$ rpki-client -vvf repo-rpki.idnic.net/repo/2d2a5b51-bc00-4d6b-8761-c7d0d3f6de12/0/8C5FA2EBD7AF40393883FB08E71BDF41AAE20F57.mft File: 8C5FA2EBD7AF40393883FB08E71BDF41AAE20F57.mft (raw, json) Hash identifier: 3cAxfGMsWsBm18wMoA6kNOIOuVPNitmXBGsRsfpxFp0= Subject key identifier: 2A:07:26:28:62:10:45:43:EC:A7:A0:86:B4:B1:FE:BA:6C:F1:53:59 Authority key identifier: 8C:5F:A2:EB:D7:AF:40:39:38:83:FB:08:E7:1B:DF:41:AA:E2:0F:57 Certificate issuer: /CN=8C5FA2EBD7AF40393883FB08E71BDF41AAE20F57 Certificate serial: 3EDE13BC6EE09D881B85B71C2CD95A4AD0611F6F Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8C5FA2EBD7AF40393883FB08E71BDF41AAE20F57.cer Subject info access: rsync://repo-rpki.idnic.net/repo/2d2a5b51-bc00-4d6b-8761-c7d0d3f6de12/0/8C5FA2EBD7AF40393883FB08E71BDF41AAE20F57.mft Manifest number: 04C3 Signing time: Sat 18 Oct 2025 22:01:25 +0000 Manifest this update: Sat 18 Oct 2025 21:56:25 +0000 Manifest next update: Wed 22 Oct 2025 03:24:25 +0000 Files and hashes: 1: 323430333a333163303a3a2f33322d3332203d3e20313337333736.roa (hash: ZFgZf5/tUMHm0Xvm8MvmyqUsY/m95WPUFwA/Bk3NXco=) 2: 3130332e3131382e3132342e302f32322d3234203d3e20313337333736.roa (hash: GgQGIVctlCvNlOfS2rEwMFV2kj5ohQAxfF74xcz3/1E=) 3: 8C5FA2EBD7AF40393883FB08E71BDF41AAE20F57.crl (hash: 5srxu8dXFSVWJi3ENf7CzBjDJbK3BK7yX33HniIZogA=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/2d2a5b51-bc00-4d6b-8761-c7d0d3f6de12/0/8C5FA2EBD7AF40393883FB08E71BDF41AAE20F57.crl rsync://repo-rpki.idnic.net/repo/2d2a5b51-bc00-4d6b-8761-c7d0d3f6de12/0/8C5FA2EBD7AF40393883FB08E71BDF41AAE20F57.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8C5FA2EBD7AF40393883FB08E71BDF41AAE20F57.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 Oct 2025 03:24:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3e:de:13:bc:6e:e0:9d:88:1b:85:b7:1c:2c:d9:5a:4a:d0:61:1f:6f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8C5FA2EBD7AF40393883FB08E71BDF41AAE20F57 Validity Not Before: Oct 18 21:56:25 2025 GMT Not After : Oct 22 03:24:25 2025 GMT Subject: CN=2A07262862104543ECA7A086B4B1FEBA6CF15359 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:fe:b0:28:25:c9:0b:1a:cc:fd:ae:18:8c:28:c6: be:c8:85:f0:0c:bf:7e:26:91:f5:4f:4a:ff:e7:b1: 0c:5b:6f:82:13:7b:4a:ca:8f:94:b7:25:10:4c:f8: bf:02:68:df:3c:93:7f:2b:22:b0:1a:2b:28:2c:4b: 95:ec:fb:b4:a3:b5:a4:d2:84:76:09:ad:3f:60:4a: a3:f7:70:d4:a3:1e:2d:70:61:af:69:0a:fa:74:69: 16:8f:0c:44:cd:88:d7:a1:55:af:f4:02:96:e1:aa: 28:b0:6a:32:94:23:8b:a1:43:a7:3d:a9:5b:69:e9: 39:96:40:c9:9d:89:b1:73:9b:77:c3:f6:64:63:a0: fb:b1:b6:f9:80:2f:0f:b2:39:ab:bc:ba:2e:47:33: f4:ea:6c:02:0f:9a:fe:7a:d0:42:d9:a9:f9:ab:92: f2:f3:17:1b:53:c3:bb:73:30:d4:af:87:86:38:4d: ce:8e:88:3f:41:e0:17:1d:f0:89:e2:11:06:c8:30: df:b7:d2:39:55:e0:83:11:27:34:4b:c1:14:6c:56: fa:e0:80:3d:13:ab:16:b2:1a:c9:81:1e:f1:60:ef: 91:44:96:f4:96:c6:f4:75:27:ef:b6:6d:b6:03:84: 35:f3:83:fe:30:d2:f5:2b:b1:d1:97:4c:4a:c8:31: ab:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:07:26:28:62:10:45:43:EC:A7:A0:86:B4:B1:FE:BA:6C:F1:53:59 X509v3 Authority Key Identifier: keyid:8C:5F:A2:EB:D7:AF:40:39:38:83:FB:08:E7:1B:DF:41:AA:E2:0F:57 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/2d2a5b51-bc00-4d6b-8761-c7d0d3f6de12/0/8C5FA2EBD7AF40393883FB08E71BDF41AAE20F57.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8C5FA2EBD7AF40393883FB08E71BDF41AAE20F57.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/2d2a5b51-bc00-4d6b-8761-c7d0d3f6de12/0/8C5FA2EBD7AF40393883FB08E71BDF41AAE20F57.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 35:15:b0:44:07:0b:69:62:7b:52:b3:2f:b4:8e:20:f8:74:a6: 38:9e:66:52:a2:3d:2d:cd:bb:4b:64:3a:89:43:2d:25:fd:19: 51:9b:e2:eb:42:3e:fc:94:15:e5:67:b7:f4:ec:fe:7d:db:29: 68:ab:1a:74:eb:e6:ee:d9:9f:f8:24:be:2b:41:23:b1:c4:51: 82:09:24:e8:9d:73:cc:7f:d4:1b:c4:8b:86:1a:f9:da:87:5c: 5a:ec:4f:29:48:fd:e4:e0:5f:a3:79:26:08:34:2a:3e:35:1c: ed:f8:38:51:49:f3:19:9a:83:b2:aa:7d:e7:56:5c:47:20:39: 73:41:bd:aa:5f:22:33:7f:68:61:4c:c3:7f:59:c3:71:e3:27: 43:34:88:a7:08:1b:71:05:8c:e8:b0:7e:af:42:75:f6:02:77: 33:23:ef:67:c0:24:48:f6:fa:83:2a:92:2d:47:d1:58:99:1a: d3:5c:27:b8:08:66:b3:cf:1e:24:39:e3:b5:25:7d:1b:08:16: b1:76:2d:eb:e2:77:48:fd:81:90:d6:34:bf:78:26:6b:20:ba: 65:12:15:a9:3d:63:e6:f2:ba:b8:26:49:71:04:78:82:8c:c8: 63:c2:6b:ed:d7:22:a3:55:a1:4e:07:be:6e:5a:59:84:f7:83: 2d:e4:15:65 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUPt4TvG7gnYgbhbccLNlaStBhH28wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEM1RkEyRUJEN0FGNDAzOTM4ODNGQjA4RTcxQkRGNDFB QUUyMEY1NzAeFw0yNTEwMTgyMTU2MjVaFw0yNTEwMjIwMzI0MjVaMDMxMTAvBgNV BAMTKDJBMDcyNjI4NjIxMDQ1NDNFQ0E3QTA4NkI0QjFGRUJBNkNGMTUzNTkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD+sCglyQsazP2uGIwoxr7IhfAM v34mkfVPSv/nsQxbb4ITe0rKj5S3JRBM+L8CaN88k38rIrAaKygsS5Xs+7SjtaTS hHYJrT9gSqP3cNSjHi1wYa9pCvp0aRaPDETNiNehVa/0ApbhqiiwajKUI4uhQ6c9 qVtp6TmWQMmdibFzm3fD9mRjoPuxtvmALw+yOau8ui5HM/TqbAIPmv560ELZqfmr kvLzFxtTw7tzMNSvh4Y4Tc6OiD9B4Bcd8IniEQbIMN+30jlV4IMRJzRLwRRsVvrg gD0TqxayGsmBHvFg75FElvSWxvR1J++2bbYDhDXzg/4w0vUrsdGXTErIMatPAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUKgcmKGIQRUPsp6CGtLH+umzxU1kwHwYDVR0j BBgwFoAUjF+i69evQDk4g/sI5xvfQariD1cwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y ZDJhNWI1MS1iYzAwLTRkNmItODc2MS1jN2QwZDNmNmRlMTIvMC84QzVGQTJFQkQ3 QUY0MDM5Mzg4M0ZCMDhFNzFCREY0MUFBRTIwRjU3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOEM1RkEyRUJEN0FGNDAzOTM4ODNGQjA4RTcxQkRGNDFBQUUy MEY1Ny5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMmQyYTViNTEtYmMwMC00ZDZiLTg3 NjEtYzdkMGQzZjZkZTEyLzAvOEM1RkEyRUJEN0FGNDAzOTM4ODNGQjA4RTcxQkRG NDFBQUUyMEY1Ny5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADUVsEQHC2lie1KzL7SOIPh0pjieZlKiPS3N u0tkOolDLSX9GVGb4utCPvyUFeVnt/Ts/n3bKWirGnTr5u7Zn/gkvitBI7HEUYIJ JOidc8x/1BvEi4Ya+dqHXFrsTylI/eTgX6N5Jgg0Kj41HO34OFFJ8xmag7KqfedW XEcgOXNBvapfIjN/aGFMw39Zw3HjJ0M0iKcIG3EFjOiwfq9CdfYCdzMj72fAJEj2 +oMqki1H0ViZGtNcJ7gIZrPPHiQ547UlfRsIFrF2Levid0j9gZDWNL94JmsgumUS Fak9Y+byurgmSXEEeIKMyGPCa+3XIqNVoU4Hvm5aWYT3gy3kFWU= -----END CERTIFICATE-----Generated at Mon Oct 20 15:02:33 2025 by rpki-client