$ rpki-client -vvf repo-rpki.idnic.net/repo/14758e8e-49c8-48b8-bdcb-35339e2ae601/0/8F9164714A1B3B906CF8A8B371F342EBA3540CD9.mft File: 8F9164714A1B3B906CF8A8B371F342EBA3540CD9.mft (raw, json) Hash identifier: bhv/ETK4D2mblmj4IDWl53PvAkif02QxTW6bYsVgAck= Subject key identifier: 8E:C1:7D:E0:1B:1F:1C:17:D6:C9:1E:EF:A4:38:72:CB:01:87:5D:6A Authority key identifier: 8F:91:64:71:4A:1B:3B:90:6C:F8:A8:B3:71:F3:42:EB:A3:54:0C:D9 Certificate issuer: /CN=8F9164714A1B3B906CF8A8B371F342EBA3540CD9 Certificate serial: 7023A123B980BF1AFA34E55BD41BC0CB1B3869F7 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8F9164714A1B3B906CF8A8B371F342EBA3540CD9.cer Subject info access: rsync://repo-rpki.idnic.net/repo/14758e8e-49c8-48b8-bdcb-35339e2ae601/0/8F9164714A1B3B906CF8A8B371F342EBA3540CD9.mft Manifest number: 0212 Signing time: Sat 18 Oct 2025 15:40:36 +0000 Manifest this update: Sat 18 Oct 2025 15:35:36 +0000 Manifest next update: Wed 22 Oct 2025 01:09:36 +0000 Files and hashes: 1: 3130332e3138382e3131392e302f32342d3234203d3e20313439373435.roa (hash: VHhhP8m98Q6XFX6o9Io0DEj5+ACOMVpb0NESi8BC7x8=) 2: 8F9164714A1B3B906CF8A8B371F342EBA3540CD9.crl (hash: GpqQwraovYXm4JiYSsvAyZYJDei7HvBp96mn2XzO6gQ=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/14758e8e-49c8-48b8-bdcb-35339e2ae601/0/8F9164714A1B3B906CF8A8B371F342EBA3540CD9.crl rsync://repo-rpki.idnic.net/repo/14758e8e-49c8-48b8-bdcb-35339e2ae601/0/8F9164714A1B3B906CF8A8B371F342EBA3540CD9.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8F9164714A1B3B906CF8A8B371F342EBA3540CD9.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 Oct 2025 01:09:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 70:23:a1:23:b9:80:bf:1a:fa:34:e5:5b:d4:1b:c0:cb:1b:38:69:f7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8F9164714A1B3B906CF8A8B371F342EBA3540CD9 Validity Not Before: Oct 18 15:35:36 2025 GMT Not After : Oct 22 01:09:36 2025 GMT Subject: CN=8EC17DE01B1F1C17D6C91EEFA43872CB01875D6A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:f8:04:69:86:8c:9f:b7:43:93:84:b5:3d:d2: ea:79:1e:bf:8c:95:4e:7d:23:bd:d5:07:15:20:d1: 91:0c:09:e8:d4:82:c4:dc:ea:ec:b8:b4:11:cd:36: a3:39:73:8a:61:5d:dc:1a:1a:dc:17:f3:3d:01:56: 85:54:01:63:0b:de:6b:76:eb:03:df:48:ed:a4:40: 12:01:2c:13:da:36:3c:5a:db:c5:82:de:ca:80:19: ef:a4:3d:bc:af:d6:21:06:a6:c7:45:a3:c0:75:d7: 53:8d:36:c9:c9:22:33:3a:9f:5e:ed:80:c5:69:e0: 31:f0:75:b5:4e:ac:42:65:a7:47:b7:d2:57:cd:a4: e8:54:a6:ae:89:94:29:a1:0f:b4:73:d0:71:91:77: d4:84:f8:22:5b:e5:42:04:34:69:3f:e6:7c:a0:da: 8c:35:70:c8:67:2b:ef:d9:8b:a9:34:4a:36:48:8a: 2f:17:f6:3a:4a:5c:4d:05:0e:63:71:d3:94:40:d3: af:e0:16:6b:ab:4d:78:24:ea:0c:20:d3:1a:ec:5f: 9d:a2:77:0f:e9:de:8a:3d:ef:24:e8:bb:94:78:9c: 09:32:dc:a0:8c:9b:31:f7:4d:80:93:d7:11:4b:56: b9:ab:6f:56:7e:1e:e7:13:ea:73:d9:26:be:a4:f5: 63:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:C1:7D:E0:1B:1F:1C:17:D6:C9:1E:EF:A4:38:72:CB:01:87:5D:6A X509v3 Authority Key Identifier: keyid:8F:91:64:71:4A:1B:3B:90:6C:F8:A8:B3:71:F3:42:EB:A3:54:0C:D9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/14758e8e-49c8-48b8-bdcb-35339e2ae601/0/8F9164714A1B3B906CF8A8B371F342EBA3540CD9.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8F9164714A1B3B906CF8A8B371F342EBA3540CD9.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/14758e8e-49c8-48b8-bdcb-35339e2ae601/0/8F9164714A1B3B906CF8A8B371F342EBA3540CD9.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 39:0c:ee:af:ec:8f:7b:98:65:2f:6d:0d:1e:a0:1a:27:06:63: 67:a1:ae:ad:25:47:a6:12:ae:f8:04:4c:07:32:ec:a9:55:44: 03:85:6b:ec:35:d9:18:5a:ae:3a:cd:a0:4d:06:bb:88:79:21: ea:3a:c8:41:6d:e6:7d:88:ee:97:68:02:fe:ab:3d:1c:e4:55: 22:db:21:1a:57:58:82:47:2c:27:a8:be:ab:ce:ef:42:19:0e: dd:60:38:fb:94:64:81:01:d6:a9:34:c1:ca:59:2f:e6:25:74: 82:19:19:cd:c4:e1:74:78:2b:37:3d:1e:11:76:ae:05:24:d0: b5:7c:86:c1:86:8b:24:9a:43:a8:ca:aa:c7:20:2c:b1:c8:40: 9f:ff:21:64:02:26:7b:32:24:cc:b9:68:6b:57:af:a8:0b:93: 6c:2a:9e:0c:f4:68:4d:47:8d:e0:e8:fc:9f:e3:24:4e:4f:a7: 55:69:a1:a7:83:bf:ae:5e:ad:ea:f5:06:2d:f8:81:f4:e9:ef: 39:74:2b:82:68:d2:0f:ee:4a:ac:32:1c:74:d8:31:15:53:59: d8:83:1b:05:a4:ae:ba:80:e5:f3:d4:06:d3:32:0d:91:ef:60: ad:64:08:03:8b:7b:9f:be:53:fc:66:e3:7c:32:6b:df:33:b5: 01:5d:87:c3 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUcCOhI7mAvxr6NOVb1BvAyxs4afcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEY5MTY0NzE0QTFCM0I5MDZDRjhBOEIzNzFGMzQyRUJB MzU0MENEOTAeFw0yNTEwMTgxNTM1MzZaFw0yNTEwMjIwMTA5MzZaMDMxMTAvBgNV BAMTKDhFQzE3REUwMUIxRjFDMTdENkM5MUVFRkE0Mzg3MkNCMDE4NzVENkEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDZ+ARphoyft0OThLU90up5Hr+M lU59I73VBxUg0ZEMCejUgsTc6uy4tBHNNqM5c4phXdwaGtwX8z0BVoVUAWML3mt2 6wPfSO2kQBIBLBPaNjxa28WC3sqAGe+kPbyv1iEGpsdFo8B111ONNsnJIjM6n17t gMVp4DHwdbVOrEJlp0e30lfNpOhUpq6JlCmhD7Rz0HGRd9SE+CJb5UIENGk/5nyg 2ow1cMhnK+/Zi6k0SjZIii8X9jpKXE0FDmNx05RA06/gFmurTXgk6gwg0xrsX52i dw/p3oo97yTou5R4nAky3KCMmzH3TYCT1xFLVrmrb1Z+HucT6nPZJr6k9WM7AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUjsF94BsfHBfWyR7vpDhyywGHXWowHwYDVR0j BBgwFoAUj5FkcUobO5Bs+KizcfNC66NUDNkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x NDc1OGU4ZS00OWM4LTQ4YjgtYmRjYi0zNTMzOWUyYWU2MDEvMC84RjkxNjQ3MTRB MUIzQjkwNkNGOEE4QjM3MUYzNDJFQkEzNTQwQ0Q5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOEY5MTY0NzE0QTFCM0I5MDZDRjhBOEIzNzFGMzQyRUJBMzU0 MENEOS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMTQ3NThlOGUtNDljOC00OGI4LWJk Y2ItMzUzMzllMmFlNjAxLzAvOEY5MTY0NzE0QTFCM0I5MDZDRjhBOEIzNzFGMzQy RUJBMzU0MENEOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADkM7q/sj3uYZS9tDR6gGicGY2ehrq0lR6YS rvgETAcy7KlVRAOFa+w12RharjrNoE0Gu4h5Ieo6yEFt5n2I7pdoAv6rPRzkVSLb IRpXWIJHLCeovqvO70IZDt1gOPuUZIEB1qk0wcpZL+YldIIZGc3E4XR4Kzc9HhF2 rgUk0LV8hsGGiySaQ6jKqscgLLHIQJ//IWQCJnsyJMy5aGtXr6gLk2wqngz0aE1H jeDo/J/jJE5Pp1VpoaeDv65erer1Bi34gfTp7zl0K4Jo0g/uSqwyHHTYMRVTWdiD GwWkrrqA5fPUBtMyDZHvYK1kCAOLe5++U/xm43wya98ztQFdh8M= -----END CERTIFICATE-----Generated at Mon Oct 20 15:32:25 2025 by rpki-client