$ rpki-client -vvf repo-rpki.idnic.net/repo/9338bdad-d2dd-4f07-ae84-c540612baf6a/0/8C3462809943E9E8E8E89052BF9B9C3DDC60EE22.mft File: 8C3462809943E9E8E8E89052BF9B9C3DDC60EE22.mft (raw, json) Hash identifier: qeYKXA0VX85bGfL7Y3iG2h4hbPlZOBpHuNd30DLYsv0= Subject key identifier: 56:7F:0C:DC:57:A8:7A:C3:08:98:EF:73:EC:03:E8:41:DB:8A:F4:B7 Authority key identifier: 8C:34:62:80:99:43:E9:E8:E8:E8:90:52:BF:9B:9C:3D:DC:60:EE:22 Certificate issuer: /CN=8C3462809943E9E8E8E89052BF9B9C3DDC60EE22 Certificate serial: 583BC24990CF9E3907B963D72578B46CABE7A78C Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8C3462809943E9E8E8E89052BF9B9C3DDC60EE22.cer Subject info access: rsync://repo-rpki.idnic.net/repo/9338bdad-d2dd-4f07-ae84-c540612baf6a/0/8C3462809943E9E8E8E89052BF9B9C3DDC60EE22.mft Manifest number: 025C Signing time: Sun 19 Oct 2025 12:40:46 +0000 Manifest this update: Sun 19 Oct 2025 12:35:46 +0000 Manifest next update: Wed 22 Oct 2025 14:06:46 +0000 Files and hashes: 1: 8C3462809943E9E8E8E89052BF9B9C3DDC60EE22.crl (hash: 2Z8SWskW/0vfAiSbxlJ+CoHgCRrq2flYGxb2QPE62Mg=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/9338bdad-d2dd-4f07-ae84-c540612baf6a/0/8C3462809943E9E8E8E89052BF9B9C3DDC60EE22.crl rsync://repo-rpki.idnic.net/repo/9338bdad-d2dd-4f07-ae84-c540612baf6a/0/8C3462809943E9E8E8E89052BF9B9C3DDC60EE22.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8C3462809943E9E8E8E89052BF9B9C3DDC60EE22.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 Oct 2025 14:06:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 58:3b:c2:49:90:cf:9e:39:07:b9:63:d7:25:78:b4:6c:ab:e7:a7:8c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8C3462809943E9E8E8E89052BF9B9C3DDC60EE22 Validity Not Before: Oct 19 12:35:46 2025 GMT Not After : Oct 22 14:06:46 2025 GMT Subject: CN=567F0CDC57A87AC30898EF73EC03E841DB8AF4B7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:eb:65:ba:7f:8d:41:ce:89:17:eb:68:b9:69:c6: 2d:32:26:d3:fa:65:ba:96:5f:5e:f3:a1:48:a7:ff: cf:01:20:bd:b8:58:a4:58:61:a3:7a:70:34:1f:78: ff:86:f3:17:ff:4e:f5:d5:72:c3:cf:74:05:27:56: 56:d9:05:55:5f:93:d1:7d:e1:cf:66:35:1f:72:dd: a0:3c:f5:d1:b5:86:b9:7d:a7:18:72:e9:56:f1:a7: 5c:75:97:d4:3e:ec:d9:da:9c:2e:3f:b0:f1:0f:7f: 73:a5:09:eb:01:f7:f1:f7:49:13:77:30:07:14:65: b1:f0:89:88:5a:26:0a:53:39:7d:74:cf:d6:a6:52: 07:61:6e:d5:fa:08:11:ba:7e:90:0b:27:4e:d5:a7: 82:fb:d2:f0:5c:bc:1a:c0:aa:48:2a:66:95:18:9d: 9a:78:3f:40:d1:c2:ff:8a:66:1e:87:8e:08:1f:ec: c1:10:2c:e0:36:1d:46:73:ef:2d:2d:b2:96:77:9e: 9a:72:1e:0a:91:bd:c9:c2:a8:6f:d4:07:6b:93:58: fd:7b:cd:8e:a3:6b:97:bc:fd:ae:f3:64:2f:2b:0d: 0b:29:83:b9:33:b0:dd:30:6f:03:a6:b5:fd:f5:e1: fb:a0:17:57:a9:eb:7b:6c:19:97:a8:9e:87:2b:cd: 1a:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 56:7F:0C:DC:57:A8:7A:C3:08:98:EF:73:EC:03:E8:41:DB:8A:F4:B7 X509v3 Authority Key Identifier: keyid:8C:34:62:80:99:43:E9:E8:E8:E8:90:52:BF:9B:9C:3D:DC:60:EE:22 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/9338bdad-d2dd-4f07-ae84-c540612baf6a/0/8C3462809943E9E8E8E89052BF9B9C3DDC60EE22.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8C3462809943E9E8E8E89052BF9B9C3DDC60EE22.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/9338bdad-d2dd-4f07-ae84-c540612baf6a/0/8C3462809943E9E8E8E89052BF9B9C3DDC60EE22.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 94:4d:5b:3c:c4:b7:f6:37:c2:aa:5b:e1:5d:2e:5e:d4:87:70: 52:4d:2c:54:54:d6:86:12:e3:70:c2:ad:1f:aa:9e:0a:36:e4: 3e:59:46:98:d2:a3:c0:4d:fb:75:34:4e:69:41:b3:7c:9b:20: b8:e0:12:44:16:e4:58:cb:f5:67:07:89:38:31:07:65:c8:a6: 66:9e:a5:91:d0:3f:ab:c6:47:28:d2:14:ac:90:3c:87:c4:4e: 4f:cd:a8:79:c4:91:cb:76:fa:b2:ca:ca:6f:79:a7:c0:a0:aa: d8:9b:c2:a3:5c:1d:8a:dc:2b:de:a6:3b:97:ff:b2:61:02:a7: 7f:8d:b3:3c:fa:c8:bf:16:e4:df:5e:27:86:77:cd:38:41:c1: c1:f9:21:7d:6d:f5:f5:eb:c3:dd:ee:d4:a4:78:03:eb:55:11: f2:af:ff:2d:4f:cf:72:dc:e7:57:7e:3b:6b:4c:a6:ff:da:f5: 1b:5a:b3:ae:cc:fe:74:a4:78:d8:57:aa:e0:f0:74:09:3d:06: 57:cf:e4:9a:0d:36:63:c4:53:d2:aa:e7:8c:93:8a:c4:57:89: 17:4b:30:2d:77:19:5c:03:dc:2f:6e:d6:09:1e:d4:ac:fc:f0: 50:0e:f5:e6:ce:70:eb:9c:53:0c:33:4a:32:52:db:6c:f6:2a: be:4a:3f:c8 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUWDvCSZDPnjkHuWPXJXi0bKvnp4wwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEMzNDYyODA5OTQzRTlFOEU4RTg5MDUyQkY5QjlDM0RE QzYwRUUyMjAeFw0yNTEwMTkxMjM1NDZaFw0yNTEwMjIxNDA2NDZaMDMxMTAvBgNV BAMTKDU2N0YwQ0RDNTdBODdBQzMwODk4RUY3M0VDMDNFODQxREI4QUY0QjcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDrZbp/jUHOiRfraLlpxi0yJtP6 ZbqWX17zoUin/88BIL24WKRYYaN6cDQfeP+G8xf/TvXVcsPPdAUnVlbZBVVfk9F9 4c9mNR9y3aA89dG1hrl9pxhy6Vbxp1x1l9Q+7NnanC4/sPEPf3OlCesB9/H3SRN3 MAcUZbHwiYhaJgpTOX10z9amUgdhbtX6CBG6fpALJ07Vp4L70vBcvBrAqkgqZpUY nZp4P0DRwv+KZh6Hjggf7MEQLOA2HUZz7y0tspZ3nppyHgqRvcnCqG/UB2uTWP17 zY6ja5e8/a7zZC8rDQspg7kzsN0wbwOmtf314fugF1ep63tsGZeonocrzRoHAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUVn8M3FeoesMImO9z7APoQduK9LcwHwYDVR0j BBgwFoAUjDRigJlD6ejo6JBSv5ucPdxg7iIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 MzM4YmRhZC1kMmRkLTRmMDctYWU4NC1jNTQwNjEyYmFmNmEvMC84QzM0NjI4MDk5 NDNFOUU4RThFODkwNTJCRjlCOUMzRERDNjBFRTIyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOEMzNDYyODA5OTQzRTlFOEU4RTg5MDUyQkY5QjlDM0REQzYw RUUyMi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOTMzOGJkYWQtZDJkZC00ZjA3LWFl ODQtYzU0MDYxMmJhZjZhLzAvOEMzNDYyODA5OTQzRTlFOEU4RTg5MDUyQkY5QjlD M0REQzYwRUUyMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJRNWzzEt/Y3wqpb4V0uXtSHcFJNLFRU1oYS 43DCrR+qngo25D5ZRpjSo8BN+3U0TmlBs3ybILjgEkQW5FjL9WcHiTgxB2XIpmae pZHQP6vGRyjSFKyQPIfETk/NqHnEkct2+rLKym95p8CgqtibwqNcHYrcK96mO5f/ smECp3+Nszz6yL8W5N9eJ4Z3zThBwcH5IX1t9fXrw93u1KR4A+tVEfKv/y1Pz3Lc 51d+O2tMpv/a9Rtas67M/nSkeNhXquDwdAk9BlfP5JoNNmPEU9Kq54yTisRXiRdL MC13GVwD3C9u1gke1Kz88FAO9ebOcOucUwwzSjJS22z2Kr5KP8g= -----END CERTIFICATE-----Generated at Mon Oct 20 13:06:46 2025 by rpki-client