$ rpki-client -vvf repo-rpki.idnic.net/repo/ea814507-7174-4f1e-8563-ef50370913c9/0/8284F61C774622FEC64759E6D77C9DEEB4EC69CA.mft File: 8284F61C774622FEC64759E6D77C9DEEB4EC69CA.mft (raw, json) Hash identifier: tKPX8Wt8ScaP50NODvSTZMyPnxGyz1VE+njh+X3qBSQ= Subject key identifier: BA:65:51:C1:EF:2A:73:99:3F:77:D4:6F:8C:97:DE:8F:85:6F:10:DB Authority key identifier: 82:84:F6:1C:77:46:22:FE:C6:47:59:E6:D7:7C:9D:EE:B4:EC:69:CA Certificate issuer: /CN=8284F61C774622FEC64759E6D77C9DEEB4EC69CA Certificate serial: 2DB4FAEDC00F5389DDA4829E00133C0A75B7FBCE Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8284F61C774622FEC64759E6D77C9DEEB4EC69CA.cer Subject info access: rsync://repo-rpki.idnic.net/repo/ea814507-7174-4f1e-8563-ef50370913c9/0/8284F61C774622FEC64759E6D77C9DEEB4EC69CA.mft Manifest number: 051B Signing time: Sat 18 Oct 2025 05:21:18 +0000 Manifest this update: Sat 18 Oct 2025 05:16:18 +0000 Manifest next update: Tue 21 Oct 2025 11:33:18 +0000 Files and hashes: 1: 8284F61C774622FEC64759E6D77C9DEEB4EC69CA.crl (hash: BiYRGx2o12dDT/ViVJtK8E0v82vzAObadojH9P5S2Dg=) 2: 3130332e3134312e3135342e302f32342d3234203d3e20313336383335.roa (hash: EeVS/Wotu8QiYnhwHE/NjTJ1MQmj/cQtABdAbLQgSvo=) 3: 3130332e3130302e32372e302f32342d3234203d3e20313336383335.roa (hash: UXCPnVMF20T3u89LBilCEmmt67UECY/psh8twg2H0Yw=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/ea814507-7174-4f1e-8563-ef50370913c9/0/8284F61C774622FEC64759E6D77C9DEEB4EC69CA.crl rsync://repo-rpki.idnic.net/repo/ea814507-7174-4f1e-8563-ef50370913c9/0/8284F61C774622FEC64759E6D77C9DEEB4EC69CA.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8284F61C774622FEC64759E6D77C9DEEB4EC69CA.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 21 Oct 2025 11:33:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2d:b4:fa:ed:c0:0f:53:89:dd:a4:82:9e:00:13:3c:0a:75:b7:fb:ce Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8284F61C774622FEC64759E6D77C9DEEB4EC69CA Validity Not Before: Oct 18 05:16:18 2025 GMT Not After : Oct 21 11:33:18 2025 GMT Subject: CN=BA6551C1EF2A73993F77D46F8C97DE8F856F10DB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:fb:24:86:e6:8a:2f:29:6c:35:cf:84:11:37:a3: 03:50:85:f9:4f:64:7a:29:68:04:89:6e:5f:88:57: ab:7c:c9:cf:f8:fa:7b:dd:1b:0a:bf:59:e4:76:c2: 3e:d6:48:cb:0d:48:00:3b:18:e8:2f:1f:46:43:ba: 17:c7:69:6d:2c:75:e5:b3:2e:70:c1:2a:b4:d4:ca: 5a:1e:b5:3d:08:3e:5c:f2:3c:41:e8:76:d3:9c:bb: 4a:11:e4:3f:43:30:68:b7:c6:6e:92:75:06:86:6e: 92:bd:3b:94:a9:3f:39:3b:84:56:6f:de:79:9c:b9: 34:73:d7:08:2f:cb:5e:47:e1:57:a2:40:b6:18:d8: ba:6e:7b:bd:46:b9:b5:a1:e8:48:26:96:de:45:4f: 9b:6c:64:5c:51:73:32:99:b5:ea:91:39:b9:ef:71: 9c:df:de:df:64:e4:d5:5b:24:71:05:19:34:a8:eb: f3:ad:4b:eb:3f:fe:a5:f2:0d:da:17:ae:53:cb:77: 84:69:fa:15:8d:26:29:76:e2:35:98:a2:8a:6d:bf: 4a:26:48:dc:17:1e:32:cc:87:43:55:68:dc:30:5f: 5d:92:c9:32:1a:ea:ad:76:8e:d4:1e:54:4d:7e:2a: 99:92:19:69:96:fe:4a:3d:eb:20:22:6b:dd:2d:80: ee:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BA:65:51:C1:EF:2A:73:99:3F:77:D4:6F:8C:97:DE:8F:85:6F:10:DB X509v3 Authority Key Identifier: keyid:82:84:F6:1C:77:46:22:FE:C6:47:59:E6:D7:7C:9D:EE:B4:EC:69:CA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/ea814507-7174-4f1e-8563-ef50370913c9/0/8284F61C774622FEC64759E6D77C9DEEB4EC69CA.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8284F61C774622FEC64759E6D77C9DEEB4EC69CA.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ea814507-7174-4f1e-8563-ef50370913c9/0/8284F61C774622FEC64759E6D77C9DEEB4EC69CA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7d:04:94:59:9b:64:07:7b:0e:ba:45:b2:c2:b1:a7:bd:0f:dc: dc:43:90:d8:b7:7d:1b:73:ee:27:7e:ad:5c:40:86:9b:4a:b5: 0c:fd:ee:a6:b6:0b:14:99:b5:89:87:cd:43:c0:a1:de:9d:8a: 3b:ae:47:f9:98:12:56:1f:9b:6a:ed:49:cc:d5:a8:43:1a:4c: 24:15:6e:b7:79:98:5e:6a:d1:b5:40:e8:36:05:7c:5c:4b:c2: 59:39:7a:31:0c:58:d9:7e:30:10:5f:a9:76:67:46:cf:a7:de: 52:34:9a:5c:21:30:4b:7c:51:b7:bf:f8:8f:1d:cb:f4:45:b8: 84:5b:40:2c:44:f0:02:37:3d:2b:92:2c:e4:ea:67:b6:8b:3b: ac:47:14:da:0f:f5:c6:91:27:4f:b9:3d:e1:4a:06:fe:25:b3: d0:15:1f:10:47:f9:a1:f3:7a:e7:60:8e:6a:11:ca:28:fe:ec: 79:4d:86:5e:ea:d9:0b:68:b1:53:af:a6:73:25:65:9d:1d:7c: 58:a3:61:a2:73:66:74:80:b2:ea:8b:f3:d1:91:f7:d4:0f:6d: af:09:6e:b3:03:0f:56:af:ee:6a:8b:1f:d5:88:46:19:75:e7: aa:0a:7a:bf:f3:90:d6:a5:d3:06:42:93:15:5e:51:db:1b:bc: 92:ff:b7:1c -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIULbT67cAPU4ndpIKeABM8CnW3+84wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODI4NEY2MUM3NzQ2MjJGRUM2NDc1OUU2RDc3QzlERUVC NEVDNjlDQTAeFw0yNTEwMTgwNTE2MThaFw0yNTEwMjExMTMzMThaMDMxMTAvBgNV BAMTKEJBNjU1MUMxRUYyQTczOTkzRjc3RDQ2RjhDOTdERThGODU2RjEwREIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD7JIbmii8pbDXPhBE3owNQhflP ZHopaASJbl+IV6t8yc/4+nvdGwq/WeR2wj7WSMsNSAA7GOgvH0ZDuhfHaW0sdeWz LnDBKrTUyloetT0IPlzyPEHodtOcu0oR5D9DMGi3xm6SdQaGbpK9O5SpPzk7hFZv 3nmcuTRz1wgvy15H4VeiQLYY2Lpue71GubWh6Egmlt5FT5tsZFxRczKZteqRObnv cZzf3t9k5NVbJHEFGTSo6/OtS+s//qXyDdoXrlPLd4Rp+hWNJil24jWYooptv0om SNwXHjLMh0NVaNwwX12SyTIa6q12jtQeVE1+KpmSGWmW/ko96yAia90tgO6FAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUumVRwe8qc5k/d9RvjJfej4VvENswHwYDVR0j BBgwFoAUgoT2HHdGIv7GR1nm13yd7rTsacowDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l YTgxNDUwNy03MTc0LTRmMWUtODU2My1lZjUwMzcwOTEzYzkvMC84Mjg0RjYxQzc3 NDYyMkZFQzY0NzU5RTZENzdDOURFRUI0RUM2OUNBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvODI4NEY2MUM3NzQ2MjJGRUM2NDc1OUU2RDc3QzlERUVCNEVD NjlDQS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZWE4MTQ1MDctNzE3NC00ZjFlLTg1 NjMtZWY1MDM3MDkxM2M5LzAvODI4NEY2MUM3NzQ2MjJGRUM2NDc1OUU2RDc3QzlE RUVCNEVDNjlDQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAH0ElFmbZAd7DrpFssKxp70P3NxDkNi3fRtz 7id+rVxAhptKtQz97qa2CxSZtYmHzUPAod6dijuuR/mYElYfm2rtSczVqEMaTCQV brd5mF5q0bVA6DYFfFxLwlk5ejEMWNl+MBBfqXZnRs+n3lI0mlwhMEt8Ube/+I8d y/RFuIRbQCxE8AI3PSuSLOTqZ7aLO6xHFNoP9caRJ0+5PeFKBv4ls9AVHxBH+aHz eudgjmoRyij+7HlNhl7q2QtosVOvpnMlZZ0dfFijYaJzZnSAsuqL89GR99QPba8J brMDD1av7mqLH9WIRhl156oKer/zkNal0wZCkxVeUdsbvJL/txw= -----END CERTIFICATE-----Generated at Mon Oct 20 09:31:45 2025 by rpki-client