$ rpki-client -vvf repo-rpki.idnic.net/repo/9c80467c-aeb2-4095-8f54-85b9090d3908/0/8EE9EEE46EA0F860385C880C00E2EE5A59D6EA9B.mft File: 8EE9EEE46EA0F860385C880C00E2EE5A59D6EA9B.mft (raw, json) Hash identifier: 9Cnosgh/6aG25wFdFL29okjvKsXAvwRsFnwPX3LFs1E= Subject key identifier: D2:80:A0:6F:66:68:62:49:A7:A9:84:C0:65:AD:9C:48:A3:03:AC:79 Authority key identifier: 8E:E9:EE:E4:6E:A0:F8:60:38:5C:88:0C:00:E2:EE:5A:59:D6:EA:9B Certificate issuer: /CN=8EE9EEE46EA0F860385C880C00E2EE5A59D6EA9B Certificate serial: 344483EE2383DB16601D8B1C503A6039DB859BD2 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8EE9EEE46EA0F860385C880C00E2EE5A59D6EA9B.cer Subject info access: rsync://repo-rpki.idnic.net/repo/9c80467c-aeb2-4095-8f54-85b9090d3908/0/8EE9EEE46EA0F860385C880C00E2EE5A59D6EA9B.mft Manifest number: 01C6 Signing time: Sat 15 Nov 2025 00:00:44 +0000 Manifest this update: Fri 14 Nov 2025 23:55:44 +0000 Manifest next update: Tue 18 Nov 2025 11:58:44 +0000 Files and hashes: 1: 8EE9EEE46EA0F860385C880C00E2EE5A59D6EA9B.crl (hash: 5Tb+/1SVDOJb/DzkPcvwvWavIw/KFMN1jj+oFIy86k8=) 2: 3130332e3139372e3138382e302f32322d3234203d3e20313333383030.roa (hash: 4aA8UHvWdn6b+e9rvE0qvRNLuWwKk2SM0xhNOkJ4w/s=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/9c80467c-aeb2-4095-8f54-85b9090d3908/0/8EE9EEE46EA0F860385C880C00E2EE5A59D6EA9B.crl rsync://repo-rpki.idnic.net/repo/9c80467c-aeb2-4095-8f54-85b9090d3908/0/8EE9EEE46EA0F860385C880C00E2EE5A59D6EA9B.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8EE9EEE46EA0F860385C880C00E2EE5A59D6EA9B.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 18 Nov 2025 11:58:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 34:44:83:ee:23:83:db:16:60:1d:8b:1c:50:3a:60:39:db:85:9b:d2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8EE9EEE46EA0F860385C880C00E2EE5A59D6EA9B Validity Not Before: Nov 14 23:55:44 2025 GMT Not After : Nov 18 11:58:44 2025 GMT Subject: CN=D280A06F66686249A7A984C065AD9C48A303AC79 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:45:e3:43:7c:fa:20:e8:48:d2:b1:c0:e7:a0: a7:c9:97:d9:18:31:7f:bb:56:05:72:bd:b4:93:3c: 85:c2:d3:c4:3f:96:c0:fe:ba:38:a7:7c:ef:32:63: b6:24:24:e9:f7:af:b0:87:7d:99:9d:22:87:9f:4a: 5e:de:8a:96:ac:42:2d:ad:2f:66:1e:5d:ab:8c:10: 0d:c4:80:55:52:b6:5d:93:2d:79:10:9c:12:4b:02: 45:0f:7b:9f:1d:75:88:14:d0:5d:f9:1c:44:3d:eb: fe:7c:31:ac:58:cb:67:43:d5:c1:ef:fa:2b:c4:54: ab:42:90:e7:f1:bc:f9:37:07:72:a1:0f:81:08:f4: 35:d1:5f:f7:78:12:4a:43:6e:98:7f:a1:cc:a4:98: 55:b2:87:f1:ba:ff:75:93:7f:0e:99:53:38:8d:46: cd:85:5c:57:c2:39:03:aa:5e:6a:3a:46:c5:c1:92: ca:5d:c5:c9:94:3b:93:a7:ff:fe:b8:ce:60:84:df: 6e:98:5b:4f:c4:c3:42:06:3a:2c:0c:67:9c:dc:c2: 08:18:b8:a8:fc:53:d6:29:4b:53:b6:3f:88:c9:4d: af:7d:7b:7a:d9:a8:60:2a:7a:d5:da:25:e8:ea:4b: 3f:9d:fb:68:23:fe:89:69:10:d5:b1:b0:b1:59:8c: d1:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:80:A0:6F:66:68:62:49:A7:A9:84:C0:65:AD:9C:48:A3:03:AC:79 X509v3 Authority Key Identifier: keyid:8E:E9:EE:E4:6E:A0:F8:60:38:5C:88:0C:00:E2:EE:5A:59:D6:EA:9B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/9c80467c-aeb2-4095-8f54-85b9090d3908/0/8EE9EEE46EA0F860385C880C00E2EE5A59D6EA9B.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8EE9EEE46EA0F860385C880C00E2EE5A59D6EA9B.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/9c80467c-aeb2-4095-8f54-85b9090d3908/0/8EE9EEE46EA0F860385C880C00E2EE5A59D6EA9B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9b:92:5e:51:00:46:d9:b0:74:10:23:77:a4:58:16:fc:e1:3a: c1:11:09:80:7d:dd:0e:da:63:a9:62:ac:27:eb:b1:85:40:bd: e3:5c:ec:f2:e2:8d:dc:a8:8e:82:a0:26:6e:95:d6:e7:5b:e5: 72:e1:be:3d:8a:de:c2:99:3e:2e:68:2b:76:f4:35:83:c1:7b: 61:31:17:ea:77:49:13:c5:74:89:b5:cb:44:6b:9e:f9:4d:63: d3:58:2b:ad:13:8a:08:03:36:9a:88:f8:08:2b:92:cf:f1:62: 58:a1:5d:1b:05:74:55:75:8e:24:b0:c2:fb:1f:e7:28:98:51: 7f:4c:3f:a0:17:33:ea:ea:b7:a9:92:69:62:63:71:77:25:40: d5:3b:95:aa:a2:bd:87:88:32:ac:1d:9f:af:af:81:18:b1:ac: 91:db:2c:05:12:9e:ff:c0:eb:3b:fb:47:97:4b:ac:a9:90:9a: 16:a7:fa:97:bb:c8:99:0a:64:c4:2c:67:8c:56:4a:06:55:46: 65:4c:e6:91:e7:24:af:7c:ec:e7:b9:61:b4:3e:b3:ae:0f:1e: bb:e1:5d:5e:4c:98:b2:70:a1:06:b7:d8:ab:9c:1b:a6:a6:fa: 94:3a:f9:84:4b:1f:e8:89:f5:cd:1d:ca:f6:3a:2f:54:3c:56: 0f:57:f8:6a -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUNESD7iOD2xZgHYscUDpgOduFm9IwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEVFOUVFRTQ2RUEwRjg2MDM4NUM4ODBDMDBFMkVFNUE1 OUQ2RUE5QjAeFw0yNTExMTQyMzU1NDRaFw0yNTExMTgxMTU4NDRaMDMxMTAvBgNV BAMTKEQyODBBMDZGNjY2ODYyNDlBN0E5ODRDMDY1QUQ5QzQ4QTMwM0FDNzkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDbReNDfPog6EjSscDnoKfJl9kY MX+7VgVyvbSTPIXC08Q/lsD+ujinfO8yY7YkJOn3r7CHfZmdIoefSl7eipasQi2t L2YeXauMEA3EgFVStl2TLXkQnBJLAkUPe58ddYgU0F35HEQ96/58MaxYy2dD1cHv +ivEVKtCkOfxvPk3B3KhD4EI9DXRX/d4EkpDbph/ocykmFWyh/G6/3WTfw6ZUziN Rs2FXFfCOQOqXmo6RsXBkspdxcmUO5On//64zmCE326YW0/Ew0IGOiwMZ5zcwggY uKj8U9YpS1O2P4jJTa99e3rZqGAqetXaJejqSz+d+2gj/olpENWxsLFZjNFpAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU0oCgb2ZoYkmnqYTAZa2cSKMDrHkwHwYDVR0j BBgwFoAUjunu5G6g+GA4XIgMAOLuWlnW6pswDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 YzgwNDY3Yy1hZWIyLTQwOTUtOGY1NC04NWI5MDkwZDM5MDgvMC84RUU5RUVFNDZF QTBGODYwMzg1Qzg4MEMwMEUyRUU1QTU5RDZFQTlCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOEVFOUVFRTQ2RUEwRjg2MDM4NUM4ODBDMDBFMkVFNUE1OUQ2 RUE5Qi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOWM4MDQ2N2MtYWViMi00MDk1LThm NTQtODViOTA5MGQzOTA4LzAvOEVFOUVFRTQ2RUEwRjg2MDM4NUM4ODBDMDBFMkVF NUE1OUQ2RUE5Qi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJuSXlEARtmwdBAjd6RYFvzhOsERCYB93Q7a Y6lirCfrsYVAveNc7PLijdyojoKgJm6V1udb5XLhvj2K3sKZPi5oK3b0NYPBe2Ex F+p3SRPFdIm1y0RrnvlNY9NYK60TiggDNpqI+Agrks/xYlihXRsFdFV1jiSwwvsf 5yiYUX9MP6AXM+rqt6mSaWJjcXclQNU7laqivYeIMqwdn6+vgRixrJHbLAUSnv/A 6zv7R5dLrKmQmhan+pe7yJkKZMQsZ4xWSgZVRmVM5pHnJK987Oe5YbQ+s64PHrvh XV5MmLJwoQa32KucG6am+pQ6+YRLH+iJ9c0dyvY6L1Q8Vg9X+Go= -----END CERTIFICATE-----Generated at Sun Nov 16 07:37:02 2025 by rpki-client