$ rpki-client -vvf repo-rpki.idnic.net/repo/59cc2e5b-3b91-42af-8203-5e3b91704843/0/8E5335B45EE371DC463E5C65783A244FD1846656.mft File: 8E5335B45EE371DC463E5C65783A244FD1846656.mft (raw, json) Hash identifier: ToXAZ+zpg0h4lrv7psuYGiZ0qRtPXQIDl/WKJzD2BQ4= Subject key identifier: A2:76:11:3B:89:FA:1B:57:43:B9:D3:83:C5:43:D5:C9:89:1F:D4:42 Authority key identifier: 8E:53:35:B4:5E:E3:71:DC:46:3E:5C:65:78:3A:24:4F:D1:84:66:56 Certificate issuer: /CN=8E5335B45EE371DC463E5C65783A244FD1846656 Certificate serial: 14688C3D0D47DD11353A01CCCE873EE11CF477EC Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8E5335B45EE371DC463E5C65783A244FD1846656.cer Subject info access: rsync://repo-rpki.idnic.net/repo/59cc2e5b-3b91-42af-8203-5e3b91704843/0/8E5335B45EE371DC463E5C65783A244FD1846656.mft Manifest number: E2 Signing time: Fri 22 Aug 2025 21:01:32 +0000 Manifest this update: Fri 22 Aug 2025 20:56:32 +0000 Manifest next update: Mon 25 Aug 2025 21:08:32 +0000 Files and hashes: 1: 3130332e3138302e39352e302f32342d3234203d3e20313439333538.roa (hash: gZ7MIdwunPoLq27viYGE8zwAvrRl3NrvQYfYS07O7wA=) 2: 8E5335B45EE371DC463E5C65783A244FD1846656.crl (hash: M/engFIEB3aTsAYzRQjcIk+Avp3HMVyuU+BnTYBXcZA=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/59cc2e5b-3b91-42af-8203-5e3b91704843/0/8E5335B45EE371DC463E5C65783A244FD1846656.crl rsync://repo-rpki.idnic.net/repo/59cc2e5b-3b91-42af-8203-5e3b91704843/0/8E5335B45EE371DC463E5C65783A244FD1846656.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8E5335B45EE371DC463E5C65783A244FD1846656.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 25 Aug 2025 21:08:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 14:68:8c:3d:0d:47:dd:11:35:3a:01:cc:ce:87:3e:e1:1c:f4:77:ec Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8E5335B45EE371DC463E5C65783A244FD1846656 Validity Not Before: Aug 22 20:56:32 2025 GMT Not After : Aug 25 21:08:32 2025 GMT Subject: CN=A276113B89FA1B5743B9D383C543D5C9891FD442 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:73:e2:0a:cb:65:15:8b:23:b7:05:d3:73:d4: 14:e8:5b:83:19:55:68:83:53:f4:ae:0f:78:3c:7a: 9b:bf:b8:bc:3e:8f:63:20:17:31:ba:70:73:22:e6: 6b:54:94:52:92:ba:10:5f:fd:68:d5:91:f6:ef:c6: 4c:dc:d8:8b:d5:5a:f7:5b:b0:be:cd:7c:fc:da:16: ef:47:51:b3:94:99:7e:50:b4:9e:49:78:d0:fd:5f: 51:d9:e8:9c:79:ff:f4:b0:36:26:8e:47:42:54:de: d7:81:f9:95:b7:0e:67:e3:67:28:6e:b4:b5:63:1d: 02:00:1d:73:55:49:9d:7e:84:d0:1d:e1:2d:33:85: 8c:7c:e7:45:47:1e:fa:b4:ea:7c:e5:21:0d:c6:15: 55:e1:2c:84:4b:9f:bd:68:8c:ca:c4:3d:c2:6b:d3: 34:07:bb:c4:86:9b:04:83:59:67:e5:e9:fb:85:90: 51:66:03:bf:6c:4d:af:a6:64:19:03:54:8c:ff:36: fd:48:d1:c9:c7:97:70:da:32:0e:9a:aa:28:c9:7e: 22:b0:3a:44:c0:38:e2:9b:6b:0e:3b:31:8c:a6:a4: ae:c4:af:0a:fa:15:1e:d9:3e:38:20:2f:1a:00:41: be:f2:f5:e1:62:2a:64:91:78:8b:62:e9:01:e1:96: a8:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:76:11:3B:89:FA:1B:57:43:B9:D3:83:C5:43:D5:C9:89:1F:D4:42 X509v3 Authority Key Identifier: keyid:8E:53:35:B4:5E:E3:71:DC:46:3E:5C:65:78:3A:24:4F:D1:84:66:56 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/59cc2e5b-3b91-42af-8203-5e3b91704843/0/8E5335B45EE371DC463E5C65783A244FD1846656.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8E5335B45EE371DC463E5C65783A244FD1846656.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/59cc2e5b-3b91-42af-8203-5e3b91704843/0/8E5335B45EE371DC463E5C65783A244FD1846656.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption bc:f0:91:15:ac:b6:25:1c:65:87:a7:94:49:f2:6a:72:f1:34: a2:0b:45:f5:bb:ee:c7:56:4b:9a:7f:35:2c:c7:95:9f:7b:f3: 0e:b3:00:8e:38:c9:cb:97:59:48:71:6a:ff:24:10:0f:01:6f: b1:cd:ea:4e:73:81:df:68:f3:f2:ff:27:65:2f:14:e9:aa:1d: 9a:45:5f:36:e3:8e:6b:d4:4d:a6:27:07:d3:dd:8e:02:f7:ab: d1:b6:02:57:80:35:48:4d:89:06:d6:0a:12:ec:0e:41:37:cb: a3:bd:6e:a9:8b:7b:f1:23:76:51:f6:63:b8:0e:75:16:34:ca: f5:c5:7f:64:d1:60:18:23:20:a4:cc:b0:db:e6:77:56:80:f8: 0e:e3:38:91:4b:e7:93:80:6d:f3:09:dd:23:6b:6d:05:22:dc: a6:de:b5:d9:2b:9a:cd:da:9e:55:dd:e9:20:fa:a1:3f:e0:f3: 86:3c:4d:b7:d0:82:f8:82:90:19:3c:8a:5c:ac:d9:95:31:c3: 70:7f:5f:3c:40:c8:6f:dc:36:71:ca:53:e4:2c:b3:ee:bd:db: a7:c7:37:a8:d3:75:8d:61:58:1e:18:18:cc:11:f2:9a:dd:f7: 6c:58:4a:16:da:0b:08:a8:ad:42:40:98:c8:1b:fc:a1:4f:db: f3:e2:9a:88 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUFGiMPQ1H3RE1OgHMzoc+4Rz0d+wwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEU1MzM1QjQ1RUUzNzFEQzQ2M0U1QzY1NzgzQTI0NEZE MTg0NjY1NjAeFw0yNTA4MjIyMDU2MzJaFw0yNTA4MjUyMTA4MzJaMDMxMTAvBgNV BAMTKEEyNzYxMTNCODlGQTFCNTc0M0I5RDM4M0M1NDNENUM5ODkxRkQ0NDIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC0c+IKy2UViyO3BdNz1BToW4MZ VWiDU/SuD3g8epu/uLw+j2MgFzG6cHMi5mtUlFKSuhBf/WjVkfbvxkzc2IvVWvdb sL7NfPzaFu9HUbOUmX5QtJ5JeND9X1HZ6Jx5//SwNiaOR0JU3teB+ZW3DmfjZyhu tLVjHQIAHXNVSZ1+hNAd4S0zhYx850VHHvq06nzlIQ3GFVXhLIRLn71ojMrEPcJr 0zQHu8SGmwSDWWfl6fuFkFFmA79sTa+mZBkDVIz/Nv1I0cnHl3DaMg6aqijJfiKw OkTAOOKbaw47MYympK7Erwr6FR7ZPjggLxoAQb7y9eFiKmSReIti6QHhlqghAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUonYRO4n6G1dDudODxUPVyYkf1EIwHwYDVR0j BBgwFoAUjlM1tF7jcdxGPlxleDokT9GEZlYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 OWNjMmU1Yi0zYjkxLTQyYWYtODIwMy01ZTNiOTE3MDQ4NDMvMC84RTUzMzVCNDVF RTM3MURDNDYzRTVDNjU3ODNBMjQ0RkQxODQ2NjU2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOEU1MzM1QjQ1RUUzNzFEQzQ2M0U1QzY1NzgzQTI0NEZEMTg0 NjY1Ni5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNTljYzJlNWItM2I5MS00MmFmLTgy MDMtNWUzYjkxNzA0ODQzLzAvOEU1MzM1QjQ1RUUzNzFEQzQ2M0U1QzY1NzgzQTI0 NEZEMTg0NjY1Ni5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALzwkRWstiUcZYenlEnyanLxNKILRfW77sdW S5p/NSzHlZ978w6zAI44ycuXWUhxav8kEA8Bb7HN6k5zgd9o8/L/J2UvFOmqHZpF XzbjjmvUTaYnB9PdjgL3q9G2AleANUhNiQbWChLsDkE3y6O9bqmLe/EjdlH2Y7gO dRY0yvXFf2TRYBgjIKTMsNvmd1aA+A7jOJFL55OAbfMJ3SNrbQUi3Kbetdkrms3a nlXd6SD6oT/g84Y8TbfQgviCkBk8ilys2ZUxw3B/XzxAyG/cNnHKU+Qss+6926fH N6jTdY1hWB4YGMwR8prd92xYShbaCwiorUJAmMgb/KFP2/Pimog= -----END CERTIFICATE-----Generated at Sat Aug 23 12:40:22 2025 by rpki-client