$ rpki-client -vvf repo-rpki.idnic.net/repo/2b69822c-2e22-48be-8ba2-634f582c2ecb/0/8FB177AE83526D713C1240D5CEFAF73844F7F4E5.mft File: 8FB177AE83526D713C1240D5CEFAF73844F7F4E5.mft (raw, json) Hash identifier: CfTlOLXwj9+yYQ6hUyQ6OgPeiAGzBdZ4Tz0VWOX86Bw= Subject key identifier: AB:3B:1D:B1:92:47:BB:0C:36:3C:55:D3:72:AA:40:25:FB:31:47:D4 Authority key identifier: 8F:B1:77:AE:83:52:6D:71:3C:12:40:D5:CE:FA:F7:38:44:F7:F4:E5 Certificate issuer: /CN=8FB177AE83526D713C1240D5CEFAF73844F7F4E5 Certificate serial: 64094D9B22F643823262A00E6881D5FB755DDCA7 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8FB177AE83526D713C1240D5CEFAF73844F7F4E5.cer Subject info access: rsync://repo-rpki.idnic.net/repo/2b69822c-2e22-48be-8ba2-634f582c2ecb/0/8FB177AE83526D713C1240D5CEFAF73844F7F4E5.mft Manifest number: 051B Signing time: Sat 18 Oct 2025 06:12:12 +0000 Manifest this update: Sat 18 Oct 2025 06:07:12 +0000 Manifest next update: Tue 21 Oct 2025 17:16:12 +0000 Files and hashes: 1: 34332e3232392e32302e302f32322d3234203d3e203233393439.roa (hash: eFCW4mBhrgv32rd+aPVfExuT3QEaHahKTCkeKrhzQUs=) 2: 3230322e3135302e3132382e302f31392d3234203d3e203233393439.roa (hash: IcMuwwFWI9N+s2xXptufPfoLzyxZbJESlpNOp3hNLjk=) 3: 3130332e32342e3134382e302f32322d3234203d3e203233393439.roa (hash: ZdZBTzxEvF0Eo40CSK2hJ56qvhPrglPp9cbPLo54JU8=) 4: 323430313a653438303a3a2f33322d3438203d3e203233393439.roa (hash: q0Z2WqXpQvlzVZIU6Q59ptVgRkR649YYCAjkMQ1tqcE=) 5: 8FB177AE83526D713C1240D5CEFAF73844F7F4E5.crl (hash: 9wb8yrehD9o2KFv5nQoyBiRYzoxmEFUv/cwmXrQMVb0=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/2b69822c-2e22-48be-8ba2-634f582c2ecb/0/8FB177AE83526D713C1240D5CEFAF73844F7F4E5.crl rsync://repo-rpki.idnic.net/repo/2b69822c-2e22-48be-8ba2-634f582c2ecb/0/8FB177AE83526D713C1240D5CEFAF73844F7F4E5.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8FB177AE83526D713C1240D5CEFAF73844F7F4E5.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 21 Oct 2025 17:16:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 64:09:4d:9b:22:f6:43:82:32:62:a0:0e:68:81:d5:fb:75:5d:dc:a7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8FB177AE83526D713C1240D5CEFAF73844F7F4E5 Validity Not Before: Oct 18 06:07:12 2025 GMT Not After : Oct 21 17:16:12 2025 GMT Subject: CN=AB3B1DB19247BB0C363C55D372AA4025FB3147D4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:f9:fe:73:3c:1e:40:02:4a:cb:d6:7b:60:d8: a0:21:99:4e:66:89:fd:80:97:fe:71:21:35:cf:15: ca:02:73:ee:eb:12:2b:ff:6d:69:02:96:94:5a:56: f8:b6:95:8f:79:bc:1c:f1:bb:cf:54:68:f5:c2:f8: ac:ab:fd:c9:5c:65:bb:ba:e2:27:b8:fc:45:b2:43: 9e:59:63:cb:a2:ed:21:64:69:9e:7e:d9:87:df:cb: 47:4e:f3:10:3a:49:67:c7:1f:9e:62:7c:25:26:ff: 14:03:2d:f5:c5:ee:2b:7f:95:59:be:41:f8:9e:44: 09:a5:56:b0:59:80:09:1c:60:fc:7d:e1:81:5d:1b: 4a:10:61:14:91:e9:10:c6:c0:d2:97:1e:93:88:67: b1:00:be:c5:e6:78:a5:3d:69:69:ec:3e:ee:8c:4d: 3e:99:11:d7:55:be:d2:ca:8c:b7:0a:3e:bc:d0:2a: 4f:dd:15:fe:f3:da:21:18:7d:0c:bc:83:7e:11:bc: 5b:14:be:76:bf:59:87:2a:48:64:25:43:dc:d6:22: 57:7f:a4:db:26:27:74:16:f8:f2:c2:4c:0c:cf:40: de:55:d1:77:c4:c9:16:8d:c1:5f:db:90:fc:41:99: 3a:95:ae:f6:fe:d6:44:d3:e8:69:90:29:62:21:97: 09:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AB:3B:1D:B1:92:47:BB:0C:36:3C:55:D3:72:AA:40:25:FB:31:47:D4 X509v3 Authority Key Identifier: keyid:8F:B1:77:AE:83:52:6D:71:3C:12:40:D5:CE:FA:F7:38:44:F7:F4:E5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/2b69822c-2e22-48be-8ba2-634f582c2ecb/0/8FB177AE83526D713C1240D5CEFAF73844F7F4E5.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8FB177AE83526D713C1240D5CEFAF73844F7F4E5.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/2b69822c-2e22-48be-8ba2-634f582c2ecb/0/8FB177AE83526D713C1240D5CEFAF73844F7F4E5.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 20:78:5a:aa:90:9c:bc:7f:cf:70:77:16:ea:13:79:cd:05:cb: b6:6f:d4:0b:f7:f5:4f:25:62:e8:42:ca:d8:27:4c:22:4a:78: f0:5b:42:d7:67:72:ad:d9:14:22:77:8e:e3:3e:93:b1:20:e0: 83:93:cb:38:7c:2f:e6:dc:da:e9:64:94:40:20:3b:fc:bd:74: 84:36:db:af:fd:90:53:a8:4e:05:9b:bc:cc:d5:95:a5:f5:b3: ca:d7:1c:b1:03:a5:d9:49:5f:77:b0:5d:62:72:8c:ed:be:64: 0f:0b:7c:a1:e6:97:6d:89:e9:a3:0a:31:cd:65:0c:4f:0c:2b: c0:bc:77:0f:2f:b3:77:8f:f3:ae:be:1d:21:96:96:56:56:b9: 10:0c:8d:fc:08:c9:13:d9:a3:96:b8:88:26:c4:c2:3c:df:51: 82:52:b4:d8:f7:05:1c:4d:a9:5b:e2:39:15:0e:99:17:97:b9: 70:e7:37:89:12:fc:90:33:7f:ee:c4:bf:10:86:a0:9a:26:76: b7:86:40:19:58:9c:06:db:33:ab:81:f3:f7:4f:5c:63:5c:b0: dd:95:b1:20:46:3b:b4:41:67:e3:5e:84:15:d9:5f:38:cc:fa: 4c:90:45:c4:1f:8f:28:54:ea:41:79:40:5b:c9:ea:47:7a:50: 42:2b:75:5d -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUZAlNmyL2Q4IyYqAOaIHV+3Vd3KcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEZCMTc3QUU4MzUyNkQ3MTNDMTI0MEQ1Q0VGQUY3Mzg0 NEY3RjRFNTAeFw0yNTEwMTgwNjA3MTJaFw0yNTEwMjExNzE2MTJaMDMxMTAvBgNV BAMTKEFCM0IxREIxOTI0N0JCMEMzNjNDNTVEMzcyQUE0MDI1RkIzMTQ3RDQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC0+f5zPB5AAkrL1ntg2KAhmU5m if2Al/5xITXPFcoCc+7rEiv/bWkClpRaVvi2lY95vBzxu89UaPXC+Kyr/clcZbu6 4ie4/EWyQ55ZY8ui7SFkaZ5+2Yffy0dO8xA6SWfHH55ifCUm/xQDLfXF7it/lVm+ QfieRAmlVrBZgAkcYPx94YFdG0oQYRSR6RDGwNKXHpOIZ7EAvsXmeKU9aWnsPu6M TT6ZEddVvtLKjLcKPrzQKk/dFf7z2iEYfQy8g34RvFsUvna/WYcqSGQlQ9zWIld/ pNsmJ3QW+PLCTAzPQN5V0XfEyRaNwV/bkPxBmTqVrvb+1kTT6GmQKWIhlwlDAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUqzsdsZJHuww2PFXTcqpAJfsxR9QwHwYDVR0j BBgwFoAUj7F3roNSbXE8EkDVzvr3OET39OUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y YjY5ODIyYy0yZTIyLTQ4YmUtOGJhMi02MzRmNTgyYzJlY2IvMC84RkIxNzdBRTgz NTI2RDcxM0MxMjQwRDVDRUZBRjczODQ0RjdGNEU1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOEZCMTc3QUU4MzUyNkQ3MTNDMTI0MEQ1Q0VGQUY3Mzg0NEY3 RjRFNS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMmI2OTgyMmMtMmUyMi00OGJlLThi YTItNjM0ZjU4MmMyZWNiLzAvOEZCMTc3QUU4MzUyNkQ3MTNDMTI0MEQ1Q0VGQUY3 Mzg0NEY3RjRFNS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACB4WqqQnLx/z3B3FuoTec0Fy7Zv1Av39U8l YuhCytgnTCJKePBbQtdncq3ZFCJ3juM+k7Eg4IOTyzh8L+bc2ulklEAgO/y9dIQ2 26/9kFOoTgWbvMzVlaX1s8rXHLEDpdlJX3ewXWJyjO2+ZA8LfKHml22J6aMKMc1l DE8MK8C8dw8vs3eP866+HSGWllZWuRAMjfwIyRPZo5a4iCbEwjzfUYJStNj3BRxN qVviORUOmReXuXDnN4kS/JAzf+7EvxCGoJomdreGQBlYnAbbM6uB8/dPXGNcsN2V sSBGO7RBZ+NehBXZXzjM+kyQRcQfjyhU6kF5QFvJ6kd6UEIrdV0= -----END CERTIFICATE-----Generated at Mon Oct 20 17:01:12 2025 by rpki-client