$ rpki-client -vvf repo-rpki.idnic.net/repo/a82db9d3-d6eb-4d6b-9a24-feeb21aa8f53/0/8BE281D2F4ED4091746FDA568A4296F1171589E8.mft File: 8BE281D2F4ED4091746FDA568A4296F1171589E8.mft (raw, json) Hash identifier: Sei5U+WmU05ZCqrXFwORbsaVQ1TPLLJIw+yrFNANNE4= Subject key identifier: C8:C8:FA:BE:C6:2D:0C:4B:BD:50:D6:95:24:AD:79:84:1C:AB:B6:89 Authority key identifier: 8B:E2:81:D2:F4:ED:40:91:74:6F:DA:56:8A:42:96:F1:17:15:89:E8 Certificate issuer: /CN=8BE281D2F4ED4091746FDA568A4296F1171589E8 Certificate serial: 66FFEF2E690E950050D931EA98CBB55723F62640 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8BE281D2F4ED4091746FDA568A4296F1171589E8.cer Subject info access: rsync://repo-rpki.idnic.net/repo/a82db9d3-d6eb-4d6b-9a24-feeb21aa8f53/0/8BE281D2F4ED4091746FDA568A4296F1171589E8.mft Manifest number: 0525 Signing time: Wed 12 Nov 2025 07:00:39 +0000 Manifest this update: Wed 12 Nov 2025 06:55:39 +0000 Manifest next update: Sat 15 Nov 2025 12:21:39 +0000 Files and hashes: 1: 8BE281D2F4ED4091746FDA568A4296F1171589E8.crl (hash: 6J4bmT7NkU3C75o+2C93pAVr0onk52cq2b7FzJn0/Ew=) 2: 3130332e3133342e38372e302f32342d3234203d3e203538333639.roa (hash: JnMoHtL2uw/1X+XpxI+WJ5aRYCDoJDTU7TkrgplgZrw=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/a82db9d3-d6eb-4d6b-9a24-feeb21aa8f53/0/8BE281D2F4ED4091746FDA568A4296F1171589E8.crl rsync://repo-rpki.idnic.net/repo/a82db9d3-d6eb-4d6b-9a24-feeb21aa8f53/0/8BE281D2F4ED4091746FDA568A4296F1171589E8.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8BE281D2F4ED4091746FDA568A4296F1171589E8.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 15 Nov 2025 12:21:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 66:ff:ef:2e:69:0e:95:00:50:d9:31:ea:98:cb:b5:57:23:f6:26:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8BE281D2F4ED4091746FDA568A4296F1171589E8 Validity Not Before: Nov 12 06:55:39 2025 GMT Not After : Nov 15 12:21:39 2025 GMT Subject: CN=C8C8FABEC62D0C4BBD50D69524AD79841CABB689 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:98:14:0c:68:ed:ec:2f:c0:5b:ce:98:bb:6c: 7e:71:8d:27:23:2f:62:f1:4e:25:c7:e8:0a:83:19: 2e:da:20:b8:a3:43:db:ee:c2:87:af:0a:06:ec:16: 9d:60:cf:de:7b:74:60:73:a0:66:ab:72:d0:07:58: dc:21:7e:90:47:58:da:68:10:0f:9d:0f:ba:10:4f: 16:71:8a:d8:c2:2f:4b:2d:14:d4:9f:37:d0:60:9f: a7:7c:70:c6:95:d4:a6:b2:5c:e1:cf:5f:9b:a4:ee: 84:12:99:1b:8b:31:bc:b9:44:91:46:57:94:4c:78: 0f:b4:99:88:e1:f6:a5:b1:8b:5e:35:b0:2c:96:9c: 16:db:97:23:28:97:5a:ab:c9:25:ea:d4:9d:dd:b0: fe:ec:0f:f5:88:9c:7e:1b:06:be:b5:8f:a3:29:40: aa:c6:19:fd:85:ec:b6:26:93:81:3e:eb:8a:59:f6: f0:5e:9d:8f:7c:71:f5:e5:3e:2f:b3:8e:c4:8b:f4: 98:25:ba:3b:5e:a3:1b:94:d0:e2:2b:db:1a:bc:b1: eb:03:59:dd:1c:9a:9a:9f:91:c2:c9:2d:33:18:d9: 3f:cf:34:de:2c:01:4f:03:d8:af:a5:35:67:67:68: 3d:6a:84:7f:a0:35:11:da:a8:e5:21:3e:22:55:9f: 17:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C8:C8:FA:BE:C6:2D:0C:4B:BD:50:D6:95:24:AD:79:84:1C:AB:B6:89 X509v3 Authority Key Identifier: keyid:8B:E2:81:D2:F4:ED:40:91:74:6F:DA:56:8A:42:96:F1:17:15:89:E8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/a82db9d3-d6eb-4d6b-9a24-feeb21aa8f53/0/8BE281D2F4ED4091746FDA568A4296F1171589E8.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8BE281D2F4ED4091746FDA568A4296F1171589E8.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a82db9d3-d6eb-4d6b-9a24-feeb21aa8f53/0/8BE281D2F4ED4091746FDA568A4296F1171589E8.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1d:92:55:22:8a:49:b9:3e:89:9f:46:0b:d9:69:2a:92:33:f5: ee:94:1a:d8:b4:e7:b9:82:cd:4a:e4:65:b9:ba:60:89:20:5c: a7:b3:22:0b:c9:63:6b:3f:10:6b:d7:26:cb:ac:4a:6c:02:77: d5:0e:37:6f:93:b9:0f:98:0b:5c:cb:3f:86:f9:fb:46:a9:9d: 36:2d:03:47:0a:6e:fd:09:a6:d9:c4:fa:9d:ea:1e:61:21:15: 28:47:c9:76:18:67:64:42:60:63:bb:12:0b:f7:b8:84:69:c3: 4a:37:f9:8f:5a:04:97:f1:50:b9:2b:30:08:9c:01:8d:e0:30: 89:53:04:4a:70:e0:07:21:25:2b:4e:88:01:2a:39:da:4a:e4: 11:b8:d8:ec:79:a5:ec:51:65:4d:4a:76:67:a8:30:4d:a2:25: a5:f5:75:00:74:f4:5f:d8:df:74:78:2f:92:fc:b3:d8:dc:98: 9a:b8:0c:fa:a3:6c:ee:de:79:7a:81:1c:a3:e6:f1:f2:cf:6e: a2:be:05:03:02:a7:11:d3:9f:bd:b7:85:7d:eb:68:36:1f:5d: 66:03:bf:39:99:fe:81:6f:9e:f1:e6:02:50:fd:1d:66:08:ec: 10:a5:fb:d2:54:d7:b1:a0:c1:9f:60:64:80:31:bb:b5:0f:12: dc:2a:a3:58 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUZv/vLmkOlQBQ2THqmMu1VyP2JkAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEJFMjgxRDJGNEVENDA5MTc0NkZEQTU2OEE0Mjk2RjEx NzE1ODlFODAeFw0yNTExMTIwNjU1MzlaFw0yNTExMTUxMjIxMzlaMDMxMTAvBgNV BAMTKEM4QzhGQUJFQzYyRDBDNEJCRDUwRDY5NTI0QUQ3OTg0MUNBQkI2ODkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQChmBQMaO3sL8Bbzpi7bH5xjScj L2LxTiXH6AqDGS7aILijQ9vuwoevCgbsFp1gz957dGBzoGarctAHWNwhfpBHWNpo EA+dD7oQTxZxitjCL0stFNSfN9Bgn6d8cMaV1KayXOHPX5uk7oQSmRuLMby5RJFG V5RMeA+0mYjh9qWxi141sCyWnBbblyMol1qrySXq1J3dsP7sD/WInH4bBr61j6Mp QKrGGf2F7LYmk4E+64pZ9vBenY98cfXlPi+zjsSL9JglujteoxuU0OIr2xq8sesD Wd0cmpqfkcLJLTMY2T/PNN4sAU8D2K+lNWdnaD1qhH+gNRHaqOUhPiJVnxcJAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUyMj6vsYtDEu9UNaVJK15hByrtokwHwYDVR0j BBgwFoAUi+KB0vTtQJF0b9pWikKW8RcViegwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h ODJkYjlkMy1kNmViLTRkNmItOWEyNC1mZWViMjFhYThmNTMvMC84QkUyODFEMkY0 RUQ0MDkxNzQ2RkRBNTY4QTQyOTZGMTE3MTU4OUU4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOEJFMjgxRDJGNEVENDA5MTc0NkZEQTU2OEE0Mjk2RjExNzE1 ODlFOC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYTgyZGI5ZDMtZDZlYi00ZDZiLTlh MjQtZmVlYjIxYWE4ZjUzLzAvOEJFMjgxRDJGNEVENDA5MTc0NkZEQTU2OEE0Mjk2 RjExNzE1ODlFOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAB2SVSKKSbk+iZ9GC9lpKpIz9e6UGti057mC zUrkZbm6YIkgXKezIgvJY2s/EGvXJsusSmwCd9UON2+TuQ+YC1zLP4b5+0apnTYt A0cKbv0JptnE+p3qHmEhFShHyXYYZ2RCYGO7Egv3uIRpw0o3+Y9aBJfxULkrMAic AY3gMIlTBEpw4AchJStOiAEqOdpK5BG42Ox5pexRZU1KdmeoME2iJaX1dQB09F/Y 33R4L5L8s9jcmJq4DPqjbO7eeXqBHKPm8fLPbqK+BQMCpxHTn723hX3raDYfXWYD vzmZ/oFvnvHmAlD9HWYI7BCl+9JU17GgwZ9gZIAxu7UPEtwqo1g= -----END CERTIFICATE-----Generated at Thu Nov 13 09:34:02 2025 by rpki-client