$ rpki-client -vvf repo-rpki.idnic.net/repo/643db7d2-b3fd-4214-b6a4-d0162f95e72e/0/8714172B5D3FC9C36A83EBA27AB946FC69A4F821.mft File: 8714172B5D3FC9C36A83EBA27AB946FC69A4F821.mft (raw, json) Hash identifier: 1D020Y2OHnNYG4R55X7GUdxESFN4gK/4qHUdzVKmFKo= Subject key identifier: F3:35:8B:45:99:A2:9C:33:EB:C1:64:9A:C0:86:3A:15:B8:89:12:02 Authority key identifier: 87:14:17:2B:5D:3F:C9:C3:6A:83:EB:A2:7A:B9:46:FC:69:A4:F8:21 Certificate issuer: /CN=8714172B5D3FC9C36A83EBA27AB946FC69A4F821 Certificate serial: 7D98F200671A71CB945A0134A74A3AEC7199E44F Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8714172B5D3FC9C36A83EBA27AB946FC69A4F821.cer Subject info access: rsync://repo-rpki.idnic.net/repo/643db7d2-b3fd-4214-b6a4-d0162f95e72e/0/8714172B5D3FC9C36A83EBA27AB946FC69A4F821.mft Manifest number: 0202 Signing time: Sat 18 Oct 2025 12:02:21 +0000 Manifest this update: Sat 18 Oct 2025 11:57:21 +0000 Manifest next update: Tue 21 Oct 2025 20:59:21 +0000 Files and hashes: 1: 3130332e32302e31362e302f32342d3234203d3e20313439393633.roa (hash: zDyrXTGOoVhoyVXFQzLfzvSBhhtitp+cvr9nrYj9PZk=) 2: 8714172B5D3FC9C36A83EBA27AB946FC69A4F821.crl (hash: KPxH5LHiwUZGxMoMtb/CwdTuAvJkZltHqe0l89CGgRs=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/643db7d2-b3fd-4214-b6a4-d0162f95e72e/0/8714172B5D3FC9C36A83EBA27AB946FC69A4F821.crl rsync://repo-rpki.idnic.net/repo/643db7d2-b3fd-4214-b6a4-d0162f95e72e/0/8714172B5D3FC9C36A83EBA27AB946FC69A4F821.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8714172B5D3FC9C36A83EBA27AB946FC69A4F821.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 21 Oct 2025 20:59:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7d:98:f2:00:67:1a:71:cb:94:5a:01:34:a7:4a:3a:ec:71:99:e4:4f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8714172B5D3FC9C36A83EBA27AB946FC69A4F821 Validity Not Before: Oct 18 11:57:21 2025 GMT Not After : Oct 21 20:59:21 2025 GMT Subject: CN=F3358B4599A29C33EBC1649AC0863A15B8891202 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:ba:0f:fb:0c:1e:50:37:3c:58:ad:1b:b8:70: ed:c5:ec:32:88:24:4b:48:76:5d:a6:ab:55:49:87: 06:3d:07:26:67:ce:91:78:53:d2:de:80:70:d7:4d: 34:54:4a:f2:bf:7e:db:ca:8e:aa:24:16:03:bf:2c: ab:4a:b8:1a:21:d0:8b:1e:a5:7c:21:0c:cc:06:c5: 36:b1:f7:c0:97:71:48:40:8b:e9:96:4c:bd:eb:84: 21:ec:98:b9:d6:fc:5d:83:30:e3:67:34:68:1e:19: 86:37:77:46:6c:ad:f0:86:10:6b:bd:93:d2:13:77: a0:a0:ab:d6:4e:af:c3:b1:ff:b9:e3:80:74:ff:20: 11:b5:90:ae:1e:d3:f1:cc:b1:c4:af:6e:71:19:96: 4a:cc:00:b7:3e:93:75:3a:9f:2f:8d:4e:e0:76:bc: e2:50:5e:d8:34:20:6f:cf:1e:fa:cd:0a:a4:47:59: f6:96:e1:44:8c:fc:bc:7b:b3:77:83:40:11:3c:7d: 4c:3a:a1:bb:76:bf:f1:a6:39:eb:6c:b2:ed:90:02: d0:4e:8d:5f:43:00:15:b4:ae:1d:8e:37:94:89:88: e3:d2:1a:0c:d4:60:3d:b9:0f:8a:47:1f:a2:16:a6: 67:22:2d:eb:74:60:b9:b0:dc:51:d8:70:76:7e:c8: cf:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F3:35:8B:45:99:A2:9C:33:EB:C1:64:9A:C0:86:3A:15:B8:89:12:02 X509v3 Authority Key Identifier: keyid:87:14:17:2B:5D:3F:C9:C3:6A:83:EB:A2:7A:B9:46:FC:69:A4:F8:21 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/643db7d2-b3fd-4214-b6a4-d0162f95e72e/0/8714172B5D3FC9C36A83EBA27AB946FC69A4F821.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8714172B5D3FC9C36A83EBA27AB946FC69A4F821.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/643db7d2-b3fd-4214-b6a4-d0162f95e72e/0/8714172B5D3FC9C36A83EBA27AB946FC69A4F821.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a2:62:55:76:06:cf:7b:28:91:3e:fa:e1:ef:5b:22:09:d3:7c: 2f:b5:d9:89:36:da:5f:17:4e:35:4b:e8:25:f0:71:6b:76:1f: a3:cd:de:3f:c6:ad:9d:a1:64:a5:9c:53:82:f3:53:62:0c:b5: d0:64:54:4b:6e:f7:b1:0e:ec:70:af:5b:91:01:31:af:2c:1c: c6:e3:03:09:32:c3:68:29:d0:e6:53:01:79:8c:92:ab:0d:52: a4:a9:b1:3c:3e:3b:a1:c2:9f:cf:c7:26:84:fe:fd:ef:7c:ad: 80:3f:02:b6:96:fa:7a:61:18:8e:65:e6:45:23:e6:7c:9e:2c: f6:70:f3:78:31:76:a6:cd:8d:06:ac:b0:a6:18:ae:1b:b2:60: 1a:7f:c4:c6:07:a4:f3:ca:ec:a9:c8:a8:c3:6d:e0:49:68:bc: 9a:55:90:16:d0:e3:31:b8:6a:0c:4b:ce:b6:c8:d0:88:ed:a1: 15:7b:23:15:1a:6d:1b:2d:6c:ec:5f:f6:33:fc:03:98:37:50: 18:77:59:7d:c0:f4:1c:0d:d4:63:47:f0:dd:36:bf:02:20:a7: 72:68:b2:62:83:09:d4:06:36:eb:72:1d:d5:93:8f:3f:a3:c6: b4:95:cc:4a:0f:35:e1:7b:c1:f3:38:d2:bf:6e:15:0c:33:b0: c9:95:e3:91 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUfZjyAGcaccuUWgE0p0o67HGZ5E8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODcxNDE3MkI1RDNGQzlDMzZBODNFQkEyN0FCOTQ2RkM2 OUE0RjgyMTAeFw0yNTEwMTgxMTU3MjFaFw0yNTEwMjEyMDU5MjFaMDMxMTAvBgNV BAMTKEYzMzU4QjQ1OTlBMjlDMzNFQkMxNjQ5QUMwODYzQTE1Qjg4OTEyMDIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCnug/7DB5QNzxYrRu4cO3F7DKI JEtIdl2mq1VJhwY9ByZnzpF4U9LegHDXTTRUSvK/ftvKjqokFgO/LKtKuBoh0Ise pXwhDMwGxTax98CXcUhAi+mWTL3rhCHsmLnW/F2DMONnNGgeGYY3d0ZsrfCGEGu9 k9ITd6Cgq9ZOr8Ox/7njgHT/IBG1kK4e0/HMscSvbnEZlkrMALc+k3U6ny+NTuB2 vOJQXtg0IG/PHvrNCqRHWfaW4USM/Lx7s3eDQBE8fUw6obt2v/GmOetssu2QAtBO jV9DABW0rh2ON5SJiOPSGgzUYD25D4pHH6IWpmciLet0YLmw3FHYcHZ+yM9xAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU8zWLRZminDPrwWSawIY6FbiJEgIwHwYDVR0j BBgwFoAUhxQXK10/ycNqg+uierlG/Gmk+CEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 NDNkYjdkMi1iM2ZkLTQyMTQtYjZhNC1kMDE2MmY5NWU3MmUvMC84NzE0MTcyQjVE M0ZDOUMzNkE4M0VCQTI3QUI5NDZGQzY5QTRGODIxLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvODcxNDE3MkI1RDNGQzlDMzZBODNFQkEyN0FCOTQ2RkM2OUE0 RjgyMS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNjQzZGI3ZDItYjNmZC00MjE0LWI2 YTQtZDAxNjJmOTVlNzJlLzAvODcxNDE3MkI1RDNGQzlDMzZBODNFQkEyN0FCOTQ2 RkM2OUE0RjgyMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKJiVXYGz3sokT764e9bIgnTfC+12Yk22l8X TjVL6CXwcWt2H6PN3j/GrZ2hZKWcU4LzU2IMtdBkVEtu97EO7HCvW5EBMa8sHMbj Awkyw2gp0OZTAXmMkqsNUqSpsTw+O6HCn8/HJoT+/e98rYA/AraW+nphGI5l5kUj 5nyeLPZw83gxdqbNjQassKYYrhuyYBp/xMYHpPPK7KnIqMNt4ElovJpVkBbQ4zG4 agxLzrbI0IjtoRV7IxUabRstbOxf9jP8A5g3UBh3WX3A9BwN1GNH8N02vwIgp3Jo smKDCdQGNutyHdWTjz+jxrSVzEoPNeF7wfM40r9uFQwzsMmV45E= -----END CERTIFICATE-----Generated at Mon Oct 20 12:06:41 2025 by rpki-client