$ rpki-client -vvf repo-rpki.idnic.net/repo/fc6f0700-9116-4a05-8f6b-d8edafdb72ec/0/8AE8A9B51BDA923FC8956ACB086F56E776D409C8.mft File: 8AE8A9B51BDA923FC8956ACB086F56E776D409C8.mft (raw, json) Hash identifier: bsbH2lq5B0DxUi8K2qPwyx3pQanPhdA/6w8t580C5GU= Subject key identifier: B1:91:25:95:89:23:E2:1D:2F:1F:89:25:83:89:B7:5A:95:92:EF:D4 Authority key identifier: 8A:E8:A9:B5:1B:DA:92:3F:C8:95:6A:CB:08:6F:56:E7:76:D4:09:C8 Certificate issuer: /CN=8AE8A9B51BDA923FC8956ACB086F56E776D409C8 Certificate serial: 18EA1C3290D99718222DB8057D8A8AAA2B9303AC Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8AE8A9B51BDA923FC8956ACB086F56E776D409C8.cer Subject info access: rsync://repo-rpki.idnic.net/repo/fc6f0700-9116-4a05-8f6b-d8edafdb72ec/0/8AE8A9B51BDA923FC8956ACB086F56E776D409C8.mft Manifest number: 010C Signing time: Tue 04 Nov 2025 14:11:35 +0000 Manifest this update: Tue 04 Nov 2025 14:06:35 +0000 Manifest next update: Sat 08 Nov 2025 01:45:35 +0000 Files and hashes: 1: 3130332e3231302e37302e302f32332d3234203d3e20313530393936.roa (hash: 9twnyIhBB5/nG5JidLHITBuzB/j3WQpuRt6+R8EPn7s=) 2: 8AE8A9B51BDA923FC8956ACB086F56E776D409C8.crl (hash: M387joNgM143IEiYbqcTmGlnrYQf8IRK6QJCoob4yn4=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/fc6f0700-9116-4a05-8f6b-d8edafdb72ec/0/8AE8A9B51BDA923FC8956ACB086F56E776D409C8.crl rsync://repo-rpki.idnic.net/repo/fc6f0700-9116-4a05-8f6b-d8edafdb72ec/0/8AE8A9B51BDA923FC8956ACB086F56E776D409C8.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8AE8A9B51BDA923FC8956ACB086F56E776D409C8.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 07 Nov 2025 13:50:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 18:ea:1c:32:90:d9:97:18:22:2d:b8:05:7d:8a:8a:aa:2b:93:03:ac Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8AE8A9B51BDA923FC8956ACB086F56E776D409C8 Validity Not Before: Nov 4 14:06:35 2025 GMT Not After : Nov 8 01:45:35 2025 GMT Subject: CN=B19125958923E21D2F1F89258389B75A9592EFD4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:00:4c:fa:d6:36:da:99:d0:cf:e9:b3:94:8f: ff:79:0d:c3:bd:04:37:f9:8b:a7:18:d1:3d:11:38: a7:b5:7c:47:ff:3d:20:60:b9:c9:16:68:9e:e6:fc: 4f:7e:1d:39:42:4d:aa:9a:36:9f:65:99:ed:27:7a: 87:bd:83:0c:5b:b8:dc:31:4b:d3:91:c5:9c:c2:1b: 80:2a:4c:45:8d:2b:8d:97:dc:5d:db:9a:bb:64:22: d8:0d:03:69:15:5f:04:2f:f0:e0:26:d8:95:0f:a2: ff:6e:47:f2:dc:8c:f0:70:90:81:55:c5:a2:b7:95: 3d:58:ea:6e:a9:98:bd:fa:d2:e4:9e:a7:5a:f0:80: 37:70:ff:d9:a2:bc:73:f5:31:cb:2a:78:9d:5e:a9: 38:51:0b:da:c2:7f:03:93:cb:05:d1:9f:59:a2:ec: 56:04:ad:99:42:7d:3f:43:08:1c:37:58:82:2d:72: 93:23:f1:b6:c1:6e:81:f0:84:54:a7:db:6f:2c:93: 7c:48:29:5a:3e:b4:de:f6:a1:12:cd:f8:f5:b3:68: 49:f8:15:b9:8d:b9:72:c0:51:df:d6:9e:7f:26:e7: 6f:e6:6a:6f:ad:16:eb:fb:2b:e3:0e:da:ad:40:68: 35:24:1e:2d:f1:f8:8f:36:0b:95:44:27:b6:21:87: f8:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B1:91:25:95:89:23:E2:1D:2F:1F:89:25:83:89:B7:5A:95:92:EF:D4 X509v3 Authority Key Identifier: keyid:8A:E8:A9:B5:1B:DA:92:3F:C8:95:6A:CB:08:6F:56:E7:76:D4:09:C8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/fc6f0700-9116-4a05-8f6b-d8edafdb72ec/0/8AE8A9B51BDA923FC8956ACB086F56E776D409C8.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8AE8A9B51BDA923FC8956ACB086F56E776D409C8.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/fc6f0700-9116-4a05-8f6b-d8edafdb72ec/0/8AE8A9B51BDA923FC8956ACB086F56E776D409C8.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5e:48:e0:3e:64:df:06:bc:55:1e:4d:b9:82:08:45:d3:d4:ed: c2:2b:6d:08:ac:ad:50:f3:33:ff:45:92:e2:df:20:cd:b0:2d: a7:49:ff:7c:61:0d:b8:32:5a:24:9a:c3:52:c0:c8:b9:07:32: 19:5c:1c:92:d0:27:a7:43:5b:7f:3b:10:c7:93:cb:4b:9e:60: e9:6b:e0:6b:b4:15:5a:3a:ab:47:e8:02:de:eb:fa:a1:81:3a: a6:65:bc:49:b3:cb:5d:eb:59:19:23:3b:a8:05:69:83:92:17: 34:d4:a5:0b:18:84:03:90:16:00:42:fe:2e:8e:31:a6:cb:72: 81:be:da:28:ea:46:8d:db:cf:f3:80:c1:f3:c9:8d:35:82:07: d2:ee:f7:3e:b5:7a:7a:9f:cd:a6:99:2b:be:2b:e0:64:4a:05: 33:96:5e:2a:92:6a:40:cc:d3:c2:8b:5e:03:c5:79:51:8a:8b: 8e:12:28:5e:6b:ae:02:6c:57:1f:a3:aa:e2:a1:e4:4b:37:fc: d5:0e:06:2d:b5:f8:90:01:02:ea:22:8b:60:0b:a7:d4:70:ac: 1a:ae:62:df:1b:60:fa:87:09:be:21:d8:f0:00:39:f2:cc:e8: 2e:0d:30:8f:44:80:3f:cb:c5:62:6b:fa:39:81:a2:32:4f:cd: 65:26:6c:dd -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUGOocMpDZlxgiLbgFfYqKqiuTA6wwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEFFOEE5QjUxQkRBOTIzRkM4OTU2QUNCMDg2RjU2RTc3 NkQ0MDlDODAeFw0yNTExMDQxNDA2MzVaFw0yNTExMDgwMTQ1MzVaMDMxMTAvBgNV BAMTKEIxOTEyNTk1ODkyM0UyMUQyRjFGODkyNTgzODlCNzVBOTU5MkVGRDQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDGAEz61jbamdDP6bOUj/95DcO9 BDf5i6cY0T0ROKe1fEf/PSBguckWaJ7m/E9+HTlCTaqaNp9lme0neoe9gwxbuNwx S9ORxZzCG4AqTEWNK42X3F3bmrtkItgNA2kVXwQv8OAm2JUPov9uR/LcjPBwkIFV xaK3lT1Y6m6pmL360uSep1rwgDdw/9mivHP1McsqeJ1eqThRC9rCfwOTywXRn1mi 7FYErZlCfT9DCBw3WIItcpMj8bbBboHwhFSn228sk3xIKVo+tN72oRLN+PWzaEn4 FbmNuXLAUd/Wnn8m52/mam+tFuv7K+MO2q1AaDUkHi3x+I82C5VEJ7Yhh/gVAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUsZEllYkj4h0vH4klg4m3WpWS79QwHwYDVR0j BBgwFoAUiuiptRvakj/IlWrLCG9W53bUCcgwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m YzZmMDcwMC05MTE2LTRhMDUtOGY2Yi1kOGVkYWZkYjcyZWMvMC84QUU4QTlCNTFC REE5MjNGQzg5NTZBQ0IwODZGNTZFNzc2RDQwOUM4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOEFFOEE5QjUxQkRBOTIzRkM4OTU2QUNCMDg2RjU2RTc3NkQ0 MDlDOC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZmM2ZjA3MDAtOTExNi00YTA1LThm NmItZDhlZGFmZGI3MmVjLzAvOEFFOEE5QjUxQkRBOTIzRkM4OTU2QUNCMDg2RjU2 RTc3NkQ0MDlDOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAF5I4D5k3wa8VR5NuYIIRdPU7cIrbQisrVDz M/9FkuLfIM2wLadJ/3xhDbgyWiSaw1LAyLkHMhlcHJLQJ6dDW387EMeTy0ueYOlr 4Gu0FVo6q0foAt7r+qGBOqZlvEmzy13rWRkjO6gFaYOSFzTUpQsYhAOQFgBC/i6O MabLcoG+2ijqRo3bz/OAwfPJjTWCB9Lu9z61enqfzaaZK74r4GRKBTOWXiqSakDM 08KLXgPFeVGKi44SKF5rrgJsVx+jquKh5Es3/NUOBi21+JABAuoii2ALp9RwrBqu Yt8bYPqHCb4h2PAAOfLM6C4NMI9EgD/LxWJr+jmBojJPzWUmbN0= -----END CERTIFICATE-----Generated at Tue Nov 4 16:30:52 2025 by rpki-client