$ rpki-client -vvf repo-rpki.idnic.net/repo/fba48e4e-fc95-4acf-beac-d93a0f694421/0/8659BE8500DEBB314448F1412FA1E264025A4148.mft File: 8659BE8500DEBB314448F1412FA1E264025A4148.mft (raw, json) Hash identifier: CHR8mVkxVyH+nRrYrETbZWtDhKEsGFBANBcNJNAWfJk= Subject key identifier: BA:57:AC:64:F4:4D:1C:51:84:F0:06:10:BD:09:2A:B9:73:42:8F:7F Authority key identifier: 86:59:BE:85:00:DE:BB:31:44:48:F1:41:2F:A1:E2:64:02:5A:41:48 Certificate issuer: /CN=8659BE8500DEBB314448F1412FA1E264025A4148 Certificate serial: 39471381F1534918AD606D6AE0778328E241C9CB Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8659BE8500DEBB314448F1412FA1E264025A4148.cer Subject info access: rsync://repo-rpki.idnic.net/repo/fba48e4e-fc95-4acf-beac-d93a0f694421/0/8659BE8500DEBB314448F1412FA1E264025A4148.mft Manifest number: 01E4 Signing time: Sun 19 Oct 2025 23:21:01 +0000 Manifest this update: Sun 19 Oct 2025 23:16:01 +0000 Manifest next update: Thu 23 Oct 2025 00:49:01 +0000 Files and hashes: 1: 323030313a6466313a316263303a3a2f34382d3438203d3e20313431393339.roa (hash: E8NUcaKWe3ABHFVxNWSSIkp1m8C7YtMxKMRA2hg1NmI=) 2: 3130332e3136342e3139322e302f32342d3234203d3e20313431393339.roa (hash: V8FXW6i5FhDhWnneEy9JcwyRx6grWMlQZ/xTqZlJefU=) 3: 3130332e3136342e3139332e302f32342d3234203d3e20313431393339.roa (hash: o1EC2V3xudD67YQ4ezVJUlO4R22GwhC3UT5xp118BUc=) 4: 8659BE8500DEBB314448F1412FA1E264025A4148.crl (hash: fNMEGJYcrXR5bwAMdzxDw87vrG0H9JU7oYGqA13+bLc=) 5: 3130332e3136342e3139322e302f32332d3234203d3e20313431393339.roa (hash: DGmbIbAAoCUymOY6DDh+0S4rcPuhCP+BlaH232+y3TY=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/fba48e4e-fc95-4acf-beac-d93a0f694421/0/8659BE8500DEBB314448F1412FA1E264025A4148.crl rsync://repo-rpki.idnic.net/repo/fba48e4e-fc95-4acf-beac-d93a0f694421/0/8659BE8500DEBB314448F1412FA1E264025A4148.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8659BE8500DEBB314448F1412FA1E264025A4148.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 Oct 2025 00:49:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 39:47:13:81:f1:53:49:18:ad:60:6d:6a:e0:77:83:28:e2:41:c9:cb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8659BE8500DEBB314448F1412FA1E264025A4148 Validity Not Before: Oct 19 23:16:01 2025 GMT Not After : Oct 23 00:49:01 2025 GMT Subject: CN=BA57AC64F44D1C5184F00610BD092AB973428F7F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:5f:25:74:bf:3e:0e:b8:70:fd:16:8a:18:20: 55:6a:cb:e4:ab:51:4d:f2:54:aa:97:10:e7:02:76: 2b:e1:5b:23:ec:3d:66:6d:b7:0e:f7:db:8e:07:bf: ba:8c:ce:5c:2a:18:d1:9b:82:2d:ca:8f:ef:92:cf: 63:3c:71:f6:f3:62:b3:10:61:f9:96:14:b3:de:e8: 0a:90:97:06:87:22:7a:02:3b:d1:29:c6:2b:58:af: d4:dd:f4:3f:3b:1e:d5:dc:24:9e:7b:c5:b3:c0:03: ae:cf:e9:41:32:ba:3b:56:d0:f3:6c:4f:4a:bb:dd: ab:9b:6f:22:2d:d5:55:56:b4:be:ac:9b:4b:fe:07: d4:cd:ef:48:be:c1:91:43:2d:8b:74:0f:b4:c8:71: 5d:98:f5:56:b3:a4:6c:b9:0d:99:8f:a8:ea:02:ca: 62:28:0c:d9:8e:a8:74:f2:94:41:13:17:2f:cb:37: 26:55:9b:c7:47:21:19:fc:1a:f4:34:1b:ab:42:0a: 22:87:af:21:85:08:6c:c3:d3:39:e9:6a:93:15:49: 6d:48:c6:43:21:00:24:69:63:d2:5d:54:87:17:f2: 0f:2e:7d:1c:0c:ec:6b:c8:21:64:99:ba:f5:6a:de: 97:df:14:06:70:66:67:ab:59:c5:05:18:6c:48:dc: 15:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BA:57:AC:64:F4:4D:1C:51:84:F0:06:10:BD:09:2A:B9:73:42:8F:7F X509v3 Authority Key Identifier: keyid:86:59:BE:85:00:DE:BB:31:44:48:F1:41:2F:A1:E2:64:02:5A:41:48 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/fba48e4e-fc95-4acf-beac-d93a0f694421/0/8659BE8500DEBB314448F1412FA1E264025A4148.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8659BE8500DEBB314448F1412FA1E264025A4148.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/fba48e4e-fc95-4acf-beac-d93a0f694421/0/8659BE8500DEBB314448F1412FA1E264025A4148.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption dc:7f:e3:b6:a4:46:1f:1a:4e:68:84:cd:40:ba:92:57:3b:15: 63:64:ed:dd:8c:d1:58:c3:48:f3:5b:80:5a:49:69:56:02:81: c8:66:43:96:73:2a:d7:c1:a0:ad:59:c9:5f:b3:3a:de:4d:77: c9:0d:10:a1:38:e1:76:b7:88:1d:9c:25:d2:f8:21:df:64:db: f4:0c:d8:e1:f5:04:48:34:c6:c4:1f:37:ae:62:43:cf:cc:3d: 4e:85:ff:5d:ab:63:71:19:c0:ba:5a:33:98:f4:9f:70:de:c0: 86:64:8a:ba:bd:e3:35:3b:e8:68:0e:17:74:fb:0c:0c:f3:5c: 07:2d:46:19:28:ce:b0:8e:4b:78:7f:1e:a7:82:95:36:aa:7a: a1:43:03:56:a0:c7:0b:76:96:f0:6e:93:26:77:05:2b:56:e6: bc:e3:1f:98:bc:77:24:0e:69:db:4b:15:33:6e:9a:22:ea:8a: 1d:c9:6c:f8:99:15:f0:e3:e9:1a:52:29:93:3c:c8:c1:fe:da: cc:7a:20:ed:bd:1b:af:c4:7b:94:d8:30:f4:90:8f:eb:d5:f8: d6:43:ce:20:a3:79:35:94:e3:56:2e:50:43:24:78:0a:f1:9b: 82:9d:99:46:2b:d1:a5:c1:d5:db:1d:b3:6a:03:e0:9a:34:ef: c1:7f:ff:c0 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUOUcTgfFTSRitYG1q4HeDKOJBycswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODY1OUJFODUwMERFQkIzMTQ0NDhGMTQxMkZBMUUyNjQw MjVBNDE0ODAeFw0yNTEwMTkyMzE2MDFaFw0yNTEwMjMwMDQ5MDFaMDMxMTAvBgNV BAMTKEJBNTdBQzY0RjQ0RDFDNTE4NEYwMDYxMEJEMDkyQUI5NzM0MjhGN0YwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDiXyV0vz4OuHD9FooYIFVqy+Sr UU3yVKqXEOcCdivhWyPsPWZttw73244Hv7qMzlwqGNGbgi3Kj++Sz2M8cfbzYrMQ YfmWFLPe6AqQlwaHInoCO9EpxitYr9Td9D87HtXcJJ57xbPAA67P6UEyujtW0PNs T0q73aubbyIt1VVWtL6sm0v+B9TN70i+wZFDLYt0D7TIcV2Y9VazpGy5DZmPqOoC ymIoDNmOqHTylEETFy/LNyZVm8dHIRn8GvQ0G6tCCiKHryGFCGzD0znpapMVSW1I xkMhACRpY9JdVIcX8g8ufRwM7GvIIWSZuvVq3pffFAZwZmerWcUFGGxI3BWxAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUulesZPRNHFGE8AYQvQkquXNCj38wHwYDVR0j BBgwFoAUhlm+hQDeuzFESPFBL6HiZAJaQUgwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m YmE0OGU0ZS1mYzk1LTRhY2YtYmVhYy1kOTNhMGY2OTQ0MjEvMC84NjU5QkU4NTAw REVCQjMxNDQ0OEYxNDEyRkExRTI2NDAyNUE0MTQ4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvODY1OUJFODUwMERFQkIzMTQ0NDhGMTQxMkZBMUUyNjQwMjVB NDE0OC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZmJhNDhlNGUtZmM5NS00YWNmLWJl YWMtZDkzYTBmNjk0NDIxLzAvODY1OUJFODUwMERFQkIzMTQ0NDhGMTQxMkZBMUUy NjQwMjVBNDE0OC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBANx/47akRh8aTmiEzUC6klc7FWNk7d2M0VjD SPNbgFpJaVYCgchmQ5ZzKtfBoK1ZyV+zOt5Nd8kNEKE44Xa3iB2cJdL4Id9k2/QM 2OH1BEg0xsQfN65iQ8/MPU6F/12rY3EZwLpaM5j0n3DewIZkirq94zU76GgOF3T7 DAzzXActRhkozrCOS3h/HqeClTaqeqFDA1agxwt2lvBukyZ3BStW5rzjH5i8dyQO adtLFTNumiLqih3JbPiZFfDj6RpSKZM8yMH+2sx6IO29G6/Ee5TYMPSQj+vV+NZD ziCjeTWU41YuUEMkeArxm4KdmUYr0aXB1dsds2oD4Jo078F//8A= -----END CERTIFICATE-----Generated at Mon Oct 20 18:37:53 2025 by rpki-client