$ rpki-client -vvf repo-rpki.idnic.net/repo/758db87b-16cd-437a-a5b5-08cb35da97f0/0/8CBCE2EE006256C9A6207949314A7D1FCC415B5A.mft File: 8CBCE2EE006256C9A6207949314A7D1FCC415B5A.mft (raw, json) Hash identifier: euh6MF4udHnqIXcSIKoPrD5OF5UHjFKCz6tkOWWxncM= Subject key identifier: F4:E9:7E:97:D8:14:04:D6:06:72:67:1B:E3:10:DB:84:E7:05:1D:8F Authority key identifier: 8C:BC:E2:EE:00:62:56:C9:A6:20:79:49:31:4A:7D:1F:CC:41:5B:5A Certificate issuer: /CN=8CBCE2EE006256C9A6207949314A7D1FCC415B5A Certificate serial: 3F671BC7AEF6D72E7A95C6DA5A75BCD411BD158A Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8CBCE2EE006256C9A6207949314A7D1FCC415B5A.cer Subject info access: rsync://repo-rpki.idnic.net/repo/758db87b-16cd-437a-a5b5-08cb35da97f0/0/8CBCE2EE006256C9A6207949314A7D1FCC415B5A.mft Manifest number: 022A Signing time: Thu 30 Oct 2025 17:21:32 +0000 Manifest this update: Thu 30 Oct 2025 17:16:32 +0000 Manifest next update: Mon 03 Nov 2025 03:42:32 +0000 Files and hashes: 1: 3130332e3138372e3131322e302f32332d3234203d3e20313439373230.roa (hash: tJd9lCwOT2E5aUEAYGLVk9Vox9W7mUTKc82A3hANFMo=) 2: 8CBCE2EE006256C9A6207949314A7D1FCC415B5A.crl (hash: 8WawPfAo8+XGMSjzOG5wWsJ3cOn7cEYKp4u84YL3ftA=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/758db87b-16cd-437a-a5b5-08cb35da97f0/0/8CBCE2EE006256C9A6207949314A7D1FCC415B5A.crl rsync://repo-rpki.idnic.net/repo/758db87b-16cd-437a-a5b5-08cb35da97f0/0/8CBCE2EE006256C9A6207949314A7D1FCC415B5A.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8CBCE2EE006256C9A6207949314A7D1FCC415B5A.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 03 Nov 2025 03:42:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3f:67:1b:c7:ae:f6:d7:2e:7a:95:c6:da:5a:75:bc:d4:11:bd:15:8a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8CBCE2EE006256C9A6207949314A7D1FCC415B5A Validity Not Before: Oct 30 17:16:32 2025 GMT Not After : Nov 3 03:42:32 2025 GMT Subject: CN=F4E97E97D81404D60672671BE310DB84E7051D8F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:88:26:7b:61:16:3d:4a:ed:93:3c:9a:81:91: 6f:d4:80:42:62:3d:aa:64:34:7d:2d:b4:09:9f:0d: 9b:d9:33:56:36:a5:9b:c3:22:95:bb:1a:2c:d8:c5: ae:68:62:85:12:34:70:0e:d7:d5:54:ef:66:1d:0a: 67:34:32:e1:a3:22:88:3f:94:33:fc:3d:48:53:a0: ec:fb:0d:84:48:b3:44:7a:f2:90:4b:b1:5e:9c:97: 90:ac:8d:60:9b:53:11:f6:9d:7b:f0:ce:a5:d7:2e: ec:f5:e6:fb:0e:dc:1d:c2:34:a2:b4:69:1c:fb:03: 04:32:0f:f4:b6:a8:8a:0a:31:de:5d:d3:39:77:22: fb:40:33:4e:8f:e8:68:79:fb:1a:53:ed:0d:67:13: c9:af:42:f2:56:af:bd:08:71:e1:6b:15:49:62:b1: 37:e9:6e:88:0e:45:5d:5b:d2:2e:a3:55:f3:0e:ae: f4:58:44:b0:90:f0:48:01:99:5a:2b:32:a1:49:88: 79:06:a5:22:1b:46:b0:2e:2b:e9:65:8d:87:9d:ff: c5:82:80:40:e6:51:ea:ad:d3:2d:1d:5a:96:c0:67: 56:b0:08:48:96:01:3c:37:01:f9:e6:ac:65:87:3c: 18:27:eb:35:ca:7e:ea:77:09:0e:72:b7:92:33:58: f6:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F4:E9:7E:97:D8:14:04:D6:06:72:67:1B:E3:10:DB:84:E7:05:1D:8F X509v3 Authority Key Identifier: keyid:8C:BC:E2:EE:00:62:56:C9:A6:20:79:49:31:4A:7D:1F:CC:41:5B:5A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/758db87b-16cd-437a-a5b5-08cb35da97f0/0/8CBCE2EE006256C9A6207949314A7D1FCC415B5A.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8CBCE2EE006256C9A6207949314A7D1FCC415B5A.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/758db87b-16cd-437a-a5b5-08cb35da97f0/0/8CBCE2EE006256C9A6207949314A7D1FCC415B5A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c5:54:d4:a5:d1:12:43:84:61:f9:f8:19:90:6d:11:27:be:86: 8b:15:a1:7e:b6:87:c0:05:5a:64:9c:c5:1a:9c:88:66:7c:85: 8d:34:75:62:2d:5f:7e:1a:bb:03:b2:4e:a8:91:f3:33:f0:64: f7:86:d7:df:61:55:0c:6e:3d:37:6e:fc:c4:82:5b:f9:c6:c8: 86:f5:c2:f1:16:b7:b6:96:d6:7d:e8:68:14:9b:7c:6d:b2:9d: 9e:43:1c:c6:bf:5e:a7:59:22:25:5a:54:59:9e:e1:e2:08:61: 9c:27:ce:8e:6d:70:7f:b5:cf:a3:cc:71:dc:c4:0d:f9:a2:91: 7a:26:ca:21:e2:ec:6f:55:cf:02:98:dc:bd:2a:bf:9c:29:fb: ae:1e:13:b8:95:2e:0f:36:33:2f:ec:d1:0b:83:8e:c1:76:73: 7a:f7:df:43:d1:b6:47:68:b8:43:72:b8:a5:d8:7f:f8:a7:40: d6:63:fd:c4:4f:ad:e3:74:ec:80:e5:06:c7:c4:12:2b:37:bf: d9:2a:d8:1f:a6:33:df:b8:7b:5b:0d:ae:64:ad:08:4b:a4:ec: 4a:11:28:88:a6:28:f6:0b:1b:06:bf:a1:2b:e2:d1:67:8f:98: 3d:9a:60:a3:36:8c:e6:33:67:83:39:3b:b9:75:69:73:83:1e: 76:d8:54:d1 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUP2cbx6721y56lcbaWnW81BG9FYowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOENCQ0UyRUUwMDYyNTZDOUE2MjA3OTQ5MzE0QTdEMUZD QzQxNUI1QTAeFw0yNTEwMzAxNzE2MzJaFw0yNTExMDMwMzQyMzJaMDMxMTAvBgNV BAMTKEY0RTk3RTk3RDgxNDA0RDYwNjcyNjcxQkUzMTBEQjg0RTcwNTFEOEYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCaiCZ7YRY9Su2TPJqBkW/UgEJi PapkNH0ttAmfDZvZM1Y2pZvDIpW7GizYxa5oYoUSNHAO19VU72YdCmc0MuGjIog/ lDP8PUhToOz7DYRIs0R68pBLsV6cl5CsjWCbUxH2nXvwzqXXLuz15vsO3B3CNKK0 aRz7AwQyD/S2qIoKMd5d0zl3IvtAM06P6Gh5+xpT7Q1nE8mvQvJWr70IceFrFUli sTfpbogORV1b0i6jVfMOrvRYRLCQ8EgBmVorMqFJiHkGpSIbRrAuK+lljYed/8WC gEDmUeqt0y0dWpbAZ1awCEiWATw3AfnmrGWHPBgn6zXKfup3CQ5yt5IzWPa9AgMB AAGjggI8MIICODAdBgNVHQ4EFgQU9Ol+l9gUBNYGcmcb4xDbhOcFHY8wHwYDVR0j BBgwFoAUjLzi7gBiVsmmIHlJMUp9H8xBW1owDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 NThkYjg3Yi0xNmNkLTQzN2EtYTViNS0wOGNiMzVkYTk3ZjAvMC84Q0JDRTJFRTAw NjI1NkM5QTYyMDc5NDkzMTRBN0QxRkNDNDE1QjVBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOENCQ0UyRUUwMDYyNTZDOUE2MjA3OTQ5MzE0QTdEMUZDQzQx NUI1QS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNzU4ZGI4N2ItMTZjZC00MzdhLWE1 YjUtMDhjYjM1ZGE5N2YwLzAvOENCQ0UyRUUwMDYyNTZDOUE2MjA3OTQ5MzE0QTdE MUZDQzQxNUI1QS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAMVU1KXREkOEYfn4GZBtESe+hosVoX62h8AF WmScxRqciGZ8hY00dWItX34auwOyTqiR8zPwZPeG199hVQxuPTdu/MSCW/nGyIb1 wvEWt7aW1n3oaBSbfG2ynZ5DHMa/XqdZIiVaVFme4eIIYZwnzo5tcH+1z6PMcdzE DfmikXomyiHi7G9VzwKY3L0qv5wp+64eE7iVLg82My/s0QuDjsF2c3r330PRtkdo uENyuKXYf/inQNZj/cRPreN07IDlBsfEEis3v9kq2B+mM9+4e1sNrmStCEuk7EoR KIimKPYLGwa/oSvi0WePmD2aYKM2jOYzZ4M5O7l1aXODHnbYVNE= -----END CERTIFICATE-----Generated at Fri Oct 31 08:54:50 2025 by rpki-client