$ rpki-client -vvf repo-rpki.idnic.net/repo/aef837b3-dfd2-42cc-9b79-74b6bafd4e2d/0/8711D05D82BAFB7BEAB275E079A72DDD554064EA.mft File: 8711D05D82BAFB7BEAB275E079A72DDD554064EA.mft (raw, json) Hash identifier: caUXxRl0iSUs2P2XXLsgc7Mxce7OmGUV50UnE0qq16s= Subject key identifier: AE:95:4D:31:25:FF:7A:50:62:EE:2E:42:B5:AF:31:57:AD:5E:E5:87 Authority key identifier: 87:11:D0:5D:82:BA:FB:7B:EA:B2:75:E0:79:A7:2D:DD:55:40:64:EA Certificate issuer: /CN=8711D05D82BAFB7BEAB275E079A72DDD554064EA Certificate serial: 6C30AB6574A315973EBFA5194AD1D16FB8CA239B Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8711D05D82BAFB7BEAB275E079A72DDD554064EA.cer Subject info access: rsync://repo-rpki.idnic.net/repo/aef837b3-dfd2-42cc-9b79-74b6bafd4e2d/0/8711D05D82BAFB7BEAB275E079A72DDD554064EA.mft Manifest number: 01ED Signing time: Tue 04 Nov 2025 10:22:34 +0000 Manifest this update: Tue 04 Nov 2025 10:17:34 +0000 Manifest next update: Fri 07 Nov 2025 17:58:34 +0000 Files and hashes: 1: 3130332e31372e3137392e302f32342d3234203d3e20313530323236.roa (hash: iULKdZ+8YBgk+IOzMqKF0bAFFPZHjP7Zi+XVSi5s7yc=) 2: 3130332e31372e3137382e302f32342d3234203d3e20313530323236.roa (hash: 6sZc5cLjn8BGU3ndbP5aYFbkGJW/EMEDKLHgtlwJygA=) 3: 8711D05D82BAFB7BEAB275E079A72DDD554064EA.crl (hash: O3+I/W788F8oxeCv24FxWPtlgpWGR90sK2bC9DgokFI=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/aef837b3-dfd2-42cc-9b79-74b6bafd4e2d/0/8711D05D82BAFB7BEAB275E079A72DDD554064EA.crl rsync://repo-rpki.idnic.net/repo/aef837b3-dfd2-42cc-9b79-74b6bafd4e2d/0/8711D05D82BAFB7BEAB275E079A72DDD554064EA.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8711D05D82BAFB7BEAB275E079A72DDD554064EA.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 07 Nov 2025 17:58:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6c:30:ab:65:74:a3:15:97:3e:bf:a5:19:4a:d1:d1:6f:b8:ca:23:9b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8711D05D82BAFB7BEAB275E079A72DDD554064EA Validity Not Before: Nov 4 10:17:34 2025 GMT Not After : Nov 7 17:58:34 2025 GMT Subject: CN=AE954D3125FF7A5062EE2E42B5AF3157AD5EE587 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:c0:35:f3:b4:1c:15:99:da:8c:2f:c4:de:09: 37:2d:f2:fa:d2:99:4c:7f:50:9e:a0:51:6f:0e:33: b3:8e:9c:6c:99:e0:dd:96:6f:e7:bb:58:8b:6c:20: 0b:5d:47:7c:61:bf:04:e1:01:41:15:81:09:ca:0e: 1b:82:51:57:03:15:b4:9c:45:ac:fa:01:80:39:03: 2d:39:35:c5:82:bf:ec:69:b2:bb:71:0a:85:36:a8: 14:40:22:73:fc:d7:5a:f5:5a:31:ee:5c:b2:4e:7f: 58:61:96:6f:cf:1a:d9:d2:f0:bd:9a:c2:31:27:02: d0:23:60:1e:cb:b0:5c:da:5d:f5:ba:72:50:02:6b: 7b:04:e2:56:c1:5f:4e:0c:cb:b3:a4:ee:3e:b1:9b: 10:13:b6:8d:13:63:02:9f:fd:c2:bf:73:fe:a1:24: 64:03:b9:ce:0a:1e:b4:f3:e0:32:61:2a:04:f9:67: be:40:5b:41:dd:2d:b1:82:3d:2d:b5:fe:6c:69:c2: 49:89:26:19:a6:c9:77:d2:fa:fe:94:a8:a6:29:31: ce:df:d2:d4:b1:cb:d5:f6:5e:2e:7e:c1:8b:9a:84: 98:3b:4e:83:3d:22:de:1d:46:f8:c2:f3:68:6e:6a: 13:d5:a5:e9:05:3f:3f:97:30:1e:b6:63:26:fe:64: f1:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AE:95:4D:31:25:FF:7A:50:62:EE:2E:42:B5:AF:31:57:AD:5E:E5:87 X509v3 Authority Key Identifier: keyid:87:11:D0:5D:82:BA:FB:7B:EA:B2:75:E0:79:A7:2D:DD:55:40:64:EA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/aef837b3-dfd2-42cc-9b79-74b6bafd4e2d/0/8711D05D82BAFB7BEAB275E079A72DDD554064EA.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8711D05D82BAFB7BEAB275E079A72DDD554064EA.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/aef837b3-dfd2-42cc-9b79-74b6bafd4e2d/0/8711D05D82BAFB7BEAB275E079A72DDD554064EA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 02:b6:fa:92:a6:ae:38:77:0b:af:7e:91:50:cb:35:f9:65:f5: 3e:77:f1:61:56:93:8a:8b:66:81:2a:97:a8:80:5d:1a:c6:7e: c0:bf:5e:1e:85:99:72:c4:af:32:57:1e:9d:ec:f8:cb:a2:42: c4:19:45:8f:89:a6:6e:7b:bd:66:10:74:08:11:33:7c:07:f1: 61:ca:b4:4e:8f:c4:af:66:ba:25:59:dc:93:64:9e:b2:0e:c7: 50:77:33:85:5e:41:87:03:c3:fa:27:33:df:15:9f:4b:7f:2b: 64:12:1f:30:e9:76:71:57:84:09:eb:32:bb:a1:9c:a9:d5:4d: f0:a3:4d:e5:34:36:88:e7:65:b1:91:2e:6a:15:00:fa:c5:3d: 0f:c9:dd:b9:8b:92:ca:a2:7d:c1:9d:ac:fd:63:1e:99:75:a7: 83:1f:f7:35:63:63:94:4f:26:4d:94:a7:ab:54:9d:7e:8b:e9: 37:ea:9a:f0:54:c2:61:3e:e5:bc:7c:25:75:33:a5:6d:1c:e2: 54:d9:67:5e:62:9c:38:e7:e5:9d:ae:96:31:d2:a3:96:9e:32: b0:de:da:ca:d3:ce:3d:d2:35:61:7a:30:c0:8e:99:b2:e2:41: 71:73:40:86:86:47:d3:0f:eb:5d:8e:bf:df:3d:3d:5c:a9:be: 95:25:aa:98 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUbDCrZXSjFZc+v6UZStHRb7jKI5swDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODcxMUQwNUQ4MkJBRkI3QkVBQjI3NUUwNzlBNzJEREQ1 NTQwNjRFQTAeFw0yNTExMDQxMDE3MzRaFw0yNTExMDcxNzU4MzRaMDMxMTAvBgNV BAMTKEFFOTU0RDMxMjVGRjdBNTA2MkVFMkU0MkI1QUYzMTU3QUQ1RUU1ODcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDJwDXztBwVmdqML8TeCTct8vrS mUx/UJ6gUW8OM7OOnGyZ4N2Wb+e7WItsIAtdR3xhvwThAUEVgQnKDhuCUVcDFbSc Raz6AYA5Ay05NcWCv+xpsrtxCoU2qBRAInP811r1WjHuXLJOf1hhlm/PGtnS8L2a wjEnAtAjYB7LsFzaXfW6clACa3sE4lbBX04My7Ok7j6xmxATto0TYwKf/cK/c/6h JGQDuc4KHrTz4DJhKgT5Z75AW0HdLbGCPS21/mxpwkmJJhmmyXfS+v6UqKYpMc7f 0tSxy9X2Xi5+wYuahJg7ToM9It4dRvjC82huahPVpekFPz+XMB62Yyb+ZPEVAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUrpVNMSX/elBi7i5Cta8xV61e5YcwHwYDVR0j BBgwFoAUhxHQXYK6+3vqsnXgeact3VVAZOowDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h ZWY4MzdiMy1kZmQyLTQyY2MtOWI3OS03NGI2YmFmZDRlMmQvMC84NzExRDA1RDgy QkFGQjdCRUFCMjc1RTA3OUE3MkRERDU1NDA2NEVBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvODcxMUQwNUQ4MkJBRkI3QkVBQjI3NUUwNzlBNzJEREQ1NTQw NjRFQS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYWVmODM3YjMtZGZkMi00MmNjLTli NzktNzRiNmJhZmQ0ZTJkLzAvODcxMUQwNUQ4MkJBRkI3QkVBQjI3NUUwNzlBNzJE REQ1NTQwNjRFQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAK2+pKmrjh3C69+kVDLNfll9T538WFWk4qL ZoEql6iAXRrGfsC/Xh6FmXLErzJXHp3s+MuiQsQZRY+Jpm57vWYQdAgRM3wH8WHK tE6PxK9muiVZ3JNknrIOx1B3M4VeQYcDw/onM98Vn0t/K2QSHzDpdnFXhAnrMruh nKnVTfCjTeU0NojnZbGRLmoVAPrFPQ/J3bmLksqifcGdrP1jHpl1p4Mf9zVjY5RP Jk2Up6tUnX6L6TfqmvBUwmE+5bx8JXUzpW0c4lTZZ15inDjn5Z2uljHSo5aeMrDe 2srTzj3SNWF6MMCOmbLiQXFzQIaGR9MP612Ov989PVypvpUlqpg= -----END CERTIFICATE-----Generated at Wed Nov 5 08:39:52 2025 by rpki-client