$ rpki-client -vvf repo-rpki.idnic.net/repo/bfdb18ef-659f-4b1e-a2e0-b58af6b1271f/0/8D1D84B8A56224B4E290FBDA5C790CD1F03F11A7.mft File: 8D1D84B8A56224B4E290FBDA5C790CD1F03F11A7.mft (raw, json) Hash identifier: PUGslXbiUVHSL1rWMeDZbbcT44puS93+GVgb97BGzx0= Subject key identifier: C0:A4:F0:F6:74:41:F6:BB:6B:E6:D6:E9:37:53:D0:01:F4:CA:0B:75 Authority key identifier: 8D:1D:84:B8:A5:62:24:B4:E2:90:FB:DA:5C:79:0C:D1:F0:3F:11:A7 Certificate issuer: /CN=8D1D84B8A56224B4E290FBDA5C790CD1F03F11A7 Certificate serial: 2E624BA1C4F3718410B9C9A174ACEEC8AF8E4BAA Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8D1D84B8A56224B4E290FBDA5C790CD1F03F11A7.cer Subject info access: rsync://repo-rpki.idnic.net/repo/bfdb18ef-659f-4b1e-a2e0-b58af6b1271f/0/8D1D84B8A56224B4E290FBDA5C790CD1F03F11A7.mft Manifest number: 0217 Signing time: Sat 18 Oct 2025 20:41:49 +0000 Manifest this update: Sat 18 Oct 2025 20:36:49 +0000 Manifest next update: Tue 21 Oct 2025 23:12:49 +0000 Files and hashes: 1: 8D1D84B8A56224B4E290FBDA5C790CD1F03F11A7.crl (hash: HCfaZLGHAc55pNywyThKvVo1aaw6gxQa6KJmNzKPfxA=) 2: 3130332e3136302e3133382e302f32332d3234203d3e203338333230.roa (hash: 1fOWEp4TrzIX6lJGhVie2BUvo2f5cu7g23YUAHBTka8=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/bfdb18ef-659f-4b1e-a2e0-b58af6b1271f/0/8D1D84B8A56224B4E290FBDA5C790CD1F03F11A7.crl rsync://repo-rpki.idnic.net/repo/bfdb18ef-659f-4b1e-a2e0-b58af6b1271f/0/8D1D84B8A56224B4E290FBDA5C790CD1F03F11A7.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8D1D84B8A56224B4E290FBDA5C790CD1F03F11A7.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 21 Oct 2025 23:12:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2e:62:4b:a1:c4:f3:71:84:10:b9:c9:a1:74:ac:ee:c8:af:8e:4b:aa Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8D1D84B8A56224B4E290FBDA5C790CD1F03F11A7 Validity Not Before: Oct 18 20:36:49 2025 GMT Not After : Oct 21 23:12:49 2025 GMT Subject: CN=C0A4F0F67441F6BB6BE6D6E93753D001F4CA0B75 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:ce:4b:35:03:32:52:0c:4f:41:50:de:4f:8a: ae:1c:b9:6e:76:d8:f5:a5:29:b4:ef:ab:c0:e6:c9: 77:77:68:94:e4:a6:4d:85:be:1b:63:f0:1a:ee:8b: 5f:9b:06:1f:a3:bc:a9:77:44:3c:f6:39:ba:4b:1a: b6:b8:28:82:01:13:0b:1a:b5:6e:ad:e6:e8:55:32: bc:c3:c9:44:b2:68:67:cd:aa:ef:b4:3b:b3:2e:95: f3:6c:6c:2e:bf:de:a2:27:2a:0e:49:4d:42:11:9c: 55:b4:ee:84:51:98:0c:59:04:33:a5:f4:bf:16:c1: 18:cc:63:e2:1e:9d:fb:f1:31:68:23:7e:b2:08:d3: cd:9e:c4:42:14:ff:a2:53:fd:1d:f0:05:b3:4b:d3: 61:30:88:01:28:ab:a5:e7:74:ab:5c:df:96:30:d2: bb:73:31:be:fd:b1:0c:22:81:8e:f4:b8:7f:78:69: 75:d9:ab:f6:f5:a0:cc:a5:87:1f:cc:28:6e:3c:9f: 6d:bf:d6:98:0b:cb:a6:7e:b8:63:20:cb:55:b1:dc: f5:5f:6b:10:b8:05:b4:20:2c:28:0e:d4:ff:c7:f5: 49:41:d0:84:05:1c:c3:40:f6:ff:fd:50:3c:bc:02: 7a:b0:b3:12:76:ba:58:30:4b:98:c2:67:e4:20:95: ca:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C0:A4:F0:F6:74:41:F6:BB:6B:E6:D6:E9:37:53:D0:01:F4:CA:0B:75 X509v3 Authority Key Identifier: keyid:8D:1D:84:B8:A5:62:24:B4:E2:90:FB:DA:5C:79:0C:D1:F0:3F:11:A7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/bfdb18ef-659f-4b1e-a2e0-b58af6b1271f/0/8D1D84B8A56224B4E290FBDA5C790CD1F03F11A7.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8D1D84B8A56224B4E290FBDA5C790CD1F03F11A7.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/bfdb18ef-659f-4b1e-a2e0-b58af6b1271f/0/8D1D84B8A56224B4E290FBDA5C790CD1F03F11A7.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ba:80:2d:c7:d8:86:f1:d4:1c:b2:9e:1d:c2:a9:cd:ca:71:af: a3:ba:63:3e:d2:e8:4d:c2:89:c2:27:97:8b:4e:d3:af:11:10: 79:3d:4f:80:34:97:24:30:d3:b0:fe:48:a4:dc:12:ec:9a:b7: 5f:a9:41:f7:6a:91:79:1e:ec:b5:8c:0d:c1:da:4f:6c:56:4f: 21:a9:f1:e4:da:fe:fa:8d:9f:12:9b:43:6b:4d:12:1c:d0:77: a9:96:d6:25:fb:28:64:b6:37:b9:6e:bf:0b:f1:f6:7c:b8:53: c9:88:d4:91:57:f6:29:0e:85:3f:84:19:07:9a:8f:e4:8c:0a: f3:0e:b8:e8:8f:86:2b:c0:23:ac:16:b1:16:c9:e5:d0:00:2d: 14:09:7e:f3:f8:27:32:39:27:74:9c:00:4f:f4:f5:a6:9b:99: 0b:ac:8e:46:e0:30:f5:2d:9a:e0:66:c3:c5:fd:c6:53:5b:1e: cd:26:dd:7c:32:e1:43:d4:af:3c:3a:85:42:eb:87:d1:28:ff: 87:ca:d8:10:b4:c2:83:75:c6:69:13:df:7b:72:6b:f4:45:99: e9:01:ed:ba:3b:03:74:17:7d:a9:0b:21:5d:f4:e3:c3:25:5b: 2d:f1:7f:af:21:dd:e5:75:6a:fe:c4:4e:d0:55:33:bc:ba:f4: c9:c7:75:3f -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIULmJLocTzcYQQucmhdKzuyK+OS6owDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEQxRDg0QjhBNTYyMjRCNEUyOTBGQkRBNUM3OTBDRDFG MDNGMTFBNzAeFw0yNTEwMTgyMDM2NDlaFw0yNTEwMjEyMzEyNDlaMDMxMTAvBgNV BAMTKEMwQTRGMEY2NzQ0MUY2QkI2QkU2RDZFOTM3NTNEMDAxRjRDQTBCNzUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCUzks1AzJSDE9BUN5Piq4cuW52 2PWlKbTvq8DmyXd3aJTkpk2Fvhtj8Brui1+bBh+jvKl3RDz2ObpLGra4KIIBEwsa tW6t5uhVMrzDyUSyaGfNqu+0O7MulfNsbC6/3qInKg5JTUIRnFW07oRRmAxZBDOl 9L8WwRjMY+IenfvxMWgjfrII082exEIU/6JT/R3wBbNL02EwiAEoq6XndKtc35Yw 0rtzMb79sQwigY70uH94aXXZq/b1oMylhx/MKG48n22/1pgLy6Z+uGMgy1Wx3PVf axC4BbQgLCgO1P/H9UlB0IQFHMNA9v/9UDy8AnqwsxJ2ulgwS5jCZ+QglcoDAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUwKTw9nRB9rtr5tbpN1PQAfTKC3UwHwYDVR0j BBgwFoAUjR2EuKViJLTikPvaXHkM0fA/EacwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i ZmRiMThlZi02NTlmLTRiMWUtYTJlMC1iNThhZjZiMTI3MWYvMC84RDFEODRCOEE1 NjIyNEI0RTI5MEZCREE1Qzc5MENEMUYwM0YxMUE3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOEQxRDg0QjhBNTYyMjRCNEUyOTBGQkRBNUM3OTBDRDFGMDNG MTFBNy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYmZkYjE4ZWYtNjU5Zi00YjFlLWEy ZTAtYjU4YWY2YjEyNzFmLzAvOEQxRDg0QjhBNTYyMjRCNEUyOTBGQkRBNUM3OTBD RDFGMDNGMTFBNy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALqALcfYhvHUHLKeHcKpzcpxr6O6Yz7S6E3C icInl4tO068REHk9T4A0lyQw07D+SKTcEuyat1+pQfdqkXke7LWMDcHaT2xWTyGp 8eTa/vqNnxKbQ2tNEhzQd6mW1iX7KGS2N7luvwvx9ny4U8mI1JFX9ikOhT+EGQea j+SMCvMOuOiPhivAI6wWsRbJ5dAALRQJfvP4JzI5J3ScAE/09aabmQusjkbgMPUt muBmw8X9xlNbHs0m3Xwy4UPUrzw6hULrh9Eo/4fK2BC0woN1xmkT33tya/RFmekB 7bo7A3QXfakLIV3048MlWy3xf68h3eV1av7ETtBVM7y69MnHdT8= -----END CERTIFICATE-----Generated at Mon Oct 20 20:54:20 2025 by rpki-client