$ rpki-client -vvf repo-rpki.idnic.net/repo/a2aa16ea-2aec-495d-a9a3-6925730d5e0f/0/8458BC369C80A76B2875FC97DBE5D1A09B6AF317.mft File: 8458BC369C80A76B2875FC97DBE5D1A09B6AF317.mft (raw, json) Hash identifier: UXRuvK9IRi8HOPOl6YSseNppFYmpcblgcdNo+Dzrkv8= Subject key identifier: DC:50:76:3E:14:AD:32:65:B1:A1:72:92:68:DE:ED:31:BB:21:10:C5 Authority key identifier: 84:58:BC:36:9C:80:A7:6B:28:75:FC:97:DB:E5:D1:A0:9B:6A:F3:17 Certificate issuer: /CN=8458BC369C80A76B2875FC97DBE5D1A09B6AF317 Certificate serial: 7A0FA9C944F1BE5DAA1B671877CE790669A78D52 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8458BC369C80A76B2875FC97DBE5D1A09B6AF317.cer Subject info access: rsync://repo-rpki.idnic.net/repo/a2aa16ea-2aec-495d-a9a3-6925730d5e0f/0/8458BC369C80A76B2875FC97DBE5D1A09B6AF317.mft Manifest number: 04FF Signing time: Thu 21 Aug 2025 13:21:43 +0000 Manifest this update: Thu 21 Aug 2025 13:16:43 +0000 Manifest next update: Sun 24 Aug 2025 17:29:43 +0000 Files and hashes: 1: 3130332e36362e36392e302f32342d3234203d3e203535363835.roa (hash: x+jv4TuSSXN4C68g+x8B9A51ZwulAwMClt9iXTwzSmY=) 2: 3130332e36362e36382e302f32342d3234203d3e203535363835.roa (hash: tpDStVFIFqB4DRm6j6XW2vqPZ0uybsz5vrF6Xuyk+08=) 3: 3130332e36362e37302e302f32342d3234203d3e20313333383430.roa (hash: Wxz1us2zDXrNlhEeTyTFEnQyiq4EZlAgNa1zZuJQj0g=) 4: 8458BC369C80A76B2875FC97DBE5D1A09B6AF317.crl (hash: hy7ioKi7tOuzISgccPC9/PkJ9xV8iy4EvBAg5T09X7g=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/a2aa16ea-2aec-495d-a9a3-6925730d5e0f/0/8458BC369C80A76B2875FC97DBE5D1A09B6AF317.crl rsync://repo-rpki.idnic.net/repo/a2aa16ea-2aec-495d-a9a3-6925730d5e0f/0/8458BC369C80A76B2875FC97DBE5D1A09B6AF317.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8458BC369C80A76B2875FC97DBE5D1A09B6AF317.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 24 Aug 2025 17:29:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7a:0f:a9:c9:44:f1:be:5d:aa:1b:67:18:77:ce:79:06:69:a7:8d:52 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8458BC369C80A76B2875FC97DBE5D1A09B6AF317 Validity Not Before: Aug 21 13:16:43 2025 GMT Not After : Aug 24 17:29:43 2025 GMT Subject: CN=DC50763E14AD3265B1A1729268DEED31BB2110C5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:9a:b7:f6:6d:ee:9e:d2:00:27:a2:df:2b:f0: 60:fa:7e:a8:bd:3f:38:6a:45:d3:36:7f:50:92:fe: 3a:7a:01:be:1d:17:36:8e:7d:f2:bb:f4:4c:6e:c5: a1:37:b0:7d:ab:d1:2c:e5:18:53:2f:99:7e:56:ac: 83:4c:0f:60:5f:54:9e:d2:2b:92:dc:4d:b4:27:ad: 6c:a8:fd:7c:cc:0a:32:be:79:de:58:e3:8b:ff:8b: 6a:34:be:eb:9a:b5:c0:bb:b9:f3:89:12:5c:3d:bb: 16:7a:c3:38:e2:31:56:15:95:8a:09:71:59:c9:1d: 62:96:59:b4:3e:18:b7:51:0b:f5:73:b0:24:0b:72: 88:c8:b0:35:6c:9c:ad:03:7c:cd:17:3c:e2:ab:b2: 7c:a4:6f:d7:b1:4c:ff:c7:ef:27:17:e4:9f:50:02: 16:33:e7:45:42:fd:1c:31:e0:63:03:28:80:73:34: e4:11:80:3b:b2:0a:ef:ce:62:18:6a:03:0f:a8:5b: d5:0d:4e:54:83:d7:63:dd:26:9c:78:47:d6:90:41: 73:29:9e:cb:ef:90:89:fb:b1:6e:9a:46:e3:3e:ed: 60:20:48:f5:d5:1f:b6:9e:1f:05:0b:de:f7:e1:28: 42:e7:6a:22:68:7c:d9:25:12:92:3c:de:98:b4:d6: 5e:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DC:50:76:3E:14:AD:32:65:B1:A1:72:92:68:DE:ED:31:BB:21:10:C5 X509v3 Authority Key Identifier: keyid:84:58:BC:36:9C:80:A7:6B:28:75:FC:97:DB:E5:D1:A0:9B:6A:F3:17 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/a2aa16ea-2aec-495d-a9a3-6925730d5e0f/0/8458BC369C80A76B2875FC97DBE5D1A09B6AF317.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8458BC369C80A76B2875FC97DBE5D1A09B6AF317.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a2aa16ea-2aec-495d-a9a3-6925730d5e0f/0/8458BC369C80A76B2875FC97DBE5D1A09B6AF317.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 33:0f:ff:23:47:56:82:4f:35:52:05:67:80:e0:b8:15:e2:53: a7:17:8a:aa:b2:0f:fc:e0:50:66:e3:5d:22:56:df:7e:a4:bb: 14:8f:18:33:bf:3f:94:62:62:67:ea:3d:a4:f5:13:e8:c7:00: 0d:28:dc:b9:ef:b6:8f:b2:aa:74:b4:eb:38:6c:8c:d8:1e:fe: 1f:d7:f0:81:a2:75:dd:fd:c1:31:91:6e:5a:23:3a:9b:0d:94: 27:46:2e:46:87:50:b5:14:98:63:4a:7b:26:db:85:36:a0:f4: 89:05:a8:7d:14:de:de:9b:04:d5:ee:16:c9:95:e4:b3:fc:23: 9c:fb:2b:d7:23:d2:8a:71:39:54:32:f2:2d:6c:ff:11:da:82: e6:19:44:25:6e:64:d4:bb:de:42:40:ff:de:c0:77:e4:f1:d3: 7a:38:c5:a7:1a:ec:ed:12:3c:33:ce:b0:41:c8:65:05:3b:dc: c5:cd:16:f5:a5:e8:48:af:86:90:2f:b8:1c:d3:81:4e:86:58: b6:cf:95:32:a2:a0:c8:ef:71:30:6a:b0:aa:98:be:3f:c6:06: 00:e5:01:8f:5e:0b:e6:59:e8:37:7f:12:de:a1:36:88:62:71: 49:63:7c:1f:09:9c:04:b8:17:df:17:57:29:32:c0:51:d2:f9: d1:a0:d0:ee -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUeg+pyUTxvl2qG2cYd855BmmnjVIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODQ1OEJDMzY5QzgwQTc2QjI4NzVGQzk3REJFNUQxQTA5 QjZBRjMxNzAeFw0yNTA4MjExMzE2NDNaFw0yNTA4MjQxNzI5NDNaMDMxMTAvBgNV BAMTKERDNTA3NjNFMTRBRDMyNjVCMUExNzI5MjY4REVFRDMxQkIyMTEwQzUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDAmrf2be6e0gAnot8r8GD6fqi9 PzhqRdM2f1CS/jp6Ab4dFzaOffK79ExuxaE3sH2r0SzlGFMvmX5WrINMD2BfVJ7S K5LcTbQnrWyo/XzMCjK+ed5Y44v/i2o0vuuatcC7ufOJElw9uxZ6wzjiMVYVlYoJ cVnJHWKWWbQ+GLdRC/VzsCQLcojIsDVsnK0DfM0XPOKrsnykb9exTP/H7ycX5J9Q AhYz50VC/Rwx4GMDKIBzNOQRgDuyCu/OYhhqAw+oW9UNTlSD12PdJpx4R9aQQXMp nsvvkIn7sW6aRuM+7WAgSPXVH7aeHwUL3vfhKELnaiJofNklEpI83pi01l4FAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU3FB2PhStMmWxoXKSaN7tMbshEMUwHwYDVR0j BBgwFoAUhFi8NpyAp2sodfyX2+XRoJtq8xcwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h MmFhMTZlYS0yYWVjLTQ5NWQtYTlhMy02OTI1NzMwZDVlMGYvMC84NDU4QkMzNjlD ODBBNzZCMjg3NUZDOTdEQkU1RDFBMDlCNkFGMzE3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvODQ1OEJDMzY5QzgwQTc2QjI4NzVGQzk3REJFNUQxQTA5QjZB RjMxNy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYTJhYTE2ZWEtMmFlYy00OTVkLWE5 YTMtNjkyNTczMGQ1ZTBmLzAvODQ1OEJDMzY5QzgwQTc2QjI4NzVGQzk3REJFNUQx QTA5QjZBRjMxNy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADMP/yNHVoJPNVIFZ4DguBXiU6cXiqqyD/zg UGbjXSJW336kuxSPGDO/P5RiYmfqPaT1E+jHAA0o3Lnvto+yqnS06zhsjNge/h/X 8IGidd39wTGRblojOpsNlCdGLkaHULUUmGNKeybbhTag9IkFqH0U3t6bBNXuFsmV 5LP8I5z7K9cj0opxOVQy8i1s/xHaguYZRCVuZNS73kJA/97Ad+Tx03o4xaca7O0S PDPOsEHIZQU73MXNFvWl6EivhpAvuBzTgU6GWLbPlTKioMjvcTBqsKqYvj/GBgDl AY9eC+ZZ6Dd/Et6hNohicUljfB8JnAS4F98XVykywFHS+dGg0O4= -----END CERTIFICATE-----Generated at Sat Aug 23 15:41:14 2025 by rpki-client