:82:54:74: c6:5f:7e:67:56:3f:30:5c:79:f9:b2:67:e6:05:de: 1f:04:76:21:46:c8:a0:68:a2:48:9e:fe:a3:ea:88: f7:b1:07:2f:b7:37:a9:2e:bd:fa:01:6e:fa:6d:52: 99:94:7d:31:2c:df:c0:c6:92:1e:a8:b8:8d:59:88: a9:dc:0c:ca:d7:dd:83:fa:b4:d5:14:30:ce:81:e6: 85:06:51:b7:35:39:78:f7:31:46:74:3b:9d:d9:95: 2a:c1:26:2a:82:17:d2:fa:bd:5f:0b:e2:83:8c:2b: d0:47:b2:c8:3e:43:44:ec:cd:b8:47:ea:8e:2d:82: 21:30:f0:eb:9a:ae:f5:0f:c6:3f:73:5b:ae:4b:ca: 99:cf:e1:36:49:09:1b:1f:4f:e7:b4:24:db:24:f2: 35:bd:9b:55:6f:8e:c8:7e:89:21:45:b1:a4:05:9a: 40:d5:a4:03:5d:54:4d:2a:9f:a9:85:83:a6:6d:dc: a9:b5:81:02:cf:3f:50:45:cf:f7:ad:9f:26:ee:d6: 1e:f6:94:bb:6d:ce:17:4b:c7:41:be:63:38:e1:10: ae:03:aa:ea:26:be:9f:a0:3f:ab:06:d7:b0:8b:80: 9a:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:D3:21:42:E9:2C:23:B9:E4:88:4F:B5:07:BC:B3:1A:65:93:E8:88 X509v3 Authority Key Identifier: keyid:B8:E4:67:F9:AD:3F:6A:B1:EE:F3:A9:09:9A:39:02:31:70:8C:79:0A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/9497d828-984a-43f1-9b6e-a01ba21bb518/0/B8E467F9AD3F6AB1EEF3A9099A390231708C790A.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B8E467F9AD3F6AB1EEF3A9099A390231708C790A.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/9497d828-984a-43f1-9b6e-a01ba21bb518/0/B8E467F9AD3F6AB1EEF3A9099A390231708C790A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption af:ff:6b:5e:93:94:7d:71:2a:b8:8f:68:83:27:61:8a:6a:16: 07:ae:91:a6:af:51:57:2a:ba:ec:03:7c:35:03:fb:39:90:af: 2f:3e:78:71:c6:08:dc:0c:87:fe:a4:a1:27:fb:6f:d6:dd:f7: 8b:06:4f:57:4a:1d:e4:f6:cd:64:bd:23:0c:d6:c2:18:c0:4f: ec:5c:ef:1d:c5:f7:e1:46:e3:cc:f3:a0:fd:f7:c3:67:01:b4: 69:42:92:b4:be:8c:5d:30:fe:e0:23:38:94:a9:df:95:49:1e: 9c:0e:a8:f2:ef:2f:32:4c:f5:db:cb:68:e3:69:02:d9:01:70: 54:30:e0:b8:af:03:46:8b:0c:da:eb:f6:a8:1f:21:b7:86:75: 1f:c9:c7:52:c5:dd:72:0a:37:66:8a:d3:88:b4:3d:22:24:d5: 83:65:22:0c:fa:d3:ea:d7:1e:05:88:3d:3f:69:17:78:28:98: b1:b1:a0:0b:b8:40:d1:fb:a1:4b:1c:28:08:97:c9:54:4b:09: 17:13:21:5c:5a:7c:51:79:0d:e4:ac:28:bc:c9:af:8a:32:da: 96:87:a1:53:ef:08:99:bb:3f:31:f7:48:36:c7:fe:30:ab:14: 9f:62:cb:ca:66:09:26:4e:b5:8e:3e:7b:a0:fa:51:ed:da:53: 14:df:08:1b -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUWDUUTlUXmA8B+D4+KE3n9oceuP4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjhFNDY3RjlBRDNGNkFCMUVFRjNBOTA5OUEzOTAyMzE3 MDhDNzkwQTAeFw0yNTExMDQxNTE1MzdaFw0yNTExMDgwMTI1MzdaMDMxMTAvBgNV BAMTKDg4RDMyMTQyRTkyQzIzQjlFNDg4NEZCNTA3QkNCMzFBNjU5M0U4ODgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC8mHEIfImbZ3dpA0ZUKghzRj1V 7/gNfhvfiIJUdMZffmdWPzBcefmyZ+YF3h8EdiFGyKBookie/qPqiPexBy+3N6ku vfoBbvptUpmUfTEs38DGkh6ouI1ZiKncDMrX3YP6tNUUMM6B5oUGUbc1OXj3MUZ0 O53ZlSrBJiqCF9L6vV8L4oOMK9BHssg+Q0TszbhH6o4tgiEw8OuarvUPxj9zW65L ypnP4TZJCRsfT+e0JNsk8jW9m1Vvjsh+iSFFsaQFmkDVpANdVE0qn6mFg6Zt3Km1 gQLPP1BFz/etnybu1h72lLttzhdLx0G+YzjhEK4Dquomvp+gP6sG17CLgJpLAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUiNMhQuksI7nkiE+1B7yzGmWT6IgwHwYDVR0j BBgwFoAUuORn+a0/arHu86kJmjkCMXCMeQowDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 NDk3ZDgyOC05ODRhLTQzZjEtOWI2ZS1hMDFiYTIxYmI1MTgvMC9COEU0NjdGOUFE M0Y2QUIxRUVGM0E5MDk5QTM5MDIzMTcwOEM3OTBBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQjhFNDY3RjlBRDNGNkFCMUVFRjNBOTA5OUEzOTAyMzE3MDhD NzkwQS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOTQ5N2Q4MjgtOTg0YS00M2YxLTli NmUtYTAxYmEyMWJiNTE4LzAvQjhFNDY3RjlBRDNGNkFCMUVFRjNBOTA5OUEzOTAy MzE3MDhDNzkwQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAK//a16TlH1xKriPaIMnYYpqFgeukaavUVcq uuwDfDUD+zmQry8+eHHGCNwMh/6koSf7b9bd94sGT1dKHeT2zWS9IwzWwhjAT+xc 7x3F9+FG48zzoP33w2cBtGlCkrS+jF0w/uAjOJSp35VJHpwOqPLvLzJM9dvLaONp AtkBcFQw4LivA0aLDNrr9qgfIbeGdR/Jx1LF3XIKN2aK04i0PSIk1YNlIgz60+rX HgWIPT9pF3gomLGxoAu4QNH7oUscKAiXyVRLCRcTIVxafFF5DeSsKLzJr4oy2paH oVPvCJm7PzH3SDbH/jCrFJ9iy8pmCSZOtY4+e6D6Ue3aUxTfCBs= -----END CERTIFICATE-----Generated at Wed Nov 5 07:49:16 2025 by rpki-client