$ rpki-client -vvf repo-rpki.idnic.net/repo/8a66f350-e642-402f-8ac3-6aef7e11aac3/0/9852ABB8508DE551F1723BC9AC5EC39B35056AE2.mft File: 9852ABB8508DE551F1723BC9AC5EC39B35056AE2.mft (raw, json) Hash identifier: 3l+YkFtx2kcO5LNxARe1PgyVlbslejm31Mf4N+iIJW8= Subject key identifier: D7:8F:F6:64:D6:6E:19:41:16:60:94:19:E5:57:CD:8A:1B:4B:18:06 Authority key identifier: 98:52:AB:B8:50:8D:E5:51:F1:72:3B:C9:AC:5E:C3:9B:35:05:6A:E2 Certificate issuer: /CN=9852ABB8508DE551F1723BC9AC5EC39B35056AE2 Certificate serial: 062F8172FD594EDFE5763130B8FF0989020D18 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9852ABB8508DE551F1723BC9AC5EC39B35056AE2.cer Subject info access: rsync://repo-rpki.idnic.net/repo/8a66f350-e642-402f-8ac3-6aef7e11aac3/0/9852ABB8508DE551F1723BC9AC5EC39B35056AE2.mft Manifest number: 0500 Signing time: Thu 21 Aug 2025 13:31:57 +0000 Manifest this update: Thu 21 Aug 2025 13:26:57 +0000 Manifest next update: Sun 24 Aug 2025 14:34:57 +0000 Files and hashes: 1: 323030313a6466343a366430303a3a2f34382d3438203d3e20313337333734.roa (hash: 415EQue+5BmAk6tXc9Eh3zzXOH8qdWNQfAsbBNLYlC0=) 2: 3130332e3131302e3138342e302f32332d3234203d3e20313337333734.roa (hash: t6DqUPB7zlmhbQqkH/Czn9ueyAzHtFeCOGR6aaj9LSw=) 3: 9852ABB8508DE551F1723BC9AC5EC39B35056AE2.crl (hash: d11HQmdrdt3ziXU6X/TgAuEBUG0Q6evTxWJ1njvVF1Y=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/8a66f350-e642-402f-8ac3-6aef7e11aac3/0/9852ABB8508DE551F1723BC9AC5EC39B35056AE2.crl rsync://repo-rpki.idnic.net/repo/8a66f350-e642-402f-8ac3-6aef7e11aac3/0/9852ABB8508DE551F1723BC9AC5EC39B35056AE2.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9852ABB8508DE551F1723BC9AC5EC39B35056AE2.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 24 Aug 2025 14:34:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 06:2f:81:72:fd:59:4e:df:e5:76:31:30:b8:ff:09:89:02:0d:18 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9852ABB8508DE551F1723BC9AC5EC39B35056AE2 Validity Not Before: Aug 21 13:26:57 2025 GMT Not After : Aug 24 14:34:57 2025 GMT Subject: CN=D78FF664D66E194116609419E557CD8A1B4B1806 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:b3:83:20:56:c8:66:0a:8a:2d:76:3f:f2:28: cf:81:2d:51:e6:fe:b9:5a:0d:a5:0f:a5:55:ae:ce: 72:ed:29:2c:b7:28:b1:d6:05:72:59:1f:ad:ed:47: c1:bf:08:c1:a5:a2:a6:85:58:92:21:3f:1a:0f:40: 6e:f4:27:a4:f6:3e:72:c0:7e:7f:1c:49:07:aa:4c: 56:cf:cd:65:f5:6e:2e:47:cf:6e:f5:9e:bd:84:b4: 02:83:ce:1f:d2:7c:3c:a1:19:a8:90:59:34:52:48: 7f:74:ab:63:2e:d1:ce:47:75:75:c6:42:0e:75:06: 50:0d:87:62:6c:86:28:30:0c:fa:91:84:54:8c:10: eb:58:cd:ff:ad:28:86:f8:5a:9d:98:6a:27:a8:86: a2:cd:93:53:e8:95:e5:a7:81:37:59:4a:f2:a9:8f: d4:ea:f3:31:83:78:4e:2d:26:34:06:89:68:d2:93: ce:e1:0f:2c:00:c3:f7:eb:9c:88:aa:08:41:1a:4f: 2c:62:42:e2:95:d2:59:bf:73:10:57:fa:1b:e9:34: 34:28:17:3f:bc:83:1e:8f:92:33:1e:6d:5d:54:5f: b8:2d:74:66:ad:f2:de:58:8c:70:77:50:fd:c4:99: ff:6e:3e:82:8b:68:ef:02:5b:4a:d2:48:e6:e0:05: a2:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D7:8F:F6:64:D6:6E:19:41:16:60:94:19:E5:57:CD:8A:1B:4B:18:06 X509v3 Authority Key Identifier: keyid:98:52:AB:B8:50:8D:E5:51:F1:72:3B:C9:AC:5E:C3:9B:35:05:6A:E2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/8a66f350-e642-402f-8ac3-6aef7e11aac3/0/9852ABB8508DE551F1723BC9AC5EC39B35056AE2.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9852ABB8508DE551F1723BC9AC5EC39B35056AE2.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/8a66f350-e642-402f-8ac3-6aef7e11aac3/0/9852ABB8508DE551F1723BC9AC5EC39B35056AE2.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8a:3c:9b:8e:e5:d4:40:59:39:72:b0:93:b0:ca:34:fa:ef:b9: 89:d0:b3:a5:13:87:2f:0c:67:59:b6:81:62:b2:36:19:01:88: 47:31:57:36:d8:ee:fb:97:44:49:88:0f:10:51:3e:6e:90:b4: 77:e1:33:4a:27:1c:e7:74:6c:38:93:23:b1:d7:46:58:6f:05: 61:79:65:9a:73:e7:c0:87:b2:13:f7:01:d9:79:05:63:4b:36: 99:49:37:ed:a7:9a:8b:a4:f6:ac:a6:1e:30:8c:cc:f8:56:63: 65:5f:b1:e8:53:c4:23:34:32:53:a1:34:f5:89:ef:c4:18:fd: 53:a0:19:94:1e:c1:54:51:5c:ca:4c:24:5d:67:7d:fc:1d:f2: 1d:61:bb:f1:04:92:15:41:01:a0:0c:27:4f:83:01:7a:5f:15: 34:13:be:a4:a2:c1:63:cb:6f:b2:23:f9:ea:c6:6b:13:72:6c: 02:07:05:67:f7:fe:22:6d:a4:1c:fe:9d:00:05:94:62:d4:bb: 75:75:50:b0:ef:6a:8a:03:d4:43:68:1a:95:f1:25:6e:24:56: bc:fc:af:40:da:17:77:64:9c:56:94:f1:3f:42:1c:4a:c5:b7: d8:cb:00:ad:85:49:5b:ab:c2:81:5d:b9:86:00:58:4a:d3:7b: ad:48:32:f0 -----BEGIN CERTIFICATE----- MIIFMTCCBBmgAwIBAgITBi+Bcv1ZTt/ldjEwuP8JiQINGDANBgkqhkiG9w0BAQsF ADAzMTEwLwYDVQQDEyg5ODUyQUJCODUwOERFNTUxRjE3MjNCQzlBQzVFQzM5QjM1 MDU2QUUyMB4XDTI1MDgyMTEzMjY1N1oXDTI1MDgyNDE0MzQ1N1owMzExMC8GA1UE AxMoRDc4RkY2NjRENjZFMTk0MTE2NjA5NDE5RTU1N0NEOEExQjRCMTgwNjCCASIw DQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBANSzgyBWyGYKii12P/Ioz4EtUeb+ uVoNpQ+lVa7Ocu0pLLcosdYFclkfre1Hwb8IwaWipoVYkiE/Gg9AbvQnpPY+csB+ fxxJB6pMVs/NZfVuLkfPbvWevYS0AoPOH9J8PKEZqJBZNFJIf3SrYy7Rzkd1dcZC DnUGUA2HYmyGKDAM+pGEVIwQ61jN/60ohvhanZhqJ6iGos2TU+iV5aeBN1lK8qmP 1OrzMYN4Ti0mNAaJaNKTzuEPLADD9+uciKoIQRpPLGJC4pXSWb9zEFf6G+k0NCgX P7yDHo+SMx5tXVRfuC10Zq3y3liMcHdQ/cSZ/24+goto7wJbStJI5uAFopECAwEA AaOCAjwwggI4MB0GA1UdDgQWBBTXj/Zk1m4ZQRZglBnlV82KG0sYBjAfBgNVHSME GDAWgBSYUqu4UI3lUfFyO8msXsObNQVq4jAOBgNVHQ8BAf8EBAMCB4AwgYUGA1Ud HwR+MHwweqB4oHaGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzhh NjZmMzUwLWU2NDItNDAyZi04YWMzLTZhZWY3ZTExYWFjMy8wLzk4NTJBQkI4NTA4 REU1NTFGMTcyM0JDOUFDNUVDMzlCMzUwNTZBRTIuY3JsMHQGCCsGAQUFBwEBBGgw ZjBkBggrBgEFBQcwAoZYcnN5bmM6Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8v SUROSUMtSUQvMi85ODUyQUJCODUwOERFNTUxRjE3MjNCQzlBQzVFQzM5QjM1MDU2 QUUyLmNlcjCBkwYIKwYBBQUHAQsEgYYwgYMwgYAGCCsGAQUFBzALhnRyc3luYzov L3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84YTY2ZjM1MC1lNjQyLTQwMmYtOGFj My02YWVmN2UxMWFhYzMvMC85ODUyQUJCODUwOERFNTUxRjE3MjNCQzlBQzVFQzM5 QjM1MDU2QUUyLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUF BwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADANBgkqhkiG9w0BAQsFAAOCAQEAijybjuXUQFk5crCTsMo0+u+5idCzpROHLwxn WbaBYrI2GQGIRzFXNtju+5dESYgPEFE+bpC0d+EzSicc53RsOJMjsddGWG8FYXll mnPnwIeyE/cB2XkFY0s2mUk37aeai6T2rKYeMIzM+FZjZV+x6FPEIzQyU6E09Ynv xBj9U6AZlB7BVFFcykwkXWd9/B3yHWG78QSSFUEBoAwnT4MBel8VNBO+pKLBY8tv siP56sZrE3JsAgcFZ/f+Im2kHP6dAAWUYtS7dXVQsO9qigPUQ2galfElbiRWvPyv QNoXd2ScVpTxP0IcSsW32MsArYVJW6vCgV25hgBYStN7rUgy8A== -----END CERTIFICATE-----Generated at Sat Aug 23 10:23:42 2025 by rpki-client