$ rpki-client -vvf repo-rpki.idnic.net/repo/f195b4b4-bc8a-4ce5-b550-9aa7b36ee1fa/0/8107B8970680BF15377E222E6093ED124116C40F.mft File: 8107B8970680BF15377E222E6093ED124116C40F.mft (raw, json) Hash identifier: HeZ7urIw2wCXPgG+nrIuE+QAPXATOkQF3O7YNj9NwVk= Subject key identifier: B9:93:50:A3:77:0B:41:FD:05:22:D0:F5:1E:8F:8D:AE:75:35:33:3E Authority key identifier: 81:07:B8:97:06:80:BF:15:37:7E:22:2E:60:93:ED:12:41:16:C4:0F Certificate issuer: /CN=8107B8970680BF15377E222E6093ED124116C40F Certificate serial: 06452AC0814E03368197CBCAC1FC58E1A91EDC05 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/8107B8970680BF15377E222E6093ED124116C40F.cer Subject info access: rsync://repo-rpki.idnic.net/repo/f195b4b4-bc8a-4ce5-b550-9aa7b36ee1fa/0/8107B8970680BF15377E222E6093ED124116C40F.mft Manifest number: B3 Signing time: Sun 19 Oct 2025 23:50:03 +0000 Manifest this update: Sun 19 Oct 2025 23:45:03 +0000 Manifest next update: Thu 23 Oct 2025 07:18:03 +0000 Files and hashes: 1: 8107B8970680BF15377E222E6093ED124116C40F.crl (hash: Hc7eyyVF9V5KmhxpSdHoG+3rYiqJWaZx2ExKx8NaMTI=) 2: 3136302e32322e3133362e302f32332d3233203d3e20313532383131.roa (hash: 2LacJURrRGdpqkr8B8+Js6eubdkn8GpcOPwFPaGcYgA=) 3: 3136302e32322e3133362e302f32332d3234203d3e20313532383131.roa (hash: kYpkRKfd2gOb2ANnCxDjR63bZ6+E7J2Ez1tbEEqd2xA=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/f195b4b4-bc8a-4ce5-b550-9aa7b36ee1fa/0/8107B8970680BF15377E222E6093ED124116C40F.crl rsync://repo-rpki.idnic.net/repo/f195b4b4-bc8a-4ce5-b550-9aa7b36ee1fa/0/8107B8970680BF15377E222E6093ED124116C40F.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/8107B8970680BF15377E222E6093ED124116C40F.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 Oct 2025 03:04:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 06:45:2a:c0:81:4e:03:36:81:97:cb:ca:c1:fc:58:e1:a9:1e:dc:05 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8107B8970680BF15377E222E6093ED124116C40F Validity Not Before: Oct 19 23:45:03 2025 GMT Not After : Oct 23 07:18:03 2025 GMT Subject: CN=B99350A3770B41FD0522D0F51E8F8DAE7535333E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:ae:f6:7b:5c:24:f3:24:2b:51:97:7e:c4:58: 2b:11:3e:6a:df:fd:40:dd:cc:34:45:b8:9a:2c:2e: 89:ff:5e:ab:e2:1a:be:53:25:24:5a:a0:dc:e7:2d: db:8e:49:55:59:e6:54:f9:c1:b3:bb:c7:ac:87:35: ad:3a:8e:12:1b:b3:b6:fc:5f:29:f3:48:aa:aa:e8: 21:ef:a3:06:f8:a2:3a:6f:3a:95:42:2d:0a:42:70: ed:99:57:26:53:83:df:af:63:cd:3e:9f:75:a1:9c: b7:58:91:b9:11:42:35:76:72:48:97:a3:53:52:c6: 08:3f:bf:d7:5b:68:cd:e0:d9:d9:7a:03:f6:fd:f8: e8:74:12:2f:5d:37:7e:6b:33:89:25:0a:25:fc:d8: 2d:f1:d7:61:bf:88:af:c0:28:7c:f7:0b:9c:b1:d5: d1:1a:92:5f:18:7c:db:de:62:78:00:6e:99:de:b7: 26:58:ae:85:79:1d:98:4d:8d:45:78:a4:21:0d:7d: ab:50:9e:94:2f:4d:98:ae:60:23:70:b4:fc:33:44: ce:3f:8e:d2:4a:af:c7:30:2a:83:b7:57:81:a4:71: de:d9:ef:9f:f4:9d:fa:7a:f3:6c:ae:b3:20:00:29: cf:72:9f:41:8d:f7:2a:e6:58:17:bc:8d:d6:2e:6f: 83:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:93:50:A3:77:0B:41:FD:05:22:D0:F5:1E:8F:8D:AE:75:35:33:3E X509v3 Authority Key Identifier: keyid:81:07:B8:97:06:80:BF:15:37:7E:22:2E:60:93:ED:12:41:16:C4:0F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/f195b4b4-bc8a-4ce5-b550-9aa7b36ee1fa/0/8107B8970680BF15377E222E6093ED124116C40F.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/8107B8970680BF15377E222E6093ED124116C40F.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f195b4b4-bc8a-4ce5-b550-9aa7b36ee1fa/0/8107B8970680BF15377E222E6093ED124116C40F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1b:68:0a:b7:8c:b2:4a:4b:52:ce:94:d2:94:f8:60:3d:15:fe: 46:f0:28:34:95:17:77:c6:93:f2:0b:c8:af:38:39:dd:27:4f: 45:61:4a:f8:ad:cf:fd:42:5b:dc:6a:fa:1f:66:db:45:d5:16: eb:40:e6:1e:b6:f3:35:97:4f:1b:5e:05:7f:38:db:f3:72:ea: c4:3b:f2:32:bf:00:9e:ea:59:f8:6d:9d:fe:33:a5:1c:c9:ea: 80:c4:0d:1a:81:0a:73:e9:e9:28:9b:b8:d3:5c:0c:47:6a:55: 66:c4:de:73:9b:6b:f5:99:63:36:9b:21:1f:c1:67:7a:10:a2: cb:82:7b:22:c2:22:63:bf:0a:82:a8:53:bd:f4:0a:45:18:d6: 43:72:23:e0:8c:a0:91:8e:86:7f:53:32:82:44:f1:61:0e:96: 60:ef:66:ac:95:91:40:58:87:80:f1:12:76:f3:39:75:65:da: 5d:4e:01:0a:c4:87:b4:93:74:7f:1f:d8:fb:4c:a6:d9:de:02: 25:91:db:8b:f8:15:ab:fa:9b:f1:bd:bf:e8:21:d1:d4:02:49: 95:c7:a5:0b:01:57:00:de:df:c6:78:86:31:e7:f8:89:8f:64: 93:63:7a:1e:0e:93:d5:01:71:42:78:ad:01:52:ec:fd:84:17: 3b:5c:c2:5f -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUBkUqwIFOAzaBl8vKwfxY4ake3AUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODEwN0I4OTcwNjgwQkYxNTM3N0UyMjJFNjA5M0VEMTI0 MTE2QzQwRjAeFw0yNTEwMTkyMzQ1MDNaFw0yNTEwMjMwNzE4MDNaMDMxMTAvBgNV BAMTKEI5OTM1MEEzNzcwQjQxRkQwNTIyRDBGNTFFOEY4REFFNzUzNTMzM0UwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDPrvZ7XCTzJCtRl37EWCsRPmrf /UDdzDRFuJosLon/XqviGr5TJSRaoNznLduOSVVZ5lT5wbO7x6yHNa06jhIbs7b8 XynzSKqq6CHvowb4ojpvOpVCLQpCcO2ZVyZTg9+vY80+n3WhnLdYkbkRQjV2ckiX o1NSxgg/v9dbaM3g2dl6A/b9+Oh0Ei9dN35rM4klCiX82C3x12G/iK/AKHz3C5yx 1dEakl8YfNveYngAbpnetyZYroV5HZhNjUV4pCENfatQnpQvTZiuYCNwtPwzRM4/ jtJKr8cwKoO3V4Gkcd7Z75/0nfp682yusyAAKc9yn0GN9yrmWBe8jdYub4N9AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUuZNQo3cLQf0FItD1Ho+NrnU1Mz4wHwYDVR0j BBgwFoAUgQe4lwaAvxU3fiIuYJPtEkEWxA8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m MTk1YjRiNC1iYzhhLTRjZTUtYjU1MC05YWE3YjM2ZWUxZmEvMC84MTA3Qjg5NzA2 ODBCRjE1Mzc3RTIyMkU2MDkzRUQxMjQxMTZDNDBGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvODEwN0I4OTcwNjgwQkYxNTM3N0UyMjJFNjA5M0VEMTI0MTE2 QzQwRi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZjE5NWI0YjQtYmM4YS00Y2U1LWI1 NTAtOWFhN2IzNmVlMWZhLzAvODEwN0I4OTcwNjgwQkYxNTM3N0UyMjJFNjA5M0VE MTI0MTE2QzQwRi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABtoCreMskpLUs6U0pT4YD0V/kbwKDSVF3fG k/ILyK84Od0nT0VhSvitz/1CW9xq+h9m20XVFutA5h628zWXTxteBX842/Ny6sQ7 8jK/AJ7qWfhtnf4zpRzJ6oDEDRqBCnPp6SibuNNcDEdqVWbE3nOba/WZYzabIR/B Z3oQosuCeyLCImO/CoKoU730CkUY1kNyI+CMoJGOhn9TMoJE8WEOlmDvZqyVkUBY h4DxEnbzOXVl2l1OAQrEh7STdH8f2PtMptneAiWR24v4Fav6m/G9v+gh0dQCSZXH pQsBVwDe38Z4hjHn+ImPZJNjeh4Ok9UBcUJ4rQFS7P2EFztcwl8= -----END CERTIFICATE-----Generated at Mon Oct 20 08:50:36 2025 by rpki-client