$ rpki-client -vvf repo-rpki.idnic.net/repo/aba8cf65-d468-4309-9f30-9b9f26d9ce2d/0/8650DEF1B1C89D701C2BB99CA9079EEDBCCC046D.mft File: 8650DEF1B1C89D701C2BB99CA9079EEDBCCC046D.mft (raw, json) Hash identifier: YzCYg+9mcQ+0tldw5AXooaUenN/qptIh7buHyJSCW90= Subject key identifier: AF:1E:FA:5E:70:22:44:51:4B:C1:2F:AB:F4:84:E2:F7:6D:C4:86:4F Authority key identifier: 86:50:DE:F1:B1:C8:9D:70:1C:2B:B9:9C:A9:07:9E:ED:BC:CC:04:6D Certificate issuer: /CN=8650DEF1B1C89D701C2BB99CA9079EEDBCCC046D Certificate serial: 519B49295B9766E8D45B1D19C6A18F547CFF1F02 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8650DEF1B1C89D701C2BB99CA9079EEDBCCC046D.cer Subject info access: rsync://repo-rpki.idnic.net/repo/aba8cf65-d468-4309-9f30-9b9f26d9ce2d/0/8650DEF1B1C89D701C2BB99CA9079EEDBCCC046D.mft Manifest number: 013F Signing time: Mon 03 Nov 2025 09:01:05 +0000 Manifest this update: Mon 03 Nov 2025 08:56:05 +0000 Manifest next update: Thu 06 Nov 2025 12:51:05 +0000 Files and hashes: 1: 8650DEF1B1C89D701C2BB99CA9079EEDBCCC046D.crl (hash: Row9fwFfURHLPv4CMaZ2eAUaefP4jMhHGGFRS6jNpMk=) 2: 3137352e3131312e39392e302f32342d3234203d3e20313338313230.roa (hash: AghOU/pgzXbwtlWCSLhXHXuJqGUCoPtZzcPl6UwSVVA=) 3: 3137352e3131312e39382e302f32342d3234203d3e20313338313230.roa (hash: aia3nUPKEa96BWO7Pv3XlqoUwx8dHqiYGIZfz0yhZhg=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/aba8cf65-d468-4309-9f30-9b9f26d9ce2d/0/8650DEF1B1C89D701C2BB99CA9079EEDBCCC046D.crl rsync://repo-rpki.idnic.net/repo/aba8cf65-d468-4309-9f30-9b9f26d9ce2d/0/8650DEF1B1C89D701C2BB99CA9079EEDBCCC046D.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8650DEF1B1C89D701C2BB99CA9079EEDBCCC046D.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 06 Nov 2025 12:51:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 51:9b:49:29:5b:97:66:e8:d4:5b:1d:19:c6:a1:8f:54:7c:ff:1f:02 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8650DEF1B1C89D701C2BB99CA9079EEDBCCC046D Validity Not Before: Nov 3 08:56:05 2025 GMT Not After : Nov 6 12:51:05 2025 GMT Subject: CN=AF1EFA5E702244514BC12FABF484E2F76DC4864F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:39:36:5d:d0:d9:82:8c:11:37:5d:0c:df:82: 6f:bc:2f:90:6e:3a:d6:19:36:0a:85:06:0c:35:94: c1:6c:be:2e:85:81:22:b3:3f:2d:78:eb:9a:95:3a: b1:5d:b5:6b:67:b1:76:0c:f5:f1:6b:e2:3f:d7:b6: 3a:69:6d:ff:61:02:c2:1a:7f:5b:52:86:63:4f:57: 8c:00:16:19:64:f7:52:b6:df:03:47:2c:9b:5e:a1: 66:02:3a:85:43:80:2d:90:d9:1a:bd:c3:82:2d:29: 0f:d2:40:48:da:f3:98:60:fd:30:4a:c3:46:97:e8: a5:bc:d7:00:ab:6f:fe:51:a3:5d:13:e1:47:19:63: f7:43:c9:04:6b:1a:97:7e:e0:cf:6c:17:04:82:50: 24:e4:96:22:7d:5c:ff:c3:79:af:6d:4e:63:81:bd: c8:5f:6b:ed:7b:32:5e:e0:08:b2:7f:2f:1b:2c:b9: e5:2b:a9:37:93:9c:09:f6:30:ff:42:9c:b2:30:93: b8:6f:7a:86:e6:af:e2:a8:89:93:86:6b:a7:17:f9: b3:c6:37:c1:23:ee:a9:93:a4:68:3a:fe:74:03:a5: 6f:a5:72:81:ba:a3:f8:9b:c6:99:e7:7c:b1:e3:50: a4:fc:65:e9:fd:f3:99:c8:e3:bb:6e:fd:4c:85:71: 0c:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:1E:FA:5E:70:22:44:51:4B:C1:2F:AB:F4:84:E2:F7:6D:C4:86:4F X509v3 Authority Key Identifier: keyid:86:50:DE:F1:B1:C8:9D:70:1C:2B:B9:9C:A9:07:9E:ED:BC:CC:04:6D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/aba8cf65-d468-4309-9f30-9b9f26d9ce2d/0/8650DEF1B1C89D701C2BB99CA9079EEDBCCC046D.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8650DEF1B1C89D701C2BB99CA9079EEDBCCC046D.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/aba8cf65-d468-4309-9f30-9b9f26d9ce2d/0/8650DEF1B1C89D701C2BB99CA9079EEDBCCC046D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7d:f7:65:50:fd:00:16:3b:fb:d0:9c:9c:2f:c0:3a:02:c3:6d: f6:7a:11:5e:8b:df:73:28:a9:90:69:b7:9e:6d:9e:30:4b:61: 0f:c5:0e:cc:40:1b:80:da:d3:21:35:86:0c:d7:ef:ca:61:43: ab:ae:af:2f:54:d4:d3:fc:6c:68:89:4f:18:9c:9f:ee:ce:54: be:33:42:05:9b:9a:ba:af:25:c9:28:96:a9:a3:ae:10:88:c0: 84:f5:f2:27:f9:4c:75:20:02:69:43:fa:c1:ed:19:aa:14:bb: 36:5b:48:7c:92:c8:6c:0c:e2:1b:0e:dd:f4:99:d5:e4:34:3e: 31:0a:6e:75:6f:ac:7f:72:76:a9:fc:36:8a:75:b4:3f:ed:35: 2f:bd:ef:d7:5f:55:d8:45:46:7d:4e:cd:c6:04:7b:82:ac:b8: 23:d6:2e:54:81:47:21:e7:4f:ed:93:b8:0a:dc:54:a3:a7:bc: ea:d9:25:4f:43:3c:2f:d1:7a:c5:d5:44:d0:61:c2:a5:c5:83: bc:c3:7c:e4:3b:09:cf:8d:30:0e:0f:db:45:fd:0b:01:de:3b: 38:91:c4:ec:20:f5:9e:fd:e7:25:d1:98:ed:ac:40:ec:46:42: 58:1a:e2:df:bb:1c:b8:ee:fc:25:a0:4b:f9:32:48:6f:6d:fa: 1b:8a:77:78 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUUZtJKVuXZujUWx0ZxqGPVHz/HwIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODY1MERFRjFCMUM4OUQ3MDFDMkJCOTlDQTkwNzlFRURC Q0NDMDQ2RDAeFw0yNTExMDMwODU2MDVaFw0yNTExMDYxMjUxMDVaMDMxMTAvBgNV BAMTKEFGMUVGQTVFNzAyMjQ0NTE0QkMxMkZBQkY0ODRFMkY3NkRDNDg2NEYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDJOTZd0NmCjBE3XQzfgm+8L5Bu OtYZNgqFBgw1lMFsvi6FgSKzPy1465qVOrFdtWtnsXYM9fFr4j/Xtjppbf9hAsIa f1tShmNPV4wAFhlk91K23wNHLJteoWYCOoVDgC2Q2Rq9w4ItKQ/SQEja85hg/TBK w0aX6KW81wCrb/5Ro10T4UcZY/dDyQRrGpd+4M9sFwSCUCTkliJ9XP/Dea9tTmOB vchfa+17Ml7gCLJ/LxssueUrqTeTnAn2MP9CnLIwk7hveobmr+KoiZOGa6cX+bPG N8Ej7qmTpGg6/nQDpW+lcoG6o/ibxpnnfLHjUKT8Zen985nI47tu/UyFcQzJAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUrx76XnAiRFFLwS+r9ITi923Ehk8wHwYDVR0j BBgwFoAUhlDe8bHInXAcK7mcqQee7bzMBG0wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h YmE4Y2Y2NS1kNDY4LTQzMDktOWYzMC05YjlmMjZkOWNlMmQvMC84NjUwREVGMUIx Qzg5RDcwMUMyQkI5OUNBOTA3OUVFREJDQ0MwNDZELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvODY1MERFRjFCMUM4OUQ3MDFDMkJCOTlDQTkwNzlFRURCQ0ND MDQ2RC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYWJhOGNmNjUtZDQ2OC00MzA5LTlm MzAtOWI5ZjI2ZDljZTJkLzAvODY1MERFRjFCMUM4OUQ3MDFDMkJCOTlDQTkwNzlF RURCQ0NDMDQ2RC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAH33ZVD9ABY7+9CcnC/AOgLDbfZ6EV6L33Mo qZBpt55tnjBLYQ/FDsxAG4Da0yE1hgzX78phQ6uury9U1NP8bGiJTxicn+7OVL4z QgWbmrqvJckolqmjrhCIwIT18if5THUgAmlD+sHtGaoUuzZbSHySyGwM4hsO3fSZ 1eQ0PjEKbnVvrH9ydqn8Nop1tD/tNS+979dfVdhFRn1OzcYEe4KsuCPWLlSBRyHn T+2TuArcVKOnvOrZJU9DPC/ResXVRNBhwqXFg7zDfOQ7Cc+NMA4P20X9CwHeOziR xOwg9Z795yXRmO2sQOxGQlga4t+7HLju/CWgS/kySG9t+huKd3g= -----END CERTIFICATE-----Generated at Tue Nov 4 21:03:59 2025 by rpki-client