$ rpki-client -vvf repo-rpki.idnic.net/repo/02913fa1-33ae-4e33-bbe2-81bd9f03c84b/0/8C57C5860BF938BB57E0B7ED0F890D70BFEE55A0.mft File: 8C57C5860BF938BB57E0B7ED0F890D70BFEE55A0.mft (raw, json) Hash identifier: o3A2/NlVF9CDQJHDemIl9qK8ZJZThnEOPy6sP4Tekp0= Subject key identifier: 58:B1:35:A3:31:BB:0B:88:67:13:B7:AB:95:A2:56:7D:D9:D1:38:34 Authority key identifier: 8C:57:C5:86:0B:F9:38:BB:57:E0:B7:ED:0F:89:0D:70:BF:EE:55:A0 Certificate issuer: /CN=8C57C5860BF938BB57E0B7ED0F890D70BFEE55A0 Certificate serial: 30818F007DF93A4B1ECFECABCF3BF5F6E0DF348E Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8C57C5860BF938BB57E0B7ED0F890D70BFEE55A0.cer Subject info access: rsync://repo-rpki.idnic.net/repo/02913fa1-33ae-4e33-bbe2-81bd9f03c84b/0/8C57C5860BF938BB57E0B7ED0F890D70BFEE55A0.mft Manifest number: 032B Signing time: Thu 21 Aug 2025 07:00:03 +0000 Manifest this update: Thu 21 Aug 2025 06:55:03 +0000 Manifest next update: Sun 24 Aug 2025 17:28:03 +0000 Files and hashes: 1: 8C57C5860BF938BB57E0B7ED0F890D70BFEE55A0.crl (hash: lK6ClE4b4Y/axeWRo0Kxn2eO7EucCQaMTp1iIo0wPXQ=) 2: 3130332e3135392e3230322e302f32332d3234203d3e20313331313131.roa (hash: Ho5Y5TOHX49gl1fZYVO+j2M3OjYa1AKAk+KnhAmd/6M=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/02913fa1-33ae-4e33-bbe2-81bd9f03c84b/0/8C57C5860BF938BB57E0B7ED0F890D70BFEE55A0.crl rsync://repo-rpki.idnic.net/repo/02913fa1-33ae-4e33-bbe2-81bd9f03c84b/0/8C57C5860BF938BB57E0B7ED0F890D70BFEE55A0.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8C57C5860BF938BB57E0B7ED0F890D70BFEE55A0.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 24 Aug 2025 17:28:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 30:81:8f:00:7d:f9:3a:4b:1e:cf:ec:ab:cf:3b:f5:f6:e0:df:34:8e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8C57C5860BF938BB57E0B7ED0F890D70BFEE55A0 Validity Not Before: Aug 21 06:55:03 2025 GMT Not After : Aug 24 17:28:03 2025 GMT Subject: CN=58B135A331BB0B886713B7AB95A2567DD9D13834 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:4b:73:15:2e:1b:cb:78:6e:2b:eb:81:2c:66: ab:d1:4c:4f:2a:b9:82:51:2b:1c:59:4e:3d:21:83: b0:3e:e4:db:8a:b7:59:da:cb:28:ac:7d:5e:c6:1d: 2f:d7:ed:a0:c6:65:1c:13:2f:32:4b:29:97:18:47: 59:08:cc:d7:51:54:b1:90:66:d9:d9:bd:a2:bf:e7: 6e:8b:4e:58:e4:d5:4e:3a:38:43:29:95:ba:21:e7: d1:e3:f2:7b:74:2f:0b:36:f9:36:aa:c0:35:68:3e: 42:9f:36:5d:2d:ae:1f:de:a0:f3:3d:b6:21:8e:3f: 7c:1e:e0:43:89:a1:1c:6b:ea:13:8f:15:4b:66:a0: 89:34:ae:e4:43:c5:ff:f6:bc:44:c6:21:2a:29:08: ea:ab:44:39:46:6f:57:b4:ff:9a:e6:6a:e3:18:7c: f3:a1:16:df:2a:76:9a:96:a4:f7:c7:b9:1f:93:df: 92:35:f1:dd:57:dd:31:a9:97:30:e3:71:59:6e:c3: 32:d3:6c:4c:a6:4b:75:94:ed:6d:02:99:fc:89:82: 0a:7d:4a:e5:48:b3:be:fa:8f:9e:f7:64:5a:89:ad: 40:b2:30:66:4a:d1:4f:b3:a2:49:b0:dc:8a:2f:95: 5e:4e:a7:7b:5a:26:62:48:5c:37:b5:34:e1:44:1d: ce:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:B1:35:A3:31:BB:0B:88:67:13:B7:AB:95:A2:56:7D:D9:D1:38:34 X509v3 Authority Key Identifier: keyid:8C:57:C5:86:0B:F9:38:BB:57:E0:B7:ED:0F:89:0D:70:BF:EE:55:A0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/02913fa1-33ae-4e33-bbe2-81bd9f03c84b/0/8C57C5860BF938BB57E0B7ED0F890D70BFEE55A0.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8C57C5860BF938BB57E0B7ED0F890D70BFEE55A0.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/02913fa1-33ae-4e33-bbe2-81bd9f03c84b/0/8C57C5860BF938BB57E0B7ED0F890D70BFEE55A0.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 47:e5:b0:68:95:8f:de:7a:9e:fd:ad:1c:a3:52:6e:8f:17:b0: 65:fd:6a:44:9b:67:58:e0:4d:c8:cf:f5:ac:8d:c6:f7:d1:a6: 84:e3:7c:35:c2:d3:de:f5:4c:aa:9c:12:3c:ab:24:05:2d:5d: 4a:b8:dc:3f:aa:a1:83:ef:95:e5:be:7d:d2:de:76:0b:5b:e2: 75:5c:35:70:97:55:7e:3d:fd:cf:1f:52:46:91:4c:d1:39:8f: 9d:4c:b9:7f:53:39:30:66:98:79:5f:91:14:37:8c:f5:02:36: 77:9f:80:c4:24:ed:17:4e:66:29:45:b3:d5:c2:32:42:3f:4d: 4a:5b:66:2e:3b:2c:97:d8:77:74:8e:53:24:86:91:b2:77:81: 89:0d:24:13:35:76:84:11:73:22:fa:5b:12:cc:86:d1:87:84: c0:cb:66:55:4a:bd:b4:70:84:b5:13:22:0b:1e:46:78:d9:8d: 2c:20:1c:45:64:3f:b8:eb:e8:dd:14:34:de:3d:9b:4f:f7:f8: 58:b7:4e:38:27:d8:a8:4a:f7:38:a2:4f:86:5d:f9:32:de:c9: 67:3f:bc:9a:3b:d2:57:b6:70:60:87:89:b1:d7:c4:bd:a9:2b: 07:ea:55:60:1e:db:7b:2e:47:03:ba:20:9e:c0:6e:d4:70:4c: 46:c9:64:6f -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUMIGPAH35Oksez+yrzzv19uDfNI4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEM1N0M1ODYwQkY5MzhCQjU3RTBCN0VEMEY4OTBENzBC RkVFNTVBMDAeFw0yNTA4MjEwNjU1MDNaFw0yNTA4MjQxNzI4MDNaMDMxMTAvBgNV BAMTKDU4QjEzNUEzMzFCQjBCODg2NzEzQjdBQjk1QTI1NjdERDlEMTM4MzQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDdS3MVLhvLeG4r64EsZqvRTE8q uYJRKxxZTj0hg7A+5NuKt1nayyisfV7GHS/X7aDGZRwTLzJLKZcYR1kIzNdRVLGQ ZtnZvaK/526LTljk1U46OEMplboh59Hj8nt0Lws2+TaqwDVoPkKfNl0trh/eoPM9 tiGOP3we4EOJoRxr6hOPFUtmoIk0ruRDxf/2vETGISopCOqrRDlGb1e0/5rmauMY fPOhFt8qdpqWpPfHuR+T35I18d1X3TGplzDjcVluwzLTbEymS3WU7W0CmfyJggp9 SuVIs776j573ZFqJrUCyMGZK0U+zokmw3IovlV5Op3taJmJIXDe1NOFEHc5tAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUWLE1ozG7C4hnE7erlaJWfdnRODQwHwYDVR0j BBgwFoAUjFfFhgv5OLtX4LftD4kNcL/uVaAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w MjkxM2ZhMS0zM2FlLTRlMzMtYmJlMi04MWJkOWYwM2M4NGIvMC84QzU3QzU4NjBC RjkzOEJCNTdFMEI3RUQwRjg5MEQ3MEJGRUU1NUEwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOEM1N0M1ODYwQkY5MzhCQjU3RTBCN0VEMEY4OTBENzBCRkVF NTVBMC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMDI5MTNmYTEtMzNhZS00ZTMzLWJi ZTItODFiZDlmMDNjODRiLzAvOEM1N0M1ODYwQkY5MzhCQjU3RTBCN0VEMEY4OTBE NzBCRkVFNTVBMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEflsGiVj956nv2tHKNSbo8XsGX9akSbZ1jg TcjP9ayNxvfRpoTjfDXC0971TKqcEjyrJAUtXUq43D+qoYPvleW+fdLedgtb4nVc NXCXVX49/c8fUkaRTNE5j51MuX9TOTBmmHlfkRQ3jPUCNnefgMQk7RdOZilFs9XC MkI/TUpbZi47LJfYd3SOUySGkbJ3gYkNJBM1doQRcyL6WxLMhtGHhMDLZlVKvbRw hLUTIgseRnjZjSwgHEVkP7jr6N0UNN49m0/3+Fi3Tjgn2KhK9ziiT4Zd+TLeyWc/ vJo70le2cGCHibHXxL2pKwfqVWAe23suRwO6IJ7AbtRwTEbJZG8= -----END CERTIFICATE-----Generated at Sat Aug 23 14:07:10 2025 by rpki-client