$ rpki-client -vvf repo-rpki.idnic.net/repo/2b69822c-2e22-48be-8ba2-634f582c2ecb/0/8FB177AE83526D713C1240D5CEFAF73844F7F4E5.mft File: 8FB177AE83526D713C1240D5CEFAF73844F7F4E5.mft (raw, json) Hash identifier: VHWUVHYTsj1/oDwlQCFWCAC5+owUKwhVXzgiY+43F9I= Subject key identifier: 27:E6:88:F3:E2:AE:29:01:2C:87:14:DF:BD:E9:EB:EE:D8:DE:53:5C Authority key identifier: 8F:B1:77:AE:83:52:6D:71:3C:12:40:D5:CE:FA:F7:38:44:F7:F4:E5 Certificate issuer: /CN=8FB177AE83526D713C1240D5CEFAF73844F7F4E5 Certificate serial: 522A64DAE55480AE85A8675A380A0166AA6FCB8E Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8FB177AE83526D713C1240D5CEFAF73844F7F4E5.cer Subject info access: rsync://repo-rpki.idnic.net/repo/2b69822c-2e22-48be-8ba2-634f582c2ecb/0/8FB177AE83526D713C1240D5CEFAF73844F7F4E5.mft Manifest number: 051C Signing time: Mon 20 Oct 2025 17:22:12 +0000 Manifest this update: Mon 20 Oct 2025 17:17:12 +0000 Manifest next update: Fri 24 Oct 2025 03:51:12 +0000 Files and hashes: 1: 3130332e32342e3134382e302f32322d3234203d3e203233393439.roa (hash: ZdZBTzxEvF0Eo40CSK2hJ56qvhPrglPp9cbPLo54JU8=) 2: 8FB177AE83526D713C1240D5CEFAF73844F7F4E5.crl (hash: 5ysEUsCi2RAYbTRzUC6Oz4vNxnil5pIVJY28cmkD7h4=) 3: 3230322e3135302e3132382e302f31392d3234203d3e203233393439.roa (hash: IcMuwwFWI9N+s2xXptufPfoLzyxZbJESlpNOp3hNLjk=) 4: 34332e3232392e32302e302f32322d3234203d3e203233393439.roa (hash: eFCW4mBhrgv32rd+aPVfExuT3QEaHahKTCkeKrhzQUs=) 5: 323430313a653438303a3a2f33322d3438203d3e203233393439.roa (hash: q0Z2WqXpQvlzVZIU6Q59ptVgRkR649YYCAjkMQ1tqcE=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/2b69822c-2e22-48be-8ba2-634f582c2ecb/0/8FB177AE83526D713C1240D5CEFAF73844F7F4E5.crl rsync://repo-rpki.idnic.net/repo/2b69822c-2e22-48be-8ba2-634f582c2ecb/0/8FB177AE83526D713C1240D5CEFAF73844F7F4E5.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8FB177AE83526D713C1240D5CEFAF73844F7F4E5.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Oct 2025 03:51:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 52:2a:64:da:e5:54:80:ae:85:a8:67:5a:38:0a:01:66:aa:6f:cb:8e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8FB177AE83526D713C1240D5CEFAF73844F7F4E5 Validity Not Before: Oct 20 17:17:12 2025 GMT Not After : Oct 24 03:51:12 2025 GMT Subject: CN=27E688F3E2AE29012C8714DFBDE9EBEED8DE535C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:af:55:b4:6c:96:d0:04:19:2b:d5:10:85:59: 81:4c:f8:83:1a:85:ad:93:ba:7b:e9:de:9f:65:bc: 10:4c:ec:15:80:aa:dc:40:2d:08:19:46:88:0b:bd: d2:61:f4:67:f4:00:3c:a1:33:1e:f8:1e:d4:c1:1a: 04:a4:54:cb:b1:cb:c0:83:44:ca:6c:39:a2:06:eb: 9a:22:96:fe:da:ec:3b:e7:0a:26:25:2e:78:4a:58: d4:2f:01:25:f4:24:3f:84:b6:b1:c9:db:e9:80:1f: 29:14:15:ec:5d:b2:21:3f:7c:f9:9f:50:3a:c1:13: f9:e1:f0:78:5f:58:c2:5f:2a:78:1a:59:79:68:88: 65:4f:97:40:71:6c:2a:b3:79:86:23:6f:fd:32:44: 8b:00:ca:41:d9:cc:ca:bc:8e:f4:90:c3:c3:5a:24: 73:7a:11:fe:c5:55:63:a8:e8:bc:67:02:1e:b7:bc: 7d:9e:9d:aa:77:19:ab:26:c0:a6:3a:c8:5a:b2:dd: 0a:dd:a8:7e:c8:7c:5f:65:56:88:ef:8f:e8:5d:c5: b3:f3:ff:9c:fa:8b:24:b2:57:d3:1f:86:47:9b:e1: fd:f1:7c:0f:ff:07:3d:62:6d:ef:c3:22:d3:3d:7b: eb:b2:8e:b3:fc:a3:b7:8f:ae:d2:ef:d9:32:4e:56: 32:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 27:E6:88:F3:E2:AE:29:01:2C:87:14:DF:BD:E9:EB:EE:D8:DE:53:5C X509v3 Authority Key Identifier: keyid:8F:B1:77:AE:83:52:6D:71:3C:12:40:D5:CE:FA:F7:38:44:F7:F4:E5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/2b69822c-2e22-48be-8ba2-634f582c2ecb/0/8FB177AE83526D713C1240D5CEFAF73844F7F4E5.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8FB177AE83526D713C1240D5CEFAF73844F7F4E5.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/2b69822c-2e22-48be-8ba2-634f582c2ecb/0/8FB177AE83526D713C1240D5CEFAF73844F7F4E5.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ba:69:15:3d:52:a3:4f:61:cc:3f:45:77:c1:7c:2d:3d:ca:96: e7:7b:93:d4:e8:66:51:e7:4b:ec:11:b8:bc:b5:32:df:f5:10: 26:48:d7:ab:c1:f6:d6:0f:18:81:ff:bf:38:c1:06:a7:48:e6: 1a:b9:69:24:21:54:96:48:17:10:1e:d7:80:0a:ad:43:8f:75: 70:9c:f1:73:d1:71:10:e5:aa:d0:7f:b6:e5:67:29:85:46:ba: ab:f8:e4:0b:7f:49:7a:1c:f5:f3:ce:97:88:24:02:3b:d4:13: aa:45:e0:25:be:9f:fd:a7:e0:96:3e:c1:55:8c:00:8a:a5:fa: 28:ee:48:c8:39:55:23:1b:08:1c:df:88:a8:88:c6:92:00:ff: 05:5f:d5:af:c9:7c:c1:c8:8b:39:f6:80:3f:2c:a3:72:6c:a7: 56:78:ee:b0:90:0d:57:ee:bd:bc:9b:9e:5f:2e:15:83:ad:6b: 22:a6:e9:ed:b1:5f:91:6a:fb:77:83:bb:2b:33:28:61:3d:d7: 84:18:9e:b1:00:a9:05:c7:58:dd:e6:03:db:12:21:b4:ef:3d: d4:3d:c1:4c:b5:4b:5e:b3:b3:43:f8:bb:3d:de:af:1c:be:4b: 25:b8:be:e4:4a:aa:83:fb:af:7d:70:22:1d:ed:55:2b:02:96: 84:6e:c4:f7 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUUipk2uVUgK6FqGdaOAoBZqpvy44wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEZCMTc3QUU4MzUyNkQ3MTNDMTI0MEQ1Q0VGQUY3Mzg0 NEY3RjRFNTAeFw0yNTEwMjAxNzE3MTJaFw0yNTEwMjQwMzUxMTJaMDMxMTAvBgNV BAMTKDI3RTY4OEYzRTJBRTI5MDEyQzg3MTRERkJERTlFQkVFRDhERTUzNUMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDBr1W0bJbQBBkr1RCFWYFM+IMa ha2Tunvp3p9lvBBM7BWAqtxALQgZRogLvdJh9Gf0ADyhMx74HtTBGgSkVMuxy8CD RMpsOaIG65oilv7a7DvnCiYlLnhKWNQvASX0JD+EtrHJ2+mAHykUFexdsiE/fPmf UDrBE/nh8HhfWMJfKngaWXloiGVPl0BxbCqzeYYjb/0yRIsAykHZzMq8jvSQw8Na JHN6Ef7FVWOo6LxnAh63vH2enap3GasmwKY6yFqy3QrdqH7IfF9lVojvj+hdxbPz /5z6iySyV9Mfhkeb4f3xfA//Bz1ibe/DItM9e+uyjrP8o7ePrtLv2TJOVjKTAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUJ+aI8+KuKQEshxTfvenr7tjeU1wwHwYDVR0j BBgwFoAUj7F3roNSbXE8EkDVzvr3OET39OUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y YjY5ODIyYy0yZTIyLTQ4YmUtOGJhMi02MzRmNTgyYzJlY2IvMC84RkIxNzdBRTgz NTI2RDcxM0MxMjQwRDVDRUZBRjczODQ0RjdGNEU1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOEZCMTc3QUU4MzUyNkQ3MTNDMTI0MEQ1Q0VGQUY3Mzg0NEY3 RjRFNS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMmI2OTgyMmMtMmUyMi00OGJlLThi YTItNjM0ZjU4MmMyZWNiLzAvOEZCMTc3QUU4MzUyNkQ3MTNDMTI0MEQ1Q0VGQUY3 Mzg0NEY3RjRFNS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALppFT1So09hzD9Fd8F8LT3Klud7k9ToZlHn S+wRuLy1Mt/1ECZI16vB9tYPGIH/vzjBBqdI5hq5aSQhVJZIFxAe14AKrUOPdXCc 8XPRcRDlqtB/tuVnKYVGuqv45At/SXoc9fPOl4gkAjvUE6pF4CW+n/2n4JY+wVWM AIql+ijuSMg5VSMbCBzfiKiIxpIA/wVf1a/JfMHIizn2gD8so3Jsp1Z47rCQDVfu vbybnl8uFYOtayKm6e2xX5Fq+3eDuyszKGE914QYnrEAqQXHWN3mA9sSIbTvPdQ9 wUy1S16zs0P4uz3erxy+SyW4vuRKqoP7r31wIh3tVSsCloRuxPc= -----END CERTIFICATE-----Generated at Wed Oct 22 01:21:53 2025 by rpki-client