$ rpki-client -vvf repo-rpki.idnic.net/repo/dacb7187-7a5f-4e23-be94-593a0c288cb9/0/8C6B9FE80EF1DA40B964D4429F78785ADDD29EFB.mft File: 8C6B9FE80EF1DA40B964D4429F78785ADDD29EFB.mft (raw, json) Hash identifier: x/Id6BXEUkRz+qik7ANoz7Qj3jLI4BzFP+skQfnR0dQ= Subject key identifier: C1:1A:A6:37:F1:8B:E9:32:F2:95:B0:B4:7B:FA:C9:9F:04:99:26:57 Authority key identifier: 8C:6B:9F:E8:0E:F1:DA:40:B9:64:D4:42:9F:78:78:5A:DD:D2:9E:FB Certificate issuer: /CN=8C6B9FE80EF1DA40B964D4429F78785ADDD29EFB Certificate serial: 13923EAA63A28D01E52218AF8C7DC3B6FC3700AE Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8C6B9FE80EF1DA40B964D4429F78785ADDD29EFB.cer Subject info access: rsync://repo-rpki.idnic.net/repo/dacb7187-7a5f-4e23-be94-593a0c288cb9/0/8C6B9FE80EF1DA40B964D4429F78785ADDD29EFB.mft Manifest number: 01D0 Signing time: Wed 06 Aug 2025 05:01:25 +0000 Manifest this update: Wed 06 Aug 2025 04:56:25 +0000 Manifest next update: Sat 09 Aug 2025 15:06:25 +0000 Files and hashes: 1: 8C6B9FE80EF1DA40B964D4429F78785ADDD29EFB.crl (hash: ptlR2k/drANejv1Rm2ZrKbuOsPfnunpJhLV7pjrGyE8=) 2: 3130332e31302e37302e302f32342d3234203d3e20313530323130.roa (hash: 5JDd/HA007WXvt9HRMOrUb4bJ8L4vCr7oaVmKSZ2Ddg=) 3: 3130332e31302e37312e302f32342d3234203d3e20313530323130.roa (hash: wDta+92k3x+gK76Z0kGm3qQTLhs6WF7nJtND4k4DV9Y=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/dacb7187-7a5f-4e23-be94-593a0c288cb9/0/8C6B9FE80EF1DA40B964D4429F78785ADDD29EFB.crl rsync://repo-rpki.idnic.net/repo/dacb7187-7a5f-4e23-be94-593a0c288cb9/0/8C6B9FE80EF1DA40B964D4429F78785ADDD29EFB.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8C6B9FE80EF1DA40B964D4429F78785ADDD29EFB.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 09 Aug 2025 15:06:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13:92:3e:aa:63:a2:8d:01:e5:22:18:af:8c:7d:c3:b6:fc:37:00:ae Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8C6B9FE80EF1DA40B964D4429F78785ADDD29EFB Validity Not Before: Aug 6 04:56:25 2025 GMT Not After : Aug 9 15:06:25 2025 GMT Subject: CN=C11AA637F18BE932F295B0B47BFAC99F04992657 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:b7:d7:1d:e5:83:e4:73:89:7f:fb:ef:99:55: 15:dc:a9:03:47:ce:1b:44:63:85:da:60:f6:da:a8: 37:5b:c2:ea:00:16:cd:f6:41:3b:ff:55:3b:6d:dc: 80:7b:73:ac:74:a3:75:bf:fb:cb:fe:a5:0c:04:58: 90:e6:c7:c8:3e:ae:94:b7:e6:1a:08:c7:f4:86:77: e4:e7:df:77:04:ca:17:28:f4:a0:97:c7:62:fa:4c: 92:3b:78:9b:9b:f5:de:85:3f:ed:02:9b:34:82:80: 73:64:38:87:64:d8:5b:13:32:ce:2a:f1:a8:46:17: c1:eb:10:6f:1d:26:b1:f4:ec:91:17:cc:06:99:82: 40:c8:92:db:1a:96:9f:fe:d9:93:2d:fa:ad:41:41: ee:00:a8:91:e8:da:b9:54:1b:83:3f:14:39:2b:fa: 2b:e8:55:67:ce:29:c7:c9:dd:36:4d:90:1b:ff:1a: ef:a4:99:14:6a:cc:3b:e2:fe:e5:3e:31:22:58:e9: be:05:ea:66:e3:e4:05:43:22:93:4e:90:8f:30:40: ec:56:83:5a:e6:24:fc:85:1e:2d:3e:91:b4:f9:aa: f2:d9:85:fd:dc:5a:00:a7:cd:23:79:8a:e6:cc:31: 66:55:17:9f:23:db:c8:91:b0:41:d0:65:ae:a4:c7: 61:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:1A:A6:37:F1:8B:E9:32:F2:95:B0:B4:7B:FA:C9:9F:04:99:26:57 X509v3 Authority Key Identifier: keyid:8C:6B:9F:E8:0E:F1:DA:40:B9:64:D4:42:9F:78:78:5A:DD:D2:9E:FB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/dacb7187-7a5f-4e23-be94-593a0c288cb9/0/8C6B9FE80EF1DA40B964D4429F78785ADDD29EFB.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8C6B9FE80EF1DA40B964D4429F78785ADDD29EFB.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/dacb7187-7a5f-4e23-be94-593a0c288cb9/0/8C6B9FE80EF1DA40B964D4429F78785ADDD29EFB.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a7:0d:6a:1c:1d:aa:58:0e:b8:a3:52:71:a9:7d:f5:3c:51:0b: 7a:f8:97:27:f7:6b:e5:0b:3c:31:c5:fa:16:cf:08:df:2a:e7: 77:42:a9:b4:51:75:15:57:46:a9:e9:77:9d:a7:a6:c7:ce:31: b1:b8:ac:55:3a:f5:53:b5:81:53:d4:db:d9:69:ec:28:c6:1b: 8b:ed:95:cf:37:d2:60:7c:03:4a:1a:bd:e1:bc:fa:22:75:39: d3:c7:2b:0a:d8:a5:a1:32:91:b3:80:4b:49:fc:f1:29:e5:64: 09:82:98:33:22:58:4a:d0:9e:08:8f:8b:e9:0c:2a:36:a7:57: ad:4b:7d:dd:50:2b:22:e3:27:7d:06:8a:75:a2:00:0c:5c:9a: e6:5c:0f:55:a0:de:35:4e:d0:a0:f4:76:92:1d:e9:c2:8d:79: 2c:92:05:71:4f:94:e1:7e:b7:90:ed:27:2b:c6:56:d6:f0:ba: 77:6a:bb:dc:f0:1f:da:13:fe:8d:37:e7:2b:39:88:5b:8b:64: c1:9f:74:71:b6:9b:6b:be:19:6b:4c:29:58:9b:2e:ec:c1:7d: 9f:13:00:c2:5c:2f:44:b6:f8:22:47:68:17:61:5e:d2:78:0e: 86:0f:40:c4:b5:6e:3a:a1:e2:b4:81:84:93:fc:d6:57:4a:fd: 47:94:3c:b2 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUE5I+qmOijQHlIhivjH3Dtvw3AK4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEM2QjlGRTgwRUYxREE0MEI5NjRENDQyOUY3ODc4NUFE REQyOUVGQjAeFw0yNTA4MDYwNDU2MjVaFw0yNTA4MDkxNTA2MjVaMDMxMTAvBgNV BAMTKEMxMUFBNjM3RjE4QkU5MzJGMjk1QjBCNDdCRkFDOTlGMDQ5OTI2NTcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCat9cd5YPkc4l/+++ZVRXcqQNH zhtEY4XaYPbaqDdbwuoAFs32QTv/VTtt3IB7c6x0o3W/+8v+pQwEWJDmx8g+rpS3 5hoIx/SGd+Tn33cEyhco9KCXx2L6TJI7eJub9d6FP+0CmzSCgHNkOIdk2FsTMs4q 8ahGF8HrEG8dJrH07JEXzAaZgkDIktsalp/+2ZMt+q1BQe4AqJHo2rlUG4M/FDkr +ivoVWfOKcfJ3TZNkBv/Gu+kmRRqzDvi/uU+MSJY6b4F6mbj5AVDIpNOkI8wQOxW g1rmJPyFHi0+kbT5qvLZhf3cWgCnzSN5iubMMWZVF58j28iRsEHQZa6kx2FdAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUwRqmN/GL6TLylbC0e/rJnwSZJlcwHwYDVR0j BBgwFoAUjGuf6A7x2kC5ZNRCn3h4Wt3SnvswDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k YWNiNzE4Ny03YTVmLTRlMjMtYmU5NC01OTNhMGMyODhjYjkvMC84QzZCOUZFODBF RjFEQTQwQjk2NEQ0NDI5Rjc4Nzg1QURERDI5RUZCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOEM2QjlGRTgwRUYxREE0MEI5NjRENDQyOUY3ODc4NUFEREQy OUVGQi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZGFjYjcxODctN2E1Zi00ZTIzLWJl OTQtNTkzYTBjMjg4Y2I5LzAvOEM2QjlGRTgwRUYxREE0MEI5NjRENDQyOUY3ODc4 NUFEREQyOUVGQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKcNahwdqlgOuKNScal99TxRC3r4lyf3a+UL PDHF+hbPCN8q53dCqbRRdRVXRqnpd52npsfOMbG4rFU69VO1gVPU29lp7CjGG4vt lc830mB8A0oaveG8+iJ1OdPHKwrYpaEykbOAS0n88SnlZAmCmDMiWErQngiPi+kM KjanV61Lfd1QKyLjJ30GinWiAAxcmuZcD1Wg3jVO0KD0dpId6cKNeSySBXFPlOF+ t5DtJyvGVtbwundqu9zwH9oT/o035ys5iFuLZMGfdHG2m2u+GWtMKVibLuzBfZ8T AMJcL0S2+CJHaBdhXtJ4DoYPQMS1bjqh4rSBhJP81ldK/UeUPLI= -----END CERTIFICATE-----Generated at Thu Aug 7 03:29:58 2025 by rpki-client