$ rpki-client -vvf repo-rpki.idnic.net/repo/dfee82b7-c182-4e83-897c-e00f3ce1b0d2/0/08E555759AA0C18576364C83261B6CEA4BCF0CCB.mft File: 08E555759AA0C18576364C83261B6CEA4BCF0CCB.mft (raw, json) Hash identifier: C5N0QeNkuie6o6zI8d0X2msTrM6oQE0+UYDfb+3uP3Q= Subject key identifier: CC:32:A1:3F:BE:68:49:D5:67:9C:32:83:41:0C:B4:D6:70:10:14:13 Authority key identifier: 08:E5:55:75:9A:A0:C1:85:76:36:4C:83:26:1B:6C:EA:4B:CF:0C:CB Certificate issuer: /CN=08E555759AA0C18576364C83261B6CEA4BCF0CCB Certificate serial: 4BBE1C2685EB436F70C1D17BB988BD1028B7EF8B Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/08E555759AA0C18576364C83261B6CEA4BCF0CCB.cer Subject info access: rsync://repo-rpki.idnic.net/repo/dfee82b7-c182-4e83-897c-e00f3ce1b0d2/0/08E555759AA0C18576364C83261B6CEA4BCF0CCB.mft Manifest number: 0201 Signing time: Wed 29 Oct 2025 14:12:19 +0000 Manifest this update: Wed 29 Oct 2025 14:07:19 +0000 Manifest next update: Sat 01 Nov 2025 23:11:19 +0000 Files and hashes: 1: 08E555759AA0C18576364C83261B6CEA4BCF0CCB.crl (hash: XhI3Tj+PICRwn0/29ZIdBtTA8JZLHhwdZgRo4VxnuCM=) 2: 3130332e3232392e3138342e302f32332d3233203d3e2039333431.roa (hash: 7OzNX15Yuahy0/8eEN1/yzezZR+83/JHbFFyRpwzwPM=) 3: 3130332e3232392e3138352e302f32342d3234203d3e2039333431.roa (hash: bYUXew86UoI4/31WSjYGIt5ZDZ5ojqbj3fo7ufpNm20=) 4: 3130332e3232392e3138342e302f32342d3234203d3e2039333431.roa (hash: wfRjzL8bQ7dLLloZedRWystpfn4vijpj4SNcPfcqhxI=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/dfee82b7-c182-4e83-897c-e00f3ce1b0d2/0/08E555759AA0C18576364C83261B6CEA4BCF0CCB.crl rsync://repo-rpki.idnic.net/repo/dfee82b7-c182-4e83-897c-e00f3ce1b0d2/0/08E555759AA0C18576364C83261B6CEA4BCF0CCB.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/08E555759AA0C18576364C83261B6CEA4BCF0CCB.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 01 Nov 2025 23:11:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4b:be:1c:26:85:eb:43:6f:70:c1:d1:7b:b9:88:bd:10:28:b7:ef:8b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=08E555759AA0C18576364C83261B6CEA4BCF0CCB Validity Not Before: Oct 29 14:07:19 2025 GMT Not After : Nov 1 23:11:19 2025 GMT Subject: CN=CC32A13FBE6849D5679C3283410CB4D670101413 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:be:2a:81:f2:4a:85:5a:d9:34:73:ad:79:c6: 1a:d2:ac:aa:a7:12:0e:d6:a3:d3:04:d7:00:e7:6c: 4b:17:b3:da:ac:41:cf:36:a8:93:e1:db:55:85:eb: 26:63:ee:32:9f:b6:fa:b1:14:f2:a0:20:23:ff:bb: 17:cf:63:e8:06:f0:14:42:4c:30:3a:79:e9:2c:27: 07:e4:57:0d:d6:72:db:2a:f4:fe:63:a9:46:b2:d3: 4c:32:4b:bd:9f:24:2c:29:fb:30:d3:95:23:df:1a: 1b:b9:5c:93:68:91:9f:6b:2e:bc:e7:cf:3c:b9:5d: 3d:71:4d:36:8b:4f:bd:f7:cf:dc:8b:a1:3a:df:f2: 3a:4f:57:6e:13:17:a2:70:16:3a:40:fd:6a:10:08: 3b:92:94:70:ca:b2:8a:af:6b:dd:a4:e0:5a:99:53: 43:7e:5e:7e:9b:14:60:11:fb:cd:b2:e5:69:2e:86: 2c:4a:2f:2b:5e:b4:79:f3:c7:fc:96:98:d7:4e:ff: 41:3b:75:7b:2f:4b:d2:6f:f8:cd:99:ff:6e:04:00: 6d:a5:06:38:c2:0c:66:77:be:f0:57:31:39:d4:45: 4f:37:66:5d:cf:6b:0d:1a:7f:63:7e:f3:c2:c9:3f: 63:de:88:06:ba:2d:59:8f:7c:6e:f3:8d:98:54:d3: e0:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CC:32:A1:3F:BE:68:49:D5:67:9C:32:83:41:0C:B4:D6:70:10:14:13 X509v3 Authority Key Identifier: keyid:08:E5:55:75:9A:A0:C1:85:76:36:4C:83:26:1B:6C:EA:4B:CF:0C:CB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/dfee82b7-c182-4e83-897c-e00f3ce1b0d2/0/08E555759AA0C18576364C83261B6CEA4BCF0CCB.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/08E555759AA0C18576364C83261B6CEA4BCF0CCB.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/dfee82b7-c182-4e83-897c-e00f3ce1b0d2/0/08E555759AA0C18576364C83261B6CEA4BCF0CCB.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8e:e5:34:97:1a:d6:25:e5:10:1e:eb:d0:c1:84:5c:f9:a6:e2: 17:79:b3:e5:12:c2:c1:51:36:92:86:bf:1d:b9:58:48:61:26: 21:08:a3:11:57:83:5e:2e:c7:61:a8:9e:09:79:71:15:cf:77: 2d:9b:45:a0:d1:14:ee:b5:45:d9:aa:0e:86:3c:25:2a:64:c3: 2f:a1:c0:13:35:f7:82:bf:f5:af:97:37:17:8c:97:40:4a:60: de:a6:14:f7:8b:e8:0b:71:74:00:1b:f2:cc:e7:18:98:2b:59: b0:ca:0a:ce:3e:6e:a4:12:d7:2e:d7:03:ba:68:aa:ab:b9:ff: d8:92:bf:54:2b:2e:ae:7e:29:62:86:00:ba:cd:4d:45:fa:a8: a3:8d:a4:32:12:8e:62:8a:36:0b:cf:0e:75:d7:0c:34:31:08: f4:65:b0:45:e7:92:91:fc:ec:95:a4:68:d0:18:4e:46:57:b3: e3:fc:20:8e:33:af:6e:0a:e0:8e:47:50:5d:ed:eb:fa:5a:dc: 15:61:26:a0:4c:bf:10:87:ce:e0:fe:14:bd:b3:1f:9d:b4:df: 97:58:c5:6e:91:1d:1b:16:e9:78:23:a0:a7:86:f0:35:c4:77: 85:1b:88:75:1b:1f:89:8b:45:be:3b:c1:29:d0:89:78:a1:51: 7f:43:96:4f -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUS74cJoXrQ29wwdF7uYi9ECi374swDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDhFNTU1NzU5QUEwQzE4NTc2MzY0QzgzMjYxQjZDRUE0 QkNGMENDQjAeFw0yNTEwMjkxNDA3MTlaFw0yNTExMDEyMzExMTlaMDMxMTAvBgNV BAMTKENDMzJBMTNGQkU2ODQ5RDU2NzlDMzI4MzQxMENCNEQ2NzAxMDE0MTMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDgviqB8kqFWtk0c615xhrSrKqn Eg7Wo9ME1wDnbEsXs9qsQc82qJPh21WF6yZj7jKftvqxFPKgICP/uxfPY+gG8BRC TDA6eeksJwfkVw3Wctsq9P5jqUay00wyS72fJCwp+zDTlSPfGhu5XJNokZ9rLrzn zzy5XT1xTTaLT733z9yLoTrf8jpPV24TF6JwFjpA/WoQCDuSlHDKsoqva92k4FqZ U0N+Xn6bFGAR+82y5WkuhixKLytetHnzx/yWmNdO/0E7dXsvS9Jv+M2Z/24EAG2l BjjCDGZ3vvBXMTnURU83Zl3Paw0af2N+88LJP2PeiAa6LVmPfG7zjZhU0+CtAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUzDKhP75oSdVnnDKDQQy01nAQFBMwHwYDVR0j BBgwFoAUCOVVdZqgwYV2NkyDJhts6kvPDMswDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k ZmVlODJiNy1jMTgyLTRlODMtODk3Yy1lMDBmM2NlMWIwZDIvMC8wOEU1NTU3NTlB QTBDMTg1NzYzNjRDODMyNjFCNkNFQTRCQ0YwQ0NCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMDhFNTU1NzU5QUEwQzE4NTc2MzY0QzgzMjYxQjZDRUE0QkNG MENDQi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZGZlZTgyYjctYzE4Mi00ZTgzLTg5 N2MtZTAwZjNjZTFiMGQyLzAvMDhFNTU1NzU5QUEwQzE4NTc2MzY0QzgzMjYxQjZD RUE0QkNGMENDQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAI7lNJca1iXlEB7r0MGEXPmm4hd5s+USwsFR NpKGvx25WEhhJiEIoxFXg14ux2Gongl5cRXPdy2bRaDRFO61RdmqDoY8JSpkwy+h wBM194K/9a+XNxeMl0BKYN6mFPeL6AtxdAAb8sznGJgrWbDKCs4+bqQS1y7XA7po qqu5/9iSv1QrLq5+KWKGALrNTUX6qKONpDISjmKKNgvPDnXXDDQxCPRlsEXnkpH8 7JWkaNAYTkZXs+P8II4zr24K4I5HUF3t6/pa3BVhJqBMvxCHzuD+FL2zH52035dY xW6RHRsW6XgjoKeG8DXEd4UbiHUbH4mLRb47wSnQiXihUX9Dlk8= -----END CERTIFICATE-----Generated at Thu Oct 30 14:55:34 2025 by rpki-client