$ rpki-client -vvf repo-rpki.idnic.net/repo/aa914ada-a9aa-4d7f-9e47-594bcb7a70ab/0/8E3F7441403B9CDF2FD603CCBAF13D1671202D2D.mft File: 8E3F7441403B9CDF2FD603CCBAF13D1671202D2D.mft (raw, json) Hash identifier: qxtYvf43qvgpLz09zV3d3nrnenjiial8y8r8WDFEfCw= Subject key identifier: DD:EE:20:24:EC:E3:D4:10:6F:77:F0:F2:2C:A2:FE:4E:0E:7B:1A:E6 Authority key identifier: 8E:3F:74:41:40:3B:9C:DF:2F:D6:03:CC:BA:F1:3D:16:71:20:2D:2D Certificate issuer: /CN=8E3F7441403B9CDF2FD603CCBAF13D1671202D2D Certificate serial: 55917F884E87C2EA496ED0BAF8497A5592956965 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8E3F7441403B9CDF2FD603CCBAF13D1671202D2D.cer Subject info access: rsync://repo-rpki.idnic.net/repo/aa914ada-a9aa-4d7f-9e47-594bcb7a70ab/0/8E3F7441403B9CDF2FD603CCBAF13D1671202D2D.mft Manifest number: 0309 Signing time: Thu 21 Aug 2025 10:11:49 +0000 Manifest this update: Thu 21 Aug 2025 10:06:49 +0000 Manifest next update: Sun 24 Aug 2025 18:51:49 +0000 Files and hashes: 1: 8E3F7441403B9CDF2FD603CCBAF13D1671202D2D.crl (hash: hA6SD9aN6h5ZboeLdZOIZk0BLYL3LRjTgpFSMVGwLDg=) 2: 3130332e3134342e3133342e302f32332d3233203d3e20313339343237.roa (hash: CwI8o18dMmmdKMsJY38paR/SR1tzAkJd4x6YF0hfFxY=) 3: 3130332e3134342e3133352e302f32342d3234203d3e20313339343237.roa (hash: zWJYN2XG8P0RnY9CSUVBnEgmuVsEalWKm5k5yR0nlxQ=) 4: 323430353a366463303a3a2f33322d3332203d3e20313339343237.roa (hash: wF6dopi/8yFT5FMMEEtbalVZ2HlgmQH2NzcCqjkPo/A=) 5: 3130332e3134342e3133342e302f32342d3234203d3e20313339343237.roa (hash: i2RCXQ2h/tijX2X+SFP27I82J2d7eFOatLRW4qkSUTs=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/aa914ada-a9aa-4d7f-9e47-594bcb7a70ab/0/8E3F7441403B9CDF2FD603CCBAF13D1671202D2D.crl rsync://repo-rpki.idnic.net/repo/aa914ada-a9aa-4d7f-9e47-594bcb7a70ab/0/8E3F7441403B9CDF2FD603CCBAF13D1671202D2D.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8E3F7441403B9CDF2FD603CCBAF13D1671202D2D.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 24 Aug 2025 18:51:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 55:91:7f:88:4e:87:c2:ea:49:6e:d0:ba:f8:49:7a:55:92:95:69:65 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8E3F7441403B9CDF2FD603CCBAF13D1671202D2D Validity Not Before: Aug 21 10:06:49 2025 GMT Not After : Aug 24 18:51:49 2025 GMT Subject: CN=DDEE2024ECE3D4106F77F0F22CA2FE4E0E7B1AE6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:4d:fc:5a:a6:1f:44:f0:e9:78:bd:be:f2:1d: 3e:8c:fe:eb:e0:6a:78:c7:63:af:4f:68:5c:4a:d5: e1:cc:2c:aa:df:b0:b5:34:8b:98:20:5a:8a:35:ed: 9d:ea:3d:0c:e5:62:3e:0b:ed:39:88:fe:ea:86:d4: a8:52:77:68:81:f1:f3:8a:b6:49:d0:73:67:af:78: 72:75:d4:d5:f7:29:02:4d:7e:9f:bd:6d:dc:16:e7: 0e:23:31:0a:24:1c:20:92:c8:80:c2:08:84:4f:14: d9:54:2d:5f:e4:c7:f1:4b:23:1d:fd:ff:f0:8e:0e: 3f:ac:e4:b4:95:a6:ba:1e:cf:f1:3f:00:b0:05:ed: e9:5d:e1:f5:9d:02:1d:ea:20:c6:a6:0a:6e:d5:a1: 5b:94:a7:78:ac:0d:a0:86:a4:f3:cf:24:56:da:8c: a9:5b:80:16:9c:fb:d6:e2:9d:3d:a6:95:d8:7d:89: 7b:18:bb:06:bb:ab:f5:db:7e:dc:f1:fc:4b:f9:25: da:59:32:ca:b8:0a:1c:85:7a:d3:41:2c:6f:f1:f7: 25:c3:6d:66:17:23:19:05:7f:a0:16:e3:c4:92:ac: 18:0f:76:52:03:f8:9e:a2:84:70:05:32:2c:c0:76: cf:56:8f:76:3c:7a:96:29:f4:f4:7e:f0:81:05:52: 80:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:EE:20:24:EC:E3:D4:10:6F:77:F0:F2:2C:A2:FE:4E:0E:7B:1A:E6 X509v3 Authority Key Identifier: keyid:8E:3F:74:41:40:3B:9C:DF:2F:D6:03:CC:BA:F1:3D:16:71:20:2D:2D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/aa914ada-a9aa-4d7f-9e47-594bcb7a70ab/0/8E3F7441403B9CDF2FD603CCBAF13D1671202D2D.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8E3F7441403B9CDF2FD603CCBAF13D1671202D2D.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/aa914ada-a9aa-4d7f-9e47-594bcb7a70ab/0/8E3F7441403B9CDF2FD603CCBAF13D1671202D2D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 33:d2:14:a7:7d:09:b3:8a:f7:9c:7d:8b:12:91:08:bd:5f:49: 66:68:27:77:ac:0c:63:4d:0c:e1:44:b6:d5:47:79:22:c1:50: a3:8d:5e:e4:72:3f:f5:d8:59:d7:9a:c6:08:b7:f7:91:9c:40: 61:b0:28:36:4d:41:f1:7e:14:cf:39:5a:84:56:16:bf:14:a5: 45:a6:59:3c:bb:3c:bf:94:4b:c0:39:85:56:21:aa:2b:45:fa: f2:4d:40:bf:d6:11:0e:18:ff:8d:9e:8a:f2:84:c0:bb:9b:9e: ed:70:07:83:eb:26:03:1e:64:54:d5:d8:03:8b:d0:a7:58:e4: 12:ea:e6:22:ab:e2:c8:70:44:03:73:b9:fa:e3:81:fa:68:0d: 9e:9d:cf:d6:81:fa:7d:85:4f:b0:20:2a:ad:64:d9:b5:45:2d: 10:9e:01:17:bc:97:28:86:37:82:98:56:24:34:8a:5d:84:4a: e9:d9:65:cf:a2:8e:6e:cd:db:ad:5b:82:6c:96:d5:72:d7:e6: 19:45:77:69:4b:4f:8a:2a:bb:14:86:0a:48:4c:7b:15:ca:de: 0f:3e:dd:4c:30:89:c3:c2:19:4a:b0:df:00:cd:aa:20:df:ba: 87:d3:86:94:6c:53:19:8d:55:4b:37:28:85:84:8c:70:95:77: c9:19:b8:ac -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUVZF/iE6HwupJbtC6+El6VZKVaWUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEUzRjc0NDE0MDNCOUNERjJGRDYwM0NDQkFGMTNEMTY3 MTIwMkQyRDAeFw0yNTA4MjExMDA2NDlaFw0yNTA4MjQxODUxNDlaMDMxMTAvBgNV BAMTKERERUUyMDI0RUNFM0Q0MTA2Rjc3RjBGMjJDQTJGRTRFMEU3QjFBRTYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCvTfxaph9E8Ol4vb7yHT6M/uvg anjHY69PaFxK1eHMLKrfsLU0i5ggWoo17Z3qPQzlYj4L7TmI/uqG1KhSd2iB8fOK tknQc2eveHJ11NX3KQJNfp+9bdwW5w4jMQokHCCSyIDCCIRPFNlULV/kx/FLIx39 //CODj+s5LSVproez/E/ALAF7eld4fWdAh3qIMamCm7VoVuUp3isDaCGpPPPJFba jKlbgBac+9binT2mldh9iXsYuwa7q/Xbftzx/Ev5JdpZMsq4ChyFetNBLG/x9yXD bWYXIxkFf6AW48SSrBgPdlID+J6ihHAFMizAds9Wj3Y8epYp9PR+8IEFUoB5AgMB AAGjggI8MIICODAdBgNVHQ4EFgQU3e4gJOzj1BBvd/DyLKL+Tg57GuYwHwYDVR0j BBgwFoAUjj90QUA7nN8v1gPMuvE9FnEgLS0wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h YTkxNGFkYS1hOWFhLTRkN2YtOWU0Ny01OTRiY2I3YTcwYWIvMC84RTNGNzQ0MTQw M0I5Q0RGMkZENjAzQ0NCQUYxM0QxNjcxMjAyRDJELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOEUzRjc0NDE0MDNCOUNERjJGRDYwM0NDQkFGMTNEMTY3MTIw MkQyRC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYWE5MTRhZGEtYTlhYS00ZDdmLTll NDctNTk0YmNiN2E3MGFiLzAvOEUzRjc0NDE0MDNCOUNERjJGRDYwM0NDQkFGMTNE MTY3MTIwMkQyRC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADPSFKd9CbOK95x9ixKRCL1fSWZoJ3esDGNN DOFEttVHeSLBUKONXuRyP/XYWdeaxgi395GcQGGwKDZNQfF+FM85WoRWFr8UpUWm WTy7PL+US8A5hVYhqitF+vJNQL/WEQ4Y/42eivKEwLubnu1wB4PrJgMeZFTV2AOL 0KdY5BLq5iKr4shwRANzufrjgfpoDZ6dz9aB+n2FT7AgKq1k2bVFLRCeARe8lyiG N4KYViQ0il2ESunZZc+ijm7N261bgmyW1XLX5hlFd2lLT4oquxSGCkhMexXK3g8+ 3UwwicPCGUqw3wDNqiDfuofThpRsUxmNVUs3KIWEjHCVd8kZuKw= -----END CERTIFICATE-----Generated at Sat Aug 23 15:22:57 2025 by rpki-client