$ rpki-client -vvf repo-rpki.idnic.net/repo/cf0ba1e7-d142-47cd-8d8f-2a372b922223/0/8874CE775F191B6E0B34A789A359EB9FB93B737E.mft File: 8874CE775F191B6E0B34A789A359EB9FB93B737E.mft (raw, json) Hash identifier: barZWe/H7AJHyQ4FeOWHmwJP63c3PP5GWifMvK2YD9o= Subject key identifier: F9:47:B2:80:8D:A4:46:C6:79:EC:0F:27:E1:B6:92:BD:32:D2:18:F0 Authority key identifier: 88:74:CE:77:5F:19:1B:6E:0B:34:A7:89:A3:59:EB:9F:B9:3B:73:7E Certificate issuer: /CN=8874CE775F191B6E0B34A789A359EB9FB93B737E Certificate serial: 411698E0E4EFDB3A5ADE165090153C1DED3F8843 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8874CE775F191B6E0B34A789A359EB9FB93B737E.cer Subject info access: rsync://repo-rpki.idnic.net/repo/cf0ba1e7-d142-47cd-8d8f-2a372b922223/0/8874CE775F191B6E0B34A789A359EB9FB93B737E.mft Manifest number: 0272 Signing time: Mon 20 Oct 2025 00:10:44 +0000 Manifest this update: Mon 20 Oct 2025 00:05:44 +0000 Manifest next update: Thu 23 Oct 2025 01:45:44 +0000 Files and hashes: 1: 3130332e3137322e32352e302f32342d3234203d3e20313432333837.roa (hash: aI45yKhAru9VHfZlQWe/rwkciB33mSYkuVbNTgyinfk=) 2: 8874CE775F191B6E0B34A789A359EB9FB93B737E.crl (hash: CcJxxobIJi6kwmGPWphVw+cmxQSAHX65vXv4FgxNfCc=) 3: 3130332e3137322e32342e302f32342d3234203d3e20313432333837.roa (hash: nL/HZGA0E7GxsNtQZwq3/bQqUnFo5wNCWdHlAXFVa2g=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/cf0ba1e7-d142-47cd-8d8f-2a372b922223/0/8874CE775F191B6E0B34A789A359EB9FB93B737E.crl rsync://repo-rpki.idnic.net/repo/cf0ba1e7-d142-47cd-8d8f-2a372b922223/0/8874CE775F191B6E0B34A789A359EB9FB93B737E.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8874CE775F191B6E0B34A789A359EB9FB93B737E.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 Oct 2025 01:45:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 41:16:98:e0:e4:ef:db:3a:5a:de:16:50:90:15:3c:1d:ed:3f:88:43 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8874CE775F191B6E0B34A789A359EB9FB93B737E Validity Not Before: Oct 20 00:05:44 2025 GMT Not After : Oct 23 01:45:44 2025 GMT Subject: CN=F947B2808DA446C679EC0F27E1B692BD32D218F0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ee:b9:5d:41:4d:46:d4:32:58:1a:d6:cb:f9:03: f9:3b:97:ca:2d:63:a7:59:22:57:18:25:91:c3:43: 3d:28:64:52:3c:3f:b0:f0:2c:9e:8d:63:39:a4:28: bb:73:81:aa:d6:90:74:83:c7:7b:cb:19:6e:f7:9a: 10:ba:c4:fc:0c:f7:22:fa:e3:24:ab:95:ef:2b:00: f5:49:f1:48:3d:9a:16:91:50:99:d5:85:21:7b:81: 7d:64:ae:36:ee:bc:72:8e:43:49:34:f5:4f:9f:39: 3f:2b:dd:ab:f5:14:ca:95:9d:d1:f5:9f:cb:eb:67: 3f:47:8d:59:91:b5:45:0b:e6:c7:cf:92:4a:43:90: 1d:66:af:f0:ad:bb:eb:20:bc:a8:6b:fc:f2:63:11: 9a:ae:52:e5:0f:47:f5:fa:62:7a:f3:e5:e8:1b:c3: 28:17:71:af:4a:cb:a4:21:2f:97:e7:14:6c:63:5f: 84:4f:bd:9a:f4:c8:66:97:80:fb:1d:68:66:90:5f: 32:93:4b:10:dd:6d:4f:b2:0d:38:18:b6:bf:d7:d7: d1:72:f9:0d:1b:b8:38:bb:78:e7:dc:30:a0:74:ee: 3c:91:be:38:02:a4:b1:bd:2c:5d:22:df:46:24:33: 8c:63:32:28:9c:5e:0c:04:99:1f:7d:36:c1:59:c2: c1:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F9:47:B2:80:8D:A4:46:C6:79:EC:0F:27:E1:B6:92:BD:32:D2:18:F0 X509v3 Authority Key Identifier: keyid:88:74:CE:77:5F:19:1B:6E:0B:34:A7:89:A3:59:EB:9F:B9:3B:73:7E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/cf0ba1e7-d142-47cd-8d8f-2a372b922223/0/8874CE775F191B6E0B34A789A359EB9FB93B737E.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8874CE775F191B6E0B34A789A359EB9FB93B737E.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/cf0ba1e7-d142-47cd-8d8f-2a372b922223/0/8874CE775F191B6E0B34A789A359EB9FB93B737E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 43:f8:22:a6:a5:0a:db:63:d9:71:4f:6c:4a:cf:ef:6c:f1:e2: 0c:70:2a:04:5b:53:7f:c2:55:b7:eb:3c:00:32:47:00:d3:bb: 79:0e:69:65:22:53:c7:88:97:43:08:97:5e:39:66:eb:b6:42: d0:38:24:3c:0c:08:9a:73:64:e0:5c:cf:93:52:83:7e:64:3c: ca:ac:4b:f9:38:d4:95:9f:03:c0:d5:0a:6d:93:65:8c:e1:af: fa:34:eb:33:cf:16:53:0d:6d:aa:f1:2b:16:4c:df:08:dc:8d: 8b:e2:eb:c6:d8:ab:a6:ce:cc:aa:c2:97:11:ba:95:45:3d:68: 15:ef:1f:98:15:12:e4:26:a9:c7:d4:e2:9d:3a:e3:d3:56:3a: 88:a7:fb:7b:ad:68:a0:30:ee:10:33:ab:79:8d:6b:1b:e8:1a: 15:9f:ea:d3:2c:87:d0:ee:85:1a:a2:60:4d:93:eb:07:52:7f: 12:12:95:7f:08:e9:f2:8d:18:93:2f:ef:8b:bc:a4:35:1b:df: 4a:d6:3d:a3:06:99:30:c9:ff:ed:70:00:bd:13:83:b7:c4:72: 26:df:99:f9:81:e8:81:4b:0b:63:64:5a:b5:7d:6f:d7:f9:17: cb:86:c9:8d:47:5c:cf:9e:cb:94:7f:1b:5f:d6:dd:3c:71:e8: d7:50:f2:76 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUQRaY4OTv2zpa3hZQkBU8He0/iEMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODg3NENFNzc1RjE5MUI2RTBCMzRBNzg5QTM1OUVCOUZC OTNCNzM3RTAeFw0yNTEwMjAwMDA1NDRaFw0yNTEwMjMwMTQ1NDRaMDMxMTAvBgNV BAMTKEY5NDdCMjgwOERBNDQ2QzY3OUVDMEYyN0UxQjY5MkJEMzJEMjE4RjAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDuuV1BTUbUMlga1sv5A/k7l8ot Y6dZIlcYJZHDQz0oZFI8P7DwLJ6NYzmkKLtzgarWkHSDx3vLGW73mhC6xPwM9yL6 4ySrle8rAPVJ8Ug9mhaRUJnVhSF7gX1krjbuvHKOQ0k09U+fOT8r3av1FMqVndH1 n8vrZz9HjVmRtUUL5sfPkkpDkB1mr/Ctu+sgvKhr/PJjEZquUuUPR/X6Ynrz5egb wygXca9Ky6QhL5fnFGxjX4RPvZr0yGaXgPsdaGaQXzKTSxDdbU+yDTgYtr/X19Fy +Q0buDi7eOfcMKB07jyRvjgCpLG9LF0i30YkM4xjMiicXgwEmR99NsFZwsH7AgMB AAGjggI8MIICODAdBgNVHQ4EFgQU+UeygI2kRsZ57A8n4baSvTLSGPAwHwYDVR0j BBgwFoAUiHTOd18ZG24LNKeJo1nrn7k7c34wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j ZjBiYTFlNy1kMTQyLTQ3Y2QtOGQ4Zi0yYTM3MmI5MjIyMjMvMC84ODc0Q0U3NzVG MTkxQjZFMEIzNEE3ODlBMzU5RUI5RkI5M0I3MzdFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvODg3NENFNzc1RjE5MUI2RTBCMzRBNzg5QTM1OUVCOUZCOTNC NzM3RS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vY2YwYmExZTctZDE0Mi00N2NkLThk OGYtMmEzNzJiOTIyMjIzLzAvODg3NENFNzc1RjE5MUI2RTBCMzRBNzg5QTM1OUVC OUZCOTNCNzM3RS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEP4IqalCttj2XFPbErP72zx4gxwKgRbU3/C VbfrPAAyRwDTu3kOaWUiU8eIl0MIl145Zuu2QtA4JDwMCJpzZOBcz5NSg35kPMqs S/k41JWfA8DVCm2TZYzhr/o06zPPFlMNbarxKxZM3wjcjYvi68bYq6bOzKrClxG6 lUU9aBXvH5gVEuQmqcfU4p0649NWOoin+3utaKAw7hAzq3mNaxvoGhWf6tMsh9Du hRqiYE2T6wdSfxISlX8I6fKNGJMv74u8pDUb30rWPaMGmTDJ/+1wAL0Tg7fEcibf mfmB6IFLC2NkWrV9b9f5F8uGyY1HXM+ey5R/G1/W3Txx6NdQ8nY= -----END CERTIFICATE-----Generated at Mon Oct 20 16:47:49 2025 by rpki-client