$ rpki-client -vvf repo-rpki.idnic.net/repo/4288762c-3fc5-49cc-949a-594b331a13a1/0/8958EB1EA0022DEF783D17F1C5B6F0C54B0F5F1E.mft File: 8958EB1EA0022DEF783D17F1C5B6F0C54B0F5F1E.mft (raw, json) Hash identifier: WbJciwZKQ5Q839iLQZs2GiV2xtJ0ljsVFOF9WXY6/Ww= Subject key identifier: 90:F7:72:23:8D:B9:45:20:9A:54:EE:4B:BB:6B:CC:EE:E8:93:1A:5F Authority key identifier: 89:58:EB:1E:A0:02:2D:EF:78:3D:17:F1:C5:B6:F0:C5:4B:0F:5F:1E Certificate issuer: /CN=8958EB1EA0022DEF783D17F1C5B6F0C54B0F5F1E Certificate serial: 35980D057A1EC2AC9D6888E86CA9D337B3DE5292 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8958EB1EA0022DEF783D17F1C5B6F0C54B0F5F1E.cer Subject info access: rsync://repo-rpki.idnic.net/repo/4288762c-3fc5-49cc-949a-594b331a13a1/0/8958EB1EA0022DEF783D17F1C5B6F0C54B0F5F1E.mft Manifest number: FC Signing time: Tue 12 Aug 2025 05:10:04 +0000 Manifest this update: Tue 12 Aug 2025 05:05:04 +0000 Manifest next update: Fri 15 Aug 2025 07:58:04 +0000 Files and hashes: 1: 8958EB1EA0022DEF783D17F1C5B6F0C54B0F5F1E.crl (hash: XFAgw9CYnrvIAynqKvVEdbslCQ0RCCaro1b0sOy5zBQ=) 2: 3230322e34372e3136302e302f32342d3234203d3e20313532303736.roa (hash: 7kwTbSO1puRUOTojUVn3A2nZmKPBj1Yf1FR09LrPep4=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/4288762c-3fc5-49cc-949a-594b331a13a1/0/8958EB1EA0022DEF783D17F1C5B6F0C54B0F5F1E.crl rsync://repo-rpki.idnic.net/repo/4288762c-3fc5-49cc-949a-594b331a13a1/0/8958EB1EA0022DEF783D17F1C5B6F0C54B0F5F1E.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8958EB1EA0022DEF783D17F1C5B6F0C54B0F5F1E.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 15 Aug 2025 07:58:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 35:98:0d:05:7a:1e:c2:ac:9d:68:88:e8:6c:a9:d3:37:b3:de:52:92 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8958EB1EA0022DEF783D17F1C5B6F0C54B0F5F1E Validity Not Before: Aug 12 05:05:04 2025 GMT Not After : Aug 15 07:58:04 2025 GMT Subject: CN=90F772238DB945209A54EE4BBB6BCCEEE8931A5F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:3e:c7:fb:50:8a:e1:fc:19:82:19:a1:92:c5: 25:47:1f:91:80:11:f6:60:29:41:6f:e8:32:ac:6a: ce:44:a8:ff:68:a5:87:6b:32:1c:35:1a:82:1b:5f: fd:04:10:77:fd:e7:f6:27:a1:da:07:1f:30:e6:3c: 4a:ae:1a:30:59:d7:02:7b:d8:15:2f:70:f2:e4:77: e0:a1:f5:29:c8:de:32:ae:d4:ac:aa:f6:a3:2b:43: ff:40:91:47:53:a2:00:e7:a6:97:93:28:d2:5b:0d: 9a:1b:bf:7a:5e:db:39:aa:d2:e9:a1:ec:ee:92:dd: 3e:d7:44:61:f1:fd:55:e7:40:e4:bd:3c:6d:c7:54: a7:e7:05:eb:f5:ac:3e:d4:16:23:64:82:6e:32:2d: 7b:00:b1:f6:03:bb:ed:9c:88:8f:d8:1a:72:6d:b8: 48:89:85:63:5a:8e:36:6f:7c:cb:d5:a8:9e:be:68: 7e:6c:72:8c:a0:e5:c8:43:6f:aa:39:16:c7:19:86: 1c:71:cf:c1:2a:2d:ce:3c:7d:82:5e:46:99:73:00: 7a:6b:2e:8c:d8:8e:1a:cc:98:af:78:e7:b9:93:81: 88:8f:3f:01:f0:46:f0:b5:7a:71:f2:bb:a2:74:ff: 02:ec:fa:2e:d8:5b:bc:bd:df:65:0b:ed:25:c7:fa: aa:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 90:F7:72:23:8D:B9:45:20:9A:54:EE:4B:BB:6B:CC:EE:E8:93:1A:5F X509v3 Authority Key Identifier: keyid:89:58:EB:1E:A0:02:2D:EF:78:3D:17:F1:C5:B6:F0:C5:4B:0F:5F:1E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/4288762c-3fc5-49cc-949a-594b331a13a1/0/8958EB1EA0022DEF783D17F1C5B6F0C54B0F5F1E.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8958EB1EA0022DEF783D17F1C5B6F0C54B0F5F1E.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/4288762c-3fc5-49cc-949a-594b331a13a1/0/8958EB1EA0022DEF783D17F1C5B6F0C54B0F5F1E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a3:b9:c5:0b:38:13:04:38:49:bc:bd:fd:ca:40:cf:70:58:91: dc:9a:5a:24:48:07:3a:df:6a:42:b1:6b:7a:d4:98:af:04:25: 17:d4:c8:e9:b9:5b:f6:f5:c5:96:ca:c7:35:1d:15:89:df:93: 9f:be:56:08:6b:39:ad:a4:63:f9:4f:8a:5f:ea:eb:7d:47:b3: 8f:b1:c8:77:5b:b6:0a:e9:44:9e:03:55:b6:57:1e:35:22:dc: 4d:3d:8a:6c:e2:04:26:40:7e:09:81:3a:39:90:6d:ca:89:95: 00:e9:bf:be:f0:5f:51:a6:69:2e:d8:2c:67:a8:bf:04:c1:cb: 39:c4:ce:b4:c0:c8:e3:3e:96:30:7f:c8:35:01:0a:30:2f:6b: 4f:ee:00:f2:e5:78:e2:d9:f8:63:02:1e:10:be:9e:22:96:21: c0:63:fe:1c:09:c5:8b:dd:f1:83:42:52:b4:a2:10:7a:90:bf: bf:95:a5:eb:87:76:80:9d:b7:4d:23:54:4c:18:f1:f9:f4:71: 4c:c5:92:ea:45:25:a2:ee:a8:2a:ec:3f:1a:21:b4:f8:da:51: a5:ba:ac:53:1d:d0:3f:7c:79:8c:88:e9:fe:fa:08:87:2d:9a: 53:6f:b8:f9:5c:b6:fb:c4:59:a6:3d:18:c3:2f:81:02:73:f8: ed:c1:6d:36 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUNZgNBXoewqydaIjobKnTN7PeUpIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODk1OEVCMUVBMDAyMkRFRjc4M0QxN0YxQzVCNkYwQzU0 QjBGNUYxRTAeFw0yNTA4MTIwNTA1MDRaFw0yNTA4MTUwNzU4MDRaMDMxMTAvBgNV BAMTKDkwRjc3MjIzOERCOTQ1MjA5QTU0RUU0QkJCNkJDQ0VFRTg5MzFBNUYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDnPsf7UIrh/BmCGaGSxSVHH5GA EfZgKUFv6DKsas5EqP9opYdrMhw1GoIbX/0EEHf95/YnodoHHzDmPEquGjBZ1wJ7 2BUvcPLkd+Ch9SnI3jKu1Kyq9qMrQ/9AkUdTogDnppeTKNJbDZobv3pe2zmq0umh 7O6S3T7XRGHx/VXnQOS9PG3HVKfnBev1rD7UFiNkgm4yLXsAsfYDu+2ciI/YGnJt uEiJhWNajjZvfMvVqJ6+aH5scoyg5chDb6o5FscZhhxxz8EqLc48fYJeRplzAHpr LozYjhrMmK9457mTgYiPPwHwRvC1enHyu6J0/wLs+i7YW7y932UL7SXH+qpRAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUkPdyI425RSCaVO5Lu2vM7uiTGl8wHwYDVR0j BBgwFoAUiVjrHqACLe94PRfxxbbwxUsPXx4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 Mjg4NzYyYy0zZmM1LTQ5Y2MtOTQ5YS01OTRiMzMxYTEzYTEvMC84OTU4RUIxRUEw MDIyREVGNzgzRDE3RjFDNUI2RjBDNTRCMEY1RjFFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvODk1OEVCMUVBMDAyMkRFRjc4M0QxN0YxQzVCNkYwQzU0QjBG NUYxRS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNDI4ODc2MmMtM2ZjNS00OWNjLTk0 OWEtNTk0YjMzMWExM2ExLzAvODk1OEVCMUVBMDAyMkRFRjc4M0QxN0YxQzVCNkYw QzU0QjBGNUYxRS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKO5xQs4EwQ4Sby9/cpAz3BYkdyaWiRIBzrf akKxa3rUmK8EJRfUyOm5W/b1xZbKxzUdFYnfk5++VghrOa2kY/lPil/q631Hs4+x yHdbtgrpRJ4DVbZXHjUi3E09imziBCZAfgmBOjmQbcqJlQDpv77wX1GmaS7YLGeo vwTByznEzrTAyOM+ljB/yDUBCjAva0/uAPLleOLZ+GMCHhC+niKWIcBj/hwJxYvd 8YNCUrSiEHqQv7+VpeuHdoCdt00jVEwY8fn0cUzFkupFJaLuqCrsPxohtPjaUaW6 rFMd0D98eYyI6f76CIctmlNvuPlctvvEWaY9GMMvgQJz+O3BbTY= -----END CERTIFICATE-----Generated at Wed Aug 13 05:52:37 2025 by rpki-client