$ rpki-client -vvf repo-rpki.idnic.net/repo/bfdb18ef-659f-4b1e-a2e0-b58af6b1271f/0/8D1D84B8A56224B4E290FBDA5C790CD1F03F11A7.mft File: 8D1D84B8A56224B4E290FBDA5C790CD1F03F11A7.mft (raw, json) Hash identifier: A3E5PP3tF3Q+yaAyLGcvqk2zxR213tCs8tgkwa844aM= Subject key identifier: AB:75:A4:23:31:2A:F0:00:86:1D:31:A0:42:D1:6E:CB:3D:47:4A:1B Authority key identifier: 8D:1D:84:B8:A5:62:24:B4:E2:90:FB:DA:5C:79:0C:D1:F0:3F:11:A7 Certificate issuer: /CN=8D1D84B8A56224B4E290FBDA5C790CD1F03F11A7 Certificate serial: 6EC9E104F53131B5744FC3B5E46C911597B945D0 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8D1D84B8A56224B4E290FBDA5C790CD1F03F11A7.cer Subject info access: rsync://repo-rpki.idnic.net/repo/bfdb18ef-659f-4b1e-a2e0-b58af6b1271f/0/8D1D84B8A56224B4E290FBDA5C790CD1F03F11A7.mft Manifest number: 021F Signing time: Wed 05 Nov 2025 22:41:50 +0000 Manifest this update: Wed 05 Nov 2025 22:36:50 +0000 Manifest next update: Sun 09 Nov 2025 06:45:50 +0000 Files and hashes: 1: 8D1D84B8A56224B4E290FBDA5C790CD1F03F11A7.crl (hash: iHuy+GCcmHqXgribdOnZKMpZJ64Hc9+7u/yrGSQLSbA=) 2: 3130332e3136302e3133382e302f32332d3234203d3e203338333230.roa (hash: 1fOWEp4TrzIX6lJGhVie2BUvo2f5cu7g23YUAHBTka8=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/bfdb18ef-659f-4b1e-a2e0-b58af6b1271f/0/8D1D84B8A56224B4E290FBDA5C790CD1F03F11A7.crl rsync://repo-rpki.idnic.net/repo/bfdb18ef-659f-4b1e-a2e0-b58af6b1271f/0/8D1D84B8A56224B4E290FBDA5C790CD1F03F11A7.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8D1D84B8A56224B4E290FBDA5C790CD1F03F11A7.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 08 Nov 2025 23:17:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6e:c9:e1:04:f5:31:31:b5:74:4f:c3:b5:e4:6c:91:15:97:b9:45:d0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8D1D84B8A56224B4E290FBDA5C790CD1F03F11A7 Validity Not Before: Nov 5 22:36:50 2025 GMT Not After : Nov 9 06:45:50 2025 GMT Subject: CN=AB75A423312AF000861D31A042D16ECB3D474A1B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:b5:42:a0:75:7a:ab:f7:ac:fe:25:4a:06:49: 59:f1:65:76:ce:9d:df:79:8f:18:9e:a0:d0:e6:24: 4e:e0:16:22:7a:b0:22:fb:1b:52:84:3f:a4:53:b5: 43:2f:e8:c3:b3:2a:f6:fc:c0:15:65:f6:1c:e2:51: 7d:48:d4:2f:5c:38:cb:45:82:11:8a:cd:50:87:b8: e3:be:87:46:49:a7:c1:61:42:cd:24:85:6f:0f:96: c0:68:1b:68:ca:2e:59:07:44:4a:fe:a6:50:eb:5e: e7:b5:ee:89:34:c8:58:20:a0:2c:d8:52:4e:59:b8: 7a:d3:5a:c2:e7:07:fe:79:96:47:6d:2d:d8:5d:9c: d1:38:5f:96:2f:cf:85:2e:22:e9:05:18:0b:f9:6b: 08:7b:82:05:d9:11:40:5e:94:b6:fc:2e:fb:67:b4: 9d:da:aa:21:47:eb:70:0b:31:35:52:52:43:de:4c: 14:e7:d7:32:c3:29:2c:43:8c:3f:b9:78:ab:2e:42: 85:6b:f3:84:f7:e2:f6:d4:ac:34:1c:e2:e8:1a:37: d1:c2:87:52:c5:75:d2:0a:e8:f4:d1:61:6b:9b:7e: d0:e7:1a:ab:0c:0a:74:6e:5f:4a:06:0b:9d:0b:bc: be:e8:54:ec:51:ab:9f:73:f5:74:c1:80:e4:74:97: 21:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AB:75:A4:23:31:2A:F0:00:86:1D:31:A0:42:D1:6E:CB:3D:47:4A:1B X509v3 Authority Key Identifier: keyid:8D:1D:84:B8:A5:62:24:B4:E2:90:FB:DA:5C:79:0C:D1:F0:3F:11:A7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/bfdb18ef-659f-4b1e-a2e0-b58af6b1271f/0/8D1D84B8A56224B4E290FBDA5C790CD1F03F11A7.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8D1D84B8A56224B4E290FBDA5C790CD1F03F11A7.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/bfdb18ef-659f-4b1e-a2e0-b58af6b1271f/0/8D1D84B8A56224B4E290FBDA5C790CD1F03F11A7.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 26:bd:4a:39:59:a9:70:9d:b0:9d:2d:79:e9:55:7c:b3:96:04: 32:f3:43:95:a1:69:02:7c:9c:70:d4:83:55:d3:7c:72:25:49: 3b:4c:7c:23:5d:45:97:a0:c0:ce:6c:50:bd:fd:e8:7e:44:98: cc:09:9b:90:bb:88:94:bf:4f:88:f9:c4:07:b9:28:ae:8e:44: 6e:a7:81:ef:09:52:24:97:af:87:48:f1:a3:ff:0b:5c:84:0f: c5:ec:b6:38:0b:7e:0b:bb:c0:75:9f:0b:d9:83:c5:73:a2:b4: 60:6d:dc:2d:c3:5e:1d:61:e4:8d:1d:b4:10:4b:69:1b:4a:ce: 77:01:aa:61:e7:da:15:a7:2f:e5:10:9b:f7:81:dc:41:62:84: 7f:7b:44:62:f3:3e:94:b7:1e:89:84:b4:9c:cc:3f:f1:e2:62: 42:1f:40:96:b3:49:ff:80:39:a2:0b:6b:a5:36:bd:42:3d:39: f4:b0:51:37:d4:45:6d:c7:f1:60:79:2d:5c:8a:ad:9e:72:2b: 95:5c:25:c8:cb:c0:4d:af:13:d8:ba:f2:59:db:86:aa:f3:0a: 88:73:88:61:3f:45:90:e3:08:30:2f:36:b4:79:1a:d3:db:c4: fa:d7:4c:3a:86:04:db:48:82:f2:29:df:d5:40:00:12:3a:86: e8:00:84:92 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUbsnhBPUxMbV0T8O15GyRFZe5RdAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEQxRDg0QjhBNTYyMjRCNEUyOTBGQkRBNUM3OTBDRDFG MDNGMTFBNzAeFw0yNTExMDUyMjM2NTBaFw0yNTExMDkwNjQ1NTBaMDMxMTAvBgNV BAMTKEFCNzVBNDIzMzEyQUYwMDA4NjFEMzFBMDQyRDE2RUNCM0Q0NzRBMUIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDntUKgdXqr96z+JUoGSVnxZXbO nd95jxieoNDmJE7gFiJ6sCL7G1KEP6RTtUMv6MOzKvb8wBVl9hziUX1I1C9cOMtF ghGKzVCHuOO+h0ZJp8FhQs0khW8PlsBoG2jKLlkHREr+plDrXue17ok0yFggoCzY Uk5ZuHrTWsLnB/55lkdtLdhdnNE4X5Yvz4UuIukFGAv5awh7ggXZEUBelLb8Lvtn tJ3aqiFH63ALMTVSUkPeTBTn1zLDKSxDjD+5eKsuQoVr84T34vbUrDQc4ugaN9HC h1LFddIK6PTRYWubftDnGqsMCnRuX0oGC50LvL7oVOxRq59z9XTBgOR0lyF/AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUq3WkIzEq8ACGHTGgQtFuyz1HShswHwYDVR0j BBgwFoAUjR2EuKViJLTikPvaXHkM0fA/EacwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i ZmRiMThlZi02NTlmLTRiMWUtYTJlMC1iNThhZjZiMTI3MWYvMC84RDFEODRCOEE1 NjIyNEI0RTI5MEZCREE1Qzc5MENEMUYwM0YxMUE3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOEQxRDg0QjhBNTYyMjRCNEUyOTBGQkRBNUM3OTBDRDFGMDNG MTFBNy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYmZkYjE4ZWYtNjU5Zi00YjFlLWEy ZTAtYjU4YWY2YjEyNzFmLzAvOEQxRDg0QjhBNTYyMjRCNEUyOTBGQkRBNUM3OTBD RDFGMDNGMTFBNy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACa9SjlZqXCdsJ0teelVfLOWBDLzQ5WhaQJ8 nHDUg1XTfHIlSTtMfCNdRZegwM5sUL396H5EmMwJm5C7iJS/T4j5xAe5KK6ORG6n ge8JUiSXr4dI8aP/C1yED8XstjgLfgu7wHWfC9mDxXOitGBt3C3DXh1h5I0dtBBL aRtKzncBqmHn2hWnL+UQm/eB3EFihH97RGLzPpS3HomEtJzMP/HiYkIfQJazSf+A OaILa6U2vUI9OfSwUTfURW3H8WB5LVyKrZ5yK5VcJcjLwE2vE9i68lnbhqrzCohz iGE/RZDjCDAvNrR5GtPbxPrXTDqGBNtIgvIp39VAABI6hugAhJI= -----END CERTIFICATE-----Generated at Thu Nov 6 01:33:36 2025 by rpki-client