$ rpki-client -vvf repo-rpki.idnic.net/repo/d06347f4-ea26-4d4c-a568-1d863360e421/0/8BE4A701F2924B4BFB8A983A1B0BD5C8863BF3FD.mft File: 8BE4A701F2924B4BFB8A983A1B0BD5C8863BF3FD.mft (raw, json) Hash identifier: Z116wtVAd/vHIW6jUbP9Z6ZuBAwt3qiQCJ1BF5NPUy8= Subject key identifier: 0D:A8:6E:4A:6A:50:B2:D7:E7:32:F1:9B:DC:11:CC:08:61:19:3C:26 Authority key identifier: 8B:E4:A7:01:F2:92:4B:4B:FB:8A:98:3A:1B:0B:D5:C8:86:3B:F3:FD Certificate issuer: /CN=8BE4A701F2924B4BFB8A983A1B0BD5C8863BF3FD Certificate serial: 7307F0D00B552902A7BE93147D61284E3CEAC65E Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8BE4A701F2924B4BFB8A983A1B0BD5C8863BF3FD.cer Subject info access: rsync://repo-rpki.idnic.net/repo/d06347f4-ea26-4d4c-a568-1d863360e421/0/8BE4A701F2924B4BFB8A983A1B0BD5C8863BF3FD.mft Manifest number: 0516 Signing time: Mon 20 Oct 2025 02:22:08 +0000 Manifest this update: Mon 20 Oct 2025 02:17:08 +0000 Manifest next update: Thu 23 Oct 2025 09:52:08 +0000 Files and hashes: 1: 3130332e3132312e3132322e302f32342d3234203d3e20313338313331.roa (hash: 9ysblGZ5nRnpD9uRTt/CttmsXFnbP66QhYFS5MHljXI=) 2: 8BE4A701F2924B4BFB8A983A1B0BD5C8863BF3FD.crl (hash: xIkfyHMlG/u17axV6MJSRwniYnMdDrj2O3vFdkUg4Dk=) 3: 3130332e3131352e3136342e302f32342d3234203d3e20313338313331.roa (hash: PfYYptDyBdUl4aWzZCjnvFHr6qQWRMjgNV762Lfvv/Q=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/d06347f4-ea26-4d4c-a568-1d863360e421/0/8BE4A701F2924B4BFB8A983A1B0BD5C8863BF3FD.crl rsync://repo-rpki.idnic.net/repo/d06347f4-ea26-4d4c-a568-1d863360e421/0/8BE4A701F2924B4BFB8A983A1B0BD5C8863BF3FD.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8BE4A701F2924B4BFB8A983A1B0BD5C8863BF3FD.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 Oct 2025 09:52:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 73:07:f0:d0:0b:55:29:02:a7:be:93:14:7d:61:28:4e:3c:ea:c6:5e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8BE4A701F2924B4BFB8A983A1B0BD5C8863BF3FD Validity Not Before: Oct 20 02:17:08 2025 GMT Not After : Oct 23 09:52:08 2025 GMT Subject: CN=0DA86E4A6A50B2D7E732F19BDC11CC0861193C26 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:2b:a7:90:ab:66:84:02:d9:ce:88:ef:62:52: d8:df:3c:89:8e:c8:5d:24:83:b9:b1:9d:02:e0:e3: 41:92:33:89:77:a8:6b:64:1c:e6:52:70:9f:72:8b: cc:60:15:7e:7f:f2:d0:ca:0c:18:fe:c1:9f:eb:23: 91:fc:4b:c0:f7:fd:03:78:b6:8c:74:5f:b5:29:f7: 94:ab:57:f0:d7:42:48:ac:9b:66:cf:f7:b5:d4:fc: e3:fd:2f:d2:ce:ae:7b:d2:a5:8d:45:25:ad:f2:b1: bc:7e:37:b0:0f:72:a4:c4:e3:c0:41:ab:c0:95:c4: cb:e6:7b:1d:a8:73:98:26:76:ee:74:54:b0:76:65: f4:7d:43:58:c2:60:2a:85:1d:ec:75:46:7a:03:5a: 83:07:c9:7f:c9:16:d8:15:33:60:0c:ac:5f:79:72: ed:41:1e:57:41:8d:b6:07:75:45:b9:8f:eb:af:da: d1:f8:51:bd:ab:d5:94:cb:c1:f9:f9:89:0d:e6:13: 6d:83:a9:d0:45:b5:7f:10:1e:01:28:c1:6b:af:59: 2d:ef:80:2d:6d:32:24:8d:4b:4c:38:09:16:16:50: 7c:79:2e:71:af:8c:da:40:7d:77:59:68:bf:4d:76: ea:60:a7:17:f9:70:f6:6b:bc:8f:42:8c:f8:2f:2e: 50:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0D:A8:6E:4A:6A:50:B2:D7:E7:32:F1:9B:DC:11:CC:08:61:19:3C:26 X509v3 Authority Key Identifier: keyid:8B:E4:A7:01:F2:92:4B:4B:FB:8A:98:3A:1B:0B:D5:C8:86:3B:F3:FD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/d06347f4-ea26-4d4c-a568-1d863360e421/0/8BE4A701F2924B4BFB8A983A1B0BD5C8863BF3FD.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8BE4A701F2924B4BFB8A983A1B0BD5C8863BF3FD.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d06347f4-ea26-4d4c-a568-1d863360e421/0/8BE4A701F2924B4BFB8A983A1B0BD5C8863BF3FD.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 83:33:fe:56:d1:f4:3e:78:a4:1e:06:b8:03:51:83:d7:3e:61: 14:31:46:70:2f:b2:aa:bf:2e:1e:5b:44:fb:ce:23:56:a9:f8: 7c:9a:33:76:6a:83:b3:2c:be:31:38:98:64:e9:93:85:97:8b: e8:e0:ad:11:d1:69:6d:bf:52:89:8e:8b:64:55:2a:e8:9f:b0: 34:93:de:a7:ca:b8:43:55:26:39:65:d4:9f:b2:4a:22:7b:f8: 97:04:49:b4:4e:7b:67:45:c0:6d:93:3a:fc:20:2b:0c:bc:b7: cc:5c:fd:89:f6:16:4a:e6:09:88:c3:c4:df:c5:27:31:bf:ce: c4:d6:18:be:90:d0:e0:f1:6a:af:0f:ea:d5:71:3b:0f:83:96: 56:bf:95:d6:8e:d1:e3:ff:d0:e0:9f:1e:d9:e8:db:9b:cc:7a: c6:cc:2f:c0:8d:05:ad:70:aa:c6:b7:f6:ce:85:a9:92:4a:63: fe:77:25:0b:b8:17:4d:36:04:aa:4a:53:38:25:74:7b:0d:12: 99:97:b2:a4:e4:99:2f:9c:f3:07:22:ec:8a:8e:c4:7c:1b:a7: db:83:cd:64:19:07:cd:de:1d:3b:35:47:0f:bb:ed:1e:5a:b1: 06:bf:99:64:2d:e8:cf:8a:74:9a:f4:76:ea:9a:33:83:dc:31: 36:27:e3:7e -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUcwfw0AtVKQKnvpMUfWEoTjzqxl4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEJFNEE3MDFGMjkyNEI0QkZCOEE5ODNBMUIwQkQ1Qzg4 NjNCRjNGRDAeFw0yNTEwMjAwMjE3MDhaFw0yNTEwMjMwOTUyMDhaMDMxMTAvBgNV BAMTKDBEQTg2RTRBNkE1MEIyRDdFNzMyRjE5QkRDMTFDQzA4NjExOTNDMjYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDMK6eQq2aEAtnOiO9iUtjfPImO yF0kg7mxnQLg40GSM4l3qGtkHOZScJ9yi8xgFX5/8tDKDBj+wZ/rI5H8S8D3/QN4 tox0X7Up95SrV/DXQkism2bP97XU/OP9L9LOrnvSpY1FJa3ysbx+N7APcqTE48BB q8CVxMvmex2oc5gmdu50VLB2ZfR9Q1jCYCqFHex1RnoDWoMHyX/JFtgVM2AMrF95 cu1BHldBjbYHdUW5j+uv2tH4Ub2r1ZTLwfn5iQ3mE22DqdBFtX8QHgEowWuvWS3v gC1tMiSNS0w4CRYWUHx5LnGvjNpAfXdZaL9Ndupgpxf5cPZrvI9CjPgvLlDlAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUDahuSmpQstfnMvGb3BHMCGEZPCYwHwYDVR0j BBgwFoAUi+SnAfKSS0v7ipg6GwvVyIY78/0wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k MDYzNDdmNC1lYTI2LTRkNGMtYTU2OC0xZDg2MzM2MGU0MjEvMC84QkU0QTcwMUYy OTI0QjRCRkI4QTk4M0ExQjBCRDVDODg2M0JGM0ZELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOEJFNEE3MDFGMjkyNEI0QkZCOEE5ODNBMUIwQkQ1Qzg4NjNC RjNGRC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZDA2MzQ3ZjQtZWEyNi00ZDRjLWE1 NjgtMWQ4NjMzNjBlNDIxLzAvOEJFNEE3MDFGMjkyNEI0QkZCOEE5ODNBMUIwQkQ1 Qzg4NjNCRjNGRC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIMz/lbR9D54pB4GuANRg9c+YRQxRnAvsqq/ Lh5bRPvOI1ap+HyaM3Zqg7MsvjE4mGTpk4WXi+jgrRHRaW2/UomOi2RVKuifsDST 3qfKuENVJjll1J+ySiJ7+JcESbROe2dFwG2TOvwgKwy8t8xc/Yn2FkrmCYjDxN/F JzG/zsTWGL6Q0ODxaq8P6tVxOw+Dlla/ldaO0eP/0OCfHtno25vMesbML8CNBa1w qsa39s6FqZJKY/53JQu4F002BKpKUzgldHsNEpmXsqTkmS+c8wci7IqOxHwbp9uD zWQZB83eHTs1Rw+77R5asQa/mWQt6M+KdJr0duqaM4PcMTYn434= -----END CERTIFICATE-----Generated at Mon Oct 20 18:05:02 2025 by rpki-client