$ rpki-client -vvf repo-rpki.idnic.net/repo/8a2e5b69-adbd-4e2d-847d-374815581d86/0/8CFA88063D5C0A51C1D737A5170338865A245358.mft File: 8CFA88063D5C0A51C1D737A5170338865A245358.mft (raw, json) Hash identifier: HQyEXVVnZQ0BHQpNJ/NbtWDJZn8H0OXDdCkybST/cCQ= Subject key identifier: 83:CF:E5:FF:0D:EE:C6:20:8E:B3:43:D6:32:21:14:68:0C:1F:1D:7D Authority key identifier: 8C:FA:88:06:3D:5C:0A:51:C1:D7:37:A5:17:03:38:86:5A:24:53:58 Certificate issuer: /CN=8CFA88063D5C0A51C1D737A5170338865A245358 Certificate serial: 0951CE9266B64A56DA2805A02CA1072199BA58F4 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8CFA88063D5C0A51C1D737A5170338865A245358.cer Subject info access: rsync://repo-rpki.idnic.net/repo/8a2e5b69-adbd-4e2d-847d-374815581d86/0/8CFA88063D5C0A51C1D737A5170338865A245358.mft Manifest number: 0519 Signing time: Mon 20 Oct 2025 23:01:46 +0000 Manifest this update: Mon 20 Oct 2025 22:56:46 +0000 Manifest next update: Fri 24 Oct 2025 09:12:46 +0000 Files and hashes: 1: 8CFA88063D5C0A51C1D737A5170338865A245358.crl (hash: 1P4TAo0jIyaUzwhbyt3zOYELVQOf5ECbvwVYVzzy2x4=) 2: 3130332e3132362e3230302e302f32332d3233203d3e20313338313133.roa (hash: OX5qJy0ELn8OIpv9cwcHP0OwwrzKVk8H6b2UKzBtyEg=) 3: 3130332e3132362e3230322e302f32332d3233203d3e20313338313133.roa (hash: x7tsLph+/FB0QeKJjGm8RZPvo26S0bN0rsI7VAab3d8=) 4: 323430343a313034303a3a2f33322d3332203d3e20313338313133.roa (hash: IwOy6L011wgRp4Z43jUYFVOd/TCfuz6IilpFz+BTytc=) 5: 3130332e3132362e3230302e302f32322d3232203d3e20313338313133.roa (hash: iKqR4sdrDvQYzAbaXB9On/A/Jy5fdaFvtV4f3tabdnk=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/8a2e5b69-adbd-4e2d-847d-374815581d86/0/8CFA88063D5C0A51C1D737A5170338865A245358.crl rsync://repo-rpki.idnic.net/repo/8a2e5b69-adbd-4e2d-847d-374815581d86/0/8CFA88063D5C0A51C1D737A5170338865A245358.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8CFA88063D5C0A51C1D737A5170338865A245358.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 Oct 2025 11:48:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 09:51:ce:92:66:b6:4a:56:da:28:05:a0:2c:a1:07:21:99:ba:58:f4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8CFA88063D5C0A51C1D737A5170338865A245358 Validity Not Before: Oct 20 22:56:46 2025 GMT Not After : Oct 24 09:12:46 2025 GMT Subject: CN=83CFE5FF0DEEC6208EB343D6322114680C1F1D7D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:c4:e4:79:ec:9f:08:ec:c4:82:31:43:f8:c3: a3:c3:74:ef:58:2b:40:ea:3d:6b:ba:51:d1:fb:95: 56:52:6d:d7:59:46:20:ce:f7:c4:ac:8e:1d:49:7f: c9:f7:af:72:a8:a0:4e:80:7c:cd:be:64:f9:9e:86: 45:49:0a:62:f2:b3:df:30:08:a9:33:ab:42:e0:f4: 05:06:f3:be:a8:0e:63:32:e5:86:5c:92:aa:fd:91: b8:13:96:d3:24:7d:12:27:7f:b2:39:fc:37:59:4e: 73:8d:5e:37:8c:79:e5:f8:aa:47:e6:24:99:f7:e2: 21:71:9a:e6:dc:a3:ec:34:cf:ef:5f:ab:7b:9a:a7: 0e:a4:a9:c2:bb:67:f0:c5:eb:01:5d:d5:86:08:5e: ca:89:af:bc:86:68:7d:4e:a7:b1:06:33:37:6b:e3: 65:72:68:fe:c1:e6:d0:52:72:79:c1:c7:69:d1:9f: b5:e6:25:cb:74:51:41:a8:3b:dc:71:70:fe:db:cd: ca:c0:80:89:72:7e:c6:ac:66:3a:4e:07:8a:38:92: 7b:a2:cf:55:c3:b3:58:66:9f:a7:54:01:c9:c0:2c: 4d:75:c5:ba:be:0a:85:9e:4a:f9:10:69:a6:13:99: 7e:4e:9d:a3:75:d6:87:24:3d:f7:a4:af:8a:fb:d7: b6:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 83:CF:E5:FF:0D:EE:C6:20:8E:B3:43:D6:32:21:14:68:0C:1F:1D:7D X509v3 Authority Key Identifier: keyid:8C:FA:88:06:3D:5C:0A:51:C1:D7:37:A5:17:03:38:86:5A:24:53:58 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/8a2e5b69-adbd-4e2d-847d-374815581d86/0/8CFA88063D5C0A51C1D737A5170338865A245358.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8CFA88063D5C0A51C1D737A5170338865A245358.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/8a2e5b69-adbd-4e2d-847d-374815581d86/0/8CFA88063D5C0A51C1D737A5170338865A245358.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 42:dd:a9:a7:0d:a6:71:86:0c:f4:bf:75:d1:9b:53:16:0d:49: 37:86:a2:46:ce:c3:14:38:15:79:32:88:6f:83:d4:51:0f:fa: 98:2b:18:3d:b2:68:06:4b:8b:07:17:5c:5c:00:63:1f:fa:9a: 03:73:e5:01:63:7f:68:cc:01:73:91:8a:69:9e:a7:a9:51:f3: 7d:17:15:1f:16:f6:8d:cb:7c:11:b1:72:43:05:cd:f5:bd:f1: c7:f5:f1:d4:81:61:5d:e5:56:94:74:60:67:af:a4:2b:07:ab: 98:af:e1:80:39:b2:df:06:a8:5c:45:2f:23:1a:26:0f:ca:3e: 08:cf:d8:0b:1e:a7:1a:1a:20:4d:9b:f3:81:98:88:17:1b:0e: c2:5d:e0:75:76:ca:b9:7f:6d:8d:42:44:76:2a:5a:2c:88:c8: 61:f1:a3:b1:a9:4c:f3:8a:c5:a6:bf:6f:1d:d4:d0:a5:df:30: 17:24:31:4b:4d:75:69:75:8d:f3:cf:da:b8:95:93:c7:94:0e: 5c:1b:06:06:31:a0:40:51:5e:ce:09:c2:87:97:2d:01:e1:29: 06:de:c8:51:62:7f:8c:33:3f:99:15:06:90:2e:18:f1:4d:88: cc:5a:e4:d2:21:29:74:e3:43:83:c5:d6:54:0c:76:52:d4:68: 0c:87:fa:bc -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUCVHOkma2SlbaKAWgLKEHIZm6WPQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOENGQTg4MDYzRDVDMEE1MUMxRDczN0E1MTcwMzM4ODY1 QTI0NTM1ODAeFw0yNTEwMjAyMjU2NDZaFw0yNTEwMjQwOTEyNDZaMDMxMTAvBgNV BAMTKDgzQ0ZFNUZGMERFRUM2MjA4RUIzNDNENjMyMjExNDY4MEMxRjFEN0QwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCqxOR57J8I7MSCMUP4w6PDdO9Y K0DqPWu6UdH7lVZSbddZRiDO98Ssjh1Jf8n3r3KooE6AfM2+ZPmehkVJCmLys98w CKkzq0Lg9AUG876oDmMy5YZckqr9kbgTltMkfRInf7I5/DdZTnONXjeMeeX4qkfm JJn34iFxmubco+w0z+9fq3uapw6kqcK7Z/DF6wFd1YYIXsqJr7yGaH1Op7EGMzdr 42VyaP7B5tBScnnBx2nRn7XmJct0UUGoO9xxcP7bzcrAgIlyfsasZjpOB4o4knui z1XDs1hmn6dUAcnALE11xbq+CoWeSvkQaaYTmX5OnaN11ockPfekr4r717bnAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUg8/l/w3uxiCOs0PWMiEUaAwfHX0wHwYDVR0j BBgwFoAUjPqIBj1cClHB1zelFwM4hlokU1gwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 YTJlNWI2OS1hZGJkLTRlMmQtODQ3ZC0zNzQ4MTU1ODFkODYvMC84Q0ZBODgwNjNE NUMwQTUxQzFENzM3QTUxNzAzMzg4NjVBMjQ1MzU4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOENGQTg4MDYzRDVDMEE1MUMxRDczN0E1MTcwMzM4ODY1QTI0 NTM1OC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOGEyZTViNjktYWRiZC00ZTJkLTg0 N2QtMzc0ODE1NTgxZDg2LzAvOENGQTg4MDYzRDVDMEE1MUMxRDczN0E1MTcwMzM4 ODY1QTI0NTM1OC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAELdqacNpnGGDPS/ddGbUxYNSTeGokbOwxQ4 FXkyiG+D1FEP+pgrGD2yaAZLiwcXXFwAYx/6mgNz5QFjf2jMAXORimmep6lR830X FR8W9o3LfBGxckMFzfW98cf18dSBYV3lVpR0YGevpCsHq5iv4YA5st8GqFxFLyMa Jg/KPgjP2AsepxoaIE2b84GYiBcbDsJd4HV2yrl/bY1CRHYqWiyIyGHxo7GpTPOK xaa/bx3U0KXfMBckMUtNdWl1jfPP2riVk8eUDlwbBgYxoEBRXs4JwoeXLQHhKQbe yFFif4wzP5kVBpAuGPFNiMxa5NIhKXTjQ4PF1lQMdlLUaAyH+rw= -----END CERTIFICATE-----Generated at Tue Oct 21 00:50:39 2025 by rpki-client