$ rpki-client -vvf repo-rpki.idnic.net/repo/7e8cbdc8-d195-4c7d-b3e8-0a8fbae8c284/0/8790EFE9518BF8664B34E1227585F3516FDC5367.mft File: 8790EFE9518BF8664B34E1227585F3516FDC5367.mft (raw, json) Hash identifier: ngtEWcABpgX5V1m5U9VYjj75CrPFtgBjRF/ApHyTSJE= Subject key identifier: BA:8A:3C:FC:92:B6:B1:17:37:3E:47:91:41:E5:3F:9A:C1:58:C4:5F Authority key identifier: 87:90:EF:E9:51:8B:F8:66:4B:34:E1:22:75:85:F3:51:6F:DC:53:67 Certificate issuer: /CN=8790EFE9518BF8664B34E1227585F3516FDC5367 Certificate serial: 2160522FCF701DE983A84C7B9CA6418590E9838C Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8790EFE9518BF8664B34E1227585F3516FDC5367.cer Subject info access: rsync://repo-rpki.idnic.net/repo/7e8cbdc8-d195-4c7d-b3e8-0a8fbae8c284/0/8790EFE9518BF8664B34E1227585F3516FDC5367.mft Manifest number: 01FD Signing time: Sat 23 Aug 2025 08:51:29 +0000 Manifest this update: Sat 23 Aug 2025 08:46:29 +0000 Manifest next update: Tue 26 Aug 2025 17:51:29 +0000 Files and hashes: 1: 3130332e3136362e39302e302f32332d3234203d3e20313431393431.roa (hash: u/DfRKi6okqGd/2PRwDyTkJXR+LfAGJBXiMbBVUigkU=) 2: 8790EFE9518BF8664B34E1227585F3516FDC5367.crl (hash: 0DFH9ckD+NqofYA2YYo9OAfPsKvX/z6fmdaYO5XJ9Gs=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/7e8cbdc8-d195-4c7d-b3e8-0a8fbae8c284/0/8790EFE9518BF8664B34E1227585F3516FDC5367.crl rsync://repo-rpki.idnic.net/repo/7e8cbdc8-d195-4c7d-b3e8-0a8fbae8c284/0/8790EFE9518BF8664B34E1227585F3516FDC5367.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8790EFE9518BF8664B34E1227585F3516FDC5367.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 26 Aug 2025 10:19:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 21:60:52:2f:cf:70:1d:e9:83:a8:4c:7b:9c:a6:41:85:90:e9:83:8c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8790EFE9518BF8664B34E1227585F3516FDC5367 Validity Not Before: Aug 23 08:46:29 2025 GMT Not After : Aug 26 17:51:29 2025 GMT Subject: CN=BA8A3CFC92B6B117373E479141E53F9AC158C45F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:bf:68:ab:d5:bb:9b:29:2b:21:56:6f:b6:e0: 9d:c4:de:21:28:2e:f5:fd:48:56:e7:03:b2:92:39: ec:c9:b2:19:a5:6d:ce:07:68:11:14:81:1a:71:5c: 3b:cd:5f:bd:fc:f5:47:6b:cc:86:dc:9b:29:f2:d4: 47:3c:10:b5:c5:4b:50:09:66:2c:d1:15:9d:5c:65: 04:dd:34:4a:25:d0:e0:71:be:14:53:da:19:7c:19: e6:af:6f:20:ec:cc:2b:0d:5e:fd:91:c1:74:18:cf: 0e:be:c8:62:3d:8d:b5:66:20:b1:75:05:a0:15:cc: b2:39:1f:9e:d8:d2:7d:ce:86:5a:65:ee:fb:78:9b: c2:bf:01:00:c7:6e:08:4f:30:46:a7:a3:3d:7b:b4: 39:05:07:fe:d1:59:4c:c7:02:38:76:ff:c5:95:38: 58:b8:be:bd:6f:93:cd:a9:fd:56:a2:fd:c9:21:be: 9f:17:76:3a:f5:97:ba:33:fe:4c:d4:e5:6b:d4:5f: 95:1c:60:56:98:5e:62:64:44:c7:cf:67:c1:00:7c: 63:1e:32:5a:34:b7:17:94:86:78:63:1d:38:fd:2a: 85:13:bf:08:26:7c:46:9f:ba:39:6d:b5:4f:38:23: b7:ab:7f:3e:dd:05:df:36:f3:d6:3c:56:6c:e5:40: 46:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BA:8A:3C:FC:92:B6:B1:17:37:3E:47:91:41:E5:3F:9A:C1:58:C4:5F X509v3 Authority Key Identifier: keyid:87:90:EF:E9:51:8B:F8:66:4B:34:E1:22:75:85:F3:51:6F:DC:53:67 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/7e8cbdc8-d195-4c7d-b3e8-0a8fbae8c284/0/8790EFE9518BF8664B34E1227585F3516FDC5367.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8790EFE9518BF8664B34E1227585F3516FDC5367.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/7e8cbdc8-d195-4c7d-b3e8-0a8fbae8c284/0/8790EFE9518BF8664B34E1227585F3516FDC5367.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 52:9a:5c:9f:93:84:d0:5d:36:24:9c:b1:75:27:d0:0b:1d:42: c0:d7:2b:a8:32:6f:36:10:fc:f1:87:9f:15:9c:ca:3e:eb:53: 52:0c:9c:4e:02:b8:eb:ae:f0:89:7b:9e:7a:2e:ef:15:94:09: cf:10:7c:cb:03:51:72:d4:ba:d5:f9:54:15:4c:ed:d6:d7:36: 07:d4:39:f7:69:25:86:37:cb:2f:ac:18:23:0e:5a:93:43:50: 5a:03:46:e6:45:09:44:47:b4:9e:27:63:cf:dc:ec:cb:97:c7: 86:5d:6b:6d:29:d1:fc:41:6e:e5:d4:b9:56:df:eb:24:a0:16: 8c:a5:7c:59:94:e8:5f:e2:d9:a1:6d:7f:74:f7:f9:3d:7a:1e: 2c:9c:a2:b7:9d:ef:10:b1:08:91:d2:f2:05:7f:3f:d8:82:d2: c7:1f:b2:44:4c:42:d0:f4:c1:11:c1:dc:2e:68:d6:c3:6b:96: ec:89:be:4b:0a:82:f9:39:ff:89:c6:d6:0a:2e:06:e6:05:69: 6e:83:a4:06:ed:d4:ba:21:9f:0a:e8:7e:d4:1e:7c:64:c6:f0: be:91:a2:ee:c8:a4:bf:1f:39:15:05:61:69:95:12:5e:c3:31: f3:d1:59:3e:c9:82:47:62:f3:6a:5f:de:20:c8:45:d4:1f:e1: 3a:f7:4b:9d -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUIWBSL89wHemDqEx7nKZBhZDpg4wwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODc5MEVGRTk1MThCRjg2NjRCMzRFMTIyNzU4NUYzNTE2 RkRDNTM2NzAeFw0yNTA4MjMwODQ2MjlaFw0yNTA4MjYxNzUxMjlaMDMxMTAvBgNV BAMTKEJBOEEzQ0ZDOTJCNkIxMTczNzNFNDc5MTQxRTUzRjlBQzE1OEM0NUYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCnv2ir1bubKSshVm+24J3E3iEo LvX9SFbnA7KSOezJshmlbc4HaBEUgRpxXDvNX7389UdrzIbcmyny1Ec8ELXFS1AJ ZizRFZ1cZQTdNEol0OBxvhRT2hl8GeavbyDszCsNXv2RwXQYzw6+yGI9jbVmILF1 BaAVzLI5H57Y0n3Ohlpl7vt4m8K/AQDHbghPMEanoz17tDkFB/7RWUzHAjh2/8WV OFi4vr1vk82p/Vai/ckhvp8Xdjr1l7oz/kzU5WvUX5UcYFaYXmJkRMfPZ8EAfGMe Mlo0txeUhnhjHTj9KoUTvwgmfEafujlttU84I7erfz7dBd8289Y8VmzlQEYxAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUuoo8/JK2sRc3PkeRQeU/msFYxF8wHwYDVR0j BBgwFoAUh5Dv6VGL+GZLNOEidYXzUW/cU2cwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 ZThjYmRjOC1kMTk1LTRjN2QtYjNlOC0wYThmYmFlOGMyODQvMC84NzkwRUZFOTUx OEJGODY2NEIzNEUxMjI3NTg1RjM1MTZGREM1MzY3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvODc5MEVGRTk1MThCRjg2NjRCMzRFMTIyNzU4NUYzNTE2RkRD NTM2Ny5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vN2U4Y2JkYzgtZDE5NS00YzdkLWIz ZTgtMGE4ZmJhZThjMjg0LzAvODc5MEVGRTk1MThCRjg2NjRCMzRFMTIyNzU4NUYz NTE2RkRDNTM2Ny5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFKaXJ+ThNBdNiScsXUn0AsdQsDXK6gybzYQ /PGHnxWcyj7rU1IMnE4CuOuu8Il7nnou7xWUCc8QfMsDUXLUutX5VBVM7dbXNgfU OfdpJYY3yy+sGCMOWpNDUFoDRuZFCURHtJ4nY8/c7MuXx4Zda20p0fxBbuXUuVbf 6ySgFoylfFmU6F/i2aFtf3T3+T16Hiycored7xCxCJHS8gV/P9iC0scfskRMQtD0 wRHB3C5o1sNrluyJvksKgvk5/4nG1gouBuYFaW6DpAbt1LohnwroftQefGTG8L6R ou7IpL8fORUFYWmVEl7DMfPRWT7Jgkdi82pf3iDIRdQf4Tr3S50= -----END CERTIFICATE-----Generated at Sat Aug 23 14:28:00 2025 by rpki-client