$ rpki-client -vvf repo-rpki.idnic.net/repo/b94c1e95-a738-4e47-8e5c-7af681b36b00/0/8DBECF314BD3C829923A3A97BFC62113A61F8EE1.mft File: 8DBECF314BD3C829923A3A97BFC62113A61F8EE1.mft (raw, json) Hash identifier: qTI3T0CSqRLaZ7+yl9Zur4sui0GJ9g6RApoRpZahJYA= Subject key identifier: 52:98:DF:04:0C:18:04:F1:76:0E:48:13:0B:D8:8E:21:B3:10:29:82 Authority key identifier: 8D:BE:CF:31:4B:D3:C8:29:92:3A:3A:97:BF:C6:21:13:A6:1F:8E:E1 Certificate issuer: /CN=8DBECF314BD3C829923A3A97BFC62113A61F8EE1 Certificate serial: 7200574546742501961F2A2979359DA4E8D52DBB Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8DBECF314BD3C829923A3A97BFC62113A61F8EE1.cer Subject info access: rsync://repo-rpki.idnic.net/repo/b94c1e95-a738-4e47-8e5c-7af681b36b00/0/8DBECF314BD3C829923A3A97BFC62113A61F8EE1.mft Manifest number: 0218 Signing time: Thu 30 Oct 2025 04:21:10 +0000 Manifest this update: Thu 30 Oct 2025 04:16:10 +0000 Manifest next update: Sun 02 Nov 2025 06:34:10 +0000 Files and hashes: 1: 8DBECF314BD3C829923A3A97BFC62113A61F8EE1.crl (hash: iCauFO2Sdfcv5gKGRruOTpHd6HUSDHYXYB+qjzrWXKg=) 2: 3130332e3138362e39302e302f32342d3234203d3e20313439373037.roa (hash: 656gLN35OIXcG6Vik35XhI6XoKD7dIobeeOabAVD0UQ=) 3: 3130332e3138362e39312e302f32342d3234203d3e20313439373037.roa (hash: v7WXEnDaWLgLHCCs0/IjJD0cW6T6d8CeSIJNddKA634=) 4: 3130332e3138362e39302e302f32332d3233203d3e20313439373037.roa (hash: IxE4f1xQzeKQZjsPZmdFbJyZKv94xhwmFh4/4Aw/W0I=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/b94c1e95-a738-4e47-8e5c-7af681b36b00/0/8DBECF314BD3C829923A3A97BFC62113A61F8EE1.crl rsync://repo-rpki.idnic.net/repo/b94c1e95-a738-4e47-8e5c-7af681b36b00/0/8DBECF314BD3C829923A3A97BFC62113A61F8EE1.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8DBECF314BD3C829923A3A97BFC62113A61F8EE1.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 02 Nov 2025 06:34:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 72:00:57:45:46:74:25:01:96:1f:2a:29:79:35:9d:a4:e8:d5:2d:bb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8DBECF314BD3C829923A3A97BFC62113A61F8EE1 Validity Not Before: Oct 30 04:16:10 2025 GMT Not After : Nov 2 06:34:10 2025 GMT Subject: CN=5298DF040C1804F1760E48130BD88E21B3102982 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:61:34:c0:d7:7e:96:b5:49:df:05:af:ef:57: 9c:73:89:ea:f5:e4:26:4f:a3:cb:1b:64:5f:65:dd: b4:fc:8b:77:e6:e1:15:69:e1:31:67:05:c9:7a:1f: 90:53:cb:80:d3:45:88:19:59:2b:71:b2:d9:ab:79: e9:02:a9:85:9c:f3:4a:be:d5:f6:1f:c5:a0:85:dd: 76:60:9d:d8:3e:a9:a6:96:fc:d4:05:58:b3:d7:f9: ed:ed:43:19:05:91:39:1d:18:cc:da:94:5e:15:ef: 4a:44:58:a7:70:b5:c7:c2:a7:52:12:0b:db:e4:a9: ac:f3:b8:c7:35:d8:1a:c3:d5:ba:20:50:58:e6:fd: a6:61:5c:0d:7b:35:90:f5:3a:44:f1:63:34:14:e1: 80:5e:74:a0:86:0d:1f:bf:4b:c5:60:c3:ad:f6:b3: 17:2e:7f:d1:d2:5e:55:a6:1c:6c:47:38:77:48:25: 1c:38:5c:71:45:f6:66:7e:34:a6:02:53:39:bb:c4: bc:78:fe:4b:af:0f:19:3d:79:53:2d:91:88:61:5f: 60:d5:06:6e:a1:7e:86:d2:98:60:ee:f5:32:3c:42: b2:d0:83:9a:01:b9:74:b6:72:8d:61:10:59:90:65: 56:11:90:34:82:6e:fa:79:aa:92:e5:c4:be:f1:43: 9e:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:98:DF:04:0C:18:04:F1:76:0E:48:13:0B:D8:8E:21:B3:10:29:82 X509v3 Authority Key Identifier: keyid:8D:BE:CF:31:4B:D3:C8:29:92:3A:3A:97:BF:C6:21:13:A6:1F:8E:E1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/b94c1e95-a738-4e47-8e5c-7af681b36b00/0/8DBECF314BD3C829923A3A97BFC62113A61F8EE1.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8DBECF314BD3C829923A3A97BFC62113A61F8EE1.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/b94c1e95-a738-4e47-8e5c-7af681b36b00/0/8DBECF314BD3C829923A3A97BFC62113A61F8EE1.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 40:1b:c5:53:44:63:f2:ed:17:f1:8e:c2:7a:da:aa:27:e3:f5: 27:bc:3d:d2:96:44:35:8f:f4:ab:02:72:63:99:2a:b6:3e:0b: 73:59:ed:49:ec:54:83:6f:09:75:fb:37:56:be:59:76:92:83: 5a:d9:cd:9c:95:cf:1d:d2:21:63:d1:8c:78:32:95:6e:ce:3b: a4:cb:d8:b9:e6:e5:a1:49:db:ac:bb:23:e1:f9:12:99:0d:a7: fa:24:23:36:ca:7b:fe:1a:3d:02:f8:82:88:c5:27:97:b3:32: a9:01:30:47:dc:c0:d6:7e:31:90:02:07:5a:5f:07:e2:ff:0a: 33:4e:d3:d4:95:6a:49:a7:16:02:fd:d3:33:71:f1:dc:dc:28: d8:dd:60:e8:d9:91:64:b1:13:e6:af:53:d7:5b:76:03:f8:0a: 81:c9:7d:9c:ac:ae:d8:de:b8:18:04:87:a8:89:30:6b:e9:a9: 90:46:11:e4:8d:99:5b:5c:6e:9f:63:7f:52:53:00:c3:60:5f: 92:38:bb:00:9f:e5:c0:fe:ad:fc:b1:05:a4:06:a1:46:ae:af: f9:30:f1:90:21:1c:d0:53:bb:50:c1:c9:59:0c:90:4f:63:be: ea:4c:34:f3:70:a9:02:6d:a9:92:4c:31:58:02:4d:ce:4d:48: a3:fc:28:38 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUcgBXRUZ0JQGWHyopeTWdpOjVLbswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOERCRUNGMzE0QkQzQzgyOTkyM0EzQTk3QkZDNjIxMTNB NjFGOEVFMTAeFw0yNTEwMzAwNDE2MTBaFw0yNTExMDIwNjM0MTBaMDMxMTAvBgNV BAMTKDUyOThERjA0MEMxODA0RjE3NjBFNDgxMzBCRDg4RTIxQjMxMDI5ODIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDRYTTA136WtUnfBa/vV5xzier1 5CZPo8sbZF9l3bT8i3fm4RVp4TFnBcl6H5BTy4DTRYgZWStxstmreekCqYWc80q+ 1fYfxaCF3XZgndg+qaaW/NQFWLPX+e3tQxkFkTkdGMzalF4V70pEWKdwtcfCp1IS C9vkqazzuMc12BrD1bogUFjm/aZhXA17NZD1OkTxYzQU4YBedKCGDR+/S8Vgw632 sxcuf9HSXlWmHGxHOHdIJRw4XHFF9mZ+NKYCUzm7xLx4/kuvDxk9eVMtkYhhX2DV Bm6hfobSmGDu9TI8QrLQg5oBuXS2co1hEFmQZVYRkDSCbvp5qpLlxL7xQ54zAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUUpjfBAwYBPF2DkgTC9iOIbMQKYIwHwYDVR0j BBgwFoAUjb7PMUvTyCmSOjqXv8YhE6YfjuEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i OTRjMWU5NS1hNzM4LTRlNDctOGU1Yy03YWY2ODFiMzZiMDAvMC84REJFQ0YzMTRC RDNDODI5OTIzQTNBOTdCRkM2MjExM0E2MUY4RUUxLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOERCRUNGMzE0QkQzQzgyOTkyM0EzQTk3QkZDNjIxMTNBNjFG OEVFMS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYjk0YzFlOTUtYTczOC00ZTQ3LThl NWMtN2FmNjgxYjM2YjAwLzAvOERCRUNGMzE0QkQzQzgyOTkyM0EzQTk3QkZDNjIx MTNBNjFGOEVFMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEAbxVNEY/LtF/GOwnraqifj9Se8PdKWRDWP 9KsCcmOZKrY+C3NZ7UnsVINvCXX7N1a+WXaSg1rZzZyVzx3SIWPRjHgylW7OO6TL 2Lnm5aFJ26y7I+H5EpkNp/okIzbKe/4aPQL4gojFJ5ezMqkBMEfcwNZ+MZACB1pf B+L/CjNO09SVakmnFgL90zNx8dzcKNjdYOjZkWSxE+avU9dbdgP4CoHJfZysrtje uBgEh6iJMGvpqZBGEeSNmVtcbp9jf1JTAMNgX5I4uwCf5cD+rfyxBaQGoUaur/kw 8ZAhHNBTu1DByVkMkE9jvupMNPNwqQJtqZJMMVgCTc5NSKP8KDg= -----END CERTIFICATE-----Generated at Thu Oct 30 14:55:35 2025 by rpki-client