$ rpki-client -vvf repo-rpki.idnic.net/repo/09a88897-c387-4735-acd8-1d1c53cde264/0/8B7E0099F26BEEE90826C9B0E424575BDE128403.mft File: 8B7E0099F26BEEE90826C9B0E424575BDE128403.mft (raw, json) Hash identifier: mnZJbu1dGHAG+1LMiMby6dsW9xsXrcEdzQQTCnIXNTs= Subject key identifier: 04:B4:10:56:C5:86:E7:D7:9E:D5:A1:66:30:CD:EE:2A:AA:F1:81:3D Authority key identifier: 8B:7E:00:99:F2:6B:EE:E9:08:26:C9:B0:E4:24:57:5B:DE:12:84:03 Certificate issuer: /CN=8B7E0099F26BEEE90826C9B0E424575BDE128403 Certificate serial: 78D23A88BBED25A145EE8AE0C7059B1479B05706 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8B7E0099F26BEEE90826C9B0E424575BDE128403.cer Subject info access: rsync://repo-rpki.idnic.net/repo/09a88897-c387-4735-acd8-1d1c53cde264/0/8B7E0099F26BEEE90826C9B0E424575BDE128403.mft Manifest number: 02A5 Signing time: Wed 29 Oct 2025 13:12:08 +0000 Manifest this update: Wed 29 Oct 2025 13:07:08 +0000 Manifest next update: Sat 01 Nov 2025 20:04:08 +0000 Files and hashes: 1: 8B7E0099F26BEEE90826C9B0E424575BDE128403.crl (hash: XSoRGsNvXmXe8/LAOXbqLgpe8l8hRNaNovOta0tsPq4=) 2: 3130332e3137392e38362e302f32332d3234203d3e20313430333839.roa (hash: E6T8Gt5EtL567pGgeSiX6DPJMeUcOvm0iW+qF8Vx1Vo=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/09a88897-c387-4735-acd8-1d1c53cde264/0/8B7E0099F26BEEE90826C9B0E424575BDE128403.crl rsync://repo-rpki.idnic.net/repo/09a88897-c387-4735-acd8-1d1c53cde264/0/8B7E0099F26BEEE90826C9B0E424575BDE128403.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8B7E0099F26BEEE90826C9B0E424575BDE128403.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 01 Nov 2025 20:04:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 78:d2:3a:88:bb:ed:25:a1:45:ee:8a:e0:c7:05:9b:14:79:b0:57:06 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8B7E0099F26BEEE90826C9B0E424575BDE128403 Validity Not Before: Oct 29 13:07:08 2025 GMT Not After : Nov 1 20:04:08 2025 GMT Subject: CN=04B41056C586E7D79ED5A16630CDEE2AAAF1813D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:8b:0e:ce:87:eb:5b:7d:9d:5c:46:08:5c:ac: 13:8f:23:7e:fa:65:17:df:8c:0e:a9:f9:bb:8f:40: f1:52:71:5f:9d:cd:15:7e:ce:31:bf:be:67:d4:3e: 60:66:35:36:86:42:fb:85:7d:ae:95:fd:d9:b7:c0: 69:75:26:fc:4d:90:cc:cb:01:f2:79:ab:b5:32:bc: 8b:6f:79:e7:90:8a:99:a6:18:6f:8c:d7:19:71:5e: 77:1f:9f:f6:26:a9:7f:c5:67:ff:1e:26:dc:4c:f7: 9f:fa:ad:b2:ab:94:e8:b2:83:58:c1:08:0b:81:cb: 0b:f7:08:b4:d8:d7:4a:82:db:55:cf:1d:2b:a4:2c: 87:df:8c:bd:c6:d6:9f:b9:44:94:ed:71:6f:db:f8: 4d:76:36:3a:88:3e:05:ee:5c:07:84:bb:0b:4f:42: 49:f1:50:cd:58:4e:22:7e:4b:7a:ac:86:c9:84:ab: 03:82:38:e4:f2:65:87:07:3d:70:dc:8b:5d:5a:70: 14:61:ac:05:90:87:22:81:93:eb:ab:95:2e:ae:b4: 87:20:2d:52:68:20:5e:8f:65:fe:5d:e6:b6:a4:c9: 8f:32:36:64:db:cb:f4:af:59:e9:44:6b:84:49:30: 92:06:aa:7a:c4:33:c5:a2:33:ef:79:76:c9:95:f6: 2b:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 04:B4:10:56:C5:86:E7:D7:9E:D5:A1:66:30:CD:EE:2A:AA:F1:81:3D X509v3 Authority Key Identifier: keyid:8B:7E:00:99:F2:6B:EE:E9:08:26:C9:B0:E4:24:57:5B:DE:12:84:03 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/09a88897-c387-4735-acd8-1d1c53cde264/0/8B7E0099F26BEEE90826C9B0E424575BDE128403.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8B7E0099F26BEEE90826C9B0E424575BDE128403.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/09a88897-c387-4735-acd8-1d1c53cde264/0/8B7E0099F26BEEE90826C9B0E424575BDE128403.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 36:66:30:16:0d:be:c7:d4:00:11:87:fd:c7:40:b4:7b:c0:9a: 1e:04:6f:2d:6a:fd:1c:4f:ab:be:e2:10:14:fb:a9:d9:9f:37: 7e:50:65:1d:8d:4c:3e:c7:24:aa:cc:a4:60:35:4f:0d:79:e7: c7:2d:da:06:1b:1b:d2:6b:e4:63:d5:78:e0:5c:4e:bf:cd:32: d0:c7:9c:6a:b4:66:2a:d1:e5:3a:47:73:a1:fe:83:d0:12:85: 0b:d5:cb:e5:c9:3a:f8:07:56:0b:21:22:03:93:33:41:be:3c: 6e:7e:65:f1:63:9f:31:58:99:8c:b5:c4:e9:67:53:cb:84:54: ab:14:b8:2d:4a:59:a9:12:b6:63:98:05:fa:45:be:73:bb:9d: c8:be:6c:1b:9a:86:c1:ef:a8:ca:0c:4e:20:c2:54:b7:58:fd: 60:52:8c:bf:5a:5b:c5:ab:69:64:fc:ad:9b:56:99:5d:1f:31: 85:1f:1d:b0:a9:00:68:74:34:ab:a5:19:c3:46:df:6f:e6:42: fa:3c:54:ff:67:21:37:14:66:ba:5c:e4:c7:6f:f3:00:04:69: a9:29:20:8e:e2:b0:c0:da:7a:69:73:33:65:6c:6e:bd:8a:7f: 1f:20:e2:6c:75:03:93:6b:b0:6d:c0:00:8b:16:a0:b0:61:f2: 9f:16:86:7b -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUeNI6iLvtJaFF7orgxwWbFHmwVwYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEI3RTAwOTlGMjZCRUVFOTA4MjZDOUIwRTQyNDU3NUJE RTEyODQwMzAeFw0yNTEwMjkxMzA3MDhaFw0yNTExMDEyMDA0MDhaMDMxMTAvBgNV BAMTKDA0QjQxMDU2QzU4NkU3RDc5RUQ1QTE2NjMwQ0RFRTJBQUFGMTgxM0QwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCkiw7Oh+tbfZ1cRghcrBOPI376 ZRffjA6p+buPQPFScV+dzRV+zjG/vmfUPmBmNTaGQvuFfa6V/dm3wGl1JvxNkMzL AfJ5q7UyvItveeeQipmmGG+M1xlxXncfn/YmqX/FZ/8eJtxM95/6rbKrlOiyg1jB CAuBywv3CLTY10qC21XPHSukLIffjL3G1p+5RJTtcW/b+E12NjqIPgXuXAeEuwtP QknxUM1YTiJ+S3qshsmEqwOCOOTyZYcHPXDci11acBRhrAWQhyKBk+urlS6utIcg LVJoIF6PZf5d5rakyY8yNmTby/SvWelEa4RJMJIGqnrEM8WiM+95dsmV9ivzAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUBLQQVsWG59ee1aFmMM3uKqrxgT0wHwYDVR0j BBgwFoAUi34AmfJr7ukIJsmw5CRXW94ShAMwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w OWE4ODg5Ny1jMzg3LTQ3MzUtYWNkOC0xZDFjNTNjZGUyNjQvMC84QjdFMDA5OUYy NkJFRUU5MDgyNkM5QjBFNDI0NTc1QkRFMTI4NDAzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOEI3RTAwOTlGMjZCRUVFOTA4MjZDOUIwRTQyNDU3NUJERTEy ODQwMy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMDlhODg4OTctYzM4Ny00NzM1LWFj ZDgtMWQxYzUzY2RlMjY0LzAvOEI3RTAwOTlGMjZCRUVFOTA4MjZDOUIwRTQyNDU3 NUJERTEyODQwMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADZmMBYNvsfUABGH/cdAtHvAmh4Eby1q/RxP q77iEBT7qdmfN35QZR2NTD7HJKrMpGA1Tw1558ct2gYbG9Jr5GPVeOBcTr/NMtDH nGq0ZirR5TpHc6H+g9AShQvVy+XJOvgHVgshIgOTM0G+PG5+ZfFjnzFYmYy1xOln U8uEVKsUuC1KWakStmOYBfpFvnO7nci+bBuahsHvqMoMTiDCVLdY/WBSjL9aW8Wr aWT8rZtWmV0fMYUfHbCpAGh0NKulGcNG32/mQvo8VP9nITcUZrpc5Mdv8wAEaakp II7isMDaemlzM2Vsbr2Kfx8g4mx1A5NrsG3AAIsWoLBh8p8Whns= -----END CERTIFICATE-----Generated at Thu Oct 30 14:55:33 2025 by rpki-client