$ rpki-client -vvf repo-rpki.idnic.net/repo/8116fbc9-b31c-4225-a697-4fedbc234db6/0/C0C8E7243E4E8DECD7A8EA1D61FD424108E8D3D5.mft File: C0C8E7243E4E8DECD7A8EA1D61FD424108E8D3D5.mft (raw, json) Hash identifier: fsk1XoyLuiNnZGw/kBxapAQ96cVOt+82nRtAkZyVWAc= Subject key identifier: E0:E1:3B:09:E1:16:64:F6:0E:DC:70:75:4F:50:B5:1E:58:57:00:C0 Authority key identifier: C0:C8:E7:24:3E:4E:8D:EC:D7:A8:EA:1D:61:FD:42:41:08:E8:D3:D5 Certificate issuer: /CN=C0C8E7243E4E8DECD7A8EA1D61FD424108E8D3D5 Certificate serial: 3D2E05E9B584D4EE09CD770CA339C986655149DA Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C0C8E7243E4E8DECD7A8EA1D61FD424108E8D3D5.cer Subject info access: rsync://repo-rpki.idnic.net/repo/8116fbc9-b31c-4225-a697-4fedbc234db6/0/C0C8E7243E4E8DECD7A8EA1D61FD424108E8D3D5.mft Manifest number: 99 Signing time: Fri 22 Aug 2025 05:00:54 +0000 Manifest this update: Fri 22 Aug 2025 04:55:54 +0000 Manifest next update: Mon 25 Aug 2025 08:35:54 +0000 Files and hashes: 1: 3130332e37352e3233372e302f32342d3234203d3e203634333130.roa (hash: WLCShlxfdsF203Qx2wOYYjy6P8cT8pTLxL//5fp4yiA=) 2: C0C8E7243E4E8DECD7A8EA1D61FD424108E8D3D5.crl (hash: ON6srZQT4iUjOIFdW45/qWrA/8eZB6wV7y0XGauHH+w=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/8116fbc9-b31c-4225-a697-4fedbc234db6/0/C0C8E7243E4E8DECD7A8EA1D61FD424108E8D3D5.crl rsync://repo-rpki.idnic.net/repo/8116fbc9-b31c-4225-a697-4fedbc234db6/0/C0C8E7243E4E8DECD7A8EA1D61FD424108E8D3D5.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C0C8E7243E4E8DECD7A8EA1D61FD424108E8D3D5.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 25 Aug 2025 08:35:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3d:2e:05:e9:b5:84:d4:ee:09:cd:77:0c:a3:39:c9:86:65:51:49:da Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C0C8E7243E4E8DECD7A8EA1D61FD424108E8D3D5 Validity Not Before: Aug 22 04:55:54 2025 GMT Not After : Aug 25 08:35:54 2025 GMT Subject: CN=E0E13B09E11664F60EDC70754F50B51E585700C0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:50:ac:c2:5a:7a:e7:11:99:e5:e1:18:7b:dd: cc:7f:15:85:99:75:fe:24:c7:a4:fc:d5:34:ee:53: 33:98:52:d9:79:84:f1:70:14:39:cd:24:66:62:12: 08:4b:c3:d9:06:57:04:cf:45:e2:be:4f:d7:83:31: 71:7b:f6:91:d9:54:e0:c7:61:f0:29:82:70:c7:dc: cb:bb:bf:2a:4b:48:f4:3e:3b:f2:cf:93:bd:11:1d: 67:6d:cc:6c:01:35:0b:07:08:e5:72:a8:85:bd:18: d9:c5:20:b8:88:66:db:4a:d2:75:da:08:c0:cd:ab: 7d:96:1e:6e:3c:fc:90:f8:dd:14:23:54:cc:6f:76: 2c:7f:a9:42:bf:03:90:ab:aa:82:bd:fc:06:b0:aa: 12:85:d8:6b:78:d6:9d:f9:0e:48:c7:e7:80:8b:a0: c9:86:5b:1b:7b:1f:15:e6:3e:97:d0:2a:c0:72:de: 5d:02:43:38:b0:cf:7d:e1:61:01:56:3b:33:28:b7: c6:e7:c0:32:ba:b5:0b:7f:d6:27:b2:ab:ac:39:77: 33:36:88:27:f9:65:25:f6:6f:7f:d1:99:0f:65:ef: 74:59:80:02:74:a0:35:53:91:45:e3:e1:bf:66:9b: 5e:94:1e:c8:e2:6b:58:d2:70:b8:b3:f1:1c:df:2c: c4:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E0:E1:3B:09:E1:16:64:F6:0E:DC:70:75:4F:50:B5:1E:58:57:00:C0 X509v3 Authority Key Identifier: keyid:C0:C8:E7:24:3E:4E:8D:EC:D7:A8:EA:1D:61:FD:42:41:08:E8:D3:D5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/8116fbc9-b31c-4225-a697-4fedbc234db6/0/C0C8E7243E4E8DECD7A8EA1D61FD424108E8D3D5.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C0C8E7243E4E8DECD7A8EA1D61FD424108E8D3D5.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/8116fbc9-b31c-4225-a697-4fedbc234db6/0/C0C8E7243E4E8DECD7A8EA1D61FD424108E8D3D5.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4f:b0:e3:6d:12:4e:82:21:3e:e3:c1:99:85:1f:b7:2a:4e:e6: 01:1e:ea:a9:ff:bc:29:bb:97:88:3e:a8:98:89:44:b3:4a:d7: 8a:a5:f4:f3:d8:31:e7:92:17:7e:b8:83:55:15:07:e8:2f:67: 94:d7:3c:3e:cb:a9:92:62:6d:d3:86:32:f8:ff:07:a1:a0:45: 21:b2:f7:5d:a5:c9:13:b7:04:07:2f:bd:74:f5:82:a9:00:2f: 9a:43:35:4f:7c:16:6e:cd:bc:b6:a0:1a:53:0d:e9:e5:2e:4e: f3:2f:ea:9f:d4:8c:0d:80:7c:2f:e5:85:de:40:04:71:7d:29: fe:5c:66:3e:fc:7a:09:f5:ca:bb:fd:b8:a7:e6:b8:3b:56:9f: dc:c8:0f:cd:c5:89:0d:74:ec:4f:fa:0a:97:e9:2e:aa:1b:3c: 15:db:92:3d:52:9c:40:a3:4b:91:ed:3a:48:e1:14:0c:21:f0: 7c:aa:45:b4:c5:78:1b:7b:3a:c1:a5:23:3d:2e:23:97:bd:a1: 86:66:4a:f8:f1:5d:98:d0:7a:4e:12:4e:ea:c1:55:9f:6f:19: e5:47:35:7e:d8:32:68:44:eb:c5:f3:53:23:cd:44:1e:d7:4f: 78:2c:6c:ec:c8:32:da:e8:dd:b9:32:db:20:18:4c:45:32:79: 4c:1f:2a:7a -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUPS4F6bWE1O4JzXcMoznJhmVRSdowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzBDOEU3MjQzRTRFOERFQ0Q3QThFQTFENjFGRDQyNDEw OEU4RDNENTAeFw0yNTA4MjIwNDU1NTRaFw0yNTA4MjUwODM1NTRaMDMxMTAvBgNV BAMTKEUwRTEzQjA5RTExNjY0RjYwRURDNzA3NTRGNTBCNTFFNTg1NzAwQzAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC1UKzCWnrnEZnl4Rh73cx/FYWZ df4kx6T81TTuUzOYUtl5hPFwFDnNJGZiEghLw9kGVwTPReK+T9eDMXF79pHZVODH YfApgnDH3Mu7vypLSPQ+O/LPk70RHWdtzGwBNQsHCOVyqIW9GNnFILiIZttK0nXa CMDNq32WHm48/JD43RQjVMxvdix/qUK/A5CrqoK9/AawqhKF2Gt41p35DkjH54CL oMmGWxt7HxXmPpfQKsBy3l0CQziwz33hYQFWOzMot8bnwDK6tQt/1ieyq6w5dzM2 iCf5ZSX2b3/RmQ9l73RZgAJ0oDVTkUXj4b9mm16UHsjia1jScLiz8RzfLMTvAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU4OE7CeEWZPYO3HB1T1C1HlhXAMAwHwYDVR0j BBgwFoAUwMjnJD5OjezXqOodYf1CQQjo09UwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 MTE2ZmJjOS1iMzFjLTQyMjUtYTY5Ny00ZmVkYmMyMzRkYjYvMC9DMEM4RTcyNDNF NEU4REVDRDdBOEVBMUQ2MUZENDI0MTA4RThEM0Q1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQzBDOEU3MjQzRTRFOERFQ0Q3QThFQTFENjFGRDQyNDEwOEU4 RDNENS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vODExNmZiYzktYjMxYy00MjI1LWE2 OTctNGZlZGJjMjM0ZGI2LzAvQzBDOEU3MjQzRTRFOERFQ0Q3QThFQTFENjFGRDQy NDEwOEU4RDNENS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAE+w420SToIhPuPBmYUftypO5gEe6qn/vCm7 l4g+qJiJRLNK14ql9PPYMeeSF364g1UVB+gvZ5TXPD7LqZJibdOGMvj/B6GgRSGy 912lyRO3BAcvvXT1gqkAL5pDNU98Fm7NvLagGlMN6eUuTvMv6p/UjA2AfC/lhd5A BHF9Kf5cZj78egn1yrv9uKfmuDtWn9zID83FiQ107E/6CpfpLqobPBXbkj1SnECj S5HtOkjhFAwh8HyqRbTFeBt7OsGlIz0uI5e9oYZmSvjxXZjQek4STurBVZ9vGeVH NX7YMmhE68XzUyPNRB7XT3gsbOzIMtro3bky2yAYTEUyeUwfKno= -----END CERTIFICATE-----Generated at Sat Aug 23 13:32:31 2025 by rpki-client