$ rpki-client -vvf repo-rpki.idnic.net/repo/f0520b54-3ba7-4631-af0b-55984b0ba7f2/0/8CDF716F25D64DEB3E1036E6A36DB724CDE1E5D0.mft File: 8CDF716F25D64DEB3E1036E6A36DB724CDE1E5D0.mft (raw, json) Hash identifier: Ck/k1Oh/YF8umoT8uaLth2UbX6WfIriZBbKRmArsqFs= Subject key identifier: 5D:0D:79:25:FB:68:37:B0:4E:19:6C:7D:73:58:75:48:58:C2:80:91 Authority key identifier: 8C:DF:71:6F:25:D6:4D:EB:3E:10:36:E6:A3:6D:B7:24:CD:E1:E5:D0 Certificate issuer: /CN=8CDF716F25D64DEB3E1036E6A36DB724CDE1E5D0 Certificate serial: 16F397467D3C715FFBB4C74D11F1C0210180BD9F Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8CDF716F25D64DEB3E1036E6A36DB724CDE1E5D0.cer Subject info access: rsync://repo-rpki.idnic.net/repo/f0520b54-3ba7-4631-af0b-55984b0ba7f2/0/8CDF716F25D64DEB3E1036E6A36DB724CDE1E5D0.mft Manifest number: 0375 Signing time: Mon 04 Aug 2025 21:20:41 +0000 Manifest this update: Mon 04 Aug 2025 21:15:41 +0000 Manifest next update: Fri 08 Aug 2025 07:26:41 +0000 Files and hashes: 1: 3130332e3136322e3134362e302f32332d3234203d3e203137393935.roa (hash: glmRxvHF4g4HTvz1muaudxYOmNWHdjodUPYRc5xhUvY=) 2: 8CDF716F25D64DEB3E1036E6A36DB724CDE1E5D0.crl (hash: k4iDdsA5x1eK7KmNuMcj/6IbLWz27BCV/OZXwDB6ymg=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/f0520b54-3ba7-4631-af0b-55984b0ba7f2/0/8CDF716F25D64DEB3E1036E6A36DB724CDE1E5D0.crl rsync://repo-rpki.idnic.net/repo/f0520b54-3ba7-4631-af0b-55984b0ba7f2/0/8CDF716F25D64DEB3E1036E6A36DB724CDE1E5D0.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8CDF716F25D64DEB3E1036E6A36DB724CDE1E5D0.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 08 Aug 2025 07:26:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 16:f3:97:46:7d:3c:71:5f:fb:b4:c7:4d:11:f1:c0:21:01:80:bd:9f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8CDF716F25D64DEB3E1036E6A36DB724CDE1E5D0 Validity Not Before: Aug 4 21:15:41 2025 GMT Not After : Aug 8 07:26:41 2025 GMT Subject: CN=5D0D7925FB6837B04E196C7D7358754858C28091 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:b3:55:64:ee:20:62:7a:5f:9f:08:7a:90:41: 7f:74:14:85:6c:65:62:60:02:48:cc:ea:67:18:8f: e6:85:93:2a:cf:dd:ff:85:2f:c1:71:b7:fd:ad:b4: 01:7b:6f:5f:cd:3a:bb:8d:34:42:8a:6d:6e:26:f2: 53:75:15:5d:10:f6:dd:63:9b:f4:fc:07:49:20:76: 03:ad:db:07:f7:4d:be:51:09:cf:c9:93:46:1c:76: 96:e1:f8:91:77:17:49:6f:86:a9:97:45:11:57:a0: 19:91:e0:6c:1d:40:8a:5b:1b:7e:4b:32:11:08:0d: 3c:43:2d:30:34:92:6c:fa:d5:f1:5f:27:b4:ea:9f: 57:7f:3a:15:a2:90:fd:3c:3d:f8:f9:11:5a:77:ee: 53:40:da:48:cf:66:06:f6:be:44:68:c7:c8:ce:cb: dd:4b:d5:79:d4:76:0b:af:d7:1f:78:25:62:d9:25: 99:c9:f5:b6:38:f9:44:a9:3d:75:f0:6b:30:be:90: 98:17:03:74:1c:4a:61:f1:2a:dd:94:10:79:57:f1: 5e:19:b8:af:b6:9a:88:34:9a:41:9b:26:be:e2:a8: 6c:09:99:0b:a5:a0:22:6e:d7:0c:e1:da:71:9f:07: 86:13:08:97:d1:ed:69:be:de:6a:11:63:4b:f7:a3: 09:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5D:0D:79:25:FB:68:37:B0:4E:19:6C:7D:73:58:75:48:58:C2:80:91 X509v3 Authority Key Identifier: keyid:8C:DF:71:6F:25:D6:4D:EB:3E:10:36:E6:A3:6D:B7:24:CD:E1:E5:D0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/f0520b54-3ba7-4631-af0b-55984b0ba7f2/0/8CDF716F25D64DEB3E1036E6A36DB724CDE1E5D0.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8CDF716F25D64DEB3E1036E6A36DB724CDE1E5D0.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f0520b54-3ba7-4631-af0b-55984b0ba7f2/0/8CDF716F25D64DEB3E1036E6A36DB724CDE1E5D0.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 33:d7:ce:63:97:3b:25:ae:05:e3:de:a2:db:f0:41:3e:b6:ea: 36:3e:83:3a:9f:96:6f:d6:8d:52:63:b6:cb:28:3a:41:19:50: 73:f1:ba:e3:ad:9c:a3:24:16:12:56:14:68:8e:7e:e9:a4:f1: 50:aa:b9:6e:87:d3:f1:40:5b:e1:43:ea:45:99:b9:cb:0d:b4: 37:17:4a:9d:ff:3d:bd:48:2a:e4:09:9b:26:7f:5b:6d:16:4a: 0f:f4:9f:ed:32:6b:0d:6b:d7:f0:79:0a:ef:37:6e:2a:fe:1c: 6a:a6:01:b2:e1:f8:4a:11:70:a0:f8:58:a4:8c:d5:d3:02:3a: 32:ec:fe:43:4a:4e:c2:89:ac:0c:6c:0f:16:51:80:77:e4:e4: 65:96:da:78:88:85:db:99:68:24:6a:34:1d:7f:dc:2c:2f:bf: 85:64:b3:d8:96:02:13:4f:e3:36:dc:9d:86:ea:53:78:60:bd: bf:76:59:57:5a:05:03:6d:2b:16:36:01:da:9f:e5:e7:9e:13: 14:5b:bc:c7:49:1f:98:6e:5b:27:0d:fa:bd:bd:d8:3e:3a:cb: 17:7a:cf:76:fa:c0:dd:17:60:86:fb:34:d1:6c:9a:bb:9e:1e: bc:bc:27:fa:fa:41:fb:91:2f:81:fe:b2:d4:3d:69:31:38:09: 6e:90:7e:4d -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUFvOXRn08cV/7tMdNEfHAIQGAvZ8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOENERjcxNkYyNUQ2NERFQjNFMTAzNkU2QTM2REI3MjRD REUxRTVEMDAeFw0yNTA4MDQyMTE1NDFaFw0yNTA4MDgwNzI2NDFaMDMxMTAvBgNV BAMTKDVEMEQ3OTI1RkI2ODM3QjA0RTE5NkM3RDczNTg3NTQ4NThDMjgwOTEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCns1Vk7iBiel+fCHqQQX90FIVs ZWJgAkjM6mcYj+aFkyrP3f+FL8Fxt/2ttAF7b1/NOruNNEKKbW4m8lN1FV0Q9t1j m/T8B0kgdgOt2wf3Tb5RCc/Jk0Ycdpbh+JF3F0lvhqmXRRFXoBmR4GwdQIpbG35L MhEIDTxDLTA0kmz61fFfJ7Tqn1d/OhWikP08Pfj5EVp37lNA2kjPZgb2vkRox8jO y91L1XnUdguv1x94JWLZJZnJ9bY4+USpPXXwazC+kJgXA3QcSmHxKt2UEHlX8V4Z uK+2mog0mkGbJr7iqGwJmQuloCJu1wzh2nGfB4YTCJfR7Wm+3moRY0v3owm5AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUXQ15JftoN7BOGWx9c1h1SFjCgJEwHwYDVR0j BBgwFoAUjN9xbyXWTes+EDbmo223JM3h5dAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m MDUyMGI1NC0zYmE3LTQ2MzEtYWYwYi01NTk4NGIwYmE3ZjIvMC84Q0RGNzE2RjI1 RDY0REVCM0UxMDM2RTZBMzZEQjcyNENERTFFNUQwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOENERjcxNkYyNUQ2NERFQjNFMTAzNkU2QTM2REI3MjRDREUx RTVEMC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZjA1MjBiNTQtM2JhNy00NjMxLWFm MGItNTU5ODRiMGJhN2YyLzAvOENERjcxNkYyNUQ2NERFQjNFMTAzNkU2QTM2REI3 MjRDREUxRTVEMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADPXzmOXOyWuBePeotvwQT626jY+gzqflm/W jVJjtssoOkEZUHPxuuOtnKMkFhJWFGiOfumk8VCquW6H0/FAW+FD6kWZucsNtDcX Sp3/Pb1IKuQJmyZ/W20WSg/0n+0yaw1r1/B5Cu83bir+HGqmAbLh+EoRcKD4WKSM 1dMCOjLs/kNKTsKJrAxsDxZRgHfk5GWW2niIhduZaCRqNB1/3Cwvv4Vks9iWAhNP 4zbcnYbqU3hgvb92WVdaBQNtKxY2Adqf5eeeExRbvMdJH5huWycN+r292D46yxd6 z3b6wN0XYIb7NNFsmrueHry8J/r6QfuRL4H+stQ9aTE4CW6Qfk0= -----END CERTIFICATE-----Generated at Thu Aug 7 00:27:12 2025 by rpki-client