$ rpki-client -vvf repo-rpki.idnic.net/repo/e3809384-9b1c-4f5a-aa6b-9de3b52a9c05/0/8932E25F54C4B10E2AE5B71E38D2AD4D1EE3BB11.mft File: 8932E25F54C4B10E2AE5B71E38D2AD4D1EE3BB11.mft (raw, json) Hash identifier: Stc7pAOneWhsZrkVAyvIwKm8rd+dh9kr64zcCPZNWIU= Subject key identifier: 23:B2:CC:4D:2E:E3:B0:A0:9F:05:98:AF:1A:E4:44:E7:66:3C:61:19 Authority key identifier: 89:32:E2:5F:54:C4:B1:0E:2A:E5:B7:1E:38:D2:AD:4D:1E:E3:BB:11 Certificate issuer: /CN=8932E25F54C4B10E2AE5B71E38D2AD4D1EE3BB11 Certificate serial: 4932CCFFABEE9E77E1240863E5CF0D2522FA48E2 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8932E25F54C4B10E2AE5B71E38D2AD4D1EE3BB11.cer Subject info access: rsync://repo-rpki.idnic.net/repo/e3809384-9b1c-4f5a-aa6b-9de3b52a9c05/0/8932E25F54C4B10E2AE5B71E38D2AD4D1EE3BB11.mft Manifest number: E2 Signing time: Mon 20 Oct 2025 16:20:00 +0000 Manifest this update: Mon 20 Oct 2025 16:15:00 +0000 Manifest next update: Thu 23 Oct 2025 19:05:00 +0000 Files and hashes: 1: 8932E25F54C4B10E2AE5B71E38D2AD4D1EE3BB11.crl (hash: 5Z1GVvfkzwVx78JtRvdApLYoYLgw1jV3YQBkKSNbyi4=) 2: 3130332e32392e3137302e302f32342d3234203d3e203536323631.roa (hash: AbfmsPIM39RXP9giC5KqkIRrkD9RG/QaxNfAq/KCmcs=) 3: 3130332e32392e3137312e302f32342d3234203d3e203538333738.roa (hash: VGUNPT+EvshoEIe2DkaARFh/LWXkGNwN7useeVXqqQc=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/e3809384-9b1c-4f5a-aa6b-9de3b52a9c05/0/8932E25F54C4B10E2AE5B71E38D2AD4D1EE3BB11.crl rsync://repo-rpki.idnic.net/repo/e3809384-9b1c-4f5a-aa6b-9de3b52a9c05/0/8932E25F54C4B10E2AE5B71E38D2AD4D1EE3BB11.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8932E25F54C4B10E2AE5B71E38D2AD4D1EE3BB11.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 Oct 2025 11:48:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 49:32:cc:ff:ab:ee:9e:77:e1:24:08:63:e5:cf:0d:25:22:fa:48:e2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8932E25F54C4B10E2AE5B71E38D2AD4D1EE3BB11 Validity Not Before: Oct 20 16:15:00 2025 GMT Not After : Oct 23 19:05:00 2025 GMT Subject: CN=23B2CC4D2EE3B0A09F0598AF1AE444E7663C6119 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:f7:20:9c:21:25:ea:54:ea:e9:14:c5:8d:65: 2c:e8:71:27:37:15:72:85:e4:a1:d1:32:65:1e:00: b4:df:73:3c:9c:27:04:af:93:59:d0:b3:f4:62:5a: 90:26:d7:20:6a:c3:e7:5b:3b:b7:1f:78:ed:1e:ba: 2b:98:cc:65:8d:37:84:0e:7a:04:11:38:29:c7:cc: ce:7f:14:bf:29:ff:3e:4a:7b:a5:c1:fc:c3:20:5a: fb:76:c5:b9:eb:9b:24:ba:14:24:93:61:bb:9c:43: 4c:37:77:84:b0:92:c4:f2:7a:49:fe:d0:90:21:67: 7d:71:1c:2d:05:2d:b7:84:ae:9f:3e:a2:fe:39:96: d4:c1:c9:a5:85:49:b3:42:23:a8:d8:2a:db:19:68: a6:a7:4d:fa:9e:35:57:fb:1c:35:b8:e3:c3:ef:76: 99:d8:ef:ce:e9:b6:f4:2f:d5:8f:62:ec:43:30:5a: 31:8f:96:12:b0:7a:51:2e:da:12:65:2e:e9:26:35: 4b:81:c9:96:eb:85:cb:27:f0:35:bc:f6:14:76:3d: d9:b2:ce:a0:91:fe:71:3e:81:2d:9b:c5:fe:7d:cf: 9f:40:c5:f4:6c:b1:8e:35:b2:df:2d:53:9b:3e:0d: ce:16:2e:1c:04:18:6a:07:12:bc:34:98:6e:0e:9b: b3:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:B2:CC:4D:2E:E3:B0:A0:9F:05:98:AF:1A:E4:44:E7:66:3C:61:19 X509v3 Authority Key Identifier: keyid:89:32:E2:5F:54:C4:B1:0E:2A:E5:B7:1E:38:D2:AD:4D:1E:E3:BB:11 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/e3809384-9b1c-4f5a-aa6b-9de3b52a9c05/0/8932E25F54C4B10E2AE5B71E38D2AD4D1EE3BB11.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8932E25F54C4B10E2AE5B71E38D2AD4D1EE3BB11.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e3809384-9b1c-4f5a-aa6b-9de3b52a9c05/0/8932E25F54C4B10E2AE5B71E38D2AD4D1EE3BB11.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3f:49:df:b0:e9:5f:18:1b:25:e1:e8:3a:e3:5a:6a:ba:42:0d: 46:6b:78:bb:5f:42:be:0c:e7:6e:11:0d:38:09:fc:5b:30:0e: 0c:4f:17:de:98:14:91:6c:6c:0d:f2:f8:60:d8:a1:d1:95:af: 6a:85:1f:74:e4:10:70:72:df:97:36:67:c8:55:fa:9a:33:d2: d1:98:cc:65:8c:bd:36:d0:0c:f0:4d:ee:0a:fc:c0:40:d3:fa: 23:8d:59:51:a1:7f:4b:94:b1:89:ad:eb:34:60:38:e8:ec:8d: 6a:63:9c:fc:6e:d2:5a:53:ad:12:3b:8c:d1:d7:59:67:21:22: a5:94:70:06:b6:c9:c4:a1:b6:ce:79:23:ed:b1:ef:ac:8c:66: bd:8a:78:fe:7f:1e:9a:ce:98:2c:a9:c4:e8:1f:9a:8d:d3:aa: d1:22:cc:bf:c8:9f:ef:d2:ad:e7:d8:35:aa:83:68:29:4b:6a: 40:f4:5c:ed:f0:f7:be:58:36:4c:fd:d3:22:10:f4:78:96:31: f4:49:1f:3a:cb:88:e6:a9:69:f1:0a:10:99:2d:ea:99:e6:d9: 92:f7:b7:91:0b:6f:3f:0b:55:c9:38:b5:4d:c5:af:a9:ec:bd: a7:77:aa:b1:93:8f:23:99:c2:68:e9:bd:7e:05:ba:47:8f:ef: 26:09:da:8f -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUSTLM/6vunnfhJAhj5c8NJSL6SOIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODkzMkUyNUY1NEM0QjEwRTJBRTVCNzFFMzhEMkFENEQx RUUzQkIxMTAeFw0yNTEwMjAxNjE1MDBaFw0yNTEwMjMxOTA1MDBaMDMxMTAvBgNV BAMTKDIzQjJDQzREMkVFM0IwQTA5RjA1OThBRjFBRTQ0NEU3NjYzQzYxMTkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDC9yCcISXqVOrpFMWNZSzocSc3 FXKF5KHRMmUeALTfczycJwSvk1nQs/RiWpAm1yBqw+dbO7cfeO0euiuYzGWNN4QO egQROCnHzM5/FL8p/z5Ke6XB/MMgWvt2xbnrmyS6FCSTYbucQ0w3d4SwksTyekn+ 0JAhZ31xHC0FLbeErp8+ov45ltTByaWFSbNCI6jYKtsZaKanTfqeNVf7HDW448Pv dpnY787ptvQv1Y9i7EMwWjGPlhKwelEu2hJlLukmNUuByZbrhcsn8DW89hR2Pdmy zqCR/nE+gS2bxf59z59AxfRssY41st8tU5s+Dc4WLhwEGGoHErw0mG4Om7PLAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUI7LMTS7jsKCfBZivGuRE52Y8YRkwHwYDVR0j BBgwFoAUiTLiX1TEsQ4q5bceONKtTR7juxEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l MzgwOTM4NC05YjFjLTRmNWEtYWE2Yi05ZGUzYjUyYTljMDUvMC84OTMyRTI1RjU0 QzRCMTBFMkFFNUI3MUUzOEQyQUQ0RDFFRTNCQjExLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvODkzMkUyNUY1NEM0QjEwRTJBRTVCNzFFMzhEMkFENEQxRUUz QkIxMS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZTM4MDkzODQtOWIxYy00ZjVhLWFh NmItOWRlM2I1MmE5YzA1LzAvODkzMkUyNUY1NEM0QjEwRTJBRTVCNzFFMzhEMkFE NEQxRUUzQkIxMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAD9J37DpXxgbJeHoOuNaarpCDUZreLtfQr4M 524RDTgJ/FswDgxPF96YFJFsbA3y+GDYodGVr2qFH3TkEHBy35c2Z8hV+poz0tGY zGWMvTbQDPBN7gr8wEDT+iONWVGhf0uUsYmt6zRgOOjsjWpjnPxu0lpTrRI7jNHX WWchIqWUcAa2ycShts55I+2x76yMZr2KeP5/HprOmCypxOgfmo3TqtEizL/In+/S refYNaqDaClLakD0XO3w975YNkz90yIQ9HiWMfRJHzrLiOapafEKEJkt6pnm2ZL3 t5ELbz8LVck4tU3Fr6nsvad3qrGTjyOZwmjpvX4FukeP7yYJ2o8= -----END CERTIFICATE-----Generated at Mon Oct 20 21:32:02 2025 by rpki-client