$ rpki-client -vvf repo-rpki.idnic.net/repo/dfee82b7-c182-4e83-897c-e00f3ce1b0d2/0/08E555759AA0C18576364C83261B6CEA4BCF0CCB.mft File: 08E555759AA0C18576364C83261B6CEA4BCF0CCB.mft (raw, json) Hash identifier: nK/esfYU8z3i32fF593dXdj/F0oOfbzuPvTusdGWS3c= Subject key identifier: 64:E4:71:E7:64:F6:6A:76:85:DA:96:68:55:F3:B0:E5:1F:35:94:FF Authority key identifier: 08:E5:55:75:9A:A0:C1:85:76:36:4C:83:26:1B:6C:EA:4B:CF:0C:CB Certificate issuer: /CN=08E555759AA0C18576364C83261B6CEA4BCF0CCB Certificate serial: 62060404D129F44A3DABADAE253E1FD1C9860389 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/08E555759AA0C18576364C83261B6CEA4BCF0CCB.cer Subject info access: rsync://repo-rpki.idnic.net/repo/dfee82b7-c182-4e83-897c-e00f3ce1b0d2/0/08E555759AA0C18576364C83261B6CEA4BCF0CCB.mft Manifest number: 01FD Signing time: Sun 19 Oct 2025 23:22:20 +0000 Manifest this update: Sun 19 Oct 2025 23:17:20 +0000 Manifest next update: Thu 23 Oct 2025 08:13:20 +0000 Files and hashes: 1: 08E555759AA0C18576364C83261B6CEA4BCF0CCB.crl (hash: BOqOIw61jUEn67YiLk/jSXETFaBIG2+prl/EukO3MsU=) 2: 3130332e3232392e3138342e302f32332d3233203d3e2039333431.roa (hash: 7OzNX15Yuahy0/8eEN1/yzezZR+83/JHbFFyRpwzwPM=) 3: 3130332e3232392e3138352e302f32342d3234203d3e2039333431.roa (hash: bYUXew86UoI4/31WSjYGIt5ZDZ5ojqbj3fo7ufpNm20=) 4: 3130332e3232392e3138342e302f32342d3234203d3e2039333431.roa (hash: wfRjzL8bQ7dLLloZedRWystpfn4vijpj4SNcPfcqhxI=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/dfee82b7-c182-4e83-897c-e00f3ce1b0d2/0/08E555759AA0C18576364C83261B6CEA4BCF0CCB.crl rsync://repo-rpki.idnic.net/repo/dfee82b7-c182-4e83-897c-e00f3ce1b0d2/0/08E555759AA0C18576364C83261B6CEA4BCF0CCB.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/08E555759AA0C18576364C83261B6CEA4BCF0CCB.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 Oct 2025 08:13:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 62:06:04:04:d1:29:f4:4a:3d:ab:ad:ae:25:3e:1f:d1:c9:86:03:89 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=08E555759AA0C18576364C83261B6CEA4BCF0CCB Validity Not Before: Oct 19 23:17:20 2025 GMT Not After : Oct 23 08:13:20 2025 GMT Subject: CN=64E471E764F66A7685DA966855F3B0E51F3594FF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:5b:ac:26:2a:0d:bf:00:23:6b:d6:e1:72:c2: a0:63:87:cf:e4:20:9f:8d:8d:d3:8f:f8:78:e5:14: 34:6f:e2:87:d9:bf:cc:68:5f:dd:12:f4:b3:46:a8: 3c:0b:1d:c5:bb:cd:c7:85:65:17:ea:e7:5d:fa:8f: cb:20:c6:22:2b:96:bb:00:c4:a1:56:bc:9f:22:6d: 8b:2a:1c:0b:b2:27:2c:d1:c2:e0:0b:39:35:16:ef: 9b:1e:e4:29:56:ac:64:ac:8f:d3:55:ca:f9:d2:63: ef:bf:f1:1c:50:44:8c:00:cd:2d:f9:d7:78:d1:1d: 58:bb:8a:f4:67:9c:b9:64:be:a0:d6:d9:b9:3c:fd: ad:02:97:e8:92:c4:a7:44:c5:19:9d:44:7f:73:89: 22:e7:ec:0f:6d:97:d0:a7:3f:eb:0c:56:37:99:d0: a0:74:72:25:c4:b3:64:8a:55:63:8d:dd:a0:ae:e1: ad:e0:22:92:a2:a4:b8:08:09:4a:cf:6e:c4:85:9a: e5:30:ff:56:56:dc:62:ab:8f:16:7c:73:3f:3e:4b: 22:2e:d0:0a:f2:c3:69:70:9f:ad:61:81:b7:d1:5c: 8f:04:14:35:5c:38:45:ff:2b:15:a2:1b:13:5b:95: f9:8a:70:56:e6:7d:c1:ec:a9:e2:7a:fd:d2:9d:96: c7:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 64:E4:71:E7:64:F6:6A:76:85:DA:96:68:55:F3:B0:E5:1F:35:94:FF X509v3 Authority Key Identifier: keyid:08:E5:55:75:9A:A0:C1:85:76:36:4C:83:26:1B:6C:EA:4B:CF:0C:CB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/dfee82b7-c182-4e83-897c-e00f3ce1b0d2/0/08E555759AA0C18576364C83261B6CEA4BCF0CCB.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/08E555759AA0C18576364C83261B6CEA4BCF0CCB.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/dfee82b7-c182-4e83-897c-e00f3ce1b0d2/0/08E555759AA0C18576364C83261B6CEA4BCF0CCB.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9b:f9:5d:fa:fb:96:6b:98:26:c2:89:bf:ab:a5:39:01:4c:f3: ec:75:c5:e6:35:2a:85:fc:7b:62:22:7c:99:cf:f3:a2:ca:06: 08:08:16:e1:29:6d:fb:6b:21:7e:ed:99:ae:18:65:2b:45:dc: 8c:b1:56:bb:58:ca:48:eb:dc:67:ef:78:a9:16:ac:89:5b:2b: 1a:f5:17:c7:b1:80:01:c8:b7:0f:8e:bd:18:b9:6b:73:15:27: 6e:13:f0:24:d6:dc:27:69:a5:57:6f:f7:44:9a:9e:65:2d:57: 68:b1:5f:63:01:4d:45:7f:99:a2:5f:e6:c1:c6:d6:04:8c:45: 11:6a:84:bc:06:74:b9:85:5f:e6:0c:59:e1:e9:d8:9d:74:98: 65:76:c7:cf:78:da:4f:ab:96:4e:a3:7d:0b:e6:cd:ce:11:79: ab:aa:e8:1d:01:d6:95:48:ad:51:1a:c9:75:e3:5f:f0:7c:de: e0:c2:90:53:3e:d4:ec:ee:2a:75:ae:37:61:e5:e8:df:55:20: 0d:36:44:19:08:a7:b9:6b:45:5c:80:06:e2:25:75:de:78:ef: cc:d2:25:a6:84:e9:c7:ef:73:87:ac:de:5b:06:9b:6a:85:19: 30:42:0e:db:b0:74:22:01:c7:90:fe:16:4a:22:9f:de:94:79: e2:fc:e9:a0 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUYgYEBNEp9Eo9q62uJT4f0cmGA4kwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDhFNTU1NzU5QUEwQzE4NTc2MzY0QzgzMjYxQjZDRUE0 QkNGMENDQjAeFw0yNTEwMTkyMzE3MjBaFw0yNTEwMjMwODEzMjBaMDMxMTAvBgNV BAMTKDY0RTQ3MUU3NjRGNjZBNzY4NURBOTY2ODU1RjNCMEU1MUYzNTk0RkYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDWW6wmKg2/ACNr1uFywqBjh8/k IJ+NjdOP+HjlFDRv4ofZv8xoX90S9LNGqDwLHcW7zceFZRfq5136j8sgxiIrlrsA xKFWvJ8ibYsqHAuyJyzRwuALOTUW75se5ClWrGSsj9NVyvnSY++/8RxQRIwAzS35 13jRHVi7ivRnnLlkvqDW2bk8/a0Cl+iSxKdExRmdRH9ziSLn7A9tl9CnP+sMVjeZ 0KB0ciXEs2SKVWON3aCu4a3gIpKipLgICUrPbsSFmuUw/1ZW3GKrjxZ8cz8+SyIu 0Aryw2lwn61hgbfRXI8EFDVcOEX/KxWiGxNblfmKcFbmfcHsqeJ6/dKdlscNAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUZORx52T2anaF2pZoVfOw5R81lP8wHwYDVR0j BBgwFoAUCOVVdZqgwYV2NkyDJhts6kvPDMswDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k ZmVlODJiNy1jMTgyLTRlODMtODk3Yy1lMDBmM2NlMWIwZDIvMC8wOEU1NTU3NTlB QTBDMTg1NzYzNjRDODMyNjFCNkNFQTRCQ0YwQ0NCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMDhFNTU1NzU5QUEwQzE4NTc2MzY0QzgzMjYxQjZDRUE0QkNG MENDQi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZGZlZTgyYjctYzE4Mi00ZTgzLTg5 N2MtZTAwZjNjZTFiMGQyLzAvMDhFNTU1NzU5QUEwQzE4NTc2MzY0QzgzMjYxQjZD RUE0QkNGMENDQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJv5Xfr7lmuYJsKJv6ulOQFM8+x1xeY1KoX8 e2IifJnP86LKBggIFuEpbftrIX7tma4YZStF3IyxVrtYykjr3GfveKkWrIlbKxr1 F8exgAHItw+OvRi5a3MVJ24T8CTW3CdppVdv90SanmUtV2ixX2MBTUV/maJf5sHG 1gSMRRFqhLwGdLmFX+YMWeHp2J10mGV2x8942k+rlk6jfQvmzc4Reauq6B0B1pVI rVEayXXjX/B83uDCkFM+1OzuKnWuN2Hl6N9VIA02RBkIp7lrRVyABuIldd5478zS JaaE6cfvc4es3lsGm2qFGTBCDtuwdCIBx5D+Fkoin96UeeL86aA= -----END CERTIFICATE-----Generated at Mon Oct 20 09:29:16 2025 by rpki-client