$ rpki-client -vvf repo-rpki.idnic.net/repo/5252ead3-dc8f-4d86-afcf-a140e5b87532/0/8CFB227DA1EF51DB23364BBA034D0F68A09A5F59.mft File: 8CFB227DA1EF51DB23364BBA034D0F68A09A5F59.mft (raw, json) Hash identifier: MueGyCHA2Pp36zwokJbxaEnXekXRtyL24zEoOR6cY/Q= Subject key identifier: 17:C8:2C:38:4E:5D:02:4E:05:A5:FA:4F:6A:18:24:96:6C:6D:36:61 Authority key identifier: 8C:FB:22:7D:A1:EF:51:DB:23:36:4B:BA:03:4D:0F:68:A0:9A:5F:59 Certificate issuer: /CN=8CFB227DA1EF51DB23364BBA034D0F68A09A5F59 Certificate serial: 5B5E611D16D46738357EA7F5059CF80380D4FEC0 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8CFB227DA1EF51DB23364BBA034D0F68A09A5F59.cer Subject info access: rsync://repo-rpki.idnic.net/repo/5252ead3-dc8f-4d86-afcf-a140e5b87532/0/8CFB227DA1EF51DB23364BBA034D0F68A09A5F59.mft Manifest number: 0236 Signing time: Sat 18 Oct 2025 13:21:34 +0000 Manifest this update: Sat 18 Oct 2025 13:16:34 +0000 Manifest next update: Tue 21 Oct 2025 23:22:34 +0000 Files and hashes: 1: 3130332e3138362e3139342e302f32332d3234203d3e20313439373132.roa (hash: S9MFaIq/j9TJ63dOJfnzWaZP6j2QyCQRqTU45iGYFSM=) 2: 3130332e3138362e3139342e302f32342d3234203d3e20313439373132.roa (hash: uzPIoUslKlL0kCJ3Mr8GlDHsPvFS4WU5l7ZsMhLtDsU=) 3: 3130332e3138362e3139342e302f32342d3234203d3e203438343635.roa (hash: nuw56AWJFQx7bF2mLso7Fp7ypapHW7bx18alMUZHm9U=) 4: 8CFB227DA1EF51DB23364BBA034D0F68A09A5F59.crl (hash: ODmWRbpzWpbN9ZBbSDtCHHxpZS9VRUUMStfl5ldd9sY=) 5: 3130332e3138362e3139342e302f32332d3233203d3e20313439373132.roa (hash: swBTOVyl/nQxFd9eqJx6PzMQ7ExSAWTFjV6g64/KqU0=) 6: 3130332e3138362e3139352e302f32342d3234203d3e203438343635.roa (hash: 9nS/psP6uP/NgK0GsDYJioeVISZGFYj6wNXBWyPXoig=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/5252ead3-dc8f-4d86-afcf-a140e5b87532/0/8CFB227DA1EF51DB23364BBA034D0F68A09A5F59.crl rsync://repo-rpki.idnic.net/repo/5252ead3-dc8f-4d86-afcf-a140e5b87532/0/8CFB227DA1EF51DB23364BBA034D0F68A09A5F59.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8CFB227DA1EF51DB23364BBA034D0F68A09A5F59.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 21 Oct 2025 23:22:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5b:5e:61:1d:16:d4:67:38:35:7e:a7:f5:05:9c:f8:03:80:d4:fe:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8CFB227DA1EF51DB23364BBA034D0F68A09A5F59 Validity Not Before: Oct 18 13:16:34 2025 GMT Not After : Oct 21 23:22:34 2025 GMT Subject: CN=17C82C384E5D024E05A5FA4F6A1824966C6D3661 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:70:ed:f5:68:19:46:15:45:4b:fe:7d:02:0f: 7c:08:73:21:3d:64:6b:af:7b:75:75:ee:84:99:23: a2:88:40:f3:a6:59:7a:d7:02:aa:e6:a1:3c:ce:d4: bb:ea:e3:b1:c6:a6:53:62:df:0c:c0:90:4e:55:a7: 1e:52:50:60:5a:aa:e2:a1:a0:03:d9:03:2f:98:64: a7:b4:4e:80:f2:a6:f5:94:23:a7:ab:53:76:d9:a4: 6d:e1:75:78:ee:e2:7a:bd:13:78:1a:c1:84:1b:a7: 69:78:48:c6:3a:12:48:7b:9b:28:c1:52:2f:33:c3: a6:93:15:98:4b:d4:0e:60:01:14:c9:b3:d6:95:dd: 9e:44:9c:9d:e9:4c:a2:e4:63:fd:3e:5a:8f:68:3c: af:d1:21:9c:79:5a:5c:85:ef:19:0e:59:ff:8a:01: 24:8d:89:5c:4f:87:a1:a6:5d:2c:3c:c3:86:9c:f1: 3f:8e:07:ba:cb:23:71:dd:48:c8:ca:f1:3c:f8:0f: d1:e1:96:93:a7:a5:83:fc:b5:aa:5a:40:2b:ec:19: 11:15:f8:70:a7:86:8d:ab:53:64:5a:61:75:ab:2e: 3f:f6:d3:38:d5:95:e5:f0:ab:69:7d:c3:cf:41:df: 3b:48:ef:24:c4:35:42:5f:24:c9:e4:c0:53:19:60: c4:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:C8:2C:38:4E:5D:02:4E:05:A5:FA:4F:6A:18:24:96:6C:6D:36:61 X509v3 Authority Key Identifier: keyid:8C:FB:22:7D:A1:EF:51:DB:23:36:4B:BA:03:4D:0F:68:A0:9A:5F:59 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/5252ead3-dc8f-4d86-afcf-a140e5b87532/0/8CFB227DA1EF51DB23364BBA034D0F68A09A5F59.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8CFB227DA1EF51DB23364BBA034D0F68A09A5F59.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/5252ead3-dc8f-4d86-afcf-a140e5b87532/0/8CFB227DA1EF51DB23364BBA034D0F68A09A5F59.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0e:3d:aa:ec:8d:6d:65:8a:a5:8a:75:57:94:66:b4:67:3d:99: 8e:3a:c7:ee:82:e6:ed:f7:01:6b:d2:b7:a6:12:9a:10:21:00: 5d:67:1f:2c:1d:f9:70:1e:0f:8b:34:71:bd:9d:fd:ac:54:f0: 73:48:e2:bc:66:c7:e4:96:0f:88:01:a1:fa:7e:e4:75:52:e9: a9:b1:53:47:8b:0d:27:8c:d5:4e:f7:e0:53:02:4b:1c:5f:fc: 49:0e:50:e8:eb:ec:54:79:ed:99:31:cc:17:99:6b:4f:b8:c2: d7:f7:a1:6f:4c:d8:82:aa:69:17:63:a2:41:a4:bc:af:18:96: e8:57:26:59:25:77:ab:9e:ee:1e:1d:43:ae:6d:5b:87:3e:fd: 42:fd:1e:b0:31:bb:f6:37:4f:2d:5b:a6:9a:4d:4d:a6:b2:d8: 90:c7:f7:01:bf:95:8f:d2:f3:5c:c3:18:6e:91:c5:16:53:c3: 00:b8:47:46:a4:24:9a:0e:a3:b8:c3:37:3f:54:6f:e5:34:cc: 5f:28:ff:e0:62:c4:3f:8b:04:da:80:97:81:98:ac:52:85:07: cd:ca:be:45:32:98:b1:af:34:ef:78:40:d3:e7:07:b2:28:d6: 90:d4:dd:a5:ab:03:54:93:fd:d5:19:86:7f:a7:0d:96:c1:cc: 52:e1:22:d9 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUW15hHRbUZzg1fqf1BZz4A4DU/sAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOENGQjIyN0RBMUVGNTFEQjIzMzY0QkJBMDM0RDBGNjhB MDlBNUY1OTAeFw0yNTEwMTgxMzE2MzRaFw0yNTEwMjEyMzIyMzRaMDMxMTAvBgNV BAMTKDE3QzgyQzM4NEU1RDAyNEUwNUE1RkE0RjZBMTgyNDk2NkM2RDM2NjEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDNcO31aBlGFUVL/n0CD3wIcyE9 ZGuve3V17oSZI6KIQPOmWXrXAqrmoTzO1Lvq47HGplNi3wzAkE5Vpx5SUGBaquKh oAPZAy+YZKe0ToDypvWUI6erU3bZpG3hdXju4nq9E3gawYQbp2l4SMY6Ekh7myjB Ui8zw6aTFZhL1A5gARTJs9aV3Z5EnJ3pTKLkY/0+Wo9oPK/RIZx5WlyF7xkOWf+K ASSNiVxPh6GmXSw8w4ac8T+OB7rLI3HdSMjK8Tz4D9HhlpOnpYP8tapaQCvsGREV +HCnho2rU2RaYXWrLj/20zjVleXwq2l9w89B3ztI7yTENUJfJMnkwFMZYMQJAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUF8gsOE5dAk4FpfpPahgklmxtNmEwHwYDVR0j BBgwFoAUjPsifaHvUdsjNku6A00PaKCaX1kwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 MjUyZWFkMy1kYzhmLTRkODYtYWZjZi1hMTQwZTViODc1MzIvMC84Q0ZCMjI3REEx RUY1MURCMjMzNjRCQkEwMzREMEY2OEEwOUE1RjU5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOENGQjIyN0RBMUVGNTFEQjIzMzY0QkJBMDM0RDBGNjhBMDlB NUY1OS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNTI1MmVhZDMtZGM4Zi00ZDg2LWFm Y2YtYTE0MGU1Yjg3NTMyLzAvOENGQjIyN0RBMUVGNTFEQjIzMzY0QkJBMDM0RDBG NjhBMDlBNUY1OS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAA49quyNbWWKpYp1V5RmtGc9mY46x+6C5u33 AWvSt6YSmhAhAF1nHywd+XAeD4s0cb2d/axU8HNI4rxmx+SWD4gBofp+5HVS6amx U0eLDSeM1U734FMCSxxf/EkOUOjr7FR57ZkxzBeZa0+4wtf3oW9M2IKqaRdjokGk vK8YluhXJlkld6ue7h4dQ65tW4c+/UL9HrAxu/Y3Ty1bpppNTaay2JDH9wG/lY/S 81zDGG6RxRZTwwC4R0akJJoOo7jDNz9Ub+U0zF8o/+BixD+LBNqAl4GYrFKFB83K vkUymLGvNO94QNPnB7Io1pDU3aWrA1ST/dUZhn+nDZbBzFLhItk= -----END CERTIFICATE-----Generated at Mon Oct 20 10:18:38 2025 by rpki-client