$ rpki-client -vvf repo-rpki.idnic.net/repo/d44dfb5a-6e24-4a4d-8969-eb3cbe34e47e/0/8F52E72816B856335390C4F4AFBAF207C21522F6.mft File: 8F52E72816B856335390C4F4AFBAF207C21522F6.mft (raw, json) Hash identifier: JuINpo6Rj2DkgoL4IywasIxhtVi4s5F7akOpLqJDv2E= Subject key identifier: 15:B1:41:58:80:B4:F7:0E:BD:89:D6:3D:1D:14:91:AB:C1:27:C8:20 Authority key identifier: 8F:52:E7:28:16:B8:56:33:53:90:C4:F4:AF:BA:F2:07:C2:15:22:F6 Certificate issuer: /CN=8F52E72816B856335390C4F4AFBAF207C21522F6 Certificate serial: 227523E8541DB1F5F2E78B63B392CC805E2BA2FC Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8F52E72816B856335390C4F4AFBAF207C21522F6.cer Subject info access: rsync://repo-rpki.idnic.net/repo/d44dfb5a-6e24-4a4d-8969-eb3cbe34e47e/0/8F52E72816B856335390C4F4AFBAF207C21522F6.mft Manifest number: 01F6 Signing time: Wed 06 Aug 2025 04:02:18 +0000 Manifest this update: Wed 06 Aug 2025 03:57:18 +0000 Manifest next update: Sat 09 Aug 2025 10:23:18 +0000 Files and hashes: 1: 8F52E72816B856335390C4F4AFBAF207C21522F6.crl (hash: TDo8h8nshPIEgJCvzDckCfbOQcERe4pzKiK9sXd6i/k=) 2: 3130332e3135382e3132362e302f32332d3234203d3e203338333230.roa (hash: sAEVe363BvIs2dOx1hxbCSZZoE73/9sHIDXoFlichKA=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/d44dfb5a-6e24-4a4d-8969-eb3cbe34e47e/0/8F52E72816B856335390C4F4AFBAF207C21522F6.crl rsync://repo-rpki.idnic.net/repo/d44dfb5a-6e24-4a4d-8969-eb3cbe34e47e/0/8F52E72816B856335390C4F4AFBAF207C21522F6.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8F52E72816B856335390C4F4AFBAF207C21522F6.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 09 Aug 2025 10:23:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 22:75:23:e8:54:1d:b1:f5:f2:e7:8b:63:b3:92:cc:80:5e:2b:a2:fc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8F52E72816B856335390C4F4AFBAF207C21522F6 Validity Not Before: Aug 6 03:57:18 2025 GMT Not After : Aug 9 10:23:18 2025 GMT Subject: CN=15B1415880B4F70EBD89D63D1D1491ABC127C820 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:ce:ba:20:7b:31:17:7f:6f:f4:73:61:90:35: 14:5c:d5:f6:f7:d4:6d:85:75:63:22:dc:d8:d1:3b: 55:a2:ba:b8:e8:c5:89:3e:a5:b9:5b:7b:b1:1d:56: 25:e2:f2:d7:85:6c:e0:84:1c:6d:01:19:90:ea:e8: 9e:52:72:af:d5:85:94:a0:a2:b8:fc:d6:3c:8b:74: 32:72:14:d5:4e:f1:dd:8a:58:71:56:81:3f:1c:e5: ef:cc:8f:11:69:f6:39:d9:ea:bd:95:de:35:28:f2: ce:2f:28:58:f4:e9:c6:46:7c:e3:d7:5b:0f:04:ff: 52:db:04:37:0a:37:7e:59:cf:76:15:98:03:93:ce: 71:eb:a2:36:48:36:c0:1f:79:5a:8d:45:a9:dd:db: 4e:7d:76:a2:61:36:44:5a:ca:22:55:c5:e2:63:81: 83:f9:ae:59:63:9c:31:33:a3:68:f8:94:11:a1:ce: c9:4f:c7:a7:2a:7d:48:ca:a8:b0:22:5e:07:79:e3: 68:1e:98:09:83:29:9a:21:7f:5c:ea:16:be:77:8e: a4:e0:dc:b8:10:3a:1b:78:e8:8e:f7:38:74:e9:66: b8:7c:e4:a1:3c:32:e7:0d:03:bf:69:06:9f:8a:d5: 49:b8:ab:66:34:5f:7f:e7:27:4f:4e:11:b3:9a:51: 64:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 15:B1:41:58:80:B4:F7:0E:BD:89:D6:3D:1D:14:91:AB:C1:27:C8:20 X509v3 Authority Key Identifier: keyid:8F:52:E7:28:16:B8:56:33:53:90:C4:F4:AF:BA:F2:07:C2:15:22:F6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/d44dfb5a-6e24-4a4d-8969-eb3cbe34e47e/0/8F52E72816B856335390C4F4AFBAF207C21522F6.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8F52E72816B856335390C4F4AFBAF207C21522F6.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d44dfb5a-6e24-4a4d-8969-eb3cbe34e47e/0/8F52E72816B856335390C4F4AFBAF207C21522F6.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0d:ab:b8:c4:b6:5e:f2:43:d5:18:29:87:b1:02:b4:62:d7:c8: 20:0c:41:b0:00:8d:af:d5:b6:a0:29:20:a5:c3:27:7c:30:71: 63:30:c7:93:14:17:8e:1a:4d:95:a8:7d:e7:4f:72:a8:ed:9b: 2b:90:fa:5e:d5:5a:a0:a3:73:52:38:31:80:c6:09:46:50:1f: a6:7a:82:57:8e:54:2b:6c:47:24:77:6e:89:6e:33:97:3b:a5: 41:af:da:77:20:dd:38:61:52:82:82:20:5f:59:72:f7:e7:ba: 0e:47:05:20:0c:a3:9c:3c:84:86:b6:3f:f4:a9:80:18:81:d2: ea:75:f1:75:3f:37:ad:32:2c:f3:38:55:b4:16:43:82:6a:9a: 7f:70:a8:69:a4:ae:6c:ef:df:f5:64:d6:37:95:5d:4a:e3:92: 3a:3f:3c:5a:9d:ec:ba:e8:9d:8e:9b:5c:61:f8:eb:de:dd:83: 5d:eb:52:5a:dc:12:5a:28:dd:98:a4:3d:8a:5c:a7:b1:b4:2f: ca:14:f1:95:be:5e:01:e8:fa:f6:ad:28:ce:19:6b:c7:08:7c: c1:aa:95:96:a1:05:eb:38:c5:48:89:e5:43:18:86:41:c0:b4: bd:ab:97:72:71:f1:ab:85:23:10:cc:34:4f:7c:6e:bd:97:c7: e9:0f:84:ce -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUInUj6FQdsfXy54tjs5LMgF4rovwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEY1MkU3MjgxNkI4NTYzMzUzOTBDNEY0QUZCQUYyMDdD MjE1MjJGNjAeFw0yNTA4MDYwMzU3MThaFw0yNTA4MDkxMDIzMThaMDMxMTAvBgNV BAMTKDE1QjE0MTU4ODBCNEY3MEVCRDg5RDYzRDFEMTQ5MUFCQzEyN0M4MjAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDJzrogezEXf2/0c2GQNRRc1fb3 1G2FdWMi3NjRO1WiurjoxYk+pblbe7EdViXi8teFbOCEHG0BGZDq6J5Scq/VhZSg orj81jyLdDJyFNVO8d2KWHFWgT8c5e/MjxFp9jnZ6r2V3jUo8s4vKFj06cZGfOPX Ww8E/1LbBDcKN35Zz3YVmAOTznHrojZINsAfeVqNRand2059dqJhNkRayiJVxeJj gYP5rlljnDEzo2j4lBGhzslPx6cqfUjKqLAiXgd542gemAmDKZohf1zqFr53jqTg 3LgQOht46I73OHTpZrh85KE8MucNA79pBp+K1Um4q2Y0X3/nJ09OEbOaUWRRAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUFbFBWIC09w69idY9HRSRq8EnyCAwHwYDVR0j BBgwFoAUj1LnKBa4VjNTkMT0r7ryB8IVIvYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k NDRkZmI1YS02ZTI0LTRhNGQtODk2OS1lYjNjYmUzNGU0N2UvMC84RjUyRTcyODE2 Qjg1NjMzNTM5MEM0RjRBRkJBRjIwN0MyMTUyMkY2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOEY1MkU3MjgxNkI4NTYzMzUzOTBDNEY0QUZCQUYyMDdDMjE1 MjJGNi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZDQ0ZGZiNWEtNmUyNC00YTRkLTg5 NjktZWIzY2JlMzRlNDdlLzAvOEY1MkU3MjgxNkI4NTYzMzUzOTBDNEY0QUZCQUYy MDdDMjE1MjJGNi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAA2ruMS2XvJD1Rgph7ECtGLXyCAMQbAAja/V tqApIKXDJ3wwcWMwx5MUF44aTZWofedPcqjtmyuQ+l7VWqCjc1I4MYDGCUZQH6Z6 gleOVCtsRyR3boluM5c7pUGv2ncg3ThhUoKCIF9Zcvfnug5HBSAMo5w8hIa2P/Sp gBiB0up18XU/N60yLPM4VbQWQ4Jqmn9wqGmkrmzv3/Vk1jeVXUrjkjo/PFqd7Lro nY6bXGH4697dg13rUlrcEloo3ZikPYpcp7G0L8oU8ZW+XgHo+vatKM4Za8cIfMGq lZahBes4xUiJ5UMYhkHAtL2rl3Jx8auFIxDMNE98br2Xx+kPhM4= -----END CERTIFICATE-----Generated at Fri Aug 8 10:10:39 2025 by rpki-client