$ rpki-client -vvf repo-rpki.idnic.net/repo/7d6529db-9330-4e97-adf1-b0ddf1a6e599/0/8B19ACE0A7391492B18BE27AC01D2A602872BFC0.mft File: 8B19ACE0A7391492B18BE27AC01D2A602872BFC0.mft (raw, json) Hash identifier: MYCbyrpqDtX+pdsKvpWGUWwFAeB7hNqApi1kGLKDcZM= Subject key identifier: B5:8F:D8:27:C1:AB:73:71:A5:FF:B9:33:73:F5:2F:03:65:90:9C:2F Authority key identifier: 8B:19:AC:E0:A7:39:14:92:B1:8B:E2:7A:C0:1D:2A:60:28:72:BF:C0 Certificate issuer: /CN=8B19ACE0A7391492B18BE27AC01D2A602872BFC0 Certificate serial: 12EFDA474AD7E19700240EFF856ABFC4FBC4B72C Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8B19ACE0A7391492B18BE27AC01D2A602872BFC0.cer Subject info access: rsync://repo-rpki.idnic.net/repo/7d6529db-9330-4e97-adf1-b0ddf1a6e599/0/8B19ACE0A7391492B18BE27AC01D2A602872BFC0.mft Manifest number: 019C Signing time: Sat 18 Oct 2025 20:40:04 +0000 Manifest this update: Sat 18 Oct 2025 20:35:04 +0000 Manifest next update: Wed 22 Oct 2025 06:38:04 +0000 Files and hashes: 1: 3130332e3132322e392e302f32342d3234203d3e20313530393635.roa (hash: QeU0/vEBTo6jIDTAqgbH9ossdE4o8/cj7giBqcJ2VYs=) 2: 3130332e3132322e382e302f32342d3234203d3e20313530393635.roa (hash: OBSu5NWIqhavEgs//Z/O6dTCa3LFoSwUa21LGk85Vss=) 3: 8B19ACE0A7391492B18BE27AC01D2A602872BFC0.crl (hash: IDPQF+Sel0pb4DOxtoFjfrprwgr8HPu9takQLF6nm24=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/7d6529db-9330-4e97-adf1-b0ddf1a6e599/0/8B19ACE0A7391492B18BE27AC01D2A602872BFC0.crl rsync://repo-rpki.idnic.net/repo/7d6529db-9330-4e97-adf1-b0ddf1a6e599/0/8B19ACE0A7391492B18BE27AC01D2A602872BFC0.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8B19ACE0A7391492B18BE27AC01D2A602872BFC0.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 Oct 2025 06:38:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 12:ef:da:47:4a:d7:e1:97:00:24:0e:ff:85:6a:bf:c4:fb:c4:b7:2c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8B19ACE0A7391492B18BE27AC01D2A602872BFC0 Validity Not Before: Oct 18 20:35:04 2025 GMT Not After : Oct 22 06:38:04 2025 GMT Subject: CN=B58FD827C1AB7371A5FFB93373F52F0365909C2F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:57:f4:08:cb:57:46:6c:e1:bb:b6:c3:6f:f5: 2a:d8:df:db:24:fc:19:39:61:25:2c:e7:25:77:35: 77:72:b1:c7:a7:a6:5c:63:dd:1e:bf:d5:82:68:40: 10:dd:d6:8e:74:08:bf:88:9c:ad:48:f1:d3:66:10: 00:dd:5b:7d:90:50:b9:7f:67:ac:c4:da:7c:a1:8c: 20:60:01:77:25:a0:08:65:10:e8:40:93:47:32:67: 29:55:fa:e8:2d:c3:5e:19:65:7e:04:ba:13:b8:20: 44:9b:61:23:9f:f9:2a:8f:40:a9:97:dc:e4:c5:54: c0:a7:1c:98:98:82:dd:44:ea:aa:48:6d:45:23:2e: 84:af:49:ba:7d:f5:66:7d:62:da:b3:b0:d9:28:a4: 35:d4:25:11:40:78:48:fd:bb:6a:93:e7:43:45:c3: 9f:d1:e9:70:71:5f:18:f7:c0:ad:f0:28:e5:91:a4: 69:fd:b4:73:9c:59:0c:8f:c4:c8:ca:8d:f4:ab:d2: e1:e2:bf:25:57:90:56:9c:f7:a5:12:2c:07:b4:c5: 01:6f:13:4b:f3:22:bc:07:7e:7c:6b:4f:58:e5:fe: db:88:be:fb:30:53:24:9b:1e:dd:ea:0a:3d:47:6d: 01:9b:81:0c:55:af:49:28:50:c5:04:2c:f3:c4:9f: a8:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B5:8F:D8:27:C1:AB:73:71:A5:FF:B9:33:73:F5:2F:03:65:90:9C:2F X509v3 Authority Key Identifier: keyid:8B:19:AC:E0:A7:39:14:92:B1:8B:E2:7A:C0:1D:2A:60:28:72:BF:C0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/7d6529db-9330-4e97-adf1-b0ddf1a6e599/0/8B19ACE0A7391492B18BE27AC01D2A602872BFC0.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8B19ACE0A7391492B18BE27AC01D2A602872BFC0.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/7d6529db-9330-4e97-adf1-b0ddf1a6e599/0/8B19ACE0A7391492B18BE27AC01D2A602872BFC0.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 88:26:25:87:a6:d4:00:8e:82:20:6b:3f:ce:aa:ec:ad:f8:6b: b4:cd:fc:b1:b3:76:c5:2b:5e:3f:7f:35:be:68:da:f5:6e:b7: bb:61:ac:da:46:b1:47:e3:20:ac:19:62:6f:56:3f:ae:6e:9d: 97:b8:17:88:69:d3:96:52:f2:05:10:8d:a9:ad:ae:af:c4:0c: 62:a5:77:40:81:05:0d:88:0d:57:a0:95:99:95:43:13:bb:96: 11:a4:1d:37:a1:98:d6:1f:b1:94:cf:3c:ee:e7:cc:59:ec:79: f6:3b:1a:7e:e1:2d:3b:b0:c6:42:26:5c:fa:39:56:1d:6b:8b: 85:bc:33:af:ba:fd:7e:5b:53:a0:ca:7b:cf:fc:ab:4a:15:02: 83:a9:5f:5e:8b:b9:f4:96:e1:f3:3e:09:1f:6b:5e:3d:09:b0: f2:76:50:fa:0a:e0:94:09:eb:28:a3:fb:3d:e2:e7:40:c8:0e: 83:b3:98:6e:32:cc:a9:56:c1:a9:04:da:90:55:d9:a5:19:99: 60:59:96:0a:c8:e1:b2:eb:44:e9:f1:ea:f7:fa:39:a4:25:49: 84:84:9f:a7:37:98:2e:af:33:39:9f:20:5b:52:98:d0:c1:bf: c9:2b:5c:91:49:7c:7d:b4:44:3f:74:bb:1d:7f:64:7b:0e:1a: d2:d9:7f:b8 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUEu/aR0rX4ZcAJA7/hWq/xPvEtywwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEIxOUFDRTBBNzM5MTQ5MkIxOEJFMjdBQzAxRDJBNjAy ODcyQkZDMDAeFw0yNTEwMTgyMDM1MDRaFw0yNTEwMjIwNjM4MDRaMDMxMTAvBgNV BAMTKEI1OEZEODI3QzFBQjczNzFBNUZGQjkzMzczRjUyRjAzNjU5MDlDMkYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDEV/QIy1dGbOG7tsNv9SrY39sk /Bk5YSUs5yV3NXdyscenplxj3R6/1YJoQBDd1o50CL+InK1I8dNmEADdW32QULl/ Z6zE2nyhjCBgAXcloAhlEOhAk0cyZylV+ugtw14ZZX4EuhO4IESbYSOf+SqPQKmX 3OTFVMCnHJiYgt1E6qpIbUUjLoSvSbp99WZ9YtqzsNkopDXUJRFAeEj9u2qT50NF w5/R6XBxXxj3wK3wKOWRpGn9tHOcWQyPxMjKjfSr0uHivyVXkFac96USLAe0xQFv E0vzIrwHfnxrT1jl/tuIvvswUySbHt3qCj1HbQGbgQxVr0koUMUELPPEn6hPAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUtY/YJ8Grc3Gl/7kzc/UvA2WQnC8wHwYDVR0j BBgwFoAUixms4Kc5FJKxi+J6wB0qYChyv8AwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 ZDY1MjlkYi05MzMwLTRlOTctYWRmMS1iMGRkZjFhNmU1OTkvMC84QjE5QUNFMEE3 MzkxNDkyQjE4QkUyN0FDMDFEMkE2MDI4NzJCRkMwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOEIxOUFDRTBBNzM5MTQ5MkIxOEJFMjdBQzAxRDJBNjAyODcy QkZDMC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vN2Q2NTI5ZGItOTMzMC00ZTk3LWFk ZjEtYjBkZGYxYTZlNTk5LzAvOEIxOUFDRTBBNzM5MTQ5MkIxOEJFMjdBQzAxRDJB NjAyODcyQkZDMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIgmJYem1ACOgiBrP86q7K34a7TN/LGzdsUr Xj9/Nb5o2vVut7thrNpGsUfjIKwZYm9WP65unZe4F4hp05ZS8gUQjamtrq/EDGKl d0CBBQ2IDVeglZmVQxO7lhGkHTehmNYfsZTPPO7nzFnsefY7Gn7hLTuwxkImXPo5 Vh1ri4W8M6+6/X5bU6DKe8/8q0oVAoOpX16LufSW4fM+CR9rXj0JsPJ2UPoK4JQJ 6yij+z3i50DIDoOzmG4yzKlWwakE2pBV2aUZmWBZlgrI4bLrROnx6vf6OaQlSYSE n6c3mC6vMzmfIFtSmNDBv8krXJFJfH20RD90ux1/ZHsOGtLZf7g= -----END CERTIFICATE-----Generated at Mon Oct 20 14:40:41 2025 by rpki-client