$ rpki-client -vvf repo-rpki.idnic.net/repo/9c80467c-aeb2-4095-8f54-85b9090d3908/0/8EE9EEE46EA0F860385C880C00E2EE5A59D6EA9B.mft File: 8EE9EEE46EA0F860385C880C00E2EE5A59D6EA9B.mft (raw, json) Hash identifier: mWb1NIHw7ws3pVQUi45Uv68JLVnJjFMHWZ0jA1DCpZE= Subject key identifier: 54:21:77:18:CC:C9:12:D3:C1:B7:0A:04:2A:A0:F6:F0:F0:4F:1A:AC Authority key identifier: 8E:E9:EE:E4:6E:A0:F8:60:38:5C:88:0C:00:E2:EE:5A:59:D6:EA:9B Certificate issuer: /CN=8EE9EEE46EA0F860385C880C00E2EE5A59D6EA9B Certificate serial: 7603E85EA0F82D01D5285F0AB8558C75161B05D3 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8EE9EEE46EA0F860385C880C00E2EE5A59D6EA9B.cer Subject info access: rsync://repo-rpki.idnic.net/repo/9c80467c-aeb2-4095-8f54-85b9090d3908/0/8EE9EEE46EA0F860385C880C00E2EE5A59D6EA9B.mft Manifest number: 01BA Signing time: Sun 19 Oct 2025 15:30:40 +0000 Manifest this update: Sun 19 Oct 2025 15:25:40 +0000 Manifest next update: Wed 22 Oct 2025 17:28:40 +0000 Files and hashes: 1: 3130332e3139372e3138382e302f32322d3234203d3e20313333383030.roa (hash: Q/xd/HC1bBeKjBCyWCDiCLVtwZ9rHYa7nKWTycy4dgg=) 2: 8EE9EEE46EA0F860385C880C00E2EE5A59D6EA9B.crl (hash: 4yhOjG5a/RnJOjEfjXmH8y7Pj1TgXTmWgbB4v31r47g=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/9c80467c-aeb2-4095-8f54-85b9090d3908/0/8EE9EEE46EA0F860385C880C00E2EE5A59D6EA9B.crl rsync://repo-rpki.idnic.net/repo/9c80467c-aeb2-4095-8f54-85b9090d3908/0/8EE9EEE46EA0F860385C880C00E2EE5A59D6EA9B.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8EE9EEE46EA0F860385C880C00E2EE5A59D6EA9B.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 Oct 2025 17:28:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 76:03:e8:5e:a0:f8:2d:01:d5:28:5f:0a:b8:55:8c:75:16:1b:05:d3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8EE9EEE46EA0F860385C880C00E2EE5A59D6EA9B Validity Not Before: Oct 19 15:25:40 2025 GMT Not After : Oct 22 17:28:40 2025 GMT Subject: CN=54217718CCC912D3C1B70A042AA0F6F0F04F1AAC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:69:b0:71:90:27:5b:34:f5:9e:77:21:0c:98: 83:86:bb:6a:25:da:41:af:fc:04:c6:8a:77:df:a4: 57:b3:df:79:7e:a2:e7:5b:31:aa:cb:63:79:9e:7f: a1:00:8d:e0:b3:9e:c3:70:36:e9:89:50:b7:1f:6a: 6b:6b:a5:6b:86:c2:3b:0f:3c:3d:66:fa:67:a5:32: 0e:c9:44:1c:23:00:bb:f0:0c:d7:4f:ca:35:b8:b8: 3b:3c:d4:09:66:2e:2d:f5:f7:81:ad:ae:64:05:ed: 03:c8:be:89:c1:d4:4f:67:b1:b8:e9:b0:b5:9b:c9: 7c:92:6e:c7:cc:92:84:bf:d9:1a:ad:eb:ae:2f:d5: 70:1f:30:89:27:52:48:88:f9:ca:e6:df:9e:91:35: 30:16:f2:f1:38:ba:d1:0c:af:77:e7:1c:a3:fa:c6: 57:40:c9:30:2d:0c:1a:c7:f2:c6:6c:c3:bb:52:4b: 34:7c:10:13:64:b0:fc:b0:aa:22:9b:8b:c6:c6:3a: b9:28:bc:42:a2:d3:fe:87:71:44:31:c5:27:67:e5: 82:61:0e:42:4b:67:ae:0c:f1:85:ea:d7:c3:35:52: 19:70:a5:37:c5:8c:59:5c:db:9d:72:98:ee:5a:9d: 97:7c:f9:9c:be:2a:e1:23:1d:72:d8:0c:e7:1f:ed: 15:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 54:21:77:18:CC:C9:12:D3:C1:B7:0A:04:2A:A0:F6:F0:F0:4F:1A:AC X509v3 Authority Key Identifier: keyid:8E:E9:EE:E4:6E:A0:F8:60:38:5C:88:0C:00:E2:EE:5A:59:D6:EA:9B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/9c80467c-aeb2-4095-8f54-85b9090d3908/0/8EE9EEE46EA0F860385C880C00E2EE5A59D6EA9B.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8EE9EEE46EA0F860385C880C00E2EE5A59D6EA9B.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/9c80467c-aeb2-4095-8f54-85b9090d3908/0/8EE9EEE46EA0F860385C880C00E2EE5A59D6EA9B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 98:3f:63:2a:7a:c8:1a:3f:15:18:8c:44:d4:68:50:5d:4b:d5: 8f:9c:e3:73:88:98:1c:74:68:dc:7b:09:c9:6e:d0:bd:a0:0b: 2a:b3:eb:be:0e:ee:81:85:00:3e:b0:f2:51:2b:2d:3f:fc:49: c4:93:83:cb:61:dd:d6:e1:61:8c:2d:7b:50:56:39:f3:9a:4a: 84:23:5b:73:00:50:b1:ef:26:35:31:0e:ed:b2:20:d4:39:ee: 82:7f:d0:47:27:cd:4e:46:90:53:35:8f:5c:fd:7b:32:98:81: d6:03:15:60:53:49:d2:b5:8f:8b:36:0e:14:63:c7:a9:ce:e1: db:af:28:85:21:aa:6f:76:7d:42:4d:80:1a:fc:a4:f4:95:67: de:24:0b:78:de:cc:dc:c0:f1:34:46:c2:15:30:ac:b7:42:fb: 3c:59:52:f1:d9:78:a2:15:66:58:89:c9:a1:8a:70:f9:92:1a: 86:41:50:a1:8b:b7:07:96:98:21:dd:e1:20:ab:3c:b1:59:b8: 04:cb:61:78:d4:02:b5:53:16:e3:75:a4:cb:61:d8:47:c0:43: 28:3e:38:dd:1e:ec:0a:98:8a:8f:7b:4a:a6:f1:81:ce:7a:7b: df:dd:1f:a2:a9:d2:65:b1:39:85:2a:e2:30:b2:2f:07:24:8b: d5:49:c0:c3 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUdgPoXqD4LQHVKF8KuFWMdRYbBdMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEVFOUVFRTQ2RUEwRjg2MDM4NUM4ODBDMDBFMkVFNUE1 OUQ2RUE5QjAeFw0yNTEwMTkxNTI1NDBaFw0yNTEwMjIxNzI4NDBaMDMxMTAvBgNV BAMTKDU0MjE3NzE4Q0NDOTEyRDNDMUI3MEEwNDJBQTBGNkYwRjA0RjFBQUMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+abBxkCdbNPWedyEMmIOGu2ol 2kGv/ATGinffpFez33l+oudbMarLY3mef6EAjeCznsNwNumJULcfamtrpWuGwjsP PD1m+melMg7JRBwjALvwDNdPyjW4uDs81AlmLi3194GtrmQF7QPIvonB1E9nsbjp sLWbyXySbsfMkoS/2Rqt664v1XAfMIknUkiI+crm356RNTAW8vE4utEMr3fnHKP6 xldAyTAtDBrH8sZsw7tSSzR8EBNksPywqiKbi8bGOrkovEKi0/6HcUQxxSdn5YJh DkJLZ64M8YXq18M1UhlwpTfFjFlc251ymO5anZd8+Zy+KuEjHXLYDOcf7RUfAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUVCF3GMzJEtPBtwoEKqD28PBPGqwwHwYDVR0j BBgwFoAUjunu5G6g+GA4XIgMAOLuWlnW6pswDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 YzgwNDY3Yy1hZWIyLTQwOTUtOGY1NC04NWI5MDkwZDM5MDgvMC84RUU5RUVFNDZF QTBGODYwMzg1Qzg4MEMwMEUyRUU1QTU5RDZFQTlCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOEVFOUVFRTQ2RUEwRjg2MDM4NUM4ODBDMDBFMkVFNUE1OUQ2 RUE5Qi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOWM4MDQ2N2MtYWViMi00MDk1LThm NTQtODViOTA5MGQzOTA4LzAvOEVFOUVFRTQ2RUEwRjg2MDM4NUM4ODBDMDBFMkVF NUE1OUQ2RUE5Qi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJg/Yyp6yBo/FRiMRNRoUF1L1Y+c43OImBx0 aNx7Cclu0L2gCyqz674O7oGFAD6w8lErLT/8ScSTg8th3dbhYYwte1BWOfOaSoQj W3MAULHvJjUxDu2yINQ57oJ/0EcnzU5GkFM1j1z9ezKYgdYDFWBTSdK1j4s2DhRj x6nO4duvKIUhqm92fUJNgBr8pPSVZ94kC3jezNzA8TRGwhUwrLdC+zxZUvHZeKIV ZliJyaGKcPmSGoZBUKGLtweWmCHd4SCrPLFZuATLYXjUArVTFuN1pMth2EfAQyg+ ON0e7AqYio97Sqbxgc56e9/dH6Kp0mWxOYUq4jCyLwcki9VJwMM= -----END CERTIFICATE-----Generated at Mon Oct 20 14:41:34 2025 by rpki-client