$ rpki-client -vvf repo-rpki.idnic.net/repo/71403409-bf04-42e9-9567-b06ec823d901/0/8910B51FCAA7F54124A76AF839CE19F4055A1061.mft File: 8910B51FCAA7F54124A76AF839CE19F4055A1061.mft (raw, json) Hash identifier: E0n7POiw2rTA3FPzKSHhrsR4g8EjwouePnk7imY5l4g= Subject key identifier: CE:19:1E:F9:70:E0:99:FF:94:C8:01:F1:C4:F8:6C:E6:71:9F:04:9E Authority key identifier: 89:10:B5:1F:CA:A7:F5:41:24:A7:6A:F8:39:CE:19:F4:05:5A:10:61 Certificate issuer: /CN=8910B51FCAA7F54124A76AF839CE19F4055A1061 Certificate serial: 24DEABD9A126EC27E1D6C8607D7D2ABD26A903EA Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/8910B51FCAA7F54124A76AF839CE19F4055A1061.cer Subject info access: rsync://repo-rpki.idnic.net/repo/71403409-bf04-42e9-9567-b06ec823d901/0/8910B51FCAA7F54124A76AF839CE19F4055A1061.mft Manifest number: BD Signing time: Fri 22 Aug 2025 02:21:41 +0000 Manifest this update: Fri 22 Aug 2025 02:16:41 +0000 Manifest next update: Mon 25 Aug 2025 07:20:41 +0000 Files and hashes: 1: 8910B51FCAA7F54124A76AF839CE19F4055A1061.crl (hash: NF0vZhhyuG3zbrZMF0A8Y+Lh0/5QTHQLc+lzkHFRlfA=) 2: 3136302e31392e31362e302f32342d3234203d3e20313532303733.roa (hash: BD9874huussdd9AhnhjODm64dILqVkWxIW7wjOoaAMQ=) 3: 3136302e31392e31372e302f32342d3234203d3e20313532303733.roa (hash: z0YgoG/ujpHrwuWoXrEZAv8nwDL/OBeAUxVX0QCVaBM=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/71403409-bf04-42e9-9567-b06ec823d901/0/8910B51FCAA7F54124A76AF839CE19F4055A1061.crl rsync://repo-rpki.idnic.net/repo/71403409-bf04-42e9-9567-b06ec823d901/0/8910B51FCAA7F54124A76AF839CE19F4055A1061.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/8910B51FCAA7F54124A76AF839CE19F4055A1061.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 25 Aug 2025 07:20:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 24:de:ab:d9:a1:26:ec:27:e1:d6:c8:60:7d:7d:2a:bd:26:a9:03:ea Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8910B51FCAA7F54124A76AF839CE19F4055A1061 Validity Not Before: Aug 22 02:16:41 2025 GMT Not After : Aug 25 07:20:41 2025 GMT Subject: CN=CE191EF970E099FF94C801F1C4F86CE6719F049E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:af:0c:57:22:bf:ff:17:7b:97:17:c4:82:77: 38:c4:e1:0b:c5:2a:5a:0a:a1:ba:55:08:21:6f:97: 27:50:5b:37:99:08:54:9c:76:e9:c3:43:a0:87:2d: 3e:0b:e3:6f:8d:0a:6a:29:27:bb:b3:ce:48:bf:66: e8:2b:a2:a0:5c:c1:36:22:fc:b4:ab:94:25:15:df: e1:9c:a6:47:af:88:72:3e:fe:27:4b:bd:3c:7b:cd: 1e:88:4e:e3:1c:8b:b2:15:8f:37:ef:54:7a:bb:48: 07:41:a3:c0:d3:35:06:07:39:00:9f:0f:12:f6:ca: b9:95:20:57:3e:a8:07:7d:e7:3f:38:35:2f:52:13: 89:e2:de:51:ca:4f:38:90:0b:87:14:33:35:c9:82: 54:43:ea:c7:94:49:12:51:98:9a:b5:c5:9d:54:28: 75:de:bb:98:79:2d:a9:7b:20:c9:9c:01:fe:05:5e: 75:f2:9d:88:d6:ed:67:34:6e:58:6f:f5:42:4b:77: e6:b2:f8:a7:3b:10:03:5a:42:69:fc:e7:f8:61:a9: 75:63:0d:48:a7:50:62:4c:e1:37:83:c6:de:6a:f1: 70:c5:3a:a9:98:8f:23:04:cb:21:db:fb:6d:30:21: fd:ce:15:e1:7c:4f:bc:ed:ef:7c:08:22:ac:7b:2a: e3:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CE:19:1E:F9:70:E0:99:FF:94:C8:01:F1:C4:F8:6C:E6:71:9F:04:9E X509v3 Authority Key Identifier: keyid:89:10:B5:1F:CA:A7:F5:41:24:A7:6A:F8:39:CE:19:F4:05:5A:10:61 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/71403409-bf04-42e9-9567-b06ec823d901/0/8910B51FCAA7F54124A76AF839CE19F4055A1061.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/8910B51FCAA7F54124A76AF839CE19F4055A1061.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/71403409-bf04-42e9-9567-b06ec823d901/0/8910B51FCAA7F54124A76AF839CE19F4055A1061.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 18:30:fb:9a:19:67:64:ae:1f:99:c9:45:e5:67:9c:03:1c:79: b4:f0:64:e8:94:53:fd:57:39:cd:4c:32:0b:e3:3a:d2:9a:d2: c9:e3:a2:81:ae:1b:43:9a:1c:95:a0:f2:47:dc:cc:01:86:85: 6e:dd:e4:de:43:8f:f0:cd:00:29:e8:72:83:83:0a:f4:09:86: 12:a8:39:9e:a2:c1:1b:d2:2b:40:9b:28:07:e1:83:95:ec:7d: 96:8f:72:ed:83:d5:a5:e5:f5:5d:c7:11:80:d5:74:72:de:5e: c8:25:d7:84:3e:e8:7d:b4:97:92:02:87:d7:af:3e:25:25:2b: 10:0b:32:b9:66:fc:d4:24:c5:15:69:c1:79:da:58:65:1c:90: d0:c7:c7:dc:0d:f3:12:0a:8c:4e:65:0e:17:f0:0c:14:ac:27: 2d:a7:f7:ad:c0:01:e7:77:52:df:78:13:2e:74:c6:cd:09:b4: d5:0d:0f:ea:d2:07:b2:30:f7:12:86:1e:52:03:bb:ef:ba:0d: 88:82:16:b4:99:8d:cf:56:63:89:9d:e0:cf:75:20:c2:fd:ac: 86:2d:2e:aa:82:26:a2:91:36:e0:2b:11:b1:27:91:5c:37:f6: 83:d6:12:2e:34:00:e3:c3:cd:8c:c7:97:12:93:05:cb:48:4c: 28:f1:0b:57 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUJN6r2aEm7Cfh1shgfX0qvSapA+owDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODkxMEI1MUZDQUE3RjU0MTI0QTc2QUY4MzlDRTE5RjQw NTVBMTA2MTAeFw0yNTA4MjIwMjE2NDFaFw0yNTA4MjUwNzIwNDFaMDMxMTAvBgNV BAMTKENFMTkxRUY5NzBFMDk5RkY5NEM4MDFGMUM0Rjg2Q0U2NzE5RjA0OUUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCWrwxXIr//F3uXF8SCdzjE4QvF KloKobpVCCFvlydQWzeZCFScdunDQ6CHLT4L42+NCmopJ7uzzki/ZugroqBcwTYi /LSrlCUV3+GcpkeviHI+/idLvTx7zR6ITuMci7IVjzfvVHq7SAdBo8DTNQYHOQCf DxL2yrmVIFc+qAd95z84NS9SE4ni3lHKTziQC4cUMzXJglRD6seUSRJRmJq1xZ1U KHXeu5h5Lal7IMmcAf4FXnXynYjW7Wc0blhv9UJLd+ay+Kc7EANaQmn85/hhqXVj DUinUGJM4TeDxt5q8XDFOqmYjyMEyyHb+20wIf3OFeF8T7zt73wIIqx7KuMpAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUzhke+XDgmf+UyAHxxPhs5nGfBJ4wHwYDVR0j BBgwFoAUiRC1H8qn9UEkp2r4Oc4Z9AVaEGEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 MTQwMzQwOS1iZjA0LTQyZTktOTU2Ny1iMDZlYzgyM2Q5MDEvMC84OTEwQjUxRkNB QTdGNTQxMjRBNzZBRjgzOUNFMTlGNDA1NUExMDYxLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvODkxMEI1MUZDQUE3RjU0MTI0QTc2QUY4MzlDRTE5RjQwNTVB MTA2MS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNzE0MDM0MDktYmYwNC00MmU5LTk1 NjctYjA2ZWM4MjNkOTAxLzAvODkxMEI1MUZDQUE3RjU0MTI0QTc2QUY4MzlDRTE5 RjQwNTVBMTA2MS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABgw+5oZZ2SuH5nJReVnnAMcebTwZOiUU/1X Oc1MMgvjOtKa0snjooGuG0OaHJWg8kfczAGGhW7d5N5Dj/DNACnocoODCvQJhhKo OZ6iwRvSK0CbKAfhg5XsfZaPcu2D1aXl9V3HEYDVdHLeXsgl14Q+6H20l5ICh9ev PiUlKxALMrlm/NQkxRVpwXnaWGUckNDHx9wN8xIKjE5lDhfwDBSsJy2n963AAed3 Ut94Ey50xs0JtNUND+rSB7Iw9xKGHlIDu++6DYiCFrSZjc9WY4md4M91IML9rIYt LqqCJqKRNuArEbEnkVw39oPWEi40AOPDzYzHlxKTBctITCjxC1c= -----END CERTIFICATE-----Generated at Sat Aug 23 23:35:07 2025 by rpki-client