$ rpki-client -vvf repo-rpki.idnic.net/repo/34e2bf09-5f42-4b65-a42d-63d0796d206c/0/8C3E44A2E2B475D5CF4A48E52D17290001FEFECA.mft File: 8C3E44A2E2B475D5CF4A48E52D17290001FEFECA.mft (raw, json) Hash identifier: aZsfdlxdKOBza2rNzcCDJooiIhpBb0E2SbsNBJwfLEI= Subject key identifier: F7:F7:98:C1:F7:2A:E9:85:EF:58:DA:19:20:C9:E3:7E:41:9B:39:3E Authority key identifier: 8C:3E:44:A2:E2:B4:75:D5:CF:4A:48:E5:2D:17:29:00:01:FE:FE:CA Certificate issuer: /CN=8C3E44A2E2B475D5CF4A48E52D17290001FEFECA Certificate serial: 524F5213D078732052875FB9293AE7D91774FF73 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8C3E44A2E2B475D5CF4A48E52D17290001FEFECA.cer Subject info access: rsync://repo-rpki.idnic.net/repo/34e2bf09-5f42-4b65-a42d-63d0796d206c/0/8C3E44A2E2B475D5CF4A48E52D17290001FEFECA.mft Manifest number: 0501 Signing time: Tue 05 Aug 2025 14:02:14 +0000 Manifest this update: Tue 05 Aug 2025 13:57:14 +0000 Manifest next update: Fri 08 Aug 2025 20:45:14 +0000 Files and hashes: 1: 8C3E44A2E2B475D5CF4A48E52D17290001FEFECA.crl (hash: 9UNUJu9ACavh0RNLSabK5mb707VnJIDOOk1B82FYEKY=) 2: 34332e3233302e342e302f32342d3234203d3e203338373838.roa (hash: Myo0yUY2zYBlmDu7ifkTtwfEDTywRzZJiBzIgMz4kyk=) 3: 34332e3233312e3132382e302f32342d3234203d3e203338373838.roa (hash: lmYVrCn9BeJjLwZ83vYZIK3fLJEIHwntZ3WH1J4i7Cc=) 4: 34332e3233302e372e302f32342d3234203d3e203338373838.roa (hash: i3HQaU7A5T+hugQmUCoVWplcF5RYtJ+OjDq/WGotyFM=) 5: 34332e3233312e3132392e302f32342d3234203d3e203338373838.roa (hash: W5Zb76xYohKVMN4oDjg1HwPWp43mgnWE5orvLBb5SkM=) 6: 3130332e3234322e3138312e302f32342d3234203d3e203338373838.roa (hash: i565en58aZkxitE/Cu7dj7vQtPe24rOc0XFo1zdj2pA=) 7: 3130332e372e302e302f32332d3233203d3e203338373838.roa (hash: eYJSZ6BNvJdcwOjXxyxNY4HDMCsMbaLoRNn+0CbiAds=) 8: 3130332e372e312e302f32342d3234203d3e203338373838.roa (hash: HfReQfR8KQgqYxrjCjLONRll8cJTpbYph9s5PnSext8=) 9: 34332e3233312e3132382e302f32332d3233203d3e203338373838.roa (hash: HFx27am61y/dC1xdTadXPgOw5A9a+PEjL0futSZShAU=) 10: 3130332e3234322e3138302e302f32332d3233203d3e203338373838.roa (hash: Q4FCJx2xdQyXWuG/Mkdlbm+EYQuJWHSMRXEQhaDwxBc=) 11: 3130332e3234322e3138302e302f32342d3234203d3e203338373838.roa (hash: J6znwF/VIOIQq7nf+/cVdXFnP4yNGPdAl3m1qZHQzpE=) 12: 3130332e372e302e302f32342d3234203d3e203338373838.roa (hash: IvhePbxETJJ1An12hekeGcMrYJecR0U54GWOfDVzXpo=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/34e2bf09-5f42-4b65-a42d-63d0796d206c/0/8C3E44A2E2B475D5CF4A48E52D17290001FEFECA.crl rsync://repo-rpki.idnic.net/repo/34e2bf09-5f42-4b65-a42d-63d0796d206c/0/8C3E44A2E2B475D5CF4A48E52D17290001FEFECA.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8C3E44A2E2B475D5CF4A48E52D17290001FEFECA.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 08 Aug 2025 20:45:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 52:4f:52:13:d0:78:73:20:52:87:5f:b9:29:3a:e7:d9:17:74:ff:73 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8C3E44A2E2B475D5CF4A48E52D17290001FEFECA Validity Not Before: Aug 5 13:57:14 2025 GMT Not After : Aug 8 20:45:14 2025 GMT Subject: CN=F7F798C1F72AE985EF58DA1920C9E37E419B393E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:1d:6d:a1:63:39:01:54:28:fe:d8:e9:35:af: 25:31:a1:58:7d:32:48:a8:89:fd:39:13:53:5b:3c: 4d:2a:8b:23:c3:e6:2b:29:11:a7:f5:53:82:b2:50: 4c:21:00:21:56:71:35:29:fd:44:e7:b7:ff:88:a9: 16:42:e9:16:8f:69:0d:3e:26:9b:2e:8f:3d:eb:c9: 34:65:e9:c1:fb:1b:e8:12:43:26:91:f0:98:d9:71: 46:49:1a:66:f6:40:7c:cb:1a:e1:96:5a:b6:5f:ac: 03:61:f9:91:fa:03:23:90:1c:4e:6a:d7:12:c8:30: 0d:e6:85:d4:6f:93:d8:18:43:68:db:b0:6a:49:68: 00:4f:29:e6:41:ba:86:44:75:d9:72:c2:2b:ba:e1: 75:d4:ed:07:4a:20:3b:a0:25:f8:06:ab:a3:a6:bd: d0:da:33:1c:b1:d7:9d:1b:05:8f:49:85:39:74:14: 74:7d:91:11:b5:ea:35:17:36:ae:d5:04:5a:7e:82: fe:0d:e9:01:61:53:3c:c7:39:d6:ee:5b:ec:ab:db: 8c:6d:11:61:93:f6:83:1d:f0:f6:da:55:86:7e:62: 62:e4:1c:79:be:e2:71:e7:28:5d:1a:f1:de:64:d4: 36:f9:24:c8:e6:89:dd:76:51:3e:17:3b:84:a0:5a: 47:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F7:F7:98:C1:F7:2A:E9:85:EF:58:DA:19:20:C9:E3:7E:41:9B:39:3E X509v3 Authority Key Identifier: keyid:8C:3E:44:A2:E2:B4:75:D5:CF:4A:48:E5:2D:17:29:00:01:FE:FE:CA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/34e2bf09-5f42-4b65-a42d-63d0796d206c/0/8C3E44A2E2B475D5CF4A48E52D17290001FEFECA.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8C3E44A2E2B475D5CF4A48E52D17290001FEFECA.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/34e2bf09-5f42-4b65-a42d-63d0796d206c/0/8C3E44A2E2B475D5CF4A48E52D17290001FEFECA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 72:74:50:22:ae:41:9b:fb:a7:f7:60:0d:59:a5:e5:03:04:0f: e6:86:f4:13:d2:8e:ca:b5:0f:b3:2d:74:00:a4:5a:f8:e0:30: 39:22:14:82:52:d3:db:26:7b:be:7d:d2:6a:31:99:3a:d0:5f: b7:80:f1:cd:a3:fa:31:78:93:b4:fb:ec:e2:3a:f5:61:76:a5: cd:38:90:7b:45:ec:a9:de:65:f6:ad:d5:59:bf:f9:d9:ef:1b: f7:5e:08:b6:dd:a5:87:dc:06:f8:a9:c5:9b:0e:5d:f8:d4:a9: 6c:ae:11:fc:bb:90:f5:83:7a:b7:2a:a1:9b:dd:36:dc:37:a5: ae:57:b4:0e:1a:88:e8:d1:6f:c5:e8:e1:21:cf:b4:24:e4:ce: fa:14:00:9b:65:0c:58:dd:5c:15:27:eb:82:78:4e:35:6e:ea: 26:12:cd:c5:44:7e:13:45:4e:fd:8a:bc:86:53:b2:e1:a0:f2: ee:b9:bc:07:18:97:b0:4c:20:aa:25:db:e5:db:78:8d:b5:0a: 7d:d4:4c:67:ae:9a:d9:d1:16:6b:72:db:e0:5b:31:05:44:f1: 16:db:ed:58:63:59:db:b4:b2:20:59:c1:e9:c0:b6:c0:a0:5f: 03:4f:37:98:d7:41:16:5b:09:03:59:13:bb:46:c5:5b:fb:c5: a4:8f:f3:40 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUUk9SE9B4cyBSh1+5KTrn2Rd0/3MwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEMzRTQ0QTJFMkI0NzVENUNGNEE0OEU1MkQxNzI5MDAw MUZFRkVDQTAeFw0yNTA4MDUxMzU3MTRaFw0yNTA4MDgyMDQ1MTRaMDMxMTAvBgNV BAMTKEY3Rjc5OEMxRjcyQUU5ODVFRjU4REExOTIwQzlFMzdFNDE5QjM5M0UwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCpHW2hYzkBVCj+2Ok1ryUxoVh9 Mkioif05E1NbPE0qiyPD5ispEaf1U4KyUEwhACFWcTUp/UTnt/+IqRZC6RaPaQ0+ Jpsujz3ryTRl6cH7G+gSQyaR8JjZcUZJGmb2QHzLGuGWWrZfrANh+ZH6AyOQHE5q 1xLIMA3mhdRvk9gYQ2jbsGpJaABPKeZBuoZEddlywiu64XXU7QdKIDugJfgGq6Om vdDaMxyx150bBY9JhTl0FHR9kRG16jUXNq7VBFp+gv4N6QFhUzzHOdbuW+yr24xt EWGT9oMd8PbaVYZ+YmLkHHm+4nHnKF0a8d5k1Db5JMjmid12UT4XO4SgWkdJAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU9/eYwfcq6YXvWNoZIMnjfkGbOT4wHwYDVR0j BBgwFoAUjD5EouK0ddXPSkjlLRcpAAH+/sowDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z NGUyYmYwOS01ZjQyLTRiNjUtYTQyZC02M2QwNzk2ZDIwNmMvMC84QzNFNDRBMkUy QjQ3NUQ1Q0Y0QTQ4RTUyRDE3MjkwMDAxRkVGRUNBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOEMzRTQ0QTJFMkI0NzVENUNGNEE0OEU1MkQxNzI5MDAwMUZF RkVDQS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMzRlMmJmMDktNWY0Mi00YjY1LWE0 MmQtNjNkMDc5NmQyMDZjLzAvOEMzRTQ0QTJFMkI0NzVENUNGNEE0OEU1MkQxNzI5 MDAwMUZFRkVDQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHJ0UCKuQZv7p/dgDVml5QMED+aG9BPSjsq1 D7MtdACkWvjgMDkiFIJS09sme7590moxmTrQX7eA8c2j+jF4k7T77OI69WF2pc04 kHtF7KneZfat1Vm/+dnvG/deCLbdpYfcBvipxZsOXfjUqWyuEfy7kPWDercqoZvd Ntw3pa5XtA4aiOjRb8Xo4SHPtCTkzvoUAJtlDFjdXBUn64J4TjVu6iYSzcVEfhNF Tv2KvIZTsuGg8u65vAcYl7BMIKol2+XbeI21Cn3UTGeumtnRFmty2+BbMQVE8Rbb 7VhjWdu0siBZwenAtsCgXwNPN5jXQRZbCQNZE7tGxVv7xaSP80A= -----END CERTIFICATE-----Generated at Thu Aug 7 00:27:00 2025 by rpki-client