$ rpki-client -vvf repo-rpki.idnic.net/repo/12307390-6ef3-4476-a6aa-d0c5783e1f37/0/8A05EBF58BEC96D946EE85F0F0F85701A0A72799.mft File: 8A05EBF58BEC96D946EE85F0F0F85701A0A72799.mft (raw, json) Hash identifier: 2ksgbpVJWLhV2BNOMOQ/4vvabhmsx9cpR92eUXAl3ik= Subject key identifier: 82:70:38:10:D7:49:F6:B3:04:17:32:87:7B:BC:A7:98:EF:F4:09:F9 Authority key identifier: 8A:05:EB:F5:8B:EC:96:D9:46:EE:85:F0:F0:F8:57:01:A0:A7:27:99 Certificate issuer: /CN=8A05EBF58BEC96D946EE85F0F0F85701A0A72799 Certificate serial: 32DAC2087A1A03E349D6F196312E50B9B0AA6679 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8A05EBF58BEC96D946EE85F0F0F85701A0A72799.cer Subject info access: rsync://repo-rpki.idnic.net/repo/12307390-6ef3-4476-a6aa-d0c5783e1f37/0/8A05EBF58BEC96D946EE85F0F0F85701A0A72799.mft Manifest number: 04F9 Signing time: Thu 07 Aug 2025 12:41:05 +0000 Manifest this update: Thu 07 Aug 2025 12:36:05 +0000 Manifest next update: Sun 10 Aug 2025 23:28:05 +0000 Files and hashes: 1: 3130332e3133392e34372e302f32342d3234203d3e203137393935.roa (hash: hRDdGequ+GhEEqBrX8O9Zq6WRslymD5ehiejKAFbvr0=) 2: 8A05EBF58BEC96D946EE85F0F0F85701A0A72799.crl (hash: qCLiZ79Vclg6IF/wUlvqGqE/3AuRTXAo5KLvMuyqGig=) 3: 3130332e3133392e34362e302f32342d3234203d3e203137393935.roa (hash: hthNpAwJxjCDLni6mv2Gc1l+BPz0lcv9dxQLklW+A64=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/12307390-6ef3-4476-a6aa-d0c5783e1f37/0/8A05EBF58BEC96D946EE85F0F0F85701A0A72799.crl rsync://repo-rpki.idnic.net/repo/12307390-6ef3-4476-a6aa-d0c5783e1f37/0/8A05EBF58BEC96D946EE85F0F0F85701A0A72799.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8A05EBF58BEC96D946EE85F0F0F85701A0A72799.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 10 Aug 2025 23:28:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 32:da:c2:08:7a:1a:03:e3:49:d6:f1:96:31:2e:50:b9:b0:aa:66:79 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8A05EBF58BEC96D946EE85F0F0F85701A0A72799 Validity Not Before: Aug 7 12:36:05 2025 GMT Not After : Aug 10 23:28:05 2025 GMT Subject: CN=82703810D749F6B3041732877BBCA798EFF409F9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:3f:f2:94:6a:49:f1:8c:a9:0c:aa:86:e4:cc: 93:23:80:92:62:42:d6:f4:2f:1a:dd:a3:31:5e:c5: ce:41:b4:00:72:04:ee:e1:53:5b:1b:61:9d:28:06: 5b:d5:19:23:10:7c:5e:0a:c6:6b:18:bc:ee:95:62: 37:df:5a:85:f8:3c:2c:07:b5:9a:e2:fa:e1:a8:a5: 9c:c1:46:e3:50:12:37:27:bc:bb:7e:c6:fa:30:3d: d9:7f:1a:e5:60:5c:d6:d1:8b:69:f3:85:91:68:cc: 1b:0b:b5:5d:3b:39:a8:36:e3:f3:88:e4:be:4f:85: e8:45:f2:6e:13:74:60:49:40:4e:65:20:4d:b9:56: 63:d0:62:1f:8e:43:2d:23:ec:c2:0c:dd:bd:e9:e9: 08:38:55:3c:f6:7e:95:86:e5:21:9b:a4:8c:ab:7d: 62:5d:6c:37:11:d3:66:8c:53:ba:33:cd:45:76:96: 96:85:99:70:a7:33:96:a4:d9:ec:ae:b8:85:c5:55: a8:ef:e1:04:7f:ec:71:42:d1:24:c5:8f:10:fd:95: c8:ea:cb:eb:55:32:d2:11:01:5c:94:f5:cc:40:8c: 49:bc:47:25:27:1d:40:e7:b5:fa:8b:32:46:e6:aa: 92:f0:67:eb:d0:3f:58:2d:1a:17:ef:33:48:33:21: 10:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 82:70:38:10:D7:49:F6:B3:04:17:32:87:7B:BC:A7:98:EF:F4:09:F9 X509v3 Authority Key Identifier: keyid:8A:05:EB:F5:8B:EC:96:D9:46:EE:85:F0:F0:F8:57:01:A0:A7:27:99 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/12307390-6ef3-4476-a6aa-d0c5783e1f37/0/8A05EBF58BEC96D946EE85F0F0F85701A0A72799.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8A05EBF58BEC96D946EE85F0F0F85701A0A72799.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/12307390-6ef3-4476-a6aa-d0c5783e1f37/0/8A05EBF58BEC96D946EE85F0F0F85701A0A72799.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7b:e0:1c:c4:f3:2a:99:97:3a:1d:bf:17:af:15:5b:93:c5:06: cd:db:67:38:f7:be:61:ae:4b:39:5d:2d:df:a3:90:96:90:1e: 0d:37:4e:b6:98:b5:28:88:60:74:af:d8:8a:18:88:7d:1c:ba: 25:a8:98:b6:15:a8:55:59:cc:7d:67:99:91:15:af:af:e6:69: e9:6b:10:0f:66:91:49:b8:d0:b0:e1:ef:52:8e:ae:10:f4:0c: a6:0a:40:9a:fc:9e:34:d5:93:9a:04:57:28:49:f2:d1:bb:53: da:5c:65:cb:dd:de:10:ba:0c:56:3b:0c:ef:28:79:d2:84:75: 0a:1e:52:9b:c6:36:78:d8:77:85:16:6b:67:9d:e3:c9:ba:f1: 5e:f7:37:e9:c9:d3:30:4c:c9:8e:09:21:da:1f:b1:a1:94:55: 7e:97:13:c1:bd:cb:bd:c1:39:0a:90:e3:13:25:b4:c0:08:42: a7:b0:48:77:a5:87:40:78:17:3a:48:80:1a:b5:b1:e7:4f:cc: 37:a4:e5:a1:2b:18:d7:8f:4f:18:c8:86:3b:1d:da:3f:3f:bf: 54:e2:e5:77:51:0a:65:61:f2:cb:23:a0:a0:d9:c5:97:bf:86: eb:c3:29:da:f3:45:00:13:d5:97:60:ac:5f:0c:1e:42:a1:e5: 79:70:22:a4 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUMtrCCHoaA+NJ1vGWMS5QubCqZnkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEEwNUVCRjU4QkVDOTZEOTQ2RUU4NUYwRjBGODU3MDFB MEE3Mjc5OTAeFw0yNTA4MDcxMjM2MDVaFw0yNTA4MTAyMzI4MDVaMDMxMTAvBgNV BAMTKDgyNzAzODEwRDc0OUY2QjMwNDE3MzI4NzdCQkNBNzk4RUZGNDA5RjkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDBP/KUaknxjKkMqobkzJMjgJJi Qtb0LxrdozFexc5BtAByBO7hU1sbYZ0oBlvVGSMQfF4KxmsYvO6VYjffWoX4PCwH tZri+uGopZzBRuNQEjcnvLt+xvowPdl/GuVgXNbRi2nzhZFozBsLtV07Oag24/OI 5L5PhehF8m4TdGBJQE5lIE25VmPQYh+OQy0j7MIM3b3p6Qg4VTz2fpWG5SGbpIyr fWJdbDcR02aMU7ozzUV2lpaFmXCnM5ak2eyuuIXFVajv4QR/7HFC0STFjxD9lcjq y+tVMtIRAVyU9cxAjEm8RyUnHUDntfqLMkbmqpLwZ+vQP1gtGhfvM0gzIRDhAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUgnA4ENdJ9rMEFzKHe7ynmO/0CfkwHwYDVR0j BBgwFoAUigXr9YvsltlG7oXw8PhXAaCnJ5kwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x MjMwNzM5MC02ZWYzLTQ0NzYtYTZhYS1kMGM1NzgzZTFmMzcvMC84QTA1RUJGNThC RUM5NkQ5NDZFRTg1RjBGMEY4NTcwMUEwQTcyNzk5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOEEwNUVCRjU4QkVDOTZEOTQ2RUU4NUYwRjBGODU3MDFBMEE3 Mjc5OS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMTIzMDczOTAtNmVmMy00NDc2LWE2 YWEtZDBjNTc4M2UxZjM3LzAvOEEwNUVCRjU4QkVDOTZEOTQ2RUU4NUYwRjBGODU3 MDFBMEE3Mjc5OS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHvgHMTzKpmXOh2/F68VW5PFBs3bZzj3vmGu SzldLd+jkJaQHg03TraYtSiIYHSv2IoYiH0cuiWomLYVqFVZzH1nmZEVr6/maelr EA9mkUm40LDh71KOrhD0DKYKQJr8njTVk5oEVyhJ8tG7U9pcZcvd3hC6DFY7DO8o edKEdQoeUpvGNnjYd4UWa2ed48m68V73N+nJ0zBMyY4JIdofsaGUVX6XE8G9y73B OQqQ4xMltMAIQqewSHelh0B4FzpIgBq1sedPzDek5aErGNePTxjIhjsd2j8/v1Ti 5XdRCmVh8ssjoKDZxZe/huvDKdrzRQAT1ZdgrF8MHkKh5XlwIqQ= -----END CERTIFICATE-----Generated at Fri Aug 8 12:58:09 2025 by rpki-client