$ rpki-client -vvf repo-rpki.idnic.net/repo/88788a8b-541b-4cbf-bab9-8dc377bc1284/0/8208317A24AB4CD828CD8855F81F3EF2B53CC681.mft File: 8208317A24AB4CD828CD8855F81F3EF2B53CC681.mft (raw, json) Hash identifier: vduxvaBJdBP+XUREwH8YITntqaXzNzG7yHfjJqJXybA= Subject key identifier: B5:4F:35:B5:05:1F:30:75:B3:DE:28:B0:B1:9D:90:7D:BC:DA:C3:A7 Authority key identifier: 82:08:31:7A:24:AB:4C:D8:28:CD:88:55:F8:1F:3E:F2:B5:3C:C6:81 Certificate issuer: /CN=8208317A24AB4CD828CD8855F81F3EF2B53CC681 Certificate serial: 305080C8AF81587A1C44152430AF7CA4385B95C5 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8208317A24AB4CD828CD8855F81F3EF2B53CC681.cer Subject info access: rsync://repo-rpki.idnic.net/repo/88788a8b-541b-4cbf-bab9-8dc377bc1284/0/8208317A24AB4CD828CD8855F81F3EF2B53CC681.mft Manifest number: 0178 Signing time: Fri 22 Aug 2025 14:12:08 +0000 Manifest this update: Fri 22 Aug 2025 14:07:08 +0000 Manifest next update: Mon 25 Aug 2025 23:01:08 +0000 Files and hashes: 1: 323030313a6466343a663930303a3a2f34382d3438203d3e20313337333531.roa (hash: b4NjxQmSbJ+wk760b/yGVrpvatI7XP4yXIQB6LdeYtw=) 2: 8208317A24AB4CD828CD8855F81F3EF2B53CC681.crl (hash: AxeVwFnpXVYYOA07rH4J9L1fOmfLQ4AmWNbnKbHWKoQ=) 3: 3130332e3131342e3134342e302f32342d3234203d3e20313337333531.roa (hash: ty2A/+XUIZKKt+5K+zVnVNMiG2s1JjDQEBRNkGaNrQE=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/88788a8b-541b-4cbf-bab9-8dc377bc1284/0/8208317A24AB4CD828CD8855F81F3EF2B53CC681.crl rsync://repo-rpki.idnic.net/repo/88788a8b-541b-4cbf-bab9-8dc377bc1284/0/8208317A24AB4CD828CD8855F81F3EF2B53CC681.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8208317A24AB4CD828CD8855F81F3EF2B53CC681.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 25 Aug 2025 23:01:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 30:50:80:c8:af:81:58:7a:1c:44:15:24:30:af:7c:a4:38:5b:95:c5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8208317A24AB4CD828CD8855F81F3EF2B53CC681 Validity Not Before: Aug 22 14:07:08 2025 GMT Not After : Aug 25 23:01:08 2025 GMT Subject: CN=B54F35B5051F3075B3DE28B0B19D907DBCDAC3A7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:d9:39:e5:a3:26:fa:e2:a9:28:54:f2:ad:8c: 32:71:55:65:48:0a:91:54:a6:a1:9b:89:81:23:41: 21:de:cc:5e:2e:2b:71:eb:1c:23:ef:b2:4e:01:6b: b8:a6:08:33:50:dd:44:41:c2:1d:74:0c:14:98:38: c1:17:67:7d:39:b0:6f:23:ab:33:44:0d:73:47:c7: 78:0c:4b:aa:4b:4e:ac:10:1a:99:3e:92:b5:55:e8: 7f:3f:85:8e:f6:be:bf:de:d0:32:ae:44:19:15:9c: ea:20:4b:30:65:cf:1e:bd:a3:34:16:5d:29:13:8d: 97:02:d8:4f:19:73:12:00:9b:29:aa:62:53:8b:0b: 30:ae:85:92:55:68:f8:3d:d5:f8:9d:50:cf:c7:72: 6b:5c:0f:af:3c:c7:54:e4:c1:32:f1:53:5e:32:0f: 85:43:97:88:6f:b7:f3:d6:ad:65:79:5d:f6:28:cb: ee:0a:ed:a5:5c:8a:2a:bd:30:52:32:92:29:db:b7: d5:7d:30:1e:88:86:27:5b:56:c6:26:5e:3a:3e:ae: 90:cd:a0:3a:cf:8c:25:be:d6:cd:e8:ec:fb:aa:00: cc:3f:d1:68:43:6d:be:3e:c3:cf:76:d6:fd:5e:6e: ff:a9:6f:83:e1:4a:53:19:c7:0f:f1:f3:4e:cd:2b: 14:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B5:4F:35:B5:05:1F:30:75:B3:DE:28:B0:B1:9D:90:7D:BC:DA:C3:A7 X509v3 Authority Key Identifier: keyid:82:08:31:7A:24:AB:4C:D8:28:CD:88:55:F8:1F:3E:F2:B5:3C:C6:81 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/88788a8b-541b-4cbf-bab9-8dc377bc1284/0/8208317A24AB4CD828CD8855F81F3EF2B53CC681.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8208317A24AB4CD828CD8855F81F3EF2B53CC681.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/88788a8b-541b-4cbf-bab9-8dc377bc1284/0/8208317A24AB4CD828CD8855F81F3EF2B53CC681.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 09:e7:f7:53:8b:59:85:86:49:2d:b3:bc:1f:81:2e:36:e3:1b: ec:4a:fe:ad:7f:9f:06:6d:e8:63:20:d2:c5:3a:1e:02:e1:7b: 68:91:89:5d:0e:8e:7b:6d:b1:eb:03:0f:68:9a:57:c7:31:d4: 7c:5a:fb:16:04:ab:44:12:1f:9d:1a:86:fe:55:ab:b1:a9:1f: ee:e9:d0:bb:dd:68:d2:c6:e4:f7:19:a3:0a:ea:e1:50:3e:83: f4:c2:fb:8f:fd:32:12:44:aa:77:46:15:9e:c8:75:8f:e7:8f: a7:d7:f3:86:40:a7:e5:e5:66:16:8b:cd:0b:ea:a0:a9:24:7e: d0:99:e8:c9:2f:b2:3a:06:00:59:9c:53:c6:26:ed:9a:f6:d9: d8:96:cf:3e:65:ab:13:4a:eb:da:15:51:63:42:ec:20:63:1a: 71:e3:8b:25:b5:81:0f:3b:c4:79:93:f5:05:3e:e8:57:80:93: 67:61:58:1d:e9:31:31:73:fe:93:3a:66:86:1d:60:d6:99:fb: 17:72:09:f7:42:b6:6c:db:07:d8:6b:96:90:b5:f5:b3:c5:02: 9d:14:5b:dc:0e:23:23:f8:fc:85:f0:0e:5d:9e:33:22:c4:a3: db:30:33:88:ce:49:9b:0e:52:1e:71:f0:6c:ab:71:06:b6:43: 2a:85:fe:05 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUMFCAyK+BWHocRBUkMK98pDhblcUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODIwODMxN0EyNEFCNENEODI4Q0Q4ODU1RjgxRjNFRjJC NTNDQzY4MTAeFw0yNTA4MjIxNDA3MDhaFw0yNTA4MjUyMzAxMDhaMDMxMTAvBgNV BAMTKEI1NEYzNUI1MDUxRjMwNzVCM0RFMjhCMEIxOUQ5MDdEQkNEQUMzQTcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCh2Tnloyb64qkoVPKtjDJxVWVI CpFUpqGbiYEjQSHezF4uK3HrHCPvsk4Ba7imCDNQ3URBwh10DBSYOMEXZ305sG8j qzNEDXNHx3gMS6pLTqwQGpk+krVV6H8/hY72vr/e0DKuRBkVnOogSzBlzx69ozQW XSkTjZcC2E8ZcxIAmymqYlOLCzCuhZJVaPg91fidUM/HcmtcD688x1TkwTLxU14y D4VDl4hvt/PWrWV5XfYoy+4K7aVciiq9MFIykinbt9V9MB6IhidbVsYmXjo+rpDN oDrPjCW+1s3o7PuqAMw/0WhDbb4+w8921v1ebv+pb4PhSlMZxw/x807NKxRxAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUtU81tQUfMHWz3iiwsZ2Qfbzaw6cwHwYDVR0j BBgwFoAUgggxeiSrTNgozYhV+B8+8rU8xoEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 ODc4OGE4Yi01NDFiLTRjYmYtYmFiOS04ZGMzNzdiYzEyODQvMC84MjA4MzE3QTI0 QUI0Q0Q4MjhDRDg4NTVGODFGM0VGMkI1M0NDNjgxLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvODIwODMxN0EyNEFCNENEODI4Q0Q4ODU1RjgxRjNFRjJCNTND QzY4MS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vODg3ODhhOGItNTQxYi00Y2JmLWJh YjktOGRjMzc3YmMxMjg0LzAvODIwODMxN0EyNEFCNENEODI4Q0Q4ODU1RjgxRjNF RjJCNTNDQzY4MS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAnn91OLWYWGSS2zvB+BLjbjG+xK/q1/nwZt 6GMg0sU6HgLhe2iRiV0OjnttsesDD2iaV8cx1Hxa+xYEq0QSH50ahv5Vq7GpH+7p 0LvdaNLG5PcZowrq4VA+g/TC+4/9MhJEqndGFZ7IdY/nj6fX84ZAp+XlZhaLzQvq oKkkftCZ6MkvsjoGAFmcU8Ym7Zr22diWzz5lqxNK69oVUWNC7CBjGnHjiyW1gQ87 xHmT9QU+6FeAk2dhWB3pMTFz/pM6ZoYdYNaZ+xdyCfdCtmzbB9hrlpC19bPFAp0U W9wOIyP4/IXwDl2eMyLEo9swM4jOSZsOUh5x8GyrcQa2QyqF/gU= -----END CERTIFICATE-----Generated at Sat Aug 23 16:08:52 2025 by rpki-client