$ rpki-client -vvf repo-rpki.idnic.net/repo/7846fed7-f88e-48ea-a6d1-6f756bcf8db6/0/8E9447BD6E58024BA4182380EFF3743772CEBED8.mft File: 8E9447BD6E58024BA4182380EFF3743772CEBED8.mft (raw, json) Hash identifier: STs67SVYpvg485KCr3oLkwNQvRpbLA86BeBnoDEId3A= Subject key identifier: 57:A4:03:AB:08:58:BD:62:A8:18:0B:33:05:D1:4F:4D:2D:7E:99:10 Authority key identifier: 8E:94:47:BD:6E:58:02:4B:A4:18:23:80:EF:F3:74:37:72:CE:BE:D8 Certificate issuer: /CN=8E9447BD6E58024BA4182380EFF3743772CEBED8 Certificate serial: 052B9B1BCC06F603C67FF3A2C4990711FB0A8D07 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8E9447BD6E58024BA4182380EFF3743772CEBED8.cer Subject info access: rsync://repo-rpki.idnic.net/repo/7846fed7-f88e-48ea-a6d1-6f756bcf8db6/0/8E9447BD6E58024BA4182380EFF3743772CEBED8.mft Manifest number: 01F7 Signing time: Mon 20 Oct 2025 16:42:11 +0000 Manifest this update: Mon 20 Oct 2025 16:37:11 +0000 Manifest next update: Thu 23 Oct 2025 18:51:11 +0000 Files and hashes: 1: 3130332e3136302e33372e302f32342d3234203d3e20313431353834.roa (hash: +IMY2tCHHq00hfSj0qqAGK3VJsbjGklWL5sab/AdO2Q=) 2: 8E9447BD6E58024BA4182380EFF3743772CEBED8.crl (hash: KBxcBe+iOaaOVmq78DM1ntLiMRUspkY8BzWYYifvWy4=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/7846fed7-f88e-48ea-a6d1-6f756bcf8db6/0/8E9447BD6E58024BA4182380EFF3743772CEBED8.crl rsync://repo-rpki.idnic.net/repo/7846fed7-f88e-48ea-a6d1-6f756bcf8db6/0/8E9447BD6E58024BA4182380EFF3743772CEBED8.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8E9447BD6E58024BA4182380EFF3743772CEBED8.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 Oct 2025 11:48:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 05:2b:9b:1b:cc:06:f6:03:c6:7f:f3:a2:c4:99:07:11:fb:0a:8d:07 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8E9447BD6E58024BA4182380EFF3743772CEBED8 Validity Not Before: Oct 20 16:37:11 2025 GMT Not After : Oct 23 18:51:11 2025 GMT Subject: CN=57A403AB0858BD62A8180B3305D14F4D2D7E9910 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ef:d3:1e:73:bd:f5:e4:0d:27:2f:63:0b:f3:a8: 89:54:6d:0f:5f:ae:96:ca:a3:c0:00:2d:30:02:f7: b9:e5:0a:4d:24:44:1e:c5:7a:0a:64:3d:ba:c0:b0: e0:16:ec:1e:a2:7b:3b:d3:29:7e:0b:fd:df:60:e9: 03:03:5a:82:81:5e:17:2d:91:3e:30:3a:ce:e7:db: c9:30:98:c5:6d:ac:86:7a:86:e3:49:4f:25:74:37: de:e1:18:b4:35:40:5a:fb:12:42:03:53:93:a4:23: 37:28:d5:57:d2:72:32:97:23:ed:c0:44:1b:6f:18: 51:42:d0:ef:63:c7:33:17:8d:38:59:e3:1d:a8:ad: ba:ef:61:40:46:a4:12:8e:7d:a3:88:87:38:91:6c: dc:aa:4e:af:5d:df:52:df:f0:00:db:16:09:54:4c: 4b:0f:06:c1:43:f2:c1:14:5c:d2:92:15:a0:87:20: 7e:20:b7:67:e6:6b:fd:c6:e6:61:e5:20:0c:77:e5: 8a:a3:23:2f:b6:b6:40:0e:94:f5:12:c4:42:fa:12: e0:c4:85:cc:d8:1a:de:4e:5e:2b:d1:e2:c1:e1:c8: a7:61:92:d4:2a:fa:e9:fd:0c:f3:85:90:a2:1f:9c: a0:ad:51:6b:d7:2c:3f:a1:96:bf:6e:df:1d:40:16: 0a:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 57:A4:03:AB:08:58:BD:62:A8:18:0B:33:05:D1:4F:4D:2D:7E:99:10 X509v3 Authority Key Identifier: keyid:8E:94:47:BD:6E:58:02:4B:A4:18:23:80:EF:F3:74:37:72:CE:BE:D8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/7846fed7-f88e-48ea-a6d1-6f756bcf8db6/0/8E9447BD6E58024BA4182380EFF3743772CEBED8.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8E9447BD6E58024BA4182380EFF3743772CEBED8.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/7846fed7-f88e-48ea-a6d1-6f756bcf8db6/0/8E9447BD6E58024BA4182380EFF3743772CEBED8.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption af:86:55:01:80:c1:50:24:7b:f6:34:9d:2e:99:d1:26:73:40: 60:77:f3:29:e2:2a:59:ee:0c:70:36:09:d3:ab:6f:3d:41:1d: 89:91:7e:de:a8:8a:3e:8a:60:8b:1e:21:98:79:5a:28:a9:55: f9:f7:fb:c0:a0:01:e2:cc:c9:d7:31:d0:0e:f7:ca:79:e3:f2: 14:f3:ce:f2:de:e2:61:ca:30:a6:06:cc:8a:4c:e7:50:dc:d7: 27:dc:d1:db:c7:b8:3c:a1:d2:f5:0d:47:b6:25:3f:da:49:2b: 0f:f1:00:f1:99:4f:0d:73:b9:0a:f1:ec:1e:fa:44:4e:3c:29: 03:ee:76:57:19:2c:e4:27:41:ff:54:37:3a:c0:04:9c:a4:be: 4c:d2:82:ec:80:09:11:12:7b:9f:93:32:fe:d8:5e:c4:76:52: 43:6e:6d:b6:23:f9:63:58:a1:a0:22:5e:b7:d6:a6:16:ea:7f: 4a:02:a1:df:22:ca:69:75:26:20:c7:3b:82:b2:a2:a9:aa:cd: bd:cd:80:dd:09:d7:45:03:0a:d7:61:68:61:1d:ec:7c:8b:1e: 75:91:e3:7c:4a:b6:4c:ed:d5:64:51:c3:5e:1c:c1:30:3c:6f: 63:d7:19:e4:df:db:79:4b:5e:4a:d5:a7:38:32:45:20:f7:43: 74:b1:b2:3a -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUBSubG8wG9gPGf/OixJkHEfsKjQcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEU5NDQ3QkQ2RTU4MDI0QkE0MTgyMzgwRUZGMzc0Mzc3 MkNFQkVEODAeFw0yNTEwMjAxNjM3MTFaFw0yNTEwMjMxODUxMTFaMDMxMTAvBgNV BAMTKDU3QTQwM0FCMDg1OEJENjJBODE4MEIzMzA1RDE0RjREMkQ3RTk5MTAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDv0x5zvfXkDScvYwvzqIlUbQ9f rpbKo8AALTAC97nlCk0kRB7FegpkPbrAsOAW7B6iezvTKX4L/d9g6QMDWoKBXhct kT4wOs7n28kwmMVtrIZ6huNJTyV0N97hGLQ1QFr7EkIDU5OkIzco1VfScjKXI+3A RBtvGFFC0O9jxzMXjThZ4x2orbrvYUBGpBKOfaOIhziRbNyqTq9d31Lf8ADbFglU TEsPBsFD8sEUXNKSFaCHIH4gt2fma/3G5mHlIAx35YqjIy+2tkAOlPUSxEL6EuDE hczYGt5OXivR4sHhyKdhktQq+un9DPOFkKIfnKCtUWvXLD+hlr9u3x1AFgp/AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUV6QDqwhYvWKoGAszBdFPTS1+mRAwHwYDVR0j BBgwFoAUjpRHvW5YAkukGCOA7/N0N3LOvtgwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 ODQ2ZmVkNy1mODhlLTQ4ZWEtYTZkMS02Zjc1NmJjZjhkYjYvMC84RTk0NDdCRDZF NTgwMjRCQTQxODIzODBFRkYzNzQzNzcyQ0VCRUQ4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOEU5NDQ3QkQ2RTU4MDI0QkE0MTgyMzgwRUZGMzc0Mzc3MkNF QkVEOC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNzg0NmZlZDctZjg4ZS00OGVhLWE2 ZDEtNmY3NTZiY2Y4ZGI2LzAvOEU5NDQ3QkQ2RTU4MDI0QkE0MTgyMzgwRUZGMzc0 Mzc3MkNFQkVEOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAK+GVQGAwVAke/Y0nS6Z0SZzQGB38yniKlnu DHA2CdOrbz1BHYmRft6oij6KYIseIZh5WiipVfn3+8CgAeLMydcx0A73ynnj8hTz zvLe4mHKMKYGzIpM51Dc1yfc0dvHuDyh0vUNR7YlP9pJKw/xAPGZTw1zuQrx7B76 RE48KQPudlcZLOQnQf9UNzrABJykvkzSguyACRESe5+TMv7YXsR2UkNubbYj+WNY oaAiXrfWphbqf0oCod8iyml1JiDHO4Kyoqmqzb3NgN0J10UDCtdhaGEd7HyLHnWR 43xKtkzt1WRRw14cwTA8b2PXGeTf23lLXkrVpzgyRSD3Q3Sxsjo= -----END CERTIFICATE-----Generated at Mon Oct 20 21:07:12 2025 by rpki-client