$ rpki-client -vvf repo-rpki.idnic.net/repo/f9e7a28a-62f0-4d14-8702-403a5190eae1/0/8A4FF836588BBDC5E5CC526BBBEB66D5140D1B86.mft File: 8A4FF836588BBDC5E5CC526BBBEB66D5140D1B86.mft (raw, json) Hash identifier: aDWzs4371tCrLrnjgIHi5pWKn4d84tg/zodAp4LTJ3k= Subject key identifier: F5:1B:26:DA:D8:3D:B5:61:4F:91:1A:19:8C:BF:94:51:7D:FC:9F:12 Authority key identifier: 8A:4F:F8:36:58:8B:BD:C5:E5:CC:52:6B:BB:EB:66:D5:14:0D:1B:86 Certificate issuer: /CN=8A4FF836588BBDC5E5CC526BBBEB66D5140D1B86 Certificate serial: 14D2E0CC050F296821ACC5173D56640E1755A085 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8A4FF836588BBDC5E5CC526BBBEB66D5140D1B86.cer Subject info access: rsync://repo-rpki.idnic.net/repo/f9e7a28a-62f0-4d14-8702-403a5190eae1/0/8A4FF836588BBDC5E5CC526BBBEB66D5140D1B86.mft Manifest number: 034C Signing time: Tue 04 Nov 2025 20:51:21 +0000 Manifest this update: Tue 04 Nov 2025 20:46:21 +0000 Manifest next update: Sat 08 Nov 2025 04:23:21 +0000 Files and hashes: 1: 8A4FF836588BBDC5E5CC526BBBEB66D5140D1B86.crl (hash: dVDjrkTdAcW/S6GZkg5GIqWTMIx2EWRpfDvYVCC0tFs=) 2: 3130332e3137312e33302e302f32332d3234203d3e20313331313131.roa (hash: 0IdcwPtxZArM5JrmLtgkLYtthS0u5GSXZS6q7IiPcxg=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/f9e7a28a-62f0-4d14-8702-403a5190eae1/0/8A4FF836588BBDC5E5CC526BBBEB66D5140D1B86.crl rsync://repo-rpki.idnic.net/repo/f9e7a28a-62f0-4d14-8702-403a5190eae1/0/8A4FF836588BBDC5E5CC526BBBEB66D5140D1B86.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8A4FF836588BBDC5E5CC526BBBEB66D5140D1B86.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 07 Nov 2025 13:50:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 14:d2:e0:cc:05:0f:29:68:21:ac:c5:17:3d:56:64:0e:17:55:a0:85 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8A4FF836588BBDC5E5CC526BBBEB66D5140D1B86 Validity Not Before: Nov 4 20:46:21 2025 GMT Not After : Nov 8 04:23:21 2025 GMT Subject: CN=F51B26DAD83DB5614F911A198CBF94517DFC9F12 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:27:3e:35:2c:35:59:49:52:36:81:02:68:f7: 30:5c:f0:da:c2:fd:f1:be:e7:70:94:dd:02:7e:30: 7f:e0:73:37:49:22:6f:17:ff:d8:95:bc:ff:ce:a3: 07:79:0f:1a:2b:a7:b8:7e:ac:92:f8:01:1f:94:d2: 85:01:58:e2:57:49:4c:1b:8a:a7:4d:16:c9:94:1d: 0c:74:b8:2d:be:08:42:ab:0b:dc:d0:90:c2:e4:8b: 44:49:2e:2c:b0:d0:11:86:50:7a:09:db:3f:31:c8: 05:8b:d3:33:61:86:75:30:4a:5b:86:22:1c:66:45: 8b:30:22:1f:0a:94:5b:36:60:2a:cf:dd:c9:15:c0: c5:32:65:95:29:d8:d2:cb:9c:3c:d3:13:1c:c8:16: ee:7c:06:ad:2b:54:46:d0:4c:f7:8b:cd:82:11:20: 94:ce:7f:8c:7d:7c:2f:c6:0c:76:e4:0a:a7:bf:3d: 92:82:88:a2:bb:43:57:85:d8:71:c7:25:b7:f8:f7: a0:f0:09:f0:92:ca:0d:29:f1:86:74:f6:02:a9:45: 33:8c:e0:c5:34:a8:3e:b5:d8:df:43:e1:dd:d0:1a: 22:4c:07:51:59:b2:ae:42:aa:f6:db:db:68:38:65: 82:da:c2:58:33:ae:be:cf:bb:8c:9c:59:79:ca:8e: 1e:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F5:1B:26:DA:D8:3D:B5:61:4F:91:1A:19:8C:BF:94:51:7D:FC:9F:12 X509v3 Authority Key Identifier: keyid:8A:4F:F8:36:58:8B:BD:C5:E5:CC:52:6B:BB:EB:66:D5:14:0D:1B:86 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/f9e7a28a-62f0-4d14-8702-403a5190eae1/0/8A4FF836588BBDC5E5CC526BBBEB66D5140D1B86.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8A4FF836588BBDC5E5CC526BBBEB66D5140D1B86.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f9e7a28a-62f0-4d14-8702-403a5190eae1/0/8A4FF836588BBDC5E5CC526BBBEB66D5140D1B86.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 57:08:58:a4:68:7e:e3:98:26:fd:ba:bf:07:57:6e:01:18:44: 45:c2:56:7c:b0:13:b9:f9:11:73:ab:36:a6:4d:1d:ec:41:15: f9:ff:f2:9e:4f:11:c4:1a:02:07:eb:2b:1b:1a:66:0c:65:a5: c0:46:86:ff:55:9f:7a:d3:15:8a:40:80:12:3a:6c:10:5a:a5: 4a:dc:29:e1:db:9f:83:f5:66:0b:ab:aa:82:29:52:fa:8c:7a: 8b:c0:12:f2:7a:2e:e1:6b:91:06:5d:42:3f:24:7e:4b:9b:36: d9:06:7e:d1:63:76:b8:23:87:60:59:f2:4b:76:85:d8:83:16: 42:d1:06:3d:97:50:47:69:b5:44:dc:49:d4:e5:c0:2a:db:e6: 65:f6:c2:5c:f4:91:d5:07:01:05:80:95:ad:f8:20:84:1c:e9: 04:34:74:02:64:72:37:79:a6:c0:ed:a9:e2:9b:f1:42:32:38: 0d:a7:ad:15:c7:0b:e3:bd:d3:4e:2c:81:8e:df:9d:14:78:09: 14:4c:0d:c8:04:59:42:e0:21:5f:62:f9:90:cf:11:26:5e:91: c3:e8:fb:48:9f:de:bc:eb:e8:2c:e1:1c:4d:03:fb:e6:93:15: 60:5c:4b:a1:6a:e8:f0:2e:76:b2:68:7b:fd:41:10:71:6f:bf: 1c:fb:af:fc -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUFNLgzAUPKWghrMUXPVZkDhdVoIUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEE0RkY4MzY1ODhCQkRDNUU1Q0M1MjZCQkJFQjY2RDUx NDBEMUI4NjAeFw0yNTExMDQyMDQ2MjFaFw0yNTExMDgwNDIzMjFaMDMxMTAvBgNV BAMTKEY1MUIyNkRBRDgzREI1NjE0RjkxMUExOThDQkY5NDUxN0RGQzlGMTIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC5Jz41LDVZSVI2gQJo9zBc8NrC /fG+53CU3QJ+MH/gczdJIm8X/9iVvP/Oowd5Dxorp7h+rJL4AR+U0oUBWOJXSUwb iqdNFsmUHQx0uC2+CEKrC9zQkMLki0RJLiyw0BGGUHoJ2z8xyAWL0zNhhnUwSluG IhxmRYswIh8KlFs2YCrP3ckVwMUyZZUp2NLLnDzTExzIFu58Bq0rVEbQTPeLzYIR IJTOf4x9fC/GDHbkCqe/PZKCiKK7Q1eF2HHHJbf496DwCfCSyg0p8YZ09gKpRTOM 4MU0qD612N9D4d3QGiJMB1FZsq5Cqvbb22g4ZYLawlgzrr7Pu4ycWXnKjh4VAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU9Rsm2tg9tWFPkRoZjL+UUX38nxIwHwYDVR0j BBgwFoAUik/4NliLvcXlzFJru+tm1RQNG4YwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m OWU3YTI4YS02MmYwLTRkMTQtODcwMi00MDNhNTE5MGVhZTEvMC84QTRGRjgzNjU4 OEJCREM1RTVDQzUyNkJCQkVCNjZENTE0MEQxQjg2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOEE0RkY4MzY1ODhCQkRDNUU1Q0M1MjZCQkJFQjY2RDUxNDBE MUI4Ni5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZjllN2EyOGEtNjJmMC00ZDE0LTg3 MDItNDAzYTUxOTBlYWUxLzAvOEE0RkY4MzY1ODhCQkRDNUU1Q0M1MjZCQkJFQjY2 RDUxNDBEMUI4Ni5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFcIWKRofuOYJv26vwdXbgEYREXCVnywE7n5 EXOrNqZNHexBFfn/8p5PEcQaAgfrKxsaZgxlpcBGhv9Vn3rTFYpAgBI6bBBapUrc KeHbn4P1ZgurqoIpUvqMeovAEvJ6LuFrkQZdQj8kfkubNtkGftFjdrgjh2BZ8kt2 hdiDFkLRBj2XUEdptUTcSdTlwCrb5mX2wlz0kdUHAQWAla34IIQc6QQ0dAJkcjd5 psDtqeKb8UIyOA2nrRXHC+O9004sgY7fnRR4CRRMDcgEWULgIV9i+ZDPESZekcPo +0if3rzr6CzhHE0D++aTFWBcS6Fq6PAudrJoe/1BEHFvvxz7r/w= -----END CERTIFICATE-----Generated at Tue Nov 4 23:24:58 2025 by rpki-client