$ rpki-client -vvf repo-rpki.idnic.net/repo/4157c9ac-52db-4dba-ac77-845e2ddd8879/0/8D7AD1F796C88BCD49E1BEC42851AFA58BD78588.mft File: 8D7AD1F796C88BCD49E1BEC42851AFA58BD78588.mft (raw, json) Hash identifier: 0u5sSUowcH+Xk4gxx0tMYFzFxz6IE+uInVENDE+4YYc= Subject key identifier: 66:9D:A1:29:DE:6B:3A:66:7D:47:C7:44:AA:1C:3D:72:27:EC:40:77 Authority key identifier: 8D:7A:D1:F7:96:C8:8B:CD:49:E1:BE:C4:28:51:AF:A5:8B:D7:85:88 Certificate issuer: /CN=8D7AD1F796C88BCD49E1BEC42851AFA58BD78588 Certificate serial: 4479707EEC2B6B11C9835D1EAFE84459612B8DD0 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8D7AD1F796C88BCD49E1BEC42851AFA58BD78588.cer Subject info access: rsync://repo-rpki.idnic.net/repo/4157c9ac-52db-4dba-ac77-845e2ddd8879/0/8D7AD1F796C88BCD49E1BEC42851AFA58BD78588.mft Manifest number: 0188 Signing time: Fri 22 Aug 2025 19:01:54 +0000 Manifest this update: Fri 22 Aug 2025 18:56:54 +0000 Manifest next update: Tue 26 Aug 2025 05:57:54 +0000 Files and hashes: 1: 8D7AD1F796C88BCD49E1BEC42851AFA58BD78588.crl (hash: nNahXMV2Nc/2ApKte/99Yv+jUNQ09n6FUa3yibjSM/E=) 2: 3130332e3130312e39362e302f32342d3234203d3e20313530393430.roa (hash: S5y/AAm56aWRItZwk28UKrK77+5w1nu1pwxZLQMOads=) 3: 3130332e3130312e39362e302f32332d3233203d3e20313530393430.roa (hash: lwBU7RZrxpXV+tNL6ldwUUEfAC8x198/UcNXhcVqIDE=) 4: 3130332e3130312e39372e302f32342d3234203d3e20313530393430.roa (hash: aTXk/DsjXzFyIklyAQb47qbqcaGolhR0lzBTP747Tls=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/4157c9ac-52db-4dba-ac77-845e2ddd8879/0/8D7AD1F796C88BCD49E1BEC42851AFA58BD78588.crl rsync://repo-rpki.idnic.net/repo/4157c9ac-52db-4dba-ac77-845e2ddd8879/0/8D7AD1F796C88BCD49E1BEC42851AFA58BD78588.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8D7AD1F796C88BCD49E1BEC42851AFA58BD78588.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 26 Aug 2025 05:57:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 44:79:70:7e:ec:2b:6b:11:c9:83:5d:1e:af:e8:44:59:61:2b:8d:d0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8D7AD1F796C88BCD49E1BEC42851AFA58BD78588 Validity Not Before: Aug 22 18:56:54 2025 GMT Not After : Aug 26 05:57:54 2025 GMT Subject: CN=669DA129DE6B3A667D47C744AA1C3D7227EC4077 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:90:12:07:03:4d:6a:f1:9e:55:26:80:b0:fc: 6b:7c:b7:8b:ab:82:63:4f:21:f7:bb:32:fe:06:30: 53:8e:06:13:5b:a1:df:d2:a0:c3:a1:b1:63:c4:f6: a0:d6:06:ba:94:d7:91:3f:09:ce:61:77:08:dc:12: 41:03:4d:5e:66:a9:ad:ef:d0:6e:c5:e7:a7:6e:fb: 9c:8a:41:fa:f7:10:ef:32:67:29:19:fc:79:da:33: 22:9d:4c:b1:8d:d4:7d:91:d8:2e:63:c3:e3:83:5d: 1f:93:96:c5:bd:44:22:42:85:37:ef:d6:95:62:b3: f9:33:97:31:d6:d4:82:e5:dc:3d:f4:83:a4:c6:70: f5:af:73:0d:f4:0a:5e:dc:43:35:7b:15:ae:b0:29: f9:4a:f0:9e:41:f0:08:88:38:34:df:b1:ad:c1:03: 65:a3:d5:1d:5c:7a:6b:c2:d0:01:8d:39:7e:a4:32: 04:80:e2:1c:c6:28:c5:a8:5c:f3:b3:7d:08:3e:d5: 75:de:0b:a9:a2:55:3a:5f:fa:28:d6:90:9a:b8:3e: 5f:f0:e8:d8:f7:61:50:f0:4b:73:b7:e7:a3:51:67: 8f:06:87:4b:5c:3c:8a:5d:34:64:1d:4f:1b:27:06: 97:e3:8d:7b:70:a0:42:32:90:22:21:98:73:9e:ef: 22:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:9D:A1:29:DE:6B:3A:66:7D:47:C7:44:AA:1C:3D:72:27:EC:40:77 X509v3 Authority Key Identifier: keyid:8D:7A:D1:F7:96:C8:8B:CD:49:E1:BE:C4:28:51:AF:A5:8B:D7:85:88 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/4157c9ac-52db-4dba-ac77-845e2ddd8879/0/8D7AD1F796C88BCD49E1BEC42851AFA58BD78588.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8D7AD1F796C88BCD49E1BEC42851AFA58BD78588.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/4157c9ac-52db-4dba-ac77-845e2ddd8879/0/8D7AD1F796C88BCD49E1BEC42851AFA58BD78588.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 72:57:9f:b0:7c:a8:13:ad:50:5b:c3:1c:f2:af:83:64:76:12: 2c:09:18:b7:81:61:d1:ec:39:91:3a:d8:5d:e1:b6:74:c5:25: 7d:1c:7f:ca:04:b5:62:6e:f6:b9:fc:2a:8d:06:21:78:90:16: 9d:84:89:59:45:f6:b2:08:11:04:95:a0:e5:5f:0b:2e:7f:12: cf:5e:61:19:86:15:c8:95:13:f3:3f:92:9d:ab:e9:86:7c:30: 06:e1:15:eb:dc:b7:1a:f4:8e:3a:11:ca:3a:7c:8e:1f:0a:bd: e3:35:ec:02:cd:dc:5b:70:e0:34:8b:51:86:05:84:b1:b8:fb: 7a:d0:63:52:cf:4b:bd:11:65:1b:2d:42:89:12:26:01:34:0a: 2c:45:cd:43:7b:dc:80:55:1a:9e:1d:c1:03:b8:f3:e2:79:36: 49:12:d9:d2:66:c1:e8:84:cc:14:8b:16:8a:a3:ad:33:65:1b: 82:77:3b:47:08:35:60:b8:85:db:fc:3f:c7:2d:0a:3a:1f:0d: 86:57:62:b5:fb:af:30:28:74:30:a4:3d:e7:6a:ca:00:ae:f5: 71:ab:43:14:44:cc:b6:26:42:1b:30:71:d9:6f:39:80:40:6b: 4c:64:66:9d:87:ef:a7:a8:a2:c4:7f:fb:33:77:ce:22:e5:62: 79:e5:64:f0 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIURHlwfuwraxHJg10er+hEWWErjdAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEQ3QUQxRjc5NkM4OEJDRDQ5RTFCRUM0Mjg1MUFGQTU4 QkQ3ODU4ODAeFw0yNTA4MjIxODU2NTRaFw0yNTA4MjYwNTU3NTRaMDMxMTAvBgNV BAMTKDY2OURBMTI5REU2QjNBNjY3RDQ3Qzc0NEFBMUMzRDcyMjdFQzQwNzcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCwkBIHA01q8Z5VJoCw/Gt8t4ur gmNPIfe7Mv4GMFOOBhNbod/SoMOhsWPE9qDWBrqU15E/Cc5hdwjcEkEDTV5mqa3v 0G7F56du+5yKQfr3EO8yZykZ/HnaMyKdTLGN1H2R2C5jw+ODXR+TlsW9RCJChTfv 1pVis/kzlzHW1ILl3D30g6TGcPWvcw30Cl7cQzV7Fa6wKflK8J5B8AiIODTfsa3B A2Wj1R1cemvC0AGNOX6kMgSA4hzGKMWoXPOzfQg+1XXeC6miVTpf+ijWkJq4Pl/w 6Nj3YVDwS3O356NRZ48Gh0tcPIpdNGQdTxsnBpfjjXtwoEIykCIhmHOe7yILAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUZp2hKd5rOmZ9R8dEqhw9cifsQHcwHwYDVR0j BBgwFoAUjXrR95bIi81J4b7EKFGvpYvXhYgwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 MTU3YzlhYy01MmRiLTRkYmEtYWM3Ny04NDVlMmRkZDg4NzkvMC84RDdBRDFGNzk2 Qzg4QkNENDlFMUJFQzQyODUxQUZBNThCRDc4NTg4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOEQ3QUQxRjc5NkM4OEJDRDQ5RTFCRUM0Mjg1MUFGQTU4QkQ3 ODU4OC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNDE1N2M5YWMtNTJkYi00ZGJhLWFj NzctODQ1ZTJkZGQ4ODc5LzAvOEQ3QUQxRjc5NkM4OEJDRDQ5RTFCRUM0Mjg1MUFG QTU4QkQ3ODU4OC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHJXn7B8qBOtUFvDHPKvg2R2EiwJGLeBYdHs OZE62F3htnTFJX0cf8oEtWJu9rn8Ko0GIXiQFp2EiVlF9rIIEQSVoOVfCy5/Es9e YRmGFciVE/M/kp2r6YZ8MAbhFevctxr0jjoRyjp8jh8KveM17ALN3Ftw4DSLUYYF hLG4+3rQY1LPS70RZRstQokSJgE0CixFzUN73IBVGp4dwQO48+J5NkkS2dJmweiE zBSLFoqjrTNlG4J3O0cINWC4hdv8P8ctCjofDYZXYrX7rzAodDCkPedqygCu9XGr QxREzLYmQhswcdlvOYBAa0xkZp2H76eoosR/+zN3ziLlYnnlZPA= -----END CERTIFICATE-----Generated at Sat Aug 23 10:13:27 2025 by rpki-client