$ rpki-client -vvf repo-rpki.idnic.net/repo/09a88897-c387-4735-acd8-1d1c53cde264/0/8B7E0099F26BEEE90826C9B0E424575BDE128403.mft File: 8B7E0099F26BEEE90826C9B0E424575BDE128403.mft (raw, json) Hash identifier: fyfwQw4wSnq3ZRG1uH3J7H3JPEw1Gbs9U9iz7cfqmGE= Subject key identifier: 64:8C:7A:D3:42:AE:47:8F:07:1E:8F:9A:4C:8A:80:BB:E0:49:1C:AF Authority key identifier: 8B:7E:00:99:F2:6B:EE:E9:08:26:C9:B0:E4:24:57:5B:DE:12:84:03 Certificate issuer: /CN=8B7E0099F26BEEE90826C9B0E424575BDE128403 Certificate serial: 420A219D9704BB8D4117F442D6C507156F1F2F60 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8B7E0099F26BEEE90826C9B0E424575BDE128403.cer Subject info access: rsync://repo-rpki.idnic.net/repo/09a88897-c387-4735-acd8-1d1c53cde264/0/8B7E0099F26BEEE90826C9B0E424575BDE128403.mft Manifest number: 02A1 Signing time: Mon 20 Oct 2025 15:32:07 +0000 Manifest this update: Mon 20 Oct 2025 15:27:07 +0000 Manifest next update: Thu 23 Oct 2025 18:28:07 +0000 Files and hashes: 1: 8B7E0099F26BEEE90826C9B0E424575BDE128403.crl (hash: gpfb4+ivlLRDnpY/oiiN0sVkoG9tWLYM7tXmekHbosA=) 2: 3130332e3137392e38362e302f32332d3234203d3e20313430333839.roa (hash: E6T8Gt5EtL567pGgeSiX6DPJMeUcOvm0iW+qF8Vx1Vo=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/09a88897-c387-4735-acd8-1d1c53cde264/0/8B7E0099F26BEEE90826C9B0E424575BDE128403.crl rsync://repo-rpki.idnic.net/repo/09a88897-c387-4735-acd8-1d1c53cde264/0/8B7E0099F26BEEE90826C9B0E424575BDE128403.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8B7E0099F26BEEE90826C9B0E424575BDE128403.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 Oct 2025 11:48:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 42:0a:21:9d:97:04:bb:8d:41:17:f4:42:d6:c5:07:15:6f:1f:2f:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8B7E0099F26BEEE90826C9B0E424575BDE128403 Validity Not Before: Oct 20 15:27:07 2025 GMT Not After : Oct 23 18:28:07 2025 GMT Subject: CN=648C7AD342AE478F071E8F9A4C8A80BBE0491CAF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:10:99:1c:6d:3a:65:84:5e:2f:42:98:49:bb: c6:c0:78:15:af:a3:44:b6:28:da:7d:47:e7:2e:84: 6b:02:4c:2a:01:b5:94:25:30:4d:45:94:eb:34:90: 24:8e:76:dd:18:24:89:4b:ee:39:61:c4:44:11:db: e0:81:f1:e4:f0:80:98:b7:c8:b7:65:60:df:aa:02: a5:4d:51:98:4e:b0:ed:01:2b:96:37:72:37:2d:4b: df:51:a5:f9:ea:97:8f:56:12:1d:01:18:91:44:0f: ca:09:26:af:88:8b:36:99:c1:09:86:6e:14:25:b8: 69:48:84:20:7f:f4:a2:a5:7a:2a:76:d5:22:5d:62: 14:4a:be:b6:d6:5d:01:27:98:9c:27:e2:2e:1b:ca: 67:bf:35:99:c2:a8:2d:10:29:aa:a1:b9:a4:25:30: fb:b4:2d:3f:d1:8e:30:59:f0:12:5e:f3:80:cb:87: 21:64:44:61:02:5b:f8:11:91:1a:5c:e1:51:ee:9e: 01:d7:34:da:c8:e3:de:73:6d:e0:88:83:99:f9:d4: 2c:ab:96:2d:16:83:e7:d4:cf:89:5a:7a:37:4f:49: c5:2d:d4:d5:e1:37:6f:87:67:f1:4b:50:8a:6e:8c: 1a:88:db:cd:ee:5a:0e:cf:59:6c:4f:21:4d:d1:a8: 55:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 64:8C:7A:D3:42:AE:47:8F:07:1E:8F:9A:4C:8A:80:BB:E0:49:1C:AF X509v3 Authority Key Identifier: keyid:8B:7E:00:99:F2:6B:EE:E9:08:26:C9:B0:E4:24:57:5B:DE:12:84:03 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/09a88897-c387-4735-acd8-1d1c53cde264/0/8B7E0099F26BEEE90826C9B0E424575BDE128403.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8B7E0099F26BEEE90826C9B0E424575BDE128403.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/09a88897-c387-4735-acd8-1d1c53cde264/0/8B7E0099F26BEEE90826C9B0E424575BDE128403.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 59:80:95:fb:87:79:d7:e0:56:4a:36:a9:69:52:41:7c:b1:0e: 3e:a7:06:6f:6b:89:2b:fa:d0:d7:93:6d:8d:de:f3:53:0a:e0: 2f:cf:89:f6:8d:7b:37:4d:5b:b8:f8:fa:45:d6:41:08:e0:a4: a1:15:6f:98:a4:db:a8:4d:7a:73:a5:2f:b6:b5:7c:21:fa:1f: 59:ff:77:a3:bb:82:7b:53:4f:f8:07:01:65:d3:be:69:d4:47: d2:ee:34:ac:a3:80:c3:b7:77:dc:b7:3d:6f:42:08:c1:4c:a3: b7:e8:61:14:92:5f:7c:70:5d:69:3f:1c:73:90:54:84:bd:72: 23:14:52:06:d8:38:b7:51:f5:4a:9e:ad:62:c5:e1:4c:2a:20: 4a:07:45:b9:d6:07:ed:83:5f:e4:63:46:30:06:88:09:8f:88: 18:4c:69:d9:20:86:7f:5a:18:20:a8:c8:98:a5:78:88:ae:d4: 80:2d:47:e0:b6:37:0d:1c:d7:96:c9:8d:26:ab:e4:48:be:a7: a2:99:3b:00:31:b9:31:76:42:99:02:26:97:f3:ec:6d:04:68: 3f:f9:c9:d8:3c:72:e9:d6:88:ca:c1:74:4b:39:bc:47:36:31: 44:ae:b5:e9:00:14:3b:b9:09:23:1b:79:e6:06:7e:06:be:fa: 98:be:20:29 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUQgohnZcEu41BF/RC1sUHFW8fL2AwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEI3RTAwOTlGMjZCRUVFOTA4MjZDOUIwRTQyNDU3NUJE RTEyODQwMzAeFw0yNTEwMjAxNTI3MDdaFw0yNTEwMjMxODI4MDdaMDMxMTAvBgNV BAMTKDY0OEM3QUQzNDJBRTQ3OEYwNzFFOEY5QTRDOEE4MEJCRTA0OTFDQUYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDTEJkcbTplhF4vQphJu8bAeBWv o0S2KNp9R+cuhGsCTCoBtZQlME1FlOs0kCSOdt0YJIlL7jlhxEQR2+CB8eTwgJi3 yLdlYN+qAqVNUZhOsO0BK5Y3cjctS99Rpfnql49WEh0BGJFED8oJJq+IizaZwQmG bhQluGlIhCB/9KKleip21SJdYhRKvrbWXQEnmJwn4i4byme/NZnCqC0QKaqhuaQl MPu0LT/RjjBZ8BJe84DLhyFkRGECW/gRkRpc4VHungHXNNrI495zbeCIg5n51Cyr li0Wg+fUz4laejdPScUt1NXhN2+HZ/FLUIpujBqI283uWg7PWWxPIU3RqFVhAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUZIx600KuR48HHo+aTIqAu+BJHK8wHwYDVR0j BBgwFoAUi34AmfJr7ukIJsmw5CRXW94ShAMwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w OWE4ODg5Ny1jMzg3LTQ3MzUtYWNkOC0xZDFjNTNjZGUyNjQvMC84QjdFMDA5OUYy NkJFRUU5MDgyNkM5QjBFNDI0NTc1QkRFMTI4NDAzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOEI3RTAwOTlGMjZCRUVFOTA4MjZDOUIwRTQyNDU3NUJERTEy ODQwMy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMDlhODg4OTctYzM4Ny00NzM1LWFj ZDgtMWQxYzUzY2RlMjY0LzAvOEI3RTAwOTlGMjZCRUVFOTA4MjZDOUIwRTQyNDU3 NUJERTEyODQwMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFmAlfuHedfgVko2qWlSQXyxDj6nBm9riSv6 0NeTbY3e81MK4C/PifaNezdNW7j4+kXWQQjgpKEVb5ik26hNenOlL7a1fCH6H1n/ d6O7gntTT/gHAWXTvmnUR9LuNKyjgMO3d9y3PW9CCMFMo7foYRSSX3xwXWk/HHOQ VIS9ciMUUgbYOLdR9UqerWLF4UwqIEoHRbnWB+2DX+RjRjAGiAmPiBhMadkghn9a GCCoyJileIiu1IAtR+C2Nw0c15bJjSar5Ei+p6KZOwAxuTF2QpkCJpfz7G0EaD/5 ydg8cunWiMrBdEs5vEc2MUSutekAFDu5CSMbeeYGfga++pi+ICk= -----END CERTIFICATE-----Generated at Mon Oct 20 22:22:14 2025 by rpki-client