$ rpki-client -vvf repo-rpki.idnic.net/repo/5252ead3-dc8f-4d86-afcf-a140e5b87532/0/8CFB227DA1EF51DB23364BBA034D0F68A09A5F59.mft File: 8CFB227DA1EF51DB23364BBA034D0F68A09A5F59.mft (raw, json) Hash identifier: fWtWCc3+ZsvyDa5MSd1FpdhYTIEF7TcQlIF4sGc8y8w= Subject key identifier: 9F:E6:8E:83:9C:59:A1:62:BA:19:97:37:96:2A:06:94:3D:CE:78:46 Authority key identifier: 8C:FB:22:7D:A1:EF:51:DB:23:36:4B:BA:03:4D:0F:68:A0:9A:5F:59 Certificate issuer: /CN=8CFB227DA1EF51DB23364BBA034D0F68A09A5F59 Certificate serial: 218D37B9C98F82359DF8AE4A2C3889035AA2AB29 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8CFB227DA1EF51DB23364BBA034D0F68A09A5F59.cer Subject info access: rsync://repo-rpki.idnic.net/repo/5252ead3-dc8f-4d86-afcf-a140e5b87532/0/8CFB227DA1EF51DB23364BBA034D0F68A09A5F59.mft Manifest number: 0216 Signing time: Thu 07 Aug 2025 07:41:39 +0000 Manifest this update: Thu 07 Aug 2025 07:36:39 +0000 Manifest next update: Sun 10 Aug 2025 17:26:39 +0000 Files and hashes: 1: 3130332e3138362e3139342e302f32332d3233203d3e20313439373132.roa (hash: swBTOVyl/nQxFd9eqJx6PzMQ7ExSAWTFjV6g64/KqU0=) 2: 3130332e3138362e3139342e302f32342d3234203d3e20313439373132.roa (hash: uzPIoUslKlL0kCJ3Mr8GlDHsPvFS4WU5l7ZsMhLtDsU=) 3: 3130332e3138362e3139342e302f32332d3234203d3e20313439373132.roa (hash: S9MFaIq/j9TJ63dOJfnzWaZP6j2QyCQRqTU45iGYFSM=) 4: 8CFB227DA1EF51DB23364BBA034D0F68A09A5F59.crl (hash: SkG3vcjB0o3YDtRwvK89I1tU6w2W3G3shY4fX3mOSUI=) 5: 3130332e3138362e3139352e302f32342d3234203d3e203438343635.roa (hash: 9nS/psP6uP/NgK0GsDYJioeVISZGFYj6wNXBWyPXoig=) 6: 3130332e3138362e3139342e302f32342d3234203d3e203438343635.roa (hash: nuw56AWJFQx7bF2mLso7Fp7ypapHW7bx18alMUZHm9U=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/5252ead3-dc8f-4d86-afcf-a140e5b87532/0/8CFB227DA1EF51DB23364BBA034D0F68A09A5F59.crl rsync://repo-rpki.idnic.net/repo/5252ead3-dc8f-4d86-afcf-a140e5b87532/0/8CFB227DA1EF51DB23364BBA034D0F68A09A5F59.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8CFB227DA1EF51DB23364BBA034D0F68A09A5F59.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 10 Aug 2025 17:26:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 21:8d:37:b9:c9:8f:82:35:9d:f8:ae:4a:2c:38:89:03:5a:a2:ab:29 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8CFB227DA1EF51DB23364BBA034D0F68A09A5F59 Validity Not Before: Aug 7 07:36:39 2025 GMT Not After : Aug 10 17:26:39 2025 GMT Subject: CN=9FE68E839C59A162BA199737962A06943DCE7846 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:de:07:90:cd:7a:7b:c6:51:0b:43:a7:ba:6a: 16:58:57:ae:96:45:7b:ff:35:85:45:6c:eb:16:10: 91:32:8b:b8:8d:7d:fe:6e:7e:3b:e9:4a:6f:2d:54: a0:49:5b:a4:94:6f:7d:9a:0e:4d:6c:3b:09:42:dd: fc:41:c6:f2:0b:2a:42:c3:7d:f1:f4:4b:52:f8:a9: 55:ec:96:cf:d7:e8:3b:65:22:b1:d6:cd:c6:2e:6c: f8:2f:71:86:08:b2:cd:a9:31:5e:4f:7d:0c:d3:75: c4:6b:0c:60:af:90:c9:08:4c:d2:fc:d6:d6:a7:f5: 5c:5c:30:f1:43:11:3e:26:78:cc:02:4b:cb:76:81: e7:c8:1c:f1:22:2c:d3:ef:a6:b0:c0:90:97:ac:75: b8:08:86:39:99:3b:03:fd:ab:3e:64:ea:84:11:76: a4:fd:58:8c:9c:c2:3f:13:d6:a1:3c:e4:f4:ed:a1: ca:08:c9:73:24:74:68:90:20:1d:7b:6f:9d:02:fe: ac:9a:7e:01:e4:51:83:de:62:3b:d4:9e:1b:f0:88: 45:fb:0b:b8:c1:f3:18:8c:81:10:b8:0f:80:15:78: aa:d5:7f:f4:45:0f:c6:6c:e2:0a:36:21:a0:7a:2a: 09:50:28:9b:b3:d4:b4:60:e1:f8:28:b3:23:5a:8d: bc:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9F:E6:8E:83:9C:59:A1:62:BA:19:97:37:96:2A:06:94:3D:CE:78:46 X509v3 Authority Key Identifier: keyid:8C:FB:22:7D:A1:EF:51:DB:23:36:4B:BA:03:4D:0F:68:A0:9A:5F:59 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/5252ead3-dc8f-4d86-afcf-a140e5b87532/0/8CFB227DA1EF51DB23364BBA034D0F68A09A5F59.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8CFB227DA1EF51DB23364BBA034D0F68A09A5F59.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/5252ead3-dc8f-4d86-afcf-a140e5b87532/0/8CFB227DA1EF51DB23364BBA034D0F68A09A5F59.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7d:e5:5b:48:75:fe:09:9f:38:12:5a:6e:ba:69:fd:f1:2e:d1: 1d:26:18:4e:37:3a:ee:f7:c9:37:6f:8b:81:19:eb:98:08:a5: 03:0a:ac:1a:ba:d4:81:69:79:56:f4:39:43:d2:af:59:fa:05: e6:92:1a:92:3d:47:46:51:b5:5c:4e:ae:fe:64:59:58:27:c6: 02:0b:ca:f8:6b:49:d9:92:d5:a1:11:b3:dd:47:4f:a7:82:8a: 65:ab:dd:06:2d:62:fb:aa:49:74:4e:48:67:65:7f:08:99:87: ac:98:8a:78:f2:ea:a7:bb:3b:66:72:04:56:e2:6b:61:45:2d: 78:97:42:84:75:b3:cd:04:c6:ca:82:23:f7:96:65:b8:53:15: a5:cd:87:d1:d7:9b:07:fd:d8:e6:b1:4a:82:4a:19:42:1d:60: 07:0e:ff:a6:66:0d:09:d8:e4:2c:9a:aa:92:99:d0:c6:08:53: cf:e1:00:37:88:0a:c5:6a:ce:31:5d:75:cc:38:c2:92:b9:cf: f2:1c:29:86:78:5d:6f:31:b7:6e:ce:e5:db:55:38:5d:4d:64: 98:61:bd:74:3a:e9:10:7e:b7:42:e3:b8:ef:3f:ca:7f:78:22: 5e:1f:44:df:d9:a1:90:ae:7d:05:93:48:f6:72:80:83:6c:95: f2:a8:b6:59 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUIY03ucmPgjWd+K5KLDiJA1qiqykwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOENGQjIyN0RBMUVGNTFEQjIzMzY0QkJBMDM0RDBGNjhB MDlBNUY1OTAeFw0yNTA4MDcwNzM2MzlaFw0yNTA4MTAxNzI2MzlaMDMxMTAvBgNV BAMTKDlGRTY4RTgzOUM1OUExNjJCQTE5OTczNzk2MkEwNjk0M0RDRTc4NDYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDa3geQzXp7xlELQ6e6ahZYV66W RXv/NYVFbOsWEJEyi7iNff5ufjvpSm8tVKBJW6SUb32aDk1sOwlC3fxBxvILKkLD ffH0S1L4qVXsls/X6DtlIrHWzcYubPgvcYYIss2pMV5PfQzTdcRrDGCvkMkITNL8 1tan9VxcMPFDET4meMwCS8t2gefIHPEiLNPvprDAkJesdbgIhjmZOwP9qz5k6oQR dqT9WIycwj8T1qE85PTtocoIyXMkdGiQIB17b50C/qyafgHkUYPeYjvUnhvwiEX7 C7jB8xiMgRC4D4AVeKrVf/RFD8Zs4go2IaB6KglQKJuz1LRg4fgosyNajbyVAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUn+aOg5xZoWK6GZc3lioGlD3OeEYwHwYDVR0j BBgwFoAUjPsifaHvUdsjNku6A00PaKCaX1kwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 MjUyZWFkMy1kYzhmLTRkODYtYWZjZi1hMTQwZTViODc1MzIvMC84Q0ZCMjI3REEx RUY1MURCMjMzNjRCQkEwMzREMEY2OEEwOUE1RjU5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOENGQjIyN0RBMUVGNTFEQjIzMzY0QkJBMDM0RDBGNjhBMDlB NUY1OS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNTI1MmVhZDMtZGM4Zi00ZDg2LWFm Y2YtYTE0MGU1Yjg3NTMyLzAvOENGQjIyN0RBMUVGNTFEQjIzMzY0QkJBMDM0RDBG NjhBMDlBNUY1OS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAH3lW0h1/gmfOBJabrpp/fEu0R0mGE43Ou73 yTdvi4EZ65gIpQMKrBq61IFpeVb0OUPSr1n6BeaSGpI9R0ZRtVxOrv5kWVgnxgIL yvhrSdmS1aERs91HT6eCimWr3QYtYvuqSXROSGdlfwiZh6yYinjy6qe7O2ZyBFbi a2FFLXiXQoR1s80ExsqCI/eWZbhTFaXNh9HXmwf92OaxSoJKGUIdYAcO/6ZmDQnY 5CyaqpKZ0MYIU8/hADeICsVqzjFddcw4wpK5z/IcKYZ4XW8xt27O5dtVOF1NZJhh vXQ66RB+t0LjuO8/yn94Il4fRN/ZoZCufQWTSPZygINslfKotlk= -----END CERTIFICATE-----Generated at Thu Aug 7 23:57:18 2025 by rpki-client