$ rpki-client -vvf repo-rpki.idnic.net/repo/98853aab-8d6c-457f-9d57-484acacea9d8/1/C8C5B781B7F43C6274BDAAC3FD8AE1914ABEED88.mft File: C8C5B781B7F43C6274BDAAC3FD8AE1914ABEED88.mft (raw, json) Hash identifier: 246Os8P8A3753+ksSjvpqdp9YQ0hAwQ/VL+LBL5sE1I= Subject key identifier: 6A:42:C2:18:02:8C:F3:1B:6E:94:D0:72:A9:44:41:B7:03:30:CD:85 Authority key identifier: C8:C5:B7:81:B7:F4:3C:62:74:BD:AA:C3:FD:8A:E1:91:4A:BE:ED:88 Certificate issuer: /CN=C8C5B781B7F43C6274BDAAC3FD8AE1914ABEED88 Certificate serial: 0966C487833BE50D1FABAFB0EA6F31BE22413239 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C8C5B781B7F43C6274BDAAC3FD8AE1914ABEED88.cer Subject info access: rsync://repo-rpki.idnic.net/repo/98853aab-8d6c-457f-9d57-484acacea9d8/1/C8C5B781B7F43C6274BDAAC3FD8AE1914ABEED88.mft Manifest number: A2 Signing time: Mon 03 Nov 2025 05:01:53 +0000 Manifest this update: Mon 03 Nov 2025 04:56:53 +0000 Manifest next update: Thu 06 Nov 2025 13:16:53 +0000 Files and hashes: 1: C8C5B781B7F43C6274BDAAC3FD8AE1914ABEED88.crl (hash: HeoWkNFJWdglX4EYHPulBowQ+PGvCu2Kz7Hx5ICf2DY=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/98853aab-8d6c-457f-9d57-484acacea9d8/1/C8C5B781B7F43C6274BDAAC3FD8AE1914ABEED88.crl rsync://repo-rpki.idnic.net/repo/98853aab-8d6c-457f-9d57-484acacea9d8/1/C8C5B781B7F43C6274BDAAC3FD8AE1914ABEED88.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C8C5B781B7F43C6274BDAAC3FD8AE1914ABEED88.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 06 Nov 2025 13:16:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 09:66:c4:87:83:3b:e5:0d:1f:ab:af:b0:ea:6f:31:be:22:41:32:39 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C8C5B781B7F43C6274BDAAC3FD8AE1914ABEED88 Validity Not Before: Nov 3 04:56:53 2025 GMT Not After : Nov 6 13:16:53 2025 GMT Subject: CN=6A42C218028CF31B6E94D072A94441B70330CD85 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:33:24:69:1d:71:79:0e:bd:5a:3c:9f:70:22: 9a:07:06:40:85:d7:ac:64:ee:cb:69:d4:44:5e:f0: e1:e9:c0:0b:9c:66:8a:47:3a:91:16:37:0c:6c:2a: 72:b5:14:fd:b4:32:e5:51:58:8d:04:da:de:d4:3b: aa:d1:8a:96:de:47:31:ea:71:c6:5b:55:5e:33:20: 6e:c6:c0:c8:77:30:b5:56:4b:80:2e:5b:f5:a8:79: bc:d1:8c:a0:e6:69:ff:cf:33:6d:fd:f8:5a:e4:fc: b9:33:ad:b4:27:04:5d:3c:ef:3e:af:bf:d5:8d:ad: 69:1d:0a:f4:27:c8:16:9a:e6:24:69:18:74:6d:6a: a4:97:9d:4f:83:e6:73:d7:ae:c5:71:9a:f9:de:0a: 74:7a:4f:1b:20:de:43:6c:f1:28:2b:8a:58:1b:6f: 19:9c:d0:f1:8c:b9:b3:0e:46:c9:3a:de:a4:ab:bd: 14:77:d9:7d:2b:e9:38:7a:61:83:c9:ef:74:af:6e: ff:c1:11:d8:48:f5:6e:48:a9:94:a1:6a:67:75:52: 77:fd:26:1e:9e:42:c4:a5:97:9b:85:d5:10:2f:d2: 71:c6:d6:f4:d3:97:43:b7:1d:b5:d6:b3:f6:06:94: 08:bf:1b:f5:6a:89:9c:3e:58:3e:28:d9:b1:c7:dc: 68:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6A:42:C2:18:02:8C:F3:1B:6E:94:D0:72:A9:44:41:B7:03:30:CD:85 X509v3 Authority Key Identifier: keyid:C8:C5:B7:81:B7:F4:3C:62:74:BD:AA:C3:FD:8A:E1:91:4A:BE:ED:88 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/98853aab-8d6c-457f-9d57-484acacea9d8/1/C8C5B781B7F43C6274BDAAC3FD8AE1914ABEED88.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C8C5B781B7F43C6274BDAAC3FD8AE1914ABEED88.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/98853aab-8d6c-457f-9d57-484acacea9d8/1/C8C5B781B7F43C6274BDAAC3FD8AE1914ABEED88.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b5:64:c4:a2:7b:6b:4d:2a:35:86:fd:f2:42:4a:81:6b:49:b8: a5:d9:dd:69:a4:f2:b0:0e:e3:97:ae:b3:66:38:81:fb:92:fb: c5:25:3f:d0:db:0b:8d:6f:11:39:c7:58:ab:19:bf:30:13:3b: 2a:35:fa:64:b2:2b:8e:ba:22:f4:18:7b:b6:67:70:b5:77:ba: 11:48:fd:1f:6a:b1:6d:a3:e8:b2:d5:09:f7:95:ef:8f:33:ef: 6f:99:03:44:34:98:0d:5d:3a:44:86:0e:7d:85:1f:a3:5d:f2: e3:57:fb:99:7d:eb:15:5c:10:d0:59:da:82:7c:5d:78:3c:cc: e2:be:77:66:c5:e2:09:cd:35:19:7f:88:37:54:f2:d7:d4:4f: 71:54:c1:da:0e:d1:88:36:3c:db:fc:4d:65:4e:09:1b:a4:24: 7c:ca:15:73:2e:2b:86:7e:4c:ec:bb:0f:b3:04:4d:fb:e5:7f: 18:f4:6c:9d:cb:85:82:f6:3e:c7:01:6c:10:33:6c:14:37:63: 93:fe:09:b4:37:81:4b:4e:bc:0d:bf:7b:4c:71:18:03:fa:59: 1b:2a:56:57:f9:d1:fb:79:f6:0b:b2:83:33:b9:78:d0:09:a4: 3f:2d:e7:42:c1:e5:30:10:a4:7e:49:33:da:6a:b3:12:7a:31: 06:0a:67:79 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUCWbEh4M75Q0fq6+w6m8xviJBMjkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzhDNUI3ODFCN0Y0M0M2Mjc0QkRBQUMzRkQ4QUUxOTE0 QUJFRUQ4ODAeFw0yNTExMDMwNDU2NTNaFw0yNTExMDYxMzE2NTNaMDMxMTAvBgNV BAMTKDZBNDJDMjE4MDI4Q0YzMUI2RTk0RDA3MkE5NDQ0MUI3MDMzMENEODUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCUMyRpHXF5Dr1aPJ9wIpoHBkCF 16xk7stp1ERe8OHpwAucZopHOpEWNwxsKnK1FP20MuVRWI0E2t7UO6rRipbeRzHq ccZbVV4zIG7GwMh3MLVWS4AuW/WoebzRjKDmaf/PM239+Frk/LkzrbQnBF087z6v v9WNrWkdCvQnyBaa5iRpGHRtaqSXnU+D5nPXrsVxmvneCnR6Txsg3kNs8Sgrilgb bxmc0PGMubMORsk63qSrvRR32X0r6Th6YYPJ73Svbv/BEdhI9W5IqZShamd1Unf9 Jh6eQsSll5uF1RAv0nHG1vTTl0O3HbXWs/YGlAi/G/VqiZw+WD4o2bHH3GgvAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUakLCGAKM8xtulNByqURBtwMwzYUwHwYDVR0j BBgwFoAUyMW3gbf0PGJ0varD/YrhkUq+7YgwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 ODg1M2FhYi04ZDZjLTQ1N2YtOWQ1Ny00ODRhY2FjZWE5ZDgvMS9DOEM1Qjc4MUI3 RjQzQzYyNzRCREFBQzNGRDhBRTE5MTRBQkVFRDg4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQzhDNUI3ODFCN0Y0M0M2Mjc0QkRBQUMzRkQ4QUUxOTE0QUJF RUQ4OC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOTg4NTNhYWItOGQ2Yy00NTdmLTlk NTctNDg0YWNhY2VhOWQ4LzEvQzhDNUI3ODFCN0Y0M0M2Mjc0QkRBQUMzRkQ4QUUx OTE0QUJFRUQ4OC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALVkxKJ7a00qNYb98kJKgWtJuKXZ3Wmk8rAO 45eus2Y4gfuS+8UlP9DbC41vETnHWKsZvzATOyo1+mSyK466IvQYe7ZncLV3uhFI /R9qsW2j6LLVCfeV748z72+ZA0Q0mA1dOkSGDn2FH6Nd8uNX+5l96xVcENBZ2oJ8 XXg8zOK+d2bF4gnNNRl/iDdU8tfUT3FUwdoO0Yg2PNv8TWVOCRukJHzKFXMuK4Z+ TOy7D7METfvlfxj0bJ3LhYL2PscBbBAzbBQ3Y5P+CbQ3gUtOvA2/e0xxGAP6WRsq Vlf50ft59guygzO5eNAJpD8t50LB5TAQpH5JM9pqsxJ6MQYKZ3k= -----END CERTIFICATE-----Generated at Tue Nov 4 12:56:28 2025 by rpki-client