$ rpki-client -vvf repo-rpki.idnic.net/repo/9497d828-984a-43f1-9b6e-a01ba21bb518/0/B8E467F9AD3F6AB1EEF3A9099A390231708C790A.mft File: B8E467F9AD3F6AB1EEF3A9099A390231708C790A.mft (raw, json) Hash identifier: VYpi7R4/36n684ACRHQks4Xl6eiPT1HkecQ5SKnxs4c= Subject key identifier: 9E:0C:E8:30:D0:DF:FB:E9:2A:E0:CB:62:8B:88:C4:68:80:03:8E:FA Authority key identifier: B8:E4:67:F9:AD:3F:6A:B1:EE:F3:A9:09:9A:39:02:31:70:8C:79:0A Certificate issuer: /CN=B8E467F9AD3F6AB1EEF3A9099A390231708C790A Certificate serial: 55C3022FC97409B3B9EFD458B923F585FABB0848 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B8E467F9AD3F6AB1EEF3A9099A390231708C790A.cer Subject info access: rsync://repo-rpki.idnic.net/repo/9497d828-984a-43f1-9b6e-a01ba21bb518/0/B8E467F9AD3F6AB1EEF3A9099A390231708C790A.mft Manifest number: 020C Signing time: Mon 20 Oct 2025 02:00:37 +0000 Manifest this update: Mon 20 Oct 2025 01:55:37 +0000 Manifest next update: Thu 23 Oct 2025 05:48:37 +0000 Files and hashes: 1: B8E467F9AD3F6AB1EEF3A9099A390231708C790A.crl (hash: 493tp4R2RSXA940Cx1jrf+/7/rSmxTCvPsuwBn7c7u0=) 2: 3130332e352e3134392e302f32342d3234203d3e20313439393338.roa (hash: aIp2Ip0KA7a4+VvE23OSDrVGb4sJGrWUPloeyjyWxtA=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/9497d828-984a-43f1-9b6e-a01ba21bb518/0/B8E467F9AD3F6AB1EEF3A9099A390231708C790A.crl rsync://repo-rpki.idnic.net/repo/9497d828-984a-43f1-9b6e-a01ba21bb518/0/B8E467F9AD3F6AB1EEF3A9099A390231708C790A.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B8E467F9AD3F6AB1EEF3A9099A390231708C790A.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 Oct 2025 05:48:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 55:c3:02:2f:c9:74:09:b3:b9:ef:d4:58:b9:23:f5:85:fa:bb:08:48 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B8E467F9AD3F6AB1EEF3A9099A390231708C790A Validity Not Before: Oct 20 01:55:37 2025 GMT Not After : Oct 23 05:48:37 2025 GMT Subject: CN=9E0CE830D0DFFBE92AE0CB628B88C46880038EFA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:43:c3:74:03:eb:2b:8b:eb:8a:f4:fc:e6:e8: 16:0c:36:c3:a5:5c:db:f0:36:d7:ff:95:cf:3e:8c: 82:ca:9b:f5:c5:35:6b:b7:3a:ff:7e:95:14:3f:d6: d2:97:18:08:9c:98:17:c4:7b:5b:e7:f6:fc:81:73: 01:60:59:a3:ec:76:2b:0f:74:2e:05:ae:b3:c1:2f: 4f:02:08:44:96:31:32:09:4d:30:c4:54:75:04:30: f7:b4:0f:23:63:1d:cf:44:57:c3:b6:b6:2e:49:b9: 39:fe:1f:46:d5:11:50:b9:2e:d0:cf:2a:66:77:be: f0:bc:a2:67:33:15:86:38:80:fd:75:9a:8c:c7:18: d3:d6:87:2b:b0:a1:eb:95:0e:e1:0a:e8:76:09:29: 11:8b:50:77:68:ea:92:be:e3:96:a0:a2:9f:57:74: 8c:b2:03:2a:12:57:8e:9d:22:de:29:88:64:6b:63: a9:ac:73:18:0b:e8:ef:1a:97:70:44:cd:c7:10:dc: e6:08:64:63:ea:b3:73:c1:78:d1:0b:fe:21:18:af: 51:dd:8f:58:33:bf:0d:f1:89:71:d9:55:34:5e:03: b5:12:5a:c3:cb:31:7c:d2:ae:45:a3:7d:3b:dd:a3: aa:14:8f:be:3a:af:5d:f1:c6:9a:eb:af:f7:ad:de: db:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9E:0C:E8:30:D0:DF:FB:E9:2A:E0:CB:62:8B:88:C4:68:80:03:8E:FA X509v3 Authority Key Identifier: keyid:B8:E4:67:F9:AD:3F:6A:B1:EE:F3:A9:09:9A:39:02:31:70:8C:79:0A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/9497d828-984a-43f1-9b6e-a01ba21bb518/0/B8E467F9AD3F6AB1EEF3A9099A390231708C790A.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B8E467F9AD3F6AB1EEF3A9099A390231708C790A.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/9497d828-984a-43f1-9b6e-a01ba21bb518/0/B8E467F9AD3F6AB1EEF3A9099A390231708C790A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c3:89:e0:a9:75:84:19:f5:05:43:d5:0e:bf:3c:24:dd:a8:d7: 00:e4:4e:7a:71:4b:24:c7:17:75:83:68:39:41:c1:d3:fd:40: ab:a0:dd:19:96:8b:4d:e7:bf:6e:c5:74:2a:bd:3b:aa:a2:e4: af:23:52:31:2f:12:ab:f7:33:ca:15:7a:86:85:a4:f3:a4:1f: a4:71:d6:6d:9a:88:68:93:18:ee:6f:0e:09:62:54:f5:da:2d: 5a:c5:5b:db:0c:f2:ae:76:18:b5:42:24:bc:ab:e6:b5:1f:5c: a7:8b:13:1b:04:f4:bd:d1:fe:e6:3a:b9:71:5e:07:35:af:39: e0:ea:96:ca:85:00:d5:7b:a6:ce:f8:9e:8e:b9:22:7d:97:1a: 7d:e2:d5:80:79:98:b8:75:60:cd:0b:68:b3:45:d7:93:21:39: 5c:a7:6f:b3:7c:c4:19:48:43:00:88:e0:3e:9f:f2:76:88:c2: 14:8e:41:42:08:ca:5d:e3:3e:ff:98:64:af:5d:a9:bc:85:79: ab:8a:5a:1f:73:e9:2b:40:ef:7f:88:32:13:ba:8e:63:1a:fe: a7:9a:17:e4:c8:a2:46:bd:76:8c:c3:2c:87:f0:19:4c:88:fc: 89:9b:0a:3d:ee:e6:3a:44:72:27:5b:c7:95:b3:91:e3:cb:3b: ae:2e:9f:c5 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUVcMCL8l0CbO579RYuSP1hfq7CEgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjhFNDY3RjlBRDNGNkFCMUVFRjNBOTA5OUEzOTAyMzE3 MDhDNzkwQTAeFw0yNTEwMjAwMTU1MzdaFw0yNTEwMjMwNTQ4MzdaMDMxMTAvBgNV BAMTKDlFMENFODMwRDBERkZCRTkyQUUwQ0I2MjhCODhDNDY4ODAwMzhFRkEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC2Q8N0A+sri+uK9Pzm6BYMNsOl XNvwNtf/lc8+jILKm/XFNWu3Ov9+lRQ/1tKXGAicmBfEe1vn9vyBcwFgWaPsdisP dC4FrrPBL08CCESWMTIJTTDEVHUEMPe0DyNjHc9EV8O2ti5JuTn+H0bVEVC5LtDP KmZ3vvC8omczFYY4gP11mozHGNPWhyuwoeuVDuEK6HYJKRGLUHdo6pK+45agop9X dIyyAyoSV46dIt4piGRrY6mscxgL6O8al3BEzccQ3OYIZGPqs3PBeNEL/iEYr1Hd j1gzvw3xiXHZVTReA7USWsPLMXzSrkWjfTvdo6oUj746r13xxprrr/et3tt9AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUngzoMNDf++kq4Mtii4jEaIADjvowHwYDVR0j BBgwFoAUuORn+a0/arHu86kJmjkCMXCMeQowDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 NDk3ZDgyOC05ODRhLTQzZjEtOWI2ZS1hMDFiYTIxYmI1MTgvMC9COEU0NjdGOUFE M0Y2QUIxRUVGM0E5MDk5QTM5MDIzMTcwOEM3OTBBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQjhFNDY3RjlBRDNGNkFCMUVFRjNBOTA5OUEzOTAyMzE3MDhD NzkwQS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOTQ5N2Q4MjgtOTg0YS00M2YxLTli NmUtYTAxYmEyMWJiNTE4LzAvQjhFNDY3RjlBRDNGNkFCMUVFRjNBOTA5OUEzOTAy MzE3MDhDNzkwQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAMOJ4Kl1hBn1BUPVDr88JN2o1wDkTnpxSyTH F3WDaDlBwdP9QKug3RmWi03nv27FdCq9O6qi5K8jUjEvEqv3M8oVeoaFpPOkH6Rx 1m2aiGiTGO5vDgliVPXaLVrFW9sM8q52GLVCJLyr5rUfXKeLExsE9L3R/uY6uXFe BzWvOeDqlsqFANV7ps74no65In2XGn3i1YB5mLh1YM0LaLNF15MhOVynb7N8xBlI QwCI4D6f8naIwhSOQUIIyl3jPv+YZK9dqbyFeauKWh9z6StA73+IMhO6jmMa/qea F+TIoka9dozDLIfwGUyI/ImbCj3u5jpEcidbx5WzkePLO64un8U= -----END CERTIFICATE-----Generated at Tue Oct 21 00:58:35 2025 by rpki-client