$ rpki-client -vvf repo-rpki.idnic.net/repo/a0ba85a0-3534-49a4-a826-13a735f94369/0/8C210840D9E28A465D4F0B9F3A1D7C31CC6680C0.mft File: 8C210840D9E28A465D4F0B9F3A1D7C31CC6680C0.mft (raw, json) Hash identifier: apDiunlmGTpaGXP5Rkv6CqQd376Jf1Twme9wGdjmwUo= Subject key identifier: 8B:01:E9:D2:74:65:A0:27:63:05:19:52:2E:61:C6:B4:3A:94:23:72 Authority key identifier: 8C:21:08:40:D9:E2:8A:46:5D:4F:0B:9F:3A:1D:7C:31:CC:66:80:C0 Certificate issuer: /CN=8C210840D9E28A465D4F0B9F3A1D7C31CC6680C0 Certificate serial: 1CBCBE23479F37AA271DB10A7C6C965C9C9180F5 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/8C210840D9E28A465D4F0B9F3A1D7C31CC6680C0.cer Subject info access: rsync://repo-rpki.idnic.net/repo/a0ba85a0-3534-49a4-a826-13a735f94369/0/8C210840D9E28A465D4F0B9F3A1D7C31CC6680C0.mft Manifest number: BB Signing time: Sat 23 Aug 2025 10:30:42 +0000 Manifest this update: Sat 23 Aug 2025 10:25:42 +0000 Manifest next update: Tue 26 Aug 2025 17:26:42 +0000 Files and hashes: 1: 3136302e32322e3139342e302f32332d3234203d3e20313532383236.roa (hash: 8CRgA1ByY654Nlat1fHrKnqGH93mDlUGlMXfJsCa4ik=) 2: 8C210840D9E28A465D4F0B9F3A1D7C31CC6680C0.crl (hash: 3DRwbqlH2RYD0O3gOiLtwufPspaJS73ZKL7F+zVzWac=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/a0ba85a0-3534-49a4-a826-13a735f94369/0/8C210840D9E28A465D4F0B9F3A1D7C31CC6680C0.crl rsync://repo-rpki.idnic.net/repo/a0ba85a0-3534-49a4-a826-13a735f94369/0/8C210840D9E28A465D4F0B9F3A1D7C31CC6680C0.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/8C210840D9E28A465D4F0B9F3A1D7C31CC6680C0.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 26 Aug 2025 10:24:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1c:bc:be:23:47:9f:37:aa:27:1d:b1:0a:7c:6c:96:5c:9c:91:80:f5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8C210840D9E28A465D4F0B9F3A1D7C31CC6680C0 Validity Not Before: Aug 23 10:25:42 2025 GMT Not After : Aug 26 17:26:42 2025 GMT Subject: CN=8B01E9D27465A027630519522E61C6B43A942372 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:01:7b:6c:3c:79:51:cd:4d:a6:c6:c3:86:5a: 3c:c3:6f:82:00:3e:12:76:1f:5f:db:96:17:23:76: 6c:18:17:31:82:52:65:4f:c2:49:19:df:77:9b:b4: 78:75:73:4f:bb:37:14:28:7e:9d:23:88:7c:0b:54: d0:16:b6:ae:66:e6:f5:cd:a4:9b:c5:b4:69:10:0e: 62:f6:16:08:b5:dc:e0:41:8d:91:f9:46:1f:96:10: fc:f2:d4:d3:86:02:33:47:96:6b:b2:0a:32:2e:14: b7:bc:df:8e:ca:8e:3d:bc:92:b8:48:6a:ec:33:0c: b3:53:43:02:86:f1:25:fe:ac:ac:d0:b8:a7:54:88: 03:94:6d:04:e2:41:2f:6f:89:5c:2f:37:9e:55:4b: 1c:c1:37:72:79:2f:67:0e:6b:e7:cc:20:3d:5b:2f: dc:62:d3:0b:93:95:40:3d:69:d6:42:6b:c3:74:33: c3:8a:a4:cb:a7:62:f1:a6:0e:5d:68:c8:15:42:a8: ef:72:b3:0d:64:0e:1a:ec:91:e6:43:f4:26:6e:5c: 52:fd:88:bf:35:3e:01:79:49:86:ca:5f:f4:bb:b3: 29:d1:de:ad:ce:2c:6e:f6:10:cb:aa:ba:2d:6c:82: e4:fe:4b:4c:96:68:16:98:0a:3c:5a:06:65:c5:c9: de:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8B:01:E9:D2:74:65:A0:27:63:05:19:52:2E:61:C6:B4:3A:94:23:72 X509v3 Authority Key Identifier: keyid:8C:21:08:40:D9:E2:8A:46:5D:4F:0B:9F:3A:1D:7C:31:CC:66:80:C0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/a0ba85a0-3534-49a4-a826-13a735f94369/0/8C210840D9E28A465D4F0B9F3A1D7C31CC6680C0.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/8C210840D9E28A465D4F0B9F3A1D7C31CC6680C0.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a0ba85a0-3534-49a4-a826-13a735f94369/0/8C210840D9E28A465D4F0B9F3A1D7C31CC6680C0.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 59:51:c4:6b:12:f5:f8:71:3b:4b:00:63:99:48:31:e9:cb:1a: ea:52:9a:c2:a5:af:57:37:31:72:5f:59:c5:eb:51:52:1f:cb: b5:ff:d9:67:86:25:cc:63:dc:23:e4:b9:37:36:48:33:ed:ca: dc:d8:87:46:b6:36:fe:8c:3b:88:43:08:dc:48:29:53:c5:78: 46:77:26:74:23:f0:27:cc:55:4d:3b:77:50:c3:6d:fb:5c:47: 31:31:0a:b3:e6:77:68:55:47:03:f4:77:9e:b3:43:4d:3c:ae: 93:52:41:f6:b1:7c:3c:f1:70:5d:35:99:f2:54:e2:2b:e5:1d: 79:82:21:56:61:d0:62:ff:80:14:5d:ad:33:b9:66:e6:03:84: ec:60:5d:cb:fe:a2:3d:71:cd:c2:31:d8:69:06:6f:1b:50:a3: c5:26:73:1a:e6:e4:24:f3:c3:5e:80:75:dd:27:b6:7c:49:7f: 5f:e3:1f:57:91:8d:1c:64:a4:5b:d9:16:8e:79:0c:26:fc:1c: ea:c2:f4:5a:ed:7e:19:67:54:d8:9f:84:82:af:c1:83:cd:f1: a0:79:e5:0d:9c:7c:07:bc:e9:f1:3a:a4:a4:8c:33:03:89:91: a8:6c:57:02:7b:a2:a6:57:4d:9d:08:be:6b:e4:6b:11:d5:e3: 12:5b:f5:d9 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUHLy+I0efN6onHbEKfGyWXJyRgPUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEMyMTA4NDBEOUUyOEE0NjVENEYwQjlGM0ExRDdDMzFD QzY2ODBDMDAeFw0yNTA4MjMxMDI1NDJaFw0yNTA4MjYxNzI2NDJaMDMxMTAvBgNV BAMTKDhCMDFFOUQyNzQ2NUEwMjc2MzA1MTk1MjJFNjFDNkI0M0E5NDIzNzIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDkAXtsPHlRzU2mxsOGWjzDb4IA PhJ2H1/blhcjdmwYFzGCUmVPwkkZ33ebtHh1c0+7NxQofp0jiHwLVNAWtq5m5vXN pJvFtGkQDmL2Fgi13OBBjZH5Rh+WEPzy1NOGAjNHlmuyCjIuFLe8347Kjj28krhI auwzDLNTQwKG8SX+rKzQuKdUiAOUbQTiQS9viVwvN55VSxzBN3J5L2cOa+fMID1b L9xi0wuTlUA9adZCa8N0M8OKpMunYvGmDl1oyBVCqO9ysw1kDhrskeZD9CZuXFL9 iL81PgF5SYbKX/S7synR3q3OLG72EMuqui1sguT+S0yWaBaYCjxaBmXFyd51AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUiwHp0nRloCdjBRlSLmHGtDqUI3IwHwYDVR0j BBgwFoAUjCEIQNniikZdTwufOh18McxmgMAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h MGJhODVhMC0zNTM0LTQ5YTQtYTgyNi0xM2E3MzVmOTQzNjkvMC84QzIxMDg0MEQ5 RTI4QTQ2NUQ0RjBCOUYzQTFEN0MzMUNDNjY4MEMwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvOEMyMTA4NDBEOUUyOEE0NjVENEYwQjlGM0ExRDdDMzFDQzY2 ODBDMC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYTBiYTg1YTAtMzUzNC00OWE0LWE4 MjYtMTNhNzM1Zjk0MzY5LzAvOEMyMTA4NDBEOUUyOEE0NjVENEYwQjlGM0ExRDdD MzFDQzY2ODBDMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFlRxGsS9fhxO0sAY5lIMenLGupSmsKlr1c3 MXJfWcXrUVIfy7X/2WeGJcxj3CPkuTc2SDPtytzYh0a2Nv6MO4hDCNxIKVPFeEZ3 JnQj8CfMVU07d1DDbftcRzExCrPmd2hVRwP0d56zQ008rpNSQfaxfDzxcF01mfJU 4ivlHXmCIVZh0GL/gBRdrTO5ZuYDhOxgXcv+oj1xzcIx2GkGbxtQo8Umcxrm5CTz w16Add0ntnxJf1/jH1eRjRxkpFvZFo55DCb8HOrC9FrtfhlnVNifhIKvwYPN8aB5 5Q2cfAe86fE6pKSMMwOJkahsVwJ7oqZXTZ0IvmvkaxHV4xJb9dk= -----END CERTIFICATE-----Generated at Sat Aug 23 22:52:08 2025 by rpki-client