$ rpki-client -vvf repo-rpki.idnic.net/repo/927a6f34-1b6e-4e92-b2d2-0b9301a666a5/0/8DEDABAD21AD1A6BEF27E91FCEE30465563DFE72.mft File: 8DEDABAD21AD1A6BEF27E91FCEE30465563DFE72.mft (raw, json) Hash identifier: qsmbdY4FTIEo5fMTawuHkR26O2c0HFXHd9FI9TC0b+8= Subject key identifier: 8C:79:44:68:11:F3:93:60:DF:D6:34:21:F3:ED:5B:39:F7:38:64:92 Authority key identifier: 8D:ED:AB:AD:21:AD:1A:6B:EF:27:E9:1F:CE:E3:04:65:56:3D:FE:72 Certificate issuer: /CN=8DEDABAD21AD1A6BEF27E91FCEE30465563DFE72 Certificate serial: 33726B0E59F5A4DCECB629372A1A50B0414EC9E7 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8DEDABAD21AD1A6BEF27E91FCEE30465563DFE72.cer Subject info access: rsync://repo-rpki.idnic.net/repo/927a6f34-1b6e-4e92-b2d2-0b9301a666a5/0/8DEDABAD21AD1A6BEF27E91FCEE30465563DFE72.mft Manifest number: 04F5 Signing time: Tue 05 Aug 2025 00:52:06 +0000 Manifest this update: Tue 05 Aug 2025 00:47:06 +0000 Manifest next update: Fri 08 Aug 2025 04:18:06 +0000 Files and hashes: 1: 8DEDABAD21AD1A6BEF27E91FCEE30465563DFE72.crl (hash: qBlGXIqcy6U0GD9R8HjmX6+HSqkTrrUNPRGfAwEnMbc=) 2: 323430323a653330303a3a2f33322d3438203d3e20313331373036.roa (hash: EV88jOIELhWBAVSmJqvptwA4m5UyL3dS/vav1cA94d8=) 3: 3130332e3234372e31322e302f32322d3234203d3e20313331373036.roa (hash: mWjb/DW+b3X3xyLO8KMUDwzQ73HydHkJibyBar99dKU=) 4: 3132312e3130312e3132382e302f32312d3234203d3e20313331373036.roa (hash: LxNIC9GUMk4NDV//CAiwhidJ9aXKaAFBBW+ysgKoUy0=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/927a6f34-1b6e-4e92-b2d2-0b9301a666a5/0/8DEDABAD21AD1A6BEF27E91FCEE30465563DFE72.crl rsync://repo-rpki.idnic.net/repo/927a6f34-1b6e-4e92-b2d2-0b9301a666a5/0/8DEDABAD21AD1A6BEF27E91FCEE30465563DFE72.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8DEDABAD21AD1A6BEF27E91FCEE30465563DFE72.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 08 Aug 2025 04:18:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 33:72:6b:0e:59:f5:a4:dc:ec:b6:29:37:2a:1a:50:b0:41:4e:c9:e7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8DEDABAD21AD1A6BEF27E91FCEE30465563DFE72 Validity Not Before: Aug 5 00:47:06 2025 GMT Not After : Aug 8 04:18:06 2025 GMT Subject: CN=8C79446811F39360DFD63421F3ED5B39F7386492 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f5:dc:c7:da:48:11:7a:a7:15:9e:fd:db:71:1f: e1:93:69:19:3c:c3:07:9a:53:ef:ee:c1:b7:5a:7e: b9:56:ff:22:b6:10:19:96:4f:04:87:59:52:a8:99: ff:2c:66:fa:b1:f7:5a:45:40:c7:48:30:b6:86:7e: 56:86:cd:b7:bf:ed:04:65:58:f7:b6:5c:a3:b1:dc: 02:8f:a7:8b:63:3f:32:10:b2:d2:f5:d3:ca:7e:75: 5d:0e:e6:ef:61:86:3a:63:8c:9c:1e:c2:f3:11:cf: b9:ce:b1:84:4c:ba:21:eb:1d:e5:5d:78:01:a5:d4: 05:52:39:b0:2b:28:e6:5a:3a:6a:ba:db:fd:84:ce: e8:d2:dd:93:f8:e3:20:2c:12:ad:8b:2b:82:41:e0: b2:94:51:d6:29:fe:f7:9c:39:a3:bd:a6:6d:96:9f: 98:63:15:fa:e9:56:7d:66:6e:4f:b6:04:27:8b:86: 9a:33:35:d8:61:46:86:1f:80:2f:2a:2d:ef:0e:fa: b7:75:a1:17:db:a3:a1:db:4c:70:ae:86:89:70:89: 01:dc:b3:ef:d3:aa:e5:ca:38:e9:2e:43:c3:ee:e2: cc:09:40:c1:b8:57:84:0b:9f:ad:75:0a:fb:76:07: c3:0b:99:12:30:58:4d:b1:af:b1:d8:73:d1:9e:d4: 24:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8C:79:44:68:11:F3:93:60:DF:D6:34:21:F3:ED:5B:39:F7:38:64:92 X509v3 Authority Key Identifier: keyid:8D:ED:AB:AD:21:AD:1A:6B:EF:27:E9:1F:CE:E3:04:65:56:3D:FE:72 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/927a6f34-1b6e-4e92-b2d2-0b9301a666a5/0/8DEDABAD21AD1A6BEF27E91FCEE30465563DFE72.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8DEDABAD21AD1A6BEF27E91FCEE30465563DFE72.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/927a6f34-1b6e-4e92-b2d2-0b9301a666a5/0/8DEDABAD21AD1A6BEF27E91FCEE30465563DFE72.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 65:d5:1f:e9:07:22:87:8f:a9:76:f0:6a:31:cb:d9:0a:16:8f: d0:f2:84:62:80:ed:cd:37:e7:fb:d5:48:ed:ac:fd:42:d8:b2: b3:09:55:e8:e5:3c:d0:b2:7f:be:a6:7e:22:11:a8:b2:60:89: 82:a6:18:95:fd:b2:5d:e9:d8:62:b8:be:fb:c6:22:1a:ae:a8: f0:7f:6d:b6:7a:7d:cd:57:8c:95:74:9a:92:55:98:57:a4:fb: e0:4d:a1:2d:90:1c:5c:8f:8a:61:c1:f0:fe:91:ff:fa:3d:d2: 3f:d3:dd:5d:16:b5:03:7c:c1:f0:61:83:4e:1c:49:b4:71:58: e8:86:99:dc:27:b3:f9:c3:5b:19:dd:e8:3d:8b:0a:ab:32:e8: ed:f7:f5:44:5e:79:0e:bf:7e:a6:f4:48:7e:a9:97:5f:90:b6: ca:50:98:73:22:7d:09:4a:01:79:15:df:ba:85:3c:a1:c1:cb: ad:28:6b:44:d4:c9:d1:43:53:a8:ec:2a:51:50:99:96:00:d4: 71:17:f5:83:5b:90:5d:43:ba:99:9f:d3:0d:e5:b4:23:3c:3a: 19:ba:a0:54:e7:5c:d2:89:35:3d:45:68:1a:1b:a3:c8:f7:7f: 1d:23:fa:40:e6:e3:86:72:08:96:03:e7:11:6f:a0:80:4a:e0: 2f:3e:6a:5b -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUM3JrDln1pNzstik3KhpQsEFOyecwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOERFREFCQUQyMUFEMUE2QkVGMjdFOTFGQ0VFMzA0NjU1 NjNERkU3MjAeFw0yNTA4MDUwMDQ3MDZaFw0yNTA4MDgwNDE4MDZaMDMxMTAvBgNV BAMTKDhDNzk0NDY4MTFGMzkzNjBERkQ2MzQyMUYzRUQ1QjM5RjczODY0OTIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD13MfaSBF6pxWe/dtxH+GTaRk8 wweaU+/uwbdafrlW/yK2EBmWTwSHWVKomf8sZvqx91pFQMdIMLaGflaGzbe/7QRl WPe2XKOx3AKPp4tjPzIQstL108p+dV0O5u9hhjpjjJwewvMRz7nOsYRMuiHrHeVd eAGl1AVSObArKOZaOmq62/2EzujS3ZP44yAsEq2LK4JB4LKUUdYp/vecOaO9pm2W n5hjFfrpVn1mbk+2BCeLhpozNdhhRoYfgC8qLe8O+rd1oRfbo6HbTHCuholwiQHc s+/TquXKOOkuQ8Pu4swJQMG4V4QLn611Cvt2B8MLmRIwWE2xr7HYc9Ge1CQZAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUjHlEaBHzk2Df1jQh8+1bOfc4ZJIwHwYDVR0j BBgwFoAUje2rrSGtGmvvJ+kfzuMEZVY9/nIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 MjdhNmYzNC0xYjZlLTRlOTItYjJkMi0wYjkzMDFhNjY2YTUvMC84REVEQUJBRDIx QUQxQTZCRUYyN0U5MUZDRUUzMDQ2NTU2M0RGRTcyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOERFREFCQUQyMUFEMUE2QkVGMjdFOTFGQ0VFMzA0NjU1NjNE RkU3Mi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOTI3YTZmMzQtMWI2ZS00ZTkyLWIy ZDItMGI5MzAxYTY2NmE1LzAvOERFREFCQUQyMUFEMUE2QkVGMjdFOTFGQ0VFMzA0 NjU1NjNERkU3Mi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGXVH+kHIoePqXbwajHL2QoWj9DyhGKA7c03 5/vVSO2s/ULYsrMJVejlPNCyf76mfiIRqLJgiYKmGJX9sl3p2GK4vvvGIhquqPB/ bbZ6fc1XjJV0mpJVmFek++BNoS2QHFyPimHB8P6R//o90j/T3V0WtQN8wfBhg04c SbRxWOiGmdwns/nDWxnd6D2LCqsy6O339UReeQ6/fqb0SH6pl1+QtspQmHMifQlK AXkV37qFPKHBy60oa0TUydFDU6jsKlFQmZYA1HEX9YNbkF1Dupmf0w3ltCM8Ohm6 oFTnXNKJNT1FaBobo8j3fx0j+kDm44ZyCJYD5xFvoIBK4C8+als= -----END CERTIFICATE-----Generated at Thu Aug 7 00:26:05 2025 by rpki-client