$ rpki-client -vvf repo-rpki.idnic.net/repo/8f6bf37c-d8ad-4e03-a06a-4408157cf57e/0/08632F1EBF41728D3E177234FCD8C0B9A988898B.mft File: 08632F1EBF41728D3E177234FCD8C0B9A988898B.mft (raw, json) Hash identifier: 6+wEgH02RsklYBGXbo/BXb3pIhbtgAv+FEV5bp6E7SI= Subject key identifier: CE:25:7A:B0:19:D0:61:A5:FE:69:65:11:0D:E4:25:32:7D:23:EE:10 Authority key identifier: 08:63:2F:1E:BF:41:72:8D:3E:17:72:34:FC:D8:C0:B9:A9:88:89:8B Certificate issuer: /CN=08632F1EBF41728D3E177234FCD8C0B9A988898B Certificate serial: 3251B0AF0AAB997E670C02B95A079E61DA47F721 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/08632F1EBF41728D3E177234FCD8C0B9A988898B.cer Subject info access: rsync://repo-rpki.idnic.net/repo/8f6bf37c-d8ad-4e03-a06a-4408157cf57e/0/08632F1EBF41728D3E177234FCD8C0B9A988898B.mft Manifest number: 016D Signing time: Tue 05 Aug 2025 11:50:45 +0000 Manifest this update: Tue 05 Aug 2025 11:45:45 +0000 Manifest next update: Fri 08 Aug 2025 18:26:45 +0000 Files and hashes: 1: 3130332e3133332e33362e302f32342d3234203d3e20313338313333.roa (hash: nKmVU0aaMSmM7wKFukfzUIiKVfAI46n/zI3k22bxBr8=) 2: 08632F1EBF41728D3E177234FCD8C0B9A988898B.crl (hash: pLRZL9gF3OYvzfGMTfrePADfeceHWDr/0H7WN3sWyr8=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/8f6bf37c-d8ad-4e03-a06a-4408157cf57e/0/08632F1EBF41728D3E177234FCD8C0B9A988898B.crl rsync://repo-rpki.idnic.net/repo/8f6bf37c-d8ad-4e03-a06a-4408157cf57e/0/08632F1EBF41728D3E177234FCD8C0B9A988898B.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/08632F1EBF41728D3E177234FCD8C0B9A988898B.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 08 Aug 2025 18:26:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 32:51:b0:af:0a:ab:99:7e:67:0c:02:b9:5a:07:9e:61:da:47:f7:21 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=08632F1EBF41728D3E177234FCD8C0B9A988898B Validity Not Before: Aug 5 11:45:45 2025 GMT Not After : Aug 8 18:26:45 2025 GMT Subject: CN=CE257AB019D061A5FE6965110DE425327D23EE10 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ec:e8:35:dd:9a:9c:36:a0:99:3b:44:7d:28:05: a0:16:3f:d6:49:ef:e1:e7:db:2e:e7:8e:50:f9:87: 1a:0a:bd:06:67:8a:db:d7:00:4c:ae:6b:21:1a:a5: 31:b9:aa:d2:fa:16:82:93:03:47:6f:a2:ab:7d:80: 80:7b:86:80:7f:c1:ba:96:24:d7:2b:2e:9b:26:b2: 2a:3b:70:22:b6:bd:0e:c9:31:26:6f:5f:aa:dd:3d: 98:a1:e5:1e:01:68:8b:9d:cf:fd:92:22:88:be:45: b2:d0:2b:a2:e5:d8:34:b0:26:bd:5b:81:3f:61:49: f8:31:52:36:5e:5c:c3:86:4c:f2:81:a7:fc:9c:05: 13:88:2f:d4:5e:3d:72:ea:7b:d3:e1:c2:af:d5:db: f8:a2:24:07:d1:56:d0:40:da:8d:97:6d:ff:60:a3: 90:d5:de:ca:da:2e:01:d3:5c:90:90:44:20:f3:f2: 6e:22:43:41:f6:cd:46:cb:3d:72:eb:87:03:34:bf: 2c:e3:68:48:48:94:d3:72:4d:90:e9:23:2c:7b:c1: a9:c0:1c:b2:d3:87:21:2d:f7:4a:f9:08:5f:3f:dc: 60:55:cb:55:3f:04:c6:ac:aa:1d:cc:90:04:ff:5d: bc:10:ec:d7:2a:fd:ea:c3:f9:20:b5:e5:bb:cc:d8: 1a:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CE:25:7A:B0:19:D0:61:A5:FE:69:65:11:0D:E4:25:32:7D:23:EE:10 X509v3 Authority Key Identifier: keyid:08:63:2F:1E:BF:41:72:8D:3E:17:72:34:FC:D8:C0:B9:A9:88:89:8B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/8f6bf37c-d8ad-4e03-a06a-4408157cf57e/0/08632F1EBF41728D3E177234FCD8C0B9A988898B.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/08632F1EBF41728D3E177234FCD8C0B9A988898B.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/8f6bf37c-d8ad-4e03-a06a-4408157cf57e/0/08632F1EBF41728D3E177234FCD8C0B9A988898B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3b:c5:a5:da:0e:47:da:79:2d:c3:76:ee:08:66:bc:ff:31:67: 6c:07:54:98:23:a1:ae:db:a9:cb:5b:39:20:e8:1c:67:7e:d2: 56:41:cb:32:68:a3:4a:d9:05:19:fd:03:5e:90:6d:4c:74:a4: cb:90:0b:f8:e0:42:90:f1:22:11:f9:c4:f9:86:37:19:ee:ec: 0b:52:eb:5f:d2:3e:d4:57:ee:46:a8:6f:28:42:f3:86:3f:11: c4:ea:25:67:3e:b7:25:c1:0c:11:52:59:4f:6e:1f:0e:ea:0f: 4a:20:bd:4f:e4:8b:00:41:a3:d5:4a:29:66:64:7c:9e:1c:a7: 17:48:b1:b7:be:8d:a5:78:90:ef:86:2e:64:70:45:55:28:5e: 08:a3:4b:be:8f:51:f9:ea:d4:40:39:21:8c:e4:1f:61:fa:a1: 02:b0:9b:c3:2e:53:87:91:97:69:95:da:a4:ac:12:83:cb:4d: 1a:fd:f8:ed:b3:03:7f:9a:44:e0:a0:b5:c2:2c:72:82:34:32: 30:e6:88:91:4a:45:9a:25:b4:77:89:dd:09:35:c4:8d:49:c7: 61:56:1a:0b:52:23:d9:f8:3a:41:ba:08:53:d5:d4:64:5e:58: 2e:6d:ad:ba:ba:3f:47:94:fa:f1:90:72:5e:75:53:c3:b9:88: 45:3e:2b:b2 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUMlGwrwqrmX5nDAK5WgeeYdpH9yEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDg2MzJGMUVCRjQxNzI4RDNFMTc3MjM0RkNEOEMwQjlB OTg4ODk4QjAeFw0yNTA4MDUxMTQ1NDVaFw0yNTA4MDgxODI2NDVaMDMxMTAvBgNV BAMTKENFMjU3QUIwMTlEMDYxQTVGRTY5NjUxMTBERTQyNTMyN0QyM0VFMTAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDs6DXdmpw2oJk7RH0oBaAWP9ZJ 7+Hn2y7njlD5hxoKvQZnitvXAEyuayEapTG5qtL6FoKTA0dvoqt9gIB7hoB/wbqW JNcrLpsmsio7cCK2vQ7JMSZvX6rdPZih5R4BaIudz/2SIoi+RbLQK6Ll2DSwJr1b gT9hSfgxUjZeXMOGTPKBp/ycBROIL9RePXLqe9Phwq/V2/iiJAfRVtBA2o2Xbf9g o5DV3sraLgHTXJCQRCDz8m4iQ0H2zUbLPXLrhwM0vyzjaEhIlNNyTZDpIyx7wanA HLLThyEt90r5CF8/3GBVy1U/BMasqh3MkAT/XbwQ7Ncq/erD+SC15bvM2Bp3AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUziV6sBnQYaX+aWURDeQlMn0j7hAwHwYDVR0j BBgwFoAUCGMvHr9Bco0+F3I0/NjAuamIiYswDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 ZjZiZjM3Yy1kOGFkLTRlMDMtYTA2YS00NDA4MTU3Y2Y1N2UvMC8wODYzMkYxRUJG NDE3MjhEM0UxNzcyMzRGQ0Q4QzBCOUE5ODg4OThCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMDg2MzJGMUVCRjQxNzI4RDNFMTc3MjM0RkNEOEMwQjlBOTg4 ODk4Qi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOGY2YmYzN2MtZDhhZC00ZTAzLWEw NmEtNDQwODE1N2NmNTdlLzAvMDg2MzJGMUVCRjQxNzI4RDNFMTc3MjM0RkNEOEMw QjlBOTg4ODk4Qi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADvFpdoOR9p5LcN27ghmvP8xZ2wHVJgjoa7b qctbOSDoHGd+0lZByzJoo0rZBRn9A16QbUx0pMuQC/jgQpDxIhH5xPmGNxnu7AtS 61/SPtRX7kaobyhC84Y/EcTqJWc+tyXBDBFSWU9uHw7qD0ogvU/kiwBBo9VKKWZk fJ4cpxdIsbe+jaV4kO+GLmRwRVUoXgijS76PUfnq1EA5IYzkH2H6oQKwm8MuU4eR l2mV2qSsEoPLTRr9+O2zA3+aROCgtcIscoI0MjDmiJFKRZoltHeJ3Qk1xI1Jx2FW GgtSI9n4OkG6CFPV1GReWC5trbq6P0eU+vGQcl51U8O5iEU+K7I= -----END CERTIFICATE-----Generated at Thu Aug 7 00:25:58 2025 by rpki-client