$ rpki-client -vvf repo-rpki.idnic.net/repo/2d2a5b51-bc00-4d6b-8761-c7d0d3f6de12/0/8C5FA2EBD7AF40393883FB08E71BDF41AAE20F57.mft File: 8C5FA2EBD7AF40393883FB08E71BDF41AAE20F57.mft (raw, json) Hash identifier: oMQfXTk1ZUCwUukMbuwYgVS4B7tTUHMDD/9r05a2OcU= Subject key identifier: FC:43:06:FF:2A:72:81:E6:34:87:AE:37:22:83:FB:B1:64:E3:1B:2B Authority key identifier: 8C:5F:A2:EB:D7:AF:40:39:38:83:FB:08:E7:1B:DF:41:AA:E2:0F:57 Certificate issuer: /CN=8C5FA2EBD7AF40393883FB08E71BDF41AAE20F57 Certificate serial: 1CA74862068EDDA40F54F44F78FDA9C74D5C0095 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8C5FA2EBD7AF40393883FB08E71BDF41AAE20F57.cer Subject info access: rsync://repo-rpki.idnic.net/repo/2d2a5b51-bc00-4d6b-8761-c7d0d3f6de12/0/8C5FA2EBD7AF40393883FB08E71BDF41AAE20F57.mft Manifest number: 04A9 Signing time: Thu 21 Aug 2025 14:11:27 +0000 Manifest this update: Thu 21 Aug 2025 14:06:27 +0000 Manifest next update: Sun 24 Aug 2025 20:02:27 +0000 Files and hashes: 1: 3130332e3131382e3132342e302f32322d3234203d3e20313337333736.roa (hash: GgQGIVctlCvNlOfS2rEwMFV2kj5ohQAxfF74xcz3/1E=) 2: 8C5FA2EBD7AF40393883FB08E71BDF41AAE20F57.crl (hash: cBtSgaIGSA2f+MfEjn5GwDTZ/oiDjh/U8NS34MQIug8=) 3: 323430333a333163303a3a2f33322d3332203d3e20313337333736.roa (hash: ZFgZf5/tUMHm0Xvm8MvmyqUsY/m95WPUFwA/Bk3NXco=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/2d2a5b51-bc00-4d6b-8761-c7d0d3f6de12/0/8C5FA2EBD7AF40393883FB08E71BDF41AAE20F57.crl rsync://repo-rpki.idnic.net/repo/2d2a5b51-bc00-4d6b-8761-c7d0d3f6de12/0/8C5FA2EBD7AF40393883FB08E71BDF41AAE20F57.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8C5FA2EBD7AF40393883FB08E71BDF41AAE20F57.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 24 Aug 2025 20:02:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1c:a7:48:62:06:8e:dd:a4:0f:54:f4:4f:78:fd:a9:c7:4d:5c:00:95 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8C5FA2EBD7AF40393883FB08E71BDF41AAE20F57 Validity Not Before: Aug 21 14:06:27 2025 GMT Not After : Aug 24 20:02:27 2025 GMT Subject: CN=FC4306FF2A7281E63487AE372283FBB164E31B2B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:aa:82:89:37:ec:1b:3b:c2:7c:a0:2d:7b:bd: 87:31:d0:b8:10:fb:61:c5:57:58:29:85:9a:93:6e: 8c:1d:00:53:84:e9:c5:c1:d7:11:38:48:b5:07:ac: 61:58:71:6c:ad:8e:fc:bc:b1:88:77:5d:69:e6:39: 14:ee:84:95:20:45:51:7f:07:8e:c2:fe:83:3a:14: d0:a9:0f:1f:8f:17:8e:3e:35:93:43:90:e1:91:59: 42:6a:dd:bf:ad:d0:57:47:f2:9a:ee:52:0f:46:65: 43:21:fe:99:d9:4c:82:3d:9a:f7:52:2d:65:af:1b: 44:ef:ea:d2:21:8c:e2:f5:24:54:7b:a6:ce:4d:38: 20:57:9e:db:a3:37:80:f4:00:ac:a9:8e:b8:7a:ff: e0:b9:14:d4:75:ad:23:09:76:5e:06:c5:cd:84:fd: b0:e2:bf:ef:4c:d1:69:f4:63:f9:f6:6c:4c:25:f6: 05:3c:d9:c1:3e:a4:83:eb:7e:c0:dd:c2:67:da:ff: 86:37:16:44:b1:06:f2:83:43:6a:1f:4d:f0:41:00: 89:95:5c:9d:f6:4a:b4:e4:ab:2b:66:e2:a1:88:1e: 36:8c:b3:0f:4c:fa:e4:d9:6b:9a:5a:2a:c9:00:5b: 73:37:15:1e:88:88:f9:c1:ca:76:d3:13:ae:61:10: 7c:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FC:43:06:FF:2A:72:81:E6:34:87:AE:37:22:83:FB:B1:64:E3:1B:2B X509v3 Authority Key Identifier: keyid:8C:5F:A2:EB:D7:AF:40:39:38:83:FB:08:E7:1B:DF:41:AA:E2:0F:57 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/2d2a5b51-bc00-4d6b-8761-c7d0d3f6de12/0/8C5FA2EBD7AF40393883FB08E71BDF41AAE20F57.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8C5FA2EBD7AF40393883FB08E71BDF41AAE20F57.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/2d2a5b51-bc00-4d6b-8761-c7d0d3f6de12/0/8C5FA2EBD7AF40393883FB08E71BDF41AAE20F57.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 94:60:6f:ca:f2:3b:fd:30:ed:a5:99:f3:a3:60:26:15:63:af: 39:3b:f5:a8:22:8c:b5:ce:ad:fc:88:41:1d:38:c6:89:9c:17: 91:c6:7f:ee:10:0b:48:02:0b:49:69:02:db:4f:1c:1c:35:49: a1:72:78:69:04:2d:53:ba:d6:b0:0f:74:7a:5a:ca:fc:1e:2d: 7f:0d:f1:93:ec:0f:ec:de:2a:b1:e4:f0:7c:1e:23:70:12:4e: 5e:56:d8:81:7f:c4:5c:af:b2:dc:29:09:b1:48:24:80:86:51: 65:8f:43:98:97:7c:4c:51:93:5a:02:aa:12:27:6c:87:7b:32: 23:3d:5f:e0:8b:de:eb:60:5a:5e:3b:66:b3:0c:66:af:eb:df: 43:1c:4f:87:7f:39:6f:38:0e:02:da:23:be:ca:5d:3d:97:6e: b1:01:a9:a1:87:c7:96:06:8f:cb:9e:ca:db:e2:70:d8:e1:af: 08:a0:a6:1b:dc:36:12:42:13:ec:82:de:3b:50:17:8c:18:c8: 4a:0d:d2:12:d3:c8:2b:8b:32:5e:97:5c:bc:60:2b:bc:f6:23: 4e:7f:18:29:db:d2:73:01:c6:a2:29:2c:78:9b:86:88:25:b7: 05:5a:e3:83:15:de:ba:c4:a8:f4:11:2c:16:8f:a0:14:45:f4: ab:ac:a2:dd -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUHKdIYgaO3aQPVPRPeP2px01cAJUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEM1RkEyRUJEN0FGNDAzOTM4ODNGQjA4RTcxQkRGNDFB QUUyMEY1NzAeFw0yNTA4MjExNDA2MjdaFw0yNTA4MjQyMDAyMjdaMDMxMTAvBgNV BAMTKEZDNDMwNkZGMkE3MjgxRTYzNDg3QUUzNzIyODNGQkIxNjRFMzFCMkIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+qoKJN+wbO8J8oC17vYcx0LgQ +2HFV1gphZqTbowdAFOE6cXB1xE4SLUHrGFYcWytjvy8sYh3XWnmORTuhJUgRVF/ B47C/oM6FNCpDx+PF44+NZNDkOGRWUJq3b+t0FdH8pruUg9GZUMh/pnZTII9mvdS LWWvG0Tv6tIhjOL1JFR7ps5NOCBXntujN4D0AKypjrh6/+C5FNR1rSMJdl4Gxc2E /bDiv+9M0Wn0Y/n2bEwl9gU82cE+pIPrfsDdwmfa/4Y3FkSxBvKDQ2ofTfBBAImV XJ32SrTkqytm4qGIHjaMsw9M+uTZa5paKskAW3M3FR6IiPnBynbTE65hEHx1AgMB AAGjggI8MIICODAdBgNVHQ4EFgQU/EMG/ypygeY0h643IoP7sWTjGyswHwYDVR0j BBgwFoAUjF+i69evQDk4g/sI5xvfQariD1cwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y ZDJhNWI1MS1iYzAwLTRkNmItODc2MS1jN2QwZDNmNmRlMTIvMC84QzVGQTJFQkQ3 QUY0MDM5Mzg4M0ZCMDhFNzFCREY0MUFBRTIwRjU3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOEM1RkEyRUJEN0FGNDAzOTM4ODNGQjA4RTcxQkRGNDFBQUUy MEY1Ny5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMmQyYTViNTEtYmMwMC00ZDZiLTg3 NjEtYzdkMGQzZjZkZTEyLzAvOEM1RkEyRUJEN0FGNDAzOTM4ODNGQjA4RTcxQkRG NDFBQUUyMEY1Ny5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJRgb8ryO/0w7aWZ86NgJhVjrzk79agijLXO rfyIQR04xomcF5HGf+4QC0gCC0lpAttPHBw1SaFyeGkELVO61rAPdHpayvweLX8N 8ZPsD+zeKrHk8HweI3ASTl5W2IF/xFyvstwpCbFIJICGUWWPQ5iXfExRk1oCqhIn bId7MiM9X+CL3utgWl47ZrMMZq/r30McT4d/OW84DgLaI77KXT2XbrEBqaGHx5YG j8ueytvicNjhrwigphvcNhJCE+yC3jtQF4wYyEoN0hLTyCuLMl6XXLxgK7z2I05/ GCnb0nMBxqIpLHibhogltwVa44MV3rrEqPQRLBaPoBRF9Kusot0= -----END CERTIFICATE-----Generated at Sat Aug 23 11:57:27 2025 by rpki-client