$ rpki-client -vvf repo-rpki.idnic.net/repo/8d5bbd81-0332-4202-9c92-eb1746a8cd9d/0/8B0DC79B66A96FA7FA3180C20B06A5C43C9CFEA1.mft File: 8B0DC79B66A96FA7FA3180C20B06A5C43C9CFEA1.mft (raw, json) Hash identifier: t+rzvHot8/jGzN1E2VPOLDjG0U/f4uWx5HBoOCZ3TcY= Subject key identifier: BF:52:55:F7:D9:12:54:0C:22:33:42:11:00:A6:BA:45:3E:33:9C:E2 Authority key identifier: 8B:0D:C7:9B:66:A9:6F:A7:FA:31:80:C2:0B:06:A5:C4:3C:9C:FE:A1 Certificate issuer: /CN=8B0DC79B66A96FA7FA3180C20B06A5C43C9CFEA1 Certificate serial: 6EE043D76BFC00F81CBE70188BCD3433D7E870E5 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8B0DC79B66A96FA7FA3180C20B06A5C43C9CFEA1.cer Subject info access: rsync://repo-rpki.idnic.net/repo/8d5bbd81-0332-4202-9c92-eb1746a8cd9d/0/8B0DC79B66A96FA7FA3180C20B06A5C43C9CFEA1.mft Manifest number: 0325 Signing time: Sun 19 Oct 2025 07:42:20 +0000 Manifest this update: Sun 19 Oct 2025 07:37:20 +0000 Manifest next update: Wed 22 Oct 2025 18:21:20 +0000 Files and hashes: 1: 3130332e3131382e332e302f32342d3234203d3e20313337333732.roa (hash: CnYInR0edgXU+mYMJQGAiAKWjbNlk8PVPSzC/8WPG5g=) 2: 8B0DC79B66A96FA7FA3180C20B06A5C43C9CFEA1.crl (hash: DncBi9kt2JPZ6yDKzXI7/YLVvtt//vojMlyZwwoykBE=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/8d5bbd81-0332-4202-9c92-eb1746a8cd9d/0/8B0DC79B66A96FA7FA3180C20B06A5C43C9CFEA1.crl rsync://repo-rpki.idnic.net/repo/8d5bbd81-0332-4202-9c92-eb1746a8cd9d/0/8B0DC79B66A96FA7FA3180C20B06A5C43C9CFEA1.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8B0DC79B66A96FA7FA3180C20B06A5C43C9CFEA1.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 Oct 2025 18:21:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6e:e0:43:d7:6b:fc:00:f8:1c:be:70:18:8b:cd:34:33:d7:e8:70:e5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8B0DC79B66A96FA7FA3180C20B06A5C43C9CFEA1 Validity Not Before: Oct 19 07:37:20 2025 GMT Not After : Oct 22 18:21:20 2025 GMT Subject: CN=BF5255F7D912540C2233421100A6BA453E339CE2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:3b:ae:5c:31:f6:18:6d:d2:37:92:03:83:ab: 6c:ba:d6:bb:36:e2:13:b0:b7:21:c2:d9:a2:d3:0b: 4c:5a:a1:06:49:f7:e9:46:26:bd:8b:17:4c:9a:5f: df:65:d0:b0:b7:36:3d:ff:5f:0d:91:f1:ea:f3:87: c1:16:48:37:08:cb:29:8d:00:ca:5e:e4:ec:81:9d: 18:9f:53:ca:ec:91:26:ca:bc:d9:fc:3d:95:6c:be: e1:68:06:2d:ac:0c:67:ff:66:44:94:66:ba:de:76: dc:6b:58:0f:a4:cb:b4:9a:9f:fc:79:31:0a:09:c3: 92:bf:2d:33:4c:84:1b:3f:7c:4d:f7:f0:d9:b6:09: c8:a3:ff:59:f8:66:05:c0:84:07:0b:75:bb:13:c3: 8e:42:48:fa:c2:21:1d:94:93:ff:eb:25:30:8c:f1: 06:ef:41:c2:c8:cb:ca:45:41:d2:d0:ec:f7:a1:51: 34:6e:cc:0e:fd:f1:55:f3:d1:2d:0d:b2:a8:7f:2d: ca:a9:46:47:8f:68:e8:36:0f:93:07:41:f0:a8:70: db:5b:ef:2f:cb:3b:88:4f:58:e8:54:b4:1c:33:bb: 25:7f:fe:59:08:22:bc:e2:d9:7d:ce:09:bb:9c:b7: 36:da:98:22:59:b5:22:6f:36:52:31:bf:d2:89:a0: ce:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:52:55:F7:D9:12:54:0C:22:33:42:11:00:A6:BA:45:3E:33:9C:E2 X509v3 Authority Key Identifier: keyid:8B:0D:C7:9B:66:A9:6F:A7:FA:31:80:C2:0B:06:A5:C4:3C:9C:FE:A1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/8d5bbd81-0332-4202-9c92-eb1746a8cd9d/0/8B0DC79B66A96FA7FA3180C20B06A5C43C9CFEA1.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8B0DC79B66A96FA7FA3180C20B06A5C43C9CFEA1.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/8d5bbd81-0332-4202-9c92-eb1746a8cd9d/0/8B0DC79B66A96FA7FA3180C20B06A5C43C9CFEA1.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b6:40:76:f6:03:f3:d3:b6:2b:31:c7:95:09:d6:fa:94:cc:e6: 0c:cf:3c:f4:92:ab:8f:1d:3b:76:83:2f:1d:52:aa:18:da:00: 4f:ea:3a:85:76:91:32:d8:8d:64:e3:69:1d:b6:d2:c2:b5:ab: c2:44:4d:a7:4d:bd:5f:bf:2e:d9:f8:ee:2e:ce:ef:de:a3:68: 78:42:65:44:80:3c:0f:5c:2c:41:0d:85:b8:85:b8:50:ea:0b: ca:22:27:0c:4f:7b:71:a5:a0:bd:e8:06:bf:71:1f:92:96:88: 4d:cd:a5:cf:b0:09:fd:10:fe:2e:c5:68:bf:57:09:1b:a2:01: 5f:48:5f:92:b1:39:40:3f:cc:e1:96:8d:ff:80:77:9e:cc:d9: d5:71:31:25:48:6d:05:2a:66:3f:7a:13:8c:d6:13:eb:67:0a: 85:09:1d:4c:9e:24:e0:c2:71:18:81:ee:fe:37:31:c0:43:91: 07:9e:40:3f:9b:cb:70:4d:90:8d:50:0e:df:22:06:b4:a0:8d: b8:24:52:35:f8:05:ff:15:12:f6:57:fe:0f:2e:61:ef:60:d7: 76:65:8f:41:9d:3b:ce:b4:66:05:4b:f0:da:e7:c1:72:7d:3a: 23:b5:ef:d7:dd:09:c0:37:fd:3b:ee:25:a6:cb:1b:91:01:30: b0:35:d7:4b -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUbuBD12v8APgcvnAYi800M9focOUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEIwREM3OUI2NkE5NkZBN0ZBMzE4MEMyMEIwNkE1QzQz QzlDRkVBMTAeFw0yNTEwMTkwNzM3MjBaFw0yNTEwMjIxODIxMjBaMDMxMTAvBgNV BAMTKEJGNTI1NUY3RDkxMjU0MEMyMjMzNDIxMTAwQTZCQTQ1M0UzMzlDRTIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDUO65cMfYYbdI3kgODq2y61rs2 4hOwtyHC2aLTC0xaoQZJ9+lGJr2LF0yaX99l0LC3Nj3/Xw2R8erzh8EWSDcIyymN AMpe5OyBnRifU8rskSbKvNn8PZVsvuFoBi2sDGf/ZkSUZrredtxrWA+ky7San/x5 MQoJw5K/LTNMhBs/fE338Nm2Ccij/1n4ZgXAhAcLdbsTw45CSPrCIR2Uk//rJTCM 8QbvQcLIy8pFQdLQ7PehUTRuzA798VXz0S0Nsqh/LcqpRkePaOg2D5MHQfCocNtb 7y/LO4hPWOhUtBwzuyV//lkIIrzi2X3OCbuctzbamCJZtSJvNlIxv9KJoM5ZAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUv1JV99kSVAwiM0IRAKa6RT4znOIwHwYDVR0j BBgwFoAUiw3Hm2apb6f6MYDCCwalxDyc/qEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 ZDViYmQ4MS0wMzMyLTQyMDItOWM5Mi1lYjE3NDZhOGNkOWQvMC84QjBEQzc5QjY2 QTk2RkE3RkEzMTgwQzIwQjA2QTVDNDNDOUNGRUExLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOEIwREM3OUI2NkE5NkZBN0ZBMzE4MEMyMEIwNkE1QzQzQzlD RkVBMS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOGQ1YmJkODEtMDMzMi00MjAyLTlj OTItZWIxNzQ2YThjZDlkLzAvOEIwREM3OUI2NkE5NkZBN0ZBMzE4MEMyMEIwNkE1 QzQzQzlDRkVBMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALZAdvYD89O2KzHHlQnW+pTM5gzPPPSSq48d O3aDLx1SqhjaAE/qOoV2kTLYjWTjaR220sK1q8JETadNvV+/Ltn47i7O796jaHhC ZUSAPA9cLEENhbiFuFDqC8oiJwxPe3GloL3oBr9xH5KWiE3Npc+wCf0Q/i7FaL9X CRuiAV9IX5KxOUA/zOGWjf+Ad57M2dVxMSVIbQUqZj96E4zWE+tnCoUJHUyeJODC cRiB7v43McBDkQeeQD+by3BNkI1QDt8iBrSgjbgkUjX4Bf8VEvZX/g8uYe9g13Zl j0GdO860ZgVL8NrnwXJ9OiO179fdCcA3/TvuJabLG5EBMLA110s= -----END CERTIFICATE-----Generated at Mon Oct 20 11:05:27 2025 by rpki-client