$ rpki-client -vvf repo-rpki.idnic.net/repo/14758e8e-49c8-48b8-bdcb-35339e2ae601/0/8F9164714A1B3B906CF8A8B371F342EBA3540CD9.mft File: 8F9164714A1B3B906CF8A8B371F342EBA3540CD9.mft (raw, json) Hash identifier: 6Eb7D2i3yvcg1NypaM29W96rgvskx81fkbW4NeC7xec= Subject key identifier: D8:39:31:DD:4F:BB:E4:10:27:CF:E7:BD:35:70:EE:AA:F5:16:F2:A4 Authority key identifier: 8F:91:64:71:4A:1B:3B:90:6C:F8:A8:B3:71:F3:42:EB:A3:54:0C:D9 Certificate issuer: /CN=8F9164714A1B3B906CF8A8B371F342EBA3540CD9 Certificate serial: 082B3BA3D8E7C9483D8A2C96E8721DF84C84B2E5 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8F9164714A1B3B906CF8A8B371F342EBA3540CD9.cer Subject info access: rsync://repo-rpki.idnic.net/repo/14758e8e-49c8-48b8-bdcb-35339e2ae601/0/8F9164714A1B3B906CF8A8B371F342EBA3540CD9.mft Manifest number: 01F1 Signing time: Tue 05 Aug 2025 02:10:37 +0000 Manifest this update: Tue 05 Aug 2025 02:05:37 +0000 Manifest next update: Fri 08 Aug 2025 10:06:37 +0000 Files and hashes: 1: 3130332e3138382e3131392e302f32342d3234203d3e20313439373435.roa (hash: VHhhP8m98Q6XFX6o9Io0DEj5+ACOMVpb0NESi8BC7x8=) 2: 8F9164714A1B3B906CF8A8B371F342EBA3540CD9.crl (hash: YX/bG946M6yLY76Zl+Hbn/saThlK8NTAFGPQG8htQto=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/14758e8e-49c8-48b8-bdcb-35339e2ae601/0/8F9164714A1B3B906CF8A8B371F342EBA3540CD9.crl rsync://repo-rpki.idnic.net/repo/14758e8e-49c8-48b8-bdcb-35339e2ae601/0/8F9164714A1B3B906CF8A8B371F342EBA3540CD9.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8F9164714A1B3B906CF8A8B371F342EBA3540CD9.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 08 Aug 2025 10:06:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 08:2b:3b:a3:d8:e7:c9:48:3d:8a:2c:96:e8:72:1d:f8:4c:84:b2:e5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8F9164714A1B3B906CF8A8B371F342EBA3540CD9 Validity Not Before: Aug 5 02:05:37 2025 GMT Not After : Aug 8 10:06:37 2025 GMT Subject: CN=D83931DD4FBBE41027CFE7BD3570EEAAF516F2A4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:88:88:8d:ec:ec:3f:b5:11:63:84:14:43:c0: 2d:d6:2a:50:52:37:7d:63:e1:6c:71:2d:b9:3a:dc: 02:45:86:23:26:aa:ba:2d:49:8d:5a:a3:23:24:a9: ab:db:c5:ec:37:39:32:0b:d5:4b:4d:5a:d0:e6:f6: bd:f8:3a:33:09:64:3a:7a:d1:9b:56:78:d9:4e:5d: 9d:0f:21:ff:19:72:b1:5e:15:6a:61:fd:75:42:ca: fc:02:90:ea:b0:ff:55:b7:74:ec:e0:e7:41:b0:b7: b7:46:b3:6a:20:ab:b7:6e:ef:fd:4c:6a:6c:e4:db: 92:9b:d6:32:f9:3e:2c:b7:b8:ac:e3:ee:ed:35:cb: b9:11:31:e3:3a:c2:4e:9e:0a:ba:62:fb:c5:21:30: f5:07:e0:65:ff:0b:93:b5:46:0a:eb:ef:4a:5b:a7: e9:df:42:e7:af:de:fb:41:09:89:d5:8a:03:f6:6c: 9f:d1:0c:93:f0:0d:f9:5a:c0:fb:18:4f:25:4b:2a: 5f:29:dc:90:35:78:ba:a1:34:c5:c5:77:94:ec:0b: 4f:fb:65:aa:78:0e:e9:5c:22:4a:a6:ca:81:52:83: 20:21:19:8a:45:ba:8c:e5:b9:93:e9:17:aa:be:c0: f5:b5:fb:dc:5c:dc:43:13:e4:9b:6e:27:8c:c6:0e: 65:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:39:31:DD:4F:BB:E4:10:27:CF:E7:BD:35:70:EE:AA:F5:16:F2:A4 X509v3 Authority Key Identifier: keyid:8F:91:64:71:4A:1B:3B:90:6C:F8:A8:B3:71:F3:42:EB:A3:54:0C:D9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/14758e8e-49c8-48b8-bdcb-35339e2ae601/0/8F9164714A1B3B906CF8A8B371F342EBA3540CD9.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8F9164714A1B3B906CF8A8B371F342EBA3540CD9.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/14758e8e-49c8-48b8-bdcb-35339e2ae601/0/8F9164714A1B3B906CF8A8B371F342EBA3540CD9.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 33:02:4d:65:a5:b3:3e:3b:cb:b8:60:0c:57:26:2b:52:d4:f5: 8f:ec:39:38:f5:42:61:76:1b:f1:78:be:97:08:70:29:cd:d6: 9d:6b:93:a0:8e:6f:d4:f1:f1:51:e2:24:39:15:0c:17:b6:90: ee:f2:77:21:ac:b8:27:e6:07:db:20:d2:de:71:6f:05:48:0e: 05:06:eb:c3:15:08:56:30:90:86:6a:70:2c:c4:d0:b3:15:d1: 07:a2:70:72:c9:6f:7a:a7:03:b9:3c:49:a8:48:34:9a:e7:50: 98:d0:52:71:be:7a:29:0d:ef:71:32:ee:c7:d8:01:c1:6c:2f: 30:bd:33:b0:4b:2c:63:7d:fe:33:6f:41:80:67:e7:88:ea:ef: 62:19:c5:ed:f0:37:b1:74:a8:9f:28:e7:7d:22:e4:2a:49:ac: e1:62:8d:55:6f:e2:5e:f4:5f:96:cd:4e:7f:42:7b:5d:ce:77: c7:61:33:1e:b3:99:4a:ab:40:70:66:97:de:7d:09:fc:bc:dc: a0:ee:c4:41:bf:4e:97:99:74:28:16:d5:bc:5f:b9:9c:d2:d5: 66:b1:35:05:46:68:ac:97:39:af:13:89:b0:42:3a:0d:c2:59: f9:5b:92:72:16:68:9b:ce:ed:68:d0:c6:aa:a8:8a:52:e3:00: 58:f3:c8:e4 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUCCs7o9jnyUg9iiyW6HId+EyEsuUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEY5MTY0NzE0QTFCM0I5MDZDRjhBOEIzNzFGMzQyRUJB MzU0MENEOTAeFw0yNTA4MDUwMjA1MzdaFw0yNTA4MDgxMDA2MzdaMDMxMTAvBgNV BAMTKEQ4MzkzMURENEZCQkU0MTAyN0NGRTdCRDM1NzBFRUFBRjUxNkYyQTQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDCiIiN7Ow/tRFjhBRDwC3WKlBS N31j4WxxLbk63AJFhiMmqrotSY1aoyMkqavbxew3OTIL1UtNWtDm9r34OjMJZDp6 0ZtWeNlOXZ0PIf8ZcrFeFWph/XVCyvwCkOqw/1W3dOzg50Gwt7dGs2ogq7du7/1M amzk25Kb1jL5Piy3uKzj7u01y7kRMeM6wk6eCrpi+8UhMPUH4GX/C5O1Rgrr70pb p+nfQuev3vtBCYnVigP2bJ/RDJPwDflawPsYTyVLKl8p3JA1eLqhNMXFd5TsC0/7 Zap4DulcIkqmyoFSgyAhGYpFuozluZPpF6q+wPW1+9xc3EMT5JtuJ4zGDmWxAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU2Dkx3U+75BAnz+e9NXDuqvUW8qQwHwYDVR0j BBgwFoAUj5FkcUobO5Bs+KizcfNC66NUDNkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x NDc1OGU4ZS00OWM4LTQ4YjgtYmRjYi0zNTMzOWUyYWU2MDEvMC84RjkxNjQ3MTRB MUIzQjkwNkNGOEE4QjM3MUYzNDJFQkEzNTQwQ0Q5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOEY5MTY0NzE0QTFCM0I5MDZDRjhBOEIzNzFGMzQyRUJBMzU0 MENEOS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMTQ3NThlOGUtNDljOC00OGI4LWJk Y2ItMzUzMzllMmFlNjAxLzAvOEY5MTY0NzE0QTFCM0I5MDZDRjhBOEIzNzFGMzQy RUJBMzU0MENEOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADMCTWWlsz47y7hgDFcmK1LU9Y/sOTj1QmF2 G/F4vpcIcCnN1p1rk6COb9Tx8VHiJDkVDBe2kO7ydyGsuCfmB9sg0t5xbwVIDgUG 68MVCFYwkIZqcCzE0LMV0QeicHLJb3qnA7k8SahINJrnUJjQUnG+eikN73Ey7sfY AcFsLzC9M7BLLGN9/jNvQYBn54jq72IZxe3wN7F0qJ8o530i5CpJrOFijVVv4l70 X5bNTn9Ce13Od8dhMx6zmUqrQHBml959Cfy83KDuxEG/TpeZdCgW1bxfuZzS1Wax NQVGaKyXOa8TibBCOg3CWflbknIWaJvO7WjQxqqoilLjAFjzyOQ= -----END CERTIFICATE-----Generated at Wed Aug 6 10:08:56 2025 by rpki-client