$ rpki-client -vvf repo-rpki.idnic.net/repo/f9e7a28a-62f0-4d14-8702-403a5190eae1/0/8A4FF836588BBDC5E5CC526BBBEB66D5140D1B86.mft File: 8A4FF836588BBDC5E5CC526BBBEB66D5140D1B86.mft (raw, json) Hash identifier: h4lwtAC7JE/gc1Zu3HnPHkc9p8961C5L3MN4K/IiJuQ= Subject key identifier: 12:8B:0C:1C:5F:AA:B7:7B:4E:6A:C6:0A:2B:B2:98:E1:7E:F3:15:AE Authority key identifier: 8A:4F:F8:36:58:8B:BD:C5:E5:CC:52:6B:BB:EB:66:D5:14:0D:1B:86 Certificate issuer: /CN=8A4FF836588BBDC5E5CC526BBBEB66D5140D1B86 Certificate serial: 33CD4B10161EC20FDEF0E502FA81D97823D4544B Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8A4FF836588BBDC5E5CC526BBBEB66D5140D1B86.cer Subject info access: rsync://repo-rpki.idnic.net/repo/f9e7a28a-62f0-4d14-8702-403a5190eae1/0/8A4FF836588BBDC5E5CC526BBBEB66D5140D1B86.mft Manifest number: 034A Signing time: Fri 31 Oct 2025 13:21:21 +0000 Manifest this update: Fri 31 Oct 2025 13:16:21 +0000 Manifest next update: Mon 03 Nov 2025 15:46:21 +0000 Files and hashes: 1: 8A4FF836588BBDC5E5CC526BBBEB66D5140D1B86.crl (hash: RkQdnZw0UzRj9JRLSy12Y8wSsXZAEL7mTfbzsmnSQEI=) 2: 3130332e3137312e33302e302f32332d3234203d3e20313331313131.roa (hash: 0IdcwPtxZArM5JrmLtgkLYtthS0u5GSXZS6q7IiPcxg=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/f9e7a28a-62f0-4d14-8702-403a5190eae1/0/8A4FF836588BBDC5E5CC526BBBEB66D5140D1B86.crl rsync://repo-rpki.idnic.net/repo/f9e7a28a-62f0-4d14-8702-403a5190eae1/0/8A4FF836588BBDC5E5CC526BBBEB66D5140D1B86.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8A4FF836588BBDC5E5CC526BBBEB66D5140D1B86.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 03 Nov 2025 15:46:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 33:cd:4b:10:16:1e:c2:0f:de:f0:e5:02:fa:81:d9:78:23:d4:54:4b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8A4FF836588BBDC5E5CC526BBBEB66D5140D1B86 Validity Not Before: Oct 31 13:16:21 2025 GMT Not After : Nov 3 15:46:21 2025 GMT Subject: CN=128B0C1C5FAAB77B4E6AC60A2BB298E17EF315AE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:c0:e9:7f:e8:b5:54:41:ee:c7:d8:f8:32:0a: d2:ef:2e:ec:ea:7d:23:cb:c4:c8:26:62:5e:0c:29: 45:b6:78:06:26:cb:ae:c3:a3:39:9e:6d:ba:cd:66: 36:56:f8:4c:72:7d:66:4f:c8:e0:a1:62:6b:50:fe: 74:93:ab:c1:38:df:0c:bc:3a:86:d3:b9:cf:ab:5e: 66:c6:12:e7:9f:77:d6:87:bd:1e:43:aa:dc:aa:91: b2:fa:0e:69:04:28:3e:f5:68:8a:01:5b:47:23:e0: a1:98:ba:f0:b0:25:74:96:6d:8f:80:00:eb:2f:d1: 4a:92:ba:d9:8b:f4:d4:d0:af:ef:6f:b0:98:8e:5c: 8b:50:8d:49:24:94:d2:d8:ab:8f:b9:bc:14:7d:d6: 55:b3:58:cf:03:52:c3:89:1d:4e:31:38:07:c4:6c: 3c:5a:b4:61:bd:34:92:06:88:43:d0:a8:9a:1f:b5: 14:1f:51:9f:4f:da:9e:b0:47:b6:61:9d:c8:70:52: 96:f3:53:26:9a:b8:c7:9c:2e:13:ff:9c:d3:e9:33: 36:d0:55:91:d2:06:2d:e5:06:44:ba:c7:a8:55:ac: 2a:15:24:4d:c6:20:e7:bf:3c:30:83:8f:38:ef:77: 28:e2:b7:9e:83:39:c6:04:37:c5:ab:3d:d1:5c:42: df:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:8B:0C:1C:5F:AA:B7:7B:4E:6A:C6:0A:2B:B2:98:E1:7E:F3:15:AE X509v3 Authority Key Identifier: keyid:8A:4F:F8:36:58:8B:BD:C5:E5:CC:52:6B:BB:EB:66:D5:14:0D:1B:86 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/f9e7a28a-62f0-4d14-8702-403a5190eae1/0/8A4FF836588BBDC5E5CC526BBBEB66D5140D1B86.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8A4FF836588BBDC5E5CC526BBBEB66D5140D1B86.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f9e7a28a-62f0-4d14-8702-403a5190eae1/0/8A4FF836588BBDC5E5CC526BBBEB66D5140D1B86.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2c:b5:97:d7:1e:43:e6:ee:64:96:b8:6c:c6:b7:c3:db:03:c1: 25:2b:0a:4f:8e:67:90:21:ee:38:a6:56:48:7c:12:bd:eb:48: 67:27:cd:19:20:83:fd:24:1f:d3:bc:31:51:48:94:51:e1:4c: 53:ae:06:76:1e:42:35:52:e7:22:3d:f7:d4:74:d5:b0:75:53: d8:bb:16:a3:b7:90:2f:08:8a:c3:b3:33:f7:83:a7:1b:90:d4: c2:be:7e:bf:39:6b:e0:c9:c1:a1:d3:88:3a:4d:b0:1a:6c:a8: c6:af:a9:0a:93:30:4c:c3:0e:0d:3b:34:92:0e:e1:ac:92:27: 01:0b:67:ab:32:29:cd:d3:09:78:51:a9:58:03:ee:46:a7:44: 8c:4c:86:65:a7:92:95:25:34:8e:62:d0:c0:94:fa:ce:4a:71: 5c:73:fe:8c:d6:9b:5c:bd:93:25:9c:b6:6a:76:2e:32:a5:83: f2:c1:0b:0b:c3:7d:2d:a3:8a:a3:f9:27:fd:3a:3a:50:fe:7a: ec:2b:43:7c:42:d0:2b:fd:e1:47:96:89:8d:2f:1a:52:69:9b: ed:b2:52:ff:fd:f7:e9:e4:af:4f:ad:9d:5e:dd:44:5a:46:4c: eb:48:f7:a1:e7:0e:90:47:1d:70:0e:74:91:e5:0d:9f:0e:a9: d2:b1:71:89 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUM81LEBYewg/e8OUC+oHZeCPUVEswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEE0RkY4MzY1ODhCQkRDNUU1Q0M1MjZCQkJFQjY2RDUx NDBEMUI4NjAeFw0yNTEwMzExMzE2MjFaFw0yNTExMDMxNTQ2MjFaMDMxMTAvBgNV BAMTKDEyOEIwQzFDNUZBQUI3N0I0RTZBQzYwQTJCQjI5OEUxN0VGMzE1QUUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC0wOl/6LVUQe7H2PgyCtLvLuzq fSPLxMgmYl4MKUW2eAYmy67DozmebbrNZjZW+ExyfWZPyOChYmtQ/nSTq8E43wy8 OobTuc+rXmbGEuefd9aHvR5DqtyqkbL6DmkEKD71aIoBW0cj4KGYuvCwJXSWbY+A AOsv0UqSutmL9NTQr+9vsJiOXItQjUkklNLYq4+5vBR91lWzWM8DUsOJHU4xOAfE bDxatGG9NJIGiEPQqJoftRQfUZ9P2p6wR7ZhnchwUpbzUyaauMecLhP/nNPpMzbQ VZHSBi3lBkS6x6hVrCoVJE3GIOe/PDCDjzjvdyjit56DOcYEN8WrPdFcQt+lAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUEosMHF+qt3tOasYKK7KY4X7zFa4wHwYDVR0j BBgwFoAUik/4NliLvcXlzFJru+tm1RQNG4YwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m OWU3YTI4YS02MmYwLTRkMTQtODcwMi00MDNhNTE5MGVhZTEvMC84QTRGRjgzNjU4 OEJCREM1RTVDQzUyNkJCQkVCNjZENTE0MEQxQjg2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOEE0RkY4MzY1ODhCQkRDNUU1Q0M1MjZCQkJFQjY2RDUxNDBE MUI4Ni5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZjllN2EyOGEtNjJmMC00ZDE0LTg3 MDItNDAzYTUxOTBlYWUxLzAvOEE0RkY4MzY1ODhCQkRDNUU1Q0M1MjZCQkJFQjY2 RDUxNDBEMUI4Ni5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACy1l9ceQ+buZJa4bMa3w9sDwSUrCk+OZ5Ah 7jimVkh8Er3rSGcnzRkgg/0kH9O8MVFIlFHhTFOuBnYeQjVS5yI999R01bB1U9i7 FqO3kC8IisOzM/eDpxuQ1MK+fr85a+DJwaHTiDpNsBpsqMavqQqTMEzDDg07NJIO 4aySJwELZ6syKc3TCXhRqVgD7kanRIxMhmWnkpUlNI5i0MCU+s5KcVxz/ozWm1y9 kyWctmp2LjKlg/LBCwvDfS2jiqP5J/06OlD+euwrQ3xC0Cv94UeWiY0vGlJpm+2y Uv/99+nkr0+tnV7dRFpGTOtI96HnDpBHHXAOdJHlDZ8OqdKxcYk= -----END CERTIFICATE-----Generated at Sun Nov 2 05:04:31 2025 by rpki-client