$ rpki-client -vvf repo-rpki.idnic.net/repo/e5413ff4-202b-4999-b45d-73c972f10116/0/8FC4899CA3D612A45C1C1DC02A21F63372DAEDD6.mft File: 8FC4899CA3D612A45C1C1DC02A21F63372DAEDD6.mft (raw, json) Hash identifier: wbD2xaWg4hfXeNpM+rHaH1bIFVWcQZFZB03dtfBxbYE= Subject key identifier: B3:2D:2A:BD:A1:48:37:EC:D0:08:83:A1:15:5A:63:31:53:89:9F:DD Authority key identifier: 8F:C4:89:9C:A3:D6:12:A4:5C:1C:1D:C0:2A:21:F6:33:72:DA:ED:D6 Certificate issuer: /CN=8FC4899CA3D612A45C1C1DC02A21F63372DAEDD6 Certificate serial: 5A94B9DD1FAE7472D8E4E02BEA4BFEC6842946FF Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8FC4899CA3D612A45C1C1DC02A21F63372DAEDD6.cer Subject info access: rsync://repo-rpki.idnic.net/repo/e5413ff4-202b-4999-b45d-73c972f10116/0/8FC4899CA3D612A45C1C1DC02A21F63372DAEDD6.mft Manifest number: 03F9 Signing time: Sun 19 Oct 2025 22:42:08 +0000 Manifest this update: Sun 19 Oct 2025 22:37:08 +0000 Manifest next update: Thu 23 Oct 2025 00:53:08 +0000 Files and hashes: 1: 8FC4899CA3D612A45C1C1DC02A21F63372DAEDD6.crl (hash: eaW430pcC8p12UVsNDZN+Q8CoHGxtAHeQYM6SYGxpw4=) 2: 323430343a636163303a3a2f33322d3332203d3e20313339343137.roa (hash: U8X775Erg4KvjSwclcGWHuukxGyQmMyExSHIbSXOqZk=) 3: 3130332e3133382e3131362e302f32342d3234203d3e20313339343137.roa (hash: JzP3prHOgFH/3pcbrciCFSrBpBQbgCsXcDvrDwP8+gk=) 4: 323430343a636163303a6462353a3a2f34382d3438203d3e20313339343137.roa (hash: Dbjg+vJVIA/12edzQmA2oSGprW6vIebqnxwMgbbyHSg=) 5: 323430343a636163303a3164353a3a2f34382d3438203d3e20313339343137.roa (hash: oRfT4X0Sy9tnBNiJsxtxMTFV7eQ+myy/o8BOZoNv2r8=) 6: 323430343a636163303a313164353a3a2f34382d3438203d3e20313339343137.roa (hash: lN6IUo8XcirGXXI7zultPSLQfKt0KthPpzYWW5DChjw=) 7: 323430343a636163303a666630303a3a2f34302d3430203d3e20313339343137.roa (hash: NL2aJR33roSrH0rfHxsWPH389zRfhX/C1lq5KI784/M=) 8: 323430343a636163303a313030303a3a2f34382d3438203d3e20313339343137.roa (hash: mLEiuQCorcJxBHY4wKeDm97Zmemknme8ExMbOOO5lWE=) 9: 323430343a636163303a316135623a3a2f34382d3438203d3e20313339343137.roa (hash: XIq5Jxfb9ma1VO6ZcqWrbd6msJG9iOe53aiAMMFJVTU=) 10: 323430343a636163303a633032653a3a2f34382d3438203d3e20313339343137.roa (hash: TBR11DrPkyQgDEOjgsvbiFDryM9x2tI6poq7H38GvyM=) 11: 3130332e3133382e3131372e302f32342d3234203d3e20313339343137.roa (hash: HvZ4UYj4GoZLl8NmzF+1Ghc67KVbsVnEc2wguYPDAT4=) 12: 323430343a636163303a626162653a3a2f34382d3438203d3e20313339343137.roa (hash: ZZvd3DR6EuZwjhunUnqDOW5iI+a8OxR4MhiwHS29Yuo=) 13: 323430343a636163303a6433353a3a2f34382d3438203d3e20313339343137.roa (hash: FMTDgQIzYg7LkyNw3U8hdH5e4+pcbdgl2jE3AQpixqA=) 14: 323430343a636163303a3a2f34382d3438203d3e20313339343137.roa (hash: e4FelqGd8iSRDSYch9869PAfm5c/LDLNH50WEwKvgAs=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/e5413ff4-202b-4999-b45d-73c972f10116/0/8FC4899CA3D612A45C1C1DC02A21F63372DAEDD6.crl rsync://repo-rpki.idnic.net/repo/e5413ff4-202b-4999-b45d-73c972f10116/0/8FC4899CA3D612A45C1C1DC02A21F63372DAEDD6.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8FC4899CA3D612A45C1C1DC02A21F63372DAEDD6.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 Oct 2025 00:53:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5a:94:b9:dd:1f:ae:74:72:d8:e4:e0:2b:ea:4b:fe:c6:84:29:46:ff Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8FC4899CA3D612A45C1C1DC02A21F63372DAEDD6 Validity Not Before: Oct 19 22:37:08 2025 GMT Not After : Oct 23 00:53:08 2025 GMT Subject: CN=B32D2ABDA14837ECD00883A1155A633153899FDD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f3:93:34:62:70:fc:ff:d8:5f:14:25:58:93:3b: 72:b9:d8:a2:d2:1c:5a:1c:d4:8d:8c:e5:08:9f:6f: f3:d2:60:8c:80:2c:8a:61:da:dc:11:13:d3:59:3f: b7:93:50:e7:d2:4a:23:d4:d3:ab:fa:b5:c0:f6:0e: e6:13:62:3f:74:96:4d:74:37:a4:e7:da:35:b1:ed: ea:2c:2d:4a:a5:d6:89:d5:66:56:a5:f3:ae:e2:a7: 63:ea:3f:25:1f:17:2b:8b:98:75:49:18:a0:ea:17: 99:75:ce:09:ca:9f:c7:2d:c7:89:47:78:27:15:dc: b9:d5:ae:bc:96:66:e5:7d:0c:4b:9d:aa:79:10:a9: 89:c3:cf:48:7e:33:c2:a2:53:53:bf:93:46:6f:61: 3d:28:fc:b6:a8:eb:20:b6:26:d8:de:6b:ec:e3:b3: e3:fb:18:47:44:89:0a:c4:bd:a7:ac:9e:84:95:51: 52:87:27:8a:63:dd:b0:0a:0a:70:2a:c1:3d:36:32: 6a:c7:f7:35:7f:16:66:98:e6:c0:da:cd:53:26:34: 15:10:20:f0:3b:5c:26:e4:2b:9c:ec:19:7c:9e:31: 7b:08:86:d7:2f:25:cc:f2:03:de:63:75:bc:3e:2f: 7d:a3:14:24:de:28:2a:6e:ce:f9:bc:00:8a:41:de: 82:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B3:2D:2A:BD:A1:48:37:EC:D0:08:83:A1:15:5A:63:31:53:89:9F:DD X509v3 Authority Key Identifier: keyid:8F:C4:89:9C:A3:D6:12:A4:5C:1C:1D:C0:2A:21:F6:33:72:DA:ED:D6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/e5413ff4-202b-4999-b45d-73c972f10116/0/8FC4899CA3D612A45C1C1DC02A21F63372DAEDD6.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8FC4899CA3D612A45C1C1DC02A21F63372DAEDD6.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e5413ff4-202b-4999-b45d-73c972f10116/0/8FC4899CA3D612A45C1C1DC02A21F63372DAEDD6.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 32:4e:80:38:64:97:d7:15:5c:e1:7f:18:94:cc:68:66:ff:ad: af:59:d9:8c:3d:98:2d:91:1e:9f:b5:7e:b3:d4:5b:98:1b:10: d4:59:c4:9c:54:1a:1d:99:1f:1c:5c:6e:19:f9:a5:98:9e:98: 93:fe:99:9e:25:9b:0c:ec:f1:05:1d:cc:de:5c:fb:a3:1d:64: 14:27:fb:dc:c9:9b:6b:36:01:06:86:23:06:8b:fc:aa:11:36: c0:a3:15:9a:ab:4c:aa:b6:3f:8f:3b:25:62:36:a3:c1:90:a6: ce:3e:b9:4b:e0:29:30:01:64:f6:3f:76:a9:54:e6:c0:fe:62: fc:bd:42:c4:8a:a3:2c:b9:f8:fa:ee:96:41:5a:e2:8e:3c:79: 38:1b:b3:7c:d0:ce:0a:90:60:0a:7e:c7:3d:4e:8c:8e:0c:d4: 5a:fc:01:bf:61:a5:01:82:1e:4a:c3:d6:9c:74:fb:f1:2c:15: 88:19:55:7d:71:4e:77:ba:81:12:82:62:7d:33:8b:35:fb:f8: 0b:ce:d3:85:57:d9:4b:2e:69:98:92:43:dc:92:a0:c2:00:7a: 10:b2:12:19:be:47:d3:86:f4:12:18:cf:f6:f0:ec:b8:57:1e: e0:f3:51:01:65:4f:c1:55:32:47:d1:d0:c6:69:5e:6c:8f:70: fc:78:7f:83 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUWpS53R+udHLY5OAr6kv+xoQpRv8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEZDNDg5OUNBM0Q2MTJBNDVDMUMxREMwMkEyMUY2MzM3 MkRBRURENjAeFw0yNTEwMTkyMjM3MDhaFw0yNTEwMjMwMDUzMDhaMDMxMTAvBgNV BAMTKEIzMkQyQUJEQTE0ODM3RUNEMDA4ODNBMTE1NUE2MzMxNTM4OTlGREQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDzkzRicPz/2F8UJViTO3K52KLS HFoc1I2M5Qifb/PSYIyALIph2twRE9NZP7eTUOfSSiPU06v6tcD2DuYTYj90lk10 N6Tn2jWx7eosLUql1onVZlal867ip2PqPyUfFyuLmHVJGKDqF5l1zgnKn8ctx4lH eCcV3LnVrryWZuV9DEudqnkQqYnDz0h+M8KiU1O/k0ZvYT0o/Lao6yC2Jtjea+zj s+P7GEdEiQrEvaesnoSVUVKHJ4pj3bAKCnAqwT02MmrH9zV/FmaY5sDazVMmNBUQ IPA7XCbkK5zsGXyeMXsIhtcvJczyA95jdbw+L32jFCTeKCpuzvm8AIpB3oIDAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUsy0qvaFIN+zQCIOhFVpjMVOJn90wHwYDVR0j BBgwFoAUj8SJnKPWEqRcHB3AKiH2M3La7dYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l NTQxM2ZmNC0yMDJiLTQ5OTktYjQ1ZC03M2M5NzJmMTAxMTYvMC84RkM0ODk5Q0Ez RDYxMkE0NUMxQzFEQzAyQTIxRjYzMzcyREFFREQ2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOEZDNDg5OUNBM0Q2MTJBNDVDMUMxREMwMkEyMUY2MzM3MkRB RURENi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZTU0MTNmZjQtMjAyYi00OTk5LWI0 NWQtNzNjOTcyZjEwMTE2LzAvOEZDNDg5OUNBM0Q2MTJBNDVDMUMxREMwMkEyMUY2 MzM3MkRBRURENi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADJOgDhkl9cVXOF/GJTMaGb/ra9Z2Yw9mC2R Hp+1frPUW5gbENRZxJxUGh2ZHxxcbhn5pZiemJP+mZ4lmwzs8QUdzN5c+6MdZBQn +9zJm2s2AQaGIwaL/KoRNsCjFZqrTKq2P487JWI2o8GQps4+uUvgKTABZPY/dqlU 5sD+Yvy9QsSKoyy5+PrulkFa4o48eTgbs3zQzgqQYAp+xz1OjI4M1Fr8Ab9hpQGC HkrD1px0+/EsFYgZVX1xTne6gRKCYn0zizX7+AvO04VX2UsuaZiSQ9ySoMIAehCy Ehm+R9OG9BIYz/bw7LhXHuDzUQFlT8FVMkfR0MZpXmyPcPx4f4M= -----END CERTIFICATE-----Generated at Mon Oct 20 10:37:43 2025 by rpki-client