$ rpki-client -vvf repo-rpki.idnic.net/repo/14758e8e-49c8-48b8-bdcb-35339e2ae601/0/8F9164714A1B3B906CF8A8B371F342EBA3540CD9.mft File: 8F9164714A1B3B906CF8A8B371F342EBA3540CD9.mft (raw, json) Hash identifier: hNnklQZUGCO12xMHvC/3UkacPCZTULDJWvxVt0fX0f8= Subject key identifier: 7E:7A:AB:8E:BA:D2:17:85:CA:4F:19:4F:D6:ED:98:18:82:5A:8B:84 Authority key identifier: 8F:91:64:71:4A:1B:3B:90:6C:F8:A8:B3:71:F3:42:EB:A3:54:0C:D9 Certificate issuer: /CN=8F9164714A1B3B906CF8A8B371F342EBA3540CD9 Certificate serial: 318C504FFCE967CF2D75BD790A05D48D9001FB1B Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8F9164714A1B3B906CF8A8B371F342EBA3540CD9.cer Subject info access: rsync://repo-rpki.idnic.net/repo/14758e8e-49c8-48b8-bdcb-35339e2ae601/0/8F9164714A1B3B906CF8A8B371F342EBA3540CD9.mft Manifest number: 01F9 Signing time: Fri 22 Aug 2025 23:30:35 +0000 Manifest this update: Fri 22 Aug 2025 23:25:35 +0000 Manifest next update: Tue 26 Aug 2025 10:24:35 +0000 Files and hashes: 1: 8F9164714A1B3B906CF8A8B371F342EBA3540CD9.crl (hash: JYRjIJa8qccIJDgimgmVO0gihP71Q80u0AqAyZ9vECk=) 2: 3130332e3138382e3131392e302f32342d3234203d3e20313439373435.roa (hash: VHhhP8m98Q6XFX6o9Io0DEj5+ACOMVpb0NESi8BC7x8=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/14758e8e-49c8-48b8-bdcb-35339e2ae601/0/8F9164714A1B3B906CF8A8B371F342EBA3540CD9.crl rsync://repo-rpki.idnic.net/repo/14758e8e-49c8-48b8-bdcb-35339e2ae601/0/8F9164714A1B3B906CF8A8B371F342EBA3540CD9.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8F9164714A1B3B906CF8A8B371F342EBA3540CD9.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 26 Aug 2025 10:19:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 31:8c:50:4f:fc:e9:67:cf:2d:75:bd:79:0a:05:d4:8d:90:01:fb:1b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8F9164714A1B3B906CF8A8B371F342EBA3540CD9 Validity Not Before: Aug 22 23:25:35 2025 GMT Not After : Aug 26 10:24:35 2025 GMT Subject: CN=7E7AAB8EBAD21785CA4F194FD6ED9818825A8B84 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:06:2f:05:e3:40:5a:df:60:b8:22:1c:b6:05: 2f:cc:0a:63:3d:83:ab:38:54:70:10:ec:36:6c:de: 28:64:f4:27:e6:f9:c3:3a:d6:33:4d:79:02:61:3c: 94:da:0b:c1:d2:55:64:76:5c:4a:c1:96:fa:34:de: 7f:4b:37:10:c4:58:5b:ea:19:38:ba:b7:c3:87:15: 25:7b:b9:81:3d:4c:56:2b:12:e1:a2:f5:db:65:78: 7f:10:c9:66:b3:aa:9e:c1:82:31:03:43:68:4c:91: e3:a5:8b:d0:bb:14:90:7b:fc:de:74:c5:cd:51:81: cd:98:2f:15:a6:e8:65:d3:09:68:e6:b6:20:b5:79: 1c:46:b3:d2:22:9c:08:32:65:d5:b2:3d:f3:2a:a4: bf:cc:59:93:0d:86:c0:68:b9:12:df:b0:76:a0:88: 3a:70:54:19:27:53:45:17:4d:1a:57:34:fc:06:cd: 86:86:e8:01:c9:fc:5f:d7:ab:af:da:be:b9:69:f1: 69:cf:64:07:6c:69:ec:fc:b0:75:76:93:26:ed:ea: ed:c2:52:d0:35:ea:67:e9:1d:59:ee:ea:91:cc:b1: 47:08:bd:c1:92:7b:30:98:44:f1:9d:67:6d:ca:87: 35:cc:b2:b8:df:20:74:1d:e2:b4:a7:0c:c1:c9:87: 74:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7E:7A:AB:8E:BA:D2:17:85:CA:4F:19:4F:D6:ED:98:18:82:5A:8B:84 X509v3 Authority Key Identifier: keyid:8F:91:64:71:4A:1B:3B:90:6C:F8:A8:B3:71:F3:42:EB:A3:54:0C:D9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/14758e8e-49c8-48b8-bdcb-35339e2ae601/0/8F9164714A1B3B906CF8A8B371F342EBA3540CD9.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8F9164714A1B3B906CF8A8B371F342EBA3540CD9.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/14758e8e-49c8-48b8-bdcb-35339e2ae601/0/8F9164714A1B3B906CF8A8B371F342EBA3540CD9.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0b:c0:63:3b:95:4c:df:1d:2d:d2:96:c3:8c:fd:48:bb:7f:e0: 88:61:00:76:fb:dd:2e:a5:15:e7:b2:55:4f:8c:b7:f8:16:44: ea:de:37:a4:8d:a1:c5:a2:f1:d6:a6:29:02:21:a5:9d:7d:99: 9b:59:8c:16:0b:89:55:0d:93:f8:3a:d2:e2:a2:eb:ba:75:1c: 32:fb:f5:ad:18:4b:60:45:d4:9a:d1:e9:aa:01:c8:5d:d0:82: ed:34:55:b6:59:bb:93:b8:e5:69:e8:91:82:ef:b3:1f:3c:2a: 21:72:20:e1:95:88:65:9b:12:59:c6:2d:5f:2e:d6:9b:87:88: 3f:a8:fe:3f:5a:bf:46:30:4d:01:04:7f:68:09:80:d5:9c:29: ff:e5:2a:90:bc:88:40:c6:22:c1:06:3e:49:4f:37:13:39:4b: b2:05:b0:ef:22:50:31:c2:96:78:76:64:b7:33:d0:78:31:16: d2:76:ef:84:0f:87:a8:fe:61:82:da:02:d0:7e:e0:64:58:40: 37:9f:62:10:7a:81:f9:12:75:7a:47:20:b7:5e:50:87:4d:e3: 4c:25:d2:e7:ca:8a:ea:c2:97:d3:ee:c8:53:63:6b:34:f9:a0: a9:ac:03:ef:23:be:e6:00:c3:e9:50:09:43:09:5f:05:42:f4: 54:ce:90:5b -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUMYxQT/zpZ88tdb15CgXUjZAB+xswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEY5MTY0NzE0QTFCM0I5MDZDRjhBOEIzNzFGMzQyRUJB MzU0MENEOTAeFw0yNTA4MjIyMzI1MzVaFw0yNTA4MjYxMDI0MzVaMDMxMTAvBgNV BAMTKDdFN0FBQjhFQkFEMjE3ODVDQTRGMTk0RkQ2RUQ5ODE4ODI1QThCODQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDbBi8F40Ba32C4Ihy2BS/MCmM9 g6s4VHAQ7DZs3ihk9Cfm+cM61jNNeQJhPJTaC8HSVWR2XErBlvo03n9LNxDEWFvq GTi6t8OHFSV7uYE9TFYrEuGi9dtleH8QyWazqp7BgjEDQ2hMkeOli9C7FJB7/N50 xc1Rgc2YLxWm6GXTCWjmtiC1eRxGs9IinAgyZdWyPfMqpL/MWZMNhsBouRLfsHag iDpwVBknU0UXTRpXNPwGzYaG6AHJ/F/Xq6/avrlp8WnPZAdsaez8sHV2kybt6u3C UtA16mfpHVnu6pHMsUcIvcGSezCYRPGdZ23KhzXMsrjfIHQd4rSnDMHJh3RXAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUfnqrjrrSF4XKTxlP1u2YGIJai4QwHwYDVR0j BBgwFoAUj5FkcUobO5Bs+KizcfNC66NUDNkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x NDc1OGU4ZS00OWM4LTQ4YjgtYmRjYi0zNTMzOWUyYWU2MDEvMC84RjkxNjQ3MTRB MUIzQjkwNkNGOEE4QjM3MUYzNDJFQkEzNTQwQ0Q5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOEY5MTY0NzE0QTFCM0I5MDZDRjhBOEIzNzFGMzQyRUJBMzU0 MENEOS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMTQ3NThlOGUtNDljOC00OGI4LWJk Y2ItMzUzMzllMmFlNjAxLzAvOEY5MTY0NzE0QTFCM0I5MDZDRjhBOEIzNzFGMzQy RUJBMzU0MENEOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAvAYzuVTN8dLdKWw4z9SLt/4IhhAHb73S6l FeeyVU+Mt/gWROreN6SNocWi8damKQIhpZ19mZtZjBYLiVUNk/g60uKi67p1HDL7 9a0YS2BF1JrR6aoByF3Qgu00VbZZu5O45WnokYLvsx88KiFyIOGViGWbElnGLV8u 1puHiD+o/j9av0YwTQEEf2gJgNWcKf/lKpC8iEDGIsEGPklPNxM5S7IFsO8iUDHC lnh2ZLcz0HgxFtJ274QPh6j+YYLaAtB+4GRYQDefYhB6gfkSdXpHILdeUIdN40wl 0ufKiurCl9PuyFNjazT5oKmsA+8jvuYAw+lQCUMJXwVC9FTOkFs= -----END CERTIFICATE-----Generated at Sat Aug 23 14:02:56 2025 by rpki-client