$ rpki-client -vvf repo-rpki.idnic.net/repo/33dc034f-3823-48af-953d-aaa873b0fb6a/0/8B30167CDA20FE7EDCFC647AC86B14BB27E430C8.mft File: 8B30167CDA20FE7EDCFC647AC86B14BB27E430C8.mft (raw, json) Hash identifier: oBStB93yJ9LQxaqqgzHkX+yBU1hLquz0biDuVjUOWEU= Subject key identifier: D5:79:88:AE:86:25:98:CE:D0:D4:CF:B4:F0:DB:7A:96:71:C6:66:DF Authority key identifier: 8B:30:16:7C:DA:20:FE:7E:DC:FC:64:7A:C8:6B:14:BB:27:E4:30:C8 Certificate issuer: /CN=8B30167CDA20FE7EDCFC647AC86B14BB27E430C8 Certificate serial: 3B69448978DDC7B66D523199C613F3B5D3BF1F89 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/8B30167CDA20FE7EDCFC647AC86B14BB27E430C8.cer Subject info access: rsync://repo-rpki.idnic.net/repo/33dc034f-3823-48af-953d-aaa873b0fb6a/0/8B30167CDA20FE7EDCFC647AC86B14BB27E430C8.mft Manifest number: 91 Signing time: Mon 20 Oct 2025 19:11:00 +0000 Manifest this update: Mon 20 Oct 2025 19:06:00 +0000 Manifest next update: Fri 24 Oct 2025 00:36:00 +0000 Files and hashes: 1: 8B30167CDA20FE7EDCFC647AC86B14BB27E430C8.crl (hash: 4aEjv6tP9jRxxkdtS1HOZ5cmVgXZiAMpiOIk/iPki1s=) 2: 3136302e3139312e3233352e302f32342d3234203d3e20313533313439.roa (hash: Y4GKLuZ6/D/gb3+zgd/F1pZuG94pp+jZOGf3U0vPYhA=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/33dc034f-3823-48af-953d-aaa873b0fb6a/0/8B30167CDA20FE7EDCFC647AC86B14BB27E430C8.crl rsync://repo-rpki.idnic.net/repo/33dc034f-3823-48af-953d-aaa873b0fb6a/0/8B30167CDA20FE7EDCFC647AC86B14BB27E430C8.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/8B30167CDA20FE7EDCFC647AC86B14BB27E430C8.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 Oct 2025 03:04:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3b:69:44:89:78:dd:c7:b6:6d:52:31:99:c6:13:f3:b5:d3:bf:1f:89 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8B30167CDA20FE7EDCFC647AC86B14BB27E430C8 Validity Not Before: Oct 20 19:06:00 2025 GMT Not After : Oct 24 00:36:00 2025 GMT Subject: CN=D57988AE862598CED0D4CFB4F0DB7A9671C666DF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:50:b8:ad:94:cd:45:23:27:1a:8c:bc:ce:ee: 43:66:d8:24:c7:74:9e:62:33:25:43:13:e8:83:cd: 67:45:ed:25:6a:f2:59:ca:8b:12:78:ee:aa:61:90: 55:09:76:b6:82:e7:2d:de:87:e2:75:e6:77:ba:d4: 4c:e2:39:92:22:02:2f:2e:f5:f8:01:f6:ca:36:a2: 98:39:e0:9b:4e:8c:06:ac:01:0a:39:30:ca:47:ff: 9f:3d:c1:c1:68:b0:d9:da:7a:d6:ae:d7:98:c1:be: e0:58:3a:71:e0:a1:54:c4:32:01:ef:43:5b:ab:15: 3c:62:e7:14:54:81:64:6a:1c:9b:96:ec:cc:c2:2c: e3:8b:8b:c9:12:97:e7:ce:ff:c9:90:db:d3:3d:13: 07:b5:9b:43:85:2f:a2:27:52:20:1a:09:0d:0f:9f: 3f:2c:41:eb:ca:fd:94:ff:cd:10:71:b0:0f:9e:62: 5b:5d:9c:ac:b3:c1:04:34:ca:94:e9:3d:47:87:88: a5:26:a9:aa:a9:61:3d:34:fd:e4:e5:d6:5c:54:8f: a3:1a:43:42:74:2c:39:ae:5a:58:30:0e:39:4b:36: 22:2f:db:39:b0:cd:32:f0:30:67:13:a7:1d:a0:2a: af:b4:d7:7b:06:bb:f1:a3:d9:7f:af:08:24:ad:2a: ec:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:79:88:AE:86:25:98:CE:D0:D4:CF:B4:F0:DB:7A:96:71:C6:66:DF X509v3 Authority Key Identifier: keyid:8B:30:16:7C:DA:20:FE:7E:DC:FC:64:7A:C8:6B:14:BB:27:E4:30:C8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/33dc034f-3823-48af-953d-aaa873b0fb6a/0/8B30167CDA20FE7EDCFC647AC86B14BB27E430C8.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/8B30167CDA20FE7EDCFC647AC86B14BB27E430C8.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/33dc034f-3823-48af-953d-aaa873b0fb6a/0/8B30167CDA20FE7EDCFC647AC86B14BB27E430C8.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 77:af:6a:15:13:87:9b:d4:e2:34:7b:e3:23:c0:ab:66:f9:7f: 9d:a8:c0:be:9f:c8:46:e0:9a:a4:d7:9a:5c:23:28:d3:7d:55: a2:d6:4d:5f:80:31:cc:dd:7c:05:7f:e4:cf:43:bb:ec:53:6f: 2e:8a:07:15:2c:9b:83:10:57:7f:80:f5:09:ca:24:d4:4e:70: d8:89:03:4d:85:cc:e5:43:c6:f3:bf:1f:f8:0e:09:3b:1c:82: 4e:03:8f:e4:f0:b8:5a:ce:f8:e6:e5:19:40:ed:90:9c:8a:a0: 23:96:d3:df:9d:d1:5e:b7:d3:d3:22:2a:88:88:0d:69:95:19: f7:9b:8f:31:18:a8:04:8f:c8:c3:78:5b:bd:60:42:f6:00:80: ab:66:36:f5:45:75:43:24:bf:55:db:9f:42:cb:9c:7b:5c:ae: e9:06:c5:a7:9c:12:2a:89:8a:14:79:66:c3:ab:45:89:be:44: 55:6a:56:19:06:a8:05:97:ee:34:ff:bb:6b:a4:1c:d1:23:0d: 9d:95:fb:d9:00:85:69:a0:a7:e9:2b:b1:76:d1:e9:44:c6:5f: 10:45:3f:b3:d4:29:0b:e5:89:53:df:dd:ab:14:19:1c:b3:bd: 9c:14:b4:f1:e1:e1:3b:05:47:42:f2:2a:00:4f:2e:9c:1f:86: 5f:ee:db:3b -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUO2lEiXjdx7ZtUjGZxhPztdO/H4kwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEIzMDE2N0NEQTIwRkU3RURDRkM2NDdBQzg2QjE0QkIy N0U0MzBDODAeFw0yNTEwMjAxOTA2MDBaFw0yNTEwMjQwMDM2MDBaMDMxMTAvBgNV BAMTKEQ1Nzk4OEFFODYyNTk4Q0VEMEQ0Q0ZCNEYwREI3QTk2NzFDNjY2REYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC1ULitlM1FIycajLzO7kNm2CTH dJ5iMyVDE+iDzWdF7SVq8lnKixJ47qphkFUJdraC5y3eh+J15ne61EziOZIiAi8u 9fgB9so2opg54JtOjAasAQo5MMpH/589wcFosNnaetau15jBvuBYOnHgoVTEMgHv Q1urFTxi5xRUgWRqHJuW7MzCLOOLi8kSl+fO/8mQ29M9Ewe1m0OFL6InUiAaCQ0P nz8sQevK/ZT/zRBxsA+eYltdnKyzwQQ0ypTpPUeHiKUmqaqpYT00/eTl1lxUj6Ma Q0J0LDmuWlgwDjlLNiIv2zmwzTLwMGcTpx2gKq+013sGu/Gj2X+vCCStKuydAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU1XmIroYlmM7Q1M+08Nt6lnHGZt8wHwYDVR0j BBgwFoAUizAWfNog/n7c/GR6yGsUuyfkMMgwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z M2RjMDM0Zi0zODIzLTQ4YWYtOTUzZC1hYWE4NzNiMGZiNmEvMC84QjMwMTY3Q0RB MjBGRTdFRENGQzY0N0FDODZCMTRCQjI3RTQzMEM4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvOEIzMDE2N0NEQTIwRkU3RURDRkM2NDdBQzg2QjE0QkIyN0U0 MzBDOC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMzNkYzAzNGYtMzgyMy00OGFmLTk1 M2QtYWFhODczYjBmYjZhLzAvOEIzMDE2N0NEQTIwRkU3RURDRkM2NDdBQzg2QjE0 QkIyN0U0MzBDOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHevahUTh5vU4jR74yPAq2b5f52owL6fyEbg mqTXmlwjKNN9VaLWTV+AMczdfAV/5M9Du+xTby6KBxUsm4MQV3+A9QnKJNROcNiJ A02FzOVDxvO/H/gOCTscgk4Dj+TwuFrO+OblGUDtkJyKoCOW09+d0V6309MiKoiI DWmVGfebjzEYqASPyMN4W71gQvYAgKtmNvVFdUMkv1Xbn0LLnHtcrukGxaecEiqJ ihR5ZsOrRYm+RFVqVhkGqAWX7jT/u2ukHNEjDZ2V+9kAhWmgp+krsXbR6UTGXxBF P7PUKQvliVPf3asUGRyzvZwUtPHh4TsFR0LyKgBPLpwfhl/u2zs= -----END CERTIFICATE-----Generated at Tue Oct 21 00:14:41 2025 by rpki-client