$ rpki-client -vvf repo-rpki.idnic.net/repo/8a66f350-e642-402f-8ac3-6aef7e11aac3/0/9852ABB8508DE551F1723BC9AC5EC39B35056AE2.mft File: 9852ABB8508DE551F1723BC9AC5EC39B35056AE2.mft (raw, json) Hash identifier: o/QJbvr6LY65rEdp17pmTT/HPY0ZHGIkqVsgFQASoi4= Subject key identifier: C6:6A:DE:A4:C2:96:51:DD:D0:EE:F0:87:55:2E:AD:09:18:88:98:F1 Authority key identifier: 98:52:AB:B8:50:8D:E5:51:F1:72:3B:C9:AC:5E:C3:9B:35:05:6A:E2 Certificate issuer: /CN=9852ABB8508DE551F1723BC9AC5EC39B35056AE2 Certificate serial: 69D948E925BC985F782BF81B5B5294D708877B33 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9852ABB8508DE551F1723BC9AC5EC39B35056AE2.cer Subject info access: rsync://repo-rpki.idnic.net/repo/8a66f350-e642-402f-8ac3-6aef7e11aac3/0/9852ABB8508DE551F1723BC9AC5EC39B35056AE2.mft Manifest number: 04FA Signing time: Fri 08 Aug 2025 00:21:58 +0000 Manifest this update: Fri 08 Aug 2025 00:16:58 +0000 Manifest next update: Mon 11 Aug 2025 10:47:58 +0000 Files and hashes: 1: 323030313a6466343a366430303a3a2f34382d3438203d3e20313337333734.roa (hash: 415EQue+5BmAk6tXc9Eh3zzXOH8qdWNQfAsbBNLYlC0=) 2: 9852ABB8508DE551F1723BC9AC5EC39B35056AE2.crl (hash: 56nOIQESta8A7HlxLXMJndRvFXKqIbfVrSYVfAEJPwI=) 3: 3130332e3131302e3138342e302f32332d3234203d3e20313337333734.roa (hash: t6DqUPB7zlmhbQqkH/Czn9ueyAzHtFeCOGR6aaj9LSw=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/8a66f350-e642-402f-8ac3-6aef7e11aac3/0/9852ABB8508DE551F1723BC9AC5EC39B35056AE2.crl rsync://repo-rpki.idnic.net/repo/8a66f350-e642-402f-8ac3-6aef7e11aac3/0/9852ABB8508DE551F1723BC9AC5EC39B35056AE2.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9852ABB8508DE551F1723BC9AC5EC39B35056AE2.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 11 Aug 2025 10:47:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 69:d9:48:e9:25:bc:98:5f:78:2b:f8:1b:5b:52:94:d7:08:87:7b:33 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9852ABB8508DE551F1723BC9AC5EC39B35056AE2 Validity Not Before: Aug 8 00:16:58 2025 GMT Not After : Aug 11 10:47:58 2025 GMT Subject: CN=C66ADEA4C29651DDD0EEF087552EAD09188898F1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:d3:9c:6f:1a:0d:62:bb:57:f2:ee:51:fd:b6: 0b:f8:ca:a7:e7:4a:86:36:b7:4a:57:00:15:df:9d: 91:2a:46:7b:1a:10:1e:cd:7f:fd:e6:38:96:bd:0a: fc:84:63:d6:cd:81:38:8a:7c:ce:93:dc:f0:29:11: aa:16:c6:38:74:50:d7:19:1b:77:d3:c5:17:8e:cf: 36:93:3d:f3:2b:5a:6f:ec:f1:17:c7:5f:b7:6c:87: e1:9e:f6:54:cd:43:c7:a5:02:d2:e3:e3:5a:56:10: d0:41:cd:d3:b5:d1:ce:42:eb:8b:bf:e0:5a:74:82: 67:a5:7f:ce:e3:b2:79:52:31:2d:0d:ec:6b:34:dd: 75:be:a6:87:6d:97:9f:23:cc:82:ef:1f:6d:47:df: 44:12:2e:fc:d4:80:dd:7b:be:de:72:a6:29:51:81: 96:99:d5:b8:b4:53:69:b8:18:87:e0:be:7f:55:14: 13:56:de:cf:29:84:9c:12:0f:35:e3:cd:b4:28:e2: c3:e0:ea:b0:0c:68:52:29:97:1a:e1:a4:d1:7c:6f: b4:27:7e:cd:e4:4e:3e:3a:c2:91:fc:21:9f:ac:95: 93:48:5e:6a:ca:4e:ec:f4:68:f1:d1:53:e7:eb:1f: 7d:af:d6:e2:1e:27:98:eb:5d:62:98:ed:ab:b5:a5: 6d:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C6:6A:DE:A4:C2:96:51:DD:D0:EE:F0:87:55:2E:AD:09:18:88:98:F1 X509v3 Authority Key Identifier: keyid:98:52:AB:B8:50:8D:E5:51:F1:72:3B:C9:AC:5E:C3:9B:35:05:6A:E2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/8a66f350-e642-402f-8ac3-6aef7e11aac3/0/9852ABB8508DE551F1723BC9AC5EC39B35056AE2.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9852ABB8508DE551F1723BC9AC5EC39B35056AE2.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/8a66f350-e642-402f-8ac3-6aef7e11aac3/0/9852ABB8508DE551F1723BC9AC5EC39B35056AE2.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2a:3d:dc:c4:49:94:1c:f5:5a:5b:04:1b:9a:fd:6a:a4:9e:c7: 04:c7:28:43:c7:9f:dc:81:31:cf:04:c7:f8:e3:9e:31:48:12: 96:3c:31:c2:f7:59:fc:60:b7:70:e9:57:76:a7:8a:6d:0c:4b: 8c:83:f5:be:6c:d2:51:0b:4f:62:b1:5d:98:8e:7a:45:ea:a9: 87:53:4f:08:b6:12:d2:d1:17:27:53:04:bf:4d:c6:6c:03:9c: ae:76:79:c1:8a:12:a4:1e:96:7d:c7:40:62:7f:ab:61:c1:1b: 82:56:d7:1a:db:28:23:a3:50:67:be:0b:86:1e:c3:d7:88:e9: 12:38:63:c9:2f:cb:15:cd:d3:32:bf:4e:d1:40:23:09:e2:08: 0c:4a:0b:e6:b3:31:14:de:56:2c:75:39:66:b8:40:d3:6c:41: ee:61:0d:21:39:74:af:e0:38:f2:c7:f7:b0:f1:25:93:ff:f6: 23:8a:9c:38:15:af:ee:de:2a:61:48:83:13:d5:35:f2:78:af: 4d:89:78:be:5b:48:98:c5:ac:90:b3:ad:b3:06:08:30:6c:a1: 2c:5f:9e:65:f3:83:1c:c0:5f:c0:6f:a2:4f:fa:fc:4b:34:1f: 65:7f:60:77:00:2c:a1:8e:49:e9:40:57:61:1f:f7:77:3a:da: 52:35:5b:ef -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUadlI6SW8mF94K/gbW1KU1wiHezMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTg1MkFCQjg1MDhERTU1MUYxNzIzQkM5QUM1RUMzOUIz NTA1NkFFMjAeFw0yNTA4MDgwMDE2NThaFw0yNTA4MTExMDQ3NThaMDMxMTAvBgNV BAMTKEM2NkFERUE0QzI5NjUxREREMEVFRjA4NzU1MkVBRDA5MTg4ODk4RjEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC305xvGg1iu1fy7lH9tgv4yqfn SoY2t0pXABXfnZEqRnsaEB7Nf/3mOJa9CvyEY9bNgTiKfM6T3PApEaoWxjh0UNcZ G3fTxReOzzaTPfMrWm/s8RfHX7dsh+Ge9lTNQ8elAtLj41pWENBBzdO10c5C64u/ 4Fp0gmelf87jsnlSMS0N7Gs03XW+podtl58jzILvH21H30QSLvzUgN17vt5ypilR gZaZ1bi0U2m4GIfgvn9VFBNW3s8phJwSDzXjzbQo4sPg6rAMaFIplxrhpNF8b7Qn fs3kTj46wpH8IZ+slZNIXmrKTuz0aPHRU+frH32v1uIeJ5jrXWKY7au1pW3TAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUxmrepMKWUd3Q7vCHVS6tCRiImPEwHwYDVR0j BBgwFoAUmFKruFCN5VHxcjvJrF7DmzUFauIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 YTY2ZjM1MC1lNjQyLTQwMmYtOGFjMy02YWVmN2UxMWFhYzMvMC85ODUyQUJCODUw OERFNTUxRjE3MjNCQzlBQzVFQzM5QjM1MDU2QUUyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOTg1MkFCQjg1MDhERTU1MUYxNzIzQkM5QUM1RUMzOUIzNTA1 NkFFMi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOGE2NmYzNTAtZTY0Mi00MDJmLThh YzMtNmFlZjdlMTFhYWMzLzAvOTg1MkFCQjg1MDhERTU1MUYxNzIzQkM5QUM1RUMz OUIzNTA1NkFFMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACo93MRJlBz1WlsEG5r9aqSexwTHKEPHn9yB Mc8Ex/jjnjFIEpY8McL3Wfxgt3DpV3anim0MS4yD9b5s0lELT2KxXZiOekXqqYdT Twi2EtLRFydTBL9NxmwDnK52ecGKEqQeln3HQGJ/q2HBG4JW1xrbKCOjUGe+C4Ye w9eI6RI4Y8kvyxXN0zK/TtFAIwniCAxKC+azMRTeVix1OWa4QNNsQe5hDSE5dK/g OPLH97DxJZP/9iOKnDgVr+7eKmFIgxPVNfJ4r02JeL5bSJjFrJCzrbMGCDBsoSxf nmXzgxzAX8Bvok/6/Es0H2V/YHcALKGOSelAV2Ef93c62lI1W+8= -----END CERTIFICATE-----Generated at Sat Aug 9 05:53:03 2025 by rpki-client