$ rpki-client -vvf repo-rpki.idnic.net/repo/7e8cbdc8-d195-4c7d-b3e8-0a8fbae8c284/0/8790EFE9518BF8664B34E1227585F3516FDC5367.mft File: 8790EFE9518BF8664B34E1227585F3516FDC5367.mft (raw, json) Hash identifier: 5W2UY8iA+pdJh9xk0uO6WTE23Vu6waYz26MjY3gnZ/8= Subject key identifier: AF:8F:D4:6B:67:62:A1:13:4E:8E:D8:9D:1D:2A:6B:83:FC:74:A2:AC Authority key identifier: 87:90:EF:E9:51:8B:F8:66:4B:34:E1:22:75:85:F3:51:6F:DC:53:67 Certificate issuer: /CN=8790EFE9518BF8664B34E1227585F3516FDC5367 Certificate serial: 7E574F9C14E33FF3FD48EF769EF8FAD31FE0F1BD Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8790EFE9518BF8664B34E1227585F3516FDC5367.cer Subject info access: rsync://repo-rpki.idnic.net/repo/7e8cbdc8-d195-4c7d-b3e8-0a8fbae8c284/0/8790EFE9518BF8664B34E1227585F3516FDC5367.mft Manifest number: 0216 Signing time: Sat 18 Oct 2025 23:01:30 +0000 Manifest this update: Sat 18 Oct 2025 22:56:30 +0000 Manifest next update: Wed 22 Oct 2025 00:45:30 +0000 Files and hashes: 1: 3130332e3136362e39302e302f32332d3234203d3e20313431393431.roa (hash: u/DfRKi6okqGd/2PRwDyTkJXR+LfAGJBXiMbBVUigkU=) 2: 8790EFE9518BF8664B34E1227585F3516FDC5367.crl (hash: BKTPPMGC0s9qpYZrZoOalI1ScpML2N3cXFjQH7FVnPs=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/7e8cbdc8-d195-4c7d-b3e8-0a8fbae8c284/0/8790EFE9518BF8664B34E1227585F3516FDC5367.crl rsync://repo-rpki.idnic.net/repo/7e8cbdc8-d195-4c7d-b3e8-0a8fbae8c284/0/8790EFE9518BF8664B34E1227585F3516FDC5367.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8790EFE9518BF8664B34E1227585F3516FDC5367.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 Oct 2025 00:45:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7e:57:4f:9c:14:e3:3f:f3:fd:48:ef:76:9e:f8:fa:d3:1f:e0:f1:bd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8790EFE9518BF8664B34E1227585F3516FDC5367 Validity Not Before: Oct 18 22:56:30 2025 GMT Not After : Oct 22 00:45:30 2025 GMT Subject: CN=AF8FD46B6762A1134E8ED89D1D2A6B83FC74A2AC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ec:eb:96:b6:be:cc:e2:ff:d8:c6:4b:5a:af:71: 1d:1a:7f:51:2e:fb:de:4e:98:0f:73:f7:ff:05:4f: aa:c2:31:d7:77:5c:72:d4:ef:f1:a2:5c:6e:0a:85: 2f:2f:b4:40:cb:0b:ac:4d:25:51:06:9c:dc:58:af: fe:8e:ef:52:23:89:b9:6e:9b:07:ad:78:02:b4:5d: b6:3c:dc:a3:17:88:b1:fd:b0:5f:1f:6f:65:73:6d: af:13:db:c0:ed:83:c0:16:fe:7f:fe:a8:34:e0:08: 4b:ec:59:70:ec:43:ab:b0:79:4d:c3:cd:4e:46:31: f2:c1:2d:60:16:db:0e:10:74:c3:2a:ab:d7:72:3d: e3:c8:47:12:66:c4:fd:1b:4e:60:ab:ae:99:a6:1a: 21:26:98:a7:db:e6:3e:be:d3:33:eb:c1:3b:0a:aa: 1d:23:70:18:0a:c1:99:fc:d3:97:1a:6a:e2:47:14: 95:2f:56:1c:23:07:12:60:39:d3:cc:f3:db:57:1c: 7b:23:e2:d8:0b:ff:46:bb:ff:56:33:2c:bd:34:4a: ef:23:c3:71:c6:24:e3:09:94:70:a1:de:cf:d8:f8: ad:82:29:62:8c:41:78:c3:09:e4:f7:ac:03:c3:96: 1f:aa:1c:20:8a:9c:4a:ca:4b:29:68:28:84:07:37: 5a:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:8F:D4:6B:67:62:A1:13:4E:8E:D8:9D:1D:2A:6B:83:FC:74:A2:AC X509v3 Authority Key Identifier: keyid:87:90:EF:E9:51:8B:F8:66:4B:34:E1:22:75:85:F3:51:6F:DC:53:67 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/7e8cbdc8-d195-4c7d-b3e8-0a8fbae8c284/0/8790EFE9518BF8664B34E1227585F3516FDC5367.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8790EFE9518BF8664B34E1227585F3516FDC5367.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/7e8cbdc8-d195-4c7d-b3e8-0a8fbae8c284/0/8790EFE9518BF8664B34E1227585F3516FDC5367.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption df:33:dc:cb:ea:6c:13:94:7a:30:4b:aa:94:c4:84:b7:e1:df: 61:84:52:4e:49:c6:46:67:6f:9f:93:b6:9c:fb:08:7f:a4:7e: 84:7f:55:5b:26:d1:08:92:18:4f:68:8d:83:7e:f9:b5:49:12: 42:5b:b3:97:61:ab:b4:ec:75:d2:32:f1:97:a6:73:f8:24:cf: 48:82:5c:4e:a1:e8:a6:b4:da:3c:8f:60:25:12:74:fd:42:07: bb:9c:01:33:d7:76:3d:75:d2:e2:87:3a:eb:36:d2:5c:d4:3b: cb:09:da:fe:44:29:2f:19:25:9c:cf:32:a5:24:c2:3c:a5:f5: 71:83:fa:40:48:00:5c:12:9c:b8:c3:72:70:77:50:8e:e4:27: 3e:5a:4d:ce:9e:b4:00:03:27:f0:76:c3:9b:f6:58:8f:da:04: 19:43:f0:3c:14:33:db:11:3b:4a:67:56:45:98:97:a6:80:62: 10:52:d2:a7:4d:46:7f:04:b5:1f:fb:0e:b8:f1:8f:e3:b4:55: 83:20:2e:f2:cb:af:51:dc:84:f2:88:f1:3a:e6:eb:48:57:b5: ce:e2:6c:6d:f7:e0:e4:6a:06:0c:be:aa:8e:54:58:72:b9:52: ee:1c:cf:83:66:de:f4:b0:45:f3:9e:6e:6a:9f:02:15:84:c9: f6:5a:3a:da -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUfldPnBTjP/P9SO92nvj60x/g8b0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODc5MEVGRTk1MThCRjg2NjRCMzRFMTIyNzU4NUYzNTE2 RkRDNTM2NzAeFw0yNTEwMTgyMjU2MzBaFw0yNTEwMjIwMDQ1MzBaMDMxMTAvBgNV BAMTKEFGOEZENDZCNjc2MkExMTM0RThFRDg5RDFEMkE2QjgzRkM3NEEyQUMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDs65a2vszi/9jGS1qvcR0af1Eu +95OmA9z9/8FT6rCMdd3XHLU7/GiXG4KhS8vtEDLC6xNJVEGnNxYr/6O71Ijiblu mweteAK0XbY83KMXiLH9sF8fb2Vzba8T28Dtg8AW/n/+qDTgCEvsWXDsQ6uweU3D zU5GMfLBLWAW2w4QdMMqq9dyPePIRxJmxP0bTmCrrpmmGiEmmKfb5j6+0zPrwTsK qh0jcBgKwZn805caauJHFJUvVhwjBxJgOdPM89tXHHsj4tgL/0a7/1YzLL00Su8j w3HGJOMJlHCh3s/Y+K2CKWKMQXjDCeT3rAPDlh+qHCCKnErKSyloKIQHN1qhAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUr4/Ua2dioRNOjtidHSprg/x0oqwwHwYDVR0j BBgwFoAUh5Dv6VGL+GZLNOEidYXzUW/cU2cwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 ZThjYmRjOC1kMTk1LTRjN2QtYjNlOC0wYThmYmFlOGMyODQvMC84NzkwRUZFOTUx OEJGODY2NEIzNEUxMjI3NTg1RjM1MTZGREM1MzY3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvODc5MEVGRTk1MThCRjg2NjRCMzRFMTIyNzU4NUYzNTE2RkRD NTM2Ny5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vN2U4Y2JkYzgtZDE5NS00YzdkLWIz ZTgtMGE4ZmJhZThjMjg0LzAvODc5MEVGRTk1MThCRjg2NjRCMzRFMTIyNzU4NUYz NTE2RkRDNTM2Ny5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAN8z3MvqbBOUejBLqpTEhLfh32GEUk5JxkZn b5+Ttpz7CH+kfoR/VVsm0QiSGE9ojYN++bVJEkJbs5dhq7TsddIy8Zemc/gkz0iC XE6h6Ka02jyPYCUSdP1CB7ucATPXdj110uKHOus20lzUO8sJ2v5EKS8ZJZzPMqUk wjyl9XGD+kBIAFwSnLjDcnB3UI7kJz5aTc6etAADJ/B2w5v2WI/aBBlD8DwUM9sR O0pnVkWYl6aAYhBS0qdNRn8EtR/7Drjxj+O0VYMgLvLLr1HchPKI8Trm60hXtc7i bG334ORqBgy+qo5UWHK5Uu4cz4Nm3vSwRfOebmqfAhWEyfZaOto= -----END CERTIFICATE-----Generated at Mon Oct 20 15:11:37 2025 by rpki-client