$ rpki-client -vvf repo-rpki.idnic.net/repo/02913fa1-33ae-4e33-bbe2-81bd9f03c84b/0/8C57C5860BF938BB57E0B7ED0F890D70BFEE55A0.mft File: 8C57C5860BF938BB57E0B7ED0F890D70BFEE55A0.mft (raw, json) Hash identifier: X9/UGw/ElTdhBrtmHysGm0FY9O2ncqwo0bW6sWRp15k= Subject key identifier: 3B:5F:2F:24:95:4A:FB:98:5F:5F:71:1A:CC:62:BA:5D:67:DA:DB:71 Authority key identifier: 8C:57:C5:86:0B:F9:38:BB:57:E0:B7:ED:0F:89:0D:70:BF:EE:55:A0 Certificate issuer: /CN=8C57C5860BF938BB57E0B7ED0F890D70BFEE55A0 Certificate serial: 22A2F2D3A780405C487FCDAE2741A982F8B05695 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8C57C5860BF938BB57E0B7ED0F890D70BFEE55A0.cer Subject info access: rsync://repo-rpki.idnic.net/repo/02913fa1-33ae-4e33-bbe2-81bd9f03c84b/0/8C57C5860BF938BB57E0B7ED0F890D70BFEE55A0.mft Manifest number: 0325 Signing time: Thu 07 Aug 2025 08:50:03 +0000 Manifest this update: Thu 07 Aug 2025 08:45:03 +0000 Manifest next update: Sun 10 Aug 2025 18:45:03 +0000 Files and hashes: 1: 8C57C5860BF938BB57E0B7ED0F890D70BFEE55A0.crl (hash: pnJVXkwpDIFQtj9YGi8SwI3owssg8+1/XqewCmyJIME=) 2: 3130332e3135392e3230322e302f32332d3234203d3e20313331313131.roa (hash: Ho5Y5TOHX49gl1fZYVO+j2M3OjYa1AKAk+KnhAmd/6M=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/02913fa1-33ae-4e33-bbe2-81bd9f03c84b/0/8C57C5860BF938BB57E0B7ED0F890D70BFEE55A0.crl rsync://repo-rpki.idnic.net/repo/02913fa1-33ae-4e33-bbe2-81bd9f03c84b/0/8C57C5860BF938BB57E0B7ED0F890D70BFEE55A0.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8C57C5860BF938BB57E0B7ED0F890D70BFEE55A0.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 10 Aug 2025 18:45:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 22:a2:f2:d3:a7:80:40:5c:48:7f:cd:ae:27:41:a9:82:f8:b0:56:95 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8C57C5860BF938BB57E0B7ED0F890D70BFEE55A0 Validity Not Before: Aug 7 08:45:03 2025 GMT Not After : Aug 10 18:45:03 2025 GMT Subject: CN=3B5F2F24954AFB985F5F711ACC62BA5D67DADB71 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:c2:30:72:cd:22:5f:85:ea:bc:82:6c:a2:19: 6c:f0:89:f7:03:0f:39:a3:a7:e2:0d:22:2c:f4:8a: 03:5b:7c:15:0b:bc:2b:36:8a:0b:94:ce:39:92:52: 8e:4f:cd:71:17:4c:f4:cd:c7:ee:6e:ed:93:03:35: a5:3f:30:db:4c:b0:be:e9:a2:72:4f:18:ff:63:34: e6:b4:9d:c7:c1:0f:7c:fe:3f:fe:83:7b:a5:56:d8: 0f:5c:e3:ef:e3:39:fd:2c:a9:0e:91:cb:d7:89:1e: 05:45:d7:52:da:07:41:71:34:40:5a:1d:0c:8d:c2: 53:c4:77:2c:bf:7b:45:4a:ab:e8:f6:85:d8:50:f7: 96:f9:fe:cc:a1:83:7f:f3:ff:ba:3b:6a:29:6b:13: 2c:79:c7:05:f9:1f:40:56:09:a0:3f:05:40:4f:77: b2:a8:e2:31:ad:11:d9:23:9f:ac:25:cf:12:f3:45: 1d:6c:ff:26:e3:cc:9d:09:94:9f:35:a0:4d:0d:87: 9e:03:fc:ac:48:cf:73:22:9b:cd:14:8c:8e:3e:cd: 42:8b:f8:4a:1f:36:f1:f7:0c:e1:6b:20:30:3f:d2: 99:b7:d4:9e:96:e3:7b:20:15:0a:46:ee:47:cf:65: 18:26:06:76:48:f0:b9:f9:aa:b5:c5:78:0c:23:2b: 0a:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3B:5F:2F:24:95:4A:FB:98:5F:5F:71:1A:CC:62:BA:5D:67:DA:DB:71 X509v3 Authority Key Identifier: keyid:8C:57:C5:86:0B:F9:38:BB:57:E0:B7:ED:0F:89:0D:70:BF:EE:55:A0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/02913fa1-33ae-4e33-bbe2-81bd9f03c84b/0/8C57C5860BF938BB57E0B7ED0F890D70BFEE55A0.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8C57C5860BF938BB57E0B7ED0F890D70BFEE55A0.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/02913fa1-33ae-4e33-bbe2-81bd9f03c84b/0/8C57C5860BF938BB57E0B7ED0F890D70BFEE55A0.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 32:42:8c:82:ac:16:ba:10:0b:fc:6a:49:9d:f6:a0:e5:c7:ed: 5a:49:75:de:35:23:ef:61:82:9b:a3:07:10:f4:fa:28:b4:04: f2:8c:bd:a6:8d:b9:73:6c:4e:9b:12:71:71:76:5e:88:bd:7b: a2:d7:45:aa:e7:2d:91:4e:96:2f:da:25:e0:97:25:ab:19:8a: 62:61:cc:2c:29:5f:04:6c:99:be:3c:e4:99:b0:69:cd:d3:3b: 80:c7:b5:08:9f:2f:e1:b3:91:40:2e:d1:f7:b5:a1:b6:3e:17: 5e:46:55:04:ca:eb:7d:f0:2f:05:aa:1a:35:f7:77:e4:83:a0: 5a:32:77:a4:a2:ea:81:71:31:72:ff:60:d8:51:f0:d8:39:19: 40:3e:c3:71:42:82:6e:05:00:8e:c5:15:39:4f:25:21:04:1a: 3a:c8:c8:93:56:25:52:ea:5a:77:55:a7:bb:ff:8e:57:35:1b: 43:7f:f5:2a:37:2f:c1:ba:ab:10:8f:21:1f:99:58:a8:2d:1e: 52:bc:3b:49:da:43:f2:5e:3b:7b:f5:1b:62:54:4e:04:98:9b: d5:e7:34:7c:96:18:de:8f:06:13:0e:e9:5d:ff:5c:4d:45:9a: 57:12:9c:85:5f:06:b3:97:31:08:d7:35:73:ff:45:9d:0d:f5: 71:c1:c6:6b -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUIqLy06eAQFxIf82uJ0GpgviwVpUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEM1N0M1ODYwQkY5MzhCQjU3RTBCN0VEMEY4OTBENzBC RkVFNTVBMDAeFw0yNTA4MDcwODQ1MDNaFw0yNTA4MTAxODQ1MDNaMDMxMTAvBgNV BAMTKDNCNUYyRjI0OTU0QUZCOTg1RjVGNzExQUNDNjJCQTVENjdEQURCNzEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC5wjByzSJfheq8gmyiGWzwifcD Dzmjp+INIiz0igNbfBULvCs2iguUzjmSUo5PzXEXTPTNx+5u7ZMDNaU/MNtMsL7p onJPGP9jNOa0ncfBD3z+P/6De6VW2A9c4+/jOf0sqQ6Ry9eJHgVF11LaB0FxNEBa HQyNwlPEdyy/e0VKq+j2hdhQ95b5/syhg3/z/7o7ailrEyx5xwX5H0BWCaA/BUBP d7Ko4jGtEdkjn6wlzxLzRR1s/ybjzJ0JlJ81oE0Nh54D/KxIz3Mim80UjI4+zUKL +EofNvH3DOFrIDA/0pm31J6W43sgFQpG7kfPZRgmBnZI8Ln5qrXFeAwjKwrpAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUO18vJJVK+5hfX3EazGK6XWfa23EwHwYDVR0j BBgwFoAUjFfFhgv5OLtX4LftD4kNcL/uVaAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w MjkxM2ZhMS0zM2FlLTRlMzMtYmJlMi04MWJkOWYwM2M4NGIvMC84QzU3QzU4NjBC RjkzOEJCNTdFMEI3RUQwRjg5MEQ3MEJGRUU1NUEwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOEM1N0M1ODYwQkY5MzhCQjU3RTBCN0VEMEY4OTBENzBCRkVF NTVBMC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMDI5MTNmYTEtMzNhZS00ZTMzLWJi ZTItODFiZDlmMDNjODRiLzAvOEM1N0M1ODYwQkY5MzhCQjU3RTBCN0VEMEY4OTBE NzBCRkVFNTVBMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADJCjIKsFroQC/xqSZ32oOXH7VpJdd41I+9h gpujBxD0+ii0BPKMvaaNuXNsTpsScXF2Xoi9e6LXRarnLZFOli/aJeCXJasZimJh zCwpXwRsmb485Jmwac3TO4DHtQifL+GzkUAu0fe1obY+F15GVQTK633wLwWqGjX3 d+SDoFoyd6Si6oFxMXL/YNhR8Ng5GUA+w3FCgm4FAI7FFTlPJSEEGjrIyJNWJVLq WndVp7v/jlc1G0N/9So3L8G6qxCPIR+ZWKgtHlK8O0naQ/JeO3v1G2JUTgSYm9Xn NHyWGN6PBhMO6V3/XE1FmlcSnIVfBrOXMQjXNXP/RZ0N9XHBxms= -----END CERTIFICATE-----Generated at Fri Aug 8 10:24:09 2025 by rpki-client