$ rpki-client -vvf repo-rpki.idnic.net/repo/b94c1e95-a738-4e47-8e5c-7af681b36b00/0/8DBECF314BD3C829923A3A97BFC62113A61F8EE1.mft File: 8DBECF314BD3C829923A3A97BFC62113A61F8EE1.mft (raw, json) Hash identifier: VMm1Ya13VLQf72YlPPH/6X+FdbktEtPMD18q+guJfus= Subject key identifier: 3E:99:D3:7C:1D:4E:C8:45:6D:9C:7F:83:DB:05:06:F4:EB:FF:77:4A Authority key identifier: 8D:BE:CF:31:4B:D3:C8:29:92:3A:3A:97:BF:C6:21:13:A6:1F:8E:E1 Certificate issuer: /CN=8DBECF314BD3C829923A3A97BFC62113A61F8EE1 Certificate serial: 661CEFF0203AD1EE8C09DC0A7F4F819AFD4C4C6D Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8DBECF314BD3C829923A3A97BFC62113A61F8EE1.cer Subject info access: rsync://repo-rpki.idnic.net/repo/b94c1e95-a738-4e47-8e5c-7af681b36b00/0/8DBECF314BD3C829923A3A97BFC62113A61F8EE1.mft Manifest number: 0213 Signing time: Sat 18 Oct 2025 19:01:11 +0000 Manifest this update: Sat 18 Oct 2025 18:56:11 +0000 Manifest next update: Wed 22 Oct 2025 04:57:11 +0000 Files and hashes: 1: 3130332e3138362e39302e302f32332d3233203d3e20313439373037.roa (hash: IxE4f1xQzeKQZjsPZmdFbJyZKv94xhwmFh4/4Aw/W0I=) 2: 8DBECF314BD3C829923A3A97BFC62113A61F8EE1.crl (hash: OWPuKEAiwkNMYay1QZIb9dKgPXQWlEEjHFSRDKqJbZM=) 3: 3130332e3138362e39302e302f32342d3234203d3e20313439373037.roa (hash: 656gLN35OIXcG6Vik35XhI6XoKD7dIobeeOabAVD0UQ=) 4: 3130332e3138362e39312e302f32342d3234203d3e20313439373037.roa (hash: v7WXEnDaWLgLHCCs0/IjJD0cW6T6d8CeSIJNddKA634=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/b94c1e95-a738-4e47-8e5c-7af681b36b00/0/8DBECF314BD3C829923A3A97BFC62113A61F8EE1.crl rsync://repo-rpki.idnic.net/repo/b94c1e95-a738-4e47-8e5c-7af681b36b00/0/8DBECF314BD3C829923A3A97BFC62113A61F8EE1.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8DBECF314BD3C829923A3A97BFC62113A61F8EE1.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 Oct 2025 04:57:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 66:1c:ef:f0:20:3a:d1:ee:8c:09:dc:0a:7f:4f:81:9a:fd:4c:4c:6d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8DBECF314BD3C829923A3A97BFC62113A61F8EE1 Validity Not Before: Oct 18 18:56:11 2025 GMT Not After : Oct 22 04:57:11 2025 GMT Subject: CN=3E99D37C1D4EC8456D9C7F83DB0506F4EBFF774A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:d4:43:32:b2:ff:88:1d:d0:8e:b6:9d:a9:58: a1:8c:a4:29:6f:51:cd:dc:21:39:05:86:7d:68:d1: 73:e1:47:36:c1:6d:a1:72:e1:65:00:8f:82:78:13: 88:b7:7a:e4:38:a8:64:16:b0:07:fe:f7:b9:ff:af: 23:16:bd:51:60:70:07:6f:71:36:c0:bc:3c:f6:0c: ef:b0:07:5d:4f:7c:16:f8:a2:85:bf:b9:31:3c:e7: 80:e1:0d:bb:7f:85:2e:31:53:15:3e:67:42:38:cd: ea:74:ee:43:56:80:4c:59:c3:2d:1d:87:d8:db:20: cb:57:20:93:23:85:15:fa:70:bf:c7:8d:2f:1a:09: 13:7e:d1:5a:d2:ba:45:23:4a:25:c1:7f:48:c5:4b: 54:07:96:8e:e6:e0:bd:28:40:8e:d8:73:c8:61:97: 9a:6f:85:e1:68:c3:99:d8:bd:15:d1:f9:36:91:22: df:4d:2a:29:86:a7:07:8e:06:88:95:53:e0:69:0b: 7d:92:1c:58:56:e8:af:05:29:5e:c8:e0:3e:21:f4: 49:18:4c:00:0b:a8:f7:a8:72:9b:87:dd:e2:04:57: 26:71:b2:00:01:93:aa:12:cf:75:c6:5a:87:cc:57: 43:e0:4d:8d:bd:d9:f0:27:fa:d3:04:30:57:ed:91: 12:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3E:99:D3:7C:1D:4E:C8:45:6D:9C:7F:83:DB:05:06:F4:EB:FF:77:4A X509v3 Authority Key Identifier: keyid:8D:BE:CF:31:4B:D3:C8:29:92:3A:3A:97:BF:C6:21:13:A6:1F:8E:E1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/b94c1e95-a738-4e47-8e5c-7af681b36b00/0/8DBECF314BD3C829923A3A97BFC62113A61F8EE1.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8DBECF314BD3C829923A3A97BFC62113A61F8EE1.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/b94c1e95-a738-4e47-8e5c-7af681b36b00/0/8DBECF314BD3C829923A3A97BFC62113A61F8EE1.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 08:c0:7b:04:6c:f5:f4:a5:56:e1:b2:00:2c:7d:d4:45:b3:f8: 9e:91:57:d7:45:7f:6f:cf:ce:bc:17:78:5d:d6:ac:6e:c9:40: 4f:25:de:2a:91:f7:ad:92:83:0a:ad:83:f4:3c:19:2c:ff:98: 56:c0:e2:26:f9:72:03:66:42:d7:84:4e:02:f3:65:3b:24:b1: ac:30:23:fd:f4:7d:87:43:e1:2b:a6:c8:d2:34:92:69:b9:a3: c3:17:57:6e:2f:9f:db:65:0f:ac:d1:a2:a5:6f:f9:bc:76:63: 52:43:2d:12:16:bc:82:d3:94:51:8e:b2:f4:8b:5f:ef:f6:6c: 35:5e:d6:6c:4b:c8:0e:2a:fc:d8:df:9c:ae:f8:12:7d:5a:08: 8e:0c:76:7d:38:c6:73:6a:4c:3e:d2:59:aa:95:d6:06:49:ed: c5:63:57:fc:8c:84:9e:2f:93:47:d2:32:82:1d:ff:a8:69:60: 2f:f6:54:51:ee:25:b5:5e:74:d1:fa:db:fa:5d:94:9d:ca:86: bd:63:b7:56:3d:a8:57:9b:6b:0c:8d:21:dc:47:fb:77:74:57: 71:eb:e0:70:b1:ac:e8:3c:24:fe:1f:56:3d:8a:7d:d0:65:a2: 1b:aa:b1:b6:5c:6e:63:4b:df:a1:67:53:1f:43:82:27:a5:b7: 27:5d:9c:47 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUZhzv8CA60e6MCdwKf0+Bmv1MTG0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOERCRUNGMzE0QkQzQzgyOTkyM0EzQTk3QkZDNjIxMTNB NjFGOEVFMTAeFw0yNTEwMTgxODU2MTFaFw0yNTEwMjIwNDU3MTFaMDMxMTAvBgNV BAMTKDNFOTlEMzdDMUQ0RUM4NDU2RDlDN0Y4M0RCMDUwNkY0RUJGRjc3NEEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCp1EMysv+IHdCOtp2pWKGMpClv Uc3cITkFhn1o0XPhRzbBbaFy4WUAj4J4E4i3euQ4qGQWsAf+97n/ryMWvVFgcAdv cTbAvDz2DO+wB11PfBb4ooW/uTE854DhDbt/hS4xUxU+Z0I4zep07kNWgExZwy0d h9jbIMtXIJMjhRX6cL/HjS8aCRN+0VrSukUjSiXBf0jFS1QHlo7m4L0oQI7Yc8hh l5pvheFow5nYvRXR+TaRIt9NKimGpweOBoiVU+BpC32SHFhW6K8FKV7I4D4h9EkY TAALqPeocpuH3eIEVyZxsgABk6oSz3XGWofMV0PgTY292fAn+tMEMFftkRIfAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUPpnTfB1OyEVtnH+D2wUG9Ov/d0owHwYDVR0j BBgwFoAUjb7PMUvTyCmSOjqXv8YhE6YfjuEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i OTRjMWU5NS1hNzM4LTRlNDctOGU1Yy03YWY2ODFiMzZiMDAvMC84REJFQ0YzMTRC RDNDODI5OTIzQTNBOTdCRkM2MjExM0E2MUY4RUUxLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOERCRUNGMzE0QkQzQzgyOTkyM0EzQTk3QkZDNjIxMTNBNjFG OEVFMS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYjk0YzFlOTUtYTczOC00ZTQ3LThl NWMtN2FmNjgxYjM2YjAwLzAvOERCRUNGMzE0QkQzQzgyOTkyM0EzQTk3QkZDNjIx MTNBNjFGOEVFMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAjAewRs9fSlVuGyACx91EWz+J6RV9dFf2/P zrwXeF3WrG7JQE8l3iqR962Sgwqtg/Q8GSz/mFbA4ib5cgNmQteETgLzZTsksaww I/30fYdD4SumyNI0kmm5o8MXV24vn9tlD6zRoqVv+bx2Y1JDLRIWvILTlFGOsvSL X+/2bDVe1mxLyA4q/NjfnK74En1aCI4Mdn04xnNqTD7SWaqV1gZJ7cVjV/yMhJ4v k0fSMoId/6hpYC/2VFHuJbVedNH62/pdlJ3Khr1jt1Y9qFebawyNIdxH+3d0V3Hr 4HCxrOg8JP4fVj2KfdBlohuqsbZcbmNL36FnUx9DgieltyddnEc= -----END CERTIFICATE-----Generated at Mon Oct 20 20:36:02 2025 by rpki-client