$ rpki-client -vvf repo-rpki.idnic.net/repo/ecdae0a5-b4f6-4e08-8beb-63ebe0853df3/0/B8A9E45E7E2DEA6624140C03DE025D16B91CB9DC.mft File: B8A9E45E7E2DEA6624140C03DE025D16B91CB9DC.mft (raw, json) Hash identifier: 0nHpPbjaTPHv9lWLh3RDlpKvd11iUVAyIajfCz9B3mA= Subject key identifier: A3:D4:65:9D:F7:C9:EE:B6:61:3D:0C:FD:78:C0:F4:A4:D6:E6:00:FC Authority key identifier: B8:A9:E4:5E:7E:2D:EA:66:24:14:0C:03:DE:02:5D:16:B9:1C:B9:DC Certificate issuer: /CN=B8A9E45E7E2DEA6624140C03DE025D16B91CB9DC Certificate serial: 10EECEE22FDE52017DB205761B0AEAEB907B1C1C Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B8A9E45E7E2DEA6624140C03DE025D16B91CB9DC.cer Subject info access: rsync://repo-rpki.idnic.net/repo/ecdae0a5-b4f6-4e08-8beb-63ebe0853df3/0/B8A9E45E7E2DEA6624140C03DE025D16B91CB9DC.mft Manifest number: 0179 Signing time: Sun 19 Oct 2025 21:02:11 +0000 Manifest this update: Sun 19 Oct 2025 20:57:11 +0000 Manifest next update: Wed 22 Oct 2025 23:33:11 +0000 Files and hashes: 1: B8A9E45E7E2DEA6624140C03DE025D16B91CB9DC.crl (hash: VaV2kepKHCPSbQnXhBrNZ3YKcfJStnhM5bDmlCJwdlA=) 2: 3130332e34302e39322e302f32332d3233203d3e203633353034.roa (hash: SFyP6dQXcZeCfICHfcQqBzkquUF0rSVZjhOo/oTB3lM=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/ecdae0a5-b4f6-4e08-8beb-63ebe0853df3/0/B8A9E45E7E2DEA6624140C03DE025D16B91CB9DC.crl rsync://repo-rpki.idnic.net/repo/ecdae0a5-b4f6-4e08-8beb-63ebe0853df3/0/B8A9E45E7E2DEA6624140C03DE025D16B91CB9DC.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B8A9E45E7E2DEA6624140C03DE025D16B91CB9DC.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 Oct 2025 23:33:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10:ee:ce:e2:2f:de:52:01:7d:b2:05:76:1b:0a:ea:eb:90:7b:1c:1c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B8A9E45E7E2DEA6624140C03DE025D16B91CB9DC Validity Not Before: Oct 19 20:57:11 2025 GMT Not After : Oct 22 23:33:11 2025 GMT Subject: CN=A3D4659DF7C9EEB6613D0CFD78C0F4A4D6E600FC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:da:99:c3:bb:73:31:cf:38:ab:89:74:51:83: 84:cb:52:a5:47:00:4a:1e:ba:61:72:d4:f9:42:33: 2b:c5:fa:3c:7b:41:9b:55:79:e7:36:ea:0d:82:d4: 55:6d:ea:ea:50:54:3a:dd:7f:8c:7a:fc:84:85:22: 1a:3f:76:98:16:7e:bb:22:91:d8:5c:4b:cf:5e:47: fe:e6:bd:9a:4c:20:82:cb:56:62:a0:74:ab:e7:bc: 9e:8a:93:76:c1:eb:cb:29:6f:ab:2b:a2:9f:0a:ff: 42:d3:ff:c4:da:2d:0c:d5:89:55:83:27:31:fe:73: 74:2e:e8:52:62:db:94:2e:dc:8f:bb:8e:f6:2b:cd: f1:72:59:ce:d2:28:a8:de:cb:cf:44:af:4d:ad:eb: 2a:c2:96:6c:33:f6:b8:9d:44:e8:fd:84:f7:b8:4a: 29:92:45:49:d5:db:46:ff:dc:78:7d:44:68:7e:22: 34:a6:ef:84:a2:a5:4d:63:52:30:4f:92:6b:92:61: 96:b3:22:71:cb:67:a8:0d:b0:a0:76:ba:d8:86:9c: 9c:3f:75:21:7c:ed:1d:fc:d8:f3:75:5c:a3:14:3f: ea:08:33:0e:e4:63:69:10:b3:12:d5:0f:ae:41:84: ae:8c:ca:04:c0:ca:e9:8d:94:12:6a:13:ce:4d:bc: aa:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:D4:65:9D:F7:C9:EE:B6:61:3D:0C:FD:78:C0:F4:A4:D6:E6:00:FC X509v3 Authority Key Identifier: keyid:B8:A9:E4:5E:7E:2D:EA:66:24:14:0C:03:DE:02:5D:16:B9:1C:B9:DC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/ecdae0a5-b4f6-4e08-8beb-63ebe0853df3/0/B8A9E45E7E2DEA6624140C03DE025D16B91CB9DC.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B8A9E45E7E2DEA6624140C03DE025D16B91CB9DC.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ecdae0a5-b4f6-4e08-8beb-63ebe0853df3/0/B8A9E45E7E2DEA6624140C03DE025D16B91CB9DC.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption be:a1:ff:0e:55:61:c0:01:a9:c0:4a:d2:ad:18:1a:fe:28:69: 29:1a:3b:08:6b:8d:a4:e7:c8:8f:50:3f:b0:a9:46:9e:72:a5: c0:96:7f:ed:eb:83:89:fc:e3:12:1d:9c:c9:20:9d:ca:b7:b2: df:0c:6f:60:3b:c8:9a:9d:f4:6a:15:2b:09:c6:2d:83:a2:06: 39:66:74:f6:3e:d6:e6:fc:a7:76:97:78:32:e1:af:91:8d:fa: 70:11:e3:a2:b1:8a:f5:7b:b6:97:72:47:3a:a5:f3:8d:c0:e8: 5b:36:67:b9:43:0a:28:64:bb:c4:24:e7:13:a2:4c:cf:4a:31: 35:a1:f8:b9:c4:14:da:5d:d3:ea:bf:16:62:91:b2:b7:9b:08: fc:24:1e:f8:89:4a:78:25:a8:42:65:df:6f:b2:89:06:88:06: d5:4a:eb:b1:55:bd:53:57:a0:90:1b:ad:13:60:d7:33:7e:f2: 0d:68:67:d1:32:03:dd:8c:86:72:3d:aa:da:e3:58:bb:c0:82: d7:06:73:67:c9:eb:eb:04:53:16:d1:6c:0a:87:7a:1a:9b:cc: ee:ad:07:49:06:a7:56:dc:13:13:a1:2e:b3:9e:fb:a9:f6:8f: 68:80:ee:57:89:66:59:08:c1:bc:10:05:2b:f5:8c:28:06:af: 87:1b:22:19 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUEO7O4i/eUgF9sgV2Gwrq65B7HBwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjhBOUU0NUU3RTJERUE2NjI0MTQwQzAzREUwMjVEMTZC OTFDQjlEQzAeFw0yNTEwMTkyMDU3MTFaFw0yNTEwMjIyMzMzMTFaMDMxMTAvBgNV BAMTKEEzRDQ2NTlERjdDOUVFQjY2MTNEMENGRDc4QzBGNEE0RDZFNjAwRkMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDb2pnDu3MxzziriXRRg4TLUqVH AEoeumFy1PlCMyvF+jx7QZtVeec26g2C1FVt6upQVDrdf4x6/ISFIho/dpgWfrsi kdhcS89eR/7mvZpMIILLVmKgdKvnvJ6Kk3bB68spb6srop8K/0LT/8TaLQzViVWD JzH+c3Qu6FJi25Qu3I+7jvYrzfFyWc7SKKjey89Er02t6yrClmwz9ridROj9hPe4 SimSRUnV20b/3Hh9RGh+IjSm74SipU1jUjBPkmuSYZazInHLZ6gNsKB2utiGnJw/ dSF87R382PN1XKMUP+oIMw7kY2kQsxLVD65BhK6MygTAyumNlBJqE85NvKo/AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUo9RlnffJ7rZhPQz9eMD0pNbmAPwwHwYDVR0j BBgwFoAUuKnkXn4t6mYkFAwD3gJdFrkcudwwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l Y2RhZTBhNS1iNGY2LTRlMDgtOGJlYi02M2ViZTA4NTNkZjMvMC9COEE5RTQ1RTdF MkRFQTY2MjQxNDBDMDNERTAyNUQxNkI5MUNCOURDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQjhBOUU0NUU3RTJERUE2NjI0MTQwQzAzREUwMjVEMTZCOTFD QjlEQy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZWNkYWUwYTUtYjRmNi00ZTA4LThi ZWItNjNlYmUwODUzZGYzLzAvQjhBOUU0NUU3RTJERUE2NjI0MTQwQzAzREUwMjVE MTZCOTFDQjlEQy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAL6h/w5VYcABqcBK0q0YGv4oaSkaOwhrjaTn yI9QP7CpRp5ypcCWf+3rg4n84xIdnMkgncq3st8Mb2A7yJqd9GoVKwnGLYOiBjlm dPY+1ub8p3aXeDLhr5GN+nAR46KxivV7tpdyRzql843A6Fs2Z7lDCihku8Qk5xOi TM9KMTWh+LnEFNpd0+q/FmKRsrebCPwkHviJSnglqEJl32+yiQaIBtVK67FVvVNX oJAbrRNg1zN+8g1oZ9EyA92MhnI9qtrjWLvAgtcGc2fJ6+sEUxbRbAqHehqbzO6t B0kGp1bcExOhLrOe+6n2j2iA7leJZlkIwbwQBSv1jCgGr4cbIhk= -----END CERTIFICATE-----Generated at Tue Oct 21 08:35:25 2025 by rpki-client