$ rpki-client -vvf repo-rpki.idnic.net/repo/6e9b0bad-66b9-4f28-a7c5-e9a9fe120ad7/0/8DAFDBD814B60F568505D65130E4661FCD7D665F.mft File: 8DAFDBD814B60F568505D65130E4661FCD7D665F.mft (raw, json) Hash identifier: EeYHga2ciCByPAs2o7AH0xExk8XfQW17up0ktLyymcM= Subject key identifier: 85:4D:BA:20:9B:64:C7:0F:07:14:88:7F:49:7B:1A:28:43:16:98:9E Authority key identifier: 8D:AF:DB:D8:14:B6:0F:56:85:05:D6:51:30:E4:66:1F:CD:7D:66:5F Certificate issuer: /CN=8DAFDBD814B60F568505D65130E4661FCD7D665F Certificate serial: 248F34BECCF87226CDB23C380942913A5ADEBC62 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8DAFDBD814B60F568505D65130E4661FCD7D665F.cer Subject info access: rsync://repo-rpki.idnic.net/repo/6e9b0bad-66b9-4f28-a7c5-e9a9fe120ad7/0/8DAFDBD814B60F568505D65130E4661FCD7D665F.mft Manifest number: 022C Signing time: Sat 23 Aug 2025 05:41:53 +0000 Manifest this update: Sat 23 Aug 2025 05:36:53 +0000 Manifest next update: Tue 26 Aug 2025 12:13:53 +0000 Files and hashes: 1: 3130332e3136382e3139302e302f32342d3234203d3e20313432333139.roa (hash: /4nmgLfcCNw5dynQDZtGk4IBxc3BmveSB9gkF4R0RCk=) 2: 8DAFDBD814B60F568505D65130E4661FCD7D665F.crl (hash: cksFkiG708stOHZvj/RSL4XP+P0w6f5Gp7YykyNj/qY=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/6e9b0bad-66b9-4f28-a7c5-e9a9fe120ad7/0/8DAFDBD814B60F568505D65130E4661FCD7D665F.crl rsync://repo-rpki.idnic.net/repo/6e9b0bad-66b9-4f28-a7c5-e9a9fe120ad7/0/8DAFDBD814B60F568505D65130E4661FCD7D665F.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8DAFDBD814B60F568505D65130E4661FCD7D665F.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 26 Aug 2025 10:19:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 24:8f:34:be:cc:f8:72:26:cd:b2:3c:38:09:42:91:3a:5a:de:bc:62 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8DAFDBD814B60F568505D65130E4661FCD7D665F Validity Not Before: Aug 23 05:36:53 2025 GMT Not After : Aug 26 12:13:53 2025 GMT Subject: CN=854DBA209B64C70F0714887F497B1A284316989E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:7f:22:c0:c5:5b:c3:c6:51:3e:b9:3f:4b:cf: e6:16:f5:c6:ec:e3:7b:7e:6d:05:e4:78:04:82:a2: 08:17:4f:5f:38:fe:cd:23:67:32:f3:c4:da:e8:1a: df:55:70:b0:60:6d:28:b1:a9:b6:79:8b:2b:93:d5: eb:c8:5e:38:41:a4:9e:48:6f:74:44:74:bc:71:a8: 09:f2:a5:92:08:b3:08:41:e8:ca:3d:67:55:1b:5e: b3:42:28:0d:3f:ac:02:ce:74:87:71:87:b4:69:9f: 2f:20:ad:e0:e9:79:98:56:bf:76:a9:21:61:6d:62: 34:ae:80:d7:60:09:a9:2f:f4:99:87:ef:12:0a:d3: f9:c9:62:f6:a7:39:06:95:9f:79:48:cd:e2:03:ca: 04:89:b3:3b:48:ee:3a:04:68:c5:6a:2f:00:e3:5a: 39:95:9e:aa:0e:83:2d:e7:16:c4:d2:b8:b5:9d:fd: 51:54:51:3f:ec:eb:b8:30:f0:c8:61:29:a7:a9:4c: 00:80:71:69:3a:3e:e8:8e:66:b9:f9:05:f4:df:b5: 1b:51:1c:3a:77:bb:a8:75:38:a6:f1:69:4e:92:8e: c7:3f:3a:b4:1a:b0:e8:f4:6e:5c:90:f4:af:c9:9e: 36:a4:82:56:a4:ef:d6:b0:4a:1e:fe:9b:fc:93:aa: ec:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:4D:BA:20:9B:64:C7:0F:07:14:88:7F:49:7B:1A:28:43:16:98:9E X509v3 Authority Key Identifier: keyid:8D:AF:DB:D8:14:B6:0F:56:85:05:D6:51:30:E4:66:1F:CD:7D:66:5F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/6e9b0bad-66b9-4f28-a7c5-e9a9fe120ad7/0/8DAFDBD814B60F568505D65130E4661FCD7D665F.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8DAFDBD814B60F568505D65130E4661FCD7D665F.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/6e9b0bad-66b9-4f28-a7c5-e9a9fe120ad7/0/8DAFDBD814B60F568505D65130E4661FCD7D665F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3f:32:c0:e2:81:f4:60:85:dc:0d:eb:7a:3e:24:f8:5d:7c:14: d4:80:59:c3:f9:28:ec:7e:18:15:0a:da:0a:ab:8a:a1:c8:52: ec:0f:ba:7e:36:28:8e:66:2d:5b:ba:02:20:6c:0f:21:5c:1b: ae:e0:a9:3f:af:95:af:5b:de:20:93:e1:64:15:76:90:03:a5: bf:42:f9:d7:d7:11:96:df:27:f1:c3:4e:11:7a:e1:14:75:78: a5:2a:f6:b5:69:a6:12:82:46:6a:88:08:e9:71:58:63:ca:a3: ae:cb:11:02:a9:ed:37:03:98:a1:7a:84:f6:5e:ba:7c:4a:4e: 97:be:d9:4c:0f:d9:10:88:4f:c5:6b:16:cd:ee:e0:a5:f2:be: 48:d7:80:33:b4:b6:00:34:0c:f1:75:31:f8:69:e7:c7:31:c6: e5:8c:56:f8:be:a1:9a:6a:ba:4b:9c:9c:b1:6b:64:0a:ca:ef: 5e:f1:52:ee:e8:21:a0:77:06:dc:c8:f1:d2:1a:8e:d0:bf:d3: dd:98:f9:c9:dc:ed:11:17:f3:c0:c6:70:21:81:ad:98:b2:bd: 10:64:bd:08:6d:a4:0a:cb:5b:93:a2:72:49:dd:52:24:93:95: 91:e0:57:24:1e:86:7e:ad:ab:c1:b3:5c:5d:ca:13:99:e2:40: c1:2c:b9:37 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUJI80vsz4cibNsjw4CUKROlrevGIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOERBRkRCRDgxNEI2MEY1Njg1MDVENjUxMzBFNDY2MUZD RDdENjY1RjAeFw0yNTA4MjMwNTM2NTNaFw0yNTA4MjYxMjEzNTNaMDMxMTAvBgNV BAMTKDg1NERCQTIwOUI2NEM3MEYwNzE0ODg3RjQ5N0IxQTI4NDMxNjk4OUUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDXfyLAxVvDxlE+uT9Lz+YW9cbs 43t+bQXkeASCoggXT184/s0jZzLzxNroGt9VcLBgbSixqbZ5iyuT1evIXjhBpJ5I b3REdLxxqAnypZIIswhB6Mo9Z1UbXrNCKA0/rALOdIdxh7Rpny8greDpeZhWv3ap IWFtYjSugNdgCakv9JmH7xIK0/nJYvanOQaVn3lIzeIDygSJsztI7joEaMVqLwDj WjmVnqoOgy3nFsTSuLWd/VFUUT/s67gw8MhhKaepTACAcWk6PuiOZrn5BfTftRtR HDp3u6h1OKbxaU6Sjsc/OrQasOj0blyQ9K/Jnjakglak79awSh7+m/yTquxvAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUhU26IJtkxw8HFIh/SXsaKEMWmJ4wHwYDVR0j BBgwFoAUja/b2BS2D1aFBdZRMORmH819Zl8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 ZTliMGJhZC02NmI5LTRmMjgtYTdjNS1lOWE5ZmUxMjBhZDcvMC84REFGREJEODE0 QjYwRjU2ODUwNUQ2NTEzMEU0NjYxRkNEN0Q2NjVGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOERBRkRCRDgxNEI2MEY1Njg1MDVENjUxMzBFNDY2MUZDRDdE NjY1Ri5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNmU5YjBiYWQtNjZiOS00ZjI4LWE3 YzUtZTlhOWZlMTIwYWQ3LzAvOERBRkRCRDgxNEI2MEY1Njg1MDVENjUxMzBFNDY2 MUZDRDdENjY1Ri5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAD8ywOKB9GCF3A3rej4k+F18FNSAWcP5KOx+ GBUK2gqriqHIUuwPun42KI5mLVu6AiBsDyFcG67gqT+vla9b3iCT4WQVdpADpb9C +dfXEZbfJ/HDThF64RR1eKUq9rVpphKCRmqICOlxWGPKo67LEQKp7TcDmKF6hPZe unxKTpe+2UwP2RCIT8VrFs3u4KXyvkjXgDO0tgA0DPF1Mfhp58cxxuWMVvi+oZpq ukucnLFrZArK717xUu7oIaB3BtzI8dIajtC/092Y+cnc7REX88DGcCGBrZiyvRBk vQhtpArLW5OickndUiSTlZHgVyQehn6tq8GzXF3KE5niQMEsuTc= -----END CERTIFICATE-----Generated at Sat Aug 23 12:10:11 2025 by rpki-client