$ rpki-client -vvf repo-rpki.idnic.net/repo/f195b4b4-bc8a-4ce5-b550-9aa7b36ee1fa/0/8107B8970680BF15377E222E6093ED124116C40F.mft File: 8107B8970680BF15377E222E6093ED124116C40F.mft (raw, json) Hash identifier: vPF3D7lFZU8ONioXqSEBuguooP5z80nMgcN5vOzizw8= Subject key identifier: 87:29:03:3F:9B:BF:26:AD:59:64:08:2A:E0:67:CE:28:AD:6C:73:4C Authority key identifier: 81:07:B8:97:06:80:BF:15:37:7E:22:2E:60:93:ED:12:41:16:C4:0F Certificate issuer: /CN=8107B8970680BF15377E222E6093ED124116C40F Certificate serial: 12A19A91DBE05D837C1007B345717B94592D5548 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/8107B8970680BF15377E222E6093ED124116C40F.cer Subject info access: rsync://repo-rpki.idnic.net/repo/f195b4b4-bc8a-4ce5-b550-9aa7b36ee1fa/0/8107B8970680BF15377E222E6093ED124116C40F.mft Manifest number: BC Signing time: Tue 04 Nov 2025 16:10:03 +0000 Manifest this update: Tue 04 Nov 2025 16:05:03 +0000 Manifest next update: Fri 07 Nov 2025 19:35:03 +0000 Files and hashes: 1: 8107B8970680BF15377E222E6093ED124116C40F.crl (hash: uSnyLXz9e+BIeQkqXPUh92gqKt1VmxbaFnoIZuByvFo=) 2: 3136302e32322e3133362e302f32342d3234203d3e20313532383131.roa (hash: WXTlhMYeWb2XPsk3kKz2q/Y6eUxTYpdY6/4zyAzkOVg=) 3: 3136302e32322e3133362e302f32332d3233203d3e20313532383131.roa (hash: 2LacJURrRGdpqkr8B8+Js6eubdkn8GpcOPwFPaGcYgA=) 4: 3136302e32322e3133372e302f32342d3234203d3e20313532383131.roa (hash: HT3mtD9EzYNDUslH4D8zHP3cyYz5I1nQiUhW1KPbzG8=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/f195b4b4-bc8a-4ce5-b550-9aa7b36ee1fa/0/8107B8970680BF15377E222E6093ED124116C40F.crl rsync://repo-rpki.idnic.net/repo/f195b4b4-bc8a-4ce5-b550-9aa7b36ee1fa/0/8107B8970680BF15377E222E6093ED124116C40F.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/8107B8970680BF15377E222E6093ED124116C40F.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 07 Nov 2025 10:49:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 12:a1:9a:91:db:e0:5d:83:7c:10:07:b3:45:71:7b:94:59:2d:55:48 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8107B8970680BF15377E222E6093ED124116C40F Validity Not Before: Nov 4 16:05:03 2025 GMT Not After : Nov 7 19:35:03 2025 GMT Subject: CN=8729033F9BBF26AD5964082AE067CE28AD6C734C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:05:b4:3f:c7:79:66:75:cc:77:47:bf:49:8b: 93:06:6b:8f:77:a4:b2:98:3e:9e:40:99:28:34:3a: 80:ba:a7:fa:0a:17:82:93:2d:bf:53:2f:16:22:be: e2:17:8c:ea:02:ff:e5:16:fd:b3:c4:74:f5:78:a7: d5:b0:4f:73:4d:8e:3f:0f:99:c9:70:8f:98:e1:e8: 00:3e:5c:a4:86:4c:26:01:c3:d8:03:3d:5a:3b:f0: 0b:f5:c6:99:c4:77:3d:8c:29:10:6a:3c:0a:ec:c4: 0b:c4:02:10:39:2e:6f:90:a9:b4:32:73:4a:c8:68: 16:af:d7:d3:67:ac:d5:25:6b:8e:45:3d:d7:16:67: a0:17:f3:bf:f2:57:44:2f:e1:95:9c:d1:79:cc:b7: a1:b3:1b:10:f3:39:9b:70:67:e4:f8:83:74:53:d8: a7:13:eb:83:2b:ea:3b:2b:6d:cb:23:92:86:02:73: fa:dd:b4:ea:ed:13:04:a1:75:4c:56:ae:55:1a:61: 53:f0:50:d0:83:06:af:f7:5e:6f:61:93:22:ba:90: e4:4a:fd:bc:9c:5a:42:4f:bd:e4:3e:70:19:14:32: 26:7e:16:ed:bf:96:28:3a:c9:fa:33:f1:49:7f:8b: 42:c2:64:8a:d1:49:42:0c:ad:07:0d:1a:fc:8b:b8: e1:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:29:03:3F:9B:BF:26:AD:59:64:08:2A:E0:67:CE:28:AD:6C:73:4C X509v3 Authority Key Identifier: keyid:81:07:B8:97:06:80:BF:15:37:7E:22:2E:60:93:ED:12:41:16:C4:0F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/f195b4b4-bc8a-4ce5-b550-9aa7b36ee1fa/0/8107B8970680BF15377E222E6093ED124116C40F.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/8107B8970680BF15377E222E6093ED124116C40F.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f195b4b4-bc8a-4ce5-b550-9aa7b36ee1fa/0/8107B8970680BF15377E222E6093ED124116C40F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 99:1a:a8:89:b8:cf:cd:19:b0:26:3b:b3:02:ca:5a:22:cd:a4: 9f:54:fa:87:c5:f5:b5:1d:3e:86:5a:b2:54:1e:87:f3:5e:02: ba:92:9f:ea:0a:dd:89:0d:f1:cd:67:1c:9d:62:9c:a9:6e:15: 92:d1:98:f2:d3:69:01:ba:90:e9:ae:55:de:52:ce:38:d2:e6: 1e:2b:e1:60:a8:e8:9d:f8:53:9c:58:66:69:f8:ff:92:70:b2: b0:ee:0d:f7:b7:13:95:22:a5:5d:3f:b9:dd:cb:5d:ff:de:3d: 58:96:45:fb:0c:38:fc:f6:69:af:76:4b:ca:62:12:bd:2c:3d: d1:21:fa:01:7b:cb:04:41:2c:76:fe:f8:55:57:fd:a7:11:a3: b2:3d:28:07:a7:36:df:11:13:bb:4b:af:6f:77:32:88:67:27: 19:a0:a6:52:0a:b6:ca:fb:f6:bf:23:17:14:0d:4e:42:a8:a4: 66:ba:9c:37:bb:2e:6a:b1:4b:2b:e8:b0:ba:1c:5f:26:f8:c3: d3:3b:3a:3c:cd:15:e8:53:71:32:e4:35:c8:2f:97:5e:c9:46: 6a:bc:7f:46:0c:84:de:05:34:e2:35:bf:1f:ca:b9:88:de:d0: 17:69:f3:b5:79:1c:58:72:8f:5c:4a:bc:65:1b:46:11:49:f1: 55:e5:0e:a6 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUEqGakdvgXYN8EAezRXF7lFktVUgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODEwN0I4OTcwNjgwQkYxNTM3N0UyMjJFNjA5M0VEMTI0 MTE2QzQwRjAeFw0yNTExMDQxNjA1MDNaFw0yNTExMDcxOTM1MDNaMDMxMTAvBgNV BAMTKDg3MjkwMzNGOUJCRjI2QUQ1OTY0MDgyQUUwNjdDRTI4QUQ2QzczNEMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDGBbQ/x3lmdcx3R79Ji5MGa493 pLKYPp5AmSg0OoC6p/oKF4KTLb9TLxYivuIXjOoC/+UW/bPEdPV4p9WwT3NNjj8P mclwj5jh6AA+XKSGTCYBw9gDPVo78Av1xpnEdz2MKRBqPArsxAvEAhA5Lm+QqbQy c0rIaBav19NnrNUla45FPdcWZ6AX87/yV0Qv4ZWc0XnMt6GzGxDzOZtwZ+T4g3RT 2KcT64Mr6jsrbcsjkoYCc/rdtOrtEwShdUxWrlUaYVPwUNCDBq/3Xm9hkyK6kORK /bycWkJPveQ+cBkUMiZ+Fu2/lig6yfoz8Ul/i0LCZIrRSUIMrQcNGvyLuOHzAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUhykDP5u/Jq1ZZAgq4GfOKK1sc0wwHwYDVR0j BBgwFoAUgQe4lwaAvxU3fiIuYJPtEkEWxA8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m MTk1YjRiNC1iYzhhLTRjZTUtYjU1MC05YWE3YjM2ZWUxZmEvMC84MTA3Qjg5NzA2 ODBCRjE1Mzc3RTIyMkU2MDkzRUQxMjQxMTZDNDBGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvODEwN0I4OTcwNjgwQkYxNTM3N0UyMjJFNjA5M0VEMTI0MTE2 QzQwRi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZjE5NWI0YjQtYmM4YS00Y2U1LWI1 NTAtOWFhN2IzNmVlMWZhLzAvODEwN0I4OTcwNjgwQkYxNTM3N0UyMjJFNjA5M0VE MTI0MTE2QzQwRi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJkaqIm4z80ZsCY7swLKWiLNpJ9U+ofF9bUd PoZaslQeh/NeArqSn+oK3YkN8c1nHJ1inKluFZLRmPLTaQG6kOmuVd5SzjjS5h4r 4WCo6J34U5xYZmn4/5JwsrDuDfe3E5UipV0/ud3LXf/ePViWRfsMOPz2aa92S8pi Er0sPdEh+gF7ywRBLHb++FVX/acRo7I9KAenNt8RE7tLr293MohnJxmgplIKtsr7 9r8jFxQNTkKopGa6nDe7LmqxSyvosLocXyb4w9M7OjzNFehTcTLkNcgvl17JRmq8 f0YMhN4FNOI1vx/KuYje0Bdp87V5HFhyj1xKvGUbRhFJ8VXlDqY= -----END CERTIFICATE-----Generated at Tue Nov 4 19:09:48 2025 by rpki-client