$ rpki-client -vvf repo-rpki.idnic.net/repo/4157c9ac-52db-4dba-ac77-845e2ddd8879/0/8D7AD1F796C88BCD49E1BEC42851AFA58BD78588.mft File: 8D7AD1F796C88BCD49E1BEC42851AFA58BD78588.mft (raw, json) Hash identifier: Bl0IHoBPz3TbOgstWpbtWNyC9j88R96VYgdfdHuBu/4= Subject key identifier: 71:F8:16:AF:0F:26:51:CB:28:34:8E:BD:D8:03:3D:C4:52:8E:D6:21 Authority key identifier: 8D:7A:D1:F7:96:C8:8B:CD:49:E1:BE:C4:28:51:AF:A5:8B:D7:85:88 Certificate issuer: /CN=8D7AD1F796C88BCD49E1BEC42851AFA58BD78588 Certificate serial: 10E14E0CA0F5CD867548D66B5BB97D78EC30CD90 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8D7AD1F796C88BCD49E1BEC42851AFA58BD78588.cer Subject info access: rsync://repo-rpki.idnic.net/repo/4157c9ac-52db-4dba-ac77-845e2ddd8879/0/8D7AD1F796C88BCD49E1BEC42851AFA58BD78588.mft Manifest number: 01A1 Signing time: Sat 18 Oct 2025 18:31:40 +0000 Manifest this update: Sat 18 Oct 2025 18:26:40 +0000 Manifest next update: Wed 22 Oct 2025 00:04:40 +0000 Files and hashes: 1: 3130332e3130312e39362e302f32332d3233203d3e20313530393430.roa (hash: lwBU7RZrxpXV+tNL6ldwUUEfAC8x198/UcNXhcVqIDE=) 2: 3130332e3130312e39362e302f32342d3234203d3e20313530393430.roa (hash: S5y/AAm56aWRItZwk28UKrK77+5w1nu1pwxZLQMOads=) 3: 8D7AD1F796C88BCD49E1BEC42851AFA58BD78588.crl (hash: avge+mmwd5X7HHSqR8XaoI6HdSyaw3u5fPWF8ei5EwA=) 4: 3130332e3130312e39372e302f32342d3234203d3e20313530393430.roa (hash: aTXk/DsjXzFyIklyAQb47qbqcaGolhR0lzBTP747Tls=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/4157c9ac-52db-4dba-ac77-845e2ddd8879/0/8D7AD1F796C88BCD49E1BEC42851AFA58BD78588.crl rsync://repo-rpki.idnic.net/repo/4157c9ac-52db-4dba-ac77-845e2ddd8879/0/8D7AD1F796C88BCD49E1BEC42851AFA58BD78588.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8D7AD1F796C88BCD49E1BEC42851AFA58BD78588.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 Oct 2025 00:04:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10:e1:4e:0c:a0:f5:cd:86:75:48:d6:6b:5b:b9:7d:78:ec:30:cd:90 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8D7AD1F796C88BCD49E1BEC42851AFA58BD78588 Validity Not Before: Oct 18 18:26:40 2025 GMT Not After : Oct 22 00:04:40 2025 GMT Subject: CN=71F816AF0F2651CB28348EBDD8033DC4528ED621 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f1:d0:ea:25:5f:fc:18:f1:3a:50:bb:61:61:76: 22:e4:e0:ec:61:68:ac:44:3c:f8:52:74:5c:89:28: 99:16:43:27:9e:da:0d:c4:e7:1d:07:d5:3d:69:13: 75:a3:e4:d9:aa:32:b9:4b:ba:16:9b:ce:e1:9e:63: 62:7d:55:ce:48:c0:0e:25:6d:d4:00:15:9a:02:9d: e7:70:82:af:b5:df:fe:d2:53:56:75:17:31:08:7d: 3f:fd:2c:2b:43:05:1b:b4:0c:3f:66:c3:1e:bf:88: b0:74:4b:84:f7:83:52:1f:cc:b6:80:8a:5d:d0:d3: 7f:91:1c:9e:4d:09:60:f9:1f:c5:ce:f9:2c:47:58: 30:5a:dc:25:77:76:96:91:3b:ee:c8:1b:36:12:6f: 3e:90:91:36:ba:16:c9:21:8b:34:ab:13:72:3b:fd: 32:42:ae:40:43:6b:0f:53:ec:ae:d0:4d:bf:70:b1: 7c:9c:02:d3:87:8a:82:c3:57:1d:29:85:82:27:20: b7:09:2d:35:f7:69:df:5b:e4:20:49:0e:e2:9a:18: ac:e6:81:b5:13:74:36:9c:28:67:c5:40:d3:e8:ce: 12:18:0b:28:f4:f1:3d:3e:d8:39:26:12:8c:48:95: d8:c6:32:c6:8b:6f:61:5d:7b:cd:9d:03:96:06:48: 54:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:F8:16:AF:0F:26:51:CB:28:34:8E:BD:D8:03:3D:C4:52:8E:D6:21 X509v3 Authority Key Identifier: keyid:8D:7A:D1:F7:96:C8:8B:CD:49:E1:BE:C4:28:51:AF:A5:8B:D7:85:88 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/4157c9ac-52db-4dba-ac77-845e2ddd8879/0/8D7AD1F796C88BCD49E1BEC42851AFA58BD78588.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8D7AD1F796C88BCD49E1BEC42851AFA58BD78588.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/4157c9ac-52db-4dba-ac77-845e2ddd8879/0/8D7AD1F796C88BCD49E1BEC42851AFA58BD78588.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 79:2f:86:60:51:f0:20:ce:49:f3:5c:29:b8:c8:b9:c8:aa:ad: 45:49:06:a7:eb:b9:f7:e0:35:49:ed:31:9a:e3:c9:04:78:a7: 5c:38:dc:c5:9b:01:ab:11:c6:32:a2:b7:51:ac:84:6c:f5:c2: c0:86:80:0e:8b:b7:ee:78:86:94:c7:4e:aa:9a:c4:aa:96:90: 84:57:65:3c:d2:63:73:92:ff:7f:03:45:85:50:c2:d4:9c:3d: 0c:4f:17:a0:03:aa:c7:1d:68:a6:3e:e1:f5:09:f9:be:2c:c1: 43:b3:6e:1e:2a:66:71:86:cf:c0:81:50:0c:b6:dc:60:78:84: e7:59:4e:b8:18:62:21:2a:c1:02:4e:4b:6e:b1:92:d6:cb:f8: b2:70:ac:4a:e5:84:06:27:2f:90:67:c2:9b:9f:cc:5f:bc:eb: 66:e4:ba:dc:e8:b6:d8:36:25:58:c9:c5:e9:50:95:51:d0:b0: ad:07:08:64:4d:db:a5:97:f5:af:9b:a9:32:b7:cb:65:de:05: bd:f7:cb:18:e8:75:f5:f1:f2:35:b0:fc:cb:8c:3c:93:03:25: dd:f4:e0:23:5e:dd:c9:23:1a:93:b1:94:a4:53:b1:0a:51:b8: 23:d5:ec:c8:02:1e:55:ba:26:d0:52:bb:80:11:57:c0:bc:7d: 74:09:13:c4 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUEOFODKD1zYZ1SNZrW7l9eOwwzZAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEQ3QUQxRjc5NkM4OEJDRDQ5RTFCRUM0Mjg1MUFGQTU4 QkQ3ODU4ODAeFw0yNTEwMTgxODI2NDBaFw0yNTEwMjIwMDA0NDBaMDMxMTAvBgNV BAMTKDcxRjgxNkFGMEYyNjUxQ0IyODM0OEVCREQ4MDMzREM0NTI4RUQ2MjEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDx0OolX/wY8TpQu2FhdiLk4Oxh aKxEPPhSdFyJKJkWQyee2g3E5x0H1T1pE3Wj5NmqMrlLuhabzuGeY2J9Vc5IwA4l bdQAFZoCnedwgq+13/7SU1Z1FzEIfT/9LCtDBRu0DD9mwx6/iLB0S4T3g1IfzLaA il3Q03+RHJ5NCWD5H8XO+SxHWDBa3CV3dpaRO+7IGzYSbz6QkTa6FskhizSrE3I7 /TJCrkBDaw9T7K7QTb9wsXycAtOHioLDVx0phYInILcJLTX3ad9b5CBJDuKaGKzm gbUTdDacKGfFQNPozhIYCyj08T0+2DkmEoxIldjGMsaLb2Fde82dA5YGSFS1AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUcfgWrw8mUcsoNI692AM9xFKO1iEwHwYDVR0j BBgwFoAUjXrR95bIi81J4b7EKFGvpYvXhYgwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 MTU3YzlhYy01MmRiLTRkYmEtYWM3Ny04NDVlMmRkZDg4NzkvMC84RDdBRDFGNzk2 Qzg4QkNENDlFMUJFQzQyODUxQUZBNThCRDc4NTg4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOEQ3QUQxRjc5NkM4OEJDRDQ5RTFCRUM0Mjg1MUFGQTU4QkQ3 ODU4OC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNDE1N2M5YWMtNTJkYi00ZGJhLWFj NzctODQ1ZTJkZGQ4ODc5LzAvOEQ3QUQxRjc5NkM4OEJDRDQ5RTFCRUM0Mjg1MUFG QTU4QkQ3ODU4OC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHkvhmBR8CDOSfNcKbjIuciqrUVJBqfruffg NUntMZrjyQR4p1w43MWbAasRxjKit1GshGz1wsCGgA6Lt+54hpTHTqqaxKqWkIRX ZTzSY3OS/38DRYVQwtScPQxPF6ADqscdaKY+4fUJ+b4swUOzbh4qZnGGz8CBUAy2 3GB4hOdZTrgYYiEqwQJOS26xktbL+LJwrErlhAYnL5BnwpufzF+862bkutzottg2 JVjJxelQlVHQsK0HCGRN26WX9a+bqTK3y2XeBb33yxjodfXx8jWw/MuMPJMDJd30 4CNe3ckjGpOxlKRTsQpRuCPV7MgCHlW6JtBSu4ARV8C8fXQJE8Q= -----END CERTIFICATE-----Generated at Mon Oct 20 13:45:31 2025 by rpki-client