$ rpki-client -vvf repo-rpki.idnic.net/repo/506cd155-b53f-4146-a17c-7f1375eca24a/0/A8ACDEBC6EB4FF09A48B38FEB17CC145AA5E9F36.mft File: A8ACDEBC6EB4FF09A48B38FEB17CC145AA5E9F36.mft (raw, json) Hash identifier: TrxJge0PBb4DVfAyMP+ttMAIQXc6UHxquL1Iy+2Rgkc= Subject key identifier: DF:6F:7A:33:82:84:F6:6B:64:DA:D6:C6:3C:3B:22:5D:DA:F7:1C:81 Authority key identifier: A8:AC:DE:BC:6E:B4:FF:09:A4:8B:38:FE:B1:7C:C1:45:AA:5E:9F:36 Certificate issuer: /CN=A8ACDEBC6EB4FF09A48B38FEB17CC145AA5E9F36 Certificate serial: 67AA683C48B6576A43D9034AA818B3AF4A32606D Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A8ACDEBC6EB4FF09A48B38FEB17CC145AA5E9F36.cer Subject info access: rsync://repo-rpki.idnic.net/repo/506cd155-b53f-4146-a17c-7f1375eca24a/0/A8ACDEBC6EB4FF09A48B38FEB17CC145AA5E9F36.mft Manifest number: 0500 Signing time: Thu 21 Aug 2025 23:30:02 +0000 Manifest this update: Thu 21 Aug 2025 23:25:02 +0000 Manifest next update: Mon 25 Aug 2025 09:44:02 +0000 Files and hashes: 1: A8ACDEBC6EB4FF09A48B38FEB17CC145AA5E9F36.crl (hash: y6tAg1W4zMNRVja3PZIrJjQQF07yoJqm79xBAtQS5j4=) 2: 3130332e37392e39362e302f32342d3234203d3e203634333038.roa (hash: wGapFjIoWrukGBmT8iRgZP0dNhbzHUcz+UdRp6Wb0WM=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/506cd155-b53f-4146-a17c-7f1375eca24a/0/A8ACDEBC6EB4FF09A48B38FEB17CC145AA5E9F36.crl rsync://repo-rpki.idnic.net/repo/506cd155-b53f-4146-a17c-7f1375eca24a/0/A8ACDEBC6EB4FF09A48B38FEB17CC145AA5E9F36.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A8ACDEBC6EB4FF09A48B38FEB17CC145AA5E9F36.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 25 Aug 2025 09:44:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 67:aa:68:3c:48:b6:57:6a:43:d9:03:4a:a8:18:b3:af:4a:32:60:6d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A8ACDEBC6EB4FF09A48B38FEB17CC145AA5E9F36 Validity Not Before: Aug 21 23:25:02 2025 GMT Not After : Aug 25 09:44:02 2025 GMT Subject: CN=DF6F7A338284F66B64DAD6C63C3B225DDAF71C81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:ed:d6:06:4e:0f:7a:c7:58:df:4e:fd:f3:22: 90:3b:f7:7b:6f:54:a8:c2:05:cc:12:2b:a6:61:c4: 89:2e:fc:71:62:91:08:ea:4f:fe:af:44:5c:da:a1: 16:73:ad:e8:30:61:05:84:e2:ac:b2:33:76:bc:21: 74:dd:ec:87:7e:35:12:ca:73:40:8e:a3:f3:5c:c5: 24:0b:38:17:89:2f:37:99:ab:24:0a:cd:d4:94:c2: c6:57:b6:b8:85:1f:b8:d3:b5:fb:91:32:32:f0:f8: e6:9f:5d:ce:d8:57:c5:45:c2:56:2c:66:43:3d:f8: bd:94:e5:ed:c2:02:68:de:08:c6:7f:d4:4a:5d:1b: 51:60:d0:a2:43:37:40:5f:34:10:87:0d:96:4c:7f: 4d:dd:fa:25:ad:92:35:1e:bc:05:9d:f8:43:5a:fc: cb:a0:74:f1:28:95:dd:97:7f:11:6a:9d:12:e1:a3: 6a:3d:d0:b8:47:77:d0:65:ba:d4:88:f9:cb:59:a3: ec:83:36:66:5c:76:c5:44:18:48:b8:21:08:b9:0e: f5:e1:29:2a:00:46:54:36:aa:b9:76:21:52:e3:ee: 9b:47:77:9f:fa:1f:d0:29:31:9f:dd:c1:ec:8b:3e: 08:62:fd:7a:29:34:20:22:e3:13:2a:8b:46:60:a9: d7:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DF:6F:7A:33:82:84:F6:6B:64:DA:D6:C6:3C:3B:22:5D:DA:F7:1C:81 X509v3 Authority Key Identifier: keyid:A8:AC:DE:BC:6E:B4:FF:09:A4:8B:38:FE:B1:7C:C1:45:AA:5E:9F:36 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/506cd155-b53f-4146-a17c-7f1375eca24a/0/A8ACDEBC6EB4FF09A48B38FEB17CC145AA5E9F36.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A8ACDEBC6EB4FF09A48B38FEB17CC145AA5E9F36.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/506cd155-b53f-4146-a17c-7f1375eca24a/0/A8ACDEBC6EB4FF09A48B38FEB17CC145AA5E9F36.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4e:8c:30:f9:76:21:91:b8:6b:06:f7:9f:f7:96:29:af:6b:d9: c5:13:c2:cd:97:f7:0a:6a:fe:35:b0:2f:e4:aa:9a:a6:20:0c: 6b:bd:ea:85:1a:94:2f:bb:ef:b9:43:ea:00:ec:a5:fc:ff:e3: a3:5d:d2:c4:0f:83:d8:15:71:37:f8:48:27:7c:90:c3:d2:20: 18:6b:67:e3:eb:43:68:a6:2f:9e:08:23:e8:96:c8:22:85:dc: 7f:92:1b:ac:62:36:1e:70:c5:32:86:a2:0f:d8:e0:10:85:22: 08:de:c5:3f:8d:fc:92:9a:bb:3c:34:7b:4c:4c:8d:82:9d:5a: 3d:eb:74:20:fc:7e:c9:cc:03:95:e6:2a:1e:da:bb:36:36:79: f1:8f:22:33:18:30:b1:fc:09:7d:28:1c:0b:99:0f:69:01:f6: 15:38:aa:12:c2:8b:3c:e3:09:22:4d:7d:6a:4f:9f:08:d3:5b: 43:ed:72:6b:ee:f3:e1:44:c0:30:83:d5:a1:b3:08:f2:6d:97: 3d:10:ba:45:4b:6b:f5:78:8a:4b:7e:3f:e6:6a:09:34:e0:69: 07:c8:52:00:aa:8d:f1:58:ff:20:35:59:6a:d0:45:2f:4c:4a: 1d:39:f6:7a:0d:c5:ab:66:3b:f8:cd:d7:40:43:aa:06:e0:98: 60:f7:cc:b4 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUZ6poPEi2V2pD2QNKqBizr0oyYG0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQThBQ0RFQkM2RUI0RkYwOUE0OEIzOEZFQjE3Q0MxNDVB QTVFOUYzNjAeFw0yNTA4MjEyMzI1MDJaFw0yNTA4MjUwOTQ0MDJaMDMxMTAvBgNV BAMTKERGNkY3QTMzODI4NEY2NkI2NERBRDZDNjNDM0IyMjVEREFGNzFDODEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDX7dYGTg96x1jfTv3zIpA793tv VKjCBcwSK6ZhxIku/HFikQjqT/6vRFzaoRZzregwYQWE4qyyM3a8IXTd7Id+NRLK c0COo/NcxSQLOBeJLzeZqyQKzdSUwsZXtriFH7jTtfuRMjLw+OafXc7YV8VFwlYs ZkM9+L2U5e3CAmjeCMZ/1EpdG1Fg0KJDN0BfNBCHDZZMf03d+iWtkjUevAWd+ENa /MugdPEold2XfxFqnRLho2o90LhHd9BlutSI+ctZo+yDNmZcdsVEGEi4IQi5DvXh KSoARlQ2qrl2IVLj7ptHd5/6H9ApMZ/dweyLPghi/XopNCAi4xMqi0Zgqdf1AgMB AAGjggI8MIICODAdBgNVHQ4EFgQU3296M4KE9mtk2tbGPDsiXdr3HIEwHwYDVR0j BBgwFoAUqKzevG60/wmkizj+sXzBRapenzYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 MDZjZDE1NS1iNTNmLTQxNDYtYTE3Yy03ZjEzNzVlY2EyNGEvMC9BOEFDREVCQzZF QjRGRjA5QTQ4QjM4RkVCMTdDQzE0NUFBNUU5RjM2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQThBQ0RFQkM2RUI0RkYwOUE0OEIzOEZFQjE3Q0MxNDVBQTVF OUYzNi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNTA2Y2QxNTUtYjUzZi00MTQ2LWEx N2MtN2YxMzc1ZWNhMjRhLzAvQThBQ0RFQkM2RUI0RkYwOUE0OEIzOEZFQjE3Q0Mx NDVBQTVFOUYzNi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAE6MMPl2IZG4awb3n/eWKa9r2cUTws2X9wpq /jWwL+SqmqYgDGu96oUalC+777lD6gDspfz/46Nd0sQPg9gVcTf4SCd8kMPSIBhr Z+PrQ2imL54II+iWyCKF3H+SG6xiNh5wxTKGog/Y4BCFIgjexT+N/JKauzw0e0xM jYKdWj3rdCD8fsnMA5XmKh7auzY2efGPIjMYMLH8CX0oHAuZD2kB9hU4qhLCizzj CSJNfWpPnwjTW0Ptcmvu8+FEwDCD1aGzCPJtlz0QukVLa/V4ikt+P+ZqCTTgaQfI UgCqjfFY/yA1WWrQRS9MSh059noNxatmO/jN10BDqgbgmGD3zLQ= -----END CERTIFICATE-----Generated at Sat Aug 23 15:21:10 2025 by rpki-client