$ rpki-client -vvf repo-rpki.idnic.net/repo/34e2bf09-5f42-4b65-a42d-63d0796d206c/0/8C3E44A2E2B475D5CF4A48E52D17290001FEFECA.mft File: 8C3E44A2E2B475D5CF4A48E52D17290001FEFECA.mft (raw, json) Hash identifier: UqTHqc8kgUH43DyEFHVO4lILqv2Oe4OUNpnI5n9I0nU= Subject key identifier: 51:4E:3C:E4:E7:4D:FA:7F:C8:C9:CA:5F:52:07:02:81:8E:30:3D:4E Authority key identifier: 8C:3E:44:A2:E2:B4:75:D5:CF:4A:48:E5:2D:17:29:00:01:FE:FE:CA Certificate issuer: /CN=8C3E44A2E2B475D5CF4A48E52D17290001FEFECA Certificate serial: 69B86DE1F7355C772D47239FCAB58CE3E312A736 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8C3E44A2E2B475D5CF4A48E52D17290001FEFECA.cer Subject info access: rsync://repo-rpki.idnic.net/repo/34e2bf09-5f42-4b65-a42d-63d0796d206c/0/8C3E44A2E2B475D5CF4A48E52D17290001FEFECA.mft Manifest number: 0508 Signing time: Thu 21 Aug 2025 18:32:14 +0000 Manifest this update: Thu 21 Aug 2025 18:27:14 +0000 Manifest next update: Sun 24 Aug 2025 23:10:14 +0000 Files and hashes: 1: 34332e3233312e3132382e302f32332d3233203d3e203338373838.roa (hash: HFx27am61y/dC1xdTadXPgOw5A9a+PEjL0futSZShAU=) 2: 3130332e3234322e3138312e302f32342d3234203d3e203338373838.roa (hash: i565en58aZkxitE/Cu7dj7vQtPe24rOc0XFo1zdj2pA=) 3: 3130332e372e302e302f32342d3234203d3e203338373838.roa (hash: IvhePbxETJJ1An12hekeGcMrYJecR0U54GWOfDVzXpo=) 4: 3130332e372e312e302f32342d3234203d3e203338373838.roa (hash: HfReQfR8KQgqYxrjCjLONRll8cJTpbYph9s5PnSext8=) 5: 34332e3233312e3132392e302f32342d3234203d3e203338373838.roa (hash: W5Zb76xYohKVMN4oDjg1HwPWp43mgnWE5orvLBb5SkM=) 6: 34332e3233302e342e302f32342d3234203d3e203338373838.roa (hash: Myo0yUY2zYBlmDu7ifkTtwfEDTywRzZJiBzIgMz4kyk=) 7: 34332e3233312e3132382e302f32342d3234203d3e203338373838.roa (hash: lmYVrCn9BeJjLwZ83vYZIK3fLJEIHwntZ3WH1J4i7Cc=) 8: 3130332e372e302e302f32332d3233203d3e203338373838.roa (hash: eYJSZ6BNvJdcwOjXxyxNY4HDMCsMbaLoRNn+0CbiAds=) 9: 34332e3233302e372e302f32342d3234203d3e203338373838.roa (hash: i3HQaU7A5T+hugQmUCoVWplcF5RYtJ+OjDq/WGotyFM=) 10: 3130332e3234322e3138302e302f32342d3234203d3e203338373838.roa (hash: J6znwF/VIOIQq7nf+/cVdXFnP4yNGPdAl3m1qZHQzpE=) 11: 3130332e3234322e3138302e302f32332d3233203d3e203338373838.roa (hash: Q4FCJx2xdQyXWuG/Mkdlbm+EYQuJWHSMRXEQhaDwxBc=) 12: 8C3E44A2E2B475D5CF4A48E52D17290001FEFECA.crl (hash: Imd8goXzLMzPdNSSFl2fRBB32nt9MeGsYzxMOOKQaWg=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/34e2bf09-5f42-4b65-a42d-63d0796d206c/0/8C3E44A2E2B475D5CF4A48E52D17290001FEFECA.crl rsync://repo-rpki.idnic.net/repo/34e2bf09-5f42-4b65-a42d-63d0796d206c/0/8C3E44A2E2B475D5CF4A48E52D17290001FEFECA.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8C3E44A2E2B475D5CF4A48E52D17290001FEFECA.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 24 Aug 2025 23:10:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 69:b8:6d:e1:f7:35:5c:77:2d:47:23:9f:ca:b5:8c:e3:e3:12:a7:36 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8C3E44A2E2B475D5CF4A48E52D17290001FEFECA Validity Not Before: Aug 21 18:27:14 2025 GMT Not After : Aug 24 23:10:14 2025 GMT Subject: CN=514E3CE4E74DFA7FC8C9CA5F520702818E303D4E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:1a:70:f4:bc:00:63:1b:31:25:82:de:c2:38: ec:06:96:e6:04:ff:d7:d8:46:d6:a8:8b:e2:71:1a: 58:c9:2f:9c:37:1e:65:31:74:37:c1:92:88:3d:ab: 61:fd:93:3e:d3:43:3e:58:1f:70:41:b3:db:d1:ad: 53:fe:95:95:44:cb:f6:5c:4a:be:85:d0:cc:28:54: db:7f:78:86:57:fd:f3:61:c4:64:c8:b1:5f:1a:85: 30:03:46:9b:0f:09:4a:3b:6a:b0:a3:79:6a:90:27: 2e:23:4d:00:a2:ae:5b:54:86:18:c1:ac:3f:c4:a7: 6d:06:d9:05:a8:19:f4:cb:67:ca:74:ec:42:6e:63: ac:1a:89:81:ed:b4:7c:86:6c:79:08:ad:4f:74:bb: 31:08:41:77:35:3b:fc:4b:5d:d7:45:a0:b5:ff:39: a8:ce:9a:a0:6c:03:0b:af:9b:98:d9:79:1c:7d:65: 39:68:f8:91:2b:d6:7a:e9:30:98:ee:ce:79:2f:50: c5:f0:d2:88:2c:36:98:80:08:7c:63:e0:a9:0f:d3: 9a:d0:4e:80:42:35:ac:d6:56:69:c4:89:94:2a:51: e0:8d:99:ae:d4:65:c2:ea:c3:e2:8c:6e:4d:93:57: 21:75:1d:0e:ed:31:9c:8b:28:71:7b:1e:ff:46:8c: e4:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 51:4E:3C:E4:E7:4D:FA:7F:C8:C9:CA:5F:52:07:02:81:8E:30:3D:4E X509v3 Authority Key Identifier: keyid:8C:3E:44:A2:E2:B4:75:D5:CF:4A:48:E5:2D:17:29:00:01:FE:FE:CA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/34e2bf09-5f42-4b65-a42d-63d0796d206c/0/8C3E44A2E2B475D5CF4A48E52D17290001FEFECA.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8C3E44A2E2B475D5CF4A48E52D17290001FEFECA.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/34e2bf09-5f42-4b65-a42d-63d0796d206c/0/8C3E44A2E2B475D5CF4A48E52D17290001FEFECA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 96:30:73:d3:06:72:0f:0f:6b:19:b3:d4:a6:54:3d:5e:de:ad: 1e:8d:e3:2a:63:51:d8:4c:2b:54:66:e4:12:61:99:16:ca:ea: ae:30:a5:e4:2f:cf:2d:c1:8c:fe:99:c9:79:74:fc:07:94:e7: f8:fc:c0:be:a0:c5:31:2f:bb:98:9b:13:03:a0:e2:df:e5:d2: 75:63:77:d4:04:f7:36:77:49:7b:5d:67:05:7d:ef:ca:4d:eb: 7e:2b:85:6b:a6:ee:c8:f7:e8:6a:f2:bb:e1:ea:6e:bc:9f:c5: d7:3e:83:f0:a2:30:e4:a8:a5:d2:e6:b3:7f:f4:39:34:da:bc: 02:dd:5b:d1:73:4e:80:40:55:ea:76:cf:19:1c:8a:44:0e:b5: a7:a2:51:ff:ba:84:3b:7a:49:ad:a2:b7:05:fd:40:04:0e:c4: 4d:55:99:8b:cf:44:2b:5a:4c:f8:26:d4:6a:23:66:ed:51:5b: db:59:5c:31:96:de:30:5c:1d:7e:e9:ce:56:2a:64:c9:e9:a0: 73:ad:c5:6b:93:0f:48:67:e5:62:b0:4b:01:14:50:cb:3a:1f: b5:86:a6:26:15:ac:5a:21:2f:3c:28:f8:42:70:4d:d5:69:fc: 0e:09:1c:1e:41:ad:63:30:cb:f6:f4:bc:df:7e:49:ab:ec:c4: 2b:7a:8a:c1 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUabht4fc1XHctRyOfyrWM4+MSpzYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEMzRTQ0QTJFMkI0NzVENUNGNEE0OEU1MkQxNzI5MDAw MUZFRkVDQTAeFw0yNTA4MjExODI3MTRaFw0yNTA4MjQyMzEwMTRaMDMxMTAvBgNV BAMTKDUxNEUzQ0U0RTc0REZBN0ZDOEM5Q0E1RjUyMDcwMjgxOEUzMDNENEUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDIGnD0vABjGzElgt7COOwGluYE /9fYRtaoi+JxGljJL5w3HmUxdDfBkog9q2H9kz7TQz5YH3BBs9vRrVP+lZVEy/Zc Sr6F0MwoVNt/eIZX/fNhxGTIsV8ahTADRpsPCUo7arCjeWqQJy4jTQCirltUhhjB rD/Ep20G2QWoGfTLZ8p07EJuY6waiYHttHyGbHkIrU90uzEIQXc1O/xLXddFoLX/ OajOmqBsAwuvm5jZeRx9ZTlo+JEr1nrpMJjuznkvUMXw0ogsNpiACHxj4KkP05rQ ToBCNazWVmnEiZQqUeCNma7UZcLqw+KMbk2TVyF1HQ7tMZyLKHF7Hv9GjOSxAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUUU485OdN+n/IycpfUgcCgY4wPU4wHwYDVR0j BBgwFoAUjD5EouK0ddXPSkjlLRcpAAH+/sowDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z NGUyYmYwOS01ZjQyLTRiNjUtYTQyZC02M2QwNzk2ZDIwNmMvMC84QzNFNDRBMkUy QjQ3NUQ1Q0Y0QTQ4RTUyRDE3MjkwMDAxRkVGRUNBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOEMzRTQ0QTJFMkI0NzVENUNGNEE0OEU1MkQxNzI5MDAwMUZF RkVDQS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMzRlMmJmMDktNWY0Mi00YjY1LWE0 MmQtNjNkMDc5NmQyMDZjLzAvOEMzRTQ0QTJFMkI0NzVENUNGNEE0OEU1MkQxNzI5 MDAwMUZFRkVDQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJYwc9MGcg8Paxmz1KZUPV7erR6N4ypjUdhM K1Rm5BJhmRbK6q4wpeQvzy3BjP6ZyXl0/AeU5/j8wL6gxTEvu5ibEwOg4t/l0nVj d9QE9zZ3SXtdZwV978pN634rhWum7sj36Gryu+Hqbryfxdc+g/CiMOSopdLms3/0 OTTavALdW9FzToBAVep2zxkcikQOtaeiUf+6hDt6Sa2itwX9QAQOxE1VmYvPRCta TPgm1GojZu1RW9tZXDGW3jBcHX7pzlYqZMnpoHOtxWuTD0hn5WKwSwEUUMs6H7WG piYVrFohLzwo+EJwTdVp/A4JHB5BrWMwy/b0vN9+SavsxCt6isE= -----END CERTIFICATE-----Generated at Sat Aug 23 18:28:23 2025 by rpki-client