$ rpki-client -vvf repo-rpki.idnic.net/repo/44b27303-9e3d-4d42-af25-6a0f11808f27/0/8C888E996588527BC5EF8ABD293676C3463A1A22.mft File: 8C888E996588527BC5EF8ABD293676C3463A1A22.mft (raw, json) Hash identifier: u0CW0jFX5X8QeOzB8fANwDe7zQRFsPGymdbIG13KZqw= Subject key identifier: 92:4D:D5:31:5F:BC:2C:D6:19:80:8F:97:A7:A2:13:55:AA:6B:91:C1 Authority key identifier: 8C:88:8E:99:65:88:52:7B:C5:EF:8A:BD:29:36:76:C3:46:3A:1A:22 Certificate issuer: /CN=8C888E996588527BC5EF8ABD293676C3463A1A22 Certificate serial: 563FF69CFB079DE5D790D334B84F70B5AF36CA2F Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8C888E996588527BC5EF8ABD293676C3463A1A22.cer Subject info access: rsync://repo-rpki.idnic.net/repo/44b27303-9e3d-4d42-af25-6a0f11808f27/0/8C888E996588527BC5EF8ABD293676C3463A1A22.mft Manifest number: 024A Signing time: Mon 20 Oct 2025 05:51:36 +0000 Manifest this update: Mon 20 Oct 2025 05:46:36 +0000 Manifest next update: Thu 23 Oct 2025 08:26:36 +0000 Files and hashes: 1: 3130332e39372e362e302f32342d3234203d3e20313336313237.roa (hash: TtoAt5XF5k/VvO7s/IJgg3qpfYPoYBpMQ3uw/EaHESY=) 2: 3130332e39372e352e302f32342d3234203d3e20313336313237.roa (hash: WKEiaTlm3HRRnumgx69gRc0fNHyTzs1yLm0l6WuuEfo=) 3: 3130332e39372e342e302f32322d3234203d3e20313336313237.roa (hash: Fuo7Zv6Qy+uY4bdbE0UwMy6jWa9ZEF+DnD6ctpiueL4=) 4: 323430313a383034303a3a2f33322d3332203d3e20313336313237.roa (hash: UuD6w5FXiXpEb3WA0CSDEKfMUpwCYuxys7TXvAGTTaE=) 5: 3130332e39372e342e302f32342d3234203d3e20313336313237.roa (hash: oyn1Uio0Qvr9sm/GPuAcnqkMPKHi72fQr6RvUU829kw=) 6: 8C888E996588527BC5EF8ABD293676C3463A1A22.crl (hash: NjJwxWYfNsBJhvtcLiJW3+YFXKwbe6yosBUkmxIo8Eg=) 7: 3130332e39372e372e302f32342d3234203d3e20313336313237.roa (hash: Qqqk2T1cKP78pedxPHc7hCxMQjf7DnhA0KfJusumKno=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/44b27303-9e3d-4d42-af25-6a0f11808f27/0/8C888E996588527BC5EF8ABD293676C3463A1A22.crl rsync://repo-rpki.idnic.net/repo/44b27303-9e3d-4d42-af25-6a0f11808f27/0/8C888E996588527BC5EF8ABD293676C3463A1A22.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8C888E996588527BC5EF8ABD293676C3463A1A22.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 Oct 2025 08:26:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 56:3f:f6:9c:fb:07:9d:e5:d7:90:d3:34:b8:4f:70:b5:af:36:ca:2f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8C888E996588527BC5EF8ABD293676C3463A1A22 Validity Not Before: Oct 20 05:46:36 2025 GMT Not After : Oct 23 08:26:36 2025 GMT Subject: CN=924DD5315FBC2CD619808F97A7A21355AA6B91C1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f2:d4:78:3d:18:bf:57:02:58:2b:c3:77:ef:d1: 81:d8:f8:5f:fc:bd:0a:de:28:52:74:c0:c9:3b:c3: 6a:5b:ad:eb:d9:15:a0:79:bf:fc:cd:4f:5d:aa:6d: dd:23:92:31:b1:f6:86:a7:c6:ce:b7:de:94:5f:e7: b5:2a:16:dc:2a:cf:bc:9b:cb:6f:27:fb:78:f0:a4: bc:bd:4f:ef:71:91:77:00:c6:ca:95:d0:71:e0:8b: 28:ea:3a:98:84:5a:77:46:6f:4d:4c:6f:4a:5b:7f: 82:f7:92:b7:ac:74:39:21:ab:a8:8d:2f:27:36:00: f9:bc:6c:37:a3:4d:f8:33:c5:b2:a8:a1:5c:d5:05: 58:43:d6:8c:de:42:ce:8a:cc:a9:f0:c0:89:b7:4a: a9:b4:79:34:16:93:b6:5a:82:d2:0c:03:5c:1c:8d: b3:20:f9:f2:31:84:2f:4f:a0:20:dc:cf:ee:c1:ae: 23:a7:49:79:dd:b4:f3:99:dc:c1:8d:c3:8d:ca:14: b3:1c:9e:ee:14:6b:81:bf:a8:8a:7c:81:ec:e1:30: d3:89:6d:25:8f:5c:6b:51:48:0f:28:ff:27:cb:64: 94:d7:3b:9e:08:8d:17:69:d0:3d:ce:3c:4e:77:79: 57:04:a4:0e:8c:ae:0c:56:02:5a:54:1f:54:37:85: a8:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 92:4D:D5:31:5F:BC:2C:D6:19:80:8F:97:A7:A2:13:55:AA:6B:91:C1 X509v3 Authority Key Identifier: keyid:8C:88:8E:99:65:88:52:7B:C5:EF:8A:BD:29:36:76:C3:46:3A:1A:22 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/44b27303-9e3d-4d42-af25-6a0f11808f27/0/8C888E996588527BC5EF8ABD293676C3463A1A22.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8C888E996588527BC5EF8ABD293676C3463A1A22.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/44b27303-9e3d-4d42-af25-6a0f11808f27/0/8C888E996588527BC5EF8ABD293676C3463A1A22.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption d4:26:6b:7a:26:b2:74:d2:f2:78:84:23:22:10:80:57:74:97: 88:a7:17:40:54:79:f7:43:ac:81:98:d4:82:c9:7c:97:dc:66: c0:08:70:10:46:e9:a5:b6:b1:f2:34:1c:a7:f7:d4:45:ba:e9: 3f:ce:02:23:ff:90:93:49:95:2d:28:90:f9:ff:3f:ef:b5:6d: 0b:8f:a1:e7:08:61:ef:43:96:5b:13:3a:95:06:d0:23:e9:43: 28:ee:c1:cb:bc:b9:11:1d:25:89:51:f4:4b:96:c0:1b:ed:d3: bb:93:02:df:cb:77:0c:97:0b:b0:c3:25:38:aa:45:e5:b0:10: d5:a9:4c:74:1e:d2:78:13:6b:45:88:1e:7c:b7:29:ef:81:73: 16:38:e0:1f:1f:af:73:c0:8a:73:27:3e:b6:17:1c:19:4d:9e: 85:e9:cb:50:43:e2:62:6f:98:0e:6f:d5:cc:a2:0a:af:b5:21: 3e:25:17:9c:6b:14:32:7e:d7:8d:65:75:ac:32:fc:38:13:54: 5c:a1:1c:5b:b4:1f:ec:17:e2:d3:61:35:61:24:c5:a2:17:d8: e5:41:9e:22:57:29:92:19:5c:1a:e7:63:e9:5d:28:be:23:42: 7c:7d:cf:26:4f:50:d5:e7:1a:04:18:73:b0:73:7f:cc:83:6a: da:83:0d:df -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUVj/2nPsHneXXkNM0uE9wta82yi8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEM4ODhFOTk2NTg4NTI3QkM1RUY4QUJEMjkzNjc2QzM0 NjNBMUEyMjAeFw0yNTEwMjAwNTQ2MzZaFw0yNTEwMjMwODI2MzZaMDMxMTAvBgNV BAMTKDkyNERENTMxNUZCQzJDRDYxOTgwOEY5N0E3QTIxMzU1QUE2QjkxQzEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDy1Hg9GL9XAlgrw3fv0YHY+F/8 vQreKFJ0wMk7w2pbrevZFaB5v/zNT12qbd0jkjGx9oanxs633pRf57UqFtwqz7yb y28n+3jwpLy9T+9xkXcAxsqV0HHgiyjqOpiEWndGb01Mb0pbf4L3kresdDkhq6iN Lyc2APm8bDejTfgzxbKooVzVBVhD1ozeQs6KzKnwwIm3Sqm0eTQWk7ZagtIMA1wc jbMg+fIxhC9PoCDcz+7BriOnSXndtPOZ3MGNw43KFLMcnu4Ua4G/qIp8gezhMNOJ bSWPXGtRSA8o/yfLZJTXO54IjRdp0D3OPE53eVcEpA6MrgxWAlpUH1Q3hahRAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUkk3VMV+8LNYZgI+Xp6ITVaprkcEwHwYDVR0j BBgwFoAUjIiOmWWIUnvF74q9KTZ2w0Y6GiIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 NGIyNzMwMy05ZTNkLTRkNDItYWYyNS02YTBmMTE4MDhmMjcvMC84Qzg4OEU5OTY1 ODg1MjdCQzVFRjhBQkQyOTM2NzZDMzQ2M0ExQTIyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOEM4ODhFOTk2NTg4NTI3QkM1RUY4QUJEMjkzNjc2QzM0NjNB MUEyMi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNDRiMjczMDMtOWUzZC00ZDQyLWFm MjUtNmEwZjExODA4ZjI3LzAvOEM4ODhFOTk2NTg4NTI3QkM1RUY4QUJEMjkzNjc2 QzM0NjNBMUEyMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBANQma3omsnTS8niEIyIQgFd0l4inF0BUefdD rIGY1ILJfJfcZsAIcBBG6aW2sfI0HKf31EW66T/OAiP/kJNJlS0okPn/P++1bQuP oecIYe9DllsTOpUG0CPpQyjuwcu8uREdJYlR9EuWwBvt07uTAt/LdwyXC7DDJTiq ReWwENWpTHQe0ngTa0WIHny3Ke+BcxY44B8fr3PAinMnPrYXHBlNnoXpy1BD4mJv mA5v1cyiCq+1IT4lF5xrFDJ+141ldawy/DgTVFyhHFu0H+wX4tNhNWEkxaIX2OVB niJXKZIZXBrnY+ldKL4jQnx9zyZPUNXnGgQYc7Bzf8yDatqDDd8= -----END CERTIFICATE-----Generated at Mon Oct 20 14:38:37 2025 by rpki-client