$ rpki-client -vvf repo-rpki.idnic.net/repo/9329793e-8f18-4116-9268-a133daf11cef/0/8999E6DA986A355F868ABD73E4E2AADC08244F29.mft File: 8999E6DA986A355F868ABD73E4E2AADC08244F29.mft (raw, json) Hash identifier: HoS98o0YLMDSxARO8wO1WDHvoV97opDDPwA2ZcTL32c= Subject key identifier: 7E:84:0A:B5:8F:B8:ED:23:73:9C:2F:F6:D2:7B:02:D2:AA:6D:29:35 Authority key identifier: 89:99:E6:DA:98:6A:35:5F:86:8A:BD:73:E4:E2:AA:DC:08:24:4F:29 Certificate issuer: /CN=8999E6DA986A355F868ABD73E4E2AADC08244F29 Certificate serial: 2A0E35ED4768DC77CD4372CB8172D47425733CE4 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/8999E6DA986A355F868ABD73E4E2AADC08244F29.cer Subject info access: rsync://repo-rpki.idnic.net/repo/9329793e-8f18-4116-9268-a133daf11cef/0/8999E6DA986A355F868ABD73E4E2AADC08244F29.mft Manifest number: DD Signing time: Mon 20 Oct 2025 12:22:14 +0000 Manifest this update: Mon 20 Oct 2025 12:17:14 +0000 Manifest next update: Thu 23 Oct 2025 14:47:14 +0000 Files and hashes: 1: 8999E6DA986A355F868ABD73E4E2AADC08244F29.crl (hash: 4RzklNo547OX2bu507LLRLOoUo1MliL9fmoDZultOTw=) 2: 3135372e36362e35372e302f32342d3234203d3e20313530393835.roa (hash: g0W4yfpco5rqCeJ3sGtEPJSj+o2p48FtppiRKtinTxM=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/9329793e-8f18-4116-9268-a133daf11cef/0/8999E6DA986A355F868ABD73E4E2AADC08244F29.crl rsync://repo-rpki.idnic.net/repo/9329793e-8f18-4116-9268-a133daf11cef/0/8999E6DA986A355F868ABD73E4E2AADC08244F29.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/8999E6DA986A355F868ABD73E4E2AADC08244F29.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 Oct 2025 03:04:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2a:0e:35:ed:47:68:dc:77:cd:43:72:cb:81:72:d4:74:25:73:3c:e4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8999E6DA986A355F868ABD73E4E2AADC08244F29 Validity Not Before: Oct 20 12:17:14 2025 GMT Not After : Oct 23 14:47:14 2025 GMT Subject: CN=7E840AB58FB8ED23739C2FF6D27B02D2AA6D2935 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:f5:e9:63:7b:b1:54:07:eb:a9:e2:7d:bf:52: 7b:20:ee:8a:1f:4c:76:62:34:bb:fb:e3:fb:09:18: fb:98:d9:d7:86:c9:ca:04:16:36:bd:ac:f9:3f:c3: cd:a5:01:08:fc:65:ad:ec:63:e9:03:ac:2f:20:40: 02:76:be:87:a7:2c:e5:9b:66:f1:7f:f7:a3:70:d4: 2c:6b:7b:49:b8:ba:68:be:a0:af:7f:bb:40:c7:a6: 28:c4:e2:c8:55:f2:84:4a:f8:9a:5a:71:02:54:26: d3:0f:cf:93:b5:14:0c:9e:61:72:ba:33:f3:12:c1: e4:70:ec:92:2e:b8:40:e8:ff:6f:ba:8b:59:73:47: fd:48:31:f3:f6:4e:bb:d6:79:1f:92:c0:5c:26:ba: c5:44:0b:e0:21:ff:18:8b:cb:bc:ca:47:96:86:86: 07:35:30:92:89:c9:e9:b1:20:00:a2:ed:89:e6:2f: 87:87:6f:71:e4:e0:f6:bd:f6:c4:6d:47:16:4e:38: ef:99:61:18:8a:0e:94:9a:fb:0a:70:ab:83:19:53: c5:3d:dc:e4:af:33:04:c6:0d:6a:b4:1d:af:e3:6c: a2:48:a1:18:0d:d7:c1:e9:98:2c:7c:32:6e:6a:81: 51:11:2c:40:2d:eb:0a:e6:5c:80:55:67:cf:1a:5b: 34:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7E:84:0A:B5:8F:B8:ED:23:73:9C:2F:F6:D2:7B:02:D2:AA:6D:29:35 X509v3 Authority Key Identifier: keyid:89:99:E6:DA:98:6A:35:5F:86:8A:BD:73:E4:E2:AA:DC:08:24:4F:29 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/9329793e-8f18-4116-9268-a133daf11cef/0/8999E6DA986A355F868ABD73E4E2AADC08244F29.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/8999E6DA986A355F868ABD73E4E2AADC08244F29.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/9329793e-8f18-4116-9268-a133daf11cef/0/8999E6DA986A355F868ABD73E4E2AADC08244F29.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0d:cb:ec:00:66:bc:d4:ce:e7:42:c7:1d:7c:e0:13:3e:90:0a: 96:9f:b4:47:69:ed:b1:8e:0c:3e:28:e5:79:5f:e8:a4:c2:a1: 34:ea:a8:a7:89:65:52:74:e0:28:a5:2c:28:97:e2:24:78:fb: 85:f2:a3:f4:bd:2c:29:bf:ed:ee:d0:2f:c4:ec:e0:08:b4:01: 57:29:14:65:51:56:93:a4:d9:59:33:21:38:97:dc:86:ba:f4: 5d:64:a4:ee:c0:3d:24:6f:bc:81:4c:cc:c6:47:1d:32:b7:0b: 1e:91:c1:42:cc:b5:da:05:4c:5e:42:a7:4d:25:9e:fb:d9:aa: 03:7c:cd:34:34:3a:6f:cc:a4:5e:dc:a5:3e:3b:7e:e8:60:39: a8:1f:d6:33:7b:c1:1a:ce:cb:4c:14:f3:67:ab:de:16:b6:45: 41:1c:6b:7b:66:19:59:c2:63:a7:94:4c:e0:4c:74:db:a6:43: 27:45:c2:44:d3:aa:c5:86:7c:3b:86:9e:0e:b7:15:77:9f:55: 4c:8e:29:e3:bb:f9:5f:7e:1b:5d:4f:b4:5d:0a:0e:3f:f5:6a: ee:6d:9e:26:a7:c4:bf:f3:a3:82:94:16:3e:52:ae:bd:7f:71: 49:7d:30:09:e1:04:79:37:46:d6:38:fc:82:78:c9:99:20:be: b8:b5:44:78 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUKg417Udo3HfNQ3LLgXLUdCVzPOQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODk5OUU2REE5ODZBMzU1Rjg2OEFCRDczRTRFMkFBREMw ODI0NEYyOTAeFw0yNTEwMjAxMjE3MTRaFw0yNTEwMjMxNDQ3MTRaMDMxMTAvBgNV BAMTKDdFODQwQUI1OEZCOEVEMjM3MzlDMkZGNkQyN0IwMkQyQUE2RDI5MzUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDW9elje7FUB+up4n2/Unsg7oof THZiNLv74/sJGPuY2deGycoEFja9rPk/w82lAQj8Za3sY+kDrC8gQAJ2voenLOWb ZvF/96Nw1Cxre0m4umi+oK9/u0DHpijE4shV8oRK+JpacQJUJtMPz5O1FAyeYXK6 M/MSweRw7JIuuEDo/2+6i1lzR/1IMfP2TrvWeR+SwFwmusVEC+Ah/xiLy7zKR5aG hgc1MJKJyemxIACi7YnmL4eHb3Hk4Pa99sRtRxZOOO+ZYRiKDpSa+wpwq4MZU8U9 3OSvMwTGDWq0Ha/jbKJIoRgN18HpmCx8Mm5qgVERLEAt6wrmXIBVZ88aWzT1AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUfoQKtY+47SNznC/20nsC0qptKTUwHwYDVR0j BBgwFoAUiZnm2phqNV+Gir1z5OKq3AgkTykwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 MzI5NzkzZS04ZjE4LTQxMTYtOTI2OC1hMTMzZGFmMTFjZWYvMC84OTk5RTZEQTk4 NkEzNTVGODY4QUJENzNFNEUyQUFEQzA4MjQ0RjI5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvODk5OUU2REE5ODZBMzU1Rjg2OEFCRDczRTRFMkFBREMwODI0 NEYyOS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOTMyOTc5M2UtOGYxOC00MTE2LTky NjgtYTEzM2RhZjExY2VmLzAvODk5OUU2REE5ODZBMzU1Rjg2OEFCRDczRTRFMkFB REMwODI0NEYyOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAA3L7ABmvNTO50LHHXzgEz6QCpaftEdp7bGO DD4o5Xlf6KTCoTTqqKeJZVJ04CilLCiX4iR4+4Xyo/S9LCm/7e7QL8Ts4Ai0AVcp FGVRVpOk2VkzITiX3Ia69F1kpO7APSRvvIFMzMZHHTK3Cx6RwULMtdoFTF5Cp00l nvvZqgN8zTQ0Om/MpF7cpT47fuhgOagf1jN7wRrOy0wU82er3ha2RUEca3tmGVnC Y6eUTOBMdNumQydFwkTTqsWGfDuGng63FXefVUyOKeO7+V9+G11PtF0KDj/1au5t nianxL/zo4KUFj5Srr1/cUl9MAnhBHk3RtY4/IJ4yZkgvri1RHg= -----END CERTIFICATE-----Generated at Tue Oct 21 07:13:57 2025 by rpki-client