$ rpki-client -vvf repo-rpki.idnic.net/repo/4288762c-3fc5-49cc-949a-594b331a13a1/0/8958EB1EA0022DEF783D17F1C5B6F0C54B0F5F1E.mft File: 8958EB1EA0022DEF783D17F1C5B6F0C54B0F5F1E.mft (raw, json) Hash identifier: 4/2plpP3JCM648qPCkbucragPd7KOEEaWF/CAQFmFxI= Subject key identifier: 36:CF:51:0B:0D:41:BF:7F:B9:D8:41:03:FF:10:B0:5A:04:42:76:A2 Authority key identifier: 89:58:EB:1E:A0:02:2D:EF:78:3D:17:F1:C5:B6:F0:C5:4B:0F:5F:1E Certificate issuer: /CN=8958EB1EA0022DEF783D17F1C5B6F0C54B0F5F1E Certificate serial: 3428559924A8ACE2D65F04AC091FAA1DF1A63C45 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8958EB1EA0022DEF783D17F1C5B6F0C54B0F5F1E.cer Subject info access: rsync://repo-rpki.idnic.net/repo/4288762c-3fc5-49cc-949a-594b331a13a1/0/8958EB1EA0022DEF783D17F1C5B6F0C54B0F5F1E.mft Manifest number: 0100 Signing time: Thu 21 Aug 2025 11:50:03 +0000 Manifest this update: Thu 21 Aug 2025 11:45:03 +0000 Manifest next update: Sun 24 Aug 2025 18:45:03 +0000 Files and hashes: 1: 3230322e34372e3136302e302f32342d3234203d3e20313532303736.roa (hash: 7kwTbSO1puRUOTojUVn3A2nZmKPBj1Yf1FR09LrPep4=) 2: 8958EB1EA0022DEF783D17F1C5B6F0C54B0F5F1E.crl (hash: J7rz8NsccmpWxSd3tZKHhqEsR4ItXb9r7xbT6uwl0o0=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/4288762c-3fc5-49cc-949a-594b331a13a1/0/8958EB1EA0022DEF783D17F1C5B6F0C54B0F5F1E.crl rsync://repo-rpki.idnic.net/repo/4288762c-3fc5-49cc-949a-594b331a13a1/0/8958EB1EA0022DEF783D17F1C5B6F0C54B0F5F1E.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8958EB1EA0022DEF783D17F1C5B6F0C54B0F5F1E.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 24 Aug 2025 18:45:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 34:28:55:99:24:a8:ac:e2:d6:5f:04:ac:09:1f:aa:1d:f1:a6:3c:45 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8958EB1EA0022DEF783D17F1C5B6F0C54B0F5F1E Validity Not Before: Aug 21 11:45:03 2025 GMT Not After : Aug 24 18:45:03 2025 GMT Subject: CN=36CF510B0D41BF7FB9D84103FF10B05A044276A2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:bb:47:12:a4:b2:21:8d:b1:66:59:6b:c4:3b: 4a:d4:d5:2f:0c:a6:89:3a:8a:59:6c:39:f2:55:c0: 86:50:43:40:b9:4c:b4:d5:6e:03:dd:d0:4d:fb:ee: 71:97:c1:35:8f:68:8f:da:26:89:5e:3e:5d:08:53: 06:2f:51:88:4c:45:2e:46:fd:73:91:74:76:c9:1d: f5:fc:4e:01:63:72:61:34:1d:7b:69:db:36:0b:f2: a7:cf:b6:5d:89:ec:06:73:e0:c4:3f:0a:4b:15:de: 49:39:0b:65:e7:df:98:55:41:76:e0:45:29:27:06: df:07:74:fa:b7:e7:90:2f:0e:e6:39:90:d2:ed:b0: 83:8c:cb:6c:c9:06:08:dc:53:97:8a:1e:37:63:7a: a5:51:b8:f3:e7:64:bd:58:1a:91:53:bc:b8:da:1a: 8c:08:93:38:69:f6:44:0f:27:1b:48:06:e1:d4:95: d4:d4:bc:54:c4:4d:f9:78:5c:cc:86:7f:3d:89:65: fc:ce:9e:f9:1e:3a:9d:58:8e:c7:0e:13:f6:b9:11: df:64:13:fc:b8:af:92:b1:a2:8b:88:89:ad:b4:9f: 1c:e0:6f:0e:ce:dd:f1:3b:81:d8:64:e9:81:dc:94: 9d:9f:62:52:4b:a7:00:62:a5:15:43:6b:9f:79:03: 70:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 36:CF:51:0B:0D:41:BF:7F:B9:D8:41:03:FF:10:B0:5A:04:42:76:A2 X509v3 Authority Key Identifier: keyid:89:58:EB:1E:A0:02:2D:EF:78:3D:17:F1:C5:B6:F0:C5:4B:0F:5F:1E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/4288762c-3fc5-49cc-949a-594b331a13a1/0/8958EB1EA0022DEF783D17F1C5B6F0C54B0F5F1E.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8958EB1EA0022DEF783D17F1C5B6F0C54B0F5F1E.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/4288762c-3fc5-49cc-949a-594b331a13a1/0/8958EB1EA0022DEF783D17F1C5B6F0C54B0F5F1E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b1:22:e6:93:e5:a4:ad:e5:c3:f6:e9:68:90:9b:11:8f:67:24: da:70:ef:64:25:1c:08:28:2f:13:9f:96:cc:97:d3:30:1f:c7: d7:19:11:59:c3:f7:ed:21:e8:bf:2a:de:12:e9:2f:9a:6c:15: e4:45:83:04:5a:36:37:7a:64:1b:1f:4c:fc:6b:8f:1f:b3:36: 9d:f7:a4:b8:20:b7:7c:38:b8:1b:1a:68:60:c2:97:e7:bf:b8: ed:9f:b0:55:b4:fb:31:b6:54:c6:8a:67:28:b6:9d:1d:c4:e5: 0b:a8:8f:ca:ff:29:89:a8:8e:98:dd:c9:99:26:a5:62:63:4a: e9:b3:78:0c:81:be:be:fe:ac:f8:c4:b5:e5:e1:7c:73:fe:97: 82:3f:4b:bc:a9:11:ae:e5:38:be:f4:bd:93:97:45:c6:e7:5e: 4c:31:76:60:fd:95:30:59:83:4a:a8:a9:b9:f7:8d:16:25:fe: 8a:79:b4:5e:db:3d:b2:d9:5b:07:3a:86:37:53:84:e9:63:26: ac:86:32:d9:fe:e8:d3:c0:d9:bf:34:15:99:0a:b7:25:9f:92: 59:2a:f5:35:93:fc:94:64:c0:6c:1a:ac:7a:65:39:4a:d8:32: d6:28:9d:0a:59:05:bb:d5:8a:03:48:fd:49:5c:8b:41:cd:18: 64:f6:23:ed -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUNChVmSSorOLWXwSsCR+qHfGmPEUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODk1OEVCMUVBMDAyMkRFRjc4M0QxN0YxQzVCNkYwQzU0 QjBGNUYxRTAeFw0yNTA4MjExMTQ1MDNaFw0yNTA4MjQxODQ1MDNaMDMxMTAvBgNV BAMTKDM2Q0Y1MTBCMEQ0MUJGN0ZCOUQ4NDEwM0ZGMTBCMDVBMDQ0Mjc2QTIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC9u0cSpLIhjbFmWWvEO0rU1S8M pok6illsOfJVwIZQQ0C5TLTVbgPd0E377nGXwTWPaI/aJolePl0IUwYvUYhMRS5G /XORdHbJHfX8TgFjcmE0HXtp2zYL8qfPtl2J7AZz4MQ/CksV3kk5C2Xn35hVQXbg RSknBt8HdPq355AvDuY5kNLtsIOMy2zJBgjcU5eKHjdjeqVRuPPnZL1YGpFTvLja GowIkzhp9kQPJxtIBuHUldTUvFTETfl4XMyGfz2JZfzOnvkeOp1YjscOE/a5Ed9k E/y4r5KxoouIia20nxzgbw7O3fE7gdhk6YHclJ2fYlJLpwBipRVDa595A3BRAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUNs9RCw1Bv3+52EED/xCwWgRCdqIwHwYDVR0j BBgwFoAUiVjrHqACLe94PRfxxbbwxUsPXx4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 Mjg4NzYyYy0zZmM1LTQ5Y2MtOTQ5YS01OTRiMzMxYTEzYTEvMC84OTU4RUIxRUEw MDIyREVGNzgzRDE3RjFDNUI2RjBDNTRCMEY1RjFFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvODk1OEVCMUVBMDAyMkRFRjc4M0QxN0YxQzVCNkYwQzU0QjBG NUYxRS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNDI4ODc2MmMtM2ZjNS00OWNjLTk0 OWEtNTk0YjMzMWExM2ExLzAvODk1OEVCMUVBMDAyMkRFRjc4M0QxN0YxQzVCNkYw QzU0QjBGNUYxRS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALEi5pPlpK3lw/bpaJCbEY9nJNpw72QlHAgo LxOflsyX0zAfx9cZEVnD9+0h6L8q3hLpL5psFeRFgwRaNjd6ZBsfTPxrjx+zNp33 pLggt3w4uBsaaGDCl+e/uO2fsFW0+zG2VMaKZyi2nR3E5Quoj8r/KYmojpjdyZkm pWJjSumzeAyBvr7+rPjEteXhfHP+l4I/S7ypEa7lOL70vZOXRcbnXkwxdmD9lTBZ g0qoqbn3jRYl/op5tF7bPbLZWwc6hjdThOljJqyGMtn+6NPA2b80FZkKtyWfklkq 9TWT/JRkwGwarHplOUrYMtYonQpZBbvVigNI/Ulci0HNGGT2I+0= -----END CERTIFICATE-----Generated at Sat Aug 23 18:26:44 2025 by rpki-client