$ rpki-client -vvf repo-rpki.idnic.net/repo/927a6f34-1b6e-4e92-b2d2-0b9301a666a5/0/8DEDABAD21AD1A6BEF27E91FCEE30465563DFE72.mft File: 8DEDABAD21AD1A6BEF27E91FCEE30465563DFE72.mft (raw, json) Hash identifier: HG4PWigcQfQRUch5npAInbnofyw7at4EhmpBsoXH5YI= Subject key identifier: 70:5B:DA:01:79:BB:9E:61:93:25:E6:73:49:F7:6C:4A:52:4C:37:47 Authority key identifier: 8D:ED:AB:AD:21:AD:1A:6B:EF:27:E9:1F:CE:E3:04:65:56:3D:FE:72 Certificate issuer: /CN=8DEDABAD21AD1A6BEF27E91FCEE30465563DFE72 Certificate serial: 46B9FE411B3EF09F791CB4C3C977DFB904B791B7 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8DEDABAD21AD1A6BEF27E91FCEE30465563DFE72.cer Subject info access: rsync://repo-rpki.idnic.net/repo/927a6f34-1b6e-4e92-b2d2-0b9301a666a5/0/8DEDABAD21AD1A6BEF27E91FCEE30465563DFE72.mft Manifest number: 04FD Signing time: Sat 23 Aug 2025 02:02:08 +0000 Manifest this update: Sat 23 Aug 2025 01:57:08 +0000 Manifest next update: Tue 26 Aug 2025 06:40:08 +0000 Files and hashes: 1: 323430323a653330303a3a2f33322d3438203d3e20313331373036.roa (hash: EV88jOIELhWBAVSmJqvptwA4m5UyL3dS/vav1cA94d8=) 2: 3132312e3130312e3132382e302f32312d3234203d3e20313331373036.roa (hash: LxNIC9GUMk4NDV//CAiwhidJ9aXKaAFBBW+ysgKoUy0=) 3: 3130332e3234372e31322e302f32322d3234203d3e20313331373036.roa (hash: mWjb/DW+b3X3xyLO8KMUDwzQ73HydHkJibyBar99dKU=) 4: 8DEDABAD21AD1A6BEF27E91FCEE30465563DFE72.crl (hash: oCEMWxyJqr9gyThcoy8W1VzMvsQBYhy3yN1ju1Qwxl8=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/927a6f34-1b6e-4e92-b2d2-0b9301a666a5/0/8DEDABAD21AD1A6BEF27E91FCEE30465563DFE72.crl rsync://repo-rpki.idnic.net/repo/927a6f34-1b6e-4e92-b2d2-0b9301a666a5/0/8DEDABAD21AD1A6BEF27E91FCEE30465563DFE72.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8DEDABAD21AD1A6BEF27E91FCEE30465563DFE72.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 26 Aug 2025 06:40:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 46:b9:fe:41:1b:3e:f0:9f:79:1c:b4:c3:c9:77:df:b9:04:b7:91:b7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8DEDABAD21AD1A6BEF27E91FCEE30465563DFE72 Validity Not Before: Aug 23 01:57:08 2025 GMT Not After : Aug 26 06:40:08 2025 GMT Subject: CN=705BDA0179BB9E619325E67349F76C4A524C3747 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f9:f8:ce:48:9d:24:d0:38:2a:87:50:f0:00:8a: 28:47:83:67:52:4f:ec:68:db:cd:d5:db:ad:10:08: 0d:a6:0f:3f:a9:a7:59:84:b5:55:fd:f5:d9:09:5d: 06:d3:86:67:5b:4a:cf:1c:86:a8:74:71:1f:ab:0b: dd:e3:2a:7e:06:a9:33:d3:d8:49:ac:71:9b:54:8a: e7:09:9b:a8:4f:4d:87:c9:8e:97:49:74:f1:af:5a: 4b:72:a4:d7:4f:c4:7e:c6:a6:c0:a3:fd:58:8b:70: 6e:28:25:10:9d:e9:5b:77:5b:9f:8d:38:40:e9:9d: 59:ee:ca:04:f4:e5:02:1c:ba:ba:00:a5:5e:c6:44: e7:d8:d2:79:fc:04:dc:7b:73:9a:79:49:e4:e4:73: 40:8b:7b:e9:40:71:be:41:8e:5b:07:dd:d0:ce:eb: 9b:31:a8:84:95:6b:27:d2:87:4d:92:74:56:ca:ec: 01:c0:ca:95:ab:15:b4:1b:af:3a:c3:63:14:42:56: 4d:8f:3b:9f:d4:0c:73:20:53:e7:ef:78:43:5c:52: 6d:03:27:c3:d5:56:34:33:e1:8a:16:dc:53:1a:45: 32:68:91:c8:51:80:8a:ed:d1:91:2a:82:8c:b9:29: a6:1a:eb:27:05:41:3d:6d:c3:4d:3e:b7:c6:06:e6: 07:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:5B:DA:01:79:BB:9E:61:93:25:E6:73:49:F7:6C:4A:52:4C:37:47 X509v3 Authority Key Identifier: keyid:8D:ED:AB:AD:21:AD:1A:6B:EF:27:E9:1F:CE:E3:04:65:56:3D:FE:72 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/927a6f34-1b6e-4e92-b2d2-0b9301a666a5/0/8DEDABAD21AD1A6BEF27E91FCEE30465563DFE72.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8DEDABAD21AD1A6BEF27E91FCEE30465563DFE72.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/927a6f34-1b6e-4e92-b2d2-0b9301a666a5/0/8DEDABAD21AD1A6BEF27E91FCEE30465563DFE72.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 56:e4:14:c7:85:55:f3:b0:ac:ae:11:1d:40:6a:6e:2f:25:45: fc:6d:64:03:c7:29:fa:e4:cd:7e:89:09:c1:aa:f0:25:2e:d4: d9:6b:70:52:a0:55:e0:48:1c:aa:2f:4a:05:8d:39:7c:f4:fe: 38:12:71:58:90:97:9c:68:0d:30:d9:04:9f:07:81:c1:79:7e: c1:b8:5b:14:20:c0:53:cd:02:c3:40:4c:23:b3:de:3a:e0:82: bd:f9:0e:4e:f0:51:e8:a6:17:47:a8:75:db:33:93:a4:d6:83: 28:d1:54:eb:71:30:97:88:92:99:14:af:df:24:62:05:e5:ad: 97:39:98:7b:fa:3f:43:12:d8:4f:7e:f8:99:7b:d6:46:20:7b: 5e:ed:e8:2b:b5:e1:a8:a1:a9:3e:1d:4f:94:32:03:ea:bc:0b: 5b:7b:99:eb:bd:3b:70:ef:30:c8:93:fc:df:94:78:93:f4:fa: 86:98:4a:22:e5:fd:ef:1d:be:0c:90:c6:9f:e3:cd:34:7b:1e: 2d:9e:35:ea:2f:85:07:4a:e7:70:5e:40:d2:d0:50:96:4a:e2: 7d:8b:ff:d8:7d:eb:aa:eb:7d:e3:a5:0c:5b:15:c6:b5:d3:14: 51:4c:c2:8e:d4:c9:d9:78:11:94:25:33:84:ea:c0:7e:2f:e4: 95:30:2d:4f -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIURrn+QRs+8J95HLTDyXffuQS3kbcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOERFREFCQUQyMUFEMUE2QkVGMjdFOTFGQ0VFMzA0NjU1 NjNERkU3MjAeFw0yNTA4MjMwMTU3MDhaFw0yNTA4MjYwNjQwMDhaMDMxMTAvBgNV BAMTKDcwNUJEQTAxNzlCQjlFNjE5MzI1RTY3MzQ5Rjc2QzRBNTI0QzM3NDcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD5+M5InSTQOCqHUPAAiihHg2dS T+xo283V260QCA2mDz+pp1mEtVX99dkJXQbThmdbSs8chqh0cR+rC93jKn4GqTPT 2EmscZtUiucJm6hPTYfJjpdJdPGvWktypNdPxH7GpsCj/ViLcG4oJRCd6Vt3W5+N OEDpnVnuygT05QIcuroApV7GROfY0nn8BNx7c5p5SeTkc0CLe+lAcb5BjlsH3dDO 65sxqISVayfSh02SdFbK7AHAypWrFbQbrzrDYxRCVk2PO5/UDHMgU+fveENcUm0D J8PVVjQz4YoW3FMaRTJokchRgIrt0ZEqgoy5KaYa6ycFQT1tw00+t8YG5gcjAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUcFvaAXm7nmGTJeZzSfdsSlJMN0cwHwYDVR0j BBgwFoAUje2rrSGtGmvvJ+kfzuMEZVY9/nIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 MjdhNmYzNC0xYjZlLTRlOTItYjJkMi0wYjkzMDFhNjY2YTUvMC84REVEQUJBRDIx QUQxQTZCRUYyN0U5MUZDRUUzMDQ2NTU2M0RGRTcyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOERFREFCQUQyMUFEMUE2QkVGMjdFOTFGQ0VFMzA0NjU1NjNE RkU3Mi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOTI3YTZmMzQtMWI2ZS00ZTkyLWIy ZDItMGI5MzAxYTY2NmE1LzAvOERFREFCQUQyMUFEMUE2QkVGMjdFOTFGQ0VFMzA0 NjU1NjNERkU3Mi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFbkFMeFVfOwrK4RHUBqbi8lRfxtZAPHKfrk zX6JCcGq8CUu1NlrcFKgVeBIHKovSgWNOXz0/jgScViQl5xoDTDZBJ8HgcF5fsG4 WxQgwFPNAsNATCOz3jrggr35Dk7wUeimF0eoddszk6TWgyjRVOtxMJeIkpkUr98k YgXlrZc5mHv6P0MS2E9++Jl71kYge17t6Cu14aihqT4dT5QyA+q8C1t7meu9O3Dv MMiT/N+UeJP0+oaYSiLl/e8dvgyQxp/jzTR7Hi2eNeovhQdK53BeQNLQUJZK4n2L /9h966rrfeOlDFsVxrXTFFFMwo7Uydl4EZQlM4TqwH4v5JUwLU8= -----END CERTIFICATE-----Generated at Sat Aug 23 12:05:00 2025 by rpki-client