$ rpki-client -vvf repo-rpki.idnic.net/repo/99e3b1d8-bf19-46e3-b609-0d160988dac8/0/8B266458C7DEFCF6926DCDF453C84A1D42E8D989.mft File: 8B266458C7DEFCF6926DCDF453C84A1D42E8D989.mft (raw, json) Hash identifier: Gn4VOwZ5i5wQ/RsYvebqJLGTdUuWrfS8NH54eDXjSQI= Subject key identifier: 9B:16:F2:6E:8E:71:5B:DD:15:3A:79:FC:1E:93:E7:C4:50:E1:B1:79 Authority key identifier: 8B:26:64:58:C7:DE:FC:F6:92:6D:CD:F4:53:C8:4A:1D:42:E8:D9:89 Certificate issuer: /CN=8B266458C7DEFCF6926DCDF453C84A1D42E8D989 Certificate serial: 3764021F7528B1E1390167686BE830F91939872C Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8B266458C7DEFCF6926DCDF453C84A1D42E8D989.cer Subject info access: rsync://repo-rpki.idnic.net/repo/99e3b1d8-bf19-46e3-b609-0d160988dac8/0/8B266458C7DEFCF6926DCDF453C84A1D42E8D989.mft Manifest number: 0517 Signing time: Sat 18 Oct 2025 22:41:19 +0000 Manifest this update: Sat 18 Oct 2025 22:36:19 +0000 Manifest next update: Wed 22 Oct 2025 08:25:19 +0000 Files and hashes: 1: 3131392e3233352e3234382e302f32312d3234203d3e203435313436.roa (hash: Gj57tszoKsJPmI3zlTc36/bgp48+5kiHS2p+sUe73DE=) 2: 8B266458C7DEFCF6926DCDF453C84A1D42E8D989.crl (hash: 3JvytdV286qSTlH/yfvtXROj4bdmWAVLcUSwagG5544=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/99e3b1d8-bf19-46e3-b609-0d160988dac8/0/8B266458C7DEFCF6926DCDF453C84A1D42E8D989.crl rsync://repo-rpki.idnic.net/repo/99e3b1d8-bf19-46e3-b609-0d160988dac8/0/8B266458C7DEFCF6926DCDF453C84A1D42E8D989.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8B266458C7DEFCF6926DCDF453C84A1D42E8D989.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 Oct 2025 08:25:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 37:64:02:1f:75:28:b1:e1:39:01:67:68:6b:e8:30:f9:19:39:87:2c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8B266458C7DEFCF6926DCDF453C84A1D42E8D989 Validity Not Before: Oct 18 22:36:19 2025 GMT Not After : Oct 22 08:25:19 2025 GMT Subject: CN=9B16F26E8E715BDD153A79FC1E93E7C450E1B179 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:2a:1d:d3:58:34:3b:a9:8c:6a:11:5b:4c:33: b6:9d:10:7c:5e:56:cf:15:ba:44:4e:f0:0a:eb:19: 73:63:ac:f0:1d:a2:12:1c:f8:07:57:da:f4:0c:c4: 04:38:78:7d:f4:af:e6:d4:81:f3:56:ae:4a:a1:dc: 78:83:cc:dc:a6:28:6d:f6:32:43:bc:55:e4:65:1d: 9d:ca:7b:04:a5:6b:ce:26:d1:9b:64:44:46:07:a7: 41:5e:b6:5e:31:6e:4f:42:51:e2:a1:c6:3a:ff:29: 11:18:90:2f:cd:57:c9:43:d3:d3:01:04:79:3e:6d: ba:42:7c:20:5d:98:fd:c6:fd:99:14:22:24:35:c2: 79:b1:57:f0:69:f9:5c:51:9e:c4:68:03:af:24:26: ef:49:4f:ac:3c:dc:5e:34:87:70:87:f9:01:83:e4: 7c:59:fe:c5:6e:dc:fd:84:ff:1d:d2:9f:15:a1:72: 74:74:21:27:70:38:ee:88:b4:01:30:df:e3:7d:ab: 31:71:ab:94:03:95:e1:d5:0f:c8:4b:5a:53:62:b1: c8:4d:2b:af:76:20:3a:fa:4b:47:c4:8f:2e:6d:fd: 80:d4:e1:07:7d:66:86:aa:cf:e0:8f:8d:0a:06:a2: 6e:73:13:a8:ea:2a:4c:7b:12:47:f9:b8:60:1b:44: d1:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9B:16:F2:6E:8E:71:5B:DD:15:3A:79:FC:1E:93:E7:C4:50:E1:B1:79 X509v3 Authority Key Identifier: keyid:8B:26:64:58:C7:DE:FC:F6:92:6D:CD:F4:53:C8:4A:1D:42:E8:D9:89 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/99e3b1d8-bf19-46e3-b609-0d160988dac8/0/8B266458C7DEFCF6926DCDF453C84A1D42E8D989.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8B266458C7DEFCF6926DCDF453C84A1D42E8D989.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/99e3b1d8-bf19-46e3-b609-0d160988dac8/0/8B266458C7DEFCF6926DCDF453C84A1D42E8D989.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5d:1d:c8:37:94:1c:a8:e6:be:03:89:45:56:4f:3d:b0:3f:9b: 74:26:d2:0c:9b:79:a7:2b:c7:7a:3f:dc:83:00:de:2f:61:ba: 50:80:71:38:60:03:46:90:a6:f6:3d:1d:5f:e3:0c:5c:0d:f8: 09:e9:22:20:1e:fd:bf:b1:22:a7:3d:66:cd:39:da:54:85:3d: 4a:9a:6b:a8:90:a2:6c:40:0b:f4:1a:45:b3:ea:15:f7:be:88: b2:73:b7:cd:6a:b9:db:7d:91:dd:25:ac:91:82:1e:8b:d5:30: 35:91:ce:2b:13:83:14:e1:f2:b7:cc:e3:69:1b:2a:30:87:c8: e2:db:8a:f5:c8:0a:bb:d4:9a:65:13:2c:18:15:8b:3b:14:5d: c0:ee:01:ed:31:53:b8:15:2d:73:f4:69:10:c2:f2:3a:2e:36: c3:17:38:5c:19:88:45:37:81:b3:8d:ab:39:c3:44:55:c7:59: ab:62:46:f4:46:b3:b8:ca:e1:8d:40:ab:6a:46:14:9a:0e:00: cb:1a:6a:3c:1e:82:50:0b:76:6f:2d:7e:31:f3:9c:82:f3:d1: 26:fc:fb:02:f6:c3:4b:5e:4e:bb:30:da:3c:16:78:af:a1:d3: 62:88:c8:9d:a7:4a:38:7a:3c:ca:57:c3:a0:55:91:29:04:c6: 49:5b:3e:74 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUN2QCH3UoseE5AWdoa+gw+Rk5hywwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEIyNjY0NThDN0RFRkNGNjkyNkRDREY0NTNDODRBMUQ0 MkU4RDk4OTAeFw0yNTEwMTgyMjM2MTlaFw0yNTEwMjIwODI1MTlaMDMxMTAvBgNV BAMTKDlCMTZGMjZFOEU3MTVCREQxNTNBNzlGQzFFOTNFN0M0NTBFMUIxNzkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDDKh3TWDQ7qYxqEVtMM7adEHxe Vs8VukRO8ArrGXNjrPAdohIc+AdX2vQMxAQ4eH30r+bUgfNWrkqh3HiDzNymKG32 MkO8VeRlHZ3KewSla84m0ZtkREYHp0Fetl4xbk9CUeKhxjr/KREYkC/NV8lD09MB BHk+bbpCfCBdmP3G/ZkUIiQ1wnmxV/Bp+VxRnsRoA68kJu9JT6w83F40h3CH+QGD 5HxZ/sVu3P2E/x3SnxWhcnR0ISdwOO6ItAEw3+N9qzFxq5QDleHVD8hLWlNischN K692IDr6S0fEjy5t/YDU4Qd9Zoaqz+CPjQoGom5zE6jqKkx7Ekf5uGAbRNHnAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUmxbybo5xW90VOnn8HpPnxFDhsXkwHwYDVR0j BBgwFoAUiyZkWMfe/PaSbc30U8hKHULo2YkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 OWUzYjFkOC1iZjE5LTQ2ZTMtYjYwOS0wZDE2MDk4OGRhYzgvMC84QjI2NjQ1OEM3 REVGQ0Y2OTI2RENERjQ1M0M4NEExRDQyRThEOTg5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOEIyNjY0NThDN0RFRkNGNjkyNkRDREY0NTNDODRBMUQ0MkU4 RDk4OS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOTllM2IxZDgtYmYxOS00NmUzLWI2 MDktMGQxNjA5ODhkYWM4LzAvOEIyNjY0NThDN0RFRkNGNjkyNkRDREY0NTNDODRB MUQ0MkU4RDk4OS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAF0dyDeUHKjmvgOJRVZPPbA/m3Qm0gybeacr x3o/3IMA3i9hulCAcThgA0aQpvY9HV/jDFwN+AnpIiAe/b+xIqc9Zs052lSFPUqa a6iQomxAC/QaRbPqFfe+iLJzt81qudt9kd0lrJGCHovVMDWRzisTgxTh8rfM42kb KjCHyOLbivXICrvUmmUTLBgVizsUXcDuAe0xU7gVLXP0aRDC8jouNsMXOFwZiEU3 gbONqznDRFXHWatiRvRGs7jK4Y1Aq2pGFJoOAMsaajweglALdm8tfjHznILz0Sb8 +wL2w0teTrsw2jwWeK+h02KIyJ2nSjh6PMpXw6BVkSkExklbPnQ= -----END CERTIFICATE-----Generated at Mon Oct 20 06:50:06 2025 by rpki-client