$ rpki-client -vvf repo-rpki.idnic.net/repo/643db7d2-b3fd-4214-b6a4-d0162f95e72e/0/8714172B5D3FC9C36A83EBA27AB946FC69A4F821.mft File: 8714172B5D3FC9C36A83EBA27AB946FC69A4F821.mft (raw, json) Hash identifier: eAXTAKZuHRrilHu+IuS7uyk9EvWgFraa1kPwgBvDoNo= Subject key identifier: FC:64:56:98:2C:D1:0D:2D:C8:F0:C5:E6:6A:5B:EE:57:05:29:AE:96 Authority key identifier: 87:14:17:2B:5D:3F:C9:C3:6A:83:EB:A2:7A:B9:46:FC:69:A4:F8:21 Certificate issuer: /CN=8714172B5D3FC9C36A83EBA27AB946FC69A4F821 Certificate serial: 70E655E3CE8637DEB44C4AA5CB67DE8EFBEEAD68 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8714172B5D3FC9C36A83EBA27AB946FC69A4F821.cer Subject info access: rsync://repo-rpki.idnic.net/repo/643db7d2-b3fd-4214-b6a4-d0162f95e72e/0/8714172B5D3FC9C36A83EBA27AB946FC69A4F821.mft Manifest number: 01E8 Signing time: Thu 21 Aug 2025 14:52:20 +0000 Manifest this update: Thu 21 Aug 2025 14:47:20 +0000 Manifest next update: Sun 24 Aug 2025 15:14:20 +0000 Files and hashes: 1: 8714172B5D3FC9C36A83EBA27AB946FC69A4F821.crl (hash: wKnwlSPeq+YWcZQEUK/kyKxmGH7QgvgdW/CEFivJqJk=) 2: 3130332e32302e31362e302f32342d3234203d3e20313439393633.roa (hash: zDyrXTGOoVhoyVXFQzLfzvSBhhtitp+cvr9nrYj9PZk=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/643db7d2-b3fd-4214-b6a4-d0162f95e72e/0/8714172B5D3FC9C36A83EBA27AB946FC69A4F821.crl rsync://repo-rpki.idnic.net/repo/643db7d2-b3fd-4214-b6a4-d0162f95e72e/0/8714172B5D3FC9C36A83EBA27AB946FC69A4F821.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8714172B5D3FC9C36A83EBA27AB946FC69A4F821.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 24 Aug 2025 15:14:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 70:e6:55:e3:ce:86:37:de:b4:4c:4a:a5:cb:67:de:8e:fb:ee:ad:68 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8714172B5D3FC9C36A83EBA27AB946FC69A4F821 Validity Not Before: Aug 21 14:47:20 2025 GMT Not After : Aug 24 15:14:20 2025 GMT Subject: CN=FC6456982CD10D2DC8F0C5E66A5BEE570529AE96 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:8d:39:79:f6:36:cf:35:73:31:f8:b1:05:a3: 4d:1a:8d:3d:5f:52:ac:e8:d7:25:13:b5:2c:93:7d: bf:7f:2b:ee:55:4d:db:58:7d:b2:c5:0b:54:f9:e9: 30:fb:b8:a0:47:13:0b:b1:0e:13:67:fa:e4:78:ea: 8c:60:b7:9c:8f:78:d1:71:21:3f:c2:6a:64:b7:5e: 70:bd:24:06:9d:25:49:fc:36:49:db:2c:11:24:d8: 69:f0:1b:af:76:86:4b:68:b1:fc:76:41:94:22:a6: 27:eb:01:bf:8f:0b:7a:4d:94:7e:e8:c1:6c:bf:91: 26:34:ad:c9:99:2b:c5:80:26:40:ba:4d:5e:03:37: d8:16:df:35:1b:e7:e2:b3:31:71:ec:b2:da:46:a5: 78:f2:d5:2e:06:0a:5f:ae:85:43:ac:31:dc:56:a4: 6d:ab:4e:65:b6:63:d5:98:d8:0a:d8:68:61:6c:b3: 1d:52:78:16:09:0b:1d:e0:11:4b:e4:77:70:22:2d: 73:c0:38:65:c4:fb:74:e0:21:2d:41:59:79:6d:05: f6:18:0a:1b:56:d5:a0:bf:b7:cf:da:14:80:83:6b: a3:08:20:d0:ac:dc:4c:b8:2f:1b:1c:33:f1:0b:e4: 3e:90:d4:63:06:b0:e3:19:57:45:fd:93:d5:96:28: d5:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FC:64:56:98:2C:D1:0D:2D:C8:F0:C5:E6:6A:5B:EE:57:05:29:AE:96 X509v3 Authority Key Identifier: keyid:87:14:17:2B:5D:3F:C9:C3:6A:83:EB:A2:7A:B9:46:FC:69:A4:F8:21 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/643db7d2-b3fd-4214-b6a4-d0162f95e72e/0/8714172B5D3FC9C36A83EBA27AB946FC69A4F821.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8714172B5D3FC9C36A83EBA27AB946FC69A4F821.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/643db7d2-b3fd-4214-b6a4-d0162f95e72e/0/8714172B5D3FC9C36A83EBA27AB946FC69A4F821.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 81:7a:43:5f:e4:51:7f:e1:df:14:de:c7:84:95:ae:fa:64:68: d8:e0:a3:1d:69:c0:58:8e:fd:2f:23:11:6b:5a:4b:65:12:6a: b1:93:4e:9c:21:3b:cd:76:7c:aa:86:ba:99:bb:30:1b:68:e0: 53:88:14:43:a8:35:66:c6:ea:c9:30:d0:1e:e5:c0:98:17:38: b0:d5:7c:1e:eb:d5:05:ed:c3:bc:27:0d:07:0a:d3:dc:8c:84: c1:6d:03:86:2e:11:c6:d0:7f:77:ce:5d:6f:ac:57:3b:0e:d8: 79:15:41:05:35:41:f5:63:95:24:3b:af:99:86:95:cb:8b:98: 4e:39:a2:b9:37:54:d2:89:56:03:ec:2d:6e:5f:c8:b7:bb:28: 12:e3:84:15:17:fa:71:03:15:dd:e7:79:da:c8:c0:e1:2e:bf: b0:9c:20:72:fe:18:34:4f:29:67:69:c3:d5:d8:b1:ab:36:67: 84:d7:7c:0b:91:0b:9d:d7:80:dc:68:d1:39:76:0c:7a:0b:6f: 70:5b:0c:a3:7e:a1:eb:68:19:74:0e:b9:56:76:cd:0e:49:5b: 27:73:d0:1f:ce:03:31:df:7a:89:0f:f6:95:23:2c:05:22:c4: e2:a7:8e:e2:8e:47:18:e9:f4:27:75:9c:32:ba:01:06:3b:06: 55:be:d7:74 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUcOZV486GN960TEqly2fejvvurWgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODcxNDE3MkI1RDNGQzlDMzZBODNFQkEyN0FCOTQ2RkM2 OUE0RjgyMTAeFw0yNTA4MjExNDQ3MjBaFw0yNTA4MjQxNTE0MjBaMDMxMTAvBgNV BAMTKEZDNjQ1Njk4MkNEMTBEMkRDOEYwQzVFNjZBNUJFRTU3MDUyOUFFOTYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC2jTl59jbPNXMx+LEFo00ajT1f Uqzo1yUTtSyTfb9/K+5VTdtYfbLFC1T56TD7uKBHEwuxDhNn+uR46oxgt5yPeNFx IT/CamS3XnC9JAadJUn8NknbLBEk2GnwG692hktosfx2QZQipifrAb+PC3pNlH7o wWy/kSY0rcmZK8WAJkC6TV4DN9gW3zUb5+KzMXHsstpGpXjy1S4GCl+uhUOsMdxW pG2rTmW2Y9WY2ArYaGFssx1SeBYJCx3gEUvkd3AiLXPAOGXE+3TgIS1BWXltBfYY ChtW1aC/t8/aFICDa6MIINCs3Ey4LxscM/EL5D6Q1GMGsOMZV0X9k9WWKNUZAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU/GRWmCzRDS3I8MXmalvuVwUprpYwHwYDVR0j BBgwFoAUhxQXK10/ycNqg+uierlG/Gmk+CEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 NDNkYjdkMi1iM2ZkLTQyMTQtYjZhNC1kMDE2MmY5NWU3MmUvMC84NzE0MTcyQjVE M0ZDOUMzNkE4M0VCQTI3QUI5NDZGQzY5QTRGODIxLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvODcxNDE3MkI1RDNGQzlDMzZBODNFQkEyN0FCOTQ2RkM2OUE0 RjgyMS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNjQzZGI3ZDItYjNmZC00MjE0LWI2 YTQtZDAxNjJmOTVlNzJlLzAvODcxNDE3MkI1RDNGQzlDMzZBODNFQkEyN0FCOTQ2 RkM2OUE0RjgyMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIF6Q1/kUX/h3xTex4SVrvpkaNjgox1pwFiO /S8jEWtaS2USarGTTpwhO812fKqGupm7MBto4FOIFEOoNWbG6skw0B7lwJgXOLDV fB7r1QXtw7wnDQcK09yMhMFtA4YuEcbQf3fOXW+sVzsO2HkVQQU1QfVjlSQ7r5mG lcuLmE45ork3VNKJVgPsLW5fyLe7KBLjhBUX+nEDFd3nedrIwOEuv7CcIHL+GDRP KWdpw9XYsas2Z4TXfAuRC53XgNxo0Tl2DHoLb3BbDKN+oetoGXQOuVZ2zQ5JWydz 0B/OAzHfeokP9pUjLAUixOKnjuKORxjp9Cd1nDK6AQY7BlW+13Q= -----END CERTIFICATE-----Generated at Sat Aug 23 10:36:21 2025 by rpki-client