$ rpki-client -vvf repo-rpki.idnic.net/repo/12307390-6ef3-4476-a6aa-d0c5783e1f37/0/8A05EBF58BEC96D946EE85F0F0F85701A0A72799.mft File: 8A05EBF58BEC96D946EE85F0F0F85701A0A72799.mft (raw, json) Hash identifier: B6OvypccXQKk8duepTRuHx6A/EWTekEAXJYrA51VEAg= Subject key identifier: 96:0A:B2:FA:80:96:C3:11:EB:34:DC:A3:B5:1E:1A:00:FD:BD:A2:DB Authority key identifier: 8A:05:EB:F5:8B:EC:96:D9:46:EE:85:F0:F0:F8:57:01:A0:A7:27:99 Certificate issuer: /CN=8A05EBF58BEC96D946EE85F0F0F85701A0A72799 Certificate serial: 4B4C6462339A51767FE76FBCE654DE3F73470012 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8A05EBF58BEC96D946EE85F0F0F85701A0A72799.cer Subject info access: rsync://repo-rpki.idnic.net/repo/12307390-6ef3-4476-a6aa-d0c5783e1f37/0/8A05EBF58BEC96D946EE85F0F0F85701A0A72799.mft Manifest number: 0500 Signing time: Sat 23 Aug 2025 19:11:10 +0000 Manifest this update: Sat 23 Aug 2025 19:06:10 +0000 Manifest next update: Wed 27 Aug 2025 02:00:10 +0000 Files and hashes: 1: 3130332e3133392e34372e302f32342d3234203d3e203137393935.roa (hash: hRDdGequ+GhEEqBrX8O9Zq6WRslymD5ehiejKAFbvr0=) 2: 8A05EBF58BEC96D946EE85F0F0F85701A0A72799.crl (hash: RTX0owGIVmX8PoiVwcr+S/gou+uWW1Fyl2+civChHGU=) 3: 3130332e3133392e34362e302f32342d3234203d3e203137393935.roa (hash: hthNpAwJxjCDLni6mv2Gc1l+BPz0lcv9dxQLklW+A64=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/12307390-6ef3-4476-a6aa-d0c5783e1f37/0/8A05EBF58BEC96D946EE85F0F0F85701A0A72799.crl rsync://repo-rpki.idnic.net/repo/12307390-6ef3-4476-a6aa-d0c5783e1f37/0/8A05EBF58BEC96D946EE85F0F0F85701A0A72799.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8A05EBF58BEC96D946EE85F0F0F85701A0A72799.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 26 Aug 2025 23:42:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4b:4c:64:62:33:9a:51:76:7f:e7:6f:bc:e6:54:de:3f:73:47:00:12 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8A05EBF58BEC96D946EE85F0F0F85701A0A72799 Validity Not Before: Aug 23 19:06:10 2025 GMT Not After : Aug 27 02:00:10 2025 GMT Subject: CN=960AB2FA8096C311EB34DCA3B51E1A00FDBDA2DB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:e9:7c:51:86:50:a0:d7:dd:a9:a6:c3:92:9d: 91:55:13:0e:10:d6:08:d2:c1:fe:2d:98:2f:43:00: 71:87:56:53:a3:5a:51:d3:85:81:89:fe:5d:41:cc: 96:27:50:f0:43:1e:96:ee:cc:a3:9b:52:01:3f:4d: 8c:81:44:4e:11:dd:d8:5b:b8:53:e5:7e:09:7e:57: e5:10:4d:8a:36:f5:cb:1c:2f:23:6d:11:a2:66:6e: ab:cc:0f:87:52:43:6b:6b:db:58:ea:6f:f9:9b:e5: 14:6f:48:0f:aa:b6:67:eb:ff:07:ff:57:5a:f9:ff: 90:33:d4:c1:df:3c:72:5f:6c:0c:a0:f8:46:9e:b8: 2c:41:c1:cb:26:e0:49:0e:30:1b:b7:b8:fb:71:77: b0:c3:0f:28:b6:83:cd:75:37:ad:85:82:60:4a:1c: 2c:36:34:1d:1a:ee:54:f9:5e:88:c1:73:c1:8f:8a: 00:fd:d0:74:66:c6:a1:e2:1a:80:22:d5:a1:eb:84: be:37:11:6e:a5:4f:9c:e1:74:75:66:ee:0d:d0:85: d7:78:0e:da:9b:25:df:2b:5f:fd:6d:86:17:0f:bb: 1d:2b:71:c4:c4:d5:1d:67:e6:be:03:97:bd:b9:63: ad:ab:e7:46:48:d9:c2:45:44:47:a2:0e:44:b2:ca: cc:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:0A:B2:FA:80:96:C3:11:EB:34:DC:A3:B5:1E:1A:00:FD:BD:A2:DB X509v3 Authority Key Identifier: keyid:8A:05:EB:F5:8B:EC:96:D9:46:EE:85:F0:F0:F8:57:01:A0:A7:27:99 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/12307390-6ef3-4476-a6aa-d0c5783e1f37/0/8A05EBF58BEC96D946EE85F0F0F85701A0A72799.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8A05EBF58BEC96D946EE85F0F0F85701A0A72799.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/12307390-6ef3-4476-a6aa-d0c5783e1f37/0/8A05EBF58BEC96D946EE85F0F0F85701A0A72799.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5b:56:d2:ac:da:22:9e:98:51:3a:14:1e:01:c4:3c:6e:e3:fa: 64:98:6f:b6:8d:14:b5:b0:e7:f3:76:85:f3:40:03:3d:c4:1f: fc:b1:dd:3e:cb:da:01:e3:ad:cc:e6:7d:00:e1:82:8d:e3:51: 96:88:36:bc:a4:7e:44:e1:d8:8d:a9:83:d7:f6:40:93:a4:b9: f8:c8:2e:45:2a:9c:01:90:f0:c8:ad:25:20:64:36:e3:f4:57: 35:34:2d:ad:47:69:81:22:07:4d:0b:8e:8a:dd:cd:b0:89:81: ac:12:67:b7:92:f2:c7:b4:fb:0b:b4:27:69:ff:09:b1:b6:43: ab:bd:2a:62:4e:e4:d4:8a:68:d4:57:43:0f:88:8a:1b:88:15: 9b:6c:c3:af:83:f7:ce:de:8f:81:6e:c7:39:54:e0:03:16:3f: 4a:df:9c:dc:72:f7:4a:4d:c8:23:03:a0:3d:93:a4:44:04:15: e6:d5:02:b6:3b:ce:8f:31:d3:27:19:79:1c:9a:8d:6b:fb:ca: 8c:d8:cf:76:c4:a2:6a:d3:c1:57:58:de:51:cd:ea:02:2a:79: dc:85:05:f0:1a:a1:dc:90:cb:13:82:9a:a6:52:2d:77:14:81: 1e:6f:59:88:b4:09:d0:2d:06:35:87:a3:b3:00:6a:66:f3:1b: fe:d5:12:53 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUS0xkYjOaUXZ/52+85lTeP3NHABIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEEwNUVCRjU4QkVDOTZEOTQ2RUU4NUYwRjBGODU3MDFB MEE3Mjc5OTAeFw0yNTA4MjMxOTA2MTBaFw0yNTA4MjcwMjAwMTBaMDMxMTAvBgNV BAMTKDk2MEFCMkZBODA5NkMzMTFFQjM0RENBM0I1MUUxQTAwRkRCREEyREIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDX6XxRhlCg192ppsOSnZFVEw4Q 1gjSwf4tmC9DAHGHVlOjWlHThYGJ/l1BzJYnUPBDHpbuzKObUgE/TYyBRE4R3dhb uFPlfgl+V+UQTYo29cscLyNtEaJmbqvMD4dSQ2tr21jqb/mb5RRvSA+qtmfr/wf/ V1r5/5Az1MHfPHJfbAyg+EaeuCxBwcsm4EkOMBu3uPtxd7DDDyi2g811N62FgmBK HCw2NB0a7lT5XojBc8GPigD90HRmxqHiGoAi1aHrhL43EW6lT5zhdHVm7g3Qhdd4 DtqbJd8rX/1thhcPux0rccTE1R1n5r4Dl725Y62r50ZI2cJFREeiDkSyysy5AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUlgqy+oCWwxHrNNyjtR4aAP29otswHwYDVR0j BBgwFoAUigXr9YvsltlG7oXw8PhXAaCnJ5kwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x MjMwNzM5MC02ZWYzLTQ0NzYtYTZhYS1kMGM1NzgzZTFmMzcvMC84QTA1RUJGNThC RUM5NkQ5NDZFRTg1RjBGMEY4NTcwMUEwQTcyNzk5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOEEwNUVCRjU4QkVDOTZEOTQ2RUU4NUYwRjBGODU3MDFBMEE3 Mjc5OS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMTIzMDczOTAtNmVmMy00NDc2LWE2 YWEtZDBjNTc4M2UxZjM3LzAvOEEwNUVCRjU4QkVDOTZEOTQ2RUU4NUYwRjBGODU3 MDFBMEE3Mjc5OS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFtW0qzaIp6YUToUHgHEPG7j+mSYb7aNFLWw 5/N2hfNAAz3EH/yx3T7L2gHjrczmfQDhgo3jUZaINrykfkTh2I2pg9f2QJOkufjI LkUqnAGQ8MitJSBkNuP0VzU0La1HaYEiB00LjordzbCJgawSZ7eS8se0+wu0J2n/ CbG2Q6u9KmJO5NSKaNRXQw+IihuIFZtsw6+D987ej4FuxzlU4AMWP0rfnNxy90pN yCMDoD2TpEQEFebVArY7zo8x0ycZeRyajWv7yozYz3bEomrTwVdY3lHN6gIqedyF BfAaodyQyxOCmqZSLXcUgR5vWYi0CdAtBjWHo7MAambzG/7VElM= -----END CERTIFICATE-----Generated at Sat Aug 23 22:34:11 2025 by rpki-client