$ rpki-client -vvf repo-rpki.idnic.net/repo/44b27303-9e3d-4d42-af25-6a0f11808f27/0/8C888E996588527BC5EF8ABD293676C3463A1A22.mft File: 8C888E996588527BC5EF8ABD293676C3463A1A22.mft (raw, json) Hash identifier: Zo/68aRNbDpTNBQb7332Q3gLxqa+qwhH7dh8M1ok95A= Subject key identifier: C9:A7:A0:1B:2B:23:30:FA:AC:81:C4:03:F4:CC:36:4C:B8:DD:2A:05 Authority key identifier: 8C:88:8E:99:65:88:52:7B:C5:EF:8A:BD:29:36:76:C3:46:3A:1A:22 Certificate issuer: /CN=8C888E996588527BC5EF8ABD293676C3463A1A22 Certificate serial: 0B1C5727D7918D4D82FA5B9CA5A711541AF686A6 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8C888E996588527BC5EF8ABD293676C3463A1A22.cer Subject info access: rsync://repo-rpki.idnic.net/repo/44b27303-9e3d-4d42-af25-6a0f11808f27/0/8C888E996588527BC5EF8ABD293676C3463A1A22.mft Manifest number: 022E Signing time: Fri 22 Aug 2025 07:11:36 +0000 Manifest this update: Fri 22 Aug 2025 07:06:36 +0000 Manifest next update: Mon 25 Aug 2025 08:58:36 +0000 Files and hashes: 1: 3130332e39372e352e302f32342d3234203d3e20313336313237.roa (hash: cqTyGMrVXV3krfj6ahd0XiybL7qMxOankc/x3Ztfrtk=) 2: 8C888E996588527BC5EF8ABD293676C3463A1A22.crl (hash: t+7pFFauJi7jXaD9BrawgZggyVnHmtI/U6NYfFm+e6M=) 3: 323430313a383034303a3a2f33322d3332203d3e20313336313237.roa (hash: ejjY61bhmlJl0lxMoyTYYJxk49QNB+St/BGfTNpwclI=) 4: 3130332e39372e372e302f32342d3234203d3e20313336313237.roa (hash: JOk2hOEjt3VDU03LDOoQK88eKB9E+q6wdAJWayyHIwQ=) 5: 3130332e39372e362e302f32342d3234203d3e20313336313237.roa (hash: 953/1OAjNWabw3EekLLAXwzV4CYrLdUWpl5qPGTJpaU=) 6: 3130332e39372e342e302f32342d3234203d3e20313336313237.roa (hash: Jatff9pdbxHcTIoc61FwpQ4zDvedkS7YEGoxT4EFfu8=) 7: 3130332e39372e342e302f32322d3234203d3e20313336313237.roa (hash: Fuo7Zv6Qy+uY4bdbE0UwMy6jWa9ZEF+DnD6ctpiueL4=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/44b27303-9e3d-4d42-af25-6a0f11808f27/0/8C888E996588527BC5EF8ABD293676C3463A1A22.crl rsync://repo-rpki.idnic.net/repo/44b27303-9e3d-4d42-af25-6a0f11808f27/0/8C888E996588527BC5EF8ABD293676C3463A1A22.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8C888E996588527BC5EF8ABD293676C3463A1A22.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 25 Aug 2025 08:58:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0b:1c:57:27:d7:91:8d:4d:82:fa:5b:9c:a5:a7:11:54:1a:f6:86:a6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8C888E996588527BC5EF8ABD293676C3463A1A22 Validity Not Before: Aug 22 07:06:36 2025 GMT Not After : Aug 25 08:58:36 2025 GMT Subject: CN=C9A7A01B2B2330FAAC81C403F4CC364CB8DD2A05 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:0c:ab:11:53:15:b0:af:c5:66:1b:15:13:0f: 0e:2e:54:5f:12:63:be:93:e4:94:4d:16:7b:4a:b7: 8f:47:dc:4a:e1:50:58:05:d3:ef:7b:78:72:8e:06: 6f:b2:bd:46:2b:c5:88:64:69:ea:d1:44:92:25:ac: f6:7e:25:80:4c:22:17:10:b2:5c:d5:4e:60:17:a9: 4c:97:0e:42:5e:5e:1c:3b:a2:20:fb:46:2a:f0:f4: 3f:3a:64:11:01:f0:0f:ca:3e:71:83:d7:5c:c8:ce: 02:6f:10:f7:84:0f:de:5a:01:c4:8a:da:17:d3:35: 99:e8:51:6d:fc:83:07:cd:fc:57:a0:f5:ed:7d:83: bc:b7:55:7e:3e:0b:c5:0d:39:12:f3:b1:c3:89:cc: ef:66:3e:34:18:1b:18:75:bb:92:ec:ec:fc:6b:ea: 54:03:73:df:e6:06:20:2b:0e:59:b8:45:37:f5:ae: e6:0e:4e:52:5e:71:35:2a:7b:85:12:7c:36:ba:6e: 33:d1:29:98:f6:c3:5a:88:fd:82:7c:1a:bb:73:33: ab:f4:2f:0c:9a:cd:15:8d:fd:f9:c8:92:af:85:db: 4a:64:6e:09:c7:23:b0:44:1b:75:e5:97:13:05:06: b9:12:88:bd:b2:ea:ac:59:a9:77:e8:3a:e5:8c:2b: d3:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C9:A7:A0:1B:2B:23:30:FA:AC:81:C4:03:F4:CC:36:4C:B8:DD:2A:05 X509v3 Authority Key Identifier: keyid:8C:88:8E:99:65:88:52:7B:C5:EF:8A:BD:29:36:76:C3:46:3A:1A:22 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/44b27303-9e3d-4d42-af25-6a0f11808f27/0/8C888E996588527BC5EF8ABD293676C3463A1A22.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8C888E996588527BC5EF8ABD293676C3463A1A22.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/44b27303-9e3d-4d42-af25-6a0f11808f27/0/8C888E996588527BC5EF8ABD293676C3463A1A22.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 15:48:a9:33:a0:74:b0:4b:7c:2f:25:43:18:6d:85:bc:cc:8c: 4f:70:8f:50:b4:21:6e:a2:17:b0:72:cc:70:77:8c:44:8d:4d: ca:d7:85:13:05:87:3d:d4:56:e7:8f:c8:fc:01:9e:15:66:23: 54:f1:d5:13:db:80:3c:30:ec:2b:2d:8a:d9:fd:78:b3:71:8f: 3c:2b:25:e6:aa:c2:f6:2a:47:28:6f:68:95:de:68:51:3a:8f: cd:2d:37:4d:de:84:37:3f:8b:7c:54:92:03:d1:ae:d5:56:04: b6:23:fb:d1:53:93:bd:ee:71:64:a6:4b:aa:64:24:ca:73:7a: b0:b4:a8:07:8d:32:b0:f7:a8:cd:ab:3c:35:f2:a5:28:cb:43: 18:86:45:e0:ac:7c:f7:af:ff:db:a4:a5:f4:8e:58:0f:35:9c: 54:c1:0b:ab:fa:88:3c:ae:0b:d7:c2:3d:09:1e:3f:0b:67:7a: 72:09:f2:a0:08:78:37:1e:70:0c:4b:e8:ba:ac:cd:15:38:61: 67:b4:f0:b9:aa:d8:0b:28:34:1a:37:a7:e2:f3:02:d1:3a:35: 08:19:83:df:7c:2d:ed:1b:0d:86:fe:23:e0:63:2d:71:26:8d: 20:e6:9c:69:8d:b9:ab:1b:6e:03:78:48:6e:a2:09:1a:fb:97: 8f:43:45:aa -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUCxxXJ9eRjU2C+lucpacRVBr2hqYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEM4ODhFOTk2NTg4NTI3QkM1RUY4QUJEMjkzNjc2QzM0 NjNBMUEyMjAeFw0yNTA4MjIwNzA2MzZaFw0yNTA4MjUwODU4MzZaMDMxMTAvBgNV BAMTKEM5QTdBMDFCMkIyMzMwRkFBQzgxQzQwM0Y0Q0MzNjRDQjhERDJBMDUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDKDKsRUxWwr8VmGxUTDw4uVF8S Y76T5JRNFntKt49H3ErhUFgF0+97eHKOBm+yvUYrxYhkaerRRJIlrPZ+JYBMIhcQ slzVTmAXqUyXDkJeXhw7oiD7Rirw9D86ZBEB8A/KPnGD11zIzgJvEPeED95aAcSK 2hfTNZnoUW38gwfN/Feg9e19g7y3VX4+C8UNORLzscOJzO9mPjQYGxh1u5Ls7Pxr 6lQDc9/mBiArDlm4RTf1ruYOTlJecTUqe4USfDa6bjPRKZj2w1qI/YJ8GrtzM6v0 LwyazRWN/fnIkq+F20pkbgnHI7BEG3XllxMFBrkSiL2y6qxZqXfoOuWMK9P/AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUyaegGysjMPqsgcQD9Mw2TLjdKgUwHwYDVR0j BBgwFoAUjIiOmWWIUnvF74q9KTZ2w0Y6GiIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 NGIyNzMwMy05ZTNkLTRkNDItYWYyNS02YTBmMTE4MDhmMjcvMC84Qzg4OEU5OTY1 ODg1MjdCQzVFRjhBQkQyOTM2NzZDMzQ2M0ExQTIyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOEM4ODhFOTk2NTg4NTI3QkM1RUY4QUJEMjkzNjc2QzM0NjNB MUEyMi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNDRiMjczMDMtOWUzZC00ZDQyLWFm MjUtNmEwZjExODA4ZjI3LzAvOEM4ODhFOTk2NTg4NTI3QkM1RUY4QUJEMjkzNjc2 QzM0NjNBMUEyMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABVIqTOgdLBLfC8lQxhthbzMjE9wj1C0IW6i F7ByzHB3jESNTcrXhRMFhz3UVuePyPwBnhVmI1Tx1RPbgDww7Cstitn9eLNxjzwr JeaqwvYqRyhvaJXeaFE6j80tN03ehDc/i3xUkgPRrtVWBLYj+9FTk73ucWSmS6pk JMpzerC0qAeNMrD3qM2rPDXypSjLQxiGReCsfPev/9ukpfSOWA81nFTBC6v6iDyu C9fCPQkePwtnenIJ8qAIeDcecAxL6LqszRU4YWe08Lmq2AsoNBo3p+LzAtE6NQgZ g998Le0bDYb+I+BjLXEmjSDmnGmNuasbbgN4SG6iCRr7l49DRao= -----END CERTIFICATE-----Generated at Sat Aug 23 12:10:07 2025 by rpki-client