$ rpki-client -vvf repo-rpki.idnic.net/repo/62f5986b-c764-4cd7-b414-a25bd05c3f92/0/8D5A49C9E42E371BFD1E67ACE1B3D55EC1ABF73F.mft File: 8D5A49C9E42E371BFD1E67ACE1B3D55EC1ABF73F.mft (raw, json) Hash identifier: 47nZXKu3uoh94l7CDIgitmFnIkDL4HY6N9v6t/BBQ58= Subject key identifier: 5A:2E:9A:71:CB:FB:5C:14:72:57:ED:7D:7C:51:E8:12:9D:ED:A7:0A Authority key identifier: 8D:5A:49:C9:E4:2E:37:1B:FD:1E:67:AC:E1:B3:D5:5E:C1:AB:F7:3F Certificate issuer: /CN=8D5A49C9E42E371BFD1E67ACE1B3D55EC1ABF73F Certificate serial: 51F02E87357F3CD095071AED9602D929DAEB70F6 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8D5A49C9E42E371BFD1E67ACE1B3D55EC1ABF73F.cer Subject info access: rsync://repo-rpki.idnic.net/repo/62f5986b-c764-4cd7-b414-a25bd05c3f92/0/8D5A49C9E42E371BFD1E67ACE1B3D55EC1ABF73F.mft Manifest number: AD Signing time: Sat 18 Oct 2025 05:10:54 +0000 Manifest this update: Sat 18 Oct 2025 05:05:54 +0000 Manifest next update: Tue 21 Oct 2025 16:37:54 +0000 Files and hashes: 1: 8D5A49C9E42E371BFD1E67ACE1B3D55EC1ABF73F.crl (hash: MGWUpPLA8kjtdTQJgCI6nm7h2QHKErn7Rqmrk/qLDgM=) 2: 3130332e3231362e3130352e302f32342d3234203d3e20313531353830.roa (hash: LW5rOerEeQ4o2LL00sXUmEen9sAHKxhrciVztv4Q/SE=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/62f5986b-c764-4cd7-b414-a25bd05c3f92/0/8D5A49C9E42E371BFD1E67ACE1B3D55EC1ABF73F.crl rsync://repo-rpki.idnic.net/repo/62f5986b-c764-4cd7-b414-a25bd05c3f92/0/8D5A49C9E42E371BFD1E67ACE1B3D55EC1ABF73F.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8D5A49C9E42E371BFD1E67ACE1B3D55EC1ABF73F.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 21 Oct 2025 16:37:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 51:f0:2e:87:35:7f:3c:d0:95:07:1a:ed:96:02:d9:29:da:eb:70:f6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8D5A49C9E42E371BFD1E67ACE1B3D55EC1ABF73F Validity Not Before: Oct 18 05:05:54 2025 GMT Not After : Oct 21 16:37:54 2025 GMT Subject: CN=5A2E9A71CBFB5C147257ED7D7C51E8129DEDA70A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:86:71:da:1d:de:30:49:50:18:4d:26:bc:a8: b2:1b:37:0e:03:21:7f:7e:fe:d3:15:c1:27:20:ba: be:4f:4f:30:37:85:a3:23:6e:71:a0:ea:f1:30:9f: c0:61:08:02:b7:a0:42:3c:34:d0:32:b5:54:27:a9: 06:3b:85:c7:8a:16:27:3f:8b:de:72:86:c6:5e:72: 72:a3:12:f6:ce:23:ba:0c:8f:ef:cf:c9:ef:fb:34: b5:68:8a:55:87:23:2e:52:23:5a:61:5a:7c:db:ce: 1a:20:8c:7e:19:76:5a:1e:66:4b:9d:f8:85:15:be: 4d:17:96:1b:a0:53:d7:41:9a:44:19:00:26:f9:ab: 38:ba:27:59:02:8b:b2:71:38:89:0f:09:25:ad:45: c5:50:c3:34:57:66:c0:b6:30:31:47:56:38:f2:eb: 42:7e:45:23:4c:3f:0a:82:23:c4:4e:87:1b:6f:53: a9:64:fe:f3:d6:3c:59:a3:fd:7d:f1:60:14:b7:f5: e4:23:ab:05:b0:1d:9d:a6:fd:59:09:df:dd:ff:7a: b0:e1:5d:58:68:cf:5a:03:78:f7:99:e0:a6:0b:f7: bc:a2:17:81:29:06:3a:57:9e:76:6f:78:ea:8b:f2: d7:03:b5:f6:b1:fd:0c:9f:ab:cc:e9:f5:f9:1a:fc: 26:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:2E:9A:71:CB:FB:5C:14:72:57:ED:7D:7C:51:E8:12:9D:ED:A7:0A X509v3 Authority Key Identifier: keyid:8D:5A:49:C9:E4:2E:37:1B:FD:1E:67:AC:E1:B3:D5:5E:C1:AB:F7:3F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/62f5986b-c764-4cd7-b414-a25bd05c3f92/0/8D5A49C9E42E371BFD1E67ACE1B3D55EC1ABF73F.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8D5A49C9E42E371BFD1E67ACE1B3D55EC1ABF73F.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/62f5986b-c764-4cd7-b414-a25bd05c3f92/0/8D5A49C9E42E371BFD1E67ACE1B3D55EC1ABF73F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 24:db:90:3c:9f:82:86:12:1c:f8:92:21:f9:94:8f:39:29:c7: 16:78:8b:81:af:ea:10:86:4e:fd:c9:f2:db:f5:fe:25:f7:7e: c7:6b:f1:8e:c7:5d:b6:81:65:37:a7:dd:bc:22:e0:62:bb:87: 2e:ad:17:4e:af:a4:49:1a:99:45:c1:e8:d4:f5:d3:6f:8b:5b: 29:6f:dd:94:d5:c6:61:ea:38:88:0d:8a:46:03:a6:03:d4:56: 09:b8:a9:b9:49:5e:67:bb:06:ea:32:b0:33:37:2a:43:ec:b9: 5c:51:0f:e2:e9:20:82:3a:4b:92:c4:a1:92:d0:b5:1b:23:4e: 57:d5:6f:4d:ad:e1:a5:5d:68:67:61:43:17:41:31:9e:2a:96: ad:29:96:02:f4:24:82:38:79:28:59:d3:5d:af:f0:fe:a5:e8: b8:d4:a0:66:69:96:49:ce:6d:98:f9:3d:20:bf:1f:32:f7:fd: 70:f8:61:08:d4:a7:11:57:4e:38:77:4b:a4:18:eb:29:1d:54: 14:aa:8d:4a:32:56:c1:05:ae:5c:93:01:82:55:59:25:e8:9c: 3b:03:ee:92:8c:70:67:5c:5e:f4:16:cf:59:b5:a4:5f:f5:19: 2b:7d:4b:09:b4:ef:b9:62:6f:84:3c:b3:c8:32:6f:f8:03:47: 18:1b:76:19 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUUfAuhzV/PNCVBxrtlgLZKdrrcPYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEQ1QTQ5QzlFNDJFMzcxQkZEMUU2N0FDRTFCM0Q1NUVD MUFCRjczRjAeFw0yNTEwMTgwNTA1NTRaFw0yNTEwMjExNjM3NTRaMDMxMTAvBgNV BAMTKDVBMkU5QTcxQ0JGQjVDMTQ3MjU3RUQ3RDdDNTFFODEyOURFREE3MEEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDUhnHaHd4wSVAYTSa8qLIbNw4D IX9+/tMVwScgur5PTzA3haMjbnGg6vEwn8BhCAK3oEI8NNAytVQnqQY7hceKFic/ i95yhsZecnKjEvbOI7oMj+/Pye/7NLVoilWHIy5SI1phWnzbzhogjH4ZdloeZkud +IUVvk0XlhugU9dBmkQZACb5qzi6J1kCi7JxOIkPCSWtRcVQwzRXZsC2MDFHVjjy 60J+RSNMPwqCI8ROhxtvU6lk/vPWPFmj/X3xYBS39eQjqwWwHZ2m/VkJ393/erDh XVhoz1oDePeZ4KYL97yiF4EpBjpXnnZveOqL8tcDtfax/Qyfq8zp9fka/Ca9AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUWi6accv7XBRyV+19fFHoEp3tpwowHwYDVR0j BBgwFoAUjVpJyeQuNxv9Hmes4bPVXsGr9z8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 MmY1OTg2Yi1jNzY0LTRjZDctYjQxNC1hMjViZDA1YzNmOTIvMC84RDVBNDlDOUU0 MkUzNzFCRkQxRTY3QUNFMUIzRDU1RUMxQUJGNzNGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOEQ1QTQ5QzlFNDJFMzcxQkZEMUU2N0FDRTFCM0Q1NUVDMUFC RjczRi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNjJmNTk4NmItYzc2NC00Y2Q3LWI0 MTQtYTI1YmQwNWMzZjkyLzAvOEQ1QTQ5QzlFNDJFMzcxQkZEMUU2N0FDRTFCM0Q1 NUVDMUFCRjczRi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACTbkDyfgoYSHPiSIfmUjzkpxxZ4i4Gv6hCG Tv3J8tv1/iX3fsdr8Y7HXbaBZTen3bwi4GK7hy6tF06vpEkamUXB6NT102+LWylv 3ZTVxmHqOIgNikYDpgPUVgm4qblJXme7BuoysDM3KkPsuVxRD+LpIII6S5LEoZLQ tRsjTlfVb02t4aVdaGdhQxdBMZ4qlq0plgL0JII4eShZ012v8P6l6LjUoGZplknO bZj5PSC/HzL3/XD4YQjUpxFXTjh3S6QY6ykdVBSqjUoyVsEFrlyTAYJVWSXonDsD 7pKMcGdcXvQWz1m1pF/1GSt9Swm077lib4Q8s8gyb/gDRxgbdhk= -----END CERTIFICATE-----Generated at Mon Oct 20 14:38:57 2025 by rpki-client