$ rpki-client -vvf repo-rpki.idnic.net/repo/758db87b-16cd-437a-a5b5-08cb35da97f0/0/8CBCE2EE006256C9A6207949314A7D1FCC415B5A.mft File: 8CBCE2EE006256C9A6207949314A7D1FCC415B5A.mft (raw, json) Hash identifier: 1tXxZvXTtC2MObKwU+gAx6OqbjdT7OygL0ukbU4VnPA= Subject key identifier: C9:73:33:C1:3C:DD:1B:1E:B2:16:93:A4:63:85:90:AD:73:65:B5:7E Authority key identifier: 8C:BC:E2:EE:00:62:56:C9:A6:20:79:49:31:4A:7D:1F:CC:41:5B:5A Certificate issuer: /CN=8CBCE2EE006256C9A6207949314A7D1FCC415B5A Certificate serial: 19A779295F7B820987862CAC97F3B7FC3FC33E49 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8CBCE2EE006256C9A6207949314A7D1FCC415B5A.cer Subject info access: rsync://repo-rpki.idnic.net/repo/758db87b-16cd-437a-a5b5-08cb35da97f0/0/8CBCE2EE006256C9A6207949314A7D1FCC415B5A.mft Manifest number: 0225 Signing time: Mon 20 Oct 2025 02:11:30 +0000 Manifest this update: Mon 20 Oct 2025 02:06:30 +0000 Manifest next update: Thu 23 Oct 2025 08:21:30 +0000 Files and hashes: 1: 8CBCE2EE006256C9A6207949314A7D1FCC415B5A.crl (hash: AD4R+6Cn6mUYSC8pKYNXZ0Xld15iyt6e1mdratelUZQ=) 2: 3130332e3138372e3131322e302f32332d3234203d3e20313439373230.roa (hash: tJd9lCwOT2E5aUEAYGLVk9Vox9W7mUTKc82A3hANFMo=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/758db87b-16cd-437a-a5b5-08cb35da97f0/0/8CBCE2EE006256C9A6207949314A7D1FCC415B5A.crl rsync://repo-rpki.idnic.net/repo/758db87b-16cd-437a-a5b5-08cb35da97f0/0/8CBCE2EE006256C9A6207949314A7D1FCC415B5A.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8CBCE2EE006256C9A6207949314A7D1FCC415B5A.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 Oct 2025 08:21:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 19:a7:79:29:5f:7b:82:09:87:86:2c:ac:97:f3:b7:fc:3f:c3:3e:49 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8CBCE2EE006256C9A6207949314A7D1FCC415B5A Validity Not Before: Oct 20 02:06:30 2025 GMT Not After : Oct 23 08:21:30 2025 GMT Subject: CN=C97333C13CDD1B1EB21693A4638590AD7365B57E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:a6:a0:6e:73:49:59:58:98:4f:b9:e7:93:19: e4:db:61:76:d8:b5:79:2e:7c:87:ce:12:89:6a:28: e1:fb:e1:3a:fd:06:2e:5f:ca:ac:49:da:8f:05:16: 16:61:9c:90:03:f3:a1:22:ff:01:26:e8:07:9e:f8: 26:63:9e:fb:57:b6:c4:fe:46:f1:04:c1:8b:d2:52: 89:8a:15:0e:64:4d:54:df:df:bc:fb:78:95:0c:96: 07:15:b9:46:1c:3c:aa:47:33:67:4d:08:bb:11:a8: 3b:2d:07:5e:82:b4:5f:1a:f9:7d:bb:ae:d7:5d:d4: 87:eb:6c:fb:a0:2c:5e:f4:3e:e9:8f:ff:53:b3:19: 48:89:a3:2b:3d:7b:fb:88:a9:03:1c:d0:3d:e3:fa: 9b:49:83:13:6f:2c:d7:06:f1:5b:4f:4e:0a:e0:f3: 44:19:29:e4:2e:98:d1:a1:ce:77:9a:42:62:07:5b: 87:33:fa:e6:86:6f:1f:21:0d:b2:6b:ee:e2:11:ce: eb:ea:18:83:aa:50:72:ea:ad:c1:7e:39:6e:e1:e5: 50:a4:94:b3:79:3c:35:b2:b0:f4:60:17:f9:9a:53: a1:2c:cf:03:9f:6f:85:b7:94:7f:a9:e7:1a:d8:e7: 5c:12:a8:01:d8:ec:b9:60:d7:ee:fb:88:35:41:dd: 1c:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C9:73:33:C1:3C:DD:1B:1E:B2:16:93:A4:63:85:90:AD:73:65:B5:7E X509v3 Authority Key Identifier: keyid:8C:BC:E2:EE:00:62:56:C9:A6:20:79:49:31:4A:7D:1F:CC:41:5B:5A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/758db87b-16cd-437a-a5b5-08cb35da97f0/0/8CBCE2EE006256C9A6207949314A7D1FCC415B5A.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8CBCE2EE006256C9A6207949314A7D1FCC415B5A.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/758db87b-16cd-437a-a5b5-08cb35da97f0/0/8CBCE2EE006256C9A6207949314A7D1FCC415B5A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4c:29:7f:14:58:51:f0:c9:9d:d9:0d:0c:c0:e2:fc:4a:ed:0c: a9:33:70:02:0b:7e:2a:0a:ec:c5:38:52:7f:aa:5e:6f:d1:4d: 3e:ad:8f:95:39:ca:99:6f:1b:b8:48:51:02:8b:f9:f5:80:03: 2c:24:e7:a4:ba:8e:7b:f1:bb:92:b2:44:89:e8:64:45:34:a2: c2:4d:9f:7a:e0:da:de:8c:fc:c5:29:3e:dc:8e:a4:60:04:3f: 55:82:5a:e1:4f:e3:81:2f:63:14:ae:f3:10:7b:c9:5c:a2:9c: eb:db:3e:f1:92:03:56:42:24:e4:51:a9:b8:1b:a8:54:fb:40: f3:80:23:ee:f5:9a:2a:89:ca:37:7a:60:87:f4:e6:89:bd:c6: da:3f:fe:ba:81:7e:12:aa:5d:6f:30:7a:b4:b0:b3:5a:d2:71: 9c:c2:10:a1:6c:37:de:5d:55:ef:ae:16:91:c2:d6:47:f4:45: 25:e0:86:fe:c7:1c:83:ea:b3:89:e5:b4:a9:c8:3e:ff:5a:aa: 84:e3:a4:53:a2:4a:d5:de:06:74:cc:ab:87:5d:15:e1:ed:ad: 09:b8:17:53:7d:76:ae:d7:1e:59:9f:d1:65:38:26:dd:42:b7: 6e:de:ee:d7:e6:92:47:34:d0:6e:98:49:86:aa:a4:bb:80:7d: f6:7d:8b:9e -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUGad5KV97ggmHhiysl/O3/D/DPkkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOENCQ0UyRUUwMDYyNTZDOUE2MjA3OTQ5MzE0QTdEMUZD QzQxNUI1QTAeFw0yNTEwMjAwMjA2MzBaFw0yNTEwMjMwODIxMzBaMDMxMTAvBgNV BAMTKEM5NzMzM0MxM0NERDFCMUVCMjE2OTNBNDYzODU5MEFENzM2NUI1N0UwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDVpqBuc0lZWJhPueeTGeTbYXbY tXkufIfOEolqKOH74Tr9Bi5fyqxJ2o8FFhZhnJAD86Ei/wEm6Aee+CZjnvtXtsT+ RvEEwYvSUomKFQ5kTVTf37z7eJUMlgcVuUYcPKpHM2dNCLsRqDstB16CtF8a+X27 rtdd1IfrbPugLF70PumP/1OzGUiJoys9e/uIqQMc0D3j+ptJgxNvLNcG8VtPTgrg 80QZKeQumNGhzneaQmIHW4cz+uaGbx8hDbJr7uIRzuvqGIOqUHLqrcF+OW7h5VCk lLN5PDWysPRgF/maU6EszwOfb4W3lH+p5xrY51wSqAHY7Llg1+77iDVB3RxlAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUyXMzwTzdGx6yFpOkY4WQrXNltX4wHwYDVR0j BBgwFoAUjLzi7gBiVsmmIHlJMUp9H8xBW1owDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 NThkYjg3Yi0xNmNkLTQzN2EtYTViNS0wOGNiMzVkYTk3ZjAvMC84Q0JDRTJFRTAw NjI1NkM5QTYyMDc5NDkzMTRBN0QxRkNDNDE1QjVBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOENCQ0UyRUUwMDYyNTZDOUE2MjA3OTQ5MzE0QTdEMUZDQzQx NUI1QS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNzU4ZGI4N2ItMTZjZC00MzdhLWE1 YjUtMDhjYjM1ZGE5N2YwLzAvOENCQ0UyRUUwMDYyNTZDOUE2MjA3OTQ5MzE0QTdE MUZDQzQxNUI1QS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEwpfxRYUfDJndkNDMDi/ErtDKkzcAILfioK 7MU4Un+qXm/RTT6tj5U5yplvG7hIUQKL+fWAAywk56S6jnvxu5KyRInoZEU0osJN n3rg2t6M/MUpPtyOpGAEP1WCWuFP44EvYxSu8xB7yVyinOvbPvGSA1ZCJORRqbgb qFT7QPOAI+71miqJyjd6YIf05om9xto//rqBfhKqXW8werSws1rScZzCEKFsN95d Ve+uFpHC1kf0RSXghv7HHIPqs4nltKnIPv9aqoTjpFOiStXeBnTMq4ddFeHtrQm4 F1N9dq7XHlmf0WU4Jt1Ct27e7tfmkkc00G6YSYaqpLuAffZ9i54= -----END CERTIFICATE-----Generated at Mon Oct 20 12:08:36 2025 by rpki-client