$ rpki-client -vvf repo-rpki.idnic.net/repo/27d9f851-7e73-4384-950e-8be8e15fd3ee/0/8F84D6FEEAF8C5D3C5D13F101BC70B758BF50F6A.mft File: 8F84D6FEEAF8C5D3C5D13F101BC70B758BF50F6A.mft (raw, json) Hash identifier: OVVhCa5ia4N/CO4X1B38o+Jg/Znzq5EkPAgpCUwsbI8= Subject key identifier: CE:18:41:FD:DF:4A:93:73:CD:7A:3D:2E:BB:53:2F:A3:5E:FE:76:D7 Authority key identifier: 8F:84:D6:FE:EA:F8:C5:D3:C5:D1:3F:10:1B:C7:0B:75:8B:F5:0F:6A Certificate issuer: /CN=8F84D6FEEAF8C5D3C5D13F101BC70B758BF50F6A Certificate serial: 73F37E84231D75FB7140516A051B4F554B69707A Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8F84D6FEEAF8C5D3C5D13F101BC70B758BF50F6A.cer Subject info access: rsync://repo-rpki.idnic.net/repo/27d9f851-7e73-4384-950e-8be8e15fd3ee/0/8F84D6FEEAF8C5D3C5D13F101BC70B758BF50F6A.mft Manifest number: 05D7 Signing time: Sat 18 Oct 2025 15:20:37 +0000 Manifest this update: Sat 18 Oct 2025 15:15:37 +0000 Manifest next update: Tue 21 Oct 2025 23:15:37 +0000 Files and hashes: 1: 8F84D6FEEAF8C5D3C5D13F101BC70B758BF50F6A.crl (hash: BJiI5bYNuA7zAttztA6gDvlNVpq5RHSc2svYxIcqgp0=) 2: 3130332e33312e3233322e302f32322d3234203d3e203535373031.roa (hash: BrB/GW7Td9VbCbmZFNch6tbk4BKMd6sCGKbNPlrCa44=) 3: 3230322e37332e32372e302f32342d3234203d3e203535373031.roa (hash: 7FX65tSRyznIseHKWjzPuHzH3CNvHvrWJempYLyB19A=) 4: 34392e302e302e302f32322d3234203d3e203535373031.roa (hash: yzJFuCgJdtqHHRWns+YkV15nd/BuBUJW5VOi1zg7H6Q=) 5: 3230322e37332e32362e302f32342d3234203d3e20313431383932.roa (hash: QqG89TEZjAnI8K1IrPR29kJtDOMjh4sJXdy9wDe7GkQ=) 6: 3230322e37332e32342e302f32342d3234203d3e203535373031.roa (hash: 4zJcjhi99V9+23NjQKwrFy3Y4HQGoSDMxwY4qblbwdg=) 7: 3230322e37332e32352e302f32342d3234203d3e20313431383932.roa (hash: L3e7xhgbdKiD6xLSCC6o4EcC4VabYtoVoPe/Fd1r3p4=) 8: 34332e3235322e3233382e302f32342d3234203d3e203535373031.roa (hash: Nnf66JxT1+eZbCkYQn8x6cz4I9We7qQ0T90RTh7FkG0=) 9: 3130332e31382e37362e302f32322d3234203d3e203535373031.roa (hash: oa5lMgIER/j9/ZBqK2jTnvVzB4d9A9ON67O4sbQz5Lo=) 10: 34332e3235322e3233362e302f32332d3234203d3e203535373031.roa (hash: Dc8BdtAPO03Z1L5MRp5Y72lj+merY2MxA64B93hGmbo=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/27d9f851-7e73-4384-950e-8be8e15fd3ee/0/8F84D6FEEAF8C5D3C5D13F101BC70B758BF50F6A.crl rsync://repo-rpki.idnic.net/repo/27d9f851-7e73-4384-950e-8be8e15fd3ee/0/8F84D6FEEAF8C5D3C5D13F101BC70B758BF50F6A.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8F84D6FEEAF8C5D3C5D13F101BC70B758BF50F6A.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 21 Oct 2025 23:15:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 73:f3:7e:84:23:1d:75:fb:71:40:51:6a:05:1b:4f:55:4b:69:70:7a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8F84D6FEEAF8C5D3C5D13F101BC70B758BF50F6A Validity Not Before: Oct 18 15:15:37 2025 GMT Not After : Oct 21 23:15:37 2025 GMT Subject: CN=CE1841FDDF4A9373CD7A3D2EBB532FA35EFE76D7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:c5:3c:6e:f0:fc:f7:fe:e1:9d:de:09:fa:04: de:bc:dc:53:97:28:cc:ae:45:85:8e:cf:0d:cc:0c: 60:cf:97:90:82:6b:63:14:54:4f:78:18:75:de:32: 64:85:dd:a9:1e:03:c7:19:4e:3d:3c:f4:82:aa:fc: c6:08:84:3d:b0:4a:b6:2f:1d:a5:35:17:d1:5c:9e: fa:2b:6a:7a:46:7b:c7:61:a1:70:97:04:8c:3e:7f: 03:28:f0:89:a5:14:54:0a:5e:43:60:50:03:8a:fd: 3f:06:b4:63:c9:e4:8b:bc:c0:b2:3b:83:f8:93:f0: 4b:ef:1b:8a:f8:fc:41:06:ed:a5:16:04:08:57:26: a4:3b:05:c4:e6:a4:5a:fc:39:fd:69:50:78:37:d7: ca:c9:ef:cb:4a:3b:bc:3b:72:50:e9:48:3d:4e:13: a0:cb:de:79:52:0a:f5:f3:bd:15:aa:f6:76:78:72: 6e:dd:94:a2:ad:1c:02:ab:6b:2b:cc:87:82:ac:92: 23:38:74:e7:e0:fb:53:30:c8:67:44:0d:72:2b:1f: 35:9a:7a:34:a6:94:3c:d9:43:e0:f4:b0:87:90:f0: ab:d9:25:8d:f3:5c:d6:8b:12:f6:55:62:9d:85:bb: 36:3f:18:18:f7:96:59:86:0d:42:cf:65:25:a0:78: 90:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CE:18:41:FD:DF:4A:93:73:CD:7A:3D:2E:BB:53:2F:A3:5E:FE:76:D7 X509v3 Authority Key Identifier: keyid:8F:84:D6:FE:EA:F8:C5:D3:C5:D1:3F:10:1B:C7:0B:75:8B:F5:0F:6A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/27d9f851-7e73-4384-950e-8be8e15fd3ee/0/8F84D6FEEAF8C5D3C5D13F101BC70B758BF50F6A.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8F84D6FEEAF8C5D3C5D13F101BC70B758BF50F6A.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/27d9f851-7e73-4384-950e-8be8e15fd3ee/0/8F84D6FEEAF8C5D3C5D13F101BC70B758BF50F6A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ad:ff:81:17:0a:ab:27:8b:9f:e1:49:68:c3:bd:d2:74:b1:bc: 03:7f:bc:ac:b6:70:15:25:d0:17:7d:16:4a:30:15:1e:ee:d6: 44:a8:d4:c6:3a:a0:00:24:19:6a:5f:89:9f:e6:c1:d4:98:14: fa:41:0a:9c:4b:37:28:5d:ab:95:20:de:69:0d:fe:f6:17:36: 9f:59:8c:36:da:c4:90:81:17:08:f6:a6:3f:19:31:51:b3:02: d8:5a:5f:4e:f8:75:1f:a6:48:27:39:1d:95:5d:1a:6a:c7:1b: 2a:f6:f0:d0:78:c7:37:a6:af:47:e8:5e:48:91:f6:75:4f:65: a7:43:3c:f1:fd:8c:fe:98:65:72:1c:b9:bb:c6:d9:a0:49:da: c2:ef:5d:85:1a:87:65:92:b2:db:0b:8d:93:7c:da:f4:a2:a5: 7f:a8:ad:7b:9a:2a:51:f0:12:aa:7c:a9:53:cb:ab:0e:72:93: d4:ec:e2:5e:c0:38:0e:d7:33:6f:f9:a8:bb:1a:a4:5f:10:5a: 00:2d:99:30:b9:71:85:16:af:17:72:0b:10:04:d5:90:84:0a: 13:c9:a3:98:d9:bd:43:ce:e7:b9:1b:99:0c:cf:7d:d2:e6:3e: 29:e0:87:ed:ea:8d:e9:9d:0c:15:ab:98:cf:7f:a6:e7:45:92: 07:9b:ce:9e -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUc/N+hCMddftxQFFqBRtPVUtpcHowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEY4NEQ2RkVFQUY4QzVEM0M1RDEzRjEwMUJDNzBCNzU4 QkY1MEY2QTAeFw0yNTEwMTgxNTE1MzdaFw0yNTEwMjEyMzE1MzdaMDMxMTAvBgNV BAMTKENFMTg0MUZEREY0QTkzNzNDRDdBM0QyRUJCNTMyRkEzNUVGRTc2RDcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDNxTxu8Pz3/uGd3gn6BN683FOX KMyuRYWOzw3MDGDPl5CCa2MUVE94GHXeMmSF3akeA8cZTj089IKq/MYIhD2wSrYv HaU1F9FcnvoranpGe8dhoXCXBIw+fwMo8ImlFFQKXkNgUAOK/T8GtGPJ5Iu8wLI7 g/iT8EvvG4r4/EEG7aUWBAhXJqQ7BcTmpFr8Of1pUHg318rJ78tKO7w7clDpSD1O E6DL3nlSCvXzvRWq9nZ4cm7dlKKtHAKrayvMh4KskiM4dOfg+1MwyGdEDXIrHzWa ejSmlDzZQ+D0sIeQ8KvZJY3zXNaLEvZVYp2FuzY/GBj3llmGDULPZSWgeJBbAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUzhhB/d9Kk3PNej0uu1Mvo17+dtcwHwYDVR0j BBgwFoAUj4TW/ur4xdPF0T8QG8cLdYv1D2owDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y N2Q5Zjg1MS03ZTczLTQzODQtOTUwZS04YmU4ZTE1ZmQzZWUvMC84Rjg0RDZGRUVB RjhDNUQzQzVEMTNGMTAxQkM3MEI3NThCRjUwRjZBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOEY4NEQ2RkVFQUY4QzVEM0M1RDEzRjEwMUJDNzBCNzU4QkY1 MEY2QS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMjdkOWY4NTEtN2U3My00Mzg0LTk1 MGUtOGJlOGUxNWZkM2VlLzAvOEY4NEQ2RkVFQUY4QzVEM0M1RDEzRjEwMUJDNzBC NzU4QkY1MEY2QS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAK3/gRcKqyeLn+FJaMO90nSxvAN/vKy2cBUl 0Bd9FkowFR7u1kSo1MY6oAAkGWpfiZ/mwdSYFPpBCpxLNyhdq5Ug3mkN/vYXNp9Z jDbaxJCBFwj2pj8ZMVGzAthaX074dR+mSCc5HZVdGmrHGyr28NB4xzemr0foXkiR 9nVPZadDPPH9jP6YZXIcubvG2aBJ2sLvXYUah2WSstsLjZN82vSipX+orXuaKlHw Eqp8qVPLqw5yk9Ts4l7AOA7XM2/5qLsapF8QWgAtmTC5cYUWrxdyCxAE1ZCEChPJ o5jZvUPO57kbmQzPfdLmPingh+3qjemdDBWrmM9/pudFkgebzp4= -----END CERTIFICATE-----Generated at Mon Oct 20 08:07:44 2025 by rpki-client