$ rpki-client -vvf repo-rpki.idnic.net/repo/cf0ba1e7-d142-47cd-8d8f-2a372b922223/0/8874CE775F191B6E0B34A789A359EB9FB93B737E.mft File: 8874CE775F191B6E0B34A789A359EB9FB93B737E.mft (raw, json) Hash identifier: tO8+0PDKpNDQufP06/FgEauXlNtoOtHPqeel+vmqDm4= Subject key identifier: E0:40:24:30:08:B7:83:A1:C3:8D:AA:8F:C9:11:CF:A4:21:5B:42:84 Authority key identifier: 88:74:CE:77:5F:19:1B:6E:0B:34:A7:89:A3:59:EB:9F:B9:3B:73:7E Certificate issuer: /CN=8874CE775F191B6E0B34A789A359EB9FB93B737E Certificate serial: 4C49CD7F418337EEDC1925A8E97CDEBC1DAA5EE3 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8874CE775F191B6E0B34A789A359EB9FB93B737E.cer Subject info access: rsync://repo-rpki.idnic.net/repo/cf0ba1e7-d142-47cd-8d8f-2a372b922223/0/8874CE775F191B6E0B34A789A359EB9FB93B737E.mft Manifest number: 0278 Signing time: Sun 02 Nov 2025 18:10:44 +0000 Manifest this update: Sun 02 Nov 2025 18:05:44 +0000 Manifest next update: Thu 06 Nov 2025 05:55:44 +0000 Files and hashes: 1: 3130332e3137322e32342e302f32342d3234203d3e20313432333837.roa (hash: nL/HZGA0E7GxsNtQZwq3/bQqUnFo5wNCWdHlAXFVa2g=) 2: 3130332e3137322e32352e302f32342d3234203d3e20313432333837.roa (hash: aI45yKhAru9VHfZlQWe/rwkciB33mSYkuVbNTgyinfk=) 3: 8874CE775F191B6E0B34A789A359EB9FB93B737E.crl (hash: 7XvCD70HkESU6HXOf253804tBIsLD8tl4JSw3U/LPRc=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/cf0ba1e7-d142-47cd-8d8f-2a372b922223/0/8874CE775F191B6E0B34A789A359EB9FB93B737E.crl rsync://repo-rpki.idnic.net/repo/cf0ba1e7-d142-47cd-8d8f-2a372b922223/0/8874CE775F191B6E0B34A789A359EB9FB93B737E.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8874CE775F191B6E0B34A789A359EB9FB93B737E.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 06 Nov 2025 05:55:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4c:49:cd:7f:41:83:37:ee:dc:19:25:a8:e9:7c:de:bc:1d:aa:5e:e3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8874CE775F191B6E0B34A789A359EB9FB93B737E Validity Not Before: Nov 2 18:05:44 2025 GMT Not After : Nov 6 05:55:44 2025 GMT Subject: CN=E040243008B783A1C38DAA8FC911CFA4215B4284 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:a8:dd:a7:23:8b:f7:b9:3b:57:72:d7:10:77: 42:dc:fb:66:8b:1a:ea:67:16:52:ed:84:06:e2:6c: cf:0c:28:96:6e:cc:6a:80:2c:a3:4f:1c:48:89:b6: 4d:37:fb:1b:84:26:f3:79:72:e4:b7:da:b0:fd:be: 28:15:f5:e8:66:38:33:97:64:08:1d:21:86:86:f1: 87:71:dd:f0:d5:30:ed:c3:2d:c3:e7:59:1e:50:33: 27:d0:c3:b6:1a:89:47:28:c1:d7:76:08:a6:d3:ff: 17:0e:0b:6e:53:01:9e:20:87:5d:e1:2e:4d:73:38: 4a:30:b6:16:4d:37:e0:72:02:17:80:c7:8d:d8:21: 2c:0a:1e:c1:4d:94:e2:4a:e9:82:31:ee:35:10:af: 65:e1:00:58:37:0d:24:d0:16:e2:fe:6e:97:da:be: 82:ee:3c:78:75:7e:79:fe:07:a5:1b:1c:04:36:7e: 63:f5:69:6b:b8:82:46:29:d7:17:95:1f:d3:d1:48: 5a:64:de:74:ed:33:7b:85:7e:5f:aa:8c:8b:27:fc: 6a:e9:b5:d8:7c:96:f7:df:28:c5:61:d8:76:a7:6d: b1:59:31:49:5d:04:af:44:1e:bd:0a:0c:26:99:eb: cc:84:b3:88:50:10:12:d0:bc:8f:1c:a8:7f:a4:9e: af:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E0:40:24:30:08:B7:83:A1:C3:8D:AA:8F:C9:11:CF:A4:21:5B:42:84 X509v3 Authority Key Identifier: keyid:88:74:CE:77:5F:19:1B:6E:0B:34:A7:89:A3:59:EB:9F:B9:3B:73:7E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/cf0ba1e7-d142-47cd-8d8f-2a372b922223/0/8874CE775F191B6E0B34A789A359EB9FB93B737E.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8874CE775F191B6E0B34A789A359EB9FB93B737E.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/cf0ba1e7-d142-47cd-8d8f-2a372b922223/0/8874CE775F191B6E0B34A789A359EB9FB93B737E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0f:5f:7a:6c:24:5a:e8:13:10:0e:dc:88:99:d1:7d:a5:66:ff: 01:cc:a6:08:d3:86:a4:05:86:dd:80:de:2c:75:b5:be:f4:af: 3f:34:38:7c:58:82:68:1e:90:6a:42:05:ab:8e:49:28:ce:e2: 77:8a:21:7d:0f:da:02:bd:76:cb:f5:0c:8f:c1:46:46:95:7c: 99:6d:5d:15:80:ca:a6:b9:51:af:e0:ac:1c:96:5e:ee:bb:1d: 27:c0:08:f4:a5:91:07:42:20:8e:66:48:e2:93:54:d5:91:5e: 27:dc:82:aa:b4:82:4c:e4:8b:7d:35:a8:7b:54:53:f1:22:f3: 47:d6:ee:ab:77:5a:6f:67:a3:87:da:61:54:82:6c:f6:15:bb: 90:55:79:6f:f5:7a:af:a6:91:59:8d:42:01:ac:fd:4e:c1:ed: 7e:2d:73:b8:93:aa:67:81:d9:fb:22:5c:72:81:4c:22:5c:7f: 66:22:4d:d3:47:c5:a0:93:99:a5:16:82:9d:ce:58:87:e4:ac: 9b:14:7a:01:50:9e:66:db:8a:8d:79:2c:96:5e:12:47:28:2d: 13:2a:34:ef:8d:37:4f:21:2e:e9:a5:e0:78:31:29:bb:34:72: 9a:ed:35:c1:07:f6:4a:5f:e5:0d:32:07:04:f9:33:a1:15:7c: 71:c7:5a:e5 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUTEnNf0GDN+7cGSWo6XzevB2qXuMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODg3NENFNzc1RjE5MUI2RTBCMzRBNzg5QTM1OUVCOUZC OTNCNzM3RTAeFw0yNTExMDIxODA1NDRaFw0yNTExMDYwNTU1NDRaMDMxMTAvBgNV BAMTKEUwNDAyNDMwMDhCNzgzQTFDMzhEQUE4RkM5MTFDRkE0MjE1QjQyODQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC4qN2nI4v3uTtXctcQd0Lc+2aL GupnFlLthAbibM8MKJZuzGqALKNPHEiJtk03+xuEJvN5cuS32rD9vigV9ehmODOX ZAgdIYaG8Ydx3fDVMO3DLcPnWR5QMyfQw7YaiUcowdd2CKbT/xcOC25TAZ4gh13h Lk1zOEowthZNN+ByAheAx43YISwKHsFNlOJK6YIx7jUQr2XhAFg3DSTQFuL+bpfa voLuPHh1fnn+B6UbHAQ2fmP1aWu4gkYp1xeVH9PRSFpk3nTtM3uFfl+qjIsn/Grp tdh8lvffKMVh2HanbbFZMUldBK9EHr0KDCaZ68yEs4hQEBLQvI8cqH+knq97AgMB AAGjggI8MIICODAdBgNVHQ4EFgQU4EAkMAi3g6HDjaqPyRHPpCFbQoQwHwYDVR0j BBgwFoAUiHTOd18ZG24LNKeJo1nrn7k7c34wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j ZjBiYTFlNy1kMTQyLTQ3Y2QtOGQ4Zi0yYTM3MmI5MjIyMjMvMC84ODc0Q0U3NzVG MTkxQjZFMEIzNEE3ODlBMzU5RUI5RkI5M0I3MzdFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvODg3NENFNzc1RjE5MUI2RTBCMzRBNzg5QTM1OUVCOUZCOTNC NzM3RS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vY2YwYmExZTctZDE0Mi00N2NkLThk OGYtMmEzNzJiOTIyMjIzLzAvODg3NENFNzc1RjE5MUI2RTBCMzRBNzg5QTM1OUVC OUZCOTNCNzM3RS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAA9femwkWugTEA7ciJnRfaVm/wHMpgjThqQF ht2A3ix1tb70rz80OHxYgmgekGpCBauOSSjO4neKIX0P2gK9dsv1DI/BRkaVfJlt XRWAyqa5Ua/grByWXu67HSfACPSlkQdCII5mSOKTVNWRXifcgqq0gkzki301qHtU U/Ei80fW7qt3Wm9no4faYVSCbPYVu5BVeW/1eq+mkVmNQgGs/U7B7X4tc7iTqmeB 2fsiXHKBTCJcf2YiTdNHxaCTmaUWgp3OWIfkrJsUegFQnmbbio15LJZeEkcoLRMq NO+NN08hLuml4HgxKbs0cprtNcEH9kpf5Q0yBwT5M6EVfHHHWuU= -----END CERTIFICATE-----Generated at Wed Nov 5 02:01:34 2025 by rpki-client