$ rpki-client -vvf repo-rpki.idnic.net/repo/4157c9ac-52db-4dba-ac77-845e2ddd8879/0/8D7AD1F796C88BCD49E1BEC42851AFA58BD78588.mft File: 8D7AD1F796C88BCD49E1BEC42851AFA58BD78588.mft (raw, json) Hash identifier: y+jKtGTpFH21t+/WkEn6dl+exs5bFZJY5EMqLUajyxY= Subject key identifier: 83:85:82:E0:99:32:FD:32:5E:7F:13:91:15:98:86:F2:BC:6D:D3:6D Authority key identifier: 8D:7A:D1:F7:96:C8:8B:CD:49:E1:BE:C4:28:51:AF:A5:8B:D7:85:88 Certificate issuer: /CN=8D7AD1F796C88BCD49E1BEC42851AFA58BD78588 Certificate serial: 61A3A9269737FC2344EE7BD0E610BF5FAE1E54C5 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8D7AD1F796C88BCD49E1BEC42851AFA58BD78588.cer Subject info access: rsync://repo-rpki.idnic.net/repo/4157c9ac-52db-4dba-ac77-845e2ddd8879/0/8D7AD1F796C88BCD49E1BEC42851AFA58BD78588.mft Manifest number: 0182 Signing time: Sat 09 Aug 2025 03:21:40 +0000 Manifest this update: Sat 09 Aug 2025 03:16:40 +0000 Manifest next update: Tue 12 Aug 2025 07:27:40 +0000 Files and hashes: 1: 3130332e3130312e39362e302f32342d3234203d3e20313530393430.roa (hash: S5y/AAm56aWRItZwk28UKrK77+5w1nu1pwxZLQMOads=) 2: 8D7AD1F796C88BCD49E1BEC42851AFA58BD78588.crl (hash: GtBVtimWb1rLlN0KfGEozFcnmaQ5TGTUUuoSLWMWZ9I=) 3: 3130332e3130312e39372e302f32342d3234203d3e20313530393430.roa (hash: aTXk/DsjXzFyIklyAQb47qbqcaGolhR0lzBTP747Tls=) 4: 3130332e3130312e39362e302f32332d3233203d3e20313530393430.roa (hash: lwBU7RZrxpXV+tNL6ldwUUEfAC8x198/UcNXhcVqIDE=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/4157c9ac-52db-4dba-ac77-845e2ddd8879/0/8D7AD1F796C88BCD49E1BEC42851AFA58BD78588.crl rsync://repo-rpki.idnic.net/repo/4157c9ac-52db-4dba-ac77-845e2ddd8879/0/8D7AD1F796C88BCD49E1BEC42851AFA58BD78588.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8D7AD1F796C88BCD49E1BEC42851AFA58BD78588.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 12 Aug 2025 07:27:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 61:a3:a9:26:97:37:fc:23:44:ee:7b:d0:e6:10:bf:5f:ae:1e:54:c5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8D7AD1F796C88BCD49E1BEC42851AFA58BD78588 Validity Not Before: Aug 9 03:16:40 2025 GMT Not After : Aug 12 07:27:40 2025 GMT Subject: CN=838582E09932FD325E7F1391159886F2BC6DD36D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:d2:28:12:90:c6:63:2e:9b:d9:d7:06:39:72: f2:15:23:d3:c5:e2:19:a1:0c:dd:21:ec:20:96:99: de:04:5c:8e:70:d6:92:bd:83:62:e6:7e:e3:7e:54: 6d:a4:fa:6e:56:4c:4a:23:aa:32:42:69:9f:7d:f4: 4d:b0:48:59:75:57:0b:d8:c8:db:9f:90:d5:c1:5c: 95:0a:ee:c8:da:bb:de:16:01:95:56:ef:59:e5:c1: 6a:ea:f5:a0:fe:7d:13:3c:45:29:b4:c2:7f:8e:9b: 83:bd:07:e8:04:3c:c1:bd:e7:96:28:f2:f1:0c:f0: 13:d8:3e:ad:dd:df:2c:37:da:45:8d:94:f1:ef:a8: d6:45:71:f2:89:27:ce:40:1f:12:d0:78:24:f3:9e: 06:36:89:e1:70:5b:52:5a:cf:3a:fc:89:4c:ef:4d: 28:c9:8d:45:65:f5:fd:76:19:f3:02:12:f6:d0:45: 28:a3:9b:e3:a9:cc:e4:30:e4:3d:1a:56:3a:ba:2d: 7e:35:8d:88:6d:20:7d:9e:dd:99:b5:f0:1b:2a:27: 4c:a8:26:1e:d5:eb:0e:07:86:46:d0:59:d7:1e:95: 69:90:de:1f:f1:66:1c:ea:92:c4:c4:bb:4b:f0:40: c4:61:52:67:da:f2:35:b2:9e:73:3a:71:94:0c:c8: 92:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 83:85:82:E0:99:32:FD:32:5E:7F:13:91:15:98:86:F2:BC:6D:D3:6D X509v3 Authority Key Identifier: keyid:8D:7A:D1:F7:96:C8:8B:CD:49:E1:BE:C4:28:51:AF:A5:8B:D7:85:88 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/4157c9ac-52db-4dba-ac77-845e2ddd8879/0/8D7AD1F796C88BCD49E1BEC42851AFA58BD78588.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8D7AD1F796C88BCD49E1BEC42851AFA58BD78588.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/4157c9ac-52db-4dba-ac77-845e2ddd8879/0/8D7AD1F796C88BCD49E1BEC42851AFA58BD78588.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 53:a1:c1:ac:e8:71:04:8c:00:63:4f:08:bf:64:df:ac:7e:ed: 81:59:1d:7a:92:0d:c8:29:ba:7d:5d:6e:6e:df:e5:6b:eb:cd: ca:1a:74:da:db:a7:38:6f:16:fb:e1:cd:c4:e9:85:67:47:6f: cf:4b:09:e7:08:9e:ca:e7:fa:9e:73:13:e5:e5:a2:10:ee:56: 68:12:77:34:2d:f4:f0:ca:15:9d:70:1e:93:8a:2d:e2:42:78: 00:8e:9d:a3:eb:9d:9e:65:d5:6a:01:81:92:77:df:ae:3c:3e: 06:f7:3f:2f:1a:65:c0:6f:75:98:b1:a6:57:f8:91:e6:0b:89: bc:a1:6f:64:8e:33:34:09:89:b3:90:4f:37:04:96:8d:37:d3: 4c:51:d2:78:62:d4:ef:3c:55:bd:3e:a6:8f:9f:38:c1:fd:98: 12:a9:f8:91:be:fc:27:ae:23:4e:e4:6d:2c:60:f5:ac:bd:7d: e3:03:6a:6e:15:01:ec:de:19:86:f3:fa:27:4a:11:70:9b:80: e3:d5:01:dc:42:ac:e5:bf:ca:39:67:07:6f:1d:b5:06:31:28: 88:19:47:11:d2:b3:f7:c9:11:db:0d:8a:f4:f1:a5:e6:90:f7: d9:2a:e7:12:7c:40:fd:16:43:04:fb:38:25:0c:82:b9:cf:cc: ee:88:93:50 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUYaOpJpc3/CNE7nvQ5hC/X64eVMUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEQ3QUQxRjc5NkM4OEJDRDQ5RTFCRUM0Mjg1MUFGQTU4 QkQ3ODU4ODAeFw0yNTA4MDkwMzE2NDBaFw0yNTA4MTIwNzI3NDBaMDMxMTAvBgNV BAMTKDgzODU4MkUwOTkzMkZEMzI1RTdGMTM5MTE1OTg4NkYyQkM2REQzNkQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCk0igSkMZjLpvZ1wY5cvIVI9PF 4hmhDN0h7CCWmd4EXI5w1pK9g2LmfuN+VG2k+m5WTEojqjJCaZ999E2wSFl1VwvY yNufkNXBXJUK7sjau94WAZVW71nlwWrq9aD+fRM8RSm0wn+Om4O9B+gEPMG955Yo 8vEM8BPYPq3d3yw32kWNlPHvqNZFcfKJJ85AHxLQeCTzngY2ieFwW1Jazzr8iUzv TSjJjUVl9f12GfMCEvbQRSijm+OpzOQw5D0aVjq6LX41jYhtIH2e3Zm18BsqJ0yo Jh7V6w4HhkbQWdcelWmQ3h/xZhzqksTEu0vwQMRhUmfa8jWynnM6cZQMyJIBAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUg4WC4Jky/TJefxORFZiG8rxt020wHwYDVR0j BBgwFoAUjXrR95bIi81J4b7EKFGvpYvXhYgwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 MTU3YzlhYy01MmRiLTRkYmEtYWM3Ny04NDVlMmRkZDg4NzkvMC84RDdBRDFGNzk2 Qzg4QkNENDlFMUJFQzQyODUxQUZBNThCRDc4NTg4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOEQ3QUQxRjc5NkM4OEJDRDQ5RTFCRUM0Mjg1MUFGQTU4QkQ3 ODU4OC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNDE1N2M5YWMtNTJkYi00ZGJhLWFj NzctODQ1ZTJkZGQ4ODc5LzAvOEQ3QUQxRjc5NkM4OEJDRDQ5RTFCRUM0Mjg1MUFG QTU4QkQ3ODU4OC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFOhwazocQSMAGNPCL9k36x+7YFZHXqSDcgp un1dbm7f5WvrzcoadNrbpzhvFvvhzcTphWdHb89LCecInsrn+p5zE+XlohDuVmgS dzQt9PDKFZ1wHpOKLeJCeACOnaPrnZ5l1WoBgZJ33648Pgb3Py8aZcBvdZixplf4 keYLibyhb2SOMzQJibOQTzcElo0300xR0nhi1O88Vb0+po+fOMH9mBKp+JG+/Ceu I07kbSxg9ay9feMDam4VAezeGYbz+idKEXCbgOPVAdxCrOW/yjlnB28dtQYxKIgZ RxHSs/fJEdsNivTxpeaQ99kq5xJ8QP0WQwT7OCUMgrnPzO6Ik1A= -----END CERTIFICATE-----Generated at Sat Aug 9 05:34:43 2025 by rpki-client