$ rpki-client -vvf repo-rpki.idnic.net/repo/8116fbc9-b31c-4225-a697-4fedbc234db6/0/C0C8E7243E4E8DECD7A8EA1D61FD424108E8D3D5.mft File: C0C8E7243E4E8DECD7A8EA1D61FD424108E8D3D5.mft (raw, json) Hash identifier: jJklPRzPNQBpQAiJHiTvig5/CARbkQrbQf+Rsidx7ZI= Subject key identifier: 02:C0:7D:02:01:36:2B:52:9F:EE:31:D3:2D:1F:38:D2:0A:8D:B5:9C Authority key identifier: C0:C8:E7:24:3E:4E:8D:EC:D7:A8:EA:1D:61:FD:42:41:08:E8:D3:D5 Certificate issuer: /CN=C0C8E7243E4E8DECD7A8EA1D61FD424108E8D3D5 Certificate serial: 404ACCB233066A7592AB7972F6A957D36A0FFAB1 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C0C8E7243E4E8DECD7A8EA1D61FD424108E8D3D5.cer Subject info access: rsync://repo-rpki.idnic.net/repo/8116fbc9-b31c-4225-a697-4fedbc234db6/0/C0C8E7243E4E8DECD7A8EA1D61FD424108E8D3D5.mft Manifest number: B3 Signing time: Sat 18 Oct 2025 15:21:25 +0000 Manifest this update: Sat 18 Oct 2025 15:16:25 +0000 Manifest next update: Wed 22 Oct 2025 00:47:25 +0000 Files and hashes: 1: C0C8E7243E4E8DECD7A8EA1D61FD424108E8D3D5.crl (hash: h/CrHXU6NYJDFDZ4lj91Z2AI2KCD4y1pV0LnLRg3aXc=) 2: 3130332e37352e3233372e302f32342d3234203d3e203634333130.roa (hash: WLCShlxfdsF203Qx2wOYYjy6P8cT8pTLxL//5fp4yiA=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/8116fbc9-b31c-4225-a697-4fedbc234db6/0/C0C8E7243E4E8DECD7A8EA1D61FD424108E8D3D5.crl rsync://repo-rpki.idnic.net/repo/8116fbc9-b31c-4225-a697-4fedbc234db6/0/C0C8E7243E4E8DECD7A8EA1D61FD424108E8D3D5.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C0C8E7243E4E8DECD7A8EA1D61FD424108E8D3D5.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 Oct 2025 00:47:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 40:4a:cc:b2:33:06:6a:75:92:ab:79:72:f6:a9:57:d3:6a:0f:fa:b1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C0C8E7243E4E8DECD7A8EA1D61FD424108E8D3D5 Validity Not Before: Oct 18 15:16:25 2025 GMT Not After : Oct 22 00:47:25 2025 GMT Subject: CN=02C07D0201362B529FEE31D32D1F38D20A8DB59C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:d2:bb:85:b7:5c:64:03:56:61:86:f0:5f:80: f3:16:7e:12:d3:8d:2b:ca:5a:c6:30:4b:ac:85:54: 77:58:ec:c5:6d:c8:85:72:ab:50:93:61:8b:15:9b: c1:1c:34:8f:bc:de:f0:d4:72:e5:6c:2a:30:6d:37: 4e:e8:71:20:12:00:78:86:b1:ee:ff:7b:55:c2:46: ef:51:da:42:1d:6e:b3:15:ad:d1:28:35:2e:38:11: 8c:6e:70:02:f8:df:c9:41:14:b4:96:66:43:8c:83: 75:20:ca:09:80:1e:df:d3:ee:bb:7a:20:f8:ef:f9: 65:d5:22:23:f2:5d:8a:a5:9d:70:95:ab:65:3b:cf: 8b:71:46:b0:e6:c9:53:58:fe:6b:c5:35:2e:7e:a4: 21:d7:7a:30:c5:5b:1d:91:8f:49:64:1c:62:e3:24: 0e:3f:9c:06:97:86:74:47:50:db:fc:90:b5:a1:5c: 83:f3:c3:3f:5b:e3:9f:14:15:b7:d7:de:1a:06:eb: 2e:f5:77:08:f1:5a:4a:d0:6a:91:ef:94:33:df:24: 4c:c7:0f:ad:ba:9c:35:72:5c:d3:4c:bd:81:a6:d6: 25:0d:47:aa:a4:ea:83:c0:0c:2b:be:ea:33:02:57: 3d:3c:83:3b:ce:59:ad:ef:06:65:13:e9:a0:2f:9b: 09:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:C0:7D:02:01:36:2B:52:9F:EE:31:D3:2D:1F:38:D2:0A:8D:B5:9C X509v3 Authority Key Identifier: keyid:C0:C8:E7:24:3E:4E:8D:EC:D7:A8:EA:1D:61:FD:42:41:08:E8:D3:D5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/8116fbc9-b31c-4225-a697-4fedbc234db6/0/C0C8E7243E4E8DECD7A8EA1D61FD424108E8D3D5.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C0C8E7243E4E8DECD7A8EA1D61FD424108E8D3D5.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/8116fbc9-b31c-4225-a697-4fedbc234db6/0/C0C8E7243E4E8DECD7A8EA1D61FD424108E8D3D5.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 68:04:f1:02:cb:a0:cd:6b:b6:47:17:a2:93:1e:8a:fe:b2:6f: 93:4f:2f:f7:67:44:ee:55:a3:4d:40:2f:0d:89:a2:cc:37:e8: 07:e7:9f:d1:a2:69:39:ec:2c:51:ec:ad:e8:5c:aa:ba:f6:1d: f9:d6:5b:f3:d2:8c:d9:bf:d3:27:e4:2a:7b:29:da:fd:df:00: da:65:49:15:ad:42:9a:bd:e0:9e:1f:4c:16:cf:9c:90:ab:d0: 91:39:c1:cb:e3:be:42:42:bf:01:de:f6:91:6a:c2:98:bf:29: a0:0b:64:da:9b:c4:1f:4f:ed:cd:a1:31:59:bc:16:7c:b0:5a: 0e:f5:c0:0a:77:ea:05:b8:84:c5:06:bc:51:f9:30:ab:7c:ef: 2c:ef:7f:cc:5b:b8:ae:be:11:06:cf:c7:22:63:f4:d5:48:a8: 30:fb:37:4c:1a:d8:ef:0e:be:19:8f:3c:df:0e:20:ca:ab:8d: 61:71:9a:cf:f1:7b:81:50:b5:3a:c0:8c:11:ce:f7:0e:40:59: ab:f2:a3:77:9b:d2:70:2d:38:83:02:2b:bb:63:65:4a:13:9a: 61:7e:53:c0:bb:c2:64:ba:bf:a9:5f:12:a5:26:f0:75:38:c9: e4:d9:a5:ee:d9:f8:6d:59:f9:73:98:55:53:04:61:0e:fa:ea: e2:dc:c0:8d -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUQErMsjMGanWSq3ly9qlX02oP+rEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzBDOEU3MjQzRTRFOERFQ0Q3QThFQTFENjFGRDQyNDEw OEU4RDNENTAeFw0yNTEwMTgxNTE2MjVaFw0yNTEwMjIwMDQ3MjVaMDMxMTAvBgNV BAMTKDAyQzA3RDAyMDEzNjJCNTI5RkVFMzFEMzJEMUYzOEQyMEE4REI1OUMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDB0ruFt1xkA1ZhhvBfgPMWfhLT jSvKWsYwS6yFVHdY7MVtyIVyq1CTYYsVm8EcNI+83vDUcuVsKjBtN07ocSASAHiG se7/e1XCRu9R2kIdbrMVrdEoNS44EYxucAL438lBFLSWZkOMg3UgygmAHt/T7rt6 IPjv+WXVIiPyXYqlnXCVq2U7z4txRrDmyVNY/mvFNS5+pCHXejDFWx2Rj0lkHGLj JA4/nAaXhnRHUNv8kLWhXIPzwz9b458UFbfX3hoG6y71dwjxWkrQapHvlDPfJEzH D626nDVyXNNMvYGm1iUNR6qk6oPADCu+6jMCVz08gzvOWa3vBmUT6aAvmwnxAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUAsB9AgE2K1Kf7jHTLR840gqNtZwwHwYDVR0j BBgwFoAUwMjnJD5OjezXqOodYf1CQQjo09UwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 MTE2ZmJjOS1iMzFjLTQyMjUtYTY5Ny00ZmVkYmMyMzRkYjYvMC9DMEM4RTcyNDNF NEU4REVDRDdBOEVBMUQ2MUZENDI0MTA4RThEM0Q1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQzBDOEU3MjQzRTRFOERFQ0Q3QThFQTFENjFGRDQyNDEwOEU4 RDNENS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vODExNmZiYzktYjMxYy00MjI1LWE2 OTctNGZlZGJjMjM0ZGI2LzAvQzBDOEU3MjQzRTRFOERFQ0Q3QThFQTFENjFGRDQy NDEwOEU4RDNENS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGgE8QLLoM1rtkcXopMeiv6yb5NPL/dnRO5V o01ALw2Josw36Afnn9GiaTnsLFHsrehcqrr2HfnWW/PSjNm/0yfkKnsp2v3fANpl SRWtQpq94J4fTBbPnJCr0JE5wcvjvkJCvwHe9pFqwpi/KaALZNqbxB9P7c2hMVm8 FnywWg71wAp36gW4hMUGvFH5MKt87yzvf8xbuK6+EQbPxyJj9NVIqDD7N0wa2O8O vhmPPN8OIMqrjWFxms/xe4FQtTrAjBHO9w5AWavyo3eb0nAtOIMCK7tjZUoTmmF+ U8C7wmS6v6lfEqUm8HU4yeTZpe7Z+G1Z+XOYVVMEYQ766uLcwI0= -----END CERTIFICATE-----Generated at Mon Oct 20 09:44:23 2025 by rpki-client