$ rpki-client -vvf repo-rpki.idnic.net/repo/5252ead3-dc8f-4d86-afcf-a140e5b87532/0/8CFB227DA1EF51DB23364BBA034D0F68A09A5F59.mft File: 8CFB227DA1EF51DB23364BBA034D0F68A09A5F59.mft (raw, json) Hash identifier: WQQwKym9zeBuNcGXgwHgS9YOkZOjnsON+1URKDSksPY= Subject key identifier: E9:DF:81:49:91:57:AE:CF:E3:7E:C6:D5:7D:87:4B:B2:7B:A6:51:50 Authority key identifier: 8C:FB:22:7D:A1:EF:51:DB:23:36:4B:BA:03:4D:0F:68:A0:9A:5F:59 Certificate issuer: /CN=8CFB227DA1EF51DB23364BBA034D0F68A09A5F59 Certificate serial: 414FEB3AB4235A92075C3EF0C69CB6A99C443CA6 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8CFB227DA1EF51DB23364BBA034D0F68A09A5F59.cer Subject info access: rsync://repo-rpki.idnic.net/repo/5252ead3-dc8f-4d86-afcf-a140e5b87532/0/8CFB227DA1EF51DB23364BBA034D0F68A09A5F59.mft Manifest number: 0239 Signing time: Sat 25 Oct 2025 18:21:33 +0000 Manifest this update: Sat 25 Oct 2025 18:16:33 +0000 Manifest next update: Tue 28 Oct 2025 23:36:33 +0000 Files and hashes: 1: 8CFB227DA1EF51DB23364BBA034D0F68A09A5F59.crl (hash: Vcx4Jz+X/pxX/uiuZGM1HXsV5A9w/X3hvigOnZfj+4c=) 2: 3130332e3138362e3139342e302f32342d3234203d3e203438343635.roa (hash: nuw56AWJFQx7bF2mLso7Fp7ypapHW7bx18alMUZHm9U=) 3: 3130332e3138362e3139342e302f32342d3234203d3e20313439373132.roa (hash: uzPIoUslKlL0kCJ3Mr8GlDHsPvFS4WU5l7ZsMhLtDsU=) 4: 3130332e3138362e3139342e302f32332d3234203d3e20313439373132.roa (hash: S9MFaIq/j9TJ63dOJfnzWaZP6j2QyCQRqTU45iGYFSM=) 5: 3130332e3138362e3139352e302f32342d3234203d3e203438343635.roa (hash: 9nS/psP6uP/NgK0GsDYJioeVISZGFYj6wNXBWyPXoig=) 6: 3130332e3138362e3139342e302f32332d3233203d3e20313439373132.roa (hash: swBTOVyl/nQxFd9eqJx6PzMQ7ExSAWTFjV6g64/KqU0=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/5252ead3-dc8f-4d86-afcf-a140e5b87532/0/8CFB227DA1EF51DB23364BBA034D0F68A09A5F59.crl rsync://repo-rpki.idnic.net/repo/5252ead3-dc8f-4d86-afcf-a140e5b87532/0/8CFB227DA1EF51DB23364BBA034D0F68A09A5F59.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8CFB227DA1EF51DB23364BBA034D0F68A09A5F59.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 28 Oct 2025 23:36:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 41:4f:eb:3a:b4:23:5a:92:07:5c:3e:f0:c6:9c:b6:a9:9c:44:3c:a6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8CFB227DA1EF51DB23364BBA034D0F68A09A5F59 Validity Not Before: Oct 25 18:16:33 2025 GMT Not After : Oct 28 23:36:33 2025 GMT Subject: CN=E9DF81499157AECFE37EC6D57D874BB27BA65150 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:e4:d6:c1:2b:3c:aa:1a:a1:67:e4:a4:a8:e0: 8d:c9:88:ba:0d:2e:1e:2e:f2:35:2c:88:9d:88:41: a0:9c:87:db:4b:32:85:9e:4a:75:48:d3:66:55:2e: 62:a7:7c:49:ad:d7:2c:16:c4:7c:56:ba:8a:9b:d9: ca:79:1b:57:c7:d6:54:0b:b3:6b:dc:ff:74:77:66: e9:84:58:34:7f:b3:1a:3c:a9:2f:a9:8e:61:56:b1: fa:76:eb:a1:3e:b8:b1:a2:2e:03:5f:e8:0b:03:b3: 76:3b:1f:0d:09:08:11:f5:4e:d6:75:94:e5:a3:40: 96:cb:8e:ce:68:e2:60:b8:35:13:0e:fa:a7:b3:ab: 49:46:21:72:3f:fb:a4:86:a5:4a:d7:c6:c5:0d:58: e9:72:eb:1c:53:18:3f:cc:20:b1:05:85:11:31:9c: 7a:e3:58:54:e5:4b:29:03:93:58:91:d6:a5:e5:f2: 8d:19:41:64:82:8f:25:05:a2:e3:2c:7e:ae:a2:9b: 21:ed:6c:cc:bb:7f:56:0f:c9:a1:2a:8f:25:9d:9b: c0:98:ce:c9:1b:9a:05:96:46:9a:20:fa:79:fd:3b: 9e:93:52:c8:28:bd:94:48:40:3e:cf:81:40:16:6e: cd:ac:59:24:f5:59:03:d7:db:b1:00:33:34:f6:a7: 8e:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E9:DF:81:49:91:57:AE:CF:E3:7E:C6:D5:7D:87:4B:B2:7B:A6:51:50 X509v3 Authority Key Identifier: keyid:8C:FB:22:7D:A1:EF:51:DB:23:36:4B:BA:03:4D:0F:68:A0:9A:5F:59 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/5252ead3-dc8f-4d86-afcf-a140e5b87532/0/8CFB227DA1EF51DB23364BBA034D0F68A09A5F59.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8CFB227DA1EF51DB23364BBA034D0F68A09A5F59.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/5252ead3-dc8f-4d86-afcf-a140e5b87532/0/8CFB227DA1EF51DB23364BBA034D0F68A09A5F59.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2a:dc:c9:b9:0a:c3:10:ac:e1:20:6b:57:8e:8c:2c:f9:f2:2b: 1f:c4:37:36:5d:15:b4:1e:50:9a:bc:74:25:c9:bb:24:aa:c5: 6b:82:64:62:11:c6:ba:1a:64:6f:67:4b:53:69:4f:85:cd:ad: 87:30:9c:e1:30:b3:7e:7d:41:a5:db:ca:43:87:62:63:2d:cb: 88:c2:cb:d3:be:77:a8:04:0f:80:14:44:8a:c9:aa:a3:08:28: a8:c1:0d:13:d9:79:83:00:f9:fe:a4:7c:e4:c8:95:ff:d1:f0: 38:0f:d1:e0:67:29:b1:66:0d:41:b1:3d:c3:cb:b6:30:4b:a6: d0:d6:03:1c:0e:cd:c9:4b:ba:05:17:16:54:b1:4f:85:ab:a4: 99:1e:0c:62:7b:6a:8c:ee:63:fb:c2:7f:9b:cc:a3:1a:f7:9a: 6f:2b:a2:c7:a9:95:b7:24:ea:91:19:7c:0f:bb:13:d3:f2:ee: c6:04:64:4a:09:8e:b1:8c:89:38:7f:36:2f:11:6e:c8:d8:a5: b1:15:84:84:54:88:80:60:90:37:34:5f:64:c6:37:66:32:1e: 36:a9:cf:89:03:6b:2e:fb:5b:3f:37:57:f0:50:92:c5:f0:ff: 8c:68:31:62:62:7e:10:d1:d4:44:42:28:67:b8:49:88:6b:ff: dd:71:6d:2e -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUQU/rOrQjWpIHXD7wxpy2qZxEPKYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOENGQjIyN0RBMUVGNTFEQjIzMzY0QkJBMDM0RDBGNjhB MDlBNUY1OTAeFw0yNTEwMjUxODE2MzNaFw0yNTEwMjgyMzM2MzNaMDMxMTAvBgNV BAMTKEU5REY4MTQ5OTE1N0FFQ0ZFMzdFQzZENTdEODc0QkIyN0JBNjUxNTAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC95NbBKzyqGqFn5KSo4I3JiLoN Lh4u8jUsiJ2IQaCch9tLMoWeSnVI02ZVLmKnfEmt1ywWxHxWuoqb2cp5G1fH1lQL s2vc/3R3ZumEWDR/sxo8qS+pjmFWsfp266E+uLGiLgNf6AsDs3Y7Hw0JCBH1TtZ1 lOWjQJbLjs5o4mC4NRMO+qezq0lGIXI/+6SGpUrXxsUNWOly6xxTGD/MILEFhREx nHrjWFTlSykDk1iR1qXl8o0ZQWSCjyUFouMsfq6imyHtbMy7f1YPyaEqjyWdm8CY zskbmgWWRpog+nn9O56TUsgovZRIQD7PgUAWbs2sWST1WQPX27EAMzT2p44PAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU6d+BSZFXrs/jfsbVfYdLsnumUVAwHwYDVR0j BBgwFoAUjPsifaHvUdsjNku6A00PaKCaX1kwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 MjUyZWFkMy1kYzhmLTRkODYtYWZjZi1hMTQwZTViODc1MzIvMC84Q0ZCMjI3REEx RUY1MURCMjMzNjRCQkEwMzREMEY2OEEwOUE1RjU5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOENGQjIyN0RBMUVGNTFEQjIzMzY0QkJBMDM0RDBGNjhBMDlB NUY1OS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNTI1MmVhZDMtZGM4Zi00ZDg2LWFm Y2YtYTE0MGU1Yjg3NTMyLzAvOENGQjIyN0RBMUVGNTFEQjIzMzY0QkJBMDM0RDBG NjhBMDlBNUY1OS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACrcybkKwxCs4SBrV46MLPnyKx/ENzZdFbQe UJq8dCXJuySqxWuCZGIRxroaZG9nS1NpT4XNrYcwnOEws359QaXbykOHYmMty4jC y9O+d6gED4AURIrJqqMIKKjBDRPZeYMA+f6kfOTIlf/R8DgP0eBnKbFmDUGxPcPL tjBLptDWAxwOzclLugUXFlSxT4WrpJkeDGJ7aozuY/vCf5vMoxr3mm8roseplbck 6pEZfA+7E9Py7sYEZEoJjrGMiTh/Ni8RbsjYpbEVhIRUiIBgkDc0X2TGN2YyHjap z4kDay77Wz83V/BQksXw/4xoMWJifhDR1ERCKGe4SYhr/91xbS4= -----END CERTIFICATE-----Generated at Mon Oct 27 09:39:30 2025 by rpki-client