$ rpki-client -vvf repo-rpki.idnic.net/repo/e3809384-9b1c-4f5a-aa6b-9de3b52a9c05/0/8932E25F54C4B10E2AE5B71E38D2AD4D1EE3BB11.mft File: 8932E25F54C4B10E2AE5B71E38D2AD4D1EE3BB11.mft (raw, json) Hash identifier: /L4MUXHLrfxFKr8G/9NQqaPOMzdulC/RymyOo0QCRBc= Subject key identifier: EC:9E:0D:72:9C:64:3C:D4:98:9D:B8:C6:64:71:1F:0D:B9:14:B1:A6 Authority key identifier: 89:32:E2:5F:54:C4:B1:0E:2A:E5:B7:1E:38:D2:AD:4D:1E:E3:BB:11 Certificate issuer: /CN=8932E25F54C4B10E2AE5B71E38D2AD4D1EE3BB11 Certificate serial: 63BA7FE9D67DCD695BFA96B6916FAE781E54115D Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8932E25F54C4B10E2AE5B71E38D2AD4D1EE3BB11.cer Subject info access: rsync://repo-rpki.idnic.net/repo/e3809384-9b1c-4f5a-aa6b-9de3b52a9c05/0/8932E25F54C4B10E2AE5B71E38D2AD4D1EE3BB11.mft Manifest number: E8 Signing time: Sun 02 Nov 2025 18:30:00 +0000 Manifest this update: Sun 02 Nov 2025 18:25:00 +0000 Manifest next update: Thu 06 Nov 2025 04:34:00 +0000 Files and hashes: 1: 3130332e32392e3137302e302f32342d3234203d3e203536323631.roa (hash: AbfmsPIM39RXP9giC5KqkIRrkD9RG/QaxNfAq/KCmcs=) 2: 3130332e32392e3137312e302f32342d3234203d3e203538333738.roa (hash: VGUNPT+EvshoEIe2DkaARFh/LWXkGNwN7useeVXqqQc=) 3: 8932E25F54C4B10E2AE5B71E38D2AD4D1EE3BB11.crl (hash: 2vy6kV1bV95Qjklej5WsBvs+oi5s0jz5yDrRv5bgji4=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/e3809384-9b1c-4f5a-aa6b-9de3b52a9c05/0/8932E25F54C4B10E2AE5B71E38D2AD4D1EE3BB11.crl rsync://repo-rpki.idnic.net/repo/e3809384-9b1c-4f5a-aa6b-9de3b52a9c05/0/8932E25F54C4B10E2AE5B71E38D2AD4D1EE3BB11.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8932E25F54C4B10E2AE5B71E38D2AD4D1EE3BB11.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 06 Nov 2025 04:34:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 63:ba:7f:e9:d6:7d:cd:69:5b:fa:96:b6:91:6f:ae:78:1e:54:11:5d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8932E25F54C4B10E2AE5B71E38D2AD4D1EE3BB11 Validity Not Before: Nov 2 18:25:00 2025 GMT Not After : Nov 6 04:34:00 2025 GMT Subject: CN=EC9E0D729C643CD4989DB8C664711F0DB914B1A6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:9a:33:a8:79:49:59:a7:5e:30:1f:ab:fd:fb: da:4a:78:18:8b:bf:84:66:73:2c:5a:f3:bd:aa:82: f6:e6:af:51:e7:7f:a6:48:3d:1d:3a:96:29:1f:91: be:c7:c3:a9:92:83:2b:66:a6:c7:3e:ae:37:0b:c7: a2:27:df:ee:fc:36:22:b8:6b:b8:5d:38:8b:e0:72: 9a:08:cc:06:fd:68:36:b7:2c:d4:d8:b5:90:99:15: 9f:64:5d:e7:e3:7d:55:6e:60:17:2e:33:87:97:b4: 65:fb:fb:88:e8:cc:57:32:bc:c1:bd:fd:36:21:70: 32:bb:1b:b5:39:fe:b2:21:8c:14:71:57:e7:91:b1: 84:c3:94:b6:59:6d:6b:ad:5d:ee:5e:38:c2:8a:5a: 4a:b1:f8:b5:39:58:0c:b6:5f:85:e3:25:68:22:ad: 95:5f:82:b1:82:64:14:9d:31:43:92:d1:4a:57:1a: c8:28:0e:f1:28:98:fb:0c:14:69:80:f6:fe:ca:cb: 11:7b:10:46:85:0a:7f:79:af:34:a2:fc:82:4e:78: 2c:a1:fc:eb:1b:2e:fe:e2:6d:bd:dd:4a:77:ef:b3: 9d:76:cb:57:89:0a:b9:e5:71:c1:e6:c3:9c:de:c3: e7:95:e4:f7:81:9c:36:9e:ff:23:0c:c2:54:c0:1a: 70:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EC:9E:0D:72:9C:64:3C:D4:98:9D:B8:C6:64:71:1F:0D:B9:14:B1:A6 X509v3 Authority Key Identifier: keyid:89:32:E2:5F:54:C4:B1:0E:2A:E5:B7:1E:38:D2:AD:4D:1E:E3:BB:11 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/e3809384-9b1c-4f5a-aa6b-9de3b52a9c05/0/8932E25F54C4B10E2AE5B71E38D2AD4D1EE3BB11.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8932E25F54C4B10E2AE5B71E38D2AD4D1EE3BB11.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e3809384-9b1c-4f5a-aa6b-9de3b52a9c05/0/8932E25F54C4B10E2AE5B71E38D2AD4D1EE3BB11.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8b:31:df:4b:a8:e0:e0:d4:1c:77:1e:84:34:0d:98:5b:11:21: f0:a5:01:ec:2b:41:db:6b:69:1a:c1:df:b5:7b:7b:9f:d9:79: 76:e1:d8:20:55:19:43:2e:35:64:70:c9:90:28:f8:ae:d7:33: ab:cf:ae:50:dd:57:09:6c:39:1b:06:7b:24:c0:d8:b6:a5:fb: 30:19:0d:a8:e2:57:71:ad:1c:8e:46:81:dd:4e:b5:d8:fa:d7: 14:b7:fc:f3:ae:e5:53:aa:bf:30:53:08:8c:d9:d0:67:fb:38: 8e:b2:81:38:71:fb:e1:3a:c8:77:40:b6:c8:1d:70:4e:b1:fe: 2f:81:2b:f1:dd:20:41:3f:7b:0e:98:d9:4d:20:75:fa:2d:90: 87:0d:4b:89:61:f2:4f:de:72:55:57:76:39:80:f7:42:5a:6b: c9:70:7a:5a:86:12:37:e4:ad:4e:56:e9:46:78:3e:2c:f6:0e: 9e:4a:d9:5b:f3:16:33:45:a5:71:2c:d5:ba:41:99:0a:fc:51: 85:be:62:30:c2:da:1d:25:fe:6c:45:23:b7:d6:65:30:94:e0: 46:eb:c6:98:2f:75:ca:c1:e0:ad:34:35:15:aa:f9:64:bf:f1: 91:ff:08:63:23:5d:94:6e:47:ab:d3:a0:cd:d9:17:f7:00:7d: ff:f5:e7:3f -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUY7p/6dZ9zWlb+pa2kW+ueB5UEV0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODkzMkUyNUY1NEM0QjEwRTJBRTVCNzFFMzhEMkFENEQx RUUzQkIxMTAeFw0yNTExMDIxODI1MDBaFw0yNTExMDYwNDM0MDBaMDMxMTAvBgNV BAMTKEVDOUUwRDcyOUM2NDNDRDQ5ODlEQjhDNjY0NzExRjBEQjkxNEIxQTYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDEmjOoeUlZp14wH6v9+9pKeBiL v4Rmcyxa872qgvbmr1Hnf6ZIPR06likfkb7Hw6mSgytmpsc+rjcLx6In3+78NiK4 a7hdOIvgcpoIzAb9aDa3LNTYtZCZFZ9kXefjfVVuYBcuM4eXtGX7+4jozFcyvMG9 /TYhcDK7G7U5/rIhjBRxV+eRsYTDlLZZbWutXe5eOMKKWkqx+LU5WAy2X4XjJWgi rZVfgrGCZBSdMUOS0UpXGsgoDvEomPsMFGmA9v7KyxF7EEaFCn95rzSi/IJOeCyh /OsbLv7ibb3dSnfvs512y1eJCrnlccHmw5zew+eV5PeBnDae/yMMwlTAGnBnAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU7J4NcpxkPNSYnbjGZHEfDbkUsaYwHwYDVR0j BBgwFoAUiTLiX1TEsQ4q5bceONKtTR7juxEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l MzgwOTM4NC05YjFjLTRmNWEtYWE2Yi05ZGUzYjUyYTljMDUvMC84OTMyRTI1RjU0 QzRCMTBFMkFFNUI3MUUzOEQyQUQ0RDFFRTNCQjExLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvODkzMkUyNUY1NEM0QjEwRTJBRTVCNzFFMzhEMkFENEQxRUUz QkIxMS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZTM4MDkzODQtOWIxYy00ZjVhLWFh NmItOWRlM2I1MmE5YzA1LzAvODkzMkUyNUY1NEM0QjEwRTJBRTVCNzFFMzhEMkFE NEQxRUUzQkIxMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIsx30uo4ODUHHcehDQNmFsRIfClAewrQdtr aRrB37V7e5/ZeXbh2CBVGUMuNWRwyZAo+K7XM6vPrlDdVwlsORsGeyTA2Lal+zAZ DajiV3GtHI5Ggd1Otdj61xS3/POu5VOqvzBTCIzZ0Gf7OI6ygThx++E6yHdAtsgd cE6x/i+BK/HdIEE/ew6Y2U0gdfotkIcNS4lh8k/eclVXdjmA90Jaa8lwelqGEjfk rU5W6UZ4Piz2Dp5K2VvzFjNFpXEs1bpBmQr8UYW+YjDC2h0l/mxFI7fWZTCU4Ebr xpgvdcrB4K00NRWq+WS/8ZH/CGMjXZRuR6vToM3ZF/cAff/15z8= -----END CERTIFICATE-----Generated at Tue Nov 4 08:12:32 2025 by rpki-client