$ rpki-client -vvf repo-rpki.idnic.net/repo/aba8cf65-d468-4309-9f30-9b9f26d9ce2d/0/8650DEF1B1C89D701C2BB99CA9079EEDBCCC046D.mft File: 8650DEF1B1C89D701C2BB99CA9079EEDBCCC046D.mft (raw, json) Hash identifier: 01U45l/FOYAqBWWZIfogVJuvCearQTLJZ7jEeOMimuI= Subject key identifier: EE:76:C0:4B:CD:8A:96:93:2D:C0:72:42:68:80:62:83:AD:47:11:60 Authority key identifier: 86:50:DE:F1:B1:C8:9D:70:1C:2B:B9:9C:A9:07:9E:ED:BC:CC:04:6D Certificate issuer: /CN=8650DEF1B1C89D701C2BB99CA9079EEDBCCC046D Certificate serial: 77DB162FFCB6B53458CC72FD4DC1E53B0E981424 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8650DEF1B1C89D701C2BB99CA9079EEDBCCC046D.cer Subject info access: rsync://repo-rpki.idnic.net/repo/aba8cf65-d468-4309-9f30-9b9f26d9ce2d/0/8650DEF1B1C89D701C2BB99CA9079EEDBCCC046D.mft Manifest number: 0139 Signing time: Mon 20 Oct 2025 04:51:04 +0000 Manifest this update: Mon 20 Oct 2025 04:46:04 +0000 Manifest next update: Thu 23 Oct 2025 13:26:04 +0000 Files and hashes: 1: 3137352e3131312e39382e302f32342d3234203d3e20313338313230.roa (hash: aia3nUPKEa96BWO7Pv3XlqoUwx8dHqiYGIZfz0yhZhg=) 2: 3137352e3131312e39392e302f32342d3234203d3e20313338313230.roa (hash: AghOU/pgzXbwtlWCSLhXHXuJqGUCoPtZzcPl6UwSVVA=) 3: 8650DEF1B1C89D701C2BB99CA9079EEDBCCC046D.crl (hash: bzIE36CYeoGHfZr/PeoSTI4gKq67gDfGHppc8jZ6+yc=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/aba8cf65-d468-4309-9f30-9b9f26d9ce2d/0/8650DEF1B1C89D701C2BB99CA9079EEDBCCC046D.crl rsync://repo-rpki.idnic.net/repo/aba8cf65-d468-4309-9f30-9b9f26d9ce2d/0/8650DEF1B1C89D701C2BB99CA9079EEDBCCC046D.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8650DEF1B1C89D701C2BB99CA9079EEDBCCC046D.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 Oct 2025 11:48:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 77:db:16:2f:fc:b6:b5:34:58:cc:72:fd:4d:c1:e5:3b:0e:98:14:24 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8650DEF1B1C89D701C2BB99CA9079EEDBCCC046D Validity Not Before: Oct 20 04:46:04 2025 GMT Not After : Oct 23 13:26:04 2025 GMT Subject: CN=EE76C04BCD8A96932DC0724268806283AD471160 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:94:72:47:2b:b1:42:43:87:7e:69:02:0e:65: 7c:46:7c:2a:ee:9d:57:7a:df:1b:e1:dc:62:a6:ab: e8:16:cd:b0:35:01:6c:37:1d:72:54:c7:25:bc:64: 0d:6e:d9:f7:d3:0c:91:e1:57:29:21:77:2b:fe:12: f4:cf:00:fe:03:64:66:dc:15:3b:b9:23:7f:df:ea: 84:74:9e:d5:84:f1:f9:28:0e:3a:49:7e:21:cc:6d: 45:37:35:99:d2:03:d5:80:57:85:73:3c:4c:48:ed: 6a:ed:4a:63:83:eb:46:6e:b3:9a:f8:ef:61:38:2a: 92:36:9d:f8:9a:96:f3:b5:dd:6f:00:c7:e4:32:62: 49:4a:89:65:9b:eb:5a:be:d0:b2:a2:53:d1:29:22: bb:86:e0:80:f3:e4:a3:b1:c3:e7:60:1a:48:cd:c9: 8b:84:6b:41:8a:75:8a:c9:fa:62:41:fb:f9:58:fa: 0b:6a:ae:14:4a:36:3c:49:09:31:55:2c:8f:64:3e: 97:25:87:90:ce:67:08:af:21:af:ba:ab:e1:66:b0: 77:2e:ab:12:af:54:d8:36:cd:cf:64:9d:c4:95:ba: 40:a4:e6:ed:2e:96:6a:02:1c:c3:1c:e0:ba:b1:88: cd:4e:09:df:d2:a4:b5:fd:65:c1:93:83:3d:7d:35: 0d:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EE:76:C0:4B:CD:8A:96:93:2D:C0:72:42:68:80:62:83:AD:47:11:60 X509v3 Authority Key Identifier: keyid:86:50:DE:F1:B1:C8:9D:70:1C:2B:B9:9C:A9:07:9E:ED:BC:CC:04:6D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/aba8cf65-d468-4309-9f30-9b9f26d9ce2d/0/8650DEF1B1C89D701C2BB99CA9079EEDBCCC046D.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8650DEF1B1C89D701C2BB99CA9079EEDBCCC046D.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/aba8cf65-d468-4309-9f30-9b9f26d9ce2d/0/8650DEF1B1C89D701C2BB99CA9079EEDBCCC046D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 69:50:fd:26:91:39:93:25:49:42:36:7c:61:67:e4:47:57:ad: 72:d5:0b:8a:19:d0:53:28:97:e6:88:36:e1:8c:49:c0:d2:31: eb:e9:77:95:5f:37:4c:10:d0:2a:e8:4b:20:ec:7b:80:fd:58: a9:f9:8f:03:6f:f4:ae:34:54:c9:37:1e:7e:ff:48:13:13:35: e7:af:18:cd:2e:45:46:fc:55:2c:5b:9e:df:c0:7e:df:56:33: 4d:a6:7b:81:81:76:c1:85:e3:86:fc:9f:ea:bc:c5:dc:b2:0c: 82:49:4c:55:5c:2c:cf:55:8c:bb:6e:47:44:59:4a:21:cf:46: cb:16:62:be:69:73:ab:04:0b:10:b2:46:32:cb:0b:82:ca:2a: 66:83:f6:82:98:c1:af:b8:11:fa:73:6c:c5:91:ef:0d:f8:6c: ee:94:d2:22:83:83:e2:68:b9:09:69:e7:ce:35:a2:43:1e:55: d6:39:7b:4e:1a:d0:20:e0:fe:4d:cd:c0:a4:7f:ee:51:21:29: 26:f9:f3:92:a0:ce:f0:c7:83:d7:a4:32:3e:31:28:a4:cf:46: 91:73:a1:07:f5:8e:49:fa:9b:e5:ff:ca:cc:3a:52:03:54:32: 02:fd:36:64:1b:e1:be:1d:f1:c6:eb:b0:e6:ee:af:d8:75:1e: 85:26:8b:77 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUd9sWL/y2tTRYzHL9TcHlOw6YFCQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODY1MERFRjFCMUM4OUQ3MDFDMkJCOTlDQTkwNzlFRURC Q0NDMDQ2RDAeFw0yNTEwMjAwNDQ2MDRaFw0yNTEwMjMxMzI2MDRaMDMxMTAvBgNV BAMTKEVFNzZDMDRCQ0Q4QTk2OTMyREMwNzI0MjY4ODA2MjgzQUQ0NzExNjAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDDlHJHK7FCQ4d+aQIOZXxGfCru nVd63xvh3GKmq+gWzbA1AWw3HXJUxyW8ZA1u2ffTDJHhVykhdyv+EvTPAP4DZGbc FTu5I3/f6oR0ntWE8fkoDjpJfiHMbUU3NZnSA9WAV4VzPExI7WrtSmOD60Zus5r4 72E4KpI2nfialvO13W8Ax+QyYklKiWWb61q+0LKiU9EpIruG4IDz5KOxw+dgGkjN yYuEa0GKdYrJ+mJB+/lY+gtqrhRKNjxJCTFVLI9kPpclh5DOZwivIa+6q+FmsHcu qxKvVNg2zc9kncSVukCk5u0ulmoCHMMc4LqxiM1OCd/SpLX9ZcGTgz19NQ0PAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU7nbAS82KlpMtwHJCaIBig61HEWAwHwYDVR0j BBgwFoAUhlDe8bHInXAcK7mcqQee7bzMBG0wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h YmE4Y2Y2NS1kNDY4LTQzMDktOWYzMC05YjlmMjZkOWNlMmQvMC84NjUwREVGMUIx Qzg5RDcwMUMyQkI5OUNBOTA3OUVFREJDQ0MwNDZELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvODY1MERFRjFCMUM4OUQ3MDFDMkJCOTlDQTkwNzlFRURCQ0ND MDQ2RC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYWJhOGNmNjUtZDQ2OC00MzA5LTlm MzAtOWI5ZjI2ZDljZTJkLzAvODY1MERFRjFCMUM4OUQ3MDFDMkJCOTlDQTkwNzlF RURCQ0NDMDQ2RC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGlQ/SaROZMlSUI2fGFn5EdXrXLVC4oZ0FMo l+aINuGMScDSMevpd5VfN0wQ0CroSyDse4D9WKn5jwNv9K40VMk3Hn7/SBMTNeev GM0uRUb8VSxbnt/Aft9WM02me4GBdsGF44b8n+q8xdyyDIJJTFVcLM9VjLtuR0RZ SiHPRssWYr5pc6sECxCyRjLLC4LKKmaD9oKYwa+4EfpzbMWR7w34bO6U0iKDg+Jo uQlp5841okMeVdY5e04a0CDg/k3NwKR/7lEhKSb585KgzvDHg9ekMj4xKKTPRpFz oQf1jkn6m+X/ysw6UgNUMgL9NmQb4b4d8cbrsObur9h1HoUmi3c= -----END CERTIFICATE-----Generated at Mon Oct 20 21:10:09 2025 by rpki-client