$ rpki-client -vvf repo-rpki.idnic.net/repo/8116fbc9-b31c-4225-a697-4fedbc234db6/0/C0C8E7243E4E8DECD7A8EA1D61FD424108E8D3D5.mft File: C0C8E7243E4E8DECD7A8EA1D61FD424108E8D3D5.mft (raw, json) Hash identifier: i0kDuP6COJ0qxWUnlvsDBOgf3Mh1cnOFmFF1x25HtWs= Subject key identifier: 13:FD:A1:8A:2C:68:B2:E8:CD:8B:0E:69:98:FB:93:DF:63:14:D8:3B Authority key identifier: C0:C8:E7:24:3E:4E:8D:EC:D7:A8:EA:1D:61:FD:42:41:08:E8:D3:D5 Certificate issuer: /CN=C0C8E7243E4E8DECD7A8EA1D61FD424108E8D3D5 Certificate serial: 4F9643FEE9A63AC7D70B869C25BAF938541AA5E2 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C0C8E7243E4E8DECD7A8EA1D61FD424108E8D3D5.cer Subject info access: rsync://repo-rpki.idnic.net/repo/8116fbc9-b31c-4225-a697-4fedbc234db6/0/C0C8E7243E4E8DECD7A8EA1D61FD424108E8D3D5.mft Manifest number: 90 Signing time: Mon 04 Aug 2025 14:01:27 +0000 Manifest this update: Mon 04 Aug 2025 13:56:27 +0000 Manifest next update: Fri 08 Aug 2025 00:53:27 +0000 Files and hashes: 1: C0C8E7243E4E8DECD7A8EA1D61FD424108E8D3D5.crl (hash: EnJW6n+rOWhHKbwxSWtMuxFHyG0DO7dn4HMPH1c5bII=) 2: 3130332e37352e3233372e302f32342d3234203d3e203634333130.roa (hash: zLA6/bRI9VboLYe5I2cJ3lQAESTlC0UxgoZrgcRdKsk=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/8116fbc9-b31c-4225-a697-4fedbc234db6/0/C0C8E7243E4E8DECD7A8EA1D61FD424108E8D3D5.crl rsync://repo-rpki.idnic.net/repo/8116fbc9-b31c-4225-a697-4fedbc234db6/0/C0C8E7243E4E8DECD7A8EA1D61FD424108E8D3D5.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C0C8E7243E4E8DECD7A8EA1D61FD424108E8D3D5.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 08 Aug 2025 00:53:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4f:96:43:fe:e9:a6:3a:c7:d7:0b:86:9c:25:ba:f9:38:54:1a:a5:e2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C0C8E7243E4E8DECD7A8EA1D61FD424108E8D3D5 Validity Not Before: Aug 4 13:56:27 2025 GMT Not After : Aug 8 00:53:27 2025 GMT Subject: CN=13FDA18A2C68B2E8CD8B0E6998FB93DF6314D83B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:92:9d:d5:f6:50:42:2b:95:b6:98:1c:33:a7: 96:87:72:c2:6d:a2:d5:09:33:35:a9:75:e2:2f:b8: 6e:34:7e:8b:2b:e5:61:b2:c9:8c:cd:35:30:ec:b2: 6b:84:6b:c9:73:3f:98:97:cc:88:0f:63:fe:ed:39: 43:e5:3b:85:aa:c1:2a:42:66:e6:08:2f:01:02:aa: 2d:10:ae:ae:eb:f0:c0:3e:77:03:67:cc:3e:a5:8a: c0:96:01:d1:99:09:45:93:3a:ba:d7:09:df:c3:89: 3d:53:02:72:0c:fe:59:12:22:d9:62:c5:f9:c5:57: d6:d2:81:98:4b:b2:61:24:52:0c:d4:26:f5:29:83: ac:29:14:70:42:cb:fe:32:8f:93:2a:dd:db:08:0e: 34:8f:f4:bd:f6:61:62:72:94:95:21:9e:da:e1:33: 90:29:fb:64:5e:d4:07:16:4a:57:8f:e4:81:9c:f7: 30:d1:7e:92:77:ba:35:22:48:49:31:4c:a8:40:10: 2b:92:a6:75:0f:0b:42:da:4d:5d:10:ab:9d:c4:e1: 35:fc:7b:7c:15:f1:a0:2f:18:65:db:95:4b:52:51: 5c:23:7a:c4:a3:11:e6:a9:91:7c:5d:22:d3:8f:aa: 03:b8:31:c1:86:d3:24:78:3d:eb:5d:c2:08:27:cd: e3:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 13:FD:A1:8A:2C:68:B2:E8:CD:8B:0E:69:98:FB:93:DF:63:14:D8:3B X509v3 Authority Key Identifier: keyid:C0:C8:E7:24:3E:4E:8D:EC:D7:A8:EA:1D:61:FD:42:41:08:E8:D3:D5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/8116fbc9-b31c-4225-a697-4fedbc234db6/0/C0C8E7243E4E8DECD7A8EA1D61FD424108E8D3D5.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C0C8E7243E4E8DECD7A8EA1D61FD424108E8D3D5.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/8116fbc9-b31c-4225-a697-4fedbc234db6/0/C0C8E7243E4E8DECD7A8EA1D61FD424108E8D3D5.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0f:f7:35:b8:82:14:ca:94:ec:cf:4a:18:50:a0:72:5b:43:5f: 0c:42:a1:47:0e:92:14:95:71:75:2a:40:8c:23:fa:15:4a:c0: 49:a0:d2:ca:44:62:6a:31:ec:aa:d6:61:45:2a:2f:0f:b8:72: ac:46:8a:8b:bf:ea:a7:c0:f4:14:78:96:77:4c:36:8c:ff:e3: 99:98:81:39:1b:c6:16:7a:68:a5:f2:9b:a5:8c:35:60:08:90: be:4d:45:58:a7:5b:24:e9:06:ba:c0:e6:54:8e:ef:49:c6:7d: 6e:71:9f:24:de:4e:b1:aa:76:df:33:a7:52:36:8f:8e:79:d2: 46:4b:56:cc:f9:d2:56:8d:40:58:28:3f:32:6a:1f:06:54:87: 27:53:71:f2:9f:00:d9:4b:94:55:7d:89:b9:60:6b:e1:1f:de: 71:85:95:a0:f6:25:60:d2:14:16:1a:48:2a:3e:d5:55:cf:3d: c7:78:f2:1c:60:a9:74:35:ab:fe:d2:cf:ad:1c:1d:4d:4c:ef: 72:d1:49:e4:7e:fa:bb:86:40:13:e1:d6:f4:80:9e:63:d7:99: da:4b:49:3d:f2:8a:ad:8f:56:5c:da:f8:5a:6b:58:df:f2:23: c8:fa:38:d9:61:84:6f:28:f1:6e:8a:c3:28:49:b4:e8:27:43: cc:0c:42:bc -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUT5ZD/ummOsfXC4acJbr5OFQapeIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzBDOEU3MjQzRTRFOERFQ0Q3QThFQTFENjFGRDQyNDEw OEU4RDNENTAeFw0yNTA4MDQxMzU2MjdaFw0yNTA4MDgwMDUzMjdaMDMxMTAvBgNV BAMTKDEzRkRBMThBMkM2OEIyRThDRDhCMEU2OTk4RkI5M0RGNjMxNEQ4M0IwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC0kp3V9lBCK5W2mBwzp5aHcsJt otUJMzWpdeIvuG40fosr5WGyyYzNNTDssmuEa8lzP5iXzIgPY/7tOUPlO4WqwSpC ZuYILwECqi0Qrq7r8MA+dwNnzD6lisCWAdGZCUWTOrrXCd/DiT1TAnIM/lkSItli xfnFV9bSgZhLsmEkUgzUJvUpg6wpFHBCy/4yj5Mq3dsIDjSP9L32YWJylJUhntrh M5Ap+2Re1AcWSleP5IGc9zDRfpJ3ujUiSEkxTKhAECuSpnUPC0LaTV0Qq53E4TX8 e3wV8aAvGGXblUtSUVwjesSjEeapkXxdItOPqgO4McGG0yR4PetdwggnzeMBAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUE/2hiixosujNiw5pmPuT32MU2DswHwYDVR0j BBgwFoAUwMjnJD5OjezXqOodYf1CQQjo09UwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 MTE2ZmJjOS1iMzFjLTQyMjUtYTY5Ny00ZmVkYmMyMzRkYjYvMC9DMEM4RTcyNDNF NEU4REVDRDdBOEVBMUQ2MUZENDI0MTA4RThEM0Q1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQzBDOEU3MjQzRTRFOERFQ0Q3QThFQTFENjFGRDQyNDEwOEU4 RDNENS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vODExNmZiYzktYjMxYy00MjI1LWE2 OTctNGZlZGJjMjM0ZGI2LzAvQzBDOEU3MjQzRTRFOERFQ0Q3QThFQTFENjFGRDQy NDEwOEU4RDNENS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAA/3NbiCFMqU7M9KGFCgcltDXwxCoUcOkhSV cXUqQIwj+hVKwEmg0spEYmox7KrWYUUqLw+4cqxGiou/6qfA9BR4lndMNoz/45mY gTkbxhZ6aKXym6WMNWAIkL5NRVinWyTpBrrA5lSO70nGfW5xnyTeTrGqdt8zp1I2 j4550kZLVsz50laNQFgoPzJqHwZUhydTcfKfANlLlFV9iblga+Ef3nGFlaD2JWDS FBYaSCo+1VXPPcd48hxgqXQ1q/7Sz60cHU1M73LRSeR++ruGQBPh1vSAnmPXmdpL ST3yiq2PVlza+FprWN/yI8j6ONlhhG8o8W6KwyhJtOgnQ8wMQrw= -----END CERTIFICATE-----Generated at Wed Aug 6 05:50:45 2025 by rpki-client