$ rpki-client -vvf repo-rpki.idnic.net/repo/aa914ada-a9aa-4d7f-9e47-594bcb7a70ab/0/8E3F7441403B9CDF2FD603CCBAF13D1671202D2D.mft File: 8E3F7441403B9CDF2FD603CCBAF13D1671202D2D.mft (raw, json) Hash identifier: 3AZjOKLAOc44YqnSLaCer4we+DT+nZxE92Z7JJeieSo= Subject key identifier: 93:54:59:58:7C:70:1A:B0:19:B8:8B:70:4D:79:AD:34:70:B5:C3:C9 Authority key identifier: 8E:3F:74:41:40:3B:9C:DF:2F:D6:03:CC:BA:F1:3D:16:71:20:2D:2D Certificate issuer: /CN=8E3F7441403B9CDF2FD603CCBAF13D1671202D2D Certificate serial: 747F6689F78AE9B679D5205F64DFF37C7D59412E Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8E3F7441403B9CDF2FD603CCBAF13D1671202D2D.cer Subject info access: rsync://repo-rpki.idnic.net/repo/aa914ada-a9aa-4d7f-9e47-594bcb7a70ab/0/8E3F7441403B9CDF2FD603CCBAF13D1671202D2D.mft Manifest number: 0323 Signing time: Sat 18 Oct 2025 20:11:49 +0000 Manifest this update: Sat 18 Oct 2025 20:06:49 +0000 Manifest next update: Wed 22 Oct 2025 06:15:49 +0000 Files and hashes: 1: 3130332e3134342e3133352e302f32342d3234203d3e20313339343237.roa (hash: zWJYN2XG8P0RnY9CSUVBnEgmuVsEalWKm5k5yR0nlxQ=) 2: 3130332e3134342e3133342e302f32342d3234203d3e20313339343237.roa (hash: i2RCXQ2h/tijX2X+SFP27I82J2d7eFOatLRW4qkSUTs=) 3: 8E3F7441403B9CDF2FD603CCBAF13D1671202D2D.crl (hash: UudHC0n2X3KgCB9KyyNcrOrvIO+242nX+45v1URJRxk=) 4: 3130332e3134342e3133342e302f32332d3233203d3e20313339343237.roa (hash: CwI8o18dMmmdKMsJY38paR/SR1tzAkJd4x6YF0hfFxY=) 5: 323430353a366463303a3a2f33322d3332203d3e20313339343237.roa (hash: wF6dopi/8yFT5FMMEEtbalVZ2HlgmQH2NzcCqjkPo/A=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/aa914ada-a9aa-4d7f-9e47-594bcb7a70ab/0/8E3F7441403B9CDF2FD603CCBAF13D1671202D2D.crl rsync://repo-rpki.idnic.net/repo/aa914ada-a9aa-4d7f-9e47-594bcb7a70ab/0/8E3F7441403B9CDF2FD603CCBAF13D1671202D2D.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8E3F7441403B9CDF2FD603CCBAF13D1671202D2D.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 Oct 2025 06:15:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 74:7f:66:89:f7:8a:e9:b6:79:d5:20:5f:64:df:f3:7c:7d:59:41:2e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8E3F7441403B9CDF2FD603CCBAF13D1671202D2D Validity Not Before: Oct 18 20:06:49 2025 GMT Not After : Oct 22 06:15:49 2025 GMT Subject: CN=935459587C701AB019B88B704D79AD3470B5C3C9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:18:52:46:92:a2:e9:31:59:14:ee:c3:29:bd: a8:8c:70:a1:77:ed:81:1b:cd:3d:73:2d:8c:0f:35: 25:11:4f:4f:90:26:07:57:18:eb:94:29:7c:ae:c5: 9a:18:43:15:8c:3f:23:92:4a:eb:af:28:6f:a2:fa: 2f:04:4f:39:a5:47:c8:f4:1d:18:41:87:40:ee:a6: a3:f2:9b:16:3b:00:30:ee:e9:83:c8:ab:d5:df:21: 66:c1:4e:12:85:4e:08:3e:b9:cf:4c:8b:b3:a4:d9: ef:59:45:c4:5d:27:cc:dd:37:9d:e6:33:54:6b:c6: 72:d0:5d:f0:1b:2f:9e:d2:b4:d8:95:2e:28:f8:ab: 02:70:81:a0:ab:b6:88:3e:20:e9:bf:2f:b9:9e:7d: 6f:f7:80:de:f6:a7:87:d1:9b:da:fe:7f:78:4b:36: 69:0e:81:c6:66:1f:7a:27:5e:a4:29:5c:a1:fb:39: 9a:60:b9:5f:f6:5d:83:96:bd:c0:03:bc:45:bb:9e: 24:4e:09:a5:c1:d5:ee:fb:ec:58:00:24:27:2b:91: 91:98:00:f2:4e:8f:e7:ad:7e:44:12:af:38:68:19: 0c:0f:31:8c:6f:8b:4f:83:66:1e:70:da:d8:db:6a: e9:26:38:76:b9:d5:65:46:28:38:c5:97:b4:b8:fa: 09:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 93:54:59:58:7C:70:1A:B0:19:B8:8B:70:4D:79:AD:34:70:B5:C3:C9 X509v3 Authority Key Identifier: keyid:8E:3F:74:41:40:3B:9C:DF:2F:D6:03:CC:BA:F1:3D:16:71:20:2D:2D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/aa914ada-a9aa-4d7f-9e47-594bcb7a70ab/0/8E3F7441403B9CDF2FD603CCBAF13D1671202D2D.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8E3F7441403B9CDF2FD603CCBAF13D1671202D2D.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/aa914ada-a9aa-4d7f-9e47-594bcb7a70ab/0/8E3F7441403B9CDF2FD603CCBAF13D1671202D2D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 22:67:71:35:88:5b:30:51:ac:5a:70:82:28:87:8b:a6:7b:fd: 5d:64:ce:f7:25:6e:64:a6:e1:c4:53:05:e3:bd:75:1b:df:9f: e9:ff:a1:66:28:57:b3:d8:e7:07:cb:e2:9d:d5:ac:3e:ca:20: 52:0e:da:59:e5:a2:92:a9:84:ab:e8:22:bb:4d:aa:0b:13:dc: c1:69:c2:f0:49:3a:43:18:f5:04:de:13:3e:c3:b9:d1:7c:51: 77:f9:9b:4e:b2:ef:28:8b:ff:9e:1d:d9:9b:88:5e:59:75:54: a3:9a:e7:30:aa:e3:42:88:f4:45:80:5d:bc:fc:92:79:17:89: 50:68:0d:a5:8d:8e:ae:54:b6:41:08:a1:c5:4f:61:7f:8d:eb: af:bc:ef:2f:13:95:ec:3b:2e:1e:fd:68:d4:7a:0a:6f:b6:ed: e8:a8:99:4b:94:8a:98:ed:eb:ce:5e:dd:ba:cd:06:52:80:e1: 8f:61:3d:92:89:e4:d1:88:29:17:fb:e2:8b:56:e2:3e:df:68: 66:91:4c:d3:88:78:e5:9d:65:27:8c:6b:8f:d4:f7:55:e9:07: cb:48:45:b8:96:5a:4c:47:82:0c:58:26:e8:6a:bd:28:60:ed: a6:98:83:dc:d9:29:1c:51:0e:65:d1:4c:6e:33:0d:d5:80:77: 7c:fa:27:21 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUdH9mifeK6bZ51SBfZN/zfH1ZQS4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEUzRjc0NDE0MDNCOUNERjJGRDYwM0NDQkFGMTNEMTY3 MTIwMkQyRDAeFw0yNTEwMTgyMDA2NDlaFw0yNTEwMjIwNjE1NDlaMDMxMTAvBgNV BAMTKDkzNTQ1OTU4N0M3MDFBQjAxOUI4OEI3MDRENzlBRDM0NzBCNUMzQzkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDHGFJGkqLpMVkU7sMpvaiMcKF3 7YEbzT1zLYwPNSURT0+QJgdXGOuUKXyuxZoYQxWMPyOSSuuvKG+i+i8ETzmlR8j0 HRhBh0DupqPymxY7ADDu6YPIq9XfIWbBThKFTgg+uc9Mi7Ok2e9ZRcRdJ8zdN53m M1RrxnLQXfAbL57StNiVLij4qwJwgaCrtog+IOm/L7mefW/3gN72p4fRm9r+f3hL NmkOgcZmH3onXqQpXKH7OZpguV/2XYOWvcADvEW7niROCaXB1e777FgAJCcrkZGY APJOj+etfkQSrzhoGQwPMYxvi0+DZh5w2tjbaukmOHa51WVGKDjFl7S4+gnRAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUk1RZWHxwGrAZuItwTXmtNHC1w8kwHwYDVR0j BBgwFoAUjj90QUA7nN8v1gPMuvE9FnEgLS0wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h YTkxNGFkYS1hOWFhLTRkN2YtOWU0Ny01OTRiY2I3YTcwYWIvMC84RTNGNzQ0MTQw M0I5Q0RGMkZENjAzQ0NCQUYxM0QxNjcxMjAyRDJELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOEUzRjc0NDE0MDNCOUNERjJGRDYwM0NDQkFGMTNEMTY3MTIw MkQyRC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYWE5MTRhZGEtYTlhYS00ZDdmLTll NDctNTk0YmNiN2E3MGFiLzAvOEUzRjc0NDE0MDNCOUNERjJGRDYwM0NDQkFGMTNE MTY3MTIwMkQyRC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACJncTWIWzBRrFpwgiiHi6Z7/V1kzvclbmSm 4cRTBeO9dRvfn+n/oWYoV7PY5wfL4p3VrD7KIFIO2lnlopKphKvoIrtNqgsT3MFp wvBJOkMY9QTeEz7DudF8UXf5m06y7yiL/54d2ZuIXll1VKOa5zCq40KI9EWAXbz8 knkXiVBoDaWNjq5UtkEIocVPYX+N66+87y8Tlew7Lh79aNR6Cm+27eiomUuUipjt 685e3brNBlKA4Y9hPZKJ5NGIKRf74otW4j7faGaRTNOIeOWdZSeMa4/U91XpB8tI RbiWWkxHggxYJuhqvShg7aaYg9zZKRxRDmXRTG4zDdWAd3z6JyE= -----END CERTIFICATE-----Generated at Mon Oct 20 12:07:54 2025 by rpki-client