$ rpki-client -vvf repo-rpki.idnic.net/repo/a679824f-4e08-4970-bba6-27b4726ca580/0/8B7B648E54ABC4F43564B6B7D8EC6CA25EB6C65C.mft File: 8B7B648E54ABC4F43564B6B7D8EC6CA25EB6C65C.mft (raw, json) Hash identifier: F/AmVJph6rq8tvfZdd2rSApkz+UXKf/2BBA4zcla/t8= Subject key identifier: D6:52:EF:AE:0B:97:AE:C8:3E:05:C8:08:C3:75:7D:68:A9:67:07:3A Authority key identifier: 8B:7B:64:8E:54:AB:C4:F4:35:64:B6:B7:D8:EC:6C:A2:5E:B6:C6:5C Certificate issuer: /CN=8B7B648E54ABC4F43564B6B7D8EC6CA25EB6C65C Certificate serial: 67DF3E4B4B65FE6069BE0E45A770BF442989F08E Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8B7B648E54ABC4F43564B6B7D8EC6CA25EB6C65C.cer Subject info access: rsync://repo-rpki.idnic.net/repo/a679824f-4e08-4970-bba6-27b4726ca580/0/8B7B648E54ABC4F43564B6B7D8EC6CA25EB6C65C.mft Manifest number: 0225 Signing time: Sun 19 Oct 2025 23:00:46 +0000 Manifest this update: Sun 19 Oct 2025 22:55:46 +0000 Manifest next update: Thu 23 Oct 2025 10:20:46 +0000 Files and hashes: 1: 8B7B648E54ABC4F43564B6B7D8EC6CA25EB6C65C.crl (hash: R45NsKoZRglYZfRNKc9eC1Jni0G8Ha9EkmGQuaoW02g=) 2: 3130332e3138362e36302e302f32332d3234203d3e20313439363932.roa (hash: D3mhXulAOJ2gHffXQf0w0aMiyDfxmDOfLqbB+xIObN4=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/a679824f-4e08-4970-bba6-27b4726ca580/0/8B7B648E54ABC4F43564B6B7D8EC6CA25EB6C65C.crl rsync://repo-rpki.idnic.net/repo/a679824f-4e08-4970-bba6-27b4726ca580/0/8B7B648E54ABC4F43564B6B7D8EC6CA25EB6C65C.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8B7B648E54ABC4F43564B6B7D8EC6CA25EB6C65C.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 Oct 2025 10:20:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 67:df:3e:4b:4b:65:fe:60:69:be:0e:45:a7:70:bf:44:29:89:f0:8e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8B7B648E54ABC4F43564B6B7D8EC6CA25EB6C65C Validity Not Before: Oct 19 22:55:46 2025 GMT Not After : Oct 23 10:20:46 2025 GMT Subject: CN=D652EFAE0B97AEC83E05C808C3757D68A967073A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:f7:60:9f:ec:9b:12:fa:83:1e:14:9f:ab:e3: ba:8e:34:5e:b4:52:e4:2d:cd:5b:6d:e2:53:e0:95: 27:df:b2:4d:99:f9:04:28:46:f8:a3:de:2c:24:7d: b9:9f:4e:7f:2e:70:d4:a6:17:c7:a4:77:82:64:f0: b4:b1:1d:04:0c:45:52:e1:98:c2:ed:ee:f0:8c:40: 82:c2:f6:52:38:2e:3c:e2:8b:37:cd:6a:76:0d:76: 5a:47:72:af:6e:b6:13:b9:92:f1:4a:de:ad:44:f2: 34:1b:29:6c:55:2c:23:fc:dd:e1:67:be:b1:3e:46: fa:a3:29:e4:c5:8f:d9:32:31:2b:ae:cd:4c:ee:d1: 95:48:d8:93:94:66:37:31:21:d3:04:c7:b3:a9:59: d8:4e:96:10:70:5f:ab:56:1e:f4:0f:ab:e6:6c:a6: b4:ee:55:0b:37:9e:92:52:ac:c4:72:7b:d0:02:9d: f1:7e:f6:27:33:ef:86:e8:12:b3:60:af:57:82:2d: c3:00:d7:93:c2:2b:66:4b:66:fb:a5:de:7d:f5:00: 81:24:99:4c:1d:a8:d5:0f:ff:27:2b:9c:02:2c:9d: 19:fc:ed:66:cf:53:b0:81:54:9a:bb:68:85:09:d9: e9:3c:d9:0e:32:c9:39:3f:15:8d:ee:5d:aa:34:12: 98:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D6:52:EF:AE:0B:97:AE:C8:3E:05:C8:08:C3:75:7D:68:A9:67:07:3A X509v3 Authority Key Identifier: keyid:8B:7B:64:8E:54:AB:C4:F4:35:64:B6:B7:D8:EC:6C:A2:5E:B6:C6:5C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/a679824f-4e08-4970-bba6-27b4726ca580/0/8B7B648E54ABC4F43564B6B7D8EC6CA25EB6C65C.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8B7B648E54ABC4F43564B6B7D8EC6CA25EB6C65C.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a679824f-4e08-4970-bba6-27b4726ca580/0/8B7B648E54ABC4F43564B6B7D8EC6CA25EB6C65C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 28:54:75:cc:9e:9c:94:2c:82:a6:c3:bc:07:ae:f6:51:65:8f: 98:24:f4:f7:7a:41:b3:6b:88:0b:e5:01:d5:6e:5e:b8:e7:a0: e3:1b:ce:4c:99:f3:ce:d0:d1:1e:33:35:b5:bb:95:63:53:87: 8b:62:94:ed:06:99:a1:d5:a7:5c:04:44:89:43:f3:2b:06:05: cd:a8:3d:c2:ca:5e:34:73:02:b5:1e:41:87:fc:23:2a:56:fd: e4:99:28:f8:8b:de:b8:c0:b7:36:9f:50:fe:f0:bb:16:c5:81: 72:32:e2:b2:72:35:b1:c4:77:eb:42:ea:b6:a3:78:f7:c7:98: 81:fb:f6:dc:6c:39:ed:39:09:49:4f:8a:1d:39:41:39:97:c0: b3:fc:af:8e:5b:19:c9:a9:29:7e:37:89:5b:c2:76:89:db:78: 9c:b6:49:0f:6e:36:30:96:03:7d:eb:12:60:37:66:b3:d4:e6: 6a:a3:4d:7f:06:2f:6b:55:04:2b:51:64:ad:c3:6a:fc:f9:e2: ef:91:fb:bb:de:84:dc:27:88:17:7e:88:f4:4d:fe:24:25:c2: d0:06:ce:6c:0f:5f:3f:a1:d7:f9:c1:5c:9a:ac:18:72:d1:9c: 8d:22:41:5c:4b:4b:03:d5:10:4d:a3:aa:8e:55:c8:78:8c:c5: 13:97:88:7d -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUZ98+S0tl/mBpvg5Fp3C/RCmJ8I4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEI3QjY0OEU1NEFCQzRGNDM1NjRCNkI3RDhFQzZDQTI1 RUI2QzY1QzAeFw0yNTEwMTkyMjU1NDZaFw0yNTEwMjMxMDIwNDZaMDMxMTAvBgNV BAMTKEQ2NTJFRkFFMEI5N0FFQzgzRTA1QzgwOEMzNzU3RDY4QTk2NzA3M0EwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDE92Cf7JsS+oMeFJ+r47qONF60 UuQtzVtt4lPglSffsk2Z+QQoRvij3iwkfbmfTn8ucNSmF8ekd4Jk8LSxHQQMRVLh mMLt7vCMQILC9lI4LjziizfNanYNdlpHcq9uthO5kvFK3q1E8jQbKWxVLCP83eFn vrE+RvqjKeTFj9kyMSuuzUzu0ZVI2JOUZjcxIdMEx7OpWdhOlhBwX6tWHvQPq+Zs prTuVQs3npJSrMRye9ACnfF+9icz74boErNgr1eCLcMA15PCK2ZLZvul3n31AIEk mUwdqNUP/ycrnAIsnRn87WbPU7CBVJq7aIUJ2ek82Q4yyTk/FY3uXao0EpgtAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU1lLvrguXrsg+BcgIw3V9aKlnBzowHwYDVR0j BBgwFoAUi3tkjlSrxPQ1ZLa32Oxsol62xlwwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h Njc5ODI0Zi00ZTA4LTQ5NzAtYmJhNi0yN2I0NzI2Y2E1ODAvMC84QjdCNjQ4RTU0 QUJDNEY0MzU2NEI2QjdEOEVDNkNBMjVFQjZDNjVDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOEI3QjY0OEU1NEFCQzRGNDM1NjRCNkI3RDhFQzZDQTI1RUI2 QzY1Qy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYTY3OTgyNGYtNGUwOC00OTcwLWJi YTYtMjdiNDcyNmNhNTgwLzAvOEI3QjY0OEU1NEFCQzRGNDM1NjRCNkI3RDhFQzZD QTI1RUI2QzY1Qy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAChUdcyenJQsgqbDvAeu9lFlj5gk9Pd6QbNr iAvlAdVuXrjnoOMbzkyZ887Q0R4zNbW7lWNTh4tilO0GmaHVp1wERIlD8ysGBc2o PcLKXjRzArUeQYf8IypW/eSZKPiL3rjAtzafUP7wuxbFgXIy4rJyNbHEd+tC6raj ePfHmIH79txsOe05CUlPih05QTmXwLP8r45bGcmpKX43iVvCdonbeJy2SQ9uNjCW A33rEmA3ZrPU5mqjTX8GL2tVBCtRZK3Davz54u+R+7vehNwniBd+iPRN/iQlwtAG zmwPXz+h1/nBXJqsGHLRnI0iQVxLSwPVEE2jqo5VyHiMxROXiH0= -----END CERTIFICATE-----Generated at Mon Oct 20 09:20:33 2025 by rpki-client