$ rpki-client -vvf repo-rpki.idnic.net/repo/a0ba85a0-3534-49a4-a826-13a735f94369/0/8C210840D9E28A465D4F0B9F3A1D7C31CC6680C0.mft File: 8C210840D9E28A465D4F0B9F3A1D7C31CC6680C0.mft (raw, json) Hash identifier: 06VubRmvMO4JG5+YSDOk65WOIoKtrOk5U2B+hgmHB3I= Subject key identifier: 21:36:F1:EB:87:61:DF:50:3A:86:0C:2B:94:4A:F1:56:5D:D2:89:77 Authority key identifier: 8C:21:08:40:D9:E2:8A:46:5D:4F:0B:9F:3A:1D:7C:31:CC:66:80:C0 Certificate issuer: /CN=8C210840D9E28A465D4F0B9F3A1D7C31CC6680C0 Certificate serial: 5BD2FD22DECD44B9FE60B8FC04DDDD421DEF699C Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/8C210840D9E28A465D4F0B9F3A1D7C31CC6680C0.cer Subject info access: rsync://repo-rpki.idnic.net/repo/a0ba85a0-3534-49a4-a826-13a735f94369/0/8C210840D9E28A465D4F0B9F3A1D7C31CC6680C0.mft Manifest number: DC Signing time: Tue 04 Nov 2025 22:20:42 +0000 Manifest this update: Tue 04 Nov 2025 22:15:42 +0000 Manifest next update: Fri 07 Nov 2025 22:58:42 +0000 Files and hashes: 1: 3136302e32322e3139342e302f32332d3234203d3e20313532383236.roa (hash: 8CRgA1ByY654Nlat1fHrKnqGH93mDlUGlMXfJsCa4ik=) 2: 8C210840D9E28A465D4F0B9F3A1D7C31CC6680C0.crl (hash: 6kmSMkIZEN/2wp+u534zxqMAdm6p9PezV7rlKeRPYm8=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/a0ba85a0-3534-49a4-a826-13a735f94369/0/8C210840D9E28A465D4F0B9F3A1D7C31CC6680C0.crl rsync://repo-rpki.idnic.net/repo/a0ba85a0-3534-49a4-a826-13a735f94369/0/8C210840D9E28A465D4F0B9F3A1D7C31CC6680C0.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/8C210840D9E28A465D4F0B9F3A1D7C31CC6680C0.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 07 Nov 2025 22:58:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5b:d2:fd:22:de:cd:44:b9:fe:60:b8:fc:04:dd:dd:42:1d:ef:69:9c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8C210840D9E28A465D4F0B9F3A1D7C31CC6680C0 Validity Not Before: Nov 4 22:15:42 2025 GMT Not After : Nov 7 22:58:42 2025 GMT Subject: CN=2136F1EB8761DF503A860C2B944AF1565DD28977 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:12:4d:e7:2d:a5:d9:96:c1:43:fb:63:9a:75: 56:a7:4f:57:94:d2:a3:9a:b6:fe:bd:9c:1e:cb:ef: 14:fa:48:b5:2e:e3:cb:e2:1d:a1:07:73:e6:dc:1c: cb:d3:8e:7b:e5:c0:b3:31:ca:60:08:4a:2f:1b:26: a7:af:94:e1:4e:43:4b:d5:46:4c:8f:a2:36:ef:43: 47:37:74:46:62:75:d3:20:78:83:40:e8:e9:3b:4a: 49:e0:bb:3b:41:7b:c7:62:8d:6a:87:bd:5f:43:f9: 7a:8c:13:df:2b:9f:2f:29:60:de:8c:35:64:b4:b8: 15:e9:36:4b:96:97:7e:17:db:7a:ec:b7:51:4f:de: ed:5d:b4:86:d3:2f:91:bb:d5:94:e0:d8:fd:70:13: 4e:5b:4b:65:34:9a:ec:db:43:f0:6f:de:9c:af:7e: 13:49:c6:bf:84:2d:2b:eb:7c:ad:27:45:ed:9a:2d: 6b:a7:72:da:88:50:77:da:aa:a3:a2:05:67:81:1d: b5:84:a4:8a:b0:1c:65:f8:bc:34:93:17:1d:d8:dc: c2:01:16:f9:5c:fe:b7:22:1c:19:ae:56:8c:26:70: 75:21:e4:1a:4f:53:b4:b2:10:fe:52:78:d0:a8:88: 6f:89:49:ae:c2:e9:d0:64:d1:86:d7:99:d6:9c:8d: 99:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:36:F1:EB:87:61:DF:50:3A:86:0C:2B:94:4A:F1:56:5D:D2:89:77 X509v3 Authority Key Identifier: keyid:8C:21:08:40:D9:E2:8A:46:5D:4F:0B:9F:3A:1D:7C:31:CC:66:80:C0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/a0ba85a0-3534-49a4-a826-13a735f94369/0/8C210840D9E28A465D4F0B9F3A1D7C31CC6680C0.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/8C210840D9E28A465D4F0B9F3A1D7C31CC6680C0.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a0ba85a0-3534-49a4-a826-13a735f94369/0/8C210840D9E28A465D4F0B9F3A1D7C31CC6680C0.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 40:80:96:f4:71:d1:2b:db:5d:9a:ab:94:09:28:46:cf:c3:f2: 3a:e4:0e:03:e2:3d:b5:b8:20:5f:4d:92:45:14:2d:16:f1:63: df:51:9d:db:bc:f3:6d:32:90:28:02:60:01:d0:97:fc:88:03: 29:ff:ef:2c:d3:9a:0a:fd:e2:f4:de:2b:ca:09:dc:f7:3a:24: 0e:9e:f2:11:e9:c2:3f:cb:62:64:e7:8b:11:18:ce:93:26:24: 76:ae:bb:0b:0d:a6:2e:7b:82:3d:59:b0:a9:99:c2:8f:5c:24: a3:e9:7b:e9:4c:e2:3c:6a:40:a1:9b:f4:a0:e7:e9:49:a2:5e: 8b:9f:71:50:1f:6b:97:ce:fb:03:49:e2:db:62:8d:37:75:42: f4:94:9f:05:13:1e:5a:62:be:ff:a0:59:2b:04:3d:bd:23:0d: 82:f6:57:95:27:e2:bb:0a:fc:ff:9f:1d:0f:ba:ff:d9:81:cb: 64:67:82:6d:fd:54:d2:23:a3:35:35:7d:85:f0:84:50:7a:27: 03:0a:5f:9b:2a:ad:f9:98:87:9e:a4:b1:fd:93:cc:59:62:80: a9:94:5f:8b:f9:07:81:61:c1:e5:0d:c8:dd:ac:ec:43:8c:24: 8f:e1:7b:81:a6:e1:e7:bb:63:4b:f2:56:13:2a:33:c3:63:c5: 1b:0e:98:33 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUW9L9It7NRLn+YLj8BN3dQh3vaZwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEMyMTA4NDBEOUUyOEE0NjVENEYwQjlGM0ExRDdDMzFD QzY2ODBDMDAeFw0yNTExMDQyMjE1NDJaFw0yNTExMDcyMjU4NDJaMDMxMTAvBgNV BAMTKDIxMzZGMUVCODc2MURGNTAzQTg2MEMyQjk0NEFGMTU2NUREMjg5NzcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCZEk3nLaXZlsFD+2OadVanT1eU 0qOatv69nB7L7xT6SLUu48viHaEHc+bcHMvTjnvlwLMxymAISi8bJqevlOFOQ0vV RkyPojbvQ0c3dEZiddMgeINA6Ok7SknguztBe8dijWqHvV9D+XqME98rny8pYN6M NWS0uBXpNkuWl34X23rst1FP3u1dtIbTL5G71ZTg2P1wE05bS2U0muzbQ/Bv3pyv fhNJxr+ELSvrfK0nRe2aLWunctqIUHfaqqOiBWeBHbWEpIqwHGX4vDSTFx3Y3MIB Fvlc/rciHBmuVowmcHUh5BpPU7SyEP5SeNCoiG+JSa7C6dBk0YbXmdacjZnbAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUITbx64dh31A6hgwrlErxVl3SiXcwHwYDVR0j BBgwFoAUjCEIQNniikZdTwufOh18McxmgMAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h MGJhODVhMC0zNTM0LTQ5YTQtYTgyNi0xM2E3MzVmOTQzNjkvMC84QzIxMDg0MEQ5 RTI4QTQ2NUQ0RjBCOUYzQTFEN0MzMUNDNjY4MEMwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvOEMyMTA4NDBEOUUyOEE0NjVENEYwQjlGM0ExRDdDMzFDQzY2 ODBDMC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYTBiYTg1YTAtMzUzNC00OWE0LWE4 MjYtMTNhNzM1Zjk0MzY5LzAvOEMyMTA4NDBEOUUyOEE0NjVENEYwQjlGM0ExRDdD MzFDQzY2ODBDMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAECAlvRx0SvbXZqrlAkoRs/D8jrkDgPiPbW4 IF9NkkUULRbxY99Rndu8820ykCgCYAHQl/yIAyn/7yzTmgr94vTeK8oJ3Pc6JA6e 8hHpwj/LYmTnixEYzpMmJHauuwsNpi57gj1ZsKmZwo9cJKPpe+lM4jxqQKGb9KDn 6UmiXoufcVAfa5fO+wNJ4ttijTd1QvSUnwUTHlpivv+gWSsEPb0jDYL2V5Un4rsK /P+fHQ+6/9mBy2Rngm39VNIjozU1fYXwhFB6JwMKX5sqrfmYh56ksf2TzFligKmU X4v5B4FhweUNyN2s7EOMJI/he4Gm4ee7Y0vyVhMqM8NjxRsOmDM= -----END CERTIFICATE-----Generated at Wed Nov 5 10:41:18 2025 by rpki-client