$ rpki-client -vvf repo-rpki.idnic.net/repo/09a88897-c387-4735-acd8-1d1c53cde264/0/8B7E0099F26BEEE90826C9B0E424575BDE128403.mft File: 8B7E0099F26BEEE90826C9B0E424575BDE128403.mft (raw, json) Hash identifier: U29CZDVbarzky3jecSzVsil50UKeQiCOIV2RERQOotM= Subject key identifier: CE:75:3C:06:18:13:F3:BE:C6:F5:41:8D:9F:38:FE:DE:25:11:DD:BE Authority key identifier: 8B:7E:00:99:F2:6B:EE:E9:08:26:C9:B0:E4:24:57:5B:DE:12:84:03 Certificate issuer: /CN=8B7E0099F26BEEE90826C9B0E424575BDE128403 Certificate serial: 0A93607BDE32FBB747A74D5C92AE78990EA51E18 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8B7E0099F26BEEE90826C9B0E424575BDE128403.cer Subject info access: rsync://repo-rpki.idnic.net/repo/09a88897-c387-4735-acd8-1d1c53cde264/0/8B7E0099F26BEEE90826C9B0E424575BDE128403.mft Manifest number: 0286 Signing time: Sat 23 Aug 2025 00:22:05 +0000 Manifest this update: Sat 23 Aug 2025 00:17:05 +0000 Manifest next update: Tue 26 Aug 2025 08:54:05 +0000 Files and hashes: 1: 8B7E0099F26BEEE90826C9B0E424575BDE128403.crl (hash: DzFD+DvxWYELzTMqEcOrWBXMGtoSOr8R9HSxwC0Xnjo=) 2: 3130332e3137392e38362e302f32332d3234203d3e20313430333839.roa (hash: rY4tz9/kQego7cZpv2afdmhIw5rIucEsOqMDCxyUCMk=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/09a88897-c387-4735-acd8-1d1c53cde264/0/8B7E0099F26BEEE90826C9B0E424575BDE128403.crl rsync://repo-rpki.idnic.net/repo/09a88897-c387-4735-acd8-1d1c53cde264/0/8B7E0099F26BEEE90826C9B0E424575BDE128403.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8B7E0099F26BEEE90826C9B0E424575BDE128403.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 26 Aug 2025 08:54:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0a:93:60:7b:de:32:fb:b7:47:a7:4d:5c:92:ae:78:99:0e:a5:1e:18 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8B7E0099F26BEEE90826C9B0E424575BDE128403 Validity Not Before: Aug 23 00:17:05 2025 GMT Not After : Aug 26 08:54:05 2025 GMT Subject: CN=CE753C061813F3BEC6F5418D9F38FEDE2511DDBE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:9d:e2:9a:04:a8:51:11:1e:b9:53:b9:b5:47: 74:51:d5:35:fe:de:8e:50:4d:0c:75:67:f8:14:ae: 4f:46:d3:ea:98:1f:e9:6d:2c:96:0e:c0:ba:21:17: b4:0f:0c:97:84:2a:cd:23:42:3f:36:76:7f:b0:58: a7:1d:00:ee:21:07:55:e7:d0:3a:31:6e:ff:50:a9: 9a:3e:ad:5d:49:f2:78:cc:43:c9:67:86:1f:59:e7: 5c:b1:3b:ee:c8:40:dc:b1:7d:70:d3:d5:64:e4:7a: 55:17:3b:22:b0:68:bd:5d:c0:6e:a4:ad:67:9e:81: b0:17:19:10:88:6e:fd:09:c0:a5:fd:7b:72:84:66: a0:d9:45:ec:0a:80:bf:0d:7a:dd:bb:fe:d3:c2:d4: 5f:5b:9c:84:a3:d7:47:28:b0:0b:5b:14:e4:06:7c: 2d:04:10:77:64:4b:5f:c7:3c:45:b9:73:63:1a:6f: 1f:11:82:86:82:21:12:91:45:5d:ad:df:9e:97:fc: 03:25:e5:38:4f:64:69:a2:6c:1f:42:89:e6:16:14: cf:8a:9b:cc:6d:7b:9a:d1:ef:7b:fb:be:42:e6:51: 37:17:0e:e7:df:1c:91:47:cf:0c:ff:d8:6c:0e:60: cc:1a:e7:0a:38:91:b8:53:f8:54:04:d0:3a:89:f7: 0a:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CE:75:3C:06:18:13:F3:BE:C6:F5:41:8D:9F:38:FE:DE:25:11:DD:BE X509v3 Authority Key Identifier: keyid:8B:7E:00:99:F2:6B:EE:E9:08:26:C9:B0:E4:24:57:5B:DE:12:84:03 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/09a88897-c387-4735-acd8-1d1c53cde264/0/8B7E0099F26BEEE90826C9B0E424575BDE128403.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8B7E0099F26BEEE90826C9B0E424575BDE128403.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/09a88897-c387-4735-acd8-1d1c53cde264/0/8B7E0099F26BEEE90826C9B0E424575BDE128403.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 44:d1:c5:19:68:7f:a1:5d:6d:09:fd:ec:49:d5:b7:8e:bd:90: ae:4c:02:ca:ae:0c:75:47:57:16:24:f5:cd:04:c9:d6:e0:58: bf:9f:75:80:5c:57:ab:a9:60:ce:a8:e3:b3:4a:5b:8b:a2:57: 63:33:6e:08:90:d6:69:46:26:45:be:d8:32:d4:66:8a:a4:bb: 35:e7:de:a2:19:b3:50:7d:01:60:07:6c:fb:26:b2:bd:5f:ba: ee:d5:8c:88:39:9e:30:86:19:5d:49:55:43:fa:36:db:16:42: 9b:54:20:75:aa:5f:04:8f:8b:f4:ff:1f:24:0c:23:7f:22:df: 03:e3:86:ed:40:95:23:5a:93:f2:1f:e4:aa:9d:df:82:1e:0e: 17:33:7f:3f:66:08:a6:9d:81:64:a3:8f:29:fb:04:ab:ec:4f: d7:bf:63:fa:aa:5c:5b:9f:fd:72:76:8a:7a:79:b7:e6:7f:f8: 3a:76:e1:97:65:b5:4e:76:38:01:36:6c:2b:f7:4a:31:c9:c0: aa:fd:31:38:bb:8e:64:29:cb:12:ca:0d:e5:da:da:cb:42:63: c9:95:c0:8c:48:7d:b0:e0:7f:45:18:06:a9:5c:00:3b:d6:52: 05:0f:d7:9c:ec:b1:fc:ff:67:e2:6f:46:71:c0:cc:4f:d6:1f: f4:2c:c9:8c -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUCpNge94y+7dHp01ckq54mQ6lHhgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEI3RTAwOTlGMjZCRUVFOTA4MjZDOUIwRTQyNDU3NUJE RTEyODQwMzAeFw0yNTA4MjMwMDE3MDVaFw0yNTA4MjYwODU0MDVaMDMxMTAvBgNV BAMTKENFNzUzQzA2MTgxM0YzQkVDNkY1NDE4RDlGMzhGRURFMjUxMUREQkUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDDneKaBKhRER65U7m1R3RR1TX+ 3o5QTQx1Z/gUrk9G0+qYH+ltLJYOwLohF7QPDJeEKs0jQj82dn+wWKcdAO4hB1Xn 0Doxbv9QqZo+rV1J8njMQ8lnhh9Z51yxO+7IQNyxfXDT1WTkelUXOyKwaL1dwG6k rWeegbAXGRCIbv0JwKX9e3KEZqDZRewKgL8Net27/tPC1F9bnISj10cosAtbFOQG fC0EEHdkS1/HPEW5c2Mabx8RgoaCIRKRRV2t356X/AMl5ThPZGmibB9CieYWFM+K m8xte5rR73v7vkLmUTcXDuffHJFHzwz/2GwOYMwa5wo4kbhT+FQE0DqJ9wopAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUznU8BhgT877G9UGNnzj+3iUR3b4wHwYDVR0j BBgwFoAUi34AmfJr7ukIJsmw5CRXW94ShAMwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w OWE4ODg5Ny1jMzg3LTQ3MzUtYWNkOC0xZDFjNTNjZGUyNjQvMC84QjdFMDA5OUYy NkJFRUU5MDgyNkM5QjBFNDI0NTc1QkRFMTI4NDAzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOEI3RTAwOTlGMjZCRUVFOTA4MjZDOUIwRTQyNDU3NUJERTEy ODQwMy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMDlhODg4OTctYzM4Ny00NzM1LWFj ZDgtMWQxYzUzY2RlMjY0LzAvOEI3RTAwOTlGMjZCRUVFOTA4MjZDOUIwRTQyNDU3 NUJERTEyODQwMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAETRxRlof6FdbQn97EnVt469kK5MAsquDHVH VxYk9c0EydbgWL+fdYBcV6upYM6o47NKW4uiV2MzbgiQ1mlGJkW+2DLUZoqkuzXn 3qIZs1B9AWAHbPsmsr1fuu7VjIg5njCGGV1JVUP6NtsWQptUIHWqXwSPi/T/HyQM I38i3wPjhu1AlSNak/If5Kqd34IeDhczfz9mCKadgWSjjyn7BKvsT9e/Y/qqXFuf /XJ2inp5t+Z/+Dp24ZdltU52OAE2bCv3SjHJwKr9MTi7jmQpyxLKDeXa2stCY8mV wIxIfbDgf0UYBqlcADvWUgUP15zssfz/Z+JvRnHAzE/WH/QsyYw= -----END CERTIFICATE-----Generated at Sat Aug 23 15:30:31 2025 by rpki-client