$ rpki-client -vvf repo-rpki.idnic.net/repo/7305ab30-5653-42bc-9c3f-aaf567eae701/0/F8B7C8E5DDBDD036513F10B87F39A94BE1DB3DCA.mft File: F8B7C8E5DDBDD036513F10B87F39A94BE1DB3DCA.mft (raw, json) Hash identifier: qsAETJxE3f8yksBe6ZQvLMbBn1UZH+1AYpxcuLERtN4= Subject key identifier: 8F:9B:5A:0D:E4:D1:15:1D:13:C7:48:E0:2B:32:24:08:91:56:2B:FC Authority key identifier: F8:B7:C8:E5:DD:BD:D0:36:51:3F:10:B8:7F:39:A9:4B:E1:DB:3D:CA Certificate issuer: /CN=F8B7C8E5DDBDD036513F10B87F39A94BE1DB3DCA Certificate serial: 20006805C4750C512B9DD0777923B759E3E548CA Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F8B7C8E5DDBDD036513F10B87F39A94BE1DB3DCA.cer Subject info access: rsync://repo-rpki.idnic.net/repo/7305ab30-5653-42bc-9c3f-aaf567eae701/0/F8B7C8E5DDBDD036513F10B87F39A94BE1DB3DCA.mft Manifest number: 021F Signing time: Sat 18 Oct 2025 15:10:38 +0000 Manifest this update: Sat 18 Oct 2025 15:05:38 +0000 Manifest next update: Tue 21 Oct 2025 17:25:38 +0000 Files and hashes: 1: 3130332e3138392e3131362e302f32342d3234203d3e20313439383738.roa (hash: WTqqW4cwushoWLyLWupS3yHzTC5AqZ4B8ENJ6k7wzI4=) 2: 3130332e3138392e3131372e302f32342d3234203d3e20313439383738.roa (hash: nXEHhJ8w6SXV+eCEbP2YrkovqQsEQKgULxh/UNhY8O8=) 3: F8B7C8E5DDBDD036513F10B87F39A94BE1DB3DCA.crl (hash: OR7+5/0kHk8qJCoLuETHcSf5XXbe/UI940/YnQeV9UQ=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/7305ab30-5653-42bc-9c3f-aaf567eae701/0/F8B7C8E5DDBDD036513F10B87F39A94BE1DB3DCA.crl rsync://repo-rpki.idnic.net/repo/7305ab30-5653-42bc-9c3f-aaf567eae701/0/F8B7C8E5DDBDD036513F10B87F39A94BE1DB3DCA.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F8B7C8E5DDBDD036513F10B87F39A94BE1DB3DCA.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 21 Oct 2025 17:25:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 20:00:68:05:c4:75:0c:51:2b:9d:d0:77:79:23:b7:59:e3:e5:48:ca Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F8B7C8E5DDBDD036513F10B87F39A94BE1DB3DCA Validity Not Before: Oct 18 15:05:38 2025 GMT Not After : Oct 21 17:25:38 2025 GMT Subject: CN=8F9B5A0DE4D1151D13C748E02B32240891562BFC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:3f:d5:64:da:4b:b6:85:dc:20:de:62:36:6b: cc:bf:02:b6:5e:79:15:73:c8:6d:90:66:b3:da:19: 11:d3:31:79:66:5e:b7:f3:64:7e:7c:d4:13:3e:c8: b4:67:ad:bb:22:dd:53:89:e7:24:75:ae:1f:1c:34: 41:b6:2f:73:fb:6f:06:ef:22:21:25:2a:08:ce:ea: c5:47:e4:e9:f5:fb:0c:ac:6e:6b:a8:ee:c7:4f:8d: 65:d6:44:84:5e:dd:f0:20:e7:ec:40:03:31:33:45: 50:5a:2c:c1:64:66:ef:f3:f2:c8:29:6d:40:00:47: 20:73:c4:a4:28:28:5b:ac:3d:d9:54:91:51:5d:6e: ae:de:98:22:6d:19:73:38:bc:3d:39:e1:fa:25:15: 82:dc:33:74:ac:e1:c2:1d:9d:21:f5:8f:42:a5:aa: 18:f4:58:56:03:84:68:d0:61:b1:84:34:11:63:81: bb:01:85:34:2c:d3:28:cc:a6:05:b5:f4:7f:f5:8c: 5d:c8:96:a3:42:23:af:17:0a:66:52:f2:02:d8:2a: 7e:87:7e:2d:40:a8:7c:9c:e9:28:2a:18:62:0e:b5: c7:6b:c0:06:4f:71:74:89:ac:0f:51:60:7e:a4:e6: 81:c0:71:6d:b9:0f:1e:ea:65:ed:f3:ad:1a:bb:20: b5:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8F:9B:5A:0D:E4:D1:15:1D:13:C7:48:E0:2B:32:24:08:91:56:2B:FC X509v3 Authority Key Identifier: keyid:F8:B7:C8:E5:DD:BD:D0:36:51:3F:10:B8:7F:39:A9:4B:E1:DB:3D:CA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/7305ab30-5653-42bc-9c3f-aaf567eae701/0/F8B7C8E5DDBDD036513F10B87F39A94BE1DB3DCA.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F8B7C8E5DDBDD036513F10B87F39A94BE1DB3DCA.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/7305ab30-5653-42bc-9c3f-aaf567eae701/0/F8B7C8E5DDBDD036513F10B87F39A94BE1DB3DCA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9d:72:12:b4:f9:c8:de:87:73:1f:92:58:e4:87:a5:3a:0c:f3: 35:c7:f8:97:e0:c3:1a:fd:2c:31:78:82:ee:2a:5e:32:7f:e2: 3f:0b:7b:c2:74:ce:16:ef:50:d8:59:46:d8:03:ad:ea:e3:97: 4b:65:42:b4:11:af:95:53:47:c2:10:ce:ba:4e:a3:fd:8d:8b: cc:cb:5e:a4:68:3e:58:91:37:54:e7:16:30:e8:ab:8b:06:55: 9d:5d:7a:38:59:9e:52:0b:c3:50:df:8c:a4:d8:a2:ab:68:27: 3f:05:0f:05:cf:0a:1f:08:e1:5e:b9:04:d4:2c:25:3f:50:93: 44:30:ce:17:2a:d6:7d:10:c4:bc:7e:65:34:fb:31:c2:66:2d: 0a:bc:55:50:d5:b2:a4:83:e7:c2:27:00:dd:35:57:6e:c7:4f: 17:5f:8c:2d:5f:ff:4f:29:2a:94:a1:6f:be:1c:5a:cb:4b:d2: 3a:23:fb:b6:37:bd:af:4b:67:b3:42:ac:f8:a2:fc:66:28:24: 64:a1:ea:12:a8:86:cd:fa:c0:94:82:e6:d4:ab:ad:32:e3:b0: b9:c1:3e:c6:57:d1:3b:15:8d:89:16:19:5c:ee:c2:2f:fd:a4: 63:e9:cd:72:b2:27:ea:ef:75:a2:55:15:0e:86:63:57:90:a8: e5:d8:6f:e0 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUIABoBcR1DFErndB3eSO3WePlSMowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjhCN0M4RTVEREJERDAzNjUxM0YxMEI4N0YzOUE5NEJF MURCM0RDQTAeFw0yNTEwMTgxNTA1MzhaFw0yNTEwMjExNzI1MzhaMDMxMTAvBgNV BAMTKDhGOUI1QTBERTREMTE1MUQxM0M3NDhFMDJCMzIyNDA4OTE1NjJCRkMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDoP9Vk2ku2hdwg3mI2a8y/ArZe eRVzyG2QZrPaGRHTMXlmXrfzZH581BM+yLRnrbsi3VOJ5yR1rh8cNEG2L3P7bwbv IiElKgjO6sVH5On1+wysbmuo7sdPjWXWRIRe3fAg5+xAAzEzRVBaLMFkZu/z8sgp bUAARyBzxKQoKFusPdlUkVFdbq7emCJtGXM4vD054folFYLcM3Ss4cIdnSH1j0Kl qhj0WFYDhGjQYbGENBFjgbsBhTQs0yjMpgW19H/1jF3IlqNCI68XCmZS8gLYKn6H fi1AqHyc6SgqGGIOtcdrwAZPcXSJrA9RYH6k5oHAcW25Dx7qZe3zrRq7ILXXAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUj5taDeTRFR0Tx0jgKzIkCJFWK/wwHwYDVR0j BBgwFoAU+LfI5d290DZRPxC4fzmpS+HbPcowDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 MzA1YWIzMC01NjUzLTQyYmMtOWMzZi1hYWY1NjdlYWU3MDEvMC9GOEI3QzhFNURE QkREMDM2NTEzRjEwQjg3RjM5QTk0QkUxREIzRENBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRjhCN0M4RTVEREJERDAzNjUxM0YxMEI4N0YzOUE5NEJFMURC M0RDQS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNzMwNWFiMzAtNTY1My00MmJjLTlj M2YtYWFmNTY3ZWFlNzAxLzAvRjhCN0M4RTVEREJERDAzNjUxM0YxMEI4N0YzOUE5 NEJFMURCM0RDQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJ1yErT5yN6Hcx+SWOSHpToM8zXH+Jfgwxr9 LDF4gu4qXjJ/4j8Le8J0zhbvUNhZRtgDrerjl0tlQrQRr5VTR8IQzrpOo/2Ni8zL XqRoPliRN1TnFjDoq4sGVZ1dejhZnlILw1DfjKTYoqtoJz8FDwXPCh8I4V65BNQs JT9Qk0Qwzhcq1n0QxLx+ZTT7McJmLQq8VVDVsqSD58InAN01V27HTxdfjC1f/08p KpShb74cWstL0joj+7Y3va9LZ7NCrPii/GYoJGSh6hKohs36wJSC5tSrrTLjsLnB PsZX0TsVjYkWGVzuwi/9pGPpzXKyJ+rvdaJVFQ6GY1eQqOXYb+A= -----END CERTIFICATE-----Generated at Mon Oct 20 13:08:37 2025 by rpki-client