$ rpki-client -vvf repo-rpki.idnic.net/repo/5252ead3-dc8f-4d86-afcf-a140e5b87532/0/8CFB227DA1EF51DB23364BBA034D0F68A09A5F59.mft File: 8CFB227DA1EF51DB23364BBA034D0F68A09A5F59.mft (raw, json) Hash identifier: Jy2pMckngHpwVN7R5mgoXEhX3ZLT3zpn08Z69RvP+k4= Subject key identifier: D4:E0:C9:E5:A5:DE:36:D9:C6:92:C3:25:F4:1C:10:C6:68:36:3A:C2 Authority key identifier: 8C:FB:22:7D:A1:EF:51:DB:23:36:4B:BA:03:4D:0F:68:A0:9A:5F:59 Certificate issuer: /CN=8CFB227DA1EF51DB23364BBA034D0F68A09A5F59 Certificate serial: 1CEF9FB54619E011A1FD3FCC549608D5ACE8660C Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8CFB227DA1EF51DB23364BBA034D0F68A09A5F59.cer Subject info access: rsync://repo-rpki.idnic.net/repo/5252ead3-dc8f-4d86-afcf-a140e5b87532/0/8CFB227DA1EF51DB23364BBA034D0F68A09A5F59.mft Manifest number: 021D Signing time: Sat 23 Aug 2025 08:01:32 +0000 Manifest this update: Sat 23 Aug 2025 07:56:32 +0000 Manifest next update: Tue 26 Aug 2025 15:29:32 +0000 Files and hashes: 1: 8CFB227DA1EF51DB23364BBA034D0F68A09A5F59.crl (hash: GeZWpFE6WLs7VRSc01fgY40tMJwaJOL7GoGDoDX4JI8=) 2: 3130332e3138362e3139342e302f32342d3234203d3e203438343635.roa (hash: nuw56AWJFQx7bF2mLso7Fp7ypapHW7bx18alMUZHm9U=) 3: 3130332e3138362e3139342e302f32332d3233203d3e20313439373132.roa (hash: swBTOVyl/nQxFd9eqJx6PzMQ7ExSAWTFjV6g64/KqU0=) 4: 3130332e3138362e3139352e302f32342d3234203d3e203438343635.roa (hash: 9nS/psP6uP/NgK0GsDYJioeVISZGFYj6wNXBWyPXoig=) 5: 3130332e3138362e3139342e302f32342d3234203d3e20313439373132.roa (hash: uzPIoUslKlL0kCJ3Mr8GlDHsPvFS4WU5l7ZsMhLtDsU=) 6: 3130332e3138362e3139342e302f32332d3234203d3e20313439373132.roa (hash: S9MFaIq/j9TJ63dOJfnzWaZP6j2QyCQRqTU45iGYFSM=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/5252ead3-dc8f-4d86-afcf-a140e5b87532/0/8CFB227DA1EF51DB23364BBA034D0F68A09A5F59.crl rsync://repo-rpki.idnic.net/repo/5252ead3-dc8f-4d86-afcf-a140e5b87532/0/8CFB227DA1EF51DB23364BBA034D0F68A09A5F59.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8CFB227DA1EF51DB23364BBA034D0F68A09A5F59.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 26 Aug 2025 10:19:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1c:ef:9f:b5:46:19:e0:11:a1:fd:3f:cc:54:96:08:d5:ac:e8:66:0c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8CFB227DA1EF51DB23364BBA034D0F68A09A5F59 Validity Not Before: Aug 23 07:56:32 2025 GMT Not After : Aug 26 15:29:32 2025 GMT Subject: CN=D4E0C9E5A5DE36D9C692C325F41C10C668363AC2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:13:8f:25:53:00:24:0e:c6:92:5c:ec:ed:3b: b9:92:b1:ce:63:d3:ae:e2:3b:b2:a8:7f:75:e1:9b: 38:71:d9:dc:2d:04:40:c6:30:d4:59:c4:f8:3f:3f: 6d:df:b0:0e:6f:f0:62:f2:ad:bb:b8:c2:37:1c:b2: 3e:6d:9b:97:58:0c:3a:f3:45:ed:e4:76:da:4d:71: 33:85:6b:b2:5e:c8:b0:e5:26:8d:ac:f0:7b:32:c5: 29:c3:6f:ef:2d:5a:81:80:08:fd:85:b6:af:66:54: df:95:07:ac:2e:b9:e3:ec:57:0b:7f:2b:be:39:6e: 56:8d:4f:2c:d8:bb:0c:e1:3c:4b:55:2e:1c:1c:98: 87:89:10:88:77:3a:88:f8:98:d1:f7:bb:00:e5:4f: c6:c2:6b:5e:d1:3f:0e:1a:15:16:80:02:64:9b:54: 24:04:68:e8:b1:75:50:c9:47:a6:c8:12:c2:0c:5a: 16:a5:02:23:3b:f3:27:32:55:93:5c:3a:5b:d8:34: fb:e5:55:55:45:99:6d:ff:23:16:8b:9c:11:cb:3f: 83:de:b5:fa:ae:d9:c6:6f:09:a6:da:25:f0:7d:27: 2f:8b:97:78:b4:b3:f5:6f:e2:f9:71:13:2c:0a:e7: 58:a0:c8:aa:a9:8d:7d:a1:eb:8c:a4:59:0e:3e:11: 17:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D4:E0:C9:E5:A5:DE:36:D9:C6:92:C3:25:F4:1C:10:C6:68:36:3A:C2 X509v3 Authority Key Identifier: keyid:8C:FB:22:7D:A1:EF:51:DB:23:36:4B:BA:03:4D:0F:68:A0:9A:5F:59 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/5252ead3-dc8f-4d86-afcf-a140e5b87532/0/8CFB227DA1EF51DB23364BBA034D0F68A09A5F59.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8CFB227DA1EF51DB23364BBA034D0F68A09A5F59.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/5252ead3-dc8f-4d86-afcf-a140e5b87532/0/8CFB227DA1EF51DB23364BBA034D0F68A09A5F59.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 65:dc:0b:25:46:b7:9d:e8:40:45:a3:63:4c:e2:d3:59:45:7b: 82:7f:0f:ac:d1:53:a9:50:79:2f:b1:cc:01:7a:b8:ea:dd:3b: 9c:bc:9a:64:e4:f4:04:55:c9:f1:ee:56:dc:a1:e1:1b:6d:09: 58:3d:60:0e:4b:cf:c1:57:0e:75:6c:c1:f9:31:c3:d1:6d:a5: 89:b2:ee:23:e5:b8:03:db:23:3a:d8:7b:68:25:40:7a:64:37: f6:fb:e0:cd:e9:46:d6:2d:03:f5:a1:50:01:48:3b:47:56:44: 24:b8:82:12:ff:f7:de:fd:df:3b:62:39:81:47:2d:52:24:88: 2e:3d:bd:de:a7:96:70:c1:8a:13:94:50:68:b6:29:2e:65:2a: ec:6e:94:34:95:1d:23:23:a3:74:bc:f5:08:4a:52:42:34:d2: 2e:33:f1:2a:58:b0:24:7d:0a:5c:cd:9c:bf:a0:26:e0:a1:4d: 9e:7c:80:c7:65:1a:93:52:4b:57:78:9d:53:4f:8f:f0:fe:33: 92:ee:97:23:bb:b5:72:6d:39:33:14:d9:1f:10:a4:31:df:d1: bb:58:be:f0:c1:72:14:b1:50:db:b7:c1:87:04:07:37:b1:f6: b7:72:86:93:44:b8:a0:a2:df:a0:b9:14:00:00:22:58:c6:7c: b4:82:eb:b1 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUHO+ftUYZ4BGh/T/MVJYI1azoZgwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOENGQjIyN0RBMUVGNTFEQjIzMzY0QkJBMDM0RDBGNjhB MDlBNUY1OTAeFw0yNTA4MjMwNzU2MzJaFw0yNTA4MjYxNTI5MzJaMDMxMTAvBgNV BAMTKEQ0RTBDOUU1QTVERTM2RDlDNjkyQzMyNUY0MUMxMEM2NjgzNjNBQzIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDEE48lUwAkDsaSXOztO7mSsc5j 067iO7Kof3Xhmzhx2dwtBEDGMNRZxPg/P23fsA5v8GLyrbu4wjccsj5tm5dYDDrz Re3kdtpNcTOFa7JeyLDlJo2s8HsyxSnDb+8tWoGACP2Ftq9mVN+VB6wuuePsVwt/ K745blaNTyzYuwzhPEtVLhwcmIeJEIh3Ooj4mNH3uwDlT8bCa17RPw4aFRaAAmSb VCQEaOixdVDJR6bIEsIMWhalAiM78ycyVZNcOlvYNPvlVVVFmW3/IxaLnBHLP4Pe tfqu2cZvCabaJfB9Jy+Ll3i0s/Vv4vlxEywK51igyKqpjX2h64ykWQ4+ERcvAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU1ODJ5aXeNtnGksMl9BwQxmg2OsIwHwYDVR0j BBgwFoAUjPsifaHvUdsjNku6A00PaKCaX1kwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 MjUyZWFkMy1kYzhmLTRkODYtYWZjZi1hMTQwZTViODc1MzIvMC84Q0ZCMjI3REEx RUY1MURCMjMzNjRCQkEwMzREMEY2OEEwOUE1RjU5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOENGQjIyN0RBMUVGNTFEQjIzMzY0QkJBMDM0RDBGNjhBMDlB NUY1OS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNTI1MmVhZDMtZGM4Zi00ZDg2LWFm Y2YtYTE0MGU1Yjg3NTMyLzAvOENGQjIyN0RBMUVGNTFEQjIzMzY0QkJBMDM0RDBG NjhBMDlBNUY1OS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGXcCyVGt53oQEWjY0zi01lFe4J/D6zRU6lQ eS+xzAF6uOrdO5y8mmTk9ARVyfHuVtyh4RttCVg9YA5Lz8FXDnVswfkxw9FtpYmy 7iPluAPbIzrYe2glQHpkN/b74M3pRtYtA/WhUAFIO0dWRCS4ghL/99793ztiOYFH LVIkiC49vd6nlnDBihOUUGi2KS5lKuxulDSVHSMjo3S89QhKUkI00i4z8SpYsCR9 ClzNnL+gJuChTZ58gMdlGpNSS1d4nVNPj/D+M5LulyO7tXJtOTMU2R8QpDHf0btY vvDBchSxUNu3wYcEBzex9rdyhpNEuKCi36C5FAAAIljGfLSC67E= -----END CERTIFICATE-----Generated at Sat Aug 23 12:24:47 2025 by rpki-client