$ rpki-client -vvf repo-rpki.idnic.net/repo/7bdbbc08-4e8e-44ba-a4cf-05e233dda3a5/0/8115D30091F8948B76AE0AAC8B4F68550DA321CD.mft File: 8115D30091F8948B76AE0AAC8B4F68550DA321CD.mft (raw, json) Hash identifier: CPWT3erZK3lxoWt1Yr7JTSjAJkA+pzXCLdckmm71boo= Subject key identifier: CB:74:FA:4B:9E:B2:50:57:13:FC:FD:A5:6D:2C:CC:85:DF:EB:90:E8 Authority key identifier: 81:15:D3:00:91:F8:94:8B:76:AE:0A:AC:8B:4F:68:55:0D:A3:21:CD Certificate issuer: /CN=8115D30091F8948B76AE0AAC8B4F68550DA321CD Certificate serial: 666DC93E05067D4AB5323EC15BA1539179449578 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8115D30091F8948B76AE0AAC8B4F68550DA321CD.cer Subject info access: rsync://repo-rpki.idnic.net/repo/7bdbbc08-4e8e-44ba-a4cf-05e233dda3a5/0/8115D30091F8948B76AE0AAC8B4F68550DA321CD.mft Manifest number: 0214 Signing time: Sat 18 Oct 2025 16:40:03 +0000 Manifest this update: Sat 18 Oct 2025 16:35:03 +0000 Manifest next update: Tue 21 Oct 2025 20:42:03 +0000 Files and hashes: 1: 34332e3232392e3234382e302f32322d3234203d3e203435373331.roa (hash: 6QYiowaUHr77b6SHtMm/wFHLHsnE4/CHR6s2UKLu4J0=) 2: 8115D30091F8948B76AE0AAC8B4F68550DA321CD.crl (hash: h3dmnrvGI/rsWMFWNsq3+KRBjJCGp7QnR9dfoijWjX4=) 3: 3138302e3233352e3134382e302f32322d3234203d3e203435373331.roa (hash: HxGB/bUslsxHfeCfoct3SORx0s0Y1RxTBE2WHAbQK5w=) 4: 3131332e32302e32382e302f32322d3234203d3e203435373331.roa (hash: 4OyDyZeEQND65aawqOInlxqrAJlZe0Z4Rsi7/2+kKVI=) 5: 323030313a6466303a62633a3a2f34382d3438203d3e203435373331.roa (hash: 0Va8dfmQpSBmOg74IAPb4RGOIS0UpCgpkBTTVh/iLok=) 6: 3130332e362e35322e302f32322d3234203d3e203435373331.roa (hash: 6tOL4hJTfKy0QTohf2XnIaRbJ/5EvxeyWw/OGANzGm8=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/7bdbbc08-4e8e-44ba-a4cf-05e233dda3a5/0/8115D30091F8948B76AE0AAC8B4F68550DA321CD.crl rsync://repo-rpki.idnic.net/repo/7bdbbc08-4e8e-44ba-a4cf-05e233dda3a5/0/8115D30091F8948B76AE0AAC8B4F68550DA321CD.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8115D30091F8948B76AE0AAC8B4F68550DA321CD.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 21 Oct 2025 20:42:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 66:6d:c9:3e:05:06:7d:4a:b5:32:3e:c1:5b:a1:53:91:79:44:95:78 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8115D30091F8948B76AE0AAC8B4F68550DA321CD Validity Not Before: Oct 18 16:35:03 2025 GMT Not After : Oct 21 20:42:03 2025 GMT Subject: CN=CB74FA4B9EB2505713FCFDA56D2CCC85DFEB90E8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:1f:87:0e:91:97:3f:48:8e:28:36:5a:86:3b: 03:8b:9d:41:2f:18:e8:80:ba:38:95:c5:a8:52:cb: 83:26:74:2c:92:1f:f3:35:60:c2:17:2d:4e:34:d3: 1e:7f:ee:ca:02:c4:0a:5c:a7:6d:d9:64:13:4c:06: 84:67:a8:13:dd:29:de:13:d8:1b:50:94:82:97:55: d0:0c:a7:a8:cd:b9:89:5a:3b:39:94:4b:00:4c:12: f3:ca:3e:56:36:67:2e:99:48:7b:59:2a:32:f7:d5: 38:90:3c:10:9f:09:08:e0:12:a7:2c:3a:67:5e:68: e0:ec:97:f8:cc:0c:5d:11:2a:7a:2b:6c:c6:8f:ee: f2:86:73:f3:31:6f:d9:63:a1:bc:de:f5:7a:d2:d2: a0:47:54:13:95:cd:bc:16:22:81:e1:04:ee:12:ca: 28:4c:59:a6:38:8d:40:12:a5:17:d9:6c:a5:04:a2: 4c:31:d3:c5:63:f3:b2:11:19:99:8b:78:5e:08:06: 5c:e8:bf:1d:03:2f:da:7a:c9:7d:d6:8e:86:78:c7: 05:33:e6:f5:dc:b2:1b:4d:cd:05:50:54:98:2b:0f: 55:ca:93:39:e7:4c:20:e0:d5:86:81:14:f2:5f:b8: ee:43:77:17:27:cd:21:77:80:88:55:02:08:da:48: b4:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CB:74:FA:4B:9E:B2:50:57:13:FC:FD:A5:6D:2C:CC:85:DF:EB:90:E8 X509v3 Authority Key Identifier: keyid:81:15:D3:00:91:F8:94:8B:76:AE:0A:AC:8B:4F:68:55:0D:A3:21:CD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/7bdbbc08-4e8e-44ba-a4cf-05e233dda3a5/0/8115D30091F8948B76AE0AAC8B4F68550DA321CD.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8115D30091F8948B76AE0AAC8B4F68550DA321CD.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/7bdbbc08-4e8e-44ba-a4cf-05e233dda3a5/0/8115D30091F8948B76AE0AAC8B4F68550DA321CD.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 30:ce:14:63:c8:36:c0:35:06:7f:6a:3d:70:34:2e:9a:c9:85: 8f:0c:fa:1d:63:9a:13:46:a8:33:e6:ab:11:81:70:51:5f:66: 1f:c7:19:8f:8b:1e:ac:6d:97:c7:8a:1d:1e:58:ea:c5:b2:7d: 8f:7d:f1:fc:f9:c8:6f:53:00:71:7e:94:5b:9d:7a:04:8d:fa: 55:b4:cb:86:4a:14:c7:31:e7:3b:a8:1f:d6:22:dd:60:42:7e: 34:56:5f:41:2e:65:4d:47:c7:7b:2d:cc:05:89:8a:75:5b:cf: 27:99:13:85:69:b2:d5:4b:f4:f5:3f:80:31:51:56:bf:65:85: 5a:2b:46:d5:7a:6f:ee:c5:7d:7b:b1:6d:02:e5:1d:20:73:8f: 1a:79:47:8a:8a:3c:c1:5b:9b:91:b9:8b:05:21:2c:e1:c3:c6: e3:6f:ef:f7:ac:af:6f:03:98:7b:67:b0:60:a1:b6:51:cc:e9: 3a:61:de:60:31:f4:a1:cc:87:4b:ec:c0:36:bf:4b:6e:0b:40: 48:57:f2:bf:92:6c:35:c2:fe:70:0d:64:c6:16:a0:f8:3f:bf: 64:a0:e9:03:3c:00:a0:02:16:d8:98:6d:0b:d2:f0:34:1a:16: fd:bc:11:f6:33:40:47:a3:6f:af:f2:03:35:9f:c4:f5:11:47: f6:9c:9e:e1 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUZm3JPgUGfUq1Mj7BW6FTkXlElXgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODExNUQzMDA5MUY4OTQ4Qjc2QUUwQUFDOEI0RjY4NTUw REEzMjFDRDAeFw0yNTEwMTgxNjM1MDNaFw0yNTEwMjEyMDQyMDNaMDMxMTAvBgNV BAMTKENCNzRGQTRCOUVCMjUwNTcxM0ZDRkRBNTZEMkNDQzg1REZFQjkwRTgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDaH4cOkZc/SI4oNlqGOwOLnUEv GOiAujiVxahSy4MmdCySH/M1YMIXLU400x5/7soCxApcp23ZZBNMBoRnqBPdKd4T 2BtQlIKXVdAMp6jNuYlaOzmUSwBMEvPKPlY2Zy6ZSHtZKjL31TiQPBCfCQjgEqcs OmdeaODsl/jMDF0RKnorbMaP7vKGc/Mxb9ljobze9XrS0qBHVBOVzbwWIoHhBO4S yihMWaY4jUASpRfZbKUEokwx08Vj87IRGZmLeF4IBlzovx0DL9p6yX3WjoZ4xwUz 5vXcshtNzQVQVJgrD1XKkznnTCDg1YaBFPJfuO5DdxcnzSF3gIhVAgjaSLQxAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUy3T6S56yUFcT/P2lbSzMhd/rkOgwHwYDVR0j BBgwFoAUgRXTAJH4lIt2rgqsi09oVQ2jIc0wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 YmRiYmMwOC00ZThlLTQ0YmEtYTRjZi0wNWUyMzNkZGEzYTUvMC84MTE1RDMwMDkx Rjg5NDhCNzZBRTBBQUM4QjRGNjg1NTBEQTMyMUNELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvODExNUQzMDA5MUY4OTQ4Qjc2QUUwQUFDOEI0RjY4NTUwREEz MjFDRC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vN2JkYmJjMDgtNGU4ZS00NGJhLWE0 Y2YtMDVlMjMzZGRhM2E1LzAvODExNUQzMDA5MUY4OTQ4Qjc2QUUwQUFDOEI0RjY4 NTUwREEzMjFDRC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADDOFGPINsA1Bn9qPXA0LprJhY8M+h1jmhNG qDPmqxGBcFFfZh/HGY+LHqxtl8eKHR5Y6sWyfY998fz5yG9TAHF+lFudegSN+lW0 y4ZKFMcx5zuoH9Yi3WBCfjRWX0EuZU1Hx3stzAWJinVbzyeZE4VpstVL9PU/gDFR Vr9lhVorRtV6b+7FfXuxbQLlHSBzjxp5R4qKPMFbm5G5iwUhLOHDxuNv7/esr28D mHtnsGChtlHM6Tph3mAx9KHMh0vswDa/S24LQEhX8r+SbDXC/nANZMYWoPg/v2Sg 6QM8AKACFtiYbQvS8DQaFv28EfYzQEejb6/yAzWfxPURR/acnuE= -----END CERTIFICATE-----Generated at Mon Oct 20 15:36:45 2025 by rpki-client