$ rpki-client -vvf repo-rpki.idnic.net/repo/9f9c446f-d971-4b5e-b269-1e83d3a14fef/0/D8F283D13C79D458461D8E83A481638975B3D90B.mft File: D8F283D13C79D458461D8E83A481638975B3D90B.mft (raw, json) Hash identifier: +s40FDoSxJtUvcaYTtonrI3YbHOsdrZWLX5t9j+2YnU= Subject key identifier: E2:44:38:0F:DA:B3:61:E8:28:84:45:E7:3A:CC:44:6F:F8:DC:24:F2 Authority key identifier: D8:F2:83:D1:3C:79:D4:58:46:1D:8E:83:A4:81:63:89:75:B3:D9:0B Certificate issuer: /CN=D8F283D13C79D458461D8E83A481638975B3D90B Certificate serial: 0921CBAB657EDB7807B04CBAC0CFBB7238912BB6 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D8F283D13C79D458461D8E83A481638975B3D90B.cer Subject info access: rsync://repo-rpki.idnic.net/repo/9f9c446f-d971-4b5e-b269-1e83d3a14fef/0/D8F283D13C79D458461D8E83A481638975B3D90B.mft Manifest number: 029C Signing time: Sat 23 Aug 2025 11:02:24 +0000 Manifest this update: Sat 23 Aug 2025 10:57:24 +0000 Manifest next update: Tue 26 Aug 2025 14:17:24 +0000 Files and hashes: 1: 3130332e3134392e3136342e302f32342d3234203d3e20313430303232.roa (hash: K58hS10IRX+zau5OGGRyu9JQqy2xuB39owD+O8xQ0hc=) 2: D8F283D13C79D458461D8E83A481638975B3D90B.crl (hash: cyU7XgyHCu9smxJ1Yy+xc+e3pKyGz3W5SayFGbGk+lY=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/9f9c446f-d971-4b5e-b269-1e83d3a14fef/0/D8F283D13C79D458461D8E83A481638975B3D90B.crl rsync://repo-rpki.idnic.net/repo/9f9c446f-d971-4b5e-b269-1e83d3a14fef/0/D8F283D13C79D458461D8E83A481638975B3D90B.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D8F283D13C79D458461D8E83A481638975B3D90B.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 26 Aug 2025 14:17:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 09:21:cb:ab:65:7e:db:78:07:b0:4c:ba:c0:cf:bb:72:38:91:2b:b6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D8F283D13C79D458461D8E83A481638975B3D90B Validity Not Before: Aug 23 10:57:24 2025 GMT Not After : Aug 26 14:17:24 2025 GMT Subject: CN=E244380FDAB361E8288445E73ACC446FF8DC24F2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:08:80:2a:57:42:7d:40:a8:ba:33:a6:f4:0d: e5:7d:6b:c2:3a:4f:2d:5f:5d:dc:d4:eb:4f:0c:16: 5c:ce:15:9d:e1:6e:37:c8:c0:c2:3d:bf:3b:ac:8c: e6:00:f6:a0:d4:91:da:c6:9d:d0:bb:94:80:3d:64: a3:d7:9a:fb:b9:d2:a7:b8:db:51:4c:ac:74:7f:03: 05:d3:f9:e2:1d:53:bf:0c:8a:71:1a:de:98:4c:59: 57:79:fa:37:a8:e2:34:6f:38:18:12:45:78:de:f2: a8:65:24:a4:a4:0f:dd:dc:76:a2:89:40:73:7a:0b: c9:cf:11:60:53:3b:f9:b3:63:fd:61:b9:a5:69:b7: 18:4b:7f:89:7e:23:a0:cd:0a:9b:a3:61:e0:32:fd: 79:a9:f9:b7:83:4b:bb:09:65:f3:75:03:5d:40:c5: 7c:00:e4:67:23:c9:ef:b3:ff:ce:66:fb:20:4f:b6: 2b:aa:20:5f:df:c1:ef:3e:ef:d4:6e:74:24:2f:6b: 27:65:12:58:c7:e0:b4:ee:5b:cd:6c:7e:c9:a8:bf: bd:66:f2:c0:a7:13:63:19:fa:1a:32:4d:3d:57:30: 0f:28:cf:b5:4e:8d:cc:5d:e7:99:d0:23:aa:6f:9e: 7d:d6:eb:2c:78:fa:82:d9:06:4c:28:fe:df:87:2d: ac:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E2:44:38:0F:DA:B3:61:E8:28:84:45:E7:3A:CC:44:6F:F8:DC:24:F2 X509v3 Authority Key Identifier: keyid:D8:F2:83:D1:3C:79:D4:58:46:1D:8E:83:A4:81:63:89:75:B3:D9:0B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/9f9c446f-d971-4b5e-b269-1e83d3a14fef/0/D8F283D13C79D458461D8E83A481638975B3D90B.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D8F283D13C79D458461D8E83A481638975B3D90B.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/9f9c446f-d971-4b5e-b269-1e83d3a14fef/0/D8F283D13C79D458461D8E83A481638975B3D90B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6a:be:20:6a:7f:0b:bc:35:7d:85:e4:95:53:5d:2c:6c:88:ff: 55:04:63:95:9d:a2:d4:cf:20:32:bd:7e:b9:aa:af:06:9f:0d: 13:43:bf:c3:8f:a3:69:98:c4:75:40:7d:10:3d:0e:14:59:e7: ba:42:be:f8:6f:ab:57:38:6f:c4:f3:c2:ee:a3:24:a1:3b:19: 00:2d:9a:a4:9c:70:f0:39:f2:80:12:b3:f9:91:72:da:35:a6: 4e:b7:de:9a:47:98:43:da:a1:e9:8f:55:97:63:41:79:de:c0: 73:d4:ad:30:70:35:82:ad:18:f3:b1:7b:d5:97:31:2f:5a:33: af:19:cc:31:b7:ad:10:37:0a:e7:2a:0b:96:23:f2:4c:6e:98: e9:48:09:d9:71:9d:fa:43:72:df:ee:35:93:90:94:32:1f:20: 2e:43:8c:23:32:55:11:61:92:33:e2:94:70:87:ad:02:3c:e8: a3:96:f3:ab:4c:70:22:50:18:eb:d8:15:f2:16:ef:1b:93:70: 1a:fb:e9:49:7e:e9:0a:0e:be:67:2f:86:d9:93:b4:e2:78:22: d2:fc:35:4b:99:68:29:ae:85:bd:2f:b9:fa:d4:6c:2b:81:39: 8f:ef:c8:05:28:cd:5c:ca:e5:d7:3c:fe:d0:b2:57:67:5a:ea: 02:18:3f:e1 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUCSHLq2V+23gHsEy6wM+7cjiRK7YwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDhGMjgzRDEzQzc5RDQ1ODQ2MUQ4RTgzQTQ4MTYzODk3 NUIzRDkwQjAeFw0yNTA4MjMxMDU3MjRaFw0yNTA4MjYxNDE3MjRaMDMxMTAvBgNV BAMTKEUyNDQzODBGREFCMzYxRTgyODg0NDVFNzNBQ0M0NDZGRjhEQzI0RjIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDNCIAqV0J9QKi6M6b0DeV9a8I6 Ty1fXdzU608MFlzOFZ3hbjfIwMI9vzusjOYA9qDUkdrGndC7lIA9ZKPXmvu50qe4 21FMrHR/AwXT+eIdU78MinEa3phMWVd5+jeo4jRvOBgSRXje8qhlJKSkD93cdqKJ QHN6C8nPEWBTO/mzY/1huaVptxhLf4l+I6DNCpujYeAy/Xmp+beDS7sJZfN1A11A xXwA5Gcjye+z/85m+yBPtiuqIF/fwe8+79RudCQvaydlEljH4LTuW81sfsmov71m 8sCnE2MZ+hoyTT1XMA8oz7VOjcxd55nQI6pvnn3W6yx4+oLZBkwo/t+HLaxdAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU4kQ4D9qzYegohEXnOsxEb/jcJPIwHwYDVR0j BBgwFoAU2PKD0Tx51FhGHY6DpIFjiXWz2QswDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 ZjljNDQ2Zi1kOTcxLTRiNWUtYjI2OS0xZTgzZDNhMTRmZWYvMC9EOEYyODNEMTND NzlENDU4NDYxRDhFODNBNDgxNjM4OTc1QjNEOTBCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRDhGMjgzRDEzQzc5RDQ1ODQ2MUQ4RTgzQTQ4MTYzODk3NUIz RDkwQi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOWY5YzQ0NmYtZDk3MS00YjVlLWIy NjktMWU4M2QzYTE0ZmVmLzAvRDhGMjgzRDEzQzc5RDQ1ODQ2MUQ4RTgzQTQ4MTYz ODk3NUIzRDkwQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGq+IGp/C7w1fYXklVNdLGyI/1UEY5WdotTP IDK9frmqrwafDRNDv8OPo2mYxHVAfRA9DhRZ57pCvvhvq1c4b8Tzwu6jJKE7GQAt mqSccPA58oASs/mRcto1pk633ppHmEPaoemPVZdjQXnewHPUrTBwNYKtGPOxe9WX MS9aM68ZzDG3rRA3CucqC5Yj8kxumOlICdlxnfpDct/uNZOQlDIfIC5DjCMyVRFh kjPilHCHrQI86KOW86tMcCJQGOvYFfIW7xuTcBr76Ul+6QoOvmcvhtmTtOJ4ItL8 NUuZaCmuhb0vufrUbCuBOY/vyAUozVzK5dc8/tCyV2da6gIYP+E= -----END CERTIFICATE-----Generated at Sun Aug 24 01:32:53 2025 by rpki-client