$ rpki-client -vvf repo-rpki.idnic.net/repo/f195b4b4-bc8a-4ce5-b550-9aa7b36ee1fa/0/8107B8970680BF15377E222E6093ED124116C40F.mft File: 8107B8970680BF15377E222E6093ED124116C40F.mft (raw, json) Hash identifier: 48t4vcYs3SXZUw0yB7xzZ3rmVonYwWZ2tg0CHoMltg0= Subject key identifier: C9:B6:39:4E:14:D0:67:0C:08:F7:AF:96:52:00:26:5A:B4:B7:7E:C7 Authority key identifier: 81:07:B8:97:06:80:BF:15:37:7E:22:2E:60:93:ED:12:41:16:C4:0F Certificate issuer: /CN=8107B8970680BF15377E222E6093ED124116C40F Certificate serial: 5869A32C33AB4A10DF1B72E36473B4B130340D2B Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/8107B8970680BF15377E222E6093ED124116C40F.cer Subject info access: rsync://repo-rpki.idnic.net/repo/f195b4b4-bc8a-4ce5-b550-9aa7b36ee1fa/0/8107B8970680BF15377E222E6093ED124116C40F.mft Manifest number: 8F Signing time: Mon 11 Aug 2025 03:20:03 +0000 Manifest this update: Mon 11 Aug 2025 03:15:03 +0000 Manifest next update: Thu 14 Aug 2025 11:28:03 +0000 Files and hashes: 1: 3136302e32322e3133362e302f32332d3233203d3e20313532383131.roa (hash: V4/cqqOZ7RegowJp1D+ect85LbWcjDnGy47RvlaSPIU=) 2: 8107B8970680BF15377E222E6093ED124116C40F.crl (hash: 6Z0Zbwr99lnjjxiuwxCAv8CyQQ/er9sK9S6UzMo9IuE=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/f195b4b4-bc8a-4ce5-b550-9aa7b36ee1fa/0/8107B8970680BF15377E222E6093ED124116C40F.crl rsync://repo-rpki.idnic.net/repo/f195b4b4-bc8a-4ce5-b550-9aa7b36ee1fa/0/8107B8970680BF15377E222E6093ED124116C40F.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/8107B8970680BF15377E222E6093ED124116C40F.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 11:28:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 58:69:a3:2c:33:ab:4a:10:df:1b:72:e3:64:73:b4:b1:30:34:0d:2b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8107B8970680BF15377E222E6093ED124116C40F Validity Not Before: Aug 11 03:15:03 2025 GMT Not After : Aug 14 11:28:03 2025 GMT Subject: CN=C9B6394E14D0670C08F7AF965200265AB4B77EC7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:30:92:c1:4b:f8:ff:96:0d:21:0d:ff:b9:bc: 7b:ed:d5:c9:45:60:63:bc:78:86:ef:cb:fc:76:65: 2d:fb:97:82:97:a0:eb:d0:89:c0:8a:aa:f1:bc:a9: c1:b6:45:86:54:87:48:20:62:81:ff:94:ec:94:c4: 2b:d4:ef:71:43:4c:b2:2b:69:d7:91:16:1a:b4:0a: 0b:25:e0:17:26:2c:e2:30:ef:80:6a:50:d8:98:00: 22:54:a2:7f:94:35:e7:05:3c:41:63:77:00:11:73: 25:3c:ca:af:76:10:5c:8f:64:a0:79:b1:95:86:dd: 71:22:a6:64:31:93:f2:f0:5f:f5:a6:f8:a7:88:4c: e2:66:74:0a:34:59:6d:5e:7e:99:6b:7e:80:49:e0: 87:ff:88:02:d6:60:ee:51:6f:40:c9:d7:89:a6:8d: 9a:62:7d:87:19:d7:7a:8e:75:32:94:ff:4c:d9:47: 03:cc:c2:6e:49:be:60:5e:0b:47:03:e4:9d:ea:30: b9:23:77:45:54:24:86:91:65:9f:82:ea:87:d5:a6: b4:50:11:f3:16:21:11:07:5c:d3:b1:67:e4:cb:51: be:98:ae:f1:b1:ad:4e:d6:59:bb:f7:61:67:43:40: 64:5c:0d:9a:16:40:8e:d1:4a:2a:63:44:b1:69:5e: 10:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C9:B6:39:4E:14:D0:67:0C:08:F7:AF:96:52:00:26:5A:B4:B7:7E:C7 X509v3 Authority Key Identifier: keyid:81:07:B8:97:06:80:BF:15:37:7E:22:2E:60:93:ED:12:41:16:C4:0F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/f195b4b4-bc8a-4ce5-b550-9aa7b36ee1fa/0/8107B8970680BF15377E222E6093ED124116C40F.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/8107B8970680BF15377E222E6093ED124116C40F.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f195b4b4-bc8a-4ce5-b550-9aa7b36ee1fa/0/8107B8970680BF15377E222E6093ED124116C40F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a3:80:e8:cf:ef:44:e7:21:ec:e4:49:ec:f9:9c:c4:d2:f0:4a: 92:8e:ab:b7:4a:b5:8f:a4:12:1a:8d:1a:c5:cf:75:be:00:77: 2b:a7:3e:ca:7f:c4:b8:75:aa:d7:68:46:4e:76:10:5b:cd:6f: 04:1f:56:54:d2:fb:a6:d0:80:33:96:d1:c6:7d:97:04:3a:60: aa:5b:4b:e0:3b:27:8c:47:82:56:6c:8b:38:bf:ca:28:60:2c: 2e:22:6b:ab:c3:5b:c3:49:3d:e4:41:d8:38:8e:c4:8c:b0:85: 88:f3:5a:83:69:03:dc:1c:62:d9:81:fb:25:85:af:06:b5:a9: 51:d3:36:68:28:9d:41:f9:d6:5f:c9:ec:ad:3c:67:37:01:b9: f1:18:bd:1d:c4:6e:42:9b:ad:20:58:02:77:35:01:bb:a0:1c: c5:b1:d0:01:c7:5d:30:b5:96:43:2e:5c:87:69:7e:be:dc:ea: c4:96:55:cc:8f:52:9a:19:89:69:3a:a7:68:74:39:7c:d7:6b: 99:3a:1d:f6:bc:e5:9b:b6:6b:02:1c:8f:75:29:63:09:3c:c4: 0b:32:75:b0:5f:6b:dd:c4:30:3d:3b:2e:56:43:21:70:4c:57: 6a:52:2b:30:b3:58:a7:e0:a2:2b:10:1e:ce:7f:ce:00:a6:ce: 36:54:bc:40 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUWGmjLDOrShDfG3LjZHO0sTA0DSswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODEwN0I4OTcwNjgwQkYxNTM3N0UyMjJFNjA5M0VEMTI0 MTE2QzQwRjAeFw0yNTA4MTEwMzE1MDNaFw0yNTA4MTQxMTI4MDNaMDMxMTAvBgNV BAMTKEM5QjYzOTRFMTREMDY3MEMwOEY3QUY5NjUyMDAyNjVBQjRCNzdFQzcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC7MJLBS/j/lg0hDf+5vHvt1clF YGO8eIbvy/x2ZS37l4KXoOvQicCKqvG8qcG2RYZUh0ggYoH/lOyUxCvU73FDTLIr adeRFhq0Cgsl4BcmLOIw74BqUNiYACJUon+UNecFPEFjdwARcyU8yq92EFyPZKB5 sZWG3XEipmQxk/LwX/Wm+KeITOJmdAo0WW1efplrfoBJ4If/iALWYO5Rb0DJ14mm jZpifYcZ13qOdTKU/0zZRwPMwm5JvmBeC0cD5J3qMLkjd0VUJIaRZZ+C6ofVprRQ EfMWIREHXNOxZ+TLUb6YrvGxrU7WWbv3YWdDQGRcDZoWQI7RSipjRLFpXhArAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUybY5ThTQZwwI96+WUgAmWrS3fscwHwYDVR0j BBgwFoAUgQe4lwaAvxU3fiIuYJPtEkEWxA8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m MTk1YjRiNC1iYzhhLTRjZTUtYjU1MC05YWE3YjM2ZWUxZmEvMC84MTA3Qjg5NzA2 ODBCRjE1Mzc3RTIyMkU2MDkzRUQxMjQxMTZDNDBGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvODEwN0I4OTcwNjgwQkYxNTM3N0UyMjJFNjA5M0VEMTI0MTE2 QzQwRi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZjE5NWI0YjQtYmM4YS00Y2U1LWI1 NTAtOWFhN2IzNmVlMWZhLzAvODEwN0I4OTcwNjgwQkYxNTM3N0UyMjJFNjA5M0VE MTI0MTE2QzQwRi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKOA6M/vROch7ORJ7PmcxNLwSpKOq7dKtY+k EhqNGsXPdb4AdyunPsp/xLh1qtdoRk52EFvNbwQfVlTS+6bQgDOW0cZ9lwQ6YKpb S+A7J4xHglZsizi/yihgLC4ia6vDW8NJPeRB2DiOxIywhYjzWoNpA9wcYtmB+yWF rwa1qVHTNmgonUH51l/J7K08ZzcBufEYvR3EbkKbrSBYAnc1AbugHMWx0AHHXTC1 lkMuXIdpfr7c6sSWVcyPUpoZiWk6p2h0OXzXa5k6Hfa85Zu2awIcj3UpYwk8xAsy dbBfa93EMD07LlZDIXBMV2pSKzCzWKfgoisQHs5/zgCmzjZUvEA= -----END CERTIFICATE-----Generated at Wed Aug 13 08:47:19 2025 by rpki-client