$ rpki-client -vvf repo-rpki.idnic.net/repo/a82db9d3-d6eb-4d6b-9a24-feeb21aa8f53/0/8BE281D2F4ED4091746FDA568A4296F1171589E8.mft File: 8BE281D2F4ED4091746FDA568A4296F1171589E8.mft (raw, json) Hash identifier: ATCt0WlRlMz6ejuRLMOEH9SinxbQFMr+GSX+FajQhHc= Subject key identifier: 53:E2:59:BF:51:56:FE:19:47:0F:8C:1C:CC:34:75:7F:75:D9:C2:0C Authority key identifier: 8B:E2:81:D2:F4:ED:40:91:74:6F:DA:56:8A:42:96:F1:17:15:89:E8 Certificate issuer: /CN=8BE281D2F4ED4091746FDA568A4296F1171589E8 Certificate serial: 784CB900B974A430065FB0A41AC7DA8BEB0FC250 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8BE281D2F4ED4091746FDA568A4296F1171589E8.cer Subject info access: rsync://repo-rpki.idnic.net/repo/a82db9d3-d6eb-4d6b-9a24-feeb21aa8f53/0/8BE281D2F4ED4091746FDA568A4296F1171589E8.mft Manifest number: 051A Signing time: Sat 18 Oct 2025 16:50:37 +0000 Manifest this update: Sat 18 Oct 2025 16:45:37 +0000 Manifest next update: Wed 22 Oct 2025 03:18:37 +0000 Files and hashes: 1: 8BE281D2F4ED4091746FDA568A4296F1171589E8.crl (hash: K3XT23vnnfkDexvik4zvcooaxURHsBbWEvURVjFd/Ko=) 2: 3130332e3133342e38372e302f32342d3234203d3e203538333639.roa (hash: JnMoHtL2uw/1X+XpxI+WJ5aRYCDoJDTU7TkrgplgZrw=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/a82db9d3-d6eb-4d6b-9a24-feeb21aa8f53/0/8BE281D2F4ED4091746FDA568A4296F1171589E8.crl rsync://repo-rpki.idnic.net/repo/a82db9d3-d6eb-4d6b-9a24-feeb21aa8f53/0/8BE281D2F4ED4091746FDA568A4296F1171589E8.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8BE281D2F4ED4091746FDA568A4296F1171589E8.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 Oct 2025 03:18:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 78:4c:b9:00:b9:74:a4:30:06:5f:b0:a4:1a:c7:da:8b:eb:0f:c2:50 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8BE281D2F4ED4091746FDA568A4296F1171589E8 Validity Not Before: Oct 18 16:45:37 2025 GMT Not After : Oct 22 03:18:37 2025 GMT Subject: CN=53E259BF5156FE19470F8C1CCC34757F75D9C20C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ee:af:6c:ad:db:e3:c4:a8:3e:95:38:f2:f3:c4: c4:9a:a1:ac:27:c3:43:40:a4:12:81:9a:76:b5:51: c4:98:64:65:f1:38:bf:64:df:d8:cb:da:a1:47:6b: 5c:ac:93:a4:bd:24:69:bb:21:6e:ca:06:6b:1b:62: b0:46:b8:e2:2a:90:4c:df:74:cc:44:10:d1:65:25: ad:d1:f7:13:73:b4:d3:e5:43:fa:7c:10:56:2b:1d: 76:a5:81:27:ba:96:1c:8a:9b:e2:68:91:53:be:81: 44:25:3f:85:23:5e:31:da:c6:8c:d7:21:49:a6:6c: 80:dc:dc:ff:d2:eb:3b:09:46:48:ac:9e:0e:76:6d: 44:99:68:e5:5d:70:f3:b4:9e:ef:67:58:40:df:9c: 9a:e8:b7:85:f2:66:65:59:9d:3b:63:65:bf:9e:c2: 95:5f:42:d9:2b:a7:a7:95:e5:8a:94:94:f1:6c:e6: 6f:21:8f:0b:54:ee:f3:43:1b:cc:97:bb:60:25:7d: 0a:fa:12:f7:c3:3a:4e:06:36:1e:ad:3b:88:6d:9c: 15:c5:5b:01:fc:52:27:8e:13:61:e1:9d:06:a4:2c: 84:5d:1a:dc:9c:78:cc:a2:aa:4e:c8:3b:29:14:42: d8:ea:0d:92:ff:71:9a:3c:51:1f:fa:5f:7b:18:25: 6b:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 53:E2:59:BF:51:56:FE:19:47:0F:8C:1C:CC:34:75:7F:75:D9:C2:0C X509v3 Authority Key Identifier: keyid:8B:E2:81:D2:F4:ED:40:91:74:6F:DA:56:8A:42:96:F1:17:15:89:E8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/a82db9d3-d6eb-4d6b-9a24-feeb21aa8f53/0/8BE281D2F4ED4091746FDA568A4296F1171589E8.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8BE281D2F4ED4091746FDA568A4296F1171589E8.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a82db9d3-d6eb-4d6b-9a24-feeb21aa8f53/0/8BE281D2F4ED4091746FDA568A4296F1171589E8.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 06:85:78:00:9e:9c:6e:3d:5c:be:ad:02:f4:36:03:da:60:bd: 81:e2:32:64:a7:ab:9b:81:4b:b6:48:1d:ed:bc:10:d2:7e:7d: 68:17:dc:37:48:77:88:b0:8d:16:12:93:82:fd:7f:22:b4:fd: 10:b1:db:ae:20:45:c6:03:ed:5a:8b:83:8d:3b:cf:fd:39:d7: a6:44:e0:cc:44:ce:ae:48:15:50:3c:0a:a6:19:93:eb:2d:a2: 70:77:b2:7c:96:58:43:9f:4c:ef:8c:7f:f4:dd:9d:30:69:65: b0:37:40:fc:78:03:4c:07:ac:8a:4f:d9:fc:ce:3a:fb:61:e7: 95:4d:12:8c:f7:c4:ce:92:53:df:e3:98:c1:18:c2:4b:81:85: 22:e2:68:2a:2b:6d:e8:77:9d:85:d9:92:4b:05:00:27:8e:c9: b7:15:ca:f7:08:6c:ea:f6:ab:78:76:bd:5a:a5:09:35:34:b7: 0a:9d:71:2b:3c:ce:99:3e:4c:f2:ba:55:c9:f8:04:0b:5e:6f: 84:86:e2:1e:55:ac:0f:98:85:23:91:4e:99:87:55:d6:88:77: cd:c3:96:6e:db:63:79:67:a8:3f:81:4c:f9:f6:c8:a9:87:43: bd:f1:ac:cf:31:4e:18:56:d5:c0:47:16:f2:25:ed:0b:4d:0d: 89:93:1e:bd -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUeEy5ALl0pDAGX7CkGsfai+sPwlAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEJFMjgxRDJGNEVENDA5MTc0NkZEQTU2OEE0Mjk2RjEx NzE1ODlFODAeFw0yNTEwMTgxNjQ1MzdaFw0yNTEwMjIwMzE4MzdaMDMxMTAvBgNV BAMTKDUzRTI1OUJGNTE1NkZFMTk0NzBGOEMxQ0NDMzQ3NTdGNzVEOUMyMEMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDur2yt2+PEqD6VOPLzxMSaoawn w0NApBKBmna1UcSYZGXxOL9k39jL2qFHa1ysk6S9JGm7IW7KBmsbYrBGuOIqkEzf dMxEENFlJa3R9xNztNPlQ/p8EFYrHXalgSe6lhyKm+JokVO+gUQlP4UjXjHaxozX IUmmbIDc3P/S6zsJRkisng52bUSZaOVdcPO0nu9nWEDfnJrot4XyZmVZnTtjZb+e wpVfQtkrp6eV5YqUlPFs5m8hjwtU7vNDG8yXu2AlfQr6EvfDOk4GNh6tO4htnBXF WwH8UieOE2HhnQakLIRdGtyceMyiqk7IOykUQtjqDZL/cZo8UR/6X3sYJWsnAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUU+JZv1FW/hlHD4wczDR1f3XZwgwwHwYDVR0j BBgwFoAUi+KB0vTtQJF0b9pWikKW8RcViegwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h ODJkYjlkMy1kNmViLTRkNmItOWEyNC1mZWViMjFhYThmNTMvMC84QkUyODFEMkY0 RUQ0MDkxNzQ2RkRBNTY4QTQyOTZGMTE3MTU4OUU4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOEJFMjgxRDJGNEVENDA5MTc0NkZEQTU2OEE0Mjk2RjExNzE1 ODlFOC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYTgyZGI5ZDMtZDZlYi00ZDZiLTlh MjQtZmVlYjIxYWE4ZjUzLzAvOEJFMjgxRDJGNEVENDA5MTc0NkZEQTU2OEE0Mjk2 RjExNzE1ODlFOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAaFeACenG49XL6tAvQ2A9pgvYHiMmSnq5uB S7ZIHe28ENJ+fWgX3DdId4iwjRYSk4L9fyK0/RCx264gRcYD7VqLg407z/0516ZE 4MxEzq5IFVA8CqYZk+stonB3snyWWEOfTO+Mf/TdnTBpZbA3QPx4A0wHrIpP2fzO Ovth55VNEoz3xM6SU9/jmMEYwkuBhSLiaCorbeh3nYXZkksFACeOybcVyvcIbOr2 q3h2vVqlCTU0twqdcSs8zpk+TPK6Vcn4BAteb4SG4h5VrA+YhSORTpmHVdaId83D lm7bY3lnqD+BTPn2yKmHQ73xrM8xThhW1cBHFvIl7QtNDYmTHr0= -----END CERTIFICATE-----Generated at Mon Oct 20 20:22:55 2025 by rpki-client