$ rpki-client -vvf repo-rpki.idnic.net/repo/02913fa1-33ae-4e33-bbe2-81bd9f03c84b/0/8C57C5860BF938BB57E0B7ED0F890D70BFEE55A0.mft File: 8C57C5860BF938BB57E0B7ED0F890D70BFEE55A0.mft (raw, json) Hash identifier: ou4BOIR7rUSsoLLH67q+4GuFu92AaYnTmY5iTAQL/2s= Subject key identifier: 89:11:9F:83:7C:97:B6:D7:52:E5:50:FB:87:2C:E7:F3:4C:16:59:17 Authority key identifier: 8C:57:C5:86:0B:F9:38:BB:57:E0:B7:ED:0F:89:0D:70:BF:EE:55:A0 Certificate issuer: /CN=8C57C5860BF938BB57E0B7ED0F890D70BFEE55A0 Certificate serial: 1CFDAC91053327BEB8E505EDA88930E8A8B196A1 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8C57C5860BF938BB57E0B7ED0F890D70BFEE55A0.cer Subject info access: rsync://repo-rpki.idnic.net/repo/02913fa1-33ae-4e33-bbe2-81bd9f03c84b/0/8C57C5860BF938BB57E0B7ED0F890D70BFEE55A0.mft Manifest number: 0345 Signing time: Sat 18 Oct 2025 19:10:03 +0000 Manifest this update: Sat 18 Oct 2025 19:05:03 +0000 Manifest next update: Wed 22 Oct 2025 01:00:03 +0000 Files and hashes: 1: 8C57C5860BF938BB57E0B7ED0F890D70BFEE55A0.crl (hash: pOwGheDEanDsJxjKc0G+iLaScMXBMRlFz/DBaozHsR0=) 2: 3130332e3135392e3230322e302f32332d3234203d3e20313331313131.roa (hash: Ho5Y5TOHX49gl1fZYVO+j2M3OjYa1AKAk+KnhAmd/6M=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/02913fa1-33ae-4e33-bbe2-81bd9f03c84b/0/8C57C5860BF938BB57E0B7ED0F890D70BFEE55A0.crl rsync://repo-rpki.idnic.net/repo/02913fa1-33ae-4e33-bbe2-81bd9f03c84b/0/8C57C5860BF938BB57E0B7ED0F890D70BFEE55A0.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8C57C5860BF938BB57E0B7ED0F890D70BFEE55A0.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 Oct 2025 01:00:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1c:fd:ac:91:05:33:27:be:b8:e5:05:ed:a8:89:30:e8:a8:b1:96:a1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8C57C5860BF938BB57E0B7ED0F890D70BFEE55A0 Validity Not Before: Oct 18 19:05:03 2025 GMT Not After : Oct 22 01:00:03 2025 GMT Subject: CN=89119F837C97B6D752E550FB872CE7F34C165917 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:42:ca:0d:d3:6f:15:08:14:c0:cd:5a:29:ea: 14:45:6c:0b:e6:ee:32:96:70:0f:87:f4:0d:aa:76: 82:19:b0:41:3f:d8:12:7d:d7:96:67:d7:0b:d4:cc: 3d:6e:76:ef:75:65:81:a6:8e:c0:e0:89:76:8a:dc: 26:85:db:8c:cf:93:78:8d:0d:36:9d:f0:a3:a7:be: 69:07:a7:fe:93:9f:05:8c:2d:25:bf:02:d9:4c:6f: e5:9c:a6:a3:98:f9:11:f5:35:7d:a4:66:f5:b9:50: 85:1d:3c:0f:af:14:96:11:01:ff:9e:4a:c3:aa:23: 9c:42:ec:92:c6:ac:98:0c:31:58:9e:2b:49:40:a0: be:bb:1c:c7:30:75:1c:92:51:79:69:db:0f:80:23: 04:b5:34:cf:9b:55:15:cc:0f:9d:c8:a7:c2:b6:58: a8:40:df:3c:c9:bd:02:5d:99:5b:46:35:ea:19:f4: cd:f6:c9:02:06:f3:7f:c7:db:78:28:da:d8:3f:ee: bc:7b:ce:36:ec:95:1a:57:7b:bf:28:9d:18:72:77: 7b:fb:24:40:93:7e:03:84:0b:75:a2:ab:2b:06:5f: 69:67:53:e4:52:4c:0e:61:5c:0c:e1:63:6f:76:c2: a2:1f:7e:a7:55:f2:d3:35:f9:e7:c9:44:91:d0:a2: 06:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:11:9F:83:7C:97:B6:D7:52:E5:50:FB:87:2C:E7:F3:4C:16:59:17 X509v3 Authority Key Identifier: keyid:8C:57:C5:86:0B:F9:38:BB:57:E0:B7:ED:0F:89:0D:70:BF:EE:55:A0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/02913fa1-33ae-4e33-bbe2-81bd9f03c84b/0/8C57C5860BF938BB57E0B7ED0F890D70BFEE55A0.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8C57C5860BF938BB57E0B7ED0F890D70BFEE55A0.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/02913fa1-33ae-4e33-bbe2-81bd9f03c84b/0/8C57C5860BF938BB57E0B7ED0F890D70BFEE55A0.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 44:36:48:ba:31:3a:1c:ff:95:bd:75:fe:91:18:3e:6d:64:dd: af:b3:d0:f1:88:17:e3:1f:44:be:5d:88:7c:2a:12:40:36:c7: b7:e9:bb:3b:51:35:74:f6:4b:08:3c:4d:14:37:60:c4:44:36: f4:34:51:e4:be:eb:ed:0a:dd:7c:8b:0e:6e:41:5b:b6:8a:13: ed:9f:40:02:c5:cb:52:f4:13:4e:61:d0:12:88:e2:0d:ac:94: ab:72:03:57:11:7e:ce:58:73:16:db:3a:be:da:5b:c2:71:b3: ee:25:f4:15:a1:40:0b:b6:64:32:70:23:44:b4:35:e6:b6:fe: 22:02:6a:5d:9f:96:10:c4:bf:1e:09:8f:e2:87:c9:d3:c9:86: 12:fc:0b:75:0c:a7:40:80:d5:07:e0:05:41:40:c1:82:b0:87: 3e:9f:ac:1f:0b:e6:b6:76:b9:25:26:f4:c9:3e:f7:dc:26:d1: 5a:a5:b0:fe:70:69:e7:89:de:2f:f0:b8:37:38:69:6a:c1:8c: 86:a4:71:4c:45:38:3d:c5:ca:63:16:05:c8:4b:2d:57:61:e6: 23:a3:f8:59:eb:ed:32:a9:54:09:5a:73:df:3f:74:53:cf:33: a4:ca:63:2e:12:37:f7:58:13:4f:02:57:d7:6e:58:2f:88:cd: eb:d6:0c:c1 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUHP2skQUzJ7645QXtqIkw6KixlqEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEM1N0M1ODYwQkY5MzhCQjU3RTBCN0VEMEY4OTBENzBC RkVFNTVBMDAeFw0yNTEwMTgxOTA1MDNaFw0yNTEwMjIwMTAwMDNaMDMxMTAvBgNV BAMTKDg5MTE5RjgzN0M5N0I2RDc1MkU1NTBGQjg3MkNFN0YzNEMxNjU5MTcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCuQsoN028VCBTAzVop6hRFbAvm 7jKWcA+H9A2qdoIZsEE/2BJ915Zn1wvUzD1udu91ZYGmjsDgiXaK3CaF24zPk3iN DTad8KOnvmkHp/6TnwWMLSW/AtlMb+WcpqOY+RH1NX2kZvW5UIUdPA+vFJYRAf+e SsOqI5xC7JLGrJgMMVieK0lAoL67HMcwdRySUXlp2w+AIwS1NM+bVRXMD53Ip8K2 WKhA3zzJvQJdmVtGNeoZ9M32yQIG83/H23go2tg/7rx7zjbslRpXe78onRhyd3v7 JECTfgOEC3WiqysGX2lnU+RSTA5hXAzhY292wqIffqdV8tM1+efJRJHQogbhAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUiRGfg3yXttdS5VD7hyzn80wWWRcwHwYDVR0j BBgwFoAUjFfFhgv5OLtX4LftD4kNcL/uVaAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w MjkxM2ZhMS0zM2FlLTRlMzMtYmJlMi04MWJkOWYwM2M4NGIvMC84QzU3QzU4NjBC RjkzOEJCNTdFMEI3RUQwRjg5MEQ3MEJGRUU1NUEwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOEM1N0M1ODYwQkY5MzhCQjU3RTBCN0VEMEY4OTBENzBCRkVF NTVBMC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMDI5MTNmYTEtMzNhZS00ZTMzLWJi ZTItODFiZDlmMDNjODRiLzAvOEM1N0M1ODYwQkY5MzhCQjU3RTBCN0VEMEY4OTBE NzBCRkVFNTVBMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEQ2SLoxOhz/lb11/pEYPm1k3a+z0PGIF+Mf RL5diHwqEkA2x7fpuztRNXT2Swg8TRQ3YMRENvQ0UeS+6+0K3XyLDm5BW7aKE+2f QALFy1L0E05h0BKI4g2slKtyA1cRfs5YcxbbOr7aW8Jxs+4l9BWhQAu2ZDJwI0S0 Nea2/iICal2flhDEvx4Jj+KHydPJhhL8C3UMp0CA1QfgBUFAwYKwhz6frB8L5rZ2 uSUm9Mk+99wm0VqlsP5waeeJ3i/wuDc4aWrBjIakcUxFOD3FymMWBchLLVdh5iOj +Fnr7TKpVAlac98/dFPPM6TKYy4SN/dYE08CV9duWC+IzevWDME= -----END CERTIFICATE-----Generated at Mon Oct 20 13:04:13 2025 by rpki-client