$ rpki-client -vvf repo-rpki.idnic.net/repo/3c86cb5d-f07d-426a-8e5e-a77a978dd2ee/0/8DA8C02216F0C7D625FEFA7EF659021425920442.mft File: 8DA8C02216F0C7D625FEFA7EF659021425920442.mft (raw, json) Hash identifier: 1GgL9OivyTeoGTmRa10AuOTagX/J5LTDnKhnCguOOJ0= Subject key identifier: 8F:C1:12:0E:17:68:82:DE:F7:4D:74:DF:E0:09:DD:64:3D:E8:58:22 Authority key identifier: 8D:A8:C0:22:16:F0:C7:D6:25:FE:FA:7E:F6:59:02:14:25:92:04:42 Certificate issuer: /CN=8DA8C02216F0C7D625FEFA7EF659021425920442 Certificate serial: 2D549263976CFED291A22DE7E1F62EB81C20875F Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8DA8C02216F0C7D625FEFA7EF659021425920442.cer Subject info access: rsync://repo-rpki.idnic.net/repo/3c86cb5d-f07d-426a-8e5e-a77a978dd2ee/0/8DA8C02216F0C7D625FEFA7EF659021425920442.mft Manifest number: 01D7 Signing time: Sat 18 Oct 2025 23:21:40 +0000 Manifest this update: Sat 18 Oct 2025 23:16:40 +0000 Manifest next update: Wed 22 Oct 2025 09:35:40 +0000 Files and hashes: 1: 8DA8C02216F0C7D625FEFA7EF659021425920442.crl (hash: +wwiroAjpOD480DCbNMJBIWkLvAL4hFJDaEXpolDKFs=) 2: 3130332e37312e32352e302f32342d3234203d3e20313530323333.roa (hash: 75IsX464I80YzdtDMOG0/64Es8A4yar1LsqWA90nFOo=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/3c86cb5d-f07d-426a-8e5e-a77a978dd2ee/0/8DA8C02216F0C7D625FEFA7EF659021425920442.crl rsync://repo-rpki.idnic.net/repo/3c86cb5d-f07d-426a-8e5e-a77a978dd2ee/0/8DA8C02216F0C7D625FEFA7EF659021425920442.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8DA8C02216F0C7D625FEFA7EF659021425920442.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 Oct 2025 09:35:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2d:54:92:63:97:6c:fe:d2:91:a2:2d:e7:e1:f6:2e:b8:1c:20:87:5f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8DA8C02216F0C7D625FEFA7EF659021425920442 Validity Not Before: Oct 18 23:16:40 2025 GMT Not After : Oct 22 09:35:40 2025 GMT Subject: CN=8FC1120E176882DEF74D74DFE009DD643DE85822 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:73:7a:16:fd:14:99:8f:8a:e7:47:c0:a8:49: 29:76:05:32:9e:35:a9:32:38:99:96:2b:07:b4:27: cc:8a:9a:dd:8d:88:d5:7c:48:7d:33:a6:78:94:3e: 01:05:cd:99:82:a4:3a:d0:56:1e:04:44:47:42:95: e7:41:fb:53:f0:cb:a0:83:df:ca:b4:fe:f6:bb:a8: 58:11:f9:0c:0b:f6:b0:12:74:85:54:30:92:3d:58: 63:ea:25:ab:96:9a:38:18:10:b4:b9:dd:89:a6:9b: 36:11:30:d1:2d:f5:8d:ac:9b:75:0d:0e:51:bc:0d: 83:a1:01:a1:a0:6c:27:f5:4b:a9:10:ab:2c:77:61: 3f:4c:3d:88:65:83:b8:e5:36:34:82:4e:34:c3:27: 3d:5f:02:b0:2d:80:20:1a:85:a0:43:9a:ee:e2:36: f7:09:6a:bd:22:45:3f:5b:02:27:91:af:e0:d0:ce: 80:4a:be:39:8a:22:31:d3:f6:e1:96:a2:52:8c:0e: 14:c5:9d:81:e4:c6:db:6c:30:ba:81:4e:7d:4f:98: e0:ab:b2:8e:0c:ef:8e:77:b7:0b:fc:30:8e:3e:06: df:5e:fb:d0:6c:1d:69:08:49:65:2c:bd:c6:af:e7: e0:f2:ca:ab:ef:53:3b:5d:fb:aa:0a:bf:ec:ce:cf: 9c:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8F:C1:12:0E:17:68:82:DE:F7:4D:74:DF:E0:09:DD:64:3D:E8:58:22 X509v3 Authority Key Identifier: keyid:8D:A8:C0:22:16:F0:C7:D6:25:FE:FA:7E:F6:59:02:14:25:92:04:42 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/3c86cb5d-f07d-426a-8e5e-a77a978dd2ee/0/8DA8C02216F0C7D625FEFA7EF659021425920442.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8DA8C02216F0C7D625FEFA7EF659021425920442.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3c86cb5d-f07d-426a-8e5e-a77a978dd2ee/0/8DA8C02216F0C7D625FEFA7EF659021425920442.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8b:86:e6:46:f6:42:07:e6:09:60:ac:7b:84:c4:8e:52:55:b7: f4:4f:5c:5a:f4:16:23:7a:f0:b5:32:45:95:16:af:6d:7c:03: cf:f6:d2:f1:5d:2f:6f:40:86:4a:41:3d:ea:92:4a:19:1e:e3: 9b:5e:36:52:2e:ce:c5:ed:57:a1:95:29:b4:45:e8:ff:3d:99: a1:55:56:ff:a8:3e:a0:13:f0:a0:f8:d3:20:b7:22:ce:d5:83: e3:59:b8:d0:af:7a:9b:08:63:45:a1:fb:32:c8:4e:72:e7:8c: 68:8d:ff:e0:a5:a0:09:5b:f5:2d:52:0a:55:52:f7:b9:a8:27: 9c:6c:76:b7:80:80:5e:77:f1:e2:f8:dc:98:67:88:5d:16:56: a3:76:f6:31:0d:9c:ed:9b:4a:6e:fb:30:45:44:ad:79:11:d4: 63:10:44:21:ea:60:77:e9:d7:1f:62:09:1a:3e:7b:82:d2:dc: 34:72:95:ab:f2:d0:27:c0:b8:dd:55:33:4b:9f:5d:95:9a:f2: 80:b8:96:56:a9:9a:71:69:4c:d1:e7:bd:c1:93:f7:4c:67:1e: 90:b0:46:8e:81:b3:42:de:00:57:ee:a9:70:e5:5f:c1:98:55: 6a:1b:59:3c:e9:35:8a:03:ad:60:1c:ac:20:46:0a:f0:7b:84: 43:5b:74:0a -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIULVSSY5ds/tKRoi3n4fYuuBwgh18wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOERBOEMwMjIxNkYwQzdENjI1RkVGQTdFRjY1OTAyMTQy NTkyMDQ0MjAeFw0yNTEwMTgyMzE2NDBaFw0yNTEwMjIwOTM1NDBaMDMxMTAvBgNV BAMTKDhGQzExMjBFMTc2ODgyREVGNzRENzRERkUwMDlERDY0M0RFODU4MjIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+c3oW/RSZj4rnR8CoSSl2BTKe NakyOJmWKwe0J8yKmt2NiNV8SH0zpniUPgEFzZmCpDrQVh4EREdCledB+1Pwy6CD 38q0/va7qFgR+QwL9rASdIVUMJI9WGPqJauWmjgYELS53YmmmzYRMNEt9Y2sm3UN DlG8DYOhAaGgbCf1S6kQqyx3YT9MPYhlg7jlNjSCTjTDJz1fArAtgCAahaBDmu7i NvcJar0iRT9bAieRr+DQzoBKvjmKIjHT9uGWolKMDhTFnYHkxttsMLqBTn1PmOCr so4M7453twv8MI4+Bt9e+9BsHWkISWUsvcav5+DyyqvvUztd+6oKv+zOz5wLAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUj8ESDhdogt73TXTf4AndZD3oWCIwHwYDVR0j BBgwFoAUjajAIhbwx9Yl/vp+9lkCFCWSBEIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z Yzg2Y2I1ZC1mMDdkLTQyNmEtOGU1ZS1hNzdhOTc4ZGQyZWUvMC84REE4QzAyMjE2 RjBDN0Q2MjVGRUZBN0VGNjU5MDIxNDI1OTIwNDQyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOERBOEMwMjIxNkYwQzdENjI1RkVGQTdFRjY1OTAyMTQyNTky MDQ0Mi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vM2M4NmNiNWQtZjA3ZC00MjZhLThl NWUtYTc3YTk3OGRkMmVlLzAvOERBOEMwMjIxNkYwQzdENjI1RkVGQTdFRjY1OTAy MTQyNTkyMDQ0Mi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIuG5kb2QgfmCWCse4TEjlJVt/RPXFr0FiN6 8LUyRZUWr218A8/20vFdL29AhkpBPeqSShke45teNlIuzsXtV6GVKbRF6P89maFV Vv+oPqAT8KD40yC3Is7Vg+NZuNCvepsIY0Wh+zLITnLnjGiN/+CloAlb9S1SClVS 97moJ5xsdreAgF538eL43JhniF0WVqN29jENnO2bSm77MEVErXkR1GMQRCHqYHfp 1x9iCRo+e4LS3DRylavy0CfAuN1VM0ufXZWa8oC4llapmnFpTNHnvcGT90xnHpCw Ro6Bs0LeAFfuqXDlX8GYVWobWTzpNYoDrWAcrCBGCvB7hENbdAo= -----END CERTIFICATE-----Generated at Mon Oct 20 19:35:28 2025 by rpki-client