$ rpki-client -vvf repo-rpki.idnic.net/repo/de6a57c5-df73-43f5-865d-6bd248c22fba/0/8B0DE141ACB811E0FE65085CF2339EE4C7EE05A2.mft File: 8B0DE141ACB811E0FE65085CF2339EE4C7EE05A2.mft (raw, json) Hash identifier: KrK8Aqn5p5g0eGPLXssEX03UK0fullOm+6CFSsoTgOI= Subject key identifier: BD:F9:BD:1F:44:E7:71:CF:BD:34:D7:5C:86:F7:32:1F:18:A2:6B:FF Authority key identifier: 8B:0D:E1:41:AC:B8:11:E0:FE:65:08:5C:F2:33:9E:E4:C7:EE:05:A2 Certificate issuer: /CN=8B0DE141ACB811E0FE65085CF2339EE4C7EE05A2 Certificate serial: 062D022E965442F2B3D3B931C29BA538F1E78DA7 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8B0DE141ACB811E0FE65085CF2339EE4C7EE05A2.cer Subject info access: rsync://repo-rpki.idnic.net/repo/de6a57c5-df73-43f5-865d-6bd248c22fba/0/8B0DE141ACB811E0FE65085CF2339EE4C7EE05A2.mft Manifest number: 021E Signing time: Sun 02 Nov 2025 02:52:05 +0000 Manifest this update: Sun 02 Nov 2025 02:47:05 +0000 Manifest next update: Wed 05 Nov 2025 13:11:05 +0000 Files and hashes: 1: 8B0DE141ACB811E0FE65085CF2339EE4C7EE05A2.crl (hash: 1QRTihqCrgIL5mS1QwExfyiSq0ow0YpNC8zPX31TJ0I=) 2: 3130332e3138342e35362e302f32342d3234203d3e20313439363637.roa (hash: wL4jyeE9OG3mCA6Twfdl1VaSzPxamD0EwTijKmcLq7s=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/de6a57c5-df73-43f5-865d-6bd248c22fba/0/8B0DE141ACB811E0FE65085CF2339EE4C7EE05A2.crl rsync://repo-rpki.idnic.net/repo/de6a57c5-df73-43f5-865d-6bd248c22fba/0/8B0DE141ACB811E0FE65085CF2339EE4C7EE05A2.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8B0DE141ACB811E0FE65085CF2339EE4C7EE05A2.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 05 Nov 2025 13:11:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 06:2d:02:2e:96:54:42:f2:b3:d3:b9:31:c2:9b:a5:38:f1:e7:8d:a7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8B0DE141ACB811E0FE65085CF2339EE4C7EE05A2 Validity Not Before: Nov 2 02:47:05 2025 GMT Not After : Nov 5 13:11:05 2025 GMT Subject: CN=BDF9BD1F44E771CFBD34D75C86F7321F18A26BFF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:d7:ab:f9:73:96:93:6d:64:82:43:3c:25:ac: 1d:74:9a:2b:b2:98:83:e6:0b:09:7c:3e:03:45:1c: 99:ad:30:40:a8:6d:3a:9c:7b:1a:c1:fe:9f:aa:44: 68:93:1e:ac:1f:1d:8b:ae:77:86:8a:cc:d4:ef:01: 11:53:dc:9e:ff:90:66:b5:4a:d8:63:1b:43:79:3e: 4e:d4:f3:29:c6:1a:a2:68:85:c8:a6:e3:39:0c:28: 05:7a:36:28:15:7a:3a:b8:f5:64:1e:84:df:6b:6c: 06:48:af:fe:ca:0b:59:b3:f7:bd:e7:03:31:36:ee: 19:9e:b8:50:1a:13:fd:ba:9b:e8:0e:ec:39:f2:3c: f9:cc:c0:c3:c1:08:6c:07:99:d0:4a:f7:2d:7e:a1: d2:8c:83:c1:26:5c:8d:a5:bb:aa:be:e3:c3:e0:32: df:a3:86:e1:62:ca:e1:65:ec:35:57:8d:03:98:af: 0b:05:00:cb:c6:88:e7:9a:97:74:ef:76:58:cd:10: de:25:98:95:38:f6:c2:f9:0e:f6:64:51:ae:78:f0: c4:1b:86:7e:b9:dc:1a:67:15:c8:5c:1e:1c:d3:f4: 0d:d8:3d:fa:98:ef:a6:44:34:41:17:1c:52:5f:73: 71:14:01:1d:d5:c2:49:0d:0e:c2:6e:85:c4:61:95: d6:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BD:F9:BD:1F:44:E7:71:CF:BD:34:D7:5C:86:F7:32:1F:18:A2:6B:FF X509v3 Authority Key Identifier: keyid:8B:0D:E1:41:AC:B8:11:E0:FE:65:08:5C:F2:33:9E:E4:C7:EE:05:A2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/de6a57c5-df73-43f5-865d-6bd248c22fba/0/8B0DE141ACB811E0FE65085CF2339EE4C7EE05A2.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8B0DE141ACB811E0FE65085CF2339EE4C7EE05A2.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/de6a57c5-df73-43f5-865d-6bd248c22fba/0/8B0DE141ACB811E0FE65085CF2339EE4C7EE05A2.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 34:fe:5e:e0:da:f5:34:e2:0f:62:e3:39:1c:59:c2:00:7f:23: fd:2e:95:fb:3f:1a:50:13:c6:23:fb:1e:5e:93:14:54:18:7f: 8a:4b:7f:55:59:be:af:d6:6c:3d:e2:06:f9:7a:92:ea:ec:da: 3e:c7:60:4b:0c:32:34:de:ae:47:e9:68:3a:ea:99:9a:49:cc: 60:7b:ae:96:52:02:ea:e6:48:57:51:6d:b7:47:a4:29:25:4f: 4d:98:3d:3c:ea:39:fc:92:96:6f:d6:17:b2:ff:23:d5:cd:91: 83:4b:f1:50:38:a9:a4:2d:b0:03:f7:d3:21:3f:8f:3e:20:a4: 1b:6a:6f:5e:ca:e2:a7:79:91:3f:99:d3:3d:20:1f:c5:9d:b8: 33:51:76:ea:dd:97:8f:59:11:3b:af:7c:00:d3:a5:71:4e:c5: 0e:67:20:98:da:2b:a1:93:ca:bd:da:de:44:e7:bd:2b:6d:72: 82:f9:12:d1:e8:67:14:11:a0:82:5a:c9:84:37:bd:80:21:93: d4:53:2b:fc:c6:af:3a:59:9b:ae:c4:fd:4b:59:33:15:de:96: b5:fa:a2:c5:56:f0:9b:9a:68:bd:40:ef:f7:6f:58:0d:60:07: 30:7e:23:ae:37:64:1a:65:29:3e:f1:b1:40:f0:c2:64:1e:b0: 25:e5:0a:e1 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUBi0CLpZUQvKz07kxwpulOPHnjacwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEIwREUxNDFBQ0I4MTFFMEZFNjUwODVDRjIzMzlFRTRD N0VFMDVBMjAeFw0yNTExMDIwMjQ3MDVaFw0yNTExMDUxMzExMDVaMDMxMTAvBgNV BAMTKEJERjlCRDFGNDRFNzcxQ0ZCRDM0RDc1Qzg2RjczMjFGMThBMjZCRkYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDZ16v5c5aTbWSCQzwlrB10miuy mIPmCwl8PgNFHJmtMECobTqcexrB/p+qRGiTHqwfHYuud4aKzNTvARFT3J7/kGa1 SthjG0N5Pk7U8ynGGqJohcim4zkMKAV6NigVejq49WQehN9rbAZIr/7KC1mz973n AzE27hmeuFAaE/26m+gO7DnyPPnMwMPBCGwHmdBK9y1+odKMg8EmXI2lu6q+48Pg Mt+jhuFiyuFl7DVXjQOYrwsFAMvGiOeal3TvdljNEN4lmJU49sL5DvZkUa548MQb hn653BpnFchcHhzT9A3YPfqY76ZENEEXHFJfc3EUAR3VwkkNDsJuhcRhldbnAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUvfm9H0Tncc+9NNdchvcyHxiia/8wHwYDVR0j BBgwFoAUiw3hQay4EeD+ZQhc8jOe5MfuBaIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k ZTZhNTdjNS1kZjczLTQzZjUtODY1ZC02YmQyNDhjMjJmYmEvMC84QjBERTE0MUFD QjgxMUUwRkU2NTA4NUNGMjMzOUVFNEM3RUUwNUEyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOEIwREUxNDFBQ0I4MTFFMEZFNjUwODVDRjIzMzlFRTRDN0VF MDVBMi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZGU2YTU3YzUtZGY3My00M2Y1LTg2 NWQtNmJkMjQ4YzIyZmJhLzAvOEIwREUxNDFBQ0I4MTFFMEZFNjUwODVDRjIzMzlF RTRDN0VFMDVBMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADT+XuDa9TTiD2LjORxZwgB/I/0ulfs/GlAT xiP7Hl6TFFQYf4pLf1VZvq/WbD3iBvl6kurs2j7HYEsMMjTerkfpaDrqmZpJzGB7 rpZSAurmSFdRbbdHpCklT02YPTzqOfySlm/WF7L/I9XNkYNL8VA4qaQtsAP30yE/ jz4gpBtqb17K4qd5kT+Z0z0gH8WduDNRdurdl49ZETuvfADTpXFOxQ5nIJjaK6GT yr3a3kTnvSttcoL5EtHoZxQRoIJayYQ3vYAhk9RTK/zGrzpZm67E/UtZMxXelrX6 osVW8JuaaL1A7/dvWA1gBzB+I643ZBplKT7xsUDwwmQesCXlCuE= -----END CERTIFICATE-----Generated at Tue Nov 4 08:12:37 2025 by rpki-client