$ rpki-client -vvf repo-rpki.idnic.net/repo/ea814507-7174-4f1e-8563-ef50370913c9/0/8284F61C774622FEC64759E6D77C9DEEB4EC69CA.mft File: 8284F61C774622FEC64759E6D77C9DEEB4EC69CA.mft (raw, json) Hash identifier: ciHNfKHH0aJZa1RwzQSCLoyKQGtXyFy44IiLZMrGs0I= Subject key identifier: EC:4D:52:52:60:B4:C4:E1:65:2E:5E:08:A1:7A:94:DB:35:78:F7:58 Authority key identifier: 82:84:F6:1C:77:46:22:FE:C6:47:59:E6:D7:7C:9D:EE:B4:EC:69:CA Certificate issuer: /CN=8284F61C774622FEC64759E6D77C9DEEB4EC69CA Certificate serial: 3CAAF1A95B9CB6B92B3C4470A26409B49C66EB9B Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8284F61C774622FEC64759E6D77C9DEEB4EC69CA.cer Subject info access: rsync://repo-rpki.idnic.net/repo/ea814507-7174-4f1e-8563-ef50370913c9/0/8284F61C774622FEC64759E6D77C9DEEB4EC69CA.mft Manifest number: 0522 Signing time: Mon 03 Nov 2025 08:32:55 +0000 Manifest this update: Mon 03 Nov 2025 08:27:55 +0000 Manifest next update: Thu 06 Nov 2025 10:33:55 +0000 Files and hashes: 1: 3130332e3130302e32372e302f32342d3234203d3e20313336383335.roa (hash: UXCPnVMF20T3u89LBilCEmmt67UECY/psh8twg2H0Yw=) 2: 3130332e3134312e3135342e302f32342d3234203d3e20313336383335.roa (hash: EeVS/Wotu8QiYnhwHE/NjTJ1MQmj/cQtABdAbLQgSvo=) 3: 8284F61C774622FEC64759E6D77C9DEEB4EC69CA.crl (hash: S6ByG86wgoRi3q2mtFcy0sKkRdtYEHrDVXu6EL4iMn0=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/ea814507-7174-4f1e-8563-ef50370913c9/0/8284F61C774622FEC64759E6D77C9DEEB4EC69CA.crl rsync://repo-rpki.idnic.net/repo/ea814507-7174-4f1e-8563-ef50370913c9/0/8284F61C774622FEC64759E6D77C9DEEB4EC69CA.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8284F61C774622FEC64759E6D77C9DEEB4EC69CA.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 06 Nov 2025 10:33:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3c:aa:f1:a9:5b:9c:b6:b9:2b:3c:44:70:a2:64:09:b4:9c:66:eb:9b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8284F61C774622FEC64759E6D77C9DEEB4EC69CA Validity Not Before: Nov 3 08:27:55 2025 GMT Not After : Nov 6 10:33:55 2025 GMT Subject: CN=EC4D525260B4C4E1652E5E08A17A94DB3578F758 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:9d:94:4c:dc:e7:cd:2f:21:a7:19:db:08:1d: 77:dd:2c:19:17:f0:f3:e8:70:62:95:bf:7a:a4:69: 22:42:83:30:6e:42:b4:59:7e:ea:ef:03:c0:18:18: 80:d1:bd:33:c3:bb:53:7c:d8:f5:76:be:c1:b9:7e: 9d:f0:61:f5:52:3e:37:c7:d6:65:d9:d8:32:1f:b1: 82:5b:44:01:72:8d:20:2d:63:64:53:4d:52:24:f5: ea:46:45:ae:f7:b4:0e:dd:9c:0f:7c:50:0c:7e:f7: 90:15:26:2d:8c:8b:21:f5:4d:20:2e:2f:94:df:b2: e9:69:8d:0d:6c:3f:3e:0e:ff:9b:8a:7d:3e:b9:d1: 34:23:81:5d:99:4b:2b:1e:38:62:07:52:ed:97:85: a5:a1:f1:9c:93:cb:f2:58:ef:19:e9:98:cc:0f:10: 06:4a:eb:ac:85:8b:38:22:70:6d:5d:aa:be:54:e8: 73:a8:07:3e:56:3f:5d:de:d0:1b:2f:8a:79:52:e4: 1a:ab:ee:63:96:66:e9:51:89:b7:ed:bf:51:72:4c: 04:8e:81:b6:c3:b5:38:81:ad:f9:1f:72:06:79:b2: 62:ec:e0:02:f0:9d:c8:c4:6d:78:68:40:49:98:53: ac:a2:6f:95:e4:a6:7c:52:fe:56:dc:5e:17:99:54: 68:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EC:4D:52:52:60:B4:C4:E1:65:2E:5E:08:A1:7A:94:DB:35:78:F7:58 X509v3 Authority Key Identifier: keyid:82:84:F6:1C:77:46:22:FE:C6:47:59:E6:D7:7C:9D:EE:B4:EC:69:CA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/ea814507-7174-4f1e-8563-ef50370913c9/0/8284F61C774622FEC64759E6D77C9DEEB4EC69CA.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8284F61C774622FEC64759E6D77C9DEEB4EC69CA.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ea814507-7174-4f1e-8563-ef50370913c9/0/8284F61C774622FEC64759E6D77C9DEEB4EC69CA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c1:1e:39:69:5f:ca:40:5f:53:87:43:8b:c0:91:c9:9d:81:31: 21:0f:fe:9c:85:b4:f2:c3:ed:33:85:02:bf:fd:db:d4:35:bf: f2:67:48:4f:1f:5d:76:e8:7d:42:da:a8:3e:2c:c3:f8:99:07: a2:9a:0a:53:90:b9:a9:fd:bc:37:fb:eb:57:ad:5a:13:04:9d: b8:ff:9e:d5:04:f4:a2:ff:f1:2f:38:01:93:e9:de:2d:23:1e: a7:d4:29:6a:63:93:1e:04:61:c1:79:d7:ad:35:87:19:6a:42: 1a:13:df:03:dc:c7:d9:6c:23:03:17:05:90:23:50:f9:81:77: 7d:b1:fa:30:b9:f4:ac:fc:fa:7a:fc:5d:51:b5:8c:30:98:d1: a1:0d:03:ef:b0:83:62:a4:d2:83:54:cc:eb:cd:01:7b:b8:51: 04:fe:54:0e:04:9d:1e:07:4b:18:2b:33:c0:97:e0:c5:6c:cf: 04:6f:1b:1f:11:7c:c0:ca:aa:a9:3d:4c:a2:c0:70:f0:00:a4: 94:5b:ff:92:a0:95:de:ea:7e:80:c3:99:8b:5b:98:47:e9:0d: 1b:4c:b7:fa:10:c3:c6:8d:5e:9a:45:91:11:aa:9b:dd:ef:5d: 47:65:43:8a:86:ee:9a:b7:c6:81:cf:84:82:60:59:5c:14:e2: 02:d3:7d:01 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUPKrxqVuctrkrPERwomQJtJxm65swDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODI4NEY2MUM3NzQ2MjJGRUM2NDc1OUU2RDc3QzlERUVC NEVDNjlDQTAeFw0yNTExMDMwODI3NTVaFw0yNTExMDYxMDMzNTVaMDMxMTAvBgNV BAMTKEVDNEQ1MjUyNjBCNEM0RTE2NTJFNUUwOEExN0E5NERCMzU3OEY3NTgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCVnZRM3OfNLyGnGdsIHXfdLBkX 8PPocGKVv3qkaSJCgzBuQrRZfurvA8AYGIDRvTPDu1N82PV2vsG5fp3wYfVSPjfH 1mXZ2DIfsYJbRAFyjSAtY2RTTVIk9epGRa73tA7dnA98UAx+95AVJi2MiyH1TSAu L5TfsulpjQ1sPz4O/5uKfT650TQjgV2ZSyseOGIHUu2XhaWh8ZyTy/JY7xnpmMwP EAZK66yFizgicG1dqr5U6HOoBz5WP13e0BsvinlS5Bqr7mOWZulRibftv1FyTASO gbbDtTiBrfkfcgZ5smLs4ALwncjEbXhoQEmYU6yib5XkpnxS/lbcXheZVGhtAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU7E1SUmC0xOFlLl4IoXqU2zV491gwHwYDVR0j BBgwFoAUgoT2HHdGIv7GR1nm13yd7rTsacowDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l YTgxNDUwNy03MTc0LTRmMWUtODU2My1lZjUwMzcwOTEzYzkvMC84Mjg0RjYxQzc3 NDYyMkZFQzY0NzU5RTZENzdDOURFRUI0RUM2OUNBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvODI4NEY2MUM3NzQ2MjJGRUM2NDc1OUU2RDc3QzlERUVCNEVD NjlDQS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZWE4MTQ1MDctNzE3NC00ZjFlLTg1 NjMtZWY1MDM3MDkxM2M5LzAvODI4NEY2MUM3NzQ2MjJGRUM2NDc1OUU2RDc3QzlE RUVCNEVDNjlDQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAMEeOWlfykBfU4dDi8CRyZ2BMSEP/pyFtPLD 7TOFAr/929Q1v/JnSE8fXXbofULaqD4sw/iZB6KaClOQuan9vDf761etWhMEnbj/ ntUE9KL/8S84AZPp3i0jHqfUKWpjkx4EYcF51601hxlqQhoT3wPcx9lsIwMXBZAj UPmBd32x+jC59Kz8+nr8XVG1jDCY0aENA++wg2Kk0oNUzOvNAXu4UQT+VA4EnR4H SxgrM8CX4MVszwRvGx8RfMDKqqk9TKLAcPAApJRb/5Kgld7qfoDDmYtbmEfpDRtM t/oQw8aNXppFkRGqm93vXUdlQ4qG7pq3xoHPhIJgWVwU4gLTfQE= -----END CERTIFICATE-----Generated at Wed Nov 5 11:36:03 2025 by rpki-client