$ rpki-client -vvf repo-rpki.idnic.net/repo/e3809384-9b1c-4f5a-aa6b-9de3b52a9c05/0/8932E25F54C4B10E2AE5B71E38D2AD4D1EE3BB11.mft File: 8932E25F54C4B10E2AE5B71E38D2AD4D1EE3BB11.mft (raw, json) Hash identifier: IlJTeK2y1SB/+0P6eFdShHuMfJeeYDONlnbFobmnfRo= Subject key identifier: 1A:5D:14:61:40:70:6F:E2:9C:1C:84:3E:2B:66:FC:2A:FD:06:D7:65 Authority key identifier: 89:32:E2:5F:54:C4:B1:0E:2A:E5:B7:1E:38:D2:AD:4D:1E:E3:BB:11 Certificate issuer: /CN=8932E25F54C4B10E2AE5B71E38D2AD4D1EE3BB11 Certificate serial: 7AD96366A49C1792EC7E303D88A642E8551D81F2 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8932E25F54C4B10E2AE5B71E38D2AD4D1EE3BB11.cer Subject info access: rsync://repo-rpki.idnic.net/repo/e3809384-9b1c-4f5a-aa6b-9de3b52a9c05/0/8932E25F54C4B10E2AE5B71E38D2AD4D1EE3BB11.mft Manifest number: C1 Signing time: Wed 06 Aug 2025 12:40:00 +0000 Manifest this update: Wed 06 Aug 2025 12:35:00 +0000 Manifest next update: Sat 09 Aug 2025 23:22:00 +0000 Files and hashes: 1: 3130332e32392e3137302e302f32342d3234203d3e203536323631.roa (hash: AbfmsPIM39RXP9giC5KqkIRrkD9RG/QaxNfAq/KCmcs=) 2: 8932E25F54C4B10E2AE5B71E38D2AD4D1EE3BB11.crl (hash: NGlEng3RDsxB0lKuHKT5rblYs1OIxttck2IxW5VqrsM=) 3: 3130332e32392e3137312e302f32342d3234203d3e203538333738.roa (hash: VGUNPT+EvshoEIe2DkaARFh/LWXkGNwN7useeVXqqQc=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/e3809384-9b1c-4f5a-aa6b-9de3b52a9c05/0/8932E25F54C4B10E2AE5B71E38D2AD4D1EE3BB11.crl rsync://repo-rpki.idnic.net/repo/e3809384-9b1c-4f5a-aa6b-9de3b52a9c05/0/8932E25F54C4B10E2AE5B71E38D2AD4D1EE3BB11.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8932E25F54C4B10E2AE5B71E38D2AD4D1EE3BB11.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 09 Aug 2025 23:22:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7a:d9:63:66:a4:9c:17:92:ec:7e:30:3d:88:a6:42:e8:55:1d:81:f2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8932E25F54C4B10E2AE5B71E38D2AD4D1EE3BB11 Validity Not Before: Aug 6 12:35:00 2025 GMT Not After : Aug 9 23:22:00 2025 GMT Subject: CN=1A5D146140706FE29C1C843E2B66FC2AFD06D765 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:23:7e:66:15:13:82:9a:38:d3:ce:08:5b:05: da:9c:36:67:8f:97:3e:8e:70:a5:18:cd:94:4c:36: 96:6f:85:e2:59:25:09:eb:69:18:18:c4:aa:f1:1d: 97:90:05:6a:33:e4:44:85:57:36:30:51:02:0c:da: 69:ca:3c:9f:fa:6b:b8:00:2a:b3:a2:08:4c:68:81: b3:8c:3e:38:b2:b6:44:18:b6:e8:38:45:70:e7:cc: 75:1e:3b:4f:1c:67:7b:dc:ab:09:66:df:75:63:78: aa:26:77:66:79:4e:82:f6:4a:2c:28:92:d9:ba:f5: f2:13:35:07:58:fe:4e:59:23:3a:8f:55:e0:d2:77: 04:c1:1a:2a:af:69:4f:0e:5e:4b:cd:de:72:b7:32: 33:1e:b6:e3:4d:42:fa:d2:e5:1d:51:b3:16:16:27: 98:09:3d:40:85:05:76:d0:49:96:fd:50:39:ec:27: 9a:f7:e3:3b:da:88:bc:64:45:83:a7:10:bd:b1:66: d4:6a:10:a4:55:60:08:78:64:fb:01:06:fa:78:cb: c7:e5:90:6d:f3:b0:2a:4a:bb:6a:8f:7e:74:39:7a: bd:a3:09:4d:61:91:f8:7c:ca:85:df:fb:22:31:61: ea:9a:ca:bd:9c:a2:07:05:af:9e:c2:b8:60:f1:1d: 02:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:5D:14:61:40:70:6F:E2:9C:1C:84:3E:2B:66:FC:2A:FD:06:D7:65 X509v3 Authority Key Identifier: keyid:89:32:E2:5F:54:C4:B1:0E:2A:E5:B7:1E:38:D2:AD:4D:1E:E3:BB:11 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/e3809384-9b1c-4f5a-aa6b-9de3b52a9c05/0/8932E25F54C4B10E2AE5B71E38D2AD4D1EE3BB11.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8932E25F54C4B10E2AE5B71E38D2AD4D1EE3BB11.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e3809384-9b1c-4f5a-aa6b-9de3b52a9c05/0/8932E25F54C4B10E2AE5B71E38D2AD4D1EE3BB11.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5d:84:44:32:e4:4b:99:5a:c4:e3:4a:2e:15:8f:b3:81:79:7b: 70:d4:7b:d3:29:85:48:2c:e0:51:35:ea:3d:56:85:37:d0:5c: 04:41:ea:d8:71:29:2f:1b:d5:3b:b2:66:b1:1c:c1:fd:24:01: 6e:7e:fd:7f:3b:4f:c6:70:3d:33:75:1c:1e:15:c0:84:2d:6a: 64:af:f8:a6:83:a2:aa:20:c7:94:9d:07:5c:9c:72:bc:63:b5: 58:64:f1:e7:7c:40:ce:fc:a4:37:3a:76:9a:61:cf:13:59:49: 67:e6:0c:00:c2:33:6b:fa:85:77:13:68:84:db:b8:ea:d9:71: 31:cc:01:3f:b8:46:69:e0:49:8a:19:05:fe:53:a7:29:22:35: 86:9e:b6:7d:8b:fc:33:a1:98:b3:92:62:33:0b:cb:8a:b7:5f: ec:09:81:f1:54:05:a6:df:22:87:42:fb:8a:5c:a9:3b:eb:0b: ce:e6:91:b1:46:20:65:3a:24:8d:fb:42:de:10:c6:34:9c:e0: 39:29:9c:5d:da:6f:c0:b0:eb:bb:30:ae:37:51:57:ad:7e:95: 86:dc:57:ca:98:96:2a:3d:4f:58:cb:5f:46:db:e1:70:5a:bc: aa:08:e4:dc:88:f2:09:29:17:b5:3f:3f:17:f6:cf:76:f3:ee: ec:ec:15:d5 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUetljZqScF5LsfjA9iKZC6FUdgfIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODkzMkUyNUY1NEM0QjEwRTJBRTVCNzFFMzhEMkFENEQx RUUzQkIxMTAeFw0yNTA4MDYxMjM1MDBaFw0yNTA4MDkyMzIyMDBaMDMxMTAvBgNV BAMTKDFBNUQxNDYxNDA3MDZGRTI5QzFDODQzRTJCNjZGQzJBRkQwNkQ3NjUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDCI35mFROCmjjTzghbBdqcNmeP lz6OcKUYzZRMNpZvheJZJQnraRgYxKrxHZeQBWoz5ESFVzYwUQIM2mnKPJ/6a7gA KrOiCExogbOMPjiytkQYtug4RXDnzHUeO08cZ3vcqwlm33VjeKomd2Z5ToL2Siwo ktm69fITNQdY/k5ZIzqPVeDSdwTBGiqvaU8OXkvN3nK3MjMetuNNQvrS5R1RsxYW J5gJPUCFBXbQSZb9UDnsJ5r34zvaiLxkRYOnEL2xZtRqEKRVYAh4ZPsBBvp4y8fl kG3zsCpKu2qPfnQ5er2jCU1hkfh8yoXf+yIxYeqayr2cogcFr57CuGDxHQIXAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUGl0UYUBwb+KcHIQ+K2b8Kv0G12UwHwYDVR0j BBgwFoAUiTLiX1TEsQ4q5bceONKtTR7juxEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l MzgwOTM4NC05YjFjLTRmNWEtYWE2Yi05ZGUzYjUyYTljMDUvMC84OTMyRTI1RjU0 QzRCMTBFMkFFNUI3MUUzOEQyQUQ0RDFFRTNCQjExLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvODkzMkUyNUY1NEM0QjEwRTJBRTVCNzFFMzhEMkFENEQxRUUz QkIxMS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZTM4MDkzODQtOWIxYy00ZjVhLWFh NmItOWRlM2I1MmE5YzA1LzAvODkzMkUyNUY1NEM0QjEwRTJBRTVCNzFFMzhEMkFE NEQxRUUzQkIxMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAF2ERDLkS5laxONKLhWPs4F5e3DUe9MphUgs 4FE16j1WhTfQXARB6thxKS8b1TuyZrEcwf0kAW5+/X87T8ZwPTN1HB4VwIQtamSv +KaDoqogx5SdB1yccrxjtVhk8ed8QM78pDc6dpphzxNZSWfmDADCM2v6hXcTaITb uOrZcTHMAT+4RmngSYoZBf5TpykiNYaetn2L/DOhmLOSYjMLy4q3X+wJgfFUBabf IodC+4pcqTvrC87mkbFGIGU6JI37Qt4QxjSc4DkpnF3ab8Cw67swrjdRV61+lYbc V8qYlio9T1jLX0bb4XBavKoI5NyI8gkpF7U/Pxf2z3bz7uzsFdU= -----END CERTIFICATE-----Generated at Thu Aug 7 03:15:59 2025 by rpki-client