$ rpki-client -vvf repo-rpki.idnic.net/repo/c2b0bdd5-6e30-4a10-b993-77d48251f3a1/0/8B237B2BC0581B556DD5B4B0847F9C83408BA93D.mft File: 8B237B2BC0581B556DD5B4B0847F9C83408BA93D.mft (raw, json) Hash identifier: vSC+6puGnK2OY/bhX4gXgQErW77wgvlgOAdm34aI0m8= Subject key identifier: 87:44:70:D2:6A:1E:11:86:2B:19:66:AC:D7:D5:96:3D:83:86:3A:B1 Authority key identifier: 8B:23:7B:2B:C0:58:1B:55:6D:D5:B4:B0:84:7F:9C:83:40:8B:A9:3D Certificate issuer: /CN=8B237B2BC0581B556DD5B4B0847F9C83408BA93D Certificate serial: 2C6FBCDB5477020102AF3B2F34D76235655C9F0D Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8B237B2BC0581B556DD5B4B0847F9C83408BA93D.cer Subject info access: rsync://repo-rpki.idnic.net/repo/c2b0bdd5-6e30-4a10-b993-77d48251f3a1/0/8B237B2BC0581B556DD5B4B0847F9C83408BA93D.mft Manifest number: 021F Signing time: Fri 14 Nov 2025 22:30:00 +0000 Manifest this update: Fri 14 Nov 2025 22:25:00 +0000 Manifest next update: Tue 18 Nov 2025 10:05:00 +0000 Files and hashes: 1: 8B237B2BC0581B556DD5B4B0847F9C83408BA93D.crl (hash: L8z0PdLXb1CfYeI5uztmEgwiINlF+222pTMAAxhVB6k=) 2: 3130332e3139302e3131342e302f32332d3233203d3e203435333035.roa (hash: ULVDgV6Ym293ne4NjwFyx9fV7GwDIsvmtft/evHC1jQ=) 3: 3130332e3139302e3131342e302f32342d3234203d3e203435333035.roa (hash: KgdQImSFXI48JOCLFSTKKPItTv1rC7N1MfwzWNtz7zI=) 4: 3130332e3139302e3131352e302f32342d3234203d3e203435333035.roa (hash: dEnaKQdLZdizpCqpcJnXth7f6FKcdGy1/gEWNghJ+nU=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/c2b0bdd5-6e30-4a10-b993-77d48251f3a1/0/8B237B2BC0581B556DD5B4B0847F9C83408BA93D.crl rsync://repo-rpki.idnic.net/repo/c2b0bdd5-6e30-4a10-b993-77d48251f3a1/0/8B237B2BC0581B556DD5B4B0847F9C83408BA93D.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8B237B2BC0581B556DD5B4B0847F9C83408BA93D.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 18 Nov 2025 10:05:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2c:6f:bc:db:54:77:02:01:02:af:3b:2f:34:d7:62:35:65:5c:9f:0d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8B237B2BC0581B556DD5B4B0847F9C83408BA93D Validity Not Before: Nov 14 22:25:00 2025 GMT Not After : Nov 18 10:05:00 2025 GMT Subject: CN=874470D26A1E11862B1966ACD7D5963D83863AB1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:19:68:5f:e6:25:e9:7a:f6:b3:42:87:b7:35: 3e:f3:d8:ec:54:9e:7f:cc:65:d9:54:96:00:58:65: 8c:02:2d:25:07:54:3b:bd:35:68:42:05:46:0f:f9: d7:58:6b:72:fd:2a:2b:0f:98:b5:e9:f4:a8:b0:cf: 1c:2d:0f:d5:03:af:07:d1:ea:1a:6a:9e:be:54:b9: b7:b2:95:8d:68:7e:e1:c9:46:9a:14:0b:e4:db:7e: b2:d6:fa:49:13:7c:d9:98:c9:69:35:dd:34:f7:47: af:6b:4f:8d:f5:02:16:f7:e4:7f:64:44:e1:fc:b0: f2:95:da:e5:e4:f6:7e:b2:b1:31:3b:bb:81:0c:ed: 4c:85:2e:7a:30:8f:e8:dc:f4:4d:5d:d4:48:e9:60: 43:87:fb:a9:78:79:98:a2:e1:22:e5:33:a3:2b:99: 26:43:89:3f:f4:f1:35:a4:53:38:3f:8c:32:35:31: 99:8e:0b:55:e5:d2:7c:6a:4c:d3:e7:7d:a3:22:85: 52:03:07:df:a3:3a:10:0f:19:1f:2e:1a:e1:b5:53: 67:2c:7a:dc:13:15:0f:4f:12:67:32:4b:34:1a:9e: 02:d9:ff:97:98:e6:f9:6d:f7:b5:66:52:75:b2:8b: bb:84:de:02:af:c0:fa:46:b3:8b:a2:3c:4b:d4:29: 44:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:44:70:D2:6A:1E:11:86:2B:19:66:AC:D7:D5:96:3D:83:86:3A:B1 X509v3 Authority Key Identifier: keyid:8B:23:7B:2B:C0:58:1B:55:6D:D5:B4:B0:84:7F:9C:83:40:8B:A9:3D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/c2b0bdd5-6e30-4a10-b993-77d48251f3a1/0/8B237B2BC0581B556DD5B4B0847F9C83408BA93D.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8B237B2BC0581B556DD5B4B0847F9C83408BA93D.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c2b0bdd5-6e30-4a10-b993-77d48251f3a1/0/8B237B2BC0581B556DD5B4B0847F9C83408BA93D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 90:7a:d0:38:1a:26:b8:a1:e8:56:29:39:f6:8c:4d:02:73:24: 06:87:22:e1:62:c9:2e:8a:c4:c8:ff:03:47:cb:99:a7:ba:0a: 8e:ea:16:59:7c:11:aa:55:f0:ed:09:2d:5a:98:05:c1:cf:a6: 45:80:9a:e9:f7:96:13:89:32:eb:71:1a:e7:f5:f2:d0:e4:2a: 4d:cd:0f:71:89:b8:0b:e2:f4:40:89:9b:26:a0:f7:9a:b8:ab: 68:e2:8d:98:41:b5:65:f5:c5:e6:d1:a1:2c:d7:f0:9e:f8:44: ad:5a:e6:62:ef:16:1a:86:db:56:dd:ce:8b:bf:89:d8:81:f8: f0:2e:be:24:21:2c:67:b5:02:31:54:27:65:d1:e1:67:3b:a1: de:80:55:ba:66:53:02:02:df:18:0e:7e:a9:60:e9:dd:1c:08: 49:17:3e:3d:3f:92:67:d4:c2:6c:fb:fb:ba:7b:30:37:9b:54: 2b:fb:99:93:64:c4:8b:4c:e1:2d:91:c8:c5:28:bb:24:25:26: 68:4a:f3:03:82:09:b3:e7:0f:f5:ae:ef:32:af:e2:2d:40:da: 39:3c:05:f0:91:41:64:f0:fe:5e:c9:fa:df:dc:38:14:65:0d: c7:d9:c0:bb:4e:02:ea:c2:b9:43:f1:e1:5b:14:10:0c:3b:8e: 2f:ee:a2:0c -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIULG+821R3AgECrzsvNNdiNWVcnw0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEIyMzdCMkJDMDU4MUI1NTZERDVCNEIwODQ3RjlDODM0 MDhCQTkzRDAeFw0yNTExMTQyMjI1MDBaFw0yNTExMTgxMDA1MDBaMDMxMTAvBgNV BAMTKDg3NDQ3MEQyNkExRTExODYyQjE5NjZBQ0Q3RDU5NjNEODM4NjNBQjEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDLGWhf5iXpevazQoe3NT7z2OxU nn/MZdlUlgBYZYwCLSUHVDu9NWhCBUYP+ddYa3L9KisPmLXp9KiwzxwtD9UDrwfR 6hpqnr5UubeylY1ofuHJRpoUC+TbfrLW+kkTfNmYyWk13TT3R69rT431Ahb35H9k ROH8sPKV2uXk9n6ysTE7u4EM7UyFLnowj+jc9E1d1EjpYEOH+6l4eZii4SLlM6Mr mSZDiT/08TWkUzg/jDI1MZmOC1Xl0nxqTNPnfaMihVIDB9+jOhAPGR8uGuG1U2cs etwTFQ9PEmcySzQangLZ/5eY5vlt97VmUnWyi7uE3gKvwPpGs4uiPEvUKUSXAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUh0Rw0moeEYYrGWas19WWPYOGOrEwHwYDVR0j BBgwFoAUiyN7K8BYG1Vt1bSwhH+cg0CLqT0wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j MmIwYmRkNS02ZTMwLTRhMTAtYjk5My03N2Q0ODI1MWYzYTEvMC84QjIzN0IyQkMw NTgxQjU1NkRENUI0QjA4NDdGOUM4MzQwOEJBOTNELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOEIyMzdCMkJDMDU4MUI1NTZERDVCNEIwODQ3RjlDODM0MDhC QTkzRC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYzJiMGJkZDUtNmUzMC00YTEwLWI5 OTMtNzdkNDgyNTFmM2ExLzAvOEIyMzdCMkJDMDU4MUI1NTZERDVCNEIwODQ3RjlD ODM0MDhCQTkzRC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJB60DgaJrih6FYpOfaMTQJzJAaHIuFiyS6K xMj/A0fLmae6Co7qFll8EapV8O0JLVqYBcHPpkWAmun3lhOJMutxGuf18tDkKk3N D3GJuAvi9ECJmyag95q4q2jijZhBtWX1xebRoSzX8J74RK1a5mLvFhqG21bdzou/ idiB+PAuviQhLGe1AjFUJ2XR4Wc7od6AVbpmUwIC3xgOfqlg6d0cCEkXPj0/kmfU wmz7+7p7MDebVCv7mZNkxItM4S2RyMUouyQlJmhK8wOCCbPnD/Wu7zKv4i1A2jk8 BfCRQWTw/l7J+t/cOBRlDcfZwLtOAurCuUPx4VsUEAw7ji/uogw= -----END CERTIFICATE-----Generated at Mon Nov 17 12:01:16 2025 by rpki-client