$ rpki-client -vvf repo-rpki.idnic.net/repo/dcf00f8a-5cbd-460f-bfc6-bd8942b6537c/0/8694CDBB52F4AEA89AF46CA5BFA5A639973D7302.mft File: 8694CDBB52F4AEA89AF46CA5BFA5A639973D7302.mft (raw, json) Hash identifier: Nst95GgGQF0hZeghNkOUPMLd5WSmJNs++my/X2Vzh9k= Subject key identifier: A7:57:ED:4E:29:18:B0:97:7B:CA:E6:26:D4:65:1E:40:77:7D:F2:50 Authority key identifier: 86:94:CD:BB:52:F4:AE:A8:9A:F4:6C:A5:BF:A5:A6:39:97:3D:73:02 Certificate issuer: /CN=8694CDBB52F4AEA89AF46CA5BFA5A639973D7302 Certificate serial: 1A726639E3CD4C0C28C08AD2CE46F35D14A84E65 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8694CDBB52F4AEA89AF46CA5BFA5A639973D7302.cer Subject info access: rsync://repo-rpki.idnic.net/repo/dcf00f8a-5cbd-460f-bfc6-bd8942b6537c/0/8694CDBB52F4AEA89AF46CA5BFA5A639973D7302.mft Manifest number: 5D Signing time: Sun 19 Oct 2025 18:51:47 +0000 Manifest this update: Sun 19 Oct 2025 18:46:47 +0000 Manifest next update: Thu 23 Oct 2025 01:14:47 +0000 Files and hashes: 1: 8694CDBB52F4AEA89AF46CA5BFA5A639973D7302.crl (hash: unaxXepwikGXp8w2mtnIoXSXigMYEFwLBkosCLISjNI=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/dcf00f8a-5cbd-460f-bfc6-bd8942b6537c/0/8694CDBB52F4AEA89AF46CA5BFA5A639973D7302.crl rsync://repo-rpki.idnic.net/repo/dcf00f8a-5cbd-460f-bfc6-bd8942b6537c/0/8694CDBB52F4AEA89AF46CA5BFA5A639973D7302.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8694CDBB52F4AEA89AF46CA5BFA5A639973D7302.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 Oct 2025 01:14:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1a:72:66:39:e3:cd:4c:0c:28:c0:8a:d2:ce:46:f3:5d:14:a8:4e:65 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8694CDBB52F4AEA89AF46CA5BFA5A639973D7302 Validity Not Before: Oct 19 18:46:47 2025 GMT Not After : Oct 23 01:14:47 2025 GMT Subject: CN=A757ED4E2918B0977BCAE626D4651E40777DF250 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:e6:86:0f:4e:46:a1:11:22:1c:57:7c:8d:5e: e5:92:cb:21:ba:ff:bc:f6:6c:5b:dc:b2:31:e9:65: 6c:ec:f4:f5:d0:8d:bc:f0:d7:ef:2a:91:32:d5:b8: 0e:a6:de:0f:00:6e:9b:41:cd:ab:05:91:16:6d:52: c7:be:b3:37:74:a9:c3:1e:ba:02:23:15:ef:5b:28: d7:97:32:ae:81:39:60:97:af:f1:a6:94:2a:e6:af: da:f3:8f:b3:dd:e4:1f:95:f3:47:7b:17:78:6a:72: c6:1d:27:05:31:a9:4b:d9:90:1d:8a:65:fd:41:6a: 69:bc:13:d9:38:ce:34:34:f9:25:e0:22:4d:af:a8: fa:9d:d2:2f:2a:b2:a8:fa:63:bf:99:42:16:d6:f7: 76:ce:ba:4d:1a:74:24:ba:eb:70:2d:fc:91:36:a4: 10:de:92:b7:73:67:1c:d0:d8:bb:47:0a:dc:df:0f: b1:57:90:ee:18:39:f1:6c:fa:24:aa:39:64:eb:b3: 54:6e:8c:ef:97:94:a8:4e:22:7b:c3:c1:31:5c:73: 65:89:3d:4d:7a:f5:12:3d:01:8e:fe:a7:b2:e5:59: 5f:84:09:24:20:d8:74:06:5f:0c:85:00:d0:df:17: c3:30:f8:4d:47:f9:3f:03:19:5e:45:45:d6:b0:eb: f0:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A7:57:ED:4E:29:18:B0:97:7B:CA:E6:26:D4:65:1E:40:77:7D:F2:50 X509v3 Authority Key Identifier: keyid:86:94:CD:BB:52:F4:AE:A8:9A:F4:6C:A5:BF:A5:A6:39:97:3D:73:02 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/dcf00f8a-5cbd-460f-bfc6-bd8942b6537c/0/8694CDBB52F4AEA89AF46CA5BFA5A639973D7302.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8694CDBB52F4AEA89AF46CA5BFA5A639973D7302.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/dcf00f8a-5cbd-460f-bfc6-bd8942b6537c/0/8694CDBB52F4AEA89AF46CA5BFA5A639973D7302.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 48:7b:f9:40:8b:a9:1f:ff:91:4e:02:3a:0e:6c:93:24:33:64: 5f:6f:10:a0:b0:31:f5:cb:6f:f1:22:9e:82:b2:31:27:70:e5: 62:ad:74:24:d0:e3:f6:74:c6:72:53:2b:c7:dc:72:23:ba:fe: 60:18:48:47:32:f2:fc:67:aa:23:cb:8d:3c:de:6a:fd:39:f7: d6:d0:12:35:39:ca:f2:77:38:2d:e6:e2:ea:56:a2:4c:e2:b5: 76:b1:28:de:66:e6:98:74:9a:80:27:5d:a1:38:5e:6e:44:d7: 9b:c4:e6:6e:28:ca:8e:9d:e0:f9:69:21:82:8a:8a:87:6d:f0: fa:a8:c6:fb:2a:da:a3:97:e9:ea:2f:9c:73:58:6d:0d:99:9d: 8c:4d:7d:ef:32:cf:9a:4c:d3:fe:0f:45:33:ca:35:cd:97:d7: b5:46:c2:f2:a2:8e:99:bf:56:8c:dd:79:c0:6e:c0:10:0e:c4: a8:1e:6c:f2:72:aa:b0:38:74:ac:9e:58:0b:8b:69:eb:c1:2d: 9f:77:c9:be:04:e4:ce:cb:5e:d3:99:5f:eb:f7:56:19:3d:1a: f4:bc:0f:82:2b:17:95:70:e1:72:d6:5c:37:6e:3f:d4:dd:37: 08:19:50:2d:62:59:9b:ee:11:11:76:04:95:d4:80:2d:46:d6: b0:bc:78:f0 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUGnJmOePNTAwowIrSzkbzXRSoTmUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODY5NENEQkI1MkY0QUVBODlBRjQ2Q0E1QkZBNUE2Mzk5 NzNENzMwMjAeFw0yNTEwMTkxODQ2NDdaFw0yNTEwMjMwMTE0NDdaMDMxMTAvBgNV BAMTKEE3NTdFRDRFMjkxOEIwOTc3QkNBRTYyNkQ0NjUxRTQwNzc3REYyNTAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDG5oYPTkahESIcV3yNXuWSyyG6 /7z2bFvcsjHpZWzs9PXQjbzw1+8qkTLVuA6m3g8AbptBzasFkRZtUse+szd0qcMe ugIjFe9bKNeXMq6BOWCXr/GmlCrmr9rzj7Pd5B+V80d7F3hqcsYdJwUxqUvZkB2K Zf1Bamm8E9k4zjQ0+SXgIk2vqPqd0i8qsqj6Y7+ZQhbW93bOuk0adCS663At/JE2 pBDekrdzZxzQ2LtHCtzfD7FXkO4YOfFs+iSqOWTrs1RujO+XlKhOInvDwTFcc2WJ PU169RI9AY7+p7LlWV+ECSQg2HQGXwyFANDfF8Mw+E1H+T8DGV5FRdaw6/BHAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUp1ftTikYsJd7yuYm1GUeQHd98lAwHwYDVR0j BBgwFoAUhpTNu1L0rqia9Gylv6WmOZc9cwIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k Y2YwMGY4YS01Y2JkLTQ2MGYtYmZjNi1iZDg5NDJiNjUzN2MvMC84Njk0Q0RCQjUy RjRBRUE4OUFGNDZDQTVCRkE1QTYzOTk3M0Q3MzAyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvODY5NENEQkI1MkY0QUVBODlBRjQ2Q0E1QkZBNUE2Mzk5NzNE NzMwMi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZGNmMDBmOGEtNWNiZC00NjBmLWJm YzYtYmQ4OTQyYjY1MzdjLzAvODY5NENEQkI1MkY0QUVBODlBRjQ2Q0E1QkZBNUE2 Mzk5NzNENzMwMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEh7+UCLqR//kU4COg5skyQzZF9vEKCwMfXL b/EinoKyMSdw5WKtdCTQ4/Z0xnJTK8fcciO6/mAYSEcy8vxnqiPLjTzeav0599bQ EjU5yvJ3OC3m4upWokzitXaxKN5m5ph0moAnXaE4Xm5E15vE5m4oyo6d4PlpIYKK iodt8Pqoxvsq2qOX6eovnHNYbQ2ZnYxNfe8yz5pM0/4PRTPKNc2X17VGwvKijpm/ VozdecBuwBAOxKgebPJyqrA4dKyeWAuLaevBLZ93yb4E5M7LXtOZX+v3Vhk9GvS8 D4IrF5Vw4XLWXDduP9TdNwgZUC1iWZvuERF2BJXUgC1G1rC8ePA= -----END CERTIFICATE-----Generated at Mon Oct 20 13:05:47 2025 by rpki-client