$ rpki-client -vvf repo-rpki.idnic.net/repo/b94c1e95-a738-4e47-8e5c-7af681b36b00/0/8DBECF314BD3C829923A3A97BFC62113A61F8EE1.mft File: 8DBECF314BD3C829923A3A97BFC62113A61F8EE1.mft (raw, json) Hash identifier: hPhShzBP8WMAK1nlJ0B4MbRs+7C2CCZDsiO5y2PQco8= Subject key identifier: A0:CF:8B:30:34:1A:D7:97:0F:D9:1D:A8:31:A8:58:C0:96:0A:B0:19 Authority key identifier: 8D:BE:CF:31:4B:D3:C8:29:92:3A:3A:97:BF:C6:21:13:A6:1F:8E:E1 Certificate issuer: /CN=8DBECF314BD3C829923A3A97BFC62113A61F8EE1 Certificate serial: 7F6C6F2B0FC6DB7E133C981948BF86EB0393A2DE Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8DBECF314BD3C829923A3A97BFC62113A61F8EE1.cer Subject info access: rsync://repo-rpki.idnic.net/repo/b94c1e95-a738-4e47-8e5c-7af681b36b00/0/8DBECF314BD3C829923A3A97BFC62113A61F8EE1.mft Manifest number: 021B Signing time: Wed 05 Nov 2025 13:11:12 +0000 Manifest this update: Wed 05 Nov 2025 13:06:12 +0000 Manifest next update: Sat 08 Nov 2025 23:16:12 +0000 Files and hashes: 1: 8DBECF314BD3C829923A3A97BFC62113A61F8EE1.crl (hash: pE0MA1CJKKPLLnLrv/RZhTxL+brGd/u/W0C+GV3YkJY=) 2: 3130332e3138362e39302e302f32332d3233203d3e20313439373037.roa (hash: IxE4f1xQzeKQZjsPZmdFbJyZKv94xhwmFh4/4Aw/W0I=) 3: 3130332e3138362e39312e302f32342d3234203d3e20313439373037.roa (hash: v7WXEnDaWLgLHCCs0/IjJD0cW6T6d8CeSIJNddKA634=) 4: 3130332e3138362e39302e302f32342d3234203d3e20313439373037.roa (hash: 656gLN35OIXcG6Vik35XhI6XoKD7dIobeeOabAVD0UQ=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/b94c1e95-a738-4e47-8e5c-7af681b36b00/0/8DBECF314BD3C829923A3A97BFC62113A61F8EE1.crl rsync://repo-rpki.idnic.net/repo/b94c1e95-a738-4e47-8e5c-7af681b36b00/0/8DBECF314BD3C829923A3A97BFC62113A61F8EE1.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8DBECF314BD3C829923A3A97BFC62113A61F8EE1.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 08 Nov 2025 18:12:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7f:6c:6f:2b:0f:c6:db:7e:13:3c:98:19:48:bf:86:eb:03:93:a2:de Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8DBECF314BD3C829923A3A97BFC62113A61F8EE1 Validity Not Before: Nov 5 13:06:12 2025 GMT Not After : Nov 8 23:16:12 2025 GMT Subject: CN=A0CF8B30341AD7970FD91DA831A858C0960AB019 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:3e:67:86:97:bb:4b:ca:36:32:66:89:8b:c9: 5b:60:8b:27:86:8e:d7:7a:8f:98:19:55:1e:22:f1: 4e:e7:7d:6e:10:f3:e8:be:33:9b:b0:e3:2c:a0:b1: df:e8:48:d7:d2:b3:13:71:03:d3:f2:d2:0e:43:f8: 5e:6c:95:95:2e:8c:15:d4:e1:39:aa:98:d8:d7:c0: fe:88:49:34:07:7f:5b:d4:e1:79:ff:7b:f1:1e:70: 5e:15:38:ca:30:81:d2:4d:79:93:be:1e:0c:f8:90: e5:cb:03:e2:bb:99:8a:6b:be:0d:9b:8f:98:3b:02: a1:1b:15:eb:19:7c:d4:89:c5:60:c0:d0:56:3a:d7: 8b:95:33:62:1c:2e:1c:fd:60:d0:fa:9c:3b:19:6c: 72:12:44:7a:b0:ba:19:cf:89:96:11:48:24:97:47: e3:2d:2c:b9:f2:2b:a7:21:c3:ec:a0:4f:6b:71:60: be:c7:2a:8b:0a:a1:63:3c:97:b2:40:be:ca:76:b5: 45:4e:36:53:8a:69:9a:d1:99:f2:87:2a:2b:22:bb: 36:86:81:32:67:5d:cc:5d:96:c2:77:2f:d5:65:18: 97:e8:86:96:65:df:c5:fb:cf:99:81:89:5e:69:40: c2:c5:f5:f7:21:e6:ef:7b:20:04:f5:28:b2:67:cf: 00:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:CF:8B:30:34:1A:D7:97:0F:D9:1D:A8:31:A8:58:C0:96:0A:B0:19 X509v3 Authority Key Identifier: keyid:8D:BE:CF:31:4B:D3:C8:29:92:3A:3A:97:BF:C6:21:13:A6:1F:8E:E1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/b94c1e95-a738-4e47-8e5c-7af681b36b00/0/8DBECF314BD3C829923A3A97BFC62113A61F8EE1.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8DBECF314BD3C829923A3A97BFC62113A61F8EE1.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/b94c1e95-a738-4e47-8e5c-7af681b36b00/0/8DBECF314BD3C829923A3A97BFC62113A61F8EE1.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9b:3e:39:39:e4:c0:dd:9f:35:ac:3e:1d:83:06:ae:9b:31:5c: a5:e9:17:84:eb:f2:fd:c4:14:b1:2d:ae:d6:08:7b:ed:1f:1e: 86:2b:6e:4b:59:3b:83:df:26:5c:f8:99:7e:df:a1:2e:95:5a: 2e:88:7a:91:9a:cc:b1:39:44:e0:03:aa:f2:0a:85:5d:4c:0a: 07:3e:d3:db:79:54:07:77:cd:fa:7c:5a:06:b5:60:32:39:36: b9:30:9f:47:55:37:72:5f:d7:2d:27:ec:05:84:cc:9b:5d:de: d9:d1:d9:7f:8e:d0:d0:28:81:29:36:8a:1a:3c:8b:78:13:8a: 6d:0b:54:8e:f2:a3:84:24:92:7b:60:1c:9b:16:81:b1:6f:fa: d4:17:be:e8:f8:ee:bf:d0:34:03:34:87:ff:78:4d:a1:ae:1e: ca:05:39:c6:76:15:08:27:d8:92:c1:bf:3e:b1:f2:d8:96:17: 71:e6:89:3b:c8:60:5c:b1:24:75:26:5b:bd:54:fa:f5:5a:3e: b1:39:dc:be:2a:24:d5:0b:20:fc:ae:c6:fe:88:c1:ed:ce:14: 58:38:da:ce:7b:10:88:61:5f:a7:f5:72:70:27:1c:f1:85:6b: 1d:a6:4f:83:11:da:d3:54:04:1b:5d:6f:f3:80:15:34:c4:e5: 7a:97:7b:20 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUf2xvKw/G234TPJgZSL+G6wOTot4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOERCRUNGMzE0QkQzQzgyOTkyM0EzQTk3QkZDNjIxMTNB NjFGOEVFMTAeFw0yNTExMDUxMzA2MTJaFw0yNTExMDgyMzE2MTJaMDMxMTAvBgNV BAMTKEEwQ0Y4QjMwMzQxQUQ3OTcwRkQ5MURBODMxQTg1OEMwOTYwQUIwMTkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDAPmeGl7tLyjYyZomLyVtgiyeG jtd6j5gZVR4i8U7nfW4Q8+i+M5uw4yygsd/oSNfSsxNxA9Py0g5D+F5slZUujBXU 4TmqmNjXwP6ISTQHf1vU4Xn/e/EecF4VOMowgdJNeZO+Hgz4kOXLA+K7mYprvg2b j5g7AqEbFesZfNSJxWDA0FY614uVM2IcLhz9YND6nDsZbHISRHqwuhnPiZYRSCSX R+MtLLnyK6chw+ygT2txYL7HKosKoWM8l7JAvsp2tUVONlOKaZrRmfKHKisiuzaG gTJnXcxdlsJ3L9VlGJfohpZl38X7z5mBiV5pQMLF9fch5u97IAT1KLJnzwDTAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUoM+LMDQa15cP2R2oMahYwJYKsBkwHwYDVR0j BBgwFoAUjb7PMUvTyCmSOjqXv8YhE6YfjuEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i OTRjMWU5NS1hNzM4LTRlNDctOGU1Yy03YWY2ODFiMzZiMDAvMC84REJFQ0YzMTRC RDNDODI5OTIzQTNBOTdCRkM2MjExM0E2MUY4RUUxLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOERCRUNGMzE0QkQzQzgyOTkyM0EzQTk3QkZDNjIxMTNBNjFG OEVFMS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYjk0YzFlOTUtYTczOC00ZTQ3LThl NWMtN2FmNjgxYjM2YjAwLzAvOERCRUNGMzE0QkQzQzgyOTkyM0EzQTk3QkZDNjIx MTNBNjFGOEVFMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJs+OTnkwN2fNaw+HYMGrpsxXKXpF4Tr8v3E FLEtrtYIe+0fHoYrbktZO4PfJlz4mX7foS6VWi6IepGazLE5ROADqvIKhV1MCgc+ 09t5VAd3zfp8Wga1YDI5Nrkwn0dVN3Jf1y0n7AWEzJtd3tnR2X+O0NAogSk2iho8 i3gTim0LVI7yo4QkkntgHJsWgbFv+tQXvuj47r/QNAM0h/94TaGuHsoFOcZ2FQgn 2JLBvz6x8tiWF3HmiTvIYFyxJHUmW71U+vVaPrE53L4qJNULIPyuxv6Iwe3OFFg4 2s57EIhhX6f1cnAnHPGFax2mT4MR2tNUBBtdb/OAFTTE5XqXeyA= -----END CERTIFICATE-----Generated at Wed Nov 5 16:14:23 2025 by rpki-client