$ rpki-client -vvf repo-rpki.idnic.net/repo/d8b98722-1cb4-40d4-ac8b-c3bca2bca217/0/8A95FAF723EC129E336E75ACE1CD4F3094FB6481.mft File: 8A95FAF723EC129E336E75ACE1CD4F3094FB6481.mft (raw, json) Hash identifier: ICTtM4oLsfozDZe5vVdJlCU7t0+9bClcCH8829DL79s= Subject key identifier: 86:5C:88:64:5E:0C:E5:CA:E8:C8:86:30:8F:DF:F1:16:32:2C:77:40 Authority key identifier: 8A:95:FA:F7:23:EC:12:9E:33:6E:75:AC:E1:CD:4F:30:94:FB:64:81 Certificate issuer: /CN=8A95FAF723EC129E336E75ACE1CD4F3094FB6481 Certificate serial: 06A510F93403070FE745EBC44B425D6053E116E6 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8A95FAF723EC129E336E75ACE1CD4F3094FB6481.cer Subject info access: rsync://repo-rpki.idnic.net/repo/d8b98722-1cb4-40d4-ac8b-c3bca2bca217/0/8A95FAF723EC129E336E75ACE1CD4F3094FB6481.mft Manifest number: 0440 Signing time: Wed 06 Aug 2025 12:11:26 +0000 Manifest this update: Wed 06 Aug 2025 12:06:26 +0000 Manifest next update: Sat 09 Aug 2025 14:38:26 +0000 Files and hashes: 1: 8A95FAF723EC129E336E75ACE1CD4F3094FB6481.crl (hash: csLZyVM2xmpxKrL9httsja5KXzkRJTxc1cmc5dH/SGc=) 2: 3130332e32332e32302e302f32322d3234203d3e203538333937.roa (hash: y/aRgAk/Ol217uqThdECq/g+tO93bdhzL10rqxPOy5s=) 3: 323030313a6466303a663830303a3a2f34382d3438203d3e203538333937.roa (hash: 8qFDAcssXXUuL7jdU+5MBpRRNuUnSR4XPXnprUszlok=) 4: 34332e3234352e3138302e302f32322d3234203d3e203538333937.roa (hash: f+W5KSnYaSOmv7obX83rwEJhTHZvGPxy0VlZOsEAh+k=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/d8b98722-1cb4-40d4-ac8b-c3bca2bca217/0/8A95FAF723EC129E336E75ACE1CD4F3094FB6481.crl rsync://repo-rpki.idnic.net/repo/d8b98722-1cb4-40d4-ac8b-c3bca2bca217/0/8A95FAF723EC129E336E75ACE1CD4F3094FB6481.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8A95FAF723EC129E336E75ACE1CD4F3094FB6481.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 09 Aug 2025 14:38:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 06:a5:10:f9:34:03:07:0f:e7:45:eb:c4:4b:42:5d:60:53:e1:16:e6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8A95FAF723EC129E336E75ACE1CD4F3094FB6481 Validity Not Before: Aug 6 12:06:26 2025 GMT Not After : Aug 9 14:38:26 2025 GMT Subject: CN=865C88645E0CE5CAE8C886308FDFF116322C7740 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:82:3a:a1:15:7e:97:89:95:c3:eb:f4:57:05: ef:0d:ab:72:0f:85:e9:36:8c:d1:df:25:1d:95:58: 77:34:cb:90:d9:a0:0b:f2:51:9a:6f:56:33:21:cc: 5d:82:02:92:a7:d9:9f:de:f8:16:91:d3:e0:cd:c1: 45:fe:91:2a:31:13:db:3d:41:fc:ea:bd:19:3c:38: 65:a6:7f:14:c8:a0:63:79:56:02:aa:5d:55:d3:70: 8f:c9:18:84:01:41:43:b3:1d:6a:ec:6b:cb:45:a4: a7:b5:8b:e9:d2:01:1d:66:93:2f:4a:f5:b2:96:55: a1:9a:f8:fa:10:db:e4:7c:96:be:b7:b0:21:61:2a: 78:a6:19:01:29:36:33:0b:9a:57:7b:8e:93:71:8a: 35:00:95:2b:53:7e:a4:79:df:a7:d8:1a:f6:58:8a: 1c:9d:52:c2:fd:f9:41:8e:60:e8:17:94:8f:14:c4: a6:52:69:e7:39:a8:c4:61:f0:fb:cb:3b:fe:19:cb: a1:81:dc:c1:2c:88:cb:3d:f8:d0:19:b3:65:df:bd: f9:45:81:21:4a:99:a2:b1:82:98:b6:8b:f4:7d:97: 84:9b:9f:47:7c:0e:38:37:7e:7f:51:2a:f4:53:e3: f7:63:7b:77:5f:cd:29:fa:78:8c:1e:ac:89:82:a7: 53:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:5C:88:64:5E:0C:E5:CA:E8:C8:86:30:8F:DF:F1:16:32:2C:77:40 X509v3 Authority Key Identifier: keyid:8A:95:FA:F7:23:EC:12:9E:33:6E:75:AC:E1:CD:4F:30:94:FB:64:81 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/d8b98722-1cb4-40d4-ac8b-c3bca2bca217/0/8A95FAF723EC129E336E75ACE1CD4F3094FB6481.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8A95FAF723EC129E336E75ACE1CD4F3094FB6481.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d8b98722-1cb4-40d4-ac8b-c3bca2bca217/0/8A95FAF723EC129E336E75ACE1CD4F3094FB6481.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 66:ef:3c:9d:7e:d0:fa:6b:16:37:36:bc:5f:ae:a3:38:94:c7: ac:0c:3d:46:3a:f4:60:c3:6d:e5:79:39:eb:9b:b0:ea:23:ed: 52:b1:b3:ef:4b:a9:55:fd:39:f0:68:dd:29:ed:0c:e1:de:e5: 44:77:d4:b9:cd:64:8c:25:e6:83:09:d6:a5:4b:89:1b:82:c4: f9:b4:f8:a2:b0:2e:fe:32:9f:f6:e6:c0:37:26:7d:eb:37:31: 5a:3a:41:26:1a:e3:79:0b:d9:a6:f3:d4:75:19:12:77:15:ed: 7d:90:10:1e:c4:7c:5d:30:9b:a0:b5:43:da:c3:f1:e1:39:c8: bb:8f:0d:35:5b:a5:6e:6d:ad:d6:3d:94:cd:3e:49:eb:ce:c7: 48:0a:d6:85:06:7d:fe:17:60:59:c7:a4:60:78:a6:fe:1b:c8: 46:63:93:c4:bb:78:fe:9d:b1:56:c2:93:d3:49:bd:b8:7d:50: 11:c6:86:1c:88:ff:f7:ad:fa:e3:56:a5:65:1a:b2:c9:4a:a9: b9:2d:2a:e1:32:cb:eb:0f:9b:a3:c0:08:b5:b1:95:11:08:7b: 7b:f4:83:09:d7:5d:49:c4:44:3c:98:d6:72:10:20:0a:4a:a7: 34:eb:c5:77:56:ce:78:ff:24:74:45:4f:1f:ad:12:57:0c:d2: 71:bb:fc:8f -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUBqUQ+TQDBw/nRevES0JdYFPhFuYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEE5NUZBRjcyM0VDMTI5RTMzNkU3NUFDRTFDRDRGMzA5 NEZCNjQ4MTAeFw0yNTA4MDYxMjA2MjZaFw0yNTA4MDkxNDM4MjZaMDMxMTAvBgNV BAMTKDg2NUM4ODY0NUUwQ0U1Q0FFOEM4ODYzMDhGREZGMTE2MzIyQzc3NDAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDkgjqhFX6XiZXD6/RXBe8Nq3IP hek2jNHfJR2VWHc0y5DZoAvyUZpvVjMhzF2CApKn2Z/e+BaR0+DNwUX+kSoxE9s9 QfzqvRk8OGWmfxTIoGN5VgKqXVXTcI/JGIQBQUOzHWrsa8tFpKe1i+nSAR1mky9K 9bKWVaGa+PoQ2+R8lr63sCFhKnimGQEpNjMLmld7jpNxijUAlStTfqR536fYGvZY ihydUsL9+UGOYOgXlI8UxKZSaec5qMRh8PvLO/4Zy6GB3MEsiMs9+NAZs2XfvflF gSFKmaKxgpi2i/R9l4Sbn0d8Djg3fn9RKvRT4/dje3dfzSn6eIwerImCp1O9AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUhlyIZF4M5croyIYwj9/xFjIsd0AwHwYDVR0j BBgwFoAUipX69yPsEp4zbnWs4c1PMJT7ZIEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k OGI5ODcyMi0xY2I0LTQwZDQtYWM4Yi1jM2JjYTJiY2EyMTcvMC84QTk1RkFGNzIz RUMxMjlFMzM2RTc1QUNFMUNENEYzMDk0RkI2NDgxLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOEE5NUZBRjcyM0VDMTI5RTMzNkU3NUFDRTFDRDRGMzA5NEZC NjQ4MS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZDhiOTg3MjItMWNiNC00MGQ0LWFj OGItYzNiY2EyYmNhMjE3LzAvOEE5NUZBRjcyM0VDMTI5RTMzNkU3NUFDRTFDRDRG MzA5NEZCNjQ4MS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGbvPJ1+0PprFjc2vF+uoziUx6wMPUY69GDD beV5OeubsOoj7VKxs+9LqVX9OfBo3SntDOHe5UR31LnNZIwl5oMJ1qVLiRuCxPm0 +KKwLv4yn/bmwDcmfes3MVo6QSYa43kL2abz1HUZEncV7X2QEB7EfF0wm6C1Q9rD 8eE5yLuPDTVbpW5trdY9lM0+SevOx0gK1oUGff4XYFnHpGB4pv4byEZjk8S7eP6d sVbCk9NJvbh9UBHGhhyI//et+uNWpWUasslKqbktKuEyy+sPm6PACLWxlREIe3v0 gwnXXUnERDyY1nIQIApKpzTrxXdWznj/JHRFTx+tElcM0nG7/I8= -----END CERTIFICATE-----Generated at Thu Aug 7 00:26:33 2025 by rpki-client