$ rpki-client -vvf repo-rpki.idnic.net/repo/fbb5fa4a-bea6-464f-b409-11d9a3761a6c/1/8D4158039A86C34D5D36A83DDC40C959EDA21342.mft File: 8D4158039A86C34D5D36A83DDC40C959EDA21342.mft (raw, json) Hash identifier: 2sc8nXH3pBSoRHjmaAKys+mKIMnsL3qTtnW9wBG6sBY= Subject key identifier: A3:21:36:01:AA:C6:B1:2A:B0:93:B6:C2:EE:39:9E:23:8C:E5:ED:8B Authority key identifier: 8D:41:58:03:9A:86:C3:4D:5D:36:A8:3D:DC:40:C9:59:ED:A2:13:42 Certificate issuer: /CN=8D4158039A86C34D5D36A83DDC40C959EDA21342 Certificate serial: 1CE1B8D8EA766614E0E3C5A5BBD5E640F057D3C3 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8D4158039A86C34D5D36A83DDC40C959EDA21342.cer Subject info access: rsync://repo-rpki.idnic.net/repo/fbb5fa4a-bea6-464f-b409-11d9a3761a6c/1/8D4158039A86C34D5D36A83DDC40C959EDA21342.mft Manifest number: D3 Signing time: Sun 19 Oct 2025 12:21:05 +0000 Manifest this update: Sun 19 Oct 2025 12:16:05 +0000 Manifest next update: Wed 22 Oct 2025 18:19:05 +0000 Files and hashes: 1: 8D4158039A86C34D5D36A83DDC40C959EDA21342.crl (hash: St3gKMm5mXjxypEeZdSDWy9178K9VvB5uRFG+4QBEoc=) 2: 323030313a6466333a643363303a3a2f34382d3438203d3e20313532373930.roa (hash: XrGI552jWV7sNKcYT4/cR05JGNQdxhyBqphUE36lIJ0=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/fbb5fa4a-bea6-464f-b409-11d9a3761a6c/1/8D4158039A86C34D5D36A83DDC40C959EDA21342.crl rsync://repo-rpki.idnic.net/repo/fbb5fa4a-bea6-464f-b409-11d9a3761a6c/1/8D4158039A86C34D5D36A83DDC40C959EDA21342.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8D4158039A86C34D5D36A83DDC40C959EDA21342.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 Oct 2025 18:19:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1c:e1:b8:d8:ea:76:66:14:e0:e3:c5:a5:bb:d5:e6:40:f0:57:d3:c3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8D4158039A86C34D5D36A83DDC40C959EDA21342 Validity Not Before: Oct 19 12:16:05 2025 GMT Not After : Oct 22 18:19:05 2025 GMT Subject: CN=A3213601AAC6B12AB093B6C2EE399E238CE5ED8B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:9c:25:e0:70:3d:27:dc:43:7f:77:81:9b:05: 4f:4a:b3:35:43:04:6a:de:83:87:ea:db:23:d1:32: 20:96:ac:cd:0d:d2:a0:03:7b:0d:bc:23:34:0f:8e: 49:dc:f0:dd:28:d1:75:d0:8f:8e:b8:9b:8a:4e:50: e8:79:3c:72:e2:fa:a3:32:ac:52:fa:16:cf:f0:fd: f2:1e:28:1c:e6:71:33:d1:8c:38:86:42:b9:df:98: a1:b9:5c:d7:ae:72:f0:46:5c:01:18:08:f8:4f:20: 42:05:12:eb:65:d1:17:08:fc:b6:b6:5a:19:3d:3f: 36:79:54:a7:1b:e0:d9:ad:fd:ab:33:91:12:d2:01: 23:46:5e:5d:37:a0:65:49:36:97:37:1d:ed:00:52: 47:1c:26:99:09:c7:5d:9b:75:d8:67:50:b4:b3:f9: 4c:9e:be:94:f2:ab:22:54:74:5b:7d:5c:fc:9d:b3: d0:34:4f:d2:be:df:96:69:2f:2d:02:8e:91:48:42: 4c:99:fc:02:8f:00:1d:05:ef:1b:ab:f5:e1:01:4a: 55:00:68:97:3e:a0:ef:5c:a0:26:3f:c4:11:9b:09: 69:73:20:d0:9d:51:e4:a6:c9:ec:38:08:0b:d9:27: e5:6d:f1:12:3c:e3:be:e1:c5:59:b2:fb:a4:d2:79: 03:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:21:36:01:AA:C6:B1:2A:B0:93:B6:C2:EE:39:9E:23:8C:E5:ED:8B X509v3 Authority Key Identifier: keyid:8D:41:58:03:9A:86:C3:4D:5D:36:A8:3D:DC:40:C9:59:ED:A2:13:42 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/fbb5fa4a-bea6-464f-b409-11d9a3761a6c/1/8D4158039A86C34D5D36A83DDC40C959EDA21342.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8D4158039A86C34D5D36A83DDC40C959EDA21342.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/fbb5fa4a-bea6-464f-b409-11d9a3761a6c/1/8D4158039A86C34D5D36A83DDC40C959EDA21342.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption e1:c2:c1:c3:3a:fe:04:f7:b9:7f:8d:ee:d8:af:74:8b:c2:9c: 77:c9:bc:96:68:ed:85:65:f5:e4:3a:b6:6b:29:fb:5c:50:b7: 1e:b1:b1:97:aa:0c:dd:3e:26:59:56:69:cb:a8:7b:c5:d1:d3: 17:5b:aa:a5:10:b4:b3:71:4d:63:cd:3b:cd:aa:63:b6:b7:d5: fa:1f:fa:8c:f6:b8:fb:65:2f:34:e4:57:27:62:71:5f:80:00: 73:41:6f:50:ba:b3:d5:d9:cb:e9:8c:41:d3:28:96:dd:35:af: 39:d7:6d:9b:36:40:b1:4f:ed:bb:d1:2d:fc:e4:2d:90:54:43: 9b:9b:81:4e:59:8a:85:87:97:f8:29:0b:52:19:44:7c:8f:98: 97:98:0f:cf:66:f1:52:6a:13:1c:03:8d:d9:0d:42:b7:c1:29: 80:2f:e6:39:95:70:f5:03:04:b0:3e:eb:39:97:08:1d:23:21: a7:35:25:c2:7e:54:21:bb:19:27:b1:a2:25:ba:90:37:cc:61: 83:a0:87:05:4a:14:cd:40:e1:82:0a:e4:dc:66:3f:0a:2b:54: 64:b7:a4:34:cd:7f:be:77:cf:a9:d7:1f:95:0b:0a:5d:52:bc: fc:28:01:7c:29:de:62:b0:5e:dc:26:71:31:57:ed:03:1d:fe: 32:73:55:c9 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUHOG42Op2ZhTg48Wlu9XmQPBX08MwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEQ0MTU4MDM5QTg2QzM0RDVEMzZBODNEREM0MEM5NTlF REEyMTM0MjAeFw0yNTEwMTkxMjE2MDVaFw0yNTEwMjIxODE5MDVaMDMxMTAvBgNV BAMTKEEzMjEzNjAxQUFDNkIxMkFCMDkzQjZDMkVFMzk5RTIzOENFNUVEOEIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCvnCXgcD0n3EN/d4GbBU9KszVD BGreg4fq2yPRMiCWrM0N0qADew28IzQPjknc8N0o0XXQj464m4pOUOh5PHLi+qMy rFL6Fs/w/fIeKBzmcTPRjDiGQrnfmKG5XNeucvBGXAEYCPhPIEIFEutl0RcI/La2 Whk9PzZ5VKcb4Nmt/aszkRLSASNGXl03oGVJNpc3He0AUkccJpkJx12bddhnULSz +UyevpTyqyJUdFt9XPyds9A0T9K+35ZpLy0CjpFIQkyZ/AKPAB0F7xur9eEBSlUA aJc+oO9coCY/xBGbCWlzINCdUeSmyew4CAvZJ+Vt8RI8477hxVmy+6TSeQPTAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUoyE2AarGsSqwk7bC7jmeI4zl7YswHwYDVR0j BBgwFoAUjUFYA5qGw01dNqg93EDJWe2iE0IwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m YmI1ZmE0YS1iZWE2LTQ2NGYtYjQwOS0xMWQ5YTM3NjFhNmMvMS84RDQxNTgwMzlB ODZDMzRENUQzNkE4M0REQzQwQzk1OUVEQTIxMzQyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOEQ0MTU4MDM5QTg2QzM0RDVEMzZBODNEREM0MEM5NTlFREEy MTM0Mi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZmJiNWZhNGEtYmVhNi00NjRmLWI0 MDktMTFkOWEzNzYxYTZjLzEvOEQ0MTU4MDM5QTg2QzM0RDVEMzZBODNEREM0MEM5 NTlFREEyMTM0Mi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAOHCwcM6/gT3uX+N7tivdIvCnHfJvJZo7YVl 9eQ6tmsp+1xQtx6xsZeqDN0+JllWacuoe8XR0xdbqqUQtLNxTWPNO82qY7a31fof +oz2uPtlLzTkVydicV+AAHNBb1C6s9XZy+mMQdMolt01rznXbZs2QLFP7bvRLfzk LZBUQ5ubgU5ZioWHl/gpC1IZRHyPmJeYD89m8VJqExwDjdkNQrfBKYAv5jmVcPUD BLA+6zmXCB0jIac1JcJ+VCG7GSexoiW6kDfMYYOghwVKFM1A4YIK5NxmPworVGS3 pDTNf753z6nXH5ULCl1SvPwoAXwp3mKwXtwmcTFX7QMd/jJzVck= -----END CERTIFICATE-----Generated at Mon Oct 20 09:45:22 2025 by rpki-client