$ rpki-client -vvf repo-rpki.idnic.net/repo/5e6c2a91-6afc-4767-bbc1-750613264585/0/8BF02D8172D4CA8A00A9EE2EB8CC099F0727F1CB.mft File: 8BF02D8172D4CA8A00A9EE2EB8CC099F0727F1CB.mft (raw, json) Hash identifier: rGgZJRybzyHunc/DqLM3xkxOoA56d0SOSYt02fOmgBw= Subject key identifier: 8C:DC:A2:34:DE:B7:22:E4:AA:CA:2A:26:8D:E1:C1:89:E7:56:72:12 Authority key identifier: 8B:F0:2D:81:72:D4:CA:8A:00:A9:EE:2E:B8:CC:09:9F:07:27:F1:CB Certificate issuer: /CN=8BF02D8172D4CA8A00A9EE2EB8CC099F0727F1CB Certificate serial: 2A963934AD2B7C356BEA306354055A9F3FD5106F Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8BF02D8172D4CA8A00A9EE2EB8CC099F0727F1CB.cer Subject info access: rsync://repo-rpki.idnic.net/repo/5e6c2a91-6afc-4767-bbc1-750613264585/0/8BF02D8172D4CA8A00A9EE2EB8CC099F0727F1CB.mft Manifest number: 0215 Signing time: Sun 19 Oct 2025 08:11:44 +0000 Manifest this update: Sun 19 Oct 2025 08:06:44 +0000 Manifest next update: Wed 22 Oct 2025 17:51:44 +0000 Files and hashes: 1: 8BF02D8172D4CA8A00A9EE2EB8CC099F0727F1CB.crl (hash: fhuUfS9Bxmm4u6VR9nBpEnLksWa1DLnO8rxSt+oitUw=) 2: 3130332e3133352e342e302f32322d3234203d3e203338333230.roa (hash: 8BpU0pm5UxOt5Z/5pCKxKlre5ZOR7m9ogADS2QXiNkA=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/5e6c2a91-6afc-4767-bbc1-750613264585/0/8BF02D8172D4CA8A00A9EE2EB8CC099F0727F1CB.crl rsync://repo-rpki.idnic.net/repo/5e6c2a91-6afc-4767-bbc1-750613264585/0/8BF02D8172D4CA8A00A9EE2EB8CC099F0727F1CB.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8BF02D8172D4CA8A00A9EE2EB8CC099F0727F1CB.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 Oct 2025 17:51:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2a:96:39:34:ad:2b:7c:35:6b:ea:30:63:54:05:5a:9f:3f:d5:10:6f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8BF02D8172D4CA8A00A9EE2EB8CC099F0727F1CB Validity Not Before: Oct 19 08:06:44 2025 GMT Not After : Oct 22 17:51:44 2025 GMT Subject: CN=8CDCA234DEB722E4AACA2A268DE1C189E7567212 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:67:20:bf:7b:28:58:14:0f:7b:d9:3b:66:54: 39:1a:b4:5b:37:07:46:27:1f:2b:a1:c3:e0:94:d2: 10:fd:0f:2c:ce:ee:52:27:9d:cd:00:66:92:0f:65: 09:87:82:37:d9:dc:30:7a:d6:cb:ed:39:43:8a:3a: 28:d7:22:e3:a4:77:04:2f:87:02:d0:5e:67:b7:74: c0:61:e2:91:02:40:da:b8:31:6e:63:ad:4f:56:e6: 75:5c:62:79:98:36:80:35:6f:df:9c:71:8f:c6:86: dd:ee:db:61:8c:d3:37:69:98:ec:7d:69:4f:93:f8: e3:88:b1:80:35:d0:0c:f8:20:ee:56:db:fa:01:e8: 6d:55:2f:4f:3e:b8:81:5a:1f:c4:70:1f:88:74:c2: f2:73:b2:24:c7:fb:27:b8:9c:66:6a:a2:0f:04:9f: d8:71:f6:e0:4d:98:17:8e:be:16:44:99:60:cc:d3: 95:25:0c:42:f0:62:c2:a3:bf:99:a1:91:3c:9c:b0: 46:1e:ec:38:52:cd:63:91:a0:55:43:15:53:10:0d: b6:ca:67:17:49:bb:4a:9f:58:28:fb:47:06:ef:de: e4:55:58:79:d8:2d:ab:a1:6e:98:6d:1e:c2:16:31: 66:79:ee:e4:29:20:19:3f:1c:99:58:41:93:0c:9b: c3:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8C:DC:A2:34:DE:B7:22:E4:AA:CA:2A:26:8D:E1:C1:89:E7:56:72:12 X509v3 Authority Key Identifier: keyid:8B:F0:2D:81:72:D4:CA:8A:00:A9:EE:2E:B8:CC:09:9F:07:27:F1:CB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/5e6c2a91-6afc-4767-bbc1-750613264585/0/8BF02D8172D4CA8A00A9EE2EB8CC099F0727F1CB.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8BF02D8172D4CA8A00A9EE2EB8CC099F0727F1CB.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/5e6c2a91-6afc-4767-bbc1-750613264585/0/8BF02D8172D4CA8A00A9EE2EB8CC099F0727F1CB.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 92:c3:c8:2c:65:e0:ea:46:fe:a6:86:df:98:5d:11:58:7e:4b: 4d:fa:fc:49:af:d1:5b:a8:c2:56:03:a1:10:0b:cf:86:ee:20: d9:9e:99:73:f1:56:ed:91:81:11:75:fd:5a:42:04:94:4d:34: af:56:70:42:90:23:3b:46:96:09:b8:9e:0a:66:f3:ac:02:c3: 63:53:3e:b9:3b:ed:3c:49:42:41:16:4c:d7:b1:01:48:68:24: b2:3e:ee:47:9a:98:aa:85:17:0f:ab:b4:76:3a:6c:c6:13:81: c2:2f:f6:59:4d:c1:74:8d:c9:eb:7a:7d:70:fc:2d:b6:41:73: e1:89:04:0f:20:92:d0:42:89:2d:41:02:d8:10:25:e4:ed:6a: 81:e0:f5:87:19:82:00:c2:94:20:7f:fc:64:29:b1:ef:69:4e: ba:72:ed:eb:9a:39:44:8b:00:7a:cd:72:6f:e7:fa:f4:b8:4d: bc:51:6d:9d:d5:13:b3:02:5a:b3:63:c9:0e:44:d2:56:47:16: c2:cd:e8:5c:8b:d4:18:14:df:67:6d:bb:7e:a1:cc:69:8a:b2: 53:e8:0e:60:89:76:fc:7a:a4:8a:8b:21:c6:b1:ba:62:2f:9b: 97:48:7e:4e:ce:1d:98:7a:1f:e0:bb:3e:1b:2c:e5:91:09:74: 78:72:77:76 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUKpY5NK0rfDVr6jBjVAVanz/VEG8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEJGMDJEODE3MkQ0Q0E4QTAwQTlFRTJFQjhDQzA5OUYw NzI3RjFDQjAeFw0yNTEwMTkwODA2NDRaFw0yNTEwMjIxNzUxNDRaMDMxMTAvBgNV BAMTKDhDRENBMjM0REVCNzIyRTRBQUNBMkEyNjhERTFDMTg5RTc1NjcyMTIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCvZyC/eyhYFA972TtmVDkatFs3 B0YnHyuhw+CU0hD9DyzO7lInnc0AZpIPZQmHgjfZ3DB61svtOUOKOijXIuOkdwQv hwLQXme3dMBh4pECQNq4MW5jrU9W5nVcYnmYNoA1b9+ccY/Ght3u22GM0zdpmOx9 aU+T+OOIsYA10Az4IO5W2/oB6G1VL08+uIFaH8RwH4h0wvJzsiTH+ye4nGZqog8E n9hx9uBNmBeOvhZEmWDM05UlDELwYsKjv5mhkTycsEYe7DhSzWORoFVDFVMQDbbK ZxdJu0qfWCj7Rwbv3uRVWHnYLauhbphtHsIWMWZ57uQpIBk/HJlYQZMMm8N/AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUjNyiNN63IuSqyiomjeHBiedWchIwHwYDVR0j BBgwFoAUi/AtgXLUyooAqe4uuMwJnwcn8cswDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 ZTZjMmE5MS02YWZjLTQ3NjctYmJjMS03NTA2MTMyNjQ1ODUvMC84QkYwMkQ4MTcy RDRDQThBMDBBOUVFMkVCOENDMDk5RjA3MjdGMUNCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOEJGMDJEODE3MkQ0Q0E4QTAwQTlFRTJFQjhDQzA5OUYwNzI3 RjFDQi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNWU2YzJhOTEtNmFmYy00NzY3LWJi YzEtNzUwNjEzMjY0NTg1LzAvOEJGMDJEODE3MkQ0Q0E4QTAwQTlFRTJFQjhDQzA5 OUYwNzI3RjFDQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJLDyCxl4OpG/qaG35hdEVh+S036/Emv0Vuo wlYDoRALz4buINmemXPxVu2RgRF1/VpCBJRNNK9WcEKQIztGlgm4ngpm86wCw2NT Prk77TxJQkEWTNexAUhoJLI+7keamKqFFw+rtHY6bMYTgcIv9llNwXSNyet6fXD8 LbZBc+GJBA8gktBCiS1BAtgQJeTtaoHg9YcZggDClCB//GQpse9pTrpy7euaOUSL AHrNcm/n+vS4TbxRbZ3VE7MCWrNjyQ5E0lZHFsLN6FyL1BgU32dtu36hzGmKslPo DmCJdvx6pIqLIcaxumIvm5dIfk7OHZh6H+C7Phss5ZEJdHhyd3Y= -----END CERTIFICATE-----Generated at Mon Oct 20 15:01:17 2025 by rpki-client