$ rpki-client -vvf repo-rpki.idnic.net/repo/27d9f851-7e73-4384-950e-8be8e15fd3ee/0/8F84D6FEEAF8C5D3C5D13F101BC70B758BF50F6A.mft File: 8F84D6FEEAF8C5D3C5D13F101BC70B758BF50F6A.mft (raw, json) Hash identifier: DtzhBEYaVG344gcjSwdzfApf/DFhERpFwRb+U/hsDDw= Subject key identifier: 9B:DB:8C:16:3B:7A:D5:E3:08:28:65:32:94:6A:2F:7C:3B:B0:5B:0E Authority key identifier: 8F:84:D6:FE:EA:F8:C5:D3:C5:D1:3F:10:1B:C7:0B:75:8B:F5:0F:6A Certificate issuer: /CN=8F84D6FEEAF8C5D3C5D13F101BC70B758BF50F6A Certificate serial: 1E7F91316DCBAC52EEB74182BBEAD4C9C4E84C1A Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8F84D6FEEAF8C5D3C5D13F101BC70B758BF50F6A.cer Subject info access: rsync://repo-rpki.idnic.net/repo/27d9f851-7e73-4384-950e-8be8e15fd3ee/0/8F84D6FEEAF8C5D3C5D13F101BC70B758BF50F6A.mft Manifest number: 05D8 Signing time: Mon 20 Oct 2025 23:20:39 +0000 Manifest this update: Mon 20 Oct 2025 23:15:39 +0000 Manifest next update: Fri 24 Oct 2025 06:13:39 +0000 Files and hashes: 1: 3230322e37332e32342e302f32342d3234203d3e203535373031.roa (hash: 4zJcjhi99V9+23NjQKwrFy3Y4HQGoSDMxwY4qblbwdg=) 2: 34332e3235322e3233382e302f32342d3234203d3e203535373031.roa (hash: Nnf66JxT1+eZbCkYQn8x6cz4I9We7qQ0T90RTh7FkG0=) 3: 3230322e37332e32352e302f32342d3234203d3e20313431383932.roa (hash: L3e7xhgbdKiD6xLSCC6o4EcC4VabYtoVoPe/Fd1r3p4=) 4: 3130332e31382e37362e302f32322d3234203d3e203535373031.roa (hash: oa5lMgIER/j9/ZBqK2jTnvVzB4d9A9ON67O4sbQz5Lo=) 5: 3230322e37332e32362e302f32342d3234203d3e20313431383932.roa (hash: QqG89TEZjAnI8K1IrPR29kJtDOMjh4sJXdy9wDe7GkQ=) 6: 34332e3235322e3233362e302f32332d3234203d3e203535373031.roa (hash: Dc8BdtAPO03Z1L5MRp5Y72lj+merY2MxA64B93hGmbo=) 7: 3130332e33312e3233322e302f32322d3234203d3e203535373031.roa (hash: BrB/GW7Td9VbCbmZFNch6tbk4BKMd6sCGKbNPlrCa44=) 8: 34392e302e302e302f32322d3234203d3e203535373031.roa (hash: yzJFuCgJdtqHHRWns+YkV15nd/BuBUJW5VOi1zg7H6Q=) 9: 8F84D6FEEAF8C5D3C5D13F101BC70B758BF50F6A.crl (hash: UeNa9/PdCoDq2z6yaTs1R4Q9PrghljNQohM+OqRrx68=) 10: 3230322e37332e32372e302f32342d3234203d3e203535373031.roa (hash: 7FX65tSRyznIseHKWjzPuHzH3CNvHvrWJempYLyB19A=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/27d9f851-7e73-4384-950e-8be8e15fd3ee/0/8F84D6FEEAF8C5D3C5D13F101BC70B758BF50F6A.crl rsync://repo-rpki.idnic.net/repo/27d9f851-7e73-4384-950e-8be8e15fd3ee/0/8F84D6FEEAF8C5D3C5D13F101BC70B758BF50F6A.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8F84D6FEEAF8C5D3C5D13F101BC70B758BF50F6A.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Oct 2025 06:13:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1e:7f:91:31:6d:cb:ac:52:ee:b7:41:82:bb:ea:d4:c9:c4:e8:4c:1a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8F84D6FEEAF8C5D3C5D13F101BC70B758BF50F6A Validity Not Before: Oct 20 23:15:39 2025 GMT Not After : Oct 24 06:13:39 2025 GMT Subject: CN=9BDB8C163B7AD5E308286532946A2F7C3BB05B0E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:35:b3:e5:8d:99:87:be:4e:d5:fd:7c:5c:2c: 9a:1b:47:c9:74:80:c8:7f:3c:59:3f:fd:6b:dd:a5: 67:90:cf:d9:1b:9a:91:7b:8f:2d:02:60:78:28:b2: cd:7a:29:b4:2d:27:fa:10:65:c1:c8:aa:06:13:fc: c4:0e:41:ee:67:e9:f6:9b:13:3c:c3:3e:d5:02:74: 5a:90:9e:8a:15:bd:04:9a:3c:f0:b2:59:67:a1:21: 4e:72:56:01:7e:ed:c4:2b:c7:9a:4e:ea:0d:12:35: ab:9d:ba:d2:0f:6b:bd:db:d1:e4:4b:62:98:7c:9d: fd:8a:90:af:df:ed:f3:f7:cb:cd:08:42:ce:fa:00: a7:d2:4e:37:e2:7f:bb:4e:ae:27:67:d4:f0:dd:e7: 54:00:f6:3e:8e:4d:d5:7d:56:e4:e1:bd:a9:7b:03: ab:f7:23:6c:df:61:24:52:84:79:40:bf:1d:43:44: c8:6d:80:62:ed:73:a8:43:e6:cc:56:94:a6:cb:09: f6:3c:33:a2:dd:55:50:52:f5:b6:15:ad:93:9d:ed: 9c:54:1f:48:a6:aa:96:a0:c9:b1:6e:23:dd:1c:11: 68:e7:bd:a4:66:93:13:31:83:7d:c8:ba:67:c2:ba: d3:ee:95:da:7a:e4:b0:11:8f:b3:f1:a0:57:a3:cf: 1c:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9B:DB:8C:16:3B:7A:D5:E3:08:28:65:32:94:6A:2F:7C:3B:B0:5B:0E X509v3 Authority Key Identifier: keyid:8F:84:D6:FE:EA:F8:C5:D3:C5:D1:3F:10:1B:C7:0B:75:8B:F5:0F:6A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/27d9f851-7e73-4384-950e-8be8e15fd3ee/0/8F84D6FEEAF8C5D3C5D13F101BC70B758BF50F6A.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8F84D6FEEAF8C5D3C5D13F101BC70B758BF50F6A.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/27d9f851-7e73-4384-950e-8be8e15fd3ee/0/8F84D6FEEAF8C5D3C5D13F101BC70B758BF50F6A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8f:ae:c5:c6:d6:e2:a5:39:ca:3c:f1:29:cc:09:0e:42:2a:9d: 20:b2:7a:83:bc:56:5e:e8:3b:40:8d:d5:0c:6f:f9:84:09:03: 2b:f0:42:57:cf:c9:87:a9:bd:35:f3:21:eb:80:24:77:dd:ff: 3c:aa:e6:c7:e3:63:d6:2b:f0:09:fb:10:0b:6b:d6:9b:9d:0e: 06:e0:dc:5a:73:ad:c3:9d:66:9d:7a:38:be:85:81:24:95:0e: 50:e4:24:f7:82:88:b6:44:46:54:95:e2:ae:e5:ab:e6:e2:dc: e9:c7:45:fe:59:b2:90:d7:77:fb:86:12:75:ae:6b:93:2e:79: 20:b6:f6:cd:2b:59:02:88:cc:45:1d:61:f8:a9:ca:0c:e7:f8: f0:f1:ca:25:bf:d2:a0:24:62:23:f9:c3:c4:46:4b:c3:fb:57: 77:f4:6d:0b:de:2d:db:1e:ff:76:24:00:91:44:aa:ac:0c:28: f5:07:d8:60:c2:f0:cc:b1:bc:34:dc:59:f8:b2:dc:81:be:11: 94:d3:6d:40:cf:8a:26:fd:4d:c0:0b:47:9b:f6:f6:21:4a:e1: 00:7b:da:96:00:20:47:a8:6f:df:bb:98:59:02:fa:df:7f:02: de:58:30:3c:fc:2a:6c:96:d3:87:08:ad:31:06:f1:c5:ce:f1: ed:16:0a:0b -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUHn+RMW3LrFLut0GCu+rUycToTBowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEY4NEQ2RkVFQUY4QzVEM0M1RDEzRjEwMUJDNzBCNzU4 QkY1MEY2QTAeFw0yNTEwMjAyMzE1MzlaFw0yNTEwMjQwNjEzMzlaMDMxMTAvBgNV BAMTKDlCREI4QzE2M0I3QUQ1RTMwODI4NjUzMjk0NkEyRjdDM0JCMDVCMEUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDmNbPljZmHvk7V/XxcLJobR8l0 gMh/PFk//WvdpWeQz9kbmpF7jy0CYHgoss16KbQtJ/oQZcHIqgYT/MQOQe5n6fab EzzDPtUCdFqQnooVvQSaPPCyWWehIU5yVgF+7cQrx5pO6g0SNaudutIPa73b0eRL Yph8nf2KkK/f7fP3y80IQs76AKfSTjfif7tOridn1PDd51QA9j6OTdV9VuThval7 A6v3I2zfYSRShHlAvx1DRMhtgGLtc6hD5sxWlKbLCfY8M6LdVVBS9bYVrZOd7ZxU H0imqpagybFuI90cEWjnvaRmkxMxg33IumfCutPuldp65LARj7PxoFejzxxpAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUm9uMFjt61eMIKGUylGovfDuwWw4wHwYDVR0j BBgwFoAUj4TW/ur4xdPF0T8QG8cLdYv1D2owDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y N2Q5Zjg1MS03ZTczLTQzODQtOTUwZS04YmU4ZTE1ZmQzZWUvMC84Rjg0RDZGRUVB RjhDNUQzQzVEMTNGMTAxQkM3MEI3NThCRjUwRjZBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOEY4NEQ2RkVFQUY4QzVEM0M1RDEzRjEwMUJDNzBCNzU4QkY1 MEY2QS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMjdkOWY4NTEtN2U3My00Mzg0LTk1 MGUtOGJlOGUxNWZkM2VlLzAvOEY4NEQ2RkVFQUY4QzVEM0M1RDEzRjEwMUJDNzBC NzU4QkY1MEY2QS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAI+uxcbW4qU5yjzxKcwJDkIqnSCyeoO8Vl7o O0CN1Qxv+YQJAyvwQlfPyYepvTXzIeuAJHfd/zyq5sfjY9Yr8An7EAtr1pudDgbg 3FpzrcOdZp16OL6FgSSVDlDkJPeCiLZERlSV4q7lq+bi3OnHRf5ZspDXd/uGEnWu a5MueSC29s0rWQKIzEUdYfipygzn+PDxyiW/0qAkYiP5w8RGS8P7V3f0bQveLdse /3YkAJFEqqwMKPUH2GDC8MyxvDTcWfiy3IG+EZTTbUDPiib9TcALR5v29iFK4QB7 2pYAIEeob9+7mFkC+t9/At5YMDz8KmyW04cIrTEG8cXO8e0WCgs= -----END CERTIFICATE-----Generated at Wed Oct 22 04:51:59 2025 by rpki-client