$ rpki-client -vvf repo-rpki.idnic.net/repo/dacb7187-7a5f-4e23-be94-593a0c288cb9/0/8C6B9FE80EF1DA40B964D4429F78785ADDD29EFB.mft File: 8C6B9FE80EF1DA40B964D4429F78785ADDD29EFB.mft (raw, json) Hash identifier: NiS1AHH5AMe77xBVuEKVWdYs9DJOMAWUXBulkl43wcc= Subject key identifier: 3B:79:48:40:FA:F7:6D:55:7D:92:CD:EF:5D:A6:42:A8:66:CD:97:6F Authority key identifier: 8C:6B:9F:E8:0E:F1:DA:40:B9:64:D4:42:9F:78:78:5A:DD:D2:9E:FB Certificate issuer: /CN=8C6B9FE80EF1DA40B964D4429F78785ADDD29EFB Certificate serial: 687C2FD24D883724032F614B9BF21D51D52E188B Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8C6B9FE80EF1DA40B964D4429F78785ADDD29EFB.cer Subject info access: rsync://repo-rpki.idnic.net/repo/dacb7187-7a5f-4e23-be94-593a0c288cb9/0/8C6B9FE80EF1DA40B964D4429F78785ADDD29EFB.mft Manifest number: 01F1 Signing time: Sun 19 Oct 2025 08:01:24 +0000 Manifest this update: Sun 19 Oct 2025 07:56:24 +0000 Manifest next update: Wed 22 Oct 2025 15:07:24 +0000 Files and hashes: 1: 8C6B9FE80EF1DA40B964D4429F78785ADDD29EFB.crl (hash: rL72X0V6D02A4OtWQU3iHeDnsOdwl+wo0vLkA4Dz4K8=) 2: 3130332e31302e37312e302f32342d3234203d3e20313530323130.roa (hash: wDta+92k3x+gK76Z0kGm3qQTLhs6WF7nJtND4k4DV9Y=) 3: 3130332e31302e37302e302f32342d3234203d3e20313530323130.roa (hash: 5JDd/HA007WXvt9HRMOrUb4bJ8L4vCr7oaVmKSZ2Ddg=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/dacb7187-7a5f-4e23-be94-593a0c288cb9/0/8C6B9FE80EF1DA40B964D4429F78785ADDD29EFB.crl rsync://repo-rpki.idnic.net/repo/dacb7187-7a5f-4e23-be94-593a0c288cb9/0/8C6B9FE80EF1DA40B964D4429F78785ADDD29EFB.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8C6B9FE80EF1DA40B964D4429F78785ADDD29EFB.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 Oct 2025 15:07:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 68:7c:2f:d2:4d:88:37:24:03:2f:61:4b:9b:f2:1d:51:d5:2e:18:8b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8C6B9FE80EF1DA40B964D4429F78785ADDD29EFB Validity Not Before: Oct 19 07:56:24 2025 GMT Not After : Oct 22 15:07:24 2025 GMT Subject: CN=3B794840FAF76D557D92CDEF5DA642A866CD976F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:8f:81:a6:6b:53:5c:4b:d3:73:60:8c:88:a6: 5a:8a:8d:a5:4e:ca:b0:2c:8b:71:f9:6b:fb:c8:80: 29:db:bd:e9:f7:b5:48:78:2c:39:58:c0:77:4e:12: 8f:de:55:30:db:d5:eb:f9:33:46:fc:1c:41:d3:cf: e4:13:e9:dc:21:dc:cd:14:1e:8f:eb:43:fb:1d:4f: 8a:c3:24:df:d8:ae:93:ef:7a:70:b4:3b:6e:40:bc: 6b:69:78:b9:2a:dc:c9:e7:1c:17:f8:cc:28:bf:90: 28:06:86:47:2e:32:ee:61:0b:58:54:31:47:69:74: 27:ba:7b:67:99:2d:e3:01:d6:dd:e7:cd:36:8f:29: b5:0a:9b:69:a6:7b:10:ac:9a:df:61:88:c9:8e:25: 30:d7:e8:44:09:97:61:32:d2:f1:22:58:c5:8f:a3: a7:95:14:62:43:97:0d:67:e5:f1:e6:a2:86:5b:d6: e4:ee:cb:f7:bf:c2:4a:84:c9:73:5e:25:e8:0a:48: 53:d2:74:33:9b:47:49:1d:af:2b:36:72:f0:a9:64: 13:a8:8c:ee:e4:94:5f:b9:92:4e:d9:f3:36:d4:ea: 62:5e:c9:99:e6:cf:b0:94:3a:6c:61:3a:ca:ec:6d: cb:96:2c:93:dd:17:77:04:63:86:8d:75:9c:ca:9e: 66:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3B:79:48:40:FA:F7:6D:55:7D:92:CD:EF:5D:A6:42:A8:66:CD:97:6F X509v3 Authority Key Identifier: keyid:8C:6B:9F:E8:0E:F1:DA:40:B9:64:D4:42:9F:78:78:5A:DD:D2:9E:FB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/dacb7187-7a5f-4e23-be94-593a0c288cb9/0/8C6B9FE80EF1DA40B964D4429F78785ADDD29EFB.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8C6B9FE80EF1DA40B964D4429F78785ADDD29EFB.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/dacb7187-7a5f-4e23-be94-593a0c288cb9/0/8C6B9FE80EF1DA40B964D4429F78785ADDD29EFB.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 80:00:42:d5:35:11:50:ed:c3:b7:bd:eb:9f:57:a9:e2:3a:ab: de:9c:52:97:54:fe:7e:7d:bb:65:1f:f6:b5:d6:0b:96:c2:94: 65:76:df:99:55:15:7f:62:c1:04:1b:93:b2:35:9f:32:bb:80: 8d:98:53:6e:c6:8a:b8:b9:4a:02:ab:58:cc:68:75:53:6b:b8: b4:d4:dd:78:84:0b:a9:c6:7c:0d:0b:40:fe:37:df:c1:85:22: 86:8d:6b:4b:8d:0d:fe:4b:96:e2:0d:f8:7a:f9:a4:a4:d8:bb: 11:22:1a:79:b5:b8:c8:e5:5d:e9:60:5a:69:be:68:1f:22:79: 40:e1:a8:7c:aa:19:78:af:a7:b2:74:c3:8f:63:7d:06:f2:e5: cc:c8:40:27:48:4c:f9:42:9c:75:14:c6:36:31:80:bc:04:70: 24:fe:49:0f:39:84:3c:7a:4e:86:eb:ef:6c:e6:f7:51:d1:82: 83:21:08:21:00:8f:2f:b5:90:46:71:26:8c:88:ec:13:b5:09: 62:bc:c4:d1:33:19:44:e2:22:2a:bb:c1:f9:93:41:bd:29:af: 02:f1:cb:c3:2b:55:87:b7:c2:05:c0:48:11:75:75:1d:e3:66: 60:0b:1b:50:8c:d4:7e:a4:3e:27:0a:38:4f:c6:32:47:c8:6a: c7:17:23:55 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUaHwv0k2INyQDL2FLm/IdUdUuGIswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEM2QjlGRTgwRUYxREE0MEI5NjRENDQyOUY3ODc4NUFE REQyOUVGQjAeFw0yNTEwMTkwNzU2MjRaFw0yNTEwMjIxNTA3MjRaMDMxMTAvBgNV BAMTKDNCNzk0ODQwRkFGNzZENTU3RDkyQ0RFRjVEQTY0MkE4NjZDRDk3NkYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDDj4Gma1NcS9NzYIyIplqKjaVO yrAsi3H5a/vIgCnbven3tUh4LDlYwHdOEo/eVTDb1ev5M0b8HEHTz+QT6dwh3M0U Ho/rQ/sdT4rDJN/YrpPvenC0O25AvGtpeLkq3MnnHBf4zCi/kCgGhkcuMu5hC1hU MUdpdCe6e2eZLeMB1t3nzTaPKbUKm2mmexCsmt9hiMmOJTDX6EQJl2Ey0vEiWMWP o6eVFGJDlw1n5fHmooZb1uTuy/e/wkqEyXNeJegKSFPSdDObR0kdrys2cvCpZBOo jO7klF+5kk7Z8zbU6mJeyZnmz7CUOmxhOsrsbcuWLJPdF3cEY4aNdZzKnmZnAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUO3lIQPr3bVV9ks3vXaZCqGbNl28wHwYDVR0j BBgwFoAUjGuf6A7x2kC5ZNRCn3h4Wt3SnvswDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k YWNiNzE4Ny03YTVmLTRlMjMtYmU5NC01OTNhMGMyODhjYjkvMC84QzZCOUZFODBF RjFEQTQwQjk2NEQ0NDI5Rjc4Nzg1QURERDI5RUZCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOEM2QjlGRTgwRUYxREE0MEI5NjRENDQyOUY3ODc4NUFEREQy OUVGQi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZGFjYjcxODctN2E1Zi00ZTIzLWJl OTQtNTkzYTBjMjg4Y2I5LzAvOEM2QjlGRTgwRUYxREE0MEI5NjRENDQyOUY3ODc4 NUFEREQyOUVGQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIAAQtU1EVDtw7e9659XqeI6q96cUpdU/n59 u2Uf9rXWC5bClGV235lVFX9iwQQbk7I1nzK7gI2YU27Giri5SgKrWMxodVNruLTU 3XiEC6nGfA0LQP4338GFIoaNa0uNDf5LluIN+Hr5pKTYuxEiGnm1uMjlXelgWmm+ aB8ieUDhqHyqGXivp7J0w49jfQby5czIQCdITPlCnHUUxjYxgLwEcCT+SQ85hDx6 Tobr72zm91HRgoMhCCEAjy+1kEZxJoyI7BO1CWK8xNEzGUTiIiq7wfmTQb0prwLx y8MrVYe3wgXASBF1dR3jZmALG1CM1H6kPicKOE/GMkfIascXI1U= -----END CERTIFICATE-----Generated at Mon Oct 20 09:44:18 2025 by rpki-client