$ rpki-client -vvf repo-rpki.idnic.net/repo/d9afd315-f47f-4f6a-b8b5-45a2280bbc85/0/8CC3A67DBA162B4430DF0F08F810A7B953CBA4A1.mft File: 8CC3A67DBA162B4430DF0F08F810A7B953CBA4A1.mft (raw, json) Hash identifier: ebIKmcBFBV2nE2DgaHIgwpil6GddP6rFxgOrFT7xbvs= Subject key identifier: EC:BA:5F:3E:6B:91:B4:B5:7E:48:97:79:57:34:D5:8A:D1:28:0F:11 Authority key identifier: 8C:C3:A6:7D:BA:16:2B:44:30:DF:0F:08:F8:10:A7:B9:53:CB:A4:A1 Certificate issuer: /CN=8CC3A67DBA162B4430DF0F08F810A7B953CBA4A1 Certificate serial: 596D7536EED48DD183173A4F3CBB630566A3FA24 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8CC3A67DBA162B4430DF0F08F810A7B953CBA4A1.cer Subject info access: rsync://repo-rpki.idnic.net/repo/d9afd315-f47f-4f6a-b8b5-45a2280bbc85/0/8CC3A67DBA162B4430DF0F08F810A7B953CBA4A1.mft Manifest number: 0213 Signing time: Sat 18 Oct 2025 21:20:57 +0000 Manifest this update: Sat 18 Oct 2025 21:15:57 +0000 Manifest next update: Wed 22 Oct 2025 08:45:57 +0000 Files and hashes: 1: 8CC3A67DBA162B4430DF0F08F810A7B953CBA4A1.crl (hash: nD4slfTCXW9Ce1aF3s4Z+zEE3uzeZm2qEMDiLUOoyI8=) 2: 3130332e3139312e35322e302f32332d3234203d3e2034383030.roa (hash: e+A7LYn+NCGFiG7Es9xiBuZGY1wSb3yZo5rf4YGYc54=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/d9afd315-f47f-4f6a-b8b5-45a2280bbc85/0/8CC3A67DBA162B4430DF0F08F810A7B953CBA4A1.crl rsync://repo-rpki.idnic.net/repo/d9afd315-f47f-4f6a-b8b5-45a2280bbc85/0/8CC3A67DBA162B4430DF0F08F810A7B953CBA4A1.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8CC3A67DBA162B4430DF0F08F810A7B953CBA4A1.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 Oct 2025 08:45:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 59:6d:75:36:ee:d4:8d:d1:83:17:3a:4f:3c:bb:63:05:66:a3:fa:24 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8CC3A67DBA162B4430DF0F08F810A7B953CBA4A1 Validity Not Before: Oct 18 21:15:57 2025 GMT Not After : Oct 22 08:45:57 2025 GMT Subject: CN=ECBA5F3E6B91B4B57E4897795734D58AD1280F11 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f3:2c:0e:7e:30:d5:60:f1:b5:e9:70:bc:45:87: 7c:10:f7:32:02:0d:dc:f6:e1:4f:73:b2:21:8c:d1: db:5f:35:82:94:2b:19:41:f4:8a:61:ab:04:ff:62: d2:44:62:83:05:70:ba:5e:31:1d:0b:bb:d3:f9:0b: d3:bd:a1:aa:3a:55:0f:55:ec:11:25:99:76:b2:e2: 96:96:53:36:e1:97:83:67:83:35:94:bf:83:da:57: 16:10:13:fb:c1:98:a4:c0:26:08:a0:c2:49:51:43: ab:8a:29:b3:ce:f2:d4:b4:2e:a9:a3:14:cb:8a:22: 5b:cd:f8:97:71:ca:dd:5e:e1:57:71:f5:80:e6:05: 74:4a:2c:49:09:47:e1:32:8d:36:6b:b9:d0:06:b3: 99:f3:4e:44:16:ec:32:94:c3:59:47:44:68:29:9c: c4:a7:f7:61:b1:56:b0:01:5f:a0:63:9d:8d:ba:f0: fb:85:45:91:94:a0:cb:85:e3:6c:32:57:9a:bb:7c: 1f:b6:bc:07:0f:72:0f:7c:a5:be:2e:cc:29:eb:f4: f8:a9:90:ef:7c:b4:cd:21:82:f2:98:f2:21:83:ad: cf:f2:37:0f:98:13:f8:70:44:69:32:19:9e:17:37: 1d:f8:dd:8a:bb:9f:76:3a:11:2c:3f:16:99:3d:01: c7:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EC:BA:5F:3E:6B:91:B4:B5:7E:48:97:79:57:34:D5:8A:D1:28:0F:11 X509v3 Authority Key Identifier: keyid:8C:C3:A6:7D:BA:16:2B:44:30:DF:0F:08:F8:10:A7:B9:53:CB:A4:A1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/d9afd315-f47f-4f6a-b8b5-45a2280bbc85/0/8CC3A67DBA162B4430DF0F08F810A7B953CBA4A1.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8CC3A67DBA162B4430DF0F08F810A7B953CBA4A1.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d9afd315-f47f-4f6a-b8b5-45a2280bbc85/0/8CC3A67DBA162B4430DF0F08F810A7B953CBA4A1.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5b:7a:3c:28:fd:9a:f2:f7:71:c3:80:5e:64:c3:3e:d9:cf:2b: 45:1f:69:45:02:dd:3e:0f:0e:ed:72:97:6a:ee:17:49:81:36: 24:35:a0:29:17:a6:92:9b:ce:b4:f9:9a:71:c9:2e:8e:21:59: 38:35:e4:b5:1f:eb:01:5b:03:f1:dd:b2:49:95:df:d1:f6:23: e3:01:aa:65:31:95:02:8d:0e:1b:e9:6f:a6:5f:12:38:f2:77: 35:9b:77:51:1a:05:0c:ad:9e:02:7e:9d:51:45:f7:f4:d0:ba: 55:9d:27:d5:50:50:69:58:fc:52:3e:00:50:51:9f:6b:1d:e0: a2:11:99:9e:33:b4:5c:c1:35:95:62:c1:e8:93:83:b5:7d:d7: 08:b0:86:ae:7c:c8:17:17:a1:ad:af:c6:65:3a:3e:1d:16:6b: cc:96:7c:df:f4:c1:d8:3d:42:fa:9c:dd:3c:8d:17:19:84:36: 42:db:c1:76:1c:98:02:ad:71:4e:00:49:6c:06:0d:34:ae:45: 98:bd:12:2c:46:cd:9b:b1:90:5c:0f:cd:32:04:7a:c0:ab:42: 70:3a:23:f0:41:10:a4:ef:08:8c:c9:0d:54:2a:78:cc:2a:1e: 39:c0:f3:30:e7:78:68:da:9c:a2:1f:89:fd:47:6d:f8:ea:4c: 55:49:59:14 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUWW11Nu7UjdGDFzpPPLtjBWaj+iQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOENDM0E2N0RCQTE2MkI0NDMwREYwRjA4RjgxMEE3Qjk1 M0NCQTRBMTAeFw0yNTEwMTgyMTE1NTdaFw0yNTEwMjIwODQ1NTdaMDMxMTAvBgNV BAMTKEVDQkE1RjNFNkI5MUI0QjU3RTQ4OTc3OTU3MzRENThBRDEyODBGMTEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDzLA5+MNVg8bXpcLxFh3wQ9zIC Ddz24U9zsiGM0dtfNYKUKxlB9IphqwT/YtJEYoMFcLpeMR0Lu9P5C9O9oao6VQ9V 7BElmXay4paWUzbhl4NngzWUv4PaVxYQE/vBmKTAJgigwklRQ6uKKbPO8tS0Lqmj FMuKIlvN+Jdxyt1e4Vdx9YDmBXRKLEkJR+EyjTZrudAGs5nzTkQW7DKUw1lHRGgp nMSn92GxVrABX6BjnY268PuFRZGUoMuF42wyV5q7fB+2vAcPcg98pb4uzCnr9Pip kO98tM0hgvKY8iGDrc/yNw+YE/hwRGkyGZ4XNx343Yq7n3Y6ESw/Fpk9AcepAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU7LpfPmuRtLV+SJd5VzTVitEoDxEwHwYDVR0j BBgwFoAUjMOmfboWK0Qw3w8I+BCnuVPLpKEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k OWFmZDMxNS1mNDdmLTRmNmEtYjhiNS00NWEyMjgwYmJjODUvMC84Q0MzQTY3REJB MTYyQjQ0MzBERjBGMDhGODEwQTdCOTUzQ0JBNEExLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOENDM0E2N0RCQTE2MkI0NDMwREYwRjA4RjgxMEE3Qjk1M0NC QTRBMS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZDlhZmQzMTUtZjQ3Zi00ZjZhLWI4 YjUtNDVhMjI4MGJiYzg1LzAvOENDM0E2N0RCQTE2MkI0NDMwREYwRjA4RjgxMEE3 Qjk1M0NCQTRBMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFt6PCj9mvL3ccOAXmTDPtnPK0UfaUUC3T4P Du1yl2ruF0mBNiQ1oCkXppKbzrT5mnHJLo4hWTg15LUf6wFbA/HdskmV39H2I+MB qmUxlQKNDhvpb6ZfEjjydzWbd1EaBQytngJ+nVFF9/TQulWdJ9VQUGlY/FI+AFBR n2sd4KIRmZ4ztFzBNZViweiTg7V91wiwhq58yBcXoa2vxmU6Ph0Wa8yWfN/0wdg9 Qvqc3TyNFxmENkLbwXYcmAKtcU4ASWwGDTSuRZi9EixGzZuxkFwPzTIEesCrQnA6 I/BBEKTvCIzJDVQqeMwqHjnA8zDneGjanKIfif1HbfjqTFVJWRQ= -----END CERTIFICATE-----Generated at Mon Oct 20 14:38:46 2025 by rpki-client