$ rpki-client -vvf repo-rpki.idnic.net/repo/8a2e5b69-adbd-4e2d-847d-374815581d86/0/8CFA88063D5C0A51C1D737A5170338865A245358.mft File: 8CFA88063D5C0A51C1D737A5170338865A245358.mft (raw, json) Hash identifier: bAtImuqfVXtxvpKMWYCByX8beR687WPrwpU39VLKCQc= Subject key identifier: 77:29:C8:83:AF:B3:9C:8A:ED:CB:03:9B:A2:B3:72:A7:D3:96:18:47 Authority key identifier: 8C:FA:88:06:3D:5C:0A:51:C1:D7:37:A5:17:03:38:86:5A:24:53:58 Certificate issuer: /CN=8CFA88063D5C0A51C1D737A5170338865A245358 Certificate serial: 2BF0B3A60113009D62ED0B7A1785D143BC37ED37 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8CFA88063D5C0A51C1D737A5170338865A245358.cer Subject info access: rsync://repo-rpki.idnic.net/repo/8a2e5b69-adbd-4e2d-847d-374815581d86/0/8CFA88063D5C0A51C1D737A5170338865A245358.mft Manifest number: 04FE Signing time: Fri 22 Aug 2025 19:21:54 +0000 Manifest this update: Fri 22 Aug 2025 19:16:54 +0000 Manifest next update: Tue 26 Aug 2025 05:05:54 +0000 Files and hashes: 1: 3130332e3132362e3230322e302f32332d3233203d3e20313338313133.roa (hash: x7tsLph+/FB0QeKJjGm8RZPvo26S0bN0rsI7VAab3d8=) 2: 3130332e3132362e3230302e302f32332d3233203d3e20313338313133.roa (hash: OX5qJy0ELn8OIpv9cwcHP0OwwrzKVk8H6b2UKzBtyEg=) 3: 3130332e3132362e3230302e302f32322d3232203d3e20313338313133.roa (hash: iKqR4sdrDvQYzAbaXB9On/A/Jy5fdaFvtV4f3tabdnk=) 4: 8CFA88063D5C0A51C1D737A5170338865A245358.crl (hash: gomDKuW4BRImfxpKCf9lRT7AsoEY1FN4k1NpJ+Bcg8k=) 5: 323430343a313034303a3a2f33322d3332203d3e20313338313133.roa (hash: IwOy6L011wgRp4Z43jUYFVOd/TCfuz6IilpFz+BTytc=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/8a2e5b69-adbd-4e2d-847d-374815581d86/0/8CFA88063D5C0A51C1D737A5170338865A245358.crl rsync://repo-rpki.idnic.net/repo/8a2e5b69-adbd-4e2d-847d-374815581d86/0/8CFA88063D5C0A51C1D737A5170338865A245358.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8CFA88063D5C0A51C1D737A5170338865A245358.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 26 Aug 2025 05:05:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2b:f0:b3:a6:01:13:00:9d:62:ed:0b:7a:17:85:d1:43:bc:37:ed:37 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8CFA88063D5C0A51C1D737A5170338865A245358 Validity Not Before: Aug 22 19:16:54 2025 GMT Not After : Aug 26 05:05:54 2025 GMT Subject: CN=7729C883AFB39C8AEDCB039BA2B372A7D3961847 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:e9:84:e9:68:0e:c0:b9:e0:48:6d:a3:8f:05: d1:01:77:fb:bc:6a:5c:4a:98:cd:21:d7:d7:14:db: ec:90:71:b8:36:c7:d5:50:dc:16:d2:4c:50:b6:d6: f9:c9:2c:9d:23:7d:0b:8a:72:c9:49:c3:e5:da:02: 82:ee:e1:da:ed:8e:89:85:26:03:aa:31:ce:79:3d: ef:fc:4d:ee:52:4b:8a:19:ea:87:59:1a:71:21:01: a6:c2:de:9f:a2:61:f6:e8:bc:f0:77:b8:5a:ae:79: 30:82:29:24:f9:ad:cb:8a:c8:b7:28:6b:01:62:33: 5a:4b:3c:1d:3c:d9:2d:e0:54:de:c1:74:f3:34:d8: 53:95:fa:26:c3:04:d9:e7:72:e7:62:74:15:e2:f7: b7:10:41:d1:81:d3:40:57:c2:1c:ec:38:3e:87:12: 08:15:8f:08:4e:f2:49:02:a3:0b:8c:5e:19:9e:66: 50:2f:85:58:37:68:28:75:29:33:fc:88:0a:3c:65: 2a:ac:19:25:65:29:c9:ad:79:23:47:4e:06:a5:85: e1:e6:cd:48:0d:98:06:d4:17:e7:45:28:8c:7c:bf: 50:3b:58:28:a0:00:21:2e:59:82:5d:cd:a8:ac:60: 10:96:e8:73:15:ef:3b:61:bd:40:b8:c2:06:7e:a3: 2b:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 77:29:C8:83:AF:B3:9C:8A:ED:CB:03:9B:A2:B3:72:A7:D3:96:18:47 X509v3 Authority Key Identifier: keyid:8C:FA:88:06:3D:5C:0A:51:C1:D7:37:A5:17:03:38:86:5A:24:53:58 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/8a2e5b69-adbd-4e2d-847d-374815581d86/0/8CFA88063D5C0A51C1D737A5170338865A245358.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8CFA88063D5C0A51C1D737A5170338865A245358.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/8a2e5b69-adbd-4e2d-847d-374815581d86/0/8CFA88063D5C0A51C1D737A5170338865A245358.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4d:22:56:0b:03:9b:40:95:a5:55:f8:19:3e:4b:8a:06:af:a7: 01:b6:bf:d5:62:f9:98:07:86:1f:31:23:62:7b:e6:25:d3:dc: 7b:92:b7:49:77:62:61:2e:eb:05:21:8e:f7:48:f5:2c:7f:ec: 0b:1e:21:23:60:26:4e:6d:d3:36:02:8b:24:be:32:da:c2:61: 81:95:db:66:bb:f3:b9:fa:c9:b1:37:e0:d3:b6:44:fe:77:d0: 9f:21:3a:c5:44:fe:b6:8d:19:33:1d:c0:1c:ae:20:00:cf:cc: fc:9b:5a:73:40:87:30:eb:16:fe:3e:f8:03:66:31:e7:6a:35: ff:20:0f:8f:66:4d:fa:22:84:d9:47:82:f7:8d:65:44:c8:dc: 93:e7:9c:70:0a:e8:83:85:c0:96:8c:7f:25:33:c3:e7:09:f7: 8a:e3:78:4b:05:16:9d:53:40:cd:ac:d9:24:3f:47:f6:4f:6e: ad:00:56:95:3a:41:b6:12:8c:60:59:ff:8c:43:86:8b:01:da: e3:6e:0c:24:9e:ae:74:8e:19:0a:5c:e7:7b:72:7e:e4:28:df: 97:97:94:7f:d1:05:d8:c1:e4:c2:69:52:2a:fa:0a:60:dd:98: 2c:7e:2c:14:b2:eb:53:33:6a:7f:00:cc:05:1f:07:0e:ef:c9: 46:3f:9c:10 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUK/CzpgETAJ1i7Qt6F4XRQ7w37TcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOENGQTg4MDYzRDVDMEE1MUMxRDczN0E1MTcwMzM4ODY1 QTI0NTM1ODAeFw0yNTA4MjIxOTE2NTRaFw0yNTA4MjYwNTA1NTRaMDMxMTAvBgNV BAMTKDc3MjlDODgzQUZCMzlDOEFFRENCMDM5QkEyQjM3MkE3RDM5NjE4NDcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCi6YTpaA7AueBIbaOPBdEBd/u8 alxKmM0h19cU2+yQcbg2x9VQ3BbSTFC21vnJLJ0jfQuKcslJw+XaAoLu4drtjomF JgOqMc55Pe/8Te5SS4oZ6odZGnEhAabC3p+iYfbovPB3uFqueTCCKST5rcuKyLco awFiM1pLPB082S3gVN7BdPM02FOV+ibDBNnncudidBXi97cQQdGB00BXwhzsOD6H EggVjwhO8kkCowuMXhmeZlAvhVg3aCh1KTP8iAo8ZSqsGSVlKcmteSNHTgalheHm zUgNmAbUF+dFKIx8v1A7WCigACEuWYJdzaisYBCW6HMV7zthvUC4wgZ+oys7AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUdynIg6+znIrtywOborNyp9OWGEcwHwYDVR0j BBgwFoAUjPqIBj1cClHB1zelFwM4hlokU1gwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 YTJlNWI2OS1hZGJkLTRlMmQtODQ3ZC0zNzQ4MTU1ODFkODYvMC84Q0ZBODgwNjNE NUMwQTUxQzFENzM3QTUxNzAzMzg4NjVBMjQ1MzU4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOENGQTg4MDYzRDVDMEE1MUMxRDczN0E1MTcwMzM4ODY1QTI0 NTM1OC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOGEyZTViNjktYWRiZC00ZTJkLTg0 N2QtMzc0ODE1NTgxZDg2LzAvOENGQTg4MDYzRDVDMEE1MUMxRDczN0E1MTcwMzM4 ODY1QTI0NTM1OC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAE0iVgsDm0CVpVX4GT5LigavpwG2v9Vi+ZgH hh8xI2J75iXT3HuSt0l3YmEu6wUhjvdI9Sx/7AseISNgJk5t0zYCiyS+MtrCYYGV 22a787n6ybE34NO2RP530J8hOsVE/raNGTMdwByuIADPzPybWnNAhzDrFv4++ANm MedqNf8gD49mTfoihNlHgveNZUTI3JPnnHAK6IOFwJaMfyUzw+cJ94rjeEsFFp1T QM2s2SQ/R/ZPbq0AVpU6QbYSjGBZ/4xDhosB2uNuDCSernSOGQpc53tyfuQo35eX lH/RBdjB5MJpUir6CmDdmCx+LBSy61Mzan8AzAUfBw7vyUY/nBA= -----END CERTIFICATE-----Generated at Sat Aug 23 17:14:12 2025 by rpki-client