$ rpki-client -vvf repo-rpki.idnic.net/repo/aef837b3-dfd2-42cc-9b79-74b6bafd4e2d/0/8711D05D82BAFB7BEAB275E079A72DDD554064EA.mft File: 8711D05D82BAFB7BEAB275E079A72DDD554064EA.mft (raw, json) Hash identifier: i4HrU/F07U6Fh70tT8mPuo3R/ghMhb+uF8wzOqvWqDo= Subject key identifier: 3C:96:69:BE:01:25:44:46:41:6D:C2:87:36:E1:47:15:C8:33:D3:1B Authority key identifier: 87:11:D0:5D:82:BA:FB:7B:EA:B2:75:E0:79:A7:2D:DD:55:40:64:EA Certificate issuer: /CN=8711D05D82BAFB7BEAB275E079A72DDD554064EA Certificate serial: 7894EEEF99AB10A0711BDE75B05A87AA80F95291 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8711D05D82BAFB7BEAB275E079A72DDD554064EA.cer Subject info access: rsync://repo-rpki.idnic.net/repo/aef837b3-dfd2-42cc-9b79-74b6bafd4e2d/0/8711D05D82BAFB7BEAB275E079A72DDD554064EA.mft Manifest number: 01E6 Signing time: Sun 19 Oct 2025 18:12:01 +0000 Manifest this update: Sun 19 Oct 2025 18:07:01 +0000 Manifest next update: Thu 23 Oct 2025 04:48:01 +0000 Files and hashes: 1: 3130332e31372e3137392e302f32342d3234203d3e20313530323236.roa (hash: iULKdZ+8YBgk+IOzMqKF0bAFFPZHjP7Zi+XVSi5s7yc=) 2: 8711D05D82BAFB7BEAB275E079A72DDD554064EA.crl (hash: XC8tkGvDQ9L2KaHZRqD4oniQRA593MDHHys5h1QVNwg=) 3: 3130332e31372e3137382e302f32342d3234203d3e20313530323236.roa (hash: 6sZc5cLjn8BGU3ndbP5aYFbkGJW/EMEDKLHgtlwJygA=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/aef837b3-dfd2-42cc-9b79-74b6bafd4e2d/0/8711D05D82BAFB7BEAB275E079A72DDD554064EA.crl rsync://repo-rpki.idnic.net/repo/aef837b3-dfd2-42cc-9b79-74b6bafd4e2d/0/8711D05D82BAFB7BEAB275E079A72DDD554064EA.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8711D05D82BAFB7BEAB275E079A72DDD554064EA.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 Oct 2025 04:48:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 78:94:ee:ef:99:ab:10:a0:71:1b:de:75:b0:5a:87:aa:80:f9:52:91 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8711D05D82BAFB7BEAB275E079A72DDD554064EA Validity Not Before: Oct 19 18:07:01 2025 GMT Not After : Oct 23 04:48:01 2025 GMT Subject: CN=3C9669BE01254446416DC28736E14715C833D31B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f0:e6:42:c1:af:b6:8c:4f:56:e2:61:f0:5f:0b: 8d:7a:69:a4:3c:a3:55:33:7a:5b:d5:5e:78:60:5b: 26:6a:f4:b9:7f:9a:5c:a2:b6:82:98:46:9d:9d:ed: dd:2e:c5:ca:33:cf:d5:50:7c:0f:32:69:4a:f9:6f: b7:d0:6e:cb:82:69:30:44:19:60:1f:58:d9:e2:ba: fd:e6:77:75:77:53:be:64:60:e6:61:4c:c9:8a:8a: bc:e2:c7:68:72:36:42:71:9a:f0:6f:9e:1e:9f:e6: 3e:20:6c:c4:a0:b1:8b:0b:bf:4f:ef:46:40:98:4a: 90:6f:09:90:3e:8b:2e:ea:e6:1d:e4:c5:1f:22:39: 84:74:ce:13:1a:8a:8b:94:ae:5f:56:f0:39:ca:be: 34:7d:80:44:db:e8:64:4b:ea:8d:7a:f7:7d:ef:6f: a3:ae:f6:e4:25:c6:ca:d3:03:c8:fc:af:7e:34:97: da:a7:41:50:d5:fc:b7:13:37:30:d0:76:57:89:19: f8:38:52:94:b9:ab:9b:3d:4f:23:a6:3a:c8:5c:69: fe:35:06:a3:a7:be:b3:e0:1c:7f:73:6d:89:43:8d: 6f:73:30:4a:25:8f:42:1c:76:27:38:e5:51:d5:87: a6:99:db:1e:8d:7c:11:9a:4d:b8:54:e2:4f:ad:22: 85:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:96:69:BE:01:25:44:46:41:6D:C2:87:36:E1:47:15:C8:33:D3:1B X509v3 Authority Key Identifier: keyid:87:11:D0:5D:82:BA:FB:7B:EA:B2:75:E0:79:A7:2D:DD:55:40:64:EA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/aef837b3-dfd2-42cc-9b79-74b6bafd4e2d/0/8711D05D82BAFB7BEAB275E079A72DDD554064EA.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8711D05D82BAFB7BEAB275E079A72DDD554064EA.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/aef837b3-dfd2-42cc-9b79-74b6bafd4e2d/0/8711D05D82BAFB7BEAB275E079A72DDD554064EA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption d3:36:60:ae:2d:0a:4b:20:c3:b6:32:f8:55:82:52:17:36:17: bf:06:40:04:f6:23:a1:ca:80:79:ac:ac:25:f3:07:58:b5:70: fe:1e:c5:73:c5:c0:0a:93:96:81:f6:b7:e6:38:0d:5f:01:55: dd:f5:0d:6e:33:38:4d:bf:8b:3b:95:ad:d4:46:c4:5f:fc:80: 9a:ea:2e:82:d9:40:cd:1f:ca:79:8f:29:61:52:aa:9e:b6:a7: b8:f2:f3:8f:b0:2b:a8:e7:d0:7e:e2:10:36:8a:05:d9:f5:f8: 1a:02:bc:7f:fd:14:4e:2d:a7:b9:41:5a:ac:07:3b:ee:1d:a7: 98:6e:ab:64:b1:60:3c:6e:a8:5b:e3:a6:1f:7b:fa:30:7d:ba: 56:db:6b:91:0b:8c:10:04:b9:8a:a3:da:9c:21:5e:8b:29:24: 63:c7:a8:c1:18:9c:b2:d2:22:62:11:50:ab:4d:4d:b7:4f:d9: 66:b7:4a:e9:b4:84:5b:70:43:6d:d0:b5:01:89:16:37:8f:2d: 7e:2e:87:e1:d1:cb:ba:e4:eb:82:93:e2:52:cd:8a:c6:c2:56: d3:21:c8:a3:07:c1:db:55:80:cb:5c:c7:98:d9:fc:69:ad:70: 61:45:06:84:b1:52:1f:4b:c8:dc:37:18:36:7a:b4:42:cf:61: 18:b5:c2:77 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUeJTu75mrEKBxG951sFqHqoD5UpEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODcxMUQwNUQ4MkJBRkI3QkVBQjI3NUUwNzlBNzJEREQ1 NTQwNjRFQTAeFw0yNTEwMTkxODA3MDFaFw0yNTEwMjMwNDQ4MDFaMDMxMTAvBgNV BAMTKDNDOTY2OUJFMDEyNTQ0NDY0MTZEQzI4NzM2RTE0NzE1QzgzM0QzMUIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDw5kLBr7aMT1biYfBfC416aaQ8 o1UzelvVXnhgWyZq9Ll/mlyitoKYRp2d7d0uxcozz9VQfA8yaUr5b7fQbsuCaTBE GWAfWNniuv3md3V3U75kYOZhTMmKirzix2hyNkJxmvBvnh6f5j4gbMSgsYsLv0/v RkCYSpBvCZA+iy7q5h3kxR8iOYR0zhMaiouUrl9W8DnKvjR9gETb6GRL6o16933v b6Ou9uQlxsrTA8j8r340l9qnQVDV/LcTNzDQdleJGfg4UpS5q5s9TyOmOshcaf41 BqOnvrPgHH9zbYlDjW9zMEolj0Icdic45VHVh6aZ2x6NfBGaTbhU4k+tIoW5AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUPJZpvgElREZBbcKHNuFHFcgz0xswHwYDVR0j BBgwFoAUhxHQXYK6+3vqsnXgeact3VVAZOowDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h ZWY4MzdiMy1kZmQyLTQyY2MtOWI3OS03NGI2YmFmZDRlMmQvMC84NzExRDA1RDgy QkFGQjdCRUFCMjc1RTA3OUE3MkRERDU1NDA2NEVBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvODcxMUQwNUQ4MkJBRkI3QkVBQjI3NUUwNzlBNzJEREQ1NTQw NjRFQS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYWVmODM3YjMtZGZkMi00MmNjLTli NzktNzRiNmJhZmQ0ZTJkLzAvODcxMUQwNUQ4MkJBRkI3QkVBQjI3NUUwNzlBNzJE REQ1NTQwNjRFQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBANM2YK4tCksgw7Yy+FWCUhc2F78GQAT2I6HK gHmsrCXzB1i1cP4exXPFwAqTloH2t+Y4DV8BVd31DW4zOE2/izuVrdRGxF/8gJrq LoLZQM0fynmPKWFSqp62p7jy84+wK6jn0H7iEDaKBdn1+BoCvH/9FE4tp7lBWqwH O+4dp5huq2SxYDxuqFvjph97+jB9ulbba5ELjBAEuYqj2pwhXospJGPHqMEYnLLS ImIRUKtNTbdP2Wa3Sum0hFtwQ23QtQGJFjePLX4uh+HRy7rk64KT4lLNisbCVtMh yKMHwdtVgMtcx5jZ/GmtcGFFBoSxUh9LyNw3GDZ6tELPYRi1wnc= -----END CERTIFICATE-----Generated at Mon Oct 20 09:50:29 2025 by rpki-client