$ rpki-client -vvf repo-rpki.idnic.net/repo/e8ced18d-a7cc-4b44-af4a-85f304f9eb6c/0/08683ED5C748B79A346EF705A2DCF809A31C75DF.mft File: 08683ED5C748B79A346EF705A2DCF809A31C75DF.mft (raw, json) Hash identifier: KDNzfahfLzLShPbgw/5u+Tk8twCQA3h/Amjzh/N0hfY= Subject key identifier: C8:78:80:9E:37:CC:DB:B7:09:0D:95:E5:4E:89:05:AA:AD:94:3F:39 Authority key identifier: 08:68:3E:D5:C7:48:B7:9A:34:6E:F7:05:A2:DC:F8:09:A3:1C:75:DF Certificate issuer: /CN=08683ED5C748B79A346EF705A2DCF809A31C75DF Certificate serial: 2DF65E3009D83A11C0714FE1E3E96F17BA86DA0F Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/08683ED5C748B79A346EF705A2DCF809A31C75DF.cer Subject info access: rsync://repo-rpki.idnic.net/repo/e8ced18d-a7cc-4b44-af4a-85f304f9eb6c/0/08683ED5C748B79A346EF705A2DCF809A31C75DF.mft Manifest number: EE Signing time: Sat 18 Oct 2025 19:11:38 +0000 Manifest this update: Sat 18 Oct 2025 19:06:38 +0000 Manifest next update: Tue 21 Oct 2025 19:14:38 +0000 Files and hashes: 1: 08683ED5C748B79A346EF705A2DCF809A31C75DF.crl (hash: I2k/y3hmprtZxHDvnTqWBOvN5gq5gDnNC7pQ50ZR8ok=) 2: 3135372e32302e3233332e302f32342d3234203d3e20313532343339.roa (hash: 7TI4pzLcqyxuF39YuyeEo0KkPf4qVThK/j4OGDR/rss=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/e8ced18d-a7cc-4b44-af4a-85f304f9eb6c/0/08683ED5C748B79A346EF705A2DCF809A31C75DF.crl rsync://repo-rpki.idnic.net/repo/e8ced18d-a7cc-4b44-af4a-85f304f9eb6c/0/08683ED5C748B79A346EF705A2DCF809A31C75DF.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/08683ED5C748B79A346EF705A2DCF809A31C75DF.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 21 Oct 2025 19:14:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2d:f6:5e:30:09:d8:3a:11:c0:71:4f:e1:e3:e9:6f:17:ba:86:da:0f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=08683ED5C748B79A346EF705A2DCF809A31C75DF Validity Not Before: Oct 18 19:06:38 2025 GMT Not After : Oct 21 19:14:38 2025 GMT Subject: CN=C878809E37CCDBB7090D95E54E8905AAAD943F39 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:ed:05:60:90:15:83:20:db:88:89:4f:a3:c6: eb:67:17:a8:bd:7f:a2:cd:a9:f4:97:8d:81:3d:1d: 28:0b:f4:6d:4a:9a:0e:a8:31:91:16:f7:7d:3f:42: e6:d0:ac:c4:d4:41:ce:19:f8:d5:79:fb:50:fe:3f: 68:e2:3c:8b:c4:ed:ff:fc:14:0a:e8:87:2f:aa:26: 58:4c:29:0e:5f:6f:95:40:31:04:bf:d7:5f:f2:18: 18:68:12:04:23:56:1b:b4:df:96:14:43:34:17:62: 01:0b:0d:70:ef:c7:7a:e6:b8:c1:93:4e:08:03:c2: dc:f6:d8:91:0f:68:b1:81:a3:df:09:95:01:71:9a: a1:a4:f9:49:59:8b:f7:aa:08:8b:92:5e:e3:f2:03: 99:c5:1f:b2:cb:62:59:a0:1e:50:3f:83:ed:78:a7: 7f:62:b5:5b:5c:ce:3e:1f:24:a5:6e:53:5c:99:fb: ee:1f:94:b9:74:8d:7f:2a:0d:b5:ba:64:5f:7a:11: b9:61:ca:35:9e:47:61:ec:ed:a5:e7:7f:cb:a3:df: b4:08:96:45:00:a1:ac:a5:cc:00:2e:66:fb:d0:4e: fc:b8:f8:8a:a4:6d:eb:af:b3:5a:32:7c:c4:a2:4f: ae:25:03:08:29:97:68:e2:ac:ff:b3:f6:e4:9e:aa: 4b:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C8:78:80:9E:37:CC:DB:B7:09:0D:95:E5:4E:89:05:AA:AD:94:3F:39 X509v3 Authority Key Identifier: keyid:08:68:3E:D5:C7:48:B7:9A:34:6E:F7:05:A2:DC:F8:09:A3:1C:75:DF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/e8ced18d-a7cc-4b44-af4a-85f304f9eb6c/0/08683ED5C748B79A346EF705A2DCF809A31C75DF.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/08683ED5C748B79A346EF705A2DCF809A31C75DF.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e8ced18d-a7cc-4b44-af4a-85f304f9eb6c/0/08683ED5C748B79A346EF705A2DCF809A31C75DF.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 30:8d:8a:62:91:a3:e7:d3:cf:d1:2b:cd:5b:81:48:2f:54:7f: 1a:4a:f0:11:af:d0:51:ed:20:5e:f0:82:5f:13:de:65:8b:d1: 94:9e:ce:d0:4e:fc:21:4d:2e:46:c7:d5:cd:ff:cf:38:84:c0: 44:4e:dd:ef:43:4a:5e:e8:e9:74:ae:3a:98:51:c3:aa:47:8e: ba:c1:29:50:71:b9:8f:89:1b:96:32:e1:c6:c2:dd:0b:ae:5a: b5:c8:dc:f5:ef:82:6d:af:12:3d:c4:c9:c6:94:57:e2:ab:83: 5c:48:01:84:f2:41:3b:7b:c6:c2:a2:05:b4:17:cc:05:2e:23: ed:42:0f:06:9d:6a:9b:df:1e:8c:f5:28:d5:e6:31:37:f4:f1: 52:e3:05:6d:4b:26:79:6e:5f:1f:fa:29:a9:8b:60:37:21:de: 98:b0:1b:49:74:d0:5a:6c:80:2a:0c:df:7c:f0:b0:27:37:e0: eb:1f:74:7a:f6:4b:16:64:54:11:3c:5f:0b:50:1f:ab:cb:89: b8:3c:36:f7:fd:c2:a7:22:cb:a7:4e:f4:e7:3d:ec:96:c9:ea: 64:9b:53:24:31:90:67:ae:87:14:e2:f5:58:32:91:a0:a6:7b: 1e:45:44:bf:2b:0a:6d:fe:4a:53:9f:32:ec:77:c4:43:1e:b0: d3:5a:0a:9c -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIULfZeMAnYOhHAcU/h4+lvF7qG2g8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDg2ODNFRDVDNzQ4Qjc5QTM0NkVGNzA1QTJEQ0Y4MDlB MzFDNzVERjAeFw0yNTEwMTgxOTA2MzhaFw0yNTEwMjExOTE0MzhaMDMxMTAvBgNV BAMTKEM4Nzg4MDlFMzdDQ0RCQjcwOTBEOTVFNTRFODkwNUFBQUQ5NDNGMzkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDD7QVgkBWDINuIiU+jxutnF6i9 f6LNqfSXjYE9HSgL9G1Kmg6oMZEW930/QubQrMTUQc4Z+NV5+1D+P2jiPIvE7f/8 FArohy+qJlhMKQ5fb5VAMQS/11/yGBhoEgQjVhu035YUQzQXYgELDXDvx3rmuMGT TggDwtz22JEPaLGBo98JlQFxmqGk+UlZi/eqCIuSXuPyA5nFH7LLYlmgHlA/g+14 p39itVtczj4fJKVuU1yZ++4flLl0jX8qDbW6ZF96EblhyjWeR2Hs7aXnf8uj37QI lkUAoaylzAAuZvvQTvy4+Iqkbeuvs1oyfMSiT64lAwgpl2jirP+z9uSeqksjAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUyHiAnjfM27cJDZXlTokFqq2UPzkwHwYDVR0j BBgwFoAUCGg+1cdIt5o0bvcFotz4CaMcdd8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l OGNlZDE4ZC1hN2NjLTRiNDQtYWY0YS04NWYzMDRmOWViNmMvMC8wODY4M0VENUM3 NDhCNzlBMzQ2RUY3MDVBMkRDRjgwOUEzMUM3NURGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvMDg2ODNFRDVDNzQ4Qjc5QTM0NkVGNzA1QTJEQ0Y4MDlBMzFD NzVERi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZThjZWQxOGQtYTdjYy00YjQ0LWFm NGEtODVmMzA0ZjllYjZjLzAvMDg2ODNFRDVDNzQ4Qjc5QTM0NkVGNzA1QTJEQ0Y4 MDlBMzFDNzVERi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADCNimKRo+fTz9ErzVuBSC9UfxpK8BGv0FHt IF7wgl8T3mWL0ZSeztBO/CFNLkbH1c3/zziEwERO3e9DSl7o6XSuOphRw6pHjrrB KVBxuY+JG5Yy4cbC3QuuWrXI3PXvgm2vEj3EycaUV+Krg1xIAYTyQTt7xsKiBbQX zAUuI+1CDwadapvfHoz1KNXmMTf08VLjBW1LJnluXx/6KamLYDch3piwG0l00Fps gCoM33zwsCc34OsfdHr2SxZkVBE8XwtQH6vLibg8Nvf9wqciy6dO9Oc97JbJ6mSb UyQxkGeuhxTi9VgykaCmex5FRL8rCm3+SlOfMux3xEMesNNaCpw= -----END CERTIFICATE-----Generated at Mon Oct 20 13:15:58 2025 by rpki-client