$ rpki-client -vvf repo-rpki.idnic.net/repo/f9e7a28a-62f0-4d14-8702-403a5190eae1/0/8A4FF836588BBDC5E5CC526BBBEB66D5140D1B86.mft File: 8A4FF836588BBDC5E5CC526BBBEB66D5140D1B86.mft (raw, json) Hash identifier: nBGDksUjZQryBl8d1tPCiN5b54xBlSug2Nueoq0g7OE= Subject key identifier: C4:DD:7F:4F:14:2C:05:59:0E:D1:41:1F:0F:52:BC:C1:42:CA:62:E5 Authority key identifier: 8A:4F:F8:36:58:8B:BD:C5:E5:CC:52:6B:BB:EB:66:D5:14:0D:1B:86 Certificate issuer: /CN=8A4FF836588BBDC5E5CC526BBBEB66D5140D1B86 Certificate serial: 2602D83B2B55ECA2A747223232EA9CA120F9254E Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8A4FF836588BBDC5E5CC526BBBEB66D5140D1B86.cer Subject info access: rsync://repo-rpki.idnic.net/repo/f9e7a28a-62f0-4d14-8702-403a5190eae1/0/8A4FF836588BBDC5E5CC526BBBEB66D5140D1B86.mft Manifest number: 0323 Signing time: Tue 05 Aug 2025 05:21:19 +0000 Manifest this update: Tue 05 Aug 2025 05:16:19 +0000 Manifest next update: Fri 08 Aug 2025 09:32:19 +0000 Files and hashes: 1: 3130332e3137312e33302e302f32332d3234203d3e20313331313131.roa (hash: 0IdcwPtxZArM5JrmLtgkLYtthS0u5GSXZS6q7IiPcxg=) 2: 8A4FF836588BBDC5E5CC526BBBEB66D5140D1B86.crl (hash: gAAk/+4lqDssauIF0uHHTXuD9hxCK79+cOtMqpkjns8=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/f9e7a28a-62f0-4d14-8702-403a5190eae1/0/8A4FF836588BBDC5E5CC526BBBEB66D5140D1B86.crl rsync://repo-rpki.idnic.net/repo/f9e7a28a-62f0-4d14-8702-403a5190eae1/0/8A4FF836588BBDC5E5CC526BBBEB66D5140D1B86.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8A4FF836588BBDC5E5CC526BBBEB66D5140D1B86.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 08 Aug 2025 09:32:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 26:02:d8:3b:2b:55:ec:a2:a7:47:22:32:32:ea:9c:a1:20:f9:25:4e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8A4FF836588BBDC5E5CC526BBBEB66D5140D1B86 Validity Not Before: Aug 5 05:16:19 2025 GMT Not After : Aug 8 09:32:19 2025 GMT Subject: CN=C4DD7F4F142C05590ED1411F0F52BCC142CA62E5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:fd:05:19:88:11:76:d3:b3:5a:f7:93:4e:b1: 5e:ed:d9:11:10:98:30:86:ff:ee:54:c0:96:24:66: d5:e8:e1:a3:bc:5f:dc:5b:a5:0e:83:db:93:02:ee: f8:eb:9c:91:4f:98:0b:09:8c:69:ba:b9:6e:5e:5d: 39:a9:4c:d7:d6:cf:41:00:c2:9f:f5:30:db:df:74: f6:ef:ea:f2:1a:dd:95:69:29:5e:41:60:30:e4:e8: fe:3f:52:c5:ba:dc:9d:02:8f:7d:0f:9e:a5:b3:69: 65:cf:53:28:6b:92:1d:f9:00:da:fd:ca:97:ed:44: b1:9e:f0:37:6e:c6:ea:21:40:76:dc:33:f1:e3:7b: 63:86:74:ff:1e:27:c6:55:53:7b:ce:7a:1c:c0:0e: b2:e7:55:16:9e:00:ff:36:23:64:92:57:02:7b:2c: 5e:6e:bb:e1:a9:a8:f0:42:24:fd:eb:84:1b:13:53: ce:f2:b5:06:c4:32:bc:17:95:7e:b2:11:b7:67:34: bf:10:9e:3a:1f:ea:56:4a:b3:c5:1e:66:e2:8e:cb: ae:8b:85:b4:19:d9:6e:50:c5:40:08:cd:79:46:b1: 4e:a1:0c:41:67:bd:51:a8:20:50:11:5e:f1:17:87: 9f:f7:12:51:77:90:ca:12:17:60:fb:88:88:d4:d2: e3:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:DD:7F:4F:14:2C:05:59:0E:D1:41:1F:0F:52:BC:C1:42:CA:62:E5 X509v3 Authority Key Identifier: keyid:8A:4F:F8:36:58:8B:BD:C5:E5:CC:52:6B:BB:EB:66:D5:14:0D:1B:86 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/f9e7a28a-62f0-4d14-8702-403a5190eae1/0/8A4FF836588BBDC5E5CC526BBBEB66D5140D1B86.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8A4FF836588BBDC5E5CC526BBBEB66D5140D1B86.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f9e7a28a-62f0-4d14-8702-403a5190eae1/0/8A4FF836588BBDC5E5CC526BBBEB66D5140D1B86.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6e:5d:c1:1e:ae:cf:2b:58:31:19:fb:d5:f1:6d:58:d5:f7:fc: 10:43:33:fd:ab:07:13:0f:91:d6:4d:04:c6:a3:7f:8c:ef:62: ee:ac:38:9a:d2:8f:36:59:5b:66:e7:8e:83:76:f5:b4:64:56: 50:ca:d8:7e:4d:a9:40:86:d8:4d:1d:c2:7e:08:a8:17:67:16: 38:e1:5c:a8:9f:87:25:26:e9:54:c5:0d:de:0e:32:7e:1e:0d: 1d:b8:aa:58:2d:ed:de:11:e1:19:43:da:97:a6:d0:49:6b:01: cd:33:ee:e2:8a:af:c4:3b:3e:ff:fc:54:b4:c1:e2:38:35:9e: 79:95:62:63:28:11:15:ae:38:d6:11:f6:27:58:cb:6d:6c:45: 38:61:82:a7:1e:2f:f2:46:a6:18:3f:10:31:a1:1d:3d:df:60: 70:b6:26:f4:25:4a:ae:5c:de:49:ab:ad:aa:4f:da:35:57:c9: 22:b3:20:f5:54:d1:5a:30:d6:5f:65:54:fb:c1:2d:72:76:f4: 93:d8:ab:e7:e4:3e:cf:ac:40:df:73:7e:42:61:52:d0:8a:73: a3:60:a0:c9:90:39:86:c5:7e:78:6f:c3:e2:91:b7:1d:21:17: 48:ad:f1:2d:78:d5:2d:8d:4a:81:84:95:05:7c:8c:dd:0a:fa: 35:83:17:93 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUJgLYOytV7KKnRyIyMuqcoSD5JU4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEE0RkY4MzY1ODhCQkRDNUU1Q0M1MjZCQkJFQjY2RDUx NDBEMUI4NjAeFw0yNTA4MDUwNTE2MTlaFw0yNTA4MDgwOTMyMTlaMDMxMTAvBgNV BAMTKEM0REQ3RjRGMTQyQzA1NTkwRUQxNDExRjBGNTJCQ0MxNDJDQTYyRTUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDj/QUZiBF207Na95NOsV7t2REQ mDCG/+5UwJYkZtXo4aO8X9xbpQ6D25MC7vjrnJFPmAsJjGm6uW5eXTmpTNfWz0EA wp/1MNvfdPbv6vIa3ZVpKV5BYDDk6P4/UsW63J0Cj30PnqWzaWXPUyhrkh35ANr9 ypftRLGe8DduxuohQHbcM/Hje2OGdP8eJ8ZVU3vOehzADrLnVRaeAP82I2SSVwJ7 LF5uu+GpqPBCJP3rhBsTU87ytQbEMrwXlX6yEbdnNL8Qnjof6lZKs8UeZuKOy66L hbQZ2W5QxUAIzXlGsU6hDEFnvVGoIFARXvEXh5/3ElF3kMoSF2D7iIjU0uPBAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUxN1/TxQsBVkO0UEfD1K8wULKYuUwHwYDVR0j BBgwFoAUik/4NliLvcXlzFJru+tm1RQNG4YwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m OWU3YTI4YS02MmYwLTRkMTQtODcwMi00MDNhNTE5MGVhZTEvMC84QTRGRjgzNjU4 OEJCREM1RTVDQzUyNkJCQkVCNjZENTE0MEQxQjg2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOEE0RkY4MzY1ODhCQkRDNUU1Q0M1MjZCQkJFQjY2RDUxNDBE MUI4Ni5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZjllN2EyOGEtNjJmMC00ZDE0LTg3 MDItNDAzYTUxOTBlYWUxLzAvOEE0RkY4MzY1ODhCQkRDNUU1Q0M1MjZCQkJFQjY2 RDUxNDBEMUI4Ni5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAG5dwR6uzytYMRn71fFtWNX3/BBDM/2rBxMP kdZNBMajf4zvYu6sOJrSjzZZW2bnjoN29bRkVlDK2H5NqUCG2E0dwn4IqBdnFjjh XKifhyUm6VTFDd4OMn4eDR24qlgt7d4R4RlD2pem0ElrAc0z7uKKr8Q7Pv/8VLTB 4jg1nnmVYmMoERWuONYR9idYy21sRThhgqceL/JGphg/EDGhHT3fYHC2JvQlSq5c 3kmrrapP2jVXySKzIPVU0Vow1l9lVPvBLXJ29JPYq+fkPs+sQN9zfkJhUtCKc6Ng oMmQOYbFfnhvw+KRtx0hF0it8S141S2NSoGElQV8jN0K+jWDF5M= -----END CERTIFICATE-----Generated at Thu Aug 7 07:22:10 2025 by rpki-client