$ rpki-client -vvf repo-rpki.idnic.net/repo/aa914ada-a9aa-4d7f-9e47-594bcb7a70ab/0/8E3F7441403B9CDF2FD603CCBAF13D1671202D2D.mft File: 8E3F7441403B9CDF2FD603CCBAF13D1671202D2D.mft (raw, json) Hash identifier: 2UOKfH9zbgXrdZoEyt7S7CpW3Wo5D+iwxurreQcruB4= Subject key identifier: C5:9D:F6:85:27:06:07:0F:73:27:9A:93:FA:1E:81:CC:0D:25:0D:02 Authority key identifier: 8E:3F:74:41:40:3B:9C:DF:2F:D6:03:CC:BA:F1:3D:16:71:20:2D:2D Certificate issuer: /CN=8E3F7441403B9CDF2FD603CCBAF13D1671202D2D Certificate serial: 43925A4D58566D1DB7D9A42477989AD29F0DDDB4 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8E3F7441403B9CDF2FD603CCBAF13D1671202D2D.cer Subject info access: rsync://repo-rpki.idnic.net/repo/aa914ada-a9aa-4d7f-9e47-594bcb7a70ab/0/8E3F7441403B9CDF2FD603CCBAF13D1671202D2D.mft Manifest number: 032A Signing time: Mon 03 Nov 2025 20:41:49 +0000 Manifest this update: Mon 03 Nov 2025 20:36:49 +0000 Manifest next update: Fri 07 Nov 2025 05:07:49 +0000 Files and hashes: 1: 8E3F7441403B9CDF2FD603CCBAF13D1671202D2D.crl (hash: RMoHc7lz9EVszxXg97SnZPsbZC5SUKfvNyD4nmAvnAo=) 2: 323430353a366463303a3a2f33322d3332203d3e20313339343237.roa (hash: wF6dopi/8yFT5FMMEEtbalVZ2HlgmQH2NzcCqjkPo/A=) 3: 3130332e3134342e3133342e302f32332d3233203d3e20313339343237.roa (hash: CwI8o18dMmmdKMsJY38paR/SR1tzAkJd4x6YF0hfFxY=) 4: 3130332e3134342e3133352e302f32342d3234203d3e20313339343237.roa (hash: zWJYN2XG8P0RnY9CSUVBnEgmuVsEalWKm5k5yR0nlxQ=) 5: 3130332e3134342e3133342e302f32342d3234203d3e20313339343237.roa (hash: i2RCXQ2h/tijX2X+SFP27I82J2d7eFOatLRW4qkSUTs=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/aa914ada-a9aa-4d7f-9e47-594bcb7a70ab/0/8E3F7441403B9CDF2FD603CCBAF13D1671202D2D.crl rsync://repo-rpki.idnic.net/repo/aa914ada-a9aa-4d7f-9e47-594bcb7a70ab/0/8E3F7441403B9CDF2FD603CCBAF13D1671202D2D.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8E3F7441403B9CDF2FD603CCBAF13D1671202D2D.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 07 Nov 2025 05:07:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 43:92:5a:4d:58:56:6d:1d:b7:d9:a4:24:77:98:9a:d2:9f:0d:dd:b4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8E3F7441403B9CDF2FD603CCBAF13D1671202D2D Validity Not Before: Nov 3 20:36:49 2025 GMT Not After : Nov 7 05:07:49 2025 GMT Subject: CN=C59DF6852706070F73279A93FA1E81CC0D250D02 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:eb:86:98:23:01:82:76:36:e4:d8:40:f8:76:73: 74:e7:66:6c:30:5c:e1:93:4f:7a:d4:f1:b0:dd:c8: 57:e0:af:71:42:e3:9f:80:43:31:d0:02:72:49:04: 63:bd:48:98:a2:13:29:aa:3d:4e:d8:b1:39:b2:4d: f0:33:ee:52:7f:db:af:ad:2f:fa:72:10:de:0b:c2: 1f:f8:1f:b3:27:02:eb:3f:fd:27:c1:9a:29:cd:65: de:9d:a9:c2:d1:34:20:af:de:fb:2a:ba:7e:c4:23: d2:bd:3e:6e:8f:cf:95:c4:89:10:c5:43:dc:03:a4: 9a:87:3b:18:10:fb:09:f4:00:22:67:86:da:0d:6c: ec:78:6d:87:7d:91:34:e4:39:2c:01:be:df:d5:cc: 6f:c3:c7:5c:c4:8a:5a:5f:28:b5:ae:e7:0d:fe:33: 74:4b:eb:18:98:e4:47:5b:b8:1b:f3:17:e6:2d:ff: 19:25:72:41:87:a8:70:0e:94:23:1c:5c:ad:d6:bd: 76:2d:3d:35:69:da:01:c2:8d:8b:3d:7b:97:27:db: 6e:9e:76:1f:c8:a7:c0:03:d0:bd:2c:14:ae:a2:4d: 8d:35:3d:a6:bb:7b:e2:71:8e:0d:b0:89:da:03:35: 9a:31:c5:44:e0:50:fb:cc:3b:97:2f:fd:3e:83:2f: f2:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:9D:F6:85:27:06:07:0F:73:27:9A:93:FA:1E:81:CC:0D:25:0D:02 X509v3 Authority Key Identifier: keyid:8E:3F:74:41:40:3B:9C:DF:2F:D6:03:CC:BA:F1:3D:16:71:20:2D:2D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/aa914ada-a9aa-4d7f-9e47-594bcb7a70ab/0/8E3F7441403B9CDF2FD603CCBAF13D1671202D2D.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8E3F7441403B9CDF2FD603CCBAF13D1671202D2D.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/aa914ada-a9aa-4d7f-9e47-594bcb7a70ab/0/8E3F7441403B9CDF2FD603CCBAF13D1671202D2D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 65:f5:91:56:29:c5:70:ae:22:46:d4:06:7c:c0:bd:38:51:5e: d2:7a:31:52:8e:72:f6:32:a3:63:db:35:ea:ef:a7:8e:ce:cd: 50:16:b8:95:5b:00:5d:ab:97:a1:c3:44:35:a4:a3:88:24:4c: 03:58:67:0c:a6:f2:1b:4a:a4:20:15:22:e3:f8:b5:f7:56:46: ab:a4:da:56:1e:c6:a9:b9:e9:78:88:c5:c6:bc:dc:5b:04:26: b3:e2:15:9b:a8:03:7e:82:85:1d:31:b9:4c:3f:47:c1:31:51: 44:68:00:7f:e6:54:c8:6f:0f:62:13:8f:c0:a2:bd:38:ac:f6: a0:f9:49:09:75:a9:63:c8:30:4d:a0:80:50:08:2b:22:48:ac: 5d:b7:48:b8:3e:cf:f4:60:b9:44:6a:e4:85:6b:e6:b4:c4:6d: 90:24:e6:39:7e:eb:9c:d4:fe:f0:51:57:71:8f:45:34:25:46: 05:d7:f6:dd:5a:cb:c5:dd:eb:ef:54:fc:19:82:68:58:5a:cf: a5:c9:a0:15:ce:5a:e7:ea:5b:c7:cd:9a:d9:e9:9b:76:84:93: fe:51:a5:03:15:15:bb:cc:0c:57:04:82:f6:fb:c7:b4:28:c4: 97:5f:da:f9:09:1b:95:7a:03:5f:26:21:4e:5b:85:11:04:c8: f6:80:9b:46 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUQ5JaTVhWbR232aQkd5ia0p8N3bQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEUzRjc0NDE0MDNCOUNERjJGRDYwM0NDQkFGMTNEMTY3 MTIwMkQyRDAeFw0yNTExMDMyMDM2NDlaFw0yNTExMDcwNTA3NDlaMDMxMTAvBgNV BAMTKEM1OURGNjg1MjcwNjA3MEY3MzI3OUE5M0ZBMUU4MUNDMEQyNTBEMDIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDrhpgjAYJ2NuTYQPh2c3TnZmww XOGTT3rU8bDdyFfgr3FC45+AQzHQAnJJBGO9SJiiEymqPU7YsTmyTfAz7lJ/26+t L/pyEN4Lwh/4H7MnAus//SfBminNZd6dqcLRNCCv3vsqun7EI9K9Pm6Pz5XEiRDF Q9wDpJqHOxgQ+wn0ACJnhtoNbOx4bYd9kTTkOSwBvt/VzG/Dx1zEilpfKLWu5w3+ M3RL6xiY5EdbuBvzF+Yt/xklckGHqHAOlCMcXK3WvXYtPTVp2gHCjYs9e5cn226e dh/Ip8AD0L0sFK6iTY01Paa7e+Jxjg2widoDNZoxxUTgUPvMO5cv/T6DL/LlAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUxZ32hScGBw9zJ5qT+h6BzA0lDQIwHwYDVR0j BBgwFoAUjj90QUA7nN8v1gPMuvE9FnEgLS0wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h YTkxNGFkYS1hOWFhLTRkN2YtOWU0Ny01OTRiY2I3YTcwYWIvMC84RTNGNzQ0MTQw M0I5Q0RGMkZENjAzQ0NCQUYxM0QxNjcxMjAyRDJELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOEUzRjc0NDE0MDNCOUNERjJGRDYwM0NDQkFGMTNEMTY3MTIw MkQyRC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYWE5MTRhZGEtYTlhYS00ZDdmLTll NDctNTk0YmNiN2E3MGFiLzAvOEUzRjc0NDE0MDNCOUNERjJGRDYwM0NDQkFGMTNE MTY3MTIwMkQyRC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGX1kVYpxXCuIkbUBnzAvThRXtJ6MVKOcvYy o2PbNervp47OzVAWuJVbAF2rl6HDRDWko4gkTANYZwym8htKpCAVIuP4tfdWRquk 2lYexqm56XiIxca83FsEJrPiFZuoA36ChR0xuUw/R8ExUURoAH/mVMhvD2ITj8Ci vTis9qD5SQl1qWPIME2ggFAIKyJIrF23SLg+z/RguURq5IVr5rTEbZAk5jl+65zU /vBRV3GPRTQlRgXX9t1ay8Xd6+9U/BmCaFhaz6XJoBXOWufqW8fNmtnpm3aEk/5R pQMVFbvMDFcEgvb7x7QoxJdf2vkJG5V6A18mIU5bhREEyPaAm0Y= -----END CERTIFICATE-----Generated at Wed Nov 5 13:21:27 2025 by rpki-client