$ rpki-client -vvf repo-rpki.idnic.net/repo/927a6f34-1b6e-4e92-b2d2-0b9301a666a5/0/8DEDABAD21AD1A6BEF27E91FCEE30465563DFE72.mft File: 8DEDABAD21AD1A6BEF27E91FCEE30465563DFE72.mft (raw, json) Hash identifier: xyMJps/+DmfNyMTucTlKYPdPjcEbP0bxepuZuSIJSTs= Subject key identifier: A4:67:BA:88:DE:02:43:C2:B9:B1:EA:9B:71:47:2C:D6:3B:4A:BA:F2 Authority key identifier: 8D:ED:AB:AD:21:AD:1A:6B:EF:27:E9:1F:CE:E3:04:65:56:3D:FE:72 Certificate issuer: /CN=8DEDABAD21AD1A6BEF27E91FCEE30465563DFE72 Certificate serial: 132B641BD6B8152980D7E8009A6D0B329F06A987 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8DEDABAD21AD1A6BEF27E91FCEE30465563DFE72.cer Subject info access: rsync://repo-rpki.idnic.net/repo/927a6f34-1b6e-4e92-b2d2-0b9301a666a5/0/8DEDABAD21AD1A6BEF27E91FCEE30465563DFE72.mft Manifest number: 0516 Signing time: Sat 18 Oct 2025 02:42:06 +0000 Manifest this update: Sat 18 Oct 2025 02:37:06 +0000 Manifest next update: Tue 21 Oct 2025 11:41:06 +0000 Files and hashes: 1: 8DEDABAD21AD1A6BEF27E91FCEE30465563DFE72.crl (hash: j72/Vjg9bE+hmUxVcYrqD3tLV2ryeo+7Pjo1glUX3DI=) 2: 323430323a653330303a3a2f33322d3438203d3e20313331373036.roa (hash: EV88jOIELhWBAVSmJqvptwA4m5UyL3dS/vav1cA94d8=) 3: 3132312e3130312e3132382e302f32312d3234203d3e20313331373036.roa (hash: LxNIC9GUMk4NDV//CAiwhidJ9aXKaAFBBW+ysgKoUy0=) 4: 3130332e3234372e31322e302f32322d3234203d3e20313331373036.roa (hash: mWjb/DW+b3X3xyLO8KMUDwzQ73HydHkJibyBar99dKU=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/927a6f34-1b6e-4e92-b2d2-0b9301a666a5/0/8DEDABAD21AD1A6BEF27E91FCEE30465563DFE72.crl rsync://repo-rpki.idnic.net/repo/927a6f34-1b6e-4e92-b2d2-0b9301a666a5/0/8DEDABAD21AD1A6BEF27E91FCEE30465563DFE72.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8DEDABAD21AD1A6BEF27E91FCEE30465563DFE72.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 21 Oct 2025 11:41:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13:2b:64:1b:d6:b8:15:29:80:d7:e8:00:9a:6d:0b:32:9f:06:a9:87 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8DEDABAD21AD1A6BEF27E91FCEE30465563DFE72 Validity Not Before: Oct 18 02:37:06 2025 GMT Not After : Oct 21 11:41:06 2025 GMT Subject: CN=A467BA88DE0243C2B9B1EA9B71472CD63B4ABAF2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:87:0d:4e:f7:0e:93:a4:73:9f:7d:0f:96:cb: b4:0e:3d:16:ef:01:1c:46:4f:19:c3:08:21:30:ab: af:39:21:9e:67:ae:df:fc:3e:d9:da:aa:ff:ae:ae: 1e:19:67:10:fd:a2:0b:c3:69:94:07:32:85:61:49: 55:ef:4a:7c:5f:b6:02:7e:3b:fe:89:c4:cd:b1:d8: 15:0e:53:5a:93:6a:99:5c:ba:01:b4:05:a1:d3:2a: 8f:bb:c1:59:4b:72:29:de:2e:19:95:b4:fb:7d:6b: 25:78:c9:03:80:e1:ce:e9:cb:93:55:73:81:b5:94: 7e:05:bb:8f:5b:7e:64:02:b2:96:e7:7d:37:b3:c7: a9:46:4a:26:d8:45:bd:e8:20:e2:17:d3:d9:98:0a: 70:0d:a7:c5:2f:0f:13:a5:5d:d0:0d:b5:87:5c:ad: bc:98:10:e5:89:9f:6e:9f:cd:31:80:ed:ed:49:83: 39:8a:d3:1e:d0:a9:f2:8d:34:5c:66:1d:0b:44:81: 86:f9:ab:aa:9c:43:30:b1:d4:86:08:fc:18:4c:3e: fc:4b:8b:11:96:df:35:fc:e1:61:f7:b6:05:18:bb: bf:09:4a:e6:44:24:c5:71:2a:06:94:c6:9f:be:a9: 29:cf:8f:d3:d3:c8:cd:32:01:e7:1a:58:54:31:08: a1:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A4:67:BA:88:DE:02:43:C2:B9:B1:EA:9B:71:47:2C:D6:3B:4A:BA:F2 X509v3 Authority Key Identifier: keyid:8D:ED:AB:AD:21:AD:1A:6B:EF:27:E9:1F:CE:E3:04:65:56:3D:FE:72 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/927a6f34-1b6e-4e92-b2d2-0b9301a666a5/0/8DEDABAD21AD1A6BEF27E91FCEE30465563DFE72.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8DEDABAD21AD1A6BEF27E91FCEE30465563DFE72.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/927a6f34-1b6e-4e92-b2d2-0b9301a666a5/0/8DEDABAD21AD1A6BEF27E91FCEE30465563DFE72.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 98:75:8c:d4:06:cc:8a:ee:71:98:a4:f2:6d:92:9a:54:a7:f6: e7:84:85:5c:b1:ee:d8:c3:56:b4:dd:35:66:52:1d:06:c5:43: 57:7e:a9:6d:64:a8:7f:a2:ae:7a:ed:3c:f1:cd:ba:6d:13:ce: 6f:3e:ea:9e:46:2a:91:cb:be:ae:db:c5:ed:de:94:2a:af:3d: e3:69:92:3d:17:e5:2e:0d:7d:8d:b2:d4:a2:06:ed:10:07:f6: 84:4c:b5:2e:93:c2:c1:94:42:1f:d2:21:a0:2e:85:0e:81:a8: c6:a9:13:06:06:99:87:f8:36:65:54:7f:f8:e6:39:3a:5f:1e: 74:4c:02:55:43:0b:b1:84:27:80:0d:d0:ef:3c:db:90:f2:6b: 33:10:24:82:0c:c1:e5:88:af:95:d6:2c:40:92:31:05:d9:6a: 57:15:ed:53:0a:f3:2d:20:bc:99:f1:77:6d:f5:09:db:fa:7c: f7:8e:af:07:ee:c0:74:8b:ce:b5:15:d3:20:d0:a1:ad:96:24: d3:17:e1:4c:73:b9:2f:01:42:9f:ca:f2:0c:3d:01:12:ff:54: 5a:c5:97:90:0a:3f:8c:29:a2:ef:6c:fa:2c:48:3a:f7:d8:23: 5c:9c:b4:66:74:d0:52:ae:1e:60:1a:b2:2f:ae:fe:8f:d2:b5: 93:4b:5f:1c -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUEytkG9a4FSmA1+gAmm0LMp8GqYcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOERFREFCQUQyMUFEMUE2QkVGMjdFOTFGQ0VFMzA0NjU1 NjNERkU3MjAeFw0yNTEwMTgwMjM3MDZaFw0yNTEwMjExMTQxMDZaMDMxMTAvBgNV BAMTKEE0NjdCQTg4REUwMjQzQzJCOUIxRUE5QjcxNDcyQ0Q2M0I0QUJBRjIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDihw1O9w6TpHOffQ+Wy7QOPRbv ARxGTxnDCCEwq685IZ5nrt/8Ptnaqv+urh4ZZxD9ogvDaZQHMoVhSVXvSnxftgJ+ O/6JxM2x2BUOU1qTaplcugG0BaHTKo+7wVlLcineLhmVtPt9ayV4yQOA4c7py5NV c4G1lH4Fu49bfmQCspbnfTezx6lGSibYRb3oIOIX09mYCnANp8UvDxOlXdANtYdc rbyYEOWJn26fzTGA7e1JgzmK0x7QqfKNNFxmHQtEgYb5q6qcQzCx1IYI/BhMPvxL ixGW3zX84WH3tgUYu78JSuZEJMVxKgaUxp++qSnPj9PTyM0yAecaWFQxCKGxAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUpGe6iN4CQ8K5seqbcUcs1jtKuvIwHwYDVR0j BBgwFoAUje2rrSGtGmvvJ+kfzuMEZVY9/nIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 MjdhNmYzNC0xYjZlLTRlOTItYjJkMi0wYjkzMDFhNjY2YTUvMC84REVEQUJBRDIx QUQxQTZCRUYyN0U5MUZDRUUzMDQ2NTU2M0RGRTcyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOERFREFCQUQyMUFEMUE2QkVGMjdFOTFGQ0VFMzA0NjU1NjNE RkU3Mi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOTI3YTZmMzQtMWI2ZS00ZTkyLWIy ZDItMGI5MzAxYTY2NmE1LzAvOERFREFCQUQyMUFEMUE2QkVGMjdFOTFGQ0VFMzA0 NjU1NjNERkU3Mi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJh1jNQGzIrucZik8m2SmlSn9ueEhVyx7tjD VrTdNWZSHQbFQ1d+qW1kqH+irnrtPPHNum0Tzm8+6p5GKpHLvq7bxe3elCqvPeNp kj0X5S4NfY2y1KIG7RAH9oRMtS6TwsGUQh/SIaAuhQ6BqMapEwYGmYf4NmVUf/jm OTpfHnRMAlVDC7GEJ4AN0O8825DyazMQJIIMweWIr5XWLECSMQXZalcV7VMK8y0g vJnxd231Cdv6fPeOrwfuwHSLzrUV0yDQoa2WJNMX4UxzuS8BQp/K8gw9ARL/VFrF l5AKP4wpou9s+ixIOvfYI1yctGZ00FKuHmAasi+u/o/StZNLXxw= -----END CERTIFICATE-----Generated at Mon Oct 20 09:26:21 2025 by rpki-client