$ rpki-client -vvf repo-rpki.idnic.net/repo/b7b87f6d-29a7-4b4c-81c7-5b4cbdb2cb6a/0/8603B0F726A05AB356D10DB170BD8E27963AFE1A.mft File: 8603B0F726A05AB356D10DB170BD8E27963AFE1A.mft (raw, json) Hash identifier: r1nh59XjbO6JznqwNAVvRwyQgaP8k8jsWY+53bS9Bzw= Subject key identifier: 71:AB:AF:00:06:29:D4:2F:C7:C2:7E:97:4A:FB:AF:37:B9:41:77:82 Authority key identifier: 86:03:B0:F7:26:A0:5A:B3:56:D1:0D:B1:70:BD:8E:27:96:3A:FE:1A Certificate issuer: /CN=8603B0F726A05AB356D10DB170BD8E27963AFE1A Certificate serial: 323B50C70C9EE45A9ABD4844004A917D918A4E3B Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8603B0F726A05AB356D10DB170BD8E27963AFE1A.cer Subject info access: rsync://repo-rpki.idnic.net/repo/b7b87f6d-29a7-4b4c-81c7-5b4cbdb2cb6a/0/8603B0F726A05AB356D10DB170BD8E27963AFE1A.mft Manifest number: 0407 Signing time: Mon 20 Oct 2025 09:51:59 +0000 Manifest this update: Mon 20 Oct 2025 09:46:59 +0000 Manifest next update: Thu 23 Oct 2025 15:26:59 +0000 Files and hashes: 1: 3130332e3134382e31392e302f32342d3234203d3e20313339393738.roa (hash: bezCvX8XgFSa6OMSK27HUjxxwyFifSYbogKsMqbTNHQ=) 2: 323430353a633763303a3a2f33322d3332203d3e20313339393738.roa (hash: piwF7+ON2R793sJiaX+4aFfo5D7cOZdp7goWhivyjxE=) 3: 3130332e3134382e31382e302f32342d3234203d3e20313339393738.roa (hash: U5t1gz5Lu8bYdTDoG7TIErUjYPNGo4xQEu5agXugT3k=) 4: 3130332e3134382e31382e302f32332d3233203d3e20313339393738.roa (hash: 4K0py4cnYyh8vI10iLQo1yG8FCXY4pSX4oMXyg6m2pw=) 5: 8603B0F726A05AB356D10DB170BD8E27963AFE1A.crl (hash: bQjkrVMTXpmR/lHO9pD8OLWCUhlfXymlEoLFg/2T53Q=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/b7b87f6d-29a7-4b4c-81c7-5b4cbdb2cb6a/0/8603B0F726A05AB356D10DB170BD8E27963AFE1A.crl rsync://repo-rpki.idnic.net/repo/b7b87f6d-29a7-4b4c-81c7-5b4cbdb2cb6a/0/8603B0F726A05AB356D10DB170BD8E27963AFE1A.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8603B0F726A05AB356D10DB170BD8E27963AFE1A.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 Oct 2025 11:48:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 32:3b:50:c7:0c:9e:e4:5a:9a:bd:48:44:00:4a:91:7d:91:8a:4e:3b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8603B0F726A05AB356D10DB170BD8E27963AFE1A Validity Not Before: Oct 20 09:46:59 2025 GMT Not After : Oct 23 15:26:59 2025 GMT Subject: CN=71ABAF000629D42FC7C27E974AFBAF37B9417782 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:67:e0:6a:3b:fa:68:3a:38:92:89:a7:6f:59: c4:7c:46:81:67:e8:93:f5:04:47:c3:ec:a3:c6:42: cb:3b:d0:dc:b4:9d:6a:29:29:4f:80:65:3a:8d:fc: 30:00:96:44:be:03:96:ed:09:ad:84:4c:05:20:0b: 4f:6e:a1:2e:1b:b9:7f:8f:a4:5f:4f:bf:81:18:2b: a8:e8:66:b7:4b:6b:3e:2e:37:e0:82:62:81:4b:ed: f4:ed:96:6f:75:4a:91:e9:95:2e:a8:9f:d8:e1:a9: c8:c6:ec:16:49:da:36:41:1d:bb:d3:3a:6f:47:41: a0:37:a6:bf:dd:97:1e:a1:b6:48:41:a6:77:9d:f5: 6f:0b:19:4e:04:68:c4:2f:4c:6e:2a:dc:84:de:29: 7f:ba:aa:22:fa:c6:0b:70:d7:6a:1b:ed:bb:cc:5c: cb:f8:7d:e1:c5:40:7a:ff:2b:f4:b1:b5:84:7d:02: a6:e6:49:2b:9a:86:34:b7:21:7c:bb:27:c8:1f:b8: 19:85:57:a7:0c:b3:ac:9b:09:9d:74:d9:9e:19:e3: 46:6d:9e:e2:f2:78:18:84:d2:58:bd:e4:70:39:28: 87:fa:57:4c:4f:45:b2:3b:ea:4c:2c:01:3b:f8:71: 3a:3b:21:8a:71:c2:7b:a4:15:a4:fa:1d:9d:72:34: 3d:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:AB:AF:00:06:29:D4:2F:C7:C2:7E:97:4A:FB:AF:37:B9:41:77:82 X509v3 Authority Key Identifier: keyid:86:03:B0:F7:26:A0:5A:B3:56:D1:0D:B1:70:BD:8E:27:96:3A:FE:1A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/b7b87f6d-29a7-4b4c-81c7-5b4cbdb2cb6a/0/8603B0F726A05AB356D10DB170BD8E27963AFE1A.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8603B0F726A05AB356D10DB170BD8E27963AFE1A.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/b7b87f6d-29a7-4b4c-81c7-5b4cbdb2cb6a/0/8603B0F726A05AB356D10DB170BD8E27963AFE1A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 42:1d:4f:85:78:74:00:ec:fe:12:7d:da:34:4f:12:f9:29:af: 12:bb:31:09:84:aa:64:7e:22:32:80:51:40:c7:7e:0a:23:52: e1:7b:d8:9e:4c:3b:a2:0d:c9:df:44:5f:ae:de:d8:4c:7c:2e: 6d:e7:42:76:e8:db:d2:a4:a0:ec:22:e7:52:61:9c:77:5e:d6: 84:dd:ce:15:5d:fb:98:c5:87:b4:55:1f:13:4f:b9:08:d0:ac: 56:2b:87:78:6f:18:e5:dd:cc:6e:b3:80:10:bc:87:77:e9:b6: bf:04:5a:83:5e:93:15:97:75:c8:27:c5:39:01:90:c9:20:08: d6:bb:e3:66:2c:53:66:9c:3c:43:fd:f6:af:48:83:4a:e7:51: 5a:71:45:71:b9:b2:3a:a8:ac:b7:4e:ac:2b:14:e5:24:c9:b7: 51:cc:cd:e4:6e:a2:f4:78:01:3b:ab:de:27:96:0f:e5:16:d3: 67:51:04:c0:ab:7d:16:8a:73:38:f7:eb:ac:d3:f2:a7:b6:a4: b5:c9:ea:08:b7:6f:47:01:b1:76:ba:24:15:fc:a5:97:5d:d5: 20:af:2c:40:68:65:93:e5:d2:b8:4b:01:4f:5f:05:aa:89:39: 12:71:09:b0:97:dd:94:c1:87:94:e9:fb:72:b7:75:72:5a:48: e8:eb:9f:57 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUMjtQxwye5FqavUhEAEqRfZGKTjswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODYwM0IwRjcyNkEwNUFCMzU2RDEwREIxNzBCRDhFMjc5 NjNBRkUxQTAeFw0yNTEwMjAwOTQ2NTlaFw0yNTEwMjMxNTI2NTlaMDMxMTAvBgNV BAMTKDcxQUJBRjAwMDYyOUQ0MkZDN0MyN0U5NzRBRkJBRjM3Qjk0MTc3ODIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC7Z+BqO/poOjiSiadvWcR8RoFn 6JP1BEfD7KPGQss70Ny0nWopKU+AZTqN/DAAlkS+A5btCa2ETAUgC09uoS4buX+P pF9Pv4EYK6joZrdLaz4uN+CCYoFL7fTtlm91SpHplS6on9jhqcjG7BZJ2jZBHbvT Om9HQaA3pr/dlx6htkhBpned9W8LGU4EaMQvTG4q3ITeKX+6qiL6xgtw12ob7bvM XMv4feHFQHr/K/SxtYR9AqbmSSuahjS3IXy7J8gfuBmFV6cMs6ybCZ102Z4Z40Zt nuLyeBiE0li95HA5KIf6V0xPRbI76kwsATv4cTo7IYpxwnukFaT6HZ1yND3lAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUcauvAAYp1C/Hwn6XSvuvN7lBd4IwHwYDVR0j BBgwFoAUhgOw9yagWrNW0Q2xcL2OJ5Y6/howDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i N2I4N2Y2ZC0yOWE3LTRiNGMtODFjNy01YjRjYmRiMmNiNmEvMC84NjAzQjBGNzI2 QTA1QUIzNTZEMTBEQjE3MEJEOEUyNzk2M0FGRTFBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvODYwM0IwRjcyNkEwNUFCMzU2RDEwREIxNzBCRDhFMjc5NjNB RkUxQS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYjdiODdmNmQtMjlhNy00YjRjLTgx YzctNWI0Y2JkYjJjYjZhLzAvODYwM0IwRjcyNkEwNUFCMzU2RDEwREIxNzBCRDhF Mjc5NjNBRkUxQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEIdT4V4dADs/hJ92jRPEvkprxK7MQmEqmR+ IjKAUUDHfgojUuF72J5MO6INyd9EX67e2Ex8Lm3nQnbo29KkoOwi51JhnHde1oTd zhVd+5jFh7RVHxNPuQjQrFYrh3hvGOXdzG6zgBC8h3fptr8EWoNekxWXdcgnxTkB kMkgCNa742YsU2acPEP99q9Ig0rnUVpxRXG5sjqorLdOrCsU5STJt1HMzeRuovR4 ATur3ieWD+UW02dRBMCrfRaKczj366zT8qe2pLXJ6gi3b0cBsXa6JBX8pZdd1SCv LEBoZZPl0rhLAU9fBaqJORJxCbCX3ZTBh5Tp+3K3dXJaSOjrn1c= -----END CERTIFICATE-----Generated at Mon Oct 20 20:54:18 2025 by rpki-client