$ rpki-client -vvf repo-rpki.idnic.net/repo/88788a8b-541b-4cbf-bab9-8dc377bc1284/0/8208317A24AB4CD828CD8855F81F3EF2B53CC681.mft File: 8208317A24AB4CD828CD8855F81F3EF2B53CC681.mft (raw, json) Hash identifier: cy/YUj+dHjrYvnMz5FFYyb589FVezXE+253h7C0Fn60= Subject key identifier: 78:C9:14:18:3A:28:34:7E:8C:32:19:09:04:86:A1:1E:EA:D3:16:C1 Authority key identifier: 82:08:31:7A:24:AB:4C:D8:28:CD:88:55:F8:1F:3E:F2:B5:3C:C6:81 Certificate issuer: /CN=8208317A24AB4CD828CD8855F81F3EF2B53CC681 Certificate serial: 183602BDD1286874B2082E3AEA76EFA0FAA2B429 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8208317A24AB4CD828CD8855F81F3EF2B53CC681.cer Subject info access: rsync://repo-rpki.idnic.net/repo/88788a8b-541b-4cbf-bab9-8dc377bc1284/0/8208317A24AB4CD828CD8855F81F3EF2B53CC681.mft Manifest number: 0191 Signing time: Sun 19 Oct 2025 06:52:11 +0000 Manifest this update: Sun 19 Oct 2025 06:47:11 +0000 Manifest next update: Wed 22 Oct 2025 16:15:11 +0000 Files and hashes: 1: 323030313a6466343a663930303a3a2f34382d3438203d3e20313337333531.roa (hash: b4NjxQmSbJ+wk760b/yGVrpvatI7XP4yXIQB6LdeYtw=) 2: 3130332e3131342e3134342e302f32342d3234203d3e20313337333531.roa (hash: ty2A/+XUIZKKt+5K+zVnVNMiG2s1JjDQEBRNkGaNrQE=) 3: 8208317A24AB4CD828CD8855F81F3EF2B53CC681.crl (hash: 25US8TuAITkmD7QScGvTDnrjNQ7ZyI0oifyqzNZXg+4=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/88788a8b-541b-4cbf-bab9-8dc377bc1284/0/8208317A24AB4CD828CD8855F81F3EF2B53CC681.crl rsync://repo-rpki.idnic.net/repo/88788a8b-541b-4cbf-bab9-8dc377bc1284/0/8208317A24AB4CD828CD8855F81F3EF2B53CC681.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8208317A24AB4CD828CD8855F81F3EF2B53CC681.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 Oct 2025 16:15:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 18:36:02:bd:d1:28:68:74:b2:08:2e:3a:ea:76:ef:a0:fa:a2:b4:29 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8208317A24AB4CD828CD8855F81F3EF2B53CC681 Validity Not Before: Oct 19 06:47:11 2025 GMT Not After : Oct 22 16:15:11 2025 GMT Subject: CN=78C914183A28347E8C3219090486A11EEAD316C1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:2c:dd:2d:2b:0d:be:ba:7f:e6:e7:0a:58:b4: a8:4e:05:7b:3c:9f:aa:f9:fa:4c:b6:c1:72:2a:97: 59:1f:c8:55:d3:f0:db:f9:c6:c2:59:d3:2e:99:99: 09:a9:f7:75:2c:b3:ea:a4:b4:9d:5d:35:34:f5:3c: 86:71:60:5f:c3:9c:6a:04:7b:1e:b7:c8:ae:27:f0: d3:df:0e:ac:7c:34:8d:bc:34:52:0e:28:59:ee:44: b8:36:c5:2b:db:69:5e:14:2b:09:e9:3b:80:34:00: 7d:7a:3d:9e:cf:bb:d8:dd:e5:21:97:9b:ba:bb:c7: b8:c1:ea:2f:7f:66:c9:5f:06:80:7b:8b:2f:6a:9f: 9c:d1:9f:53:34:d2:c0:45:0f:36:8e:0a:8d:63:2a: 46:49:b9:b6:75:48:16:e7:73:70:8c:2a:5e:3d:fd: bb:be:0f:b6:bf:b6:b7:e0:d0:75:3d:10:f0:de:38: 94:90:d6:3d:fc:2a:42:80:79:d3:fc:0b:91:cc:77: ba:8c:5c:c8:9d:57:6a:af:00:9e:fc:21:58:99:bc: 46:4f:f7:46:ce:f9:82:9d:e0:64:92:c6:8c:24:bb: 45:0e:aa:39:fe:76:34:61:45:e2:07:42:d5:7a:55: fe:e4:60:13:de:d4:19:bf:e8:30:da:04:76:26:21: 69:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 78:C9:14:18:3A:28:34:7E:8C:32:19:09:04:86:A1:1E:EA:D3:16:C1 X509v3 Authority Key Identifier: keyid:82:08:31:7A:24:AB:4C:D8:28:CD:88:55:F8:1F:3E:F2:B5:3C:C6:81 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/88788a8b-541b-4cbf-bab9-8dc377bc1284/0/8208317A24AB4CD828CD8855F81F3EF2B53CC681.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8208317A24AB4CD828CD8855F81F3EF2B53CC681.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/88788a8b-541b-4cbf-bab9-8dc377bc1284/0/8208317A24AB4CD828CD8855F81F3EF2B53CC681.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9b:a6:e1:52:fd:75:b6:8e:20:29:3d:b4:52:c0:a4:4c:59:67: 38:1c:43:60:ed:a0:cd:be:9c:6a:d7:7f:e3:28:68:4d:c7:1f: 24:74:56:87:7b:25:3b:c3:13:53:4b:5a:f4:0e:cc:e8:ea:1f: b6:6b:f0:6b:ea:6e:f7:08:e5:2f:8a:34:99:13:61:ba:b2:16: bb:c3:5f:28:be:d1:72:c8:28:f9:31:b2:13:0f:b6:d7:c3:e3: ee:ee:47:97:1d:e2:b5:21:71:2c:3f:72:d6:97:1f:17:91:95: 49:bf:0d:e2:98:27:7c:7f:fd:e3:20:4c:13:2e:88:d9:1b:d5: de:17:20:54:03:b4:dc:9c:75:91:dd:cd:24:b1:41:d1:5f:fc: ca:99:c0:25:19:0e:3f:f9:67:17:84:43:d4:f3:1e:57:c2:37: 96:d7:2c:1c:d6:cf:8e:df:bc:6b:58:db:9a:13:28:a4:84:6c: 01:5b:bd:02:18:25:87:7c:56:38:ec:0c:e7:97:81:c9:2f:f1: 57:e3:24:6f:83:6c:0e:da:48:3e:e9:a3:6f:76:31:5d:1a:e4: ba:ba:1c:42:15:ff:4b:b4:64:1d:1c:16:a9:33:7b:97:a0:17: 8a:66:e0:0d:1b:80:d3:08:d3:ac:cb:51:84:c1:f1:50:bc:4d: 59:24:ba:8d -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUGDYCvdEoaHSyCC466nbvoPqitCkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODIwODMxN0EyNEFCNENEODI4Q0Q4ODU1RjgxRjNFRjJC NTNDQzY4MTAeFw0yNTEwMTkwNjQ3MTFaFw0yNTEwMjIxNjE1MTFaMDMxMTAvBgNV BAMTKDc4QzkxNDE4M0EyODM0N0U4QzMyMTkwOTA0ODZBMTFFRUFEMzE2QzEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDcLN0tKw2+un/m5wpYtKhOBXs8 n6r5+ky2wXIql1kfyFXT8Nv5xsJZ0y6ZmQmp93Uss+qktJ1dNTT1PIZxYF/DnGoE ex63yK4n8NPfDqx8NI28NFIOKFnuRLg2xSvbaV4UKwnpO4A0AH16PZ7Pu9jd5SGX m7q7x7jB6i9/ZslfBoB7iy9qn5zRn1M00sBFDzaOCo1jKkZJubZ1SBbnc3CMKl49 /bu+D7a/trfg0HU9EPDeOJSQ1j38KkKAedP8C5HMd7qMXMidV2qvAJ78IViZvEZP 90bO+YKd4GSSxowku0UOqjn+djRhReIHQtV6Vf7kYBPe1Bm/6DDaBHYmIWmVAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUeMkUGDooNH6MMhkJBIahHurTFsEwHwYDVR0j BBgwFoAUgggxeiSrTNgozYhV+B8+8rU8xoEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 ODc4OGE4Yi01NDFiLTRjYmYtYmFiOS04ZGMzNzdiYzEyODQvMC84MjA4MzE3QTI0 QUI0Q0Q4MjhDRDg4NTVGODFGM0VGMkI1M0NDNjgxLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvODIwODMxN0EyNEFCNENEODI4Q0Q4ODU1RjgxRjNFRjJCNTND QzY4MS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vODg3ODhhOGItNTQxYi00Y2JmLWJh YjktOGRjMzc3YmMxMjg0LzAvODIwODMxN0EyNEFCNENEODI4Q0Q4ODU1RjgxRjNF RjJCNTNDQzY4MS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJum4VL9dbaOICk9tFLApExZZzgcQ2DtoM2+ nGrXf+MoaE3HHyR0Vod7JTvDE1NLWvQOzOjqH7Zr8GvqbvcI5S+KNJkTYbqyFrvD Xyi+0XLIKPkxshMPttfD4+7uR5cd4rUhcSw/ctaXHxeRlUm/DeKYJ3x//eMgTBMu iNkb1d4XIFQDtNycdZHdzSSxQdFf/MqZwCUZDj/5ZxeEQ9TzHlfCN5bXLBzWz47f vGtY25oTKKSEbAFbvQIYJYd8VjjsDOeXgckv8VfjJG+DbA7aSD7po292MV0a5Lq6 HEIV/0u0ZB0cFqkze5egF4pm4A0bgNMI06zLUYTB8VC8TVkkuo0= -----END CERTIFICATE-----Generated at Mon Oct 20 12:34:22 2025 by rpki-client