$ rpki-client -vvf repo-rpki.idnic.net/repo/f0a929c6-1e25-494a-b0f9-55fc4fc94fbc/0/8A0F7659BE6C916702994F1B653CA6335CF48F9F.mft File: 8A0F7659BE6C916702994F1B653CA6335CF48F9F.mft (raw, json) Hash identifier: DbHymVyUWxA7qKB+pPK3GckwPODQ2Ez0E7twn90r+1Y= Subject key identifier: D4:E1:0F:F0:96:72:60:B6:19:A7:17:BF:24:BA:EA:B1:A2:68:CB:BA Authority key identifier: 8A:0F:76:59:BE:6C:91:67:02:99:4F:1B:65:3C:A6:33:5C:F4:8F:9F Certificate issuer: /CN=8A0F7659BE6C916702994F1B653CA6335CF48F9F Certificate serial: 1365393DB54E4FC93C6DE99409F4E0976F1C8BA0 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8A0F7659BE6C916702994F1B653CA6335CF48F9F.cer Subject info access: rsync://repo-rpki.idnic.net/repo/f0a929c6-1e25-494a-b0f9-55fc4fc94fbc/0/8A0F7659BE6C916702994F1B653CA6335CF48F9F.mft Manifest number: 03E3 Signing time: Wed 06 Aug 2025 15:42:06 +0000 Manifest this update: Wed 06 Aug 2025 15:37:06 +0000 Manifest next update: Sat 09 Aug 2025 15:42:06 +0000 Files and hashes: 1: 3130332e3232382e3234302e302f32322d3234203d3e203435373030.roa (hash: nYsP2Y+L7z5x+ELGHcLfdcfTT6FcQq7vqqfEAudnokQ=) 2: 3230322e38372e3234382e302f32312d3234203d3e203234323031.roa (hash: YIGWj76AnaLSHaaCNOVsCHFGKespwS6XW2pML5MbQts=) 3: 323430343a3530303a3a2f33322d3438203d3e203234323031.roa (hash: ZncYvkH3fAKDn8QBBs6vlpl5n6FCs5nY6O2LpIihUog=) 4: 8A0F7659BE6C916702994F1B653CA6335CF48F9F.crl (hash: 2OeHSNSXrvb6ghdV3lY58A50ureJWGVs6wvAvmNi+5w=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/f0a929c6-1e25-494a-b0f9-55fc4fc94fbc/0/8A0F7659BE6C916702994F1B653CA6335CF48F9F.crl rsync://repo-rpki.idnic.net/repo/f0a929c6-1e25-494a-b0f9-55fc4fc94fbc/0/8A0F7659BE6C916702994F1B653CA6335CF48F9F.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8A0F7659BE6C916702994F1B653CA6335CF48F9F.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 09 Aug 2025 15:42:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13:65:39:3d:b5:4e:4f:c9:3c:6d:e9:94:09:f4:e0:97:6f:1c:8b:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8A0F7659BE6C916702994F1B653CA6335CF48F9F Validity Not Before: Aug 6 15:37:06 2025 GMT Not After : Aug 9 15:42:06 2025 GMT Subject: CN=D4E10FF0967260B619A717BF24BAEAB1A268CBBA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f8:62:67:85:97:d5:1a:bf:b9:b5:6a:b6:16:01: 64:71:be:ec:7f:6c:61:38:70:e0:ea:60:ad:ab:b6: 7f:e7:f6:d5:31:c1:2a:5c:db:6a:bd:82:39:e5:59: c1:bf:b2:1d:98:54:59:51:6b:29:56:cc:c2:4d:22: e8:8c:bd:2e:0a:4a:9e:66:28:9a:41:08:08:0a:af: 40:08:e9:a0:b4:0d:3f:4d:78:cb:5d:4d:3b:3f:9c: 5d:3f:96:d1:f7:2f:fc:7c:f5:c6:95:f2:a6:3a:75: 0f:44:f9:7a:1e:0d:fe:c2:35:5e:33:fe:9a:f9:d0: 46:14:62:7c:94:32:12:43:3b:c3:a0:d4:e7:90:22: f7:66:2b:eb:6d:3a:fe:97:38:a7:b0:c0:95:be:37: 7a:0c:91:e6:39:06:d3:17:84:c7:b8:3f:c1:8d:a2: 95:d9:f7:b7:b5:ba:7f:e5:d3:97:66:8e:5f:d1:12: 20:06:0a:62:aa:91:3c:41:0a:52:08:5b:0d:a4:05: cf:ce:f2:ed:7c:a9:23:4a:f4:15:d4:bf:eb:b5:49: de:62:04:81:02:e1:c6:1d:32:84:78:09:c7:7c:f3: fb:73:7a:ae:d4:2d:fe:71:a9:ae:3a:55:75:94:77: 6d:d6:3a:b9:4d:8d:58:0d:6d:bb:10:2b:78:02:2c: b0:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D4:E1:0F:F0:96:72:60:B6:19:A7:17:BF:24:BA:EA:B1:A2:68:CB:BA X509v3 Authority Key Identifier: keyid:8A:0F:76:59:BE:6C:91:67:02:99:4F:1B:65:3C:A6:33:5C:F4:8F:9F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/f0a929c6-1e25-494a-b0f9-55fc4fc94fbc/0/8A0F7659BE6C916702994F1B653CA6335CF48F9F.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8A0F7659BE6C916702994F1B653CA6335CF48F9F.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f0a929c6-1e25-494a-b0f9-55fc4fc94fbc/0/8A0F7659BE6C916702994F1B653CA6335CF48F9F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b6:b7:f1:86:16:a3:e9:76:13:16:37:f7:ea:a6:ee:65:2e:43: 10:77:28:ce:69:b7:df:aa:26:d4:76:6a:33:4f:01:7a:bc:9e: 4e:ef:c3:99:9c:0b:d9:1d:57:fb:86:7f:2d:29:d8:2f:86:65: d1:87:53:3e:31:fa:cd:ea:dc:27:67:fb:7f:5e:aa:b0:e0:ab: bf:15:0f:9b:c3:d5:65:45:11:58:e4:f1:4c:b2:31:db:b9:45: da:2a:33:8e:81:af:78:c9:9a:94:29:84:f9:74:62:e5:db:b7: 6e:fd:ea:c9:81:dc:b4:1f:31:fd:b0:81:3a:16:e8:01:7a:97: 2f:c1:72:d9:0d:bb:e8:2a:7b:48:a8:2f:ff:99:88:56:d6:e3: cc:6f:63:c9:7a:6d:3b:c1:5b:ad:64:bd:9e:bb:f8:e3:a5:65: 93:03:b2:5f:11:f4:7f:0f:c3:e1:5e:ad:ac:cc:30:e1:bf:5d: e7:b2:92:30:a9:0c:e3:c6:79:37:fb:5f:aa:db:92:26:86:78: 27:90:69:45:49:85:93:53:e6:19:43:a2:b6:17:8f:0b:76:8c: fb:69:ca:97:e8:a1:53:8f:4c:c9:c4:f7:21:93:05:78:64:46: 0b:62:75:8a:2e:65:9e:8c:af:97:b7:5f:6b:d0:a1:5b:ef:10: 4b:2d:78:95 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUE2U5PbVOT8k8bemUCfTgl28ci6AwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEEwRjc2NTlCRTZDOTE2NzAyOTk0RjFCNjUzQ0E2MzM1 Q0Y0OEY5RjAeFw0yNTA4MDYxNTM3MDZaFw0yNTA4MDkxNTQyMDZaMDMxMTAvBgNV BAMTKEQ0RTEwRkYwOTY3MjYwQjYxOUE3MTdCRjI0QkFFQUIxQTI2OENCQkEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD4YmeFl9Uav7m1arYWAWRxvux/ bGE4cODqYK2rtn/n9tUxwSpc22q9gjnlWcG/sh2YVFlRaylWzMJNIuiMvS4KSp5m KJpBCAgKr0AI6aC0DT9NeMtdTTs/nF0/ltH3L/x89caV8qY6dQ9E+XoeDf7CNV4z /pr50EYUYnyUMhJDO8Og1OeQIvdmK+ttOv6XOKewwJW+N3oMkeY5BtMXhMe4P8GN opXZ97e1un/l05dmjl/REiAGCmKqkTxBClIIWw2kBc/O8u18qSNK9BXUv+u1Sd5i BIEC4cYdMoR4Ccd88/tzeq7ULf5xqa46VXWUd23WOrlNjVgNbbsQK3gCLLChAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU1OEP8JZyYLYZpxe/JLrqsaJoy7owHwYDVR0j BBgwFoAUig92Wb5skWcCmU8bZTymM1z0j58wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m MGE5MjljNi0xZTI1LTQ5NGEtYjBmOS01NWZjNGZjOTRmYmMvMC84QTBGNzY1OUJF NkM5MTY3MDI5OTRGMUI2NTNDQTYzMzVDRjQ4RjlGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOEEwRjc2NTlCRTZDOTE2NzAyOTk0RjFCNjUzQ0E2MzM1Q0Y0 OEY5Ri5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZjBhOTI5YzYtMWUyNS00OTRhLWIw ZjktNTVmYzRmYzk0ZmJjLzAvOEEwRjc2NTlCRTZDOTE2NzAyOTk0RjFCNjUzQ0E2 MzM1Q0Y0OEY5Ri5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALa38YYWo+l2ExY39+qm7mUuQxB3KM5pt9+q JtR2ajNPAXq8nk7vw5mcC9kdV/uGfy0p2C+GZdGHUz4x+s3q3Cdn+39eqrDgq78V D5vD1WVFEVjk8UyyMdu5RdoqM46Br3jJmpQphPl0YuXbt2796smB3LQfMf2wgToW 6AF6ly/BctkNu+gqe0ioL/+ZiFbW48xvY8l6bTvBW61kvZ67+OOlZZMDsl8R9H8P w+FerazMMOG/XeeykjCpDOPGeTf7X6rbkiaGeCeQaUVJhZNT5hlDorYXjwt2jPtp ypfooVOPTMnE9yGTBXhkRgtidYouZZ6Mr5e3X2vQoVvvEEsteJU= -----END CERTIFICATE-----Generated at Thu Aug 7 00:39:48 2025 by rpki-client