$ rpki-client -vvf repo-rpki.idnic.net/repo/f0520b54-3ba7-4631-af0b-55984b0ba7f2/0/8CDF716F25D64DEB3E1036E6A36DB724CDE1E5D0.mft File: 8CDF716F25D64DEB3E1036E6A36DB724CDE1E5D0.mft (raw, json) Hash identifier: 4NhzHdYOiAvitms7r6M9Oi/WRHvu1kl6oqHcBGFLL2c= Subject key identifier: 27:F7:CB:B6:DD:6D:56:49:43:44:5F:9A:05:9B:1C:94:3C:A3:24:C5 Authority key identifier: 8C:DF:71:6F:25:D6:4D:EB:3E:10:36:E6:A3:6D:B7:24:CD:E1:E5:D0 Certificate issuer: /CN=8CDF716F25D64DEB3E1036E6A36DB724CDE1E5D0 Certificate serial: 01A47B7E0A058D34F167AF6094C5EC2A62E9B17F Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8CDF716F25D64DEB3E1036E6A36DB724CDE1E5D0.cer Subject info access: rsync://repo-rpki.idnic.net/repo/f0520b54-3ba7-4631-af0b-55984b0ba7f2/0/8CDF716F25D64DEB3E1036E6A36DB724CDE1E5D0.mft Manifest number: 039D Signing time: Tue 04 Nov 2025 02:10:42 +0000 Manifest this update: Tue 04 Nov 2025 02:05:42 +0000 Manifest next update: Fri 07 Nov 2025 12:50:42 +0000 Files and hashes: 1: 8CDF716F25D64DEB3E1036E6A36DB724CDE1E5D0.crl (hash: T0s76ywpkIDoo6r4v8xyzu1mEoavVr6rBp/fAMpCEg0=) 2: 3130332e3136322e3134362e302f32332d3234203d3e203137393935.roa (hash: glmRxvHF4g4HTvz1muaudxYOmNWHdjodUPYRc5xhUvY=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/f0520b54-3ba7-4631-af0b-55984b0ba7f2/0/8CDF716F25D64DEB3E1036E6A36DB724CDE1E5D0.crl rsync://repo-rpki.idnic.net/repo/f0520b54-3ba7-4631-af0b-55984b0ba7f2/0/8CDF716F25D64DEB3E1036E6A36DB724CDE1E5D0.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8CDF716F25D64DEB3E1036E6A36DB724CDE1E5D0.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 07 Nov 2025 12:50:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a4:7b:7e:0a:05:8d:34:f1:67:af:60:94:c5:ec:2a:62:e9:b1:7f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8CDF716F25D64DEB3E1036E6A36DB724CDE1E5D0 Validity Not Before: Nov 4 02:05:42 2025 GMT Not After : Nov 7 12:50:42 2025 GMT Subject: CN=27F7CBB6DD6D564943445F9A059B1C943CA324C5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:52:24:a0:d7:ea:22:3d:32:16:de:ee:a6:87: 36:8d:ef:91:f9:a0:b4:be:19:56:db:89:65:50:d6: 58:8c:37:d8:e0:31:b4:72:bc:89:c6:d1:fa:e6:07: 31:8f:c1:9a:40:5f:5d:88:31:27:14:f1:77:03:32: 79:3f:28:e2:78:48:12:aa:16:0a:93:82:c5:2f:b6: f4:37:9a:a9:16:90:37:22:82:4c:62:51:8e:86:8d: cf:69:82:bf:cb:c3:03:ac:9c:09:40:a3:32:c7:a9: 8d:6f:a4:e3:4e:45:91:84:79:03:84:e4:46:e7:4b: 43:fe:22:b4:43:c1:6a:2b:ca:3e:24:ac:b8:1e:93: 44:41:74:81:0c:df:ac:88:83:83:d1:9f:01:e8:3d: 06:84:b4:a2:a0:5f:7b:61:67:21:43:a8:07:db:fe: 77:5d:99:56:27:5a:db:02:7d:b2:65:3e:70:e6:0c: 14:ff:53:9b:67:6f:e4:bf:21:2c:3e:82:be:93:79: a8:ea:28:68:be:44:f1:f1:e3:b5:67:d8:00:79:02: 1d:7a:d5:ed:f5:68:90:67:d0:88:d3:22:47:d4:b0: 10:fa:51:e8:de:67:19:7e:cd:6d:29:d5:9a:25:38: 9c:9a:50:bc:49:fd:2a:09:e4:f2:76:f6:0d:18:10: 18:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 27:F7:CB:B6:DD:6D:56:49:43:44:5F:9A:05:9B:1C:94:3C:A3:24:C5 X509v3 Authority Key Identifier: keyid:8C:DF:71:6F:25:D6:4D:EB:3E:10:36:E6:A3:6D:B7:24:CD:E1:E5:D0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/f0520b54-3ba7-4631-af0b-55984b0ba7f2/0/8CDF716F25D64DEB3E1036E6A36DB724CDE1E5D0.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8CDF716F25D64DEB3E1036E6A36DB724CDE1E5D0.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f0520b54-3ba7-4631-af0b-55984b0ba7f2/0/8CDF716F25D64DEB3E1036E6A36DB724CDE1E5D0.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 62:3e:d3:45:07:54:c2:d7:d3:36:0f:3a:9b:9a:d7:b3:62:7b: 0d:31:fe:fd:68:5e:89:da:62:99:61:ba:d9:4c:49:67:f7:c6: 57:22:8f:ec:ff:32:33:3d:ed:af:d3:fc:d3:f0:7c:7b:27:2b: 78:fe:93:b5:22:69:7b:a1:f9:5b:a2:b3:53:74:c4:9e:a7:cc: 2e:10:d7:0e:d0:6e:37:bf:3f:57:c9:4b:ec:5e:dd:23:d1:85: b1:19:4e:d7:12:28:0d:d1:74:18:7f:c5:46:38:7b:bb:06:d8: 4c:4d:04:0c:88:f0:15:ca:e5:6e:0b:53:7d:33:f9:c3:81:76: 23:ac:da:db:2d:70:5b:93:27:e8:b7:79:a8:e3:db:1d:49:77: 21:30:40:5a:b3:6e:ca:85:84:cd:fd:ea:f4:33:46:7e:8a:e5: 94:89:e2:2f:9a:c9:30:32:1d:02:ca:32:25:86:a9:7e:b0:09: c7:fa:08:d0:8e:c3:0c:cc:89:6b:80:50:fb:5d:b1:9b:ab:b2: 54:dd:7d:46:be:cc:04:26:a2:d4:b1:80:1e:c9:b3:d6:83:4d: f5:40:b3:2f:b4:ae:4a:2d:51:72:dd:a0:75:a0:58:e1:ea:a7: 17:4a:9d:57:29:af:c5:3b:7f:09:fd:9b:19:32:bc:d9:91:01: 72:17:aa:a0 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUAaR7fgoFjTTxZ69glMXsKmLpsX8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOENERjcxNkYyNUQ2NERFQjNFMTAzNkU2QTM2REI3MjRD REUxRTVEMDAeFw0yNTExMDQwMjA1NDJaFw0yNTExMDcxMjUwNDJaMDMxMTAvBgNV BAMTKDI3RjdDQkI2REQ2RDU2NDk0MzQ0NUY5QTA1OUIxQzk0M0NBMzI0QzUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDWUiSg1+oiPTIW3u6mhzaN75H5 oLS+GVbbiWVQ1liMN9jgMbRyvInG0frmBzGPwZpAX12IMScU8XcDMnk/KOJ4SBKq FgqTgsUvtvQ3mqkWkDcigkxiUY6Gjc9pgr/LwwOsnAlAozLHqY1vpONORZGEeQOE 5EbnS0P+IrRDwWoryj4krLgek0RBdIEM36yIg4PRnwHoPQaEtKKgX3thZyFDqAfb /nddmVYnWtsCfbJlPnDmDBT/U5tnb+S/ISw+gr6TeajqKGi+RPHx47Vn2AB5Ah16 1e31aJBn0IjTIkfUsBD6UejeZxl+zW0p1ZolOJyaULxJ/SoJ5PJ29g0YEBjpAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUJ/fLtt1tVklDRF+aBZsclDyjJMUwHwYDVR0j BBgwFoAUjN9xbyXWTes+EDbmo223JM3h5dAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m MDUyMGI1NC0zYmE3LTQ2MzEtYWYwYi01NTk4NGIwYmE3ZjIvMC84Q0RGNzE2RjI1 RDY0REVCM0UxMDM2RTZBMzZEQjcyNENERTFFNUQwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOENERjcxNkYyNUQ2NERFQjNFMTAzNkU2QTM2REI3MjRDREUx RTVEMC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZjA1MjBiNTQtM2JhNy00NjMxLWFm MGItNTU5ODRiMGJhN2YyLzAvOENERjcxNkYyNUQ2NERFQjNFMTAzNkU2QTM2REI3 MjRDREUxRTVEMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGI+00UHVMLX0zYPOpua17Niew0x/v1oXona YplhutlMSWf3xlcij+z/MjM97a/T/NPwfHsnK3j+k7UiaXuh+Vuis1N0xJ6nzC4Q 1w7Qbje/P1fJS+xe3SPRhbEZTtcSKA3RdBh/xUY4e7sG2ExNBAyI8BXK5W4LU30z +cOBdiOs2tstcFuTJ+i3eajj2x1JdyEwQFqzbsqFhM396vQzRn6K5ZSJ4i+ayTAy HQLKMiWGqX6wCcf6CNCOwwzMiWuAUPtdsZurslTdfUa+zAQmotSxgB7Js9aDTfVA sy+0rkotUXLdoHWgWOHqpxdKnVcpr8U7fwn9mxkyvNmRAXIXqqA= -----END CERTIFICATE-----Generated at Wed Nov 5 09:36:33 2025 by rpki-client