
$ rpki-client -vvf repo-rpki.idnic.net/repo/e5413ff4-202b-4999-b45d-73c972f10116/0/8FC4899CA3D612A45C1C1DC02A21F63372DAEDD6.mft
File: 8FC4899CA3D612A45C1C1DC02A21F63372DAEDD6.mft (raw, json)
Hash identifier: UoO8hfd/OJFA02NrCAmLtdcLQzFT7NLj96lpqYXom9Y=
Subject key identifier: 91:0B:F5:5E:F1:68:8C:79:15:0F:A1:CC:4D:4B:7A:B0:5D:A4:2F:3D
Authority key identifier: 8F:C4:89:9C:A3:D6:12:A4:5C:1C:1D:C0:2A:21:F6:33:72:DA:ED:D6
Certificate issuer: /CN=8FC4899CA3D612A45C1C1DC02A21F63372DAEDD6
Certificate serial: 3676BBDADCDBD2607505DEF5A6E6C64A5F91C970
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8FC4899CA3D612A45C1C1DC02A21F63372DAEDD6.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/e5413ff4-202b-4999-b45d-73c972f10116/0/8FC4899CA3D612A45C1C1DC02A21F63372DAEDD6.mft
Manifest number: 0400
Signing time: Tue 04 Nov 2025 15:22:09 +0000
Manifest this update: Tue 04 Nov 2025 15:17:09 +0000
Manifest next update: Fri 07 Nov 2025 21:43:09 +0000
Files and hashes: 1: 323430343a636163303a313030303a3a2f34382d3438203d3e20313339343137.roa (hash: mLEiuQCorcJxBHY4wKeDm97Zmemknme8ExMbOOO5lWE=)
2: 3130332e3133382e3131362e302f32342d3234203d3e20313339343137.roa (hash: JzP3prHOgFH/3pcbrciCFSrBpBQbgCsXcDvrDwP8+gk=)
3: 323430343a636163303a316135623a3a2f34382d3438203d3e20313339343137.roa (hash: XIq5Jxfb9ma1VO6ZcqWrbd6msJG9iOe53aiAMMFJVTU=)
4: 8FC4899CA3D612A45C1C1DC02A21F63372DAEDD6.crl (hash: hAI+CoKDTMfymjKrPVL/U+muG36prLS0GZcgEdCkG10=)
5: 323430343a636163303a3a2f33322d3332203d3e20313339343137.roa (hash: U8X775Erg4KvjSwclcGWHuukxGyQmMyExSHIbSXOqZk=)
6: 323430343a636163303a633032653a3a2f34382d3438203d3e20313339343137.roa (hash: TBR11DrPkyQgDEOjgsvbiFDryM9x2tI6poq7H38GvyM=)
7: 323430343a636163303a313164353a3a2f34382d3438203d3e20313339343137.roa (hash: lN6IUo8XcirGXXI7zultPSLQfKt0KthPpzYWW5DChjw=)
8: 3130332e3133382e3131372e302f32342d3234203d3e20313339343137.roa (hash: HvZ4UYj4GoZLl8NmzF+1Ghc67KVbsVnEc2wguYPDAT4=)
9: 323430343a636163303a3a2f34382d3438203d3e20313339343137.roa (hash: e4FelqGd8iSRDSYch9869PAfm5c/LDLNH50WEwKvgAs=)
10: 323430343a636163303a6462353a3a2f34382d3438203d3e20313339343137.roa (hash: Dbjg+vJVIA/12edzQmA2oSGprW6vIebqnxwMgbbyHSg=)
11: 323430343a636163303a6433353a3a2f34382d3438203d3e20313339343137.roa (hash: FMTDgQIzYg7LkyNw3U8hdH5e4+pcbdgl2jE3AQpixqA=)
12: 323430343a636163303a666630303a3a2f34302d3430203d3e20313339343137.roa (hash: NL2aJR33roSrH0rfHxsWPH389zRfhX/C1lq5KI784/M=)
13: 323430343a636163303a3164353a3a2f34382d3438203d3e20313339343137.roa (hash: oRfT4X0Sy9tnBNiJsxtxMTFV7eQ+myy/o8BOZoNv2r8=)
14: 323430343a636163303a626162653a3a2f34382d3438203d3e20313339343137.roa (hash: ZZvd3DR6EuZwjhunUnqDOW5iI+a8OxR4MhiwHS29Yuo=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/e5413ff4-202b-4999-b45d-73c972f10116/0/8FC4899CA3D612A45C1C1DC02A21F63372DAEDD6.crl
rsync://repo-rpki.idnic.net/repo/e5413ff4-202b-4999-b45d-73c972f10116/0/8FC4899CA3D612A45C1C1DC02A21F63372DAEDD6.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8FC4899CA3D612A45C1C1DC02A21F63372DAEDD6.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 07 Nov 2025 21:43:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
36:76:bb:da:dc:db:d2:60:75:05:de:f5:a6:e6:c6:4a:5f:91:c9:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8FC4899CA3D612A45C1C1DC02A21F63372DAEDD6
Validity
Not Before: Nov 4 15:17:09 2025 GMT
Not After : Nov 7 21:43:09 2025 GMT
Subject: CN=910BF55EF1688C79150FA1CC4D4B7AB05DA42F3D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:7b:b1:6e:18:a9:a7:f4:20:3b:e7:6e:6a:14:
ab:65:c7:3f:b9:2a:b5:3f:db:e0:95:30:ac:df:73:
dd:ee:0d:c7:d4:9d:4c:de:ec:8e:1e:51:24:61:22:
ed:3f:5d:a6:ff:3b:eb:dd:36:70:33:aa:9b:3f:40:
ef:19:fd:15:b8:92:f6:5c:e0:05:96:5e:0b:0c:cf:
5b:b4:90:81:e0:2e:9a:46:5b:c6:aa:45:cd:92:8f:
38:88:af:9f:a9:0d:b1:04:be:e5:be:6d:b0:2c:79:
a7:05:1c:17:43:57:d4:e8:d4:7d:cc:e8:ca:76:28:
1b:cc:10:07:bc:14:9f:e1:3c:85:04:fa:73:03:7c:
a8:81:61:32:16:7a:15:f1:3f:6a:b1:62:ee:f6:1a:
74:55:5f:f5:63:91:d5:bc:95:bc:93:52:d4:85:68:
64:6c:68:96:de:a3:57:42:63:73:f4:5e:a8:9f:39:
6f:37:3c:45:43:74:3f:c8:8c:ba:8a:8f:57:e1:43:
ed:59:36:16:f9:ea:74:68:54:0a:3c:14:24:7c:6a:
db:8e:46:0a:01:30:4d:55:4b:67:53:41:14:65:fe:
15:96:e0:07:f2:ad:ac:11:af:ab:8c:01:54:09:55:
3e:f9:32:41:a4:f0:d6:00:1e:a6:f4:dc:58:9e:d6:
30:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:0B:F5:5E:F1:68:8C:79:15:0F:A1:CC:4D:4B:7A:B0:5D:A4:2F:3D
X509v3 Authority Key Identifier:
keyid:8F:C4:89:9C:A3:D6:12:A4:5C:1C:1D:C0:2A:21:F6:33:72:DA:ED:D6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/e5413ff4-202b-4999-b45d-73c972f10116/0/8FC4899CA3D612A45C1C1DC02A21F63372DAEDD6.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8FC4899CA3D612A45C1C1DC02A21F63372DAEDD6.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e5413ff4-202b-4999-b45d-73c972f10116/0/8FC4899CA3D612A45C1C1DC02A21F63372DAEDD6.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
68:cd:c5:1c:eb:6a:44:20:90:94:0b:5a:38:5c:68:0c:a1:d5:
e5:f7:65:04:83:1b:38:6d:59:6d:01:cd:a5:8d:5d:c0:64:3b:
2d:cf:70:c1:e4:de:a1:84:24:b2:17:6b:1a:09:c6:50:e5:e0:
73:cf:d2:4b:58:1d:4f:fb:7b:c0:c0:c3:62:5b:bd:6b:1e:56:
1b:02:54:a6:e4:44:d6:ad:3f:8b:84:55:96:92:b8:0e:d1:dc:
29:b3:c5:ac:80:8e:4b:29:22:fe:51:72:00:cc:0e:db:6d:05:
11:d1:8d:63:10:45:1e:c4:81:77:6a:32:16:ba:82:b1:fa:b1:
24:26:47:48:32:1c:d2:3d:84:f5:c1:04:c3:4f:da:27:99:f4:
f0:f4:ca:9c:42:9f:ac:c0:06:d5:ee:30:11:96:3f:5b:e3:a5:
2e:83:89:9c:08:37:d7:53:cd:fa:30:7f:01:22:48:f0:dc:cb:
bd:fb:f2:33:da:96:7e:3d:f0:dd:ad:87:68:28:60:84:fb:ec:
c1:24:3d:6f:fd:85:61:b1:55:24:74:b4:f1:c0:3b:c2:4e:f7:
6d:2d:d1:c1:52:40:bd:0b:c4:8f:3e:76:7e:35:6f:79:5a:bf:
7b:30:9c:54:66:43:48:76:14:eb:0f:1b:17:cb:42:b9:43:ef:
24:d9:14:72
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUNna72tzb0mB1Bd71pubGSl+RyXAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOEZDNDg5OUNBM0Q2MTJBNDVDMUMxREMwMkEyMUY2MzM3
MkRBRURENjAeFw0yNTExMDQxNTE3MDlaFw0yNTExMDcyMTQzMDlaMDMxMTAvBgNV
BAMTKDkxMEJGNTVFRjE2ODhDNzkxNTBGQTFDQzRENEI3QUIwNURBNDJGM0QwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCwe7FuGKmn9CA7525qFKtlxz+5
KrU/2+CVMKzfc93uDcfUnUze7I4eUSRhIu0/Xab/O+vdNnAzqps/QO8Z/RW4kvZc
4AWWXgsMz1u0kIHgLppGW8aqRc2SjziIr5+pDbEEvuW+bbAseacFHBdDV9To1H3M
6Mp2KBvMEAe8FJ/hPIUE+nMDfKiBYTIWehXxP2qxYu72GnRVX/VjkdW8lbyTUtSF
aGRsaJbeo1dCY3P0XqifOW83PEVDdD/IjLqKj1fhQ+1ZNhb56nRoVAo8FCR8atuO
RgoBME1VS2dTQRRl/hWW4AfyrawRr6uMAVQJVT75MkGk8NYAHqb03Fie1jCZAgMB
AAGjggI8MIICODAdBgNVHQ4EFgQUkQv1XvFojHkVD6HMTUt6sF2kLz0wHwYDVR0j
BBgwFoAUj8SJnKPWEqRcHB3AKiH2M3La7dYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l
NTQxM2ZmNC0yMDJiLTQ5OTktYjQ1ZC03M2M5NzJmMTAxMTYvMC84RkM0ODk5Q0Ez
RDYxMkE0NUMxQzFEQzAyQTIxRjYzMzcyREFFREQ2LmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvOEZDNDg5OUNBM0Q2MTJBNDVDMUMxREMwMkEyMUY2MzM3MkRB
RURENi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6
Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZTU0MTNmZjQtMjAyYi00OTk5LWI0
NWQtNzNjOTcyZjEwMTE2LzAvOEZDNDg5OUNBM0Q2MTJBNDVDMUMxREMwMkEyMUY2
MzM3MkRBRURENi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBAGjNxRzrakQgkJQLWjhcaAyh1eX3ZQSDGzht
WW0BzaWNXcBkOy3PcMHk3qGEJLIXaxoJxlDl4HPP0ktYHU/7e8DAw2JbvWseVhsC
VKbkRNatP4uEVZaSuA7R3CmzxayAjkspIv5RcgDMDtttBRHRjWMQRR7EgXdqMha6
grH6sSQmR0gyHNI9hPXBBMNP2ieZ9PD0ypxCn6zABtXuMBGWP1vjpS6DiZwIN9dT
zfowfwEiSPDcy7378jPaln498N2th2goYIT77MEkPW/9hWGxVSR0tPHAO8JO920t
0cFSQL0LxI8+dn41b3lav3swnFRmQ0h2FOsPGxfLQrlD7yTZFHI=
-----END CERTIFICATE-----
Generated at Wed Nov 5 08:01:14 2025 by rpki-client