$ rpki-client -vvf repo-rpki.idnic.net/repo/a87c2b7e-2663-4d68-b25a-5fcf05e07bb4/0/B8E13B8031811FE78FA73151056FBFABEE076814.mft File: B8E13B8031811FE78FA73151056FBFABEE076814.mft (raw, json) Hash identifier: OqXpSml1o55rBFa34s24+gedBmsz/BwGzrcaYTlTDNw= Subject key identifier: 7C:91:00:68:A1:1C:61:F1:50:96:AB:75:D5:BB:C4:58:63:AC:64:21 Authority key identifier: B8:E1:3B:80:31:81:1F:E7:8F:A7:31:51:05:6F:BF:AB:EE:07:68:14 Certificate issuer: /CN=B8E13B8031811FE78FA73151056FBFABEE076814 Certificate serial: 160CA99510ADF9FF1B0AAF49E53BA851CF67BFF2 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B8E13B8031811FE78FA73151056FBFABEE076814.cer Subject info access: rsync://repo-rpki.idnic.net/repo/a87c2b7e-2663-4d68-b25a-5fcf05e07bb4/0/B8E13B8031811FE78FA73151056FBFABEE076814.mft Manifest number: 3E Signing time: Sun 19 Oct 2025 12:22:06 +0000 Manifest this update: Sun 19 Oct 2025 12:17:06 +0000 Manifest next update: Wed 22 Oct 2025 20:52:06 +0000 Files and hashes: 1: B8E13B8031811FE78FA73151056FBFABEE076814.crl (hash: VhoPr9f/cFY41B6gEDH6GLVFCM3S0hbr03U6g6cGXbU=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/a87c2b7e-2663-4d68-b25a-5fcf05e07bb4/0/B8E13B8031811FE78FA73151056FBFABEE076814.crl rsync://repo-rpki.idnic.net/repo/a87c2b7e-2663-4d68-b25a-5fcf05e07bb4/0/B8E13B8031811FE78FA73151056FBFABEE076814.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B8E13B8031811FE78FA73151056FBFABEE076814.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 Oct 2025 20:52:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 16:0c:a9:95:10:ad:f9:ff:1b:0a:af:49:e5:3b:a8:51:cf:67:bf:f2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B8E13B8031811FE78FA73151056FBFABEE076814 Validity Not Before: Oct 19 12:17:06 2025 GMT Not After : Oct 22 20:52:06 2025 GMT Subject: CN=7C910068A11C61F15096AB75D5BBC45863AC6421 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:b6:ed:fa:70:e4:90:a5:00:ed:45:43:5a:a5: dd:3a:04:07:e4:3f:45:b8:c1:38:ae:23:f2:1e:0a: 61:d3:7e:a3:51:c5:fb:26:b9:46:40:58:aa:e1:a6: 1a:11:26:e8:87:17:50:20:49:62:b0:68:52:9e:8e: 44:e9:82:0f:61:25:9c:59:eb:6f:93:d2:4b:4c:a0: d6:3a:28:08:d4:d2:2a:2a:69:a3:03:20:27:5a:e6: de:25:3c:61:5f:b8:e3:61:3f:b6:91:41:cd:f1:60: d0:f4:8e:12:e4:51:2e:40:07:ae:1b:1d:21:fe:2e: f5:6e:a6:c8:cd:5a:f0:06:4c:30:fb:d7:d4:49:ca: be:12:f3:b9:f9:fd:f6:23:8f:0a:1e:21:05:76:2e: e4:b6:d5:84:0d:a9:31:19:89:1e:5d:1e:b5:3d:ed: 3a:55:d5:64:1e:28:bd:bc:84:b2:07:29:46:6e:f5: b6:31:b6:71:03:f4:6f:93:8a:0a:5e:4c:78:ed:6c: b7:40:04:2b:6a:09:6a:b1:1a:d8:2b:bd:cf:cd:ff: 57:68:33:bf:91:d5:0f:a9:5f:f4:6e:ff:0e:83:1b: 0d:73:9e:f9:c0:52:c2:35:7c:c5:dc:0f:5f:67:85: 71:24:82:ca:f6:f2:99:8f:55:5a:ea:a2:57:f4:d6: c2:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7C:91:00:68:A1:1C:61:F1:50:96:AB:75:D5:BB:C4:58:63:AC:64:21 X509v3 Authority Key Identifier: keyid:B8:E1:3B:80:31:81:1F:E7:8F:A7:31:51:05:6F:BF:AB:EE:07:68:14 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/a87c2b7e-2663-4d68-b25a-5fcf05e07bb4/0/B8E13B8031811FE78FA73151056FBFABEE076814.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B8E13B8031811FE78FA73151056FBFABEE076814.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a87c2b7e-2663-4d68-b25a-5fcf05e07bb4/0/B8E13B8031811FE78FA73151056FBFABEE076814.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0a:de:ea:42:ff:38:16:98:6a:0c:23:90:d5:84:33:79:80:a8: 38:c2:45:39:78:41:77:5c:a1:31:0c:ee:d8:98:8c:f1:0b:f5: 10:bf:e9:a6:d1:74:08:af:94:77:ec:08:33:07:fe:e4:a2:af: e0:48:31:cb:0f:e8:5d:02:90:3e:76:0f:22:82:30:e1:e6:3a: 1c:08:97:bb:7f:2d:73:ad:de:b3:f7:71:f7:0a:53:c9:d3:b3: 9b:c5:97:ce:4a:eb:5b:4f:58:1a:47:9e:b2:b3:91:ab:cb:fe: e8:2d:60:ad:0a:58:d2:59:0f:a4:a2:50:d6:be:2b:61:06:59: 39:2d:8e:78:8a:96:b6:cf:e6:3c:d1:57:f5:08:f0:c3:97:17: ec:1c:dc:28:88:67:06:94:14:26:d3:ce:31:54:6e:89:2f:c3: 98:b4:78:ff:f5:99:0b:ed:32:02:41:f4:bc:46:c2:8a:1b:74: fb:8a:7b:93:9d:ff:bd:3d:63:00:26:28:ce:59:b6:0a:fd:34: 38:ff:75:eb:f8:b2:3c:ca:99:ad:ae:07:b9:ee:cf:00:27:f9: fd:a7:51:1d:ae:27:38:53:b0:de:95:6f:07:65:f0:4f:d5:e6: a6:df:38:00:be:ca:af:a1:91:c8:f6:41:01:3a:03:f3:27:b8: c4:65:ae:bd -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUFgyplRCt+f8bCq9J5TuoUc9nv/IwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjhFMTNCODAzMTgxMUZFNzhGQTczMTUxMDU2RkJGQUJF RTA3NjgxNDAeFw0yNTEwMTkxMjE3MDZaFw0yNTEwMjIyMDUyMDZaMDMxMTAvBgNV BAMTKDdDOTEwMDY4QTExQzYxRjE1MDk2QUI3NUQ1QkJDNDU4NjNBQzY0MjEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC2tu36cOSQpQDtRUNapd06BAfk P0W4wTiuI/IeCmHTfqNRxfsmuUZAWKrhphoRJuiHF1AgSWKwaFKejkTpgg9hJZxZ 62+T0ktMoNY6KAjU0ioqaaMDICda5t4lPGFfuONhP7aRQc3xYND0jhLkUS5AB64b HSH+LvVupsjNWvAGTDD719RJyr4S87n5/fYjjwoeIQV2LuS21YQNqTEZiR5dHrU9 7TpV1WQeKL28hLIHKUZu9bYxtnED9G+TigpeTHjtbLdABCtqCWqxGtgrvc/N/1do M7+R1Q+pX/Ru/w6DGw1znvnAUsI1fMXcD19nhXEkgsr28pmPVVrqolf01sJ7AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUfJEAaKEcYfFQlqt11bvEWGOsZCEwHwYDVR0j BBgwFoAUuOE7gDGBH+ePpzFRBW+/q+4HaBQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h ODdjMmI3ZS0yNjYzLTRkNjgtYjI1YS01ZmNmMDVlMDdiYjQvMC9COEUxM0I4MDMx ODExRkU3OEZBNzMxNTEwNTZGQkZBQkVFMDc2ODE0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQjhFMTNCODAzMTgxMUZFNzhGQTczMTUxMDU2RkJGQUJFRTA3 NjgxNC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYTg3YzJiN2UtMjY2My00ZDY4LWIy NWEtNWZjZjA1ZTA3YmI0LzAvQjhFMTNCODAzMTgxMUZFNzhGQTczMTUxMDU2RkJG QUJFRTA3NjgxNC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAre6kL/OBaYagwjkNWEM3mAqDjCRTl4QXdc oTEM7tiYjPEL9RC/6abRdAivlHfsCDMH/uSir+BIMcsP6F0CkD52DyKCMOHmOhwI l7t/LXOt3rP3cfcKU8nTs5vFl85K61tPWBpHnrKzkavL/ugtYK0KWNJZD6SiUNa+ K2EGWTktjniKlrbP5jzRV/UI8MOXF+wc3CiIZwaUFCbTzjFUbokvw5i0eP/1mQvt MgJB9LxGwoobdPuKe5Od/709YwAmKM5Ztgr9NDj/dev4sjzKma2uB7nuzwAn+f2n UR2uJzhTsN6Vbwdl8E/V5qbfOAC+yq+hkcj2QQE6A/MnuMRlrr0= -----END CERTIFICATE-----Generated at Mon Oct 20 17:01:25 2025 by rpki-client