$ rpki-client -vvf repo-rpki.idnic.net/repo/a82db9d3-d6eb-4d6b-9a24-feeb21aa8f53/0/8BE281D2F4ED4091746FDA568A4296F1171589E8.mft File: 8BE281D2F4ED4091746FDA568A4296F1171589E8.mft (raw, json) Hash identifier: 3CyE9oXi7cLBqMpO+s5wnBiyccKFBNjsAodPLt7uln0= Subject key identifier: 22:0F:6E:94:18:C7:D0:7F:A4:73:B4:D0:09:D3:2C:3A:29:D6:80:7B Authority key identifier: 8B:E2:81:D2:F4:ED:40:91:74:6F:DA:56:8A:42:96:F1:17:15:89:E8 Certificate issuer: /CN=8BE281D2F4ED4091746FDA568A4296F1171589E8 Certificate serial: 49DA7335E44782AD8F92C745756CE64BE93DB9F8 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8BE281D2F4ED4091746FDA568A4296F1171589E8.cer Subject info access: rsync://repo-rpki.idnic.net/repo/a82db9d3-d6eb-4d6b-9a24-feeb21aa8f53/0/8BE281D2F4ED4091746FDA568A4296F1171589E8.mft Manifest number: 0521 Signing time: Mon 03 Nov 2025 12:50:38 +0000 Manifest this update: Mon 03 Nov 2025 12:45:38 +0000 Manifest next update: Thu 06 Nov 2025 15:55:38 +0000 Files and hashes: 1: 8BE281D2F4ED4091746FDA568A4296F1171589E8.crl (hash: eY+Tj6rvrduRVuLC03NdK9VK+Rf/vAm2qDYVTGEpkbI=) 2: 3130332e3133342e38372e302f32342d3234203d3e203538333639.roa (hash: JnMoHtL2uw/1X+XpxI+WJ5aRYCDoJDTU7TkrgplgZrw=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/a82db9d3-d6eb-4d6b-9a24-feeb21aa8f53/0/8BE281D2F4ED4091746FDA568A4296F1171589E8.crl rsync://repo-rpki.idnic.net/repo/a82db9d3-d6eb-4d6b-9a24-feeb21aa8f53/0/8BE281D2F4ED4091746FDA568A4296F1171589E8.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8BE281D2F4ED4091746FDA568A4296F1171589E8.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 06 Nov 2025 15:55:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 49:da:73:35:e4:47:82:ad:8f:92:c7:45:75:6c:e6:4b:e9:3d:b9:f8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8BE281D2F4ED4091746FDA568A4296F1171589E8 Validity Not Before: Nov 3 12:45:38 2025 GMT Not After : Nov 6 15:55:38 2025 GMT Subject: CN=220F6E9418C7D07FA473B4D009D32C3A29D6807B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:19:62:36:43:cd:9f:7d:08:db:7c:ee:f6:c1: 3b:29:23:3e:99:b7:92:19:fb:33:1c:f5:ad:dd:48: 2f:35:8b:bd:e2:37:3e:e9:78:78:97:3f:96:7d:46: ab:ab:ec:ab:29:d1:d2:7e:0e:b6:83:04:92:da:ba: 82:ef:79:e6:16:ec:a6:0a:09:62:10:a5:74:99:7c: b1:39:ba:37:dc:6b:fb:ea:d4:1e:ee:7d:b9:28:57: a4:a0:da:47:a2:94:ad:46:6e:70:83:4a:cc:df:a9: 9b:2f:3a:3e:ff:7d:92:24:bd:3b:07:15:03:c3:c5: b0:3c:68:03:08:a4:bc:93:0c:d6:6f:52:c8:4e:50: bf:e9:0e:8e:24:91:b9:04:33:35:b4:e8:60:ac:fe: d3:83:58:33:db:32:18:a3:15:99:4b:2b:74:d2:4e: 59:da:dd:2c:8d:9a:77:0b:b4:3e:ad:0a:61:21:e8: f3:95:2e:a6:d4:1a:32:ae:bb:bb:96:0b:7f:63:ba: 7d:43:6b:47:5e:fc:9e:83:97:d7:5c:17:ef:6b:03: 42:ca:f1:3a:89:13:38:1b:9c:61:cc:6d:af:8e:93: 20:83:38:5a:cc:09:23:4a:61:ef:66:d7:6e:35:53: 2c:41:bd:83:d1:fb:0c:01:a7:f1:12:a2:6d:ed:05: 57:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:0F:6E:94:18:C7:D0:7F:A4:73:B4:D0:09:D3:2C:3A:29:D6:80:7B X509v3 Authority Key Identifier: keyid:8B:E2:81:D2:F4:ED:40:91:74:6F:DA:56:8A:42:96:F1:17:15:89:E8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/a82db9d3-d6eb-4d6b-9a24-feeb21aa8f53/0/8BE281D2F4ED4091746FDA568A4296F1171589E8.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8BE281D2F4ED4091746FDA568A4296F1171589E8.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a82db9d3-d6eb-4d6b-9a24-feeb21aa8f53/0/8BE281D2F4ED4091746FDA568A4296F1171589E8.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 78:a8:9f:10:4f:0d:3e:ed:ea:f1:43:6e:0d:f6:c5:a6:d9:e3: 9e:0a:06:6c:55:ae:da:86:29:51:42:11:62:07:2a:af:79:4b: b3:3a:49:79:88:18:66:ee:db:a2:f4:67:21:79:2d:6a:57:63: d9:5f:30:bc:06:dc:d0:d7:96:35:3e:7b:01:e4:40:10:5d:14: 67:87:09:ad:af:6a:c0:66:fe:17:14:c4:da:5e:59:e0:35:25: 4c:dd:ca:14:f4:71:6c:d4:1e:40:41:a2:3b:aa:94:60:0f:06: 1c:2b:92:1f:f1:11:14:53:3f:4b:0e:0f:8c:55:ca:01:51:0e: 7b:38:b5:78:4b:9d:6c:0d:da:7c:4f:16:99:44:ca:14:91:5a: 94:57:4d:ae:db:dd:7a:21:68:f2:f4:2e:b2:99:30:d1:ef:71: 4f:9a:05:5e:e6:20:8b:de:0c:43:11:56:e4:5b:77:af:dd:e5: 43:0b:62:8c:11:41:88:98:9a:d4:dd:cd:52:cf:e1:0d:ec:2c: 7d:ea:ea:2a:c1:4a:bf:b9:57:e4:b4:bc:f9:52:dc:8a:8f:45: 5d:e0:c3:c1:7e:03:77:ea:80:95:34:12:ef:e2:78:99:18:b1: ed:1f:12:eb:7e:52:0d:f5:4c:75:fd:b0:82:57:87:e2:c6:14: 87:e5:85:33 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUSdpzNeRHgq2PksdFdWzmS+k9ufgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEJFMjgxRDJGNEVENDA5MTc0NkZEQTU2OEE0Mjk2RjEx NzE1ODlFODAeFw0yNTExMDMxMjQ1MzhaFw0yNTExMDYxNTU1MzhaMDMxMTAvBgNV BAMTKDIyMEY2RTk0MThDN0QwN0ZBNDczQjREMDA5RDMyQzNBMjlENjgwN0IwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDZGWI2Q82ffQjbfO72wTspIz6Z t5IZ+zMc9a3dSC81i73iNz7peHiXP5Z9Rqur7Ksp0dJ+DraDBJLauoLveeYW7KYK CWIQpXSZfLE5ujfca/vq1B7ufbkoV6Sg2keilK1GbnCDSszfqZsvOj7/fZIkvTsH FQPDxbA8aAMIpLyTDNZvUshOUL/pDo4kkbkEMzW06GCs/tODWDPbMhijFZlLK3TS Tlna3SyNmncLtD6tCmEh6POVLqbUGjKuu7uWC39jun1Da0de/J6Dl9dcF+9rA0LK 8TqJEzgbnGHMba+OkyCDOFrMCSNKYe9m1241UyxBvYPR+wwBp/ESom3tBVc/AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUIg9ulBjH0H+kc7TQCdMsOinWgHswHwYDVR0j BBgwFoAUi+KB0vTtQJF0b9pWikKW8RcViegwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h ODJkYjlkMy1kNmViLTRkNmItOWEyNC1mZWViMjFhYThmNTMvMC84QkUyODFEMkY0 RUQ0MDkxNzQ2RkRBNTY4QTQyOTZGMTE3MTU4OUU4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOEJFMjgxRDJGNEVENDA5MTc0NkZEQTU2OEE0Mjk2RjExNzE1 ODlFOC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYTgyZGI5ZDMtZDZlYi00ZDZiLTlh MjQtZmVlYjIxYWE4ZjUzLzAvOEJFMjgxRDJGNEVENDA5MTc0NkZEQTU2OEE0Mjk2 RjExNzE1ODlFOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHionxBPDT7t6vFDbg32xabZ454KBmxVrtqG KVFCEWIHKq95S7M6SXmIGGbu26L0ZyF5LWpXY9lfMLwG3NDXljU+ewHkQBBdFGeH Ca2vasBm/hcUxNpeWeA1JUzdyhT0cWzUHkBBojuqlGAPBhwrkh/xERRTP0sOD4xV ygFRDns4tXhLnWwN2nxPFplEyhSRWpRXTa7b3XohaPL0LrKZMNHvcU+aBV7mIIve DEMRVuRbd6/d5UMLYowRQYiYmtTdzVLP4Q3sLH3q6irBSr+5V+S0vPlS3IqPRV3g w8F+A3fqgJU0Eu/ieJkYse0fEut+Ug31THX9sIJXh+LGFIflhTM= -----END CERTIFICATE-----Generated at Wed Nov 5 11:53:55 2025 by rpki-client