$ rpki-client -vvf repo-rpki.idnic.net/repo/f9d6acc6-0af3-4b97-99a4-0f45e8ecf576/0/0A8E8E063785238467D4AD1F507CC97B30DBB959.mft File: 0A8E8E063785238467D4AD1F507CC97B30DBB959.mft (raw, json) Hash identifier: QqG2GQAko1dRn/p+jvE2zPaUxZHNaEE6zAP0Q0IPl2Q= Subject key identifier: 9C:87:46:E1:B8:AD:B6:81:50:1D:33:67:21:3A:2F:48:3C:83:49:02 Authority key identifier: 0A:8E:8E:06:37:85:23:84:67:D4:AD:1F:50:7C:C9:7B:30:DB:B9:59 Certificate issuer: /CN=0A8E8E063785238467D4AD1F507CC97B30DBB959 Certificate serial: 4DA97ADCA1B2D2B96BB7105A48F716AF365B07E2 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0A8E8E063785238467D4AD1F507CC97B30DBB959.cer Subject info access: rsync://repo-rpki.idnic.net/repo/f9d6acc6-0af3-4b97-99a4-0f45e8ecf576/0/0A8E8E063785238467D4AD1F507CC97B30DBB959.mft Manifest number: 015F Signing time: Tue 05 Aug 2025 06:31:17 +0000 Manifest this update: Tue 05 Aug 2025 06:26:17 +0000 Manifest next update: Fri 08 Aug 2025 15:20:17 +0000 Files and hashes: 1: 323430363a356334303a373737373a3a2f34382d3438203d3e20313331373035.roa (hash: uxf3gr1qNXj16NXsE/3S99HOdYs6kHV+q6L/TWnS+ag=) 2: 323430363a356334303a393939393a3a2f34382d3438203d3e20313331373035.roa (hash: cSd8oWkoy/PciTBhaM2sT+kEpSFLFHXqmquC1grDeYk=) 3: 3130332e3135342e3137382e302f32332d3234203d3e20313331373035.roa (hash: z6Vlo67b6HowiJ4eNQMIImpcN0YW2LjWV36x2SeZA5M=) 4: 3130332e3135342e3137392e302f32342d3234203d3e20313331373035.roa (hash: fuYAXhPxVSs3uQDGyVoloAUdGAB1vPzhCZLoObuSwWo=) 5: 323430363a356334303a323030303a3a2f33362d3438203d3e20313331373035.roa (hash: 34w8SIWSSd8kqURH0Jn+B/R9XKBmDHxtyVWAlqGJxJo=) 6: 323430363a356334303a3a2f33322d3438203d3e20313331373035.roa (hash: ZrrNvfIdpKFxME3MijZJjel9mkVCFWr1LKlyTLKuOmk=) 7: 323430363a356334303a313030303a3a2f33362d3438203d3e20313331373035.roa (hash: Mk93/Py1aNdqibCxnW5rDhu68jIUBJ5f2wQcM99902Q=) 8: 0A8E8E063785238467D4AD1F507CC97B30DBB959.crl (hash: /7R2l9j0bfes9rgDzpc2YvWJEpgkKAGgi8yULGKRNkk=) 9: 323430363a356334303a3a2f33362d3438203d3e20313331373035.roa (hash: vVX9J+iIt5S0zLOqjzNP9A3DgvrDc3RqZLM36XJo31Q=) 10: 3130332e3135342e3137382e302f32342d3234203d3e20313331373035.roa (hash: dY5S+6E2tTu7kTt3kud9rHyNZ8ICT/4MYY6A5gKdkm0=) 11: 323430363a356334303a383838383a3a2f34382d3438203d3e20313331373035.roa (hash: xhrHJkeZ6ORZKPQ3ePW270bQNoXqgZH/hWdzMzXe/Ng=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/f9d6acc6-0af3-4b97-99a4-0f45e8ecf576/0/0A8E8E063785238467D4AD1F507CC97B30DBB959.crl rsync://repo-rpki.idnic.net/repo/f9d6acc6-0af3-4b97-99a4-0f45e8ecf576/0/0A8E8E063785238467D4AD1F507CC97B30DBB959.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0A8E8E063785238467D4AD1F507CC97B30DBB959.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 08 Aug 2025 15:20:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4d:a9:7a:dc:a1:b2:d2:b9:6b:b7:10:5a:48:f7:16:af:36:5b:07:e2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0A8E8E063785238467D4AD1F507CC97B30DBB959 Validity Not Before: Aug 5 06:26:17 2025 GMT Not After : Aug 8 15:20:17 2025 GMT Subject: CN=9C8746E1B8ADB681501D3367213A2F483C834902 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:f1:f6:fc:07:7f:cf:c4:4f:67:f3:13:c9:06: c4:82:87:c6:68:cb:e5:d6:90:7c:02:89:95:de:82: 5f:4c:d5:1e:11:81:9c:a3:c6:bc:04:c8:f3:fb:ec: cf:63:d8:53:48:87:92:57:6f:87:f8:88:25:7b:b4: 6a:e7:8c:25:a4:34:50:f3:8d:19:72:06:88:a9:2d: 14:db:77:12:91:85:1a:5a:b4:9b:cf:10:5a:25:55: d3:35:2c:6e:52:06:46:1c:59:1d:fb:b5:d7:e9:3f: 60:b0:3f:ac:3f:73:3a:23:1c:e9:25:6d:44:28:37: 8b:53:10:32:b3:91:67:7f:29:20:82:c7:bb:69:6a: 47:10:ab:88:26:af:69:f6:de:58:c8:aa:95:e6:bb: c1:4e:be:9d:42:3a:ea:aa:77:64:39:5d:ba:1d:e2: 2a:9f:3e:12:cf:a2:c7:5e:77:0e:64:90:ec:fe:84: 99:65:8b:2a:af:06:10:49:5c:65:f6:1f:7f:61:b7: 8f:9a:00:7d:c3:c7:fb:f8:a2:cc:c7:f7:b3:11:7d: 19:76:6f:92:5b:6c:fa:57:31:1a:e8:fe:88:7b:92: 87:0a:13:1d:65:08:63:ac:ef:d5:dc:9a:0f:10:79: 8f:43:e7:22:8e:7b:e1:7f:e0:0a:f8:6d:02:9c:db: ff:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9C:87:46:E1:B8:AD:B6:81:50:1D:33:67:21:3A:2F:48:3C:83:49:02 X509v3 Authority Key Identifier: keyid:0A:8E:8E:06:37:85:23:84:67:D4:AD:1F:50:7C:C9:7B:30:DB:B9:59 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/f9d6acc6-0af3-4b97-99a4-0f45e8ecf576/0/0A8E8E063785238467D4AD1F507CC97B30DBB959.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0A8E8E063785238467D4AD1F507CC97B30DBB959.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f9d6acc6-0af3-4b97-99a4-0f45e8ecf576/0/0A8E8E063785238467D4AD1F507CC97B30DBB959.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7a:12:3a:7c:0f:01:54:b0:7c:e7:fb:ec:6f:ee:71:f8:fc:71: 11:a5:23:19:4c:35:26:0f:bf:2a:82:15:09:ff:9a:d5:52:c5: eb:7d:2b:34:49:56:89:d0:87:4b:af:1d:99:53:c3:92:f4:5a: 70:a4:99:1f:b3:95:cd:14:17:1d:b8:4e:e3:ba:8e:63:f6:ca: 5d:c7:47:d0:c2:66:aa:9a:f8:22:fb:8f:49:7c:f8:87:d7:d0: 0a:14:08:20:45:de:73:2e:af:3b:80:f3:e9:a1:bc:b4:c8:76: e7:83:06:94:b5:09:c5:90:ac:fe:8f:a0:26:6c:5f:c5:82:e6: 9d:82:0a:c0:cd:f7:e1:13:2a:92:8d:96:30:82:df:9e:0f:33: 68:17:50:19:4e:72:46:f3:15:5d:79:09:13:29:53:8c:e9:c9: 74:ea:40:a9:71:e3:7b:d5:e8:1f:77:72:36:20:17:41:8c:8d: 96:7d:35:cf:d6:6f:f8:8a:ec:c1:5a:44:12:40:90:e2:0f:7c: 84:df:c8:b4:ef:00:f9:a1:02:48:b0:41:dc:c5:fa:cb:84:ee: 0c:59:60:e0:8e:89:d8:67:33:52:d8:c0:38:32:f6:82:fd:a7: b0:48:5f:cd:92:b0:1b:34:e3:ca:89:f2:79:6e:ff:72:ad:48: a8:a1:98:67 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUTal63KGy0rlrtxBaSPcWrzZbB+IwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMEE4RThFMDYzNzg1MjM4NDY3RDRBRDFGNTA3Q0M5N0Iz MERCQjk1OTAeFw0yNTA4MDUwNjI2MTdaFw0yNTA4MDgxNTIwMTdaMDMxMTAvBgNV BAMTKDlDODc0NkUxQjhBREI2ODE1MDFEMzM2NzIxM0EyRjQ4M0M4MzQ5MDIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCp8fb8B3/PxE9n8xPJBsSCh8Zo y+XWkHwCiZXegl9M1R4RgZyjxrwEyPP77M9j2FNIh5JXb4f4iCV7tGrnjCWkNFDz jRlyBoipLRTbdxKRhRpatJvPEFolVdM1LG5SBkYcWR37tdfpP2CwP6w/czojHOkl bUQoN4tTEDKzkWd/KSCCx7tpakcQq4gmr2n23ljIqpXmu8FOvp1COuqqd2Q5Xbod 4iqfPhLPosdedw5kkOz+hJlliyqvBhBJXGX2H39ht4+aAH3Dx/v4oszH97MRfRl2 b5JbbPpXMRro/oh7kocKEx1lCGOs79Xcmg8QeY9D5yKOe+F/4Ar4bQKc2//pAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUnIdG4bittoFQHTNnITovSDyDSQIwHwYDVR0j BBgwFoAUCo6OBjeFI4Rn1K0fUHzJezDbuVkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m OWQ2YWNjNi0wYWYzLTRiOTctOTlhNC0wZjQ1ZThlY2Y1NzYvMC8wQThFOEUwNjM3 ODUyMzg0NjdENEFEMUY1MDdDQzk3QjMwREJCOTU5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMEE4RThFMDYzNzg1MjM4NDY3RDRBRDFGNTA3Q0M5N0IzMERC Qjk1OS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZjlkNmFjYzYtMGFmMy00Yjk3LTk5 YTQtMGY0NWU4ZWNmNTc2LzAvMEE4RThFMDYzNzg1MjM4NDY3RDRBRDFGNTA3Q0M5 N0IzMERCQjk1OS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHoSOnwPAVSwfOf77G/ucfj8cRGlIxlMNSYP vyqCFQn/mtVSxet9KzRJVonQh0uvHZlTw5L0WnCkmR+zlc0UFx24TuO6jmP2yl3H R9DCZqqa+CL7j0l8+IfX0AoUCCBF3nMurzuA8+mhvLTIdueDBpS1CcWQrP6PoCZs X8WC5p2CCsDN9+ETKpKNljCC354PM2gXUBlOckbzFV15CRMpU4zpyXTqQKlx43vV 6B93cjYgF0GMjZZ9Nc/Wb/iK7MFaRBJAkOIPfITfyLTvAPmhAkiwQdzF+suE7gxZ YOCOidhnM1LYwDgy9oL9p7BIX82SsBs048qJ8nlu/3KtSKihmGc= -----END CERTIFICATE-----Generated at Wed Aug 6 18:29:39 2025 by rpki-client