$ rpki-client -vvf repo-rpki.idnic.net/repo/9c80467c-aeb2-4095-8f54-85b9090d3908/0/8EE9EEE46EA0F860385C880C00E2EE5A59D6EA9B.mft File: 8EE9EEE46EA0F860385C880C00E2EE5A59D6EA9B.mft (raw, json) Hash identifier: HViGs1N1tJeRrQVXIFXMd78MVJtVDnJZ9frFxr9HfHQ= Subject key identifier: 41:54:16:AF:A4:83:1D:8C:34:06:51:17:8C:6C:26:E0:B7:19:D3:8A Authority key identifier: 8E:E9:EE:E4:6E:A0:F8:60:38:5C:88:0C:00:E2:EE:5A:59:D6:EA:9B Certificate issuer: /CN=8EE9EEE46EA0F860385C880C00E2EE5A59D6EA9B Certificate serial: 52CC53C67C67D83FCC5DF664A6C02A5FF8638D63 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8EE9EEE46EA0F860385C880C00E2EE5A59D6EA9B.cer Subject info access: rsync://repo-rpki.idnic.net/repo/9c80467c-aeb2-4095-8f54-85b9090d3908/0/8EE9EEE46EA0F860385C880C00E2EE5A59D6EA9B.mft Manifest number: 01C1 Signing time: Mon 03 Nov 2025 01:30:41 +0000 Manifest this update: Mon 03 Nov 2025 01:25:41 +0000 Manifest next update: Thu 06 Nov 2025 12:21:41 +0000 Files and hashes: 1: 3130332e3139372e3138382e302f32322d3234203d3e20313333383030.roa (hash: 4aA8UHvWdn6b+e9rvE0qvRNLuWwKk2SM0xhNOkJ4w/s=) 2: 8EE9EEE46EA0F860385C880C00E2EE5A59D6EA9B.crl (hash: pgIG9ObSZyvKI1n3y8oNkjggD+5k8qlMOQyW1VdED6o=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/9c80467c-aeb2-4095-8f54-85b9090d3908/0/8EE9EEE46EA0F860385C880C00E2EE5A59D6EA9B.crl rsync://repo-rpki.idnic.net/repo/9c80467c-aeb2-4095-8f54-85b9090d3908/0/8EE9EEE46EA0F860385C880C00E2EE5A59D6EA9B.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8EE9EEE46EA0F860385C880C00E2EE5A59D6EA9B.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 06 Nov 2025 12:21:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 52:cc:53:c6:7c:67:d8:3f:cc:5d:f6:64:a6:c0:2a:5f:f8:63:8d:63 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8EE9EEE46EA0F860385C880C00E2EE5A59D6EA9B Validity Not Before: Nov 3 01:25:41 2025 GMT Not After : Nov 6 12:21:41 2025 GMT Subject: CN=415416AFA4831D8C340651178C6C26E0B719D38A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:de:5d:36:14:01:22:9d:c1:ce:e1:fd:43:11: dd:a1:55:a6:b7:f4:17:e1:31:56:87:81:10:8c:6d: 71:8e:6f:5a:0f:be:ea:96:22:2c:3b:3d:88:a3:8d: f2:aa:9c:57:e7:82:1f:7a:09:09:0c:d6:61:53:c4: 16:7e:73:49:23:07:2b:42:7d:41:b1:a5:ba:43:56: 96:03:70:8a:f3:61:a5:d0:fa:fd:f9:be:dc:d5:eb: 94:0f:cc:04:8e:17:c6:91:0b:0e:95:ff:69:9a:d1: da:e0:f2:4f:ce:dd:45:d9:fc:39:11:e5:4d:ad:13: e2:c4:fb:87:25:af:04:16:e9:bd:db:62:0e:9d:4e: 6f:da:77:9a:ae:2c:f6:a7:22:2f:01:d6:31:4b:d7: c2:40:41:cc:28:80:01:b3:9f:82:0c:8b:9f:38:c8: 10:a9:f5:49:84:a1:c4:ad:42:92:81:17:b9:d2:b9: ee:59:0c:6a:23:8e:91:e5:8c:1e:e8:5e:eb:8a:fa: 3a:8c:e0:2b:ad:ee:58:d9:f2:b2:c1:3e:b1:18:9e: 22:b4:75:d7:f9:62:cb:30:3c:f4:1b:8e:01:0a:e0: e5:e4:9e:0a:d7:6f:39:ad:59:96:8f:64:a2:22:d0: c4:9f:2b:01:ab:96:98:b4:07:d8:8f:c8:b8:9c:3c: 9c:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:54:16:AF:A4:83:1D:8C:34:06:51:17:8C:6C:26:E0:B7:19:D3:8A X509v3 Authority Key Identifier: keyid:8E:E9:EE:E4:6E:A0:F8:60:38:5C:88:0C:00:E2:EE:5A:59:D6:EA:9B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/9c80467c-aeb2-4095-8f54-85b9090d3908/0/8EE9EEE46EA0F860385C880C00E2EE5A59D6EA9B.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8EE9EEE46EA0F860385C880C00E2EE5A59D6EA9B.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/9c80467c-aeb2-4095-8f54-85b9090d3908/0/8EE9EEE46EA0F860385C880C00E2EE5A59D6EA9B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 38:75:0f:b6:eb:9e:0e:c5:59:b5:0a:00:63:27:f4:f6:24:bb: 4e:9f:f7:10:b6:bb:ae:19:e0:9e:d6:9f:16:8f:66:38:87:72: 3c:b2:a4:2d:65:cc:ce:3f:74:7b:1e:8c:ae:98:39:6b:0b:c0: af:42:15:6d:ed:45:38:df:c4:0e:06:eb:38:9c:f2:52:79:bb: 43:de:8c:dc:9b:56:9a:b9:69:d4:43:22:d8:5c:e1:ed:0e:5c: a0:b2:24:95:84:51:fc:8f:13:0b:e3:ba:9a:45:98:e2:de:1e: 80:ba:0f:8e:61:a8:7a:f5:0b:f2:86:0f:26:1c:ed:39:c2:51: ae:85:35:09:ac:13:de:2d:1a:1d:4f:09:2e:53:9b:85:3f:f1: 8c:b8:a0:e1:ef:87:04:df:f9:a8:95:a3:63:42:0a:75:43:53: bb:07:5a:76:94:b8:45:81:2e:70:87:7b:76:ba:36:6f:cc:38: 3b:f5:35:e4:d9:ba:78:ea:95:41:d9:5a:90:ce:f5:fa:14:5f: 34:62:ee:16:3e:db:18:2b:4c:f2:9f:53:87:a7:74:4f:35:5c: 01:71:5a:7f:5b:98:46:90:75:c5:41:c3:83:d6:d2:07:30:2f: 95:fa:37:f1:ac:43:bc:f0:3f:fd:46:7d:44:ef:7c:a0:a8:2c: 5d:23:3b:33 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUUsxTxnxn2D/MXfZkpsAqX/hjjWMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEVFOUVFRTQ2RUEwRjg2MDM4NUM4ODBDMDBFMkVFNUE1 OUQ2RUE5QjAeFw0yNTExMDMwMTI1NDFaFw0yNTExMDYxMjIxNDFaMDMxMTAvBgNV BAMTKDQxNTQxNkFGQTQ4MzFEOEMzNDA2NTExNzhDNkMyNkUwQjcxOUQzOEEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDq3l02FAEincHO4f1DEd2hVaa3 9BfhMVaHgRCMbXGOb1oPvuqWIiw7PYijjfKqnFfngh96CQkM1mFTxBZ+c0kjBytC fUGxpbpDVpYDcIrzYaXQ+v35vtzV65QPzASOF8aRCw6V/2ma0drg8k/O3UXZ/DkR 5U2tE+LE+4clrwQW6b3bYg6dTm/ad5quLPanIi8B1jFL18JAQcwogAGzn4IMi584 yBCp9UmEocStQpKBF7nSue5ZDGojjpHljB7oXuuK+jqM4Cut7ljZ8rLBPrEYniK0 ddf5YsswPPQbjgEK4OXkngrXbzmtWZaPZKIi0MSfKwGrlpi0B9iPyLicPJx1AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUQVQWr6SDHYw0BlEXjGwm4LcZ04owHwYDVR0j BBgwFoAUjunu5G6g+GA4XIgMAOLuWlnW6pswDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 YzgwNDY3Yy1hZWIyLTQwOTUtOGY1NC04NWI5MDkwZDM5MDgvMC84RUU5RUVFNDZF QTBGODYwMzg1Qzg4MEMwMEUyRUU1QTU5RDZFQTlCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOEVFOUVFRTQ2RUEwRjg2MDM4NUM4ODBDMDBFMkVFNUE1OUQ2 RUE5Qi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOWM4MDQ2N2MtYWViMi00MDk1LThm NTQtODViOTA5MGQzOTA4LzAvOEVFOUVFRTQ2RUEwRjg2MDM4NUM4ODBDMDBFMkVF NUE1OUQ2RUE5Qi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADh1D7brng7FWbUKAGMn9PYku06f9xC2u64Z 4J7WnxaPZjiHcjyypC1lzM4/dHsejK6YOWsLwK9CFW3tRTjfxA4G6zic8lJ5u0Pe jNybVpq5adRDIthc4e0OXKCyJJWEUfyPEwvjuppFmOLeHoC6D45hqHr1C/KGDyYc 7TnCUa6FNQmsE94tGh1PCS5Tm4U/8Yy4oOHvhwTf+aiVo2NCCnVDU7sHWnaUuEWB LnCHe3a6Nm/MODv1NeTZunjqlUHZWpDO9foUXzRi7hY+2xgrTPKfU4endE81XAFx Wn9bmEaQdcVBw4PW0gcwL5X6N/GsQ7zwP/1GfUTvfKCoLF0jOzM= -----END CERTIFICATE-----Generated at Tue Nov 4 12:38:08 2025 by rpki-client