$ rpki-client -vvf repo-rpki.idnic.net/repo/aef837b3-dfd2-42cc-9b79-74b6bafd4e2d/0/8711D05D82BAFB7BEAB275E079A72DDD554064EA.mft File: 8711D05D82BAFB7BEAB275E079A72DDD554064EA.mft (raw, json) Hash identifier: sSXDTXPh+QT96Qk+f4ucp83B+jnNenWvc5LtkG97MNg= Subject key identifier: 4D:62:1B:18:D2:D8:D5:99:DC:E9:D9:DA:D5:9E:F9:89:7B:F7:B6:18 Authority key identifier: 87:11:D0:5D:82:BA:FB:7B:EA:B2:75:E0:79:A7:2D:DD:55:40:64:EA Certificate issuer: /CN=8711D05D82BAFB7BEAB275E079A72DDD554064EA Certificate serial: 2A6684234256B51F1DC3ADA0363B7F522DD7DE17 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8711D05D82BAFB7BEAB275E079A72DDD554064EA.cer Subject info access: rsync://repo-rpki.idnic.net/repo/aef837b3-dfd2-42cc-9b79-74b6bafd4e2d/0/8711D05D82BAFB7BEAB275E079A72DDD554064EA.mft Manifest number: 01CB Signing time: Thu 21 Aug 2025 23:42:09 +0000 Manifest this update: Thu 21 Aug 2025 23:37:09 +0000 Manifest next update: Mon 25 Aug 2025 04:56:09 +0000 Files and hashes: 1: 8711D05D82BAFB7BEAB275E079A72DDD554064EA.crl (hash: j4IiiscCSUb3E6sPO/kXOC9NjcaPpXTz7HwsTGEsaKs=) 2: 3130332e31372e3137392e302f32342d3234203d3e20313530323236.roa (hash: zZiAzMvnjGpr4Mq+/OGXUdFHQPaHJLr/tCxwWuWhySI=) 3: 3130332e31372e3137382e302f32342d3234203d3e20313530323236.roa (hash: 6sZc5cLjn8BGU3ndbP5aYFbkGJW/EMEDKLHgtlwJygA=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/aef837b3-dfd2-42cc-9b79-74b6bafd4e2d/0/8711D05D82BAFB7BEAB275E079A72DDD554064EA.crl rsync://repo-rpki.idnic.net/repo/aef837b3-dfd2-42cc-9b79-74b6bafd4e2d/0/8711D05D82BAFB7BEAB275E079A72DDD554064EA.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8711D05D82BAFB7BEAB275E079A72DDD554064EA.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 25 Aug 2025 04:56:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2a:66:84:23:42:56:b5:1f:1d:c3:ad:a0:36:3b:7f:52:2d:d7:de:17 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8711D05D82BAFB7BEAB275E079A72DDD554064EA Validity Not Before: Aug 21 23:37:09 2025 GMT Not After : Aug 25 04:56:09 2025 GMT Subject: CN=4D621B18D2D8D599DCE9D9DAD59EF9897BF7B618 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:27:c1:43:3f:76:f7:ec:92:0e:b9:9e:16:9d: 1a:c5:d9:43:fa:b3:d9:f9:3d:43:44:d5:19:46:a4: c6:ff:ef:0a:dd:32:fc:e4:89:2a:44:fd:cc:71:52: cd:e5:c1:62:26:27:f2:cb:93:c7:ad:87:da:ab:13: 88:e6:ad:67:3b:c9:44:91:53:45:60:0b:a7:f0:36: 03:c2:97:06:40:af:e0:6f:a6:06:e9:f1:47:1f:fc: a4:9b:39:c6:8f:12:43:7f:98:56:09:cd:27:4a:dd: 6c:14:14:b2:9c:50:b8:c2:a1:76:48:0c:b7:52:08: c3:0f:77:d6:7d:07:8a:c2:53:5c:c7:b1:cd:e2:a5: f7:a7:3e:45:23:83:7a:f5:bb:c2:60:c8:52:93:86: 77:01:5f:3e:56:dc:03:13:d2:69:4b:1b:35:70:d3: 7b:ae:ee:93:39:1a:d2:fb:73:d9:19:1c:d2:5a:b1: 1f:30:34:6f:d5:ea:95:49:9b:a3:b8:44:15:a2:ad: 63:36:d2:47:28:93:91:d9:b5:a3:eb:b9:84:17:92: 90:29:6e:66:97:23:3f:35:9d:52:b9:34:e7:e3:af: a3:c0:91:ab:4e:3f:fe:2b:d5:d6:d4:43:c1:36:40: 3e:f4:32:52:c2:4f:b5:12:bd:1d:da:9c:59:cb:16: ff:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4D:62:1B:18:D2:D8:D5:99:DC:E9:D9:DA:D5:9E:F9:89:7B:F7:B6:18 X509v3 Authority Key Identifier: keyid:87:11:D0:5D:82:BA:FB:7B:EA:B2:75:E0:79:A7:2D:DD:55:40:64:EA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/aef837b3-dfd2-42cc-9b79-74b6bafd4e2d/0/8711D05D82BAFB7BEAB275E079A72DDD554064EA.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8711D05D82BAFB7BEAB275E079A72DDD554064EA.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/aef837b3-dfd2-42cc-9b79-74b6bafd4e2d/0/8711D05D82BAFB7BEAB275E079A72DDD554064EA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 14:28:d3:12:21:5a:dd:30:dc:05:8f:62:79:67:33:3f:88:b6: 98:49:4d:0e:5d:80:1c:0f:07:4d:05:af:89:d4:64:cd:4b:33: 97:87:83:ad:c7:ad:76:fc:49:7c:fd:e0:01:94:3f:d5:bc:02: b0:e9:4a:75:68:5e:39:7c:b8:60:65:bd:00:42:1c:d4:03:6a: 94:2b:68:6b:63:7b:4b:c8:94:99:94:64:ba:0f:be:70:94:70: c0:9b:79:7f:80:83:08:db:9b:0d:7f:1a:51:3e:74:26:35:ed: 96:bd:0d:41:f0:46:c7:5f:0f:21:31:03:d7:6a:7d:30:63:a8: e0:69:94:27:a7:da:19:71:1a:9d:64:cc:6b:69:b0:a0:59:ca: 20:21:a7:a3:22:0a:e7:95:aa:b5:5f:7d:f7:d3:ed:16:bb:1f: be:ec:e9:63:68:d5:b3:c3:96:f4:2a:94:8d:61:be:c6:99:fb: 1e:98:17:12:f7:bb:a5:84:57:f8:0e:39:b2:45:97:53:67:36: 70:28:70:67:71:dc:46:fe:31:fd:df:b6:88:f0:9e:fb:8d:39: 6f:98:23:30:1a:5e:93:2f:ae:5b:47:61:e6:cf:21:a8:6c:de: 7a:9a:c9:96:5a:88:aa:85:e8:90:de:5c:cc:7c:cd:b9:70:a6: 10:63:bb:3c -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUKmaEI0JWtR8dw62gNjt/Ui3X3hcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODcxMUQwNUQ4MkJBRkI3QkVBQjI3NUUwNzlBNzJEREQ1 NTQwNjRFQTAeFw0yNTA4MjEyMzM3MDlaFw0yNTA4MjUwNDU2MDlaMDMxMTAvBgNV BAMTKDRENjIxQjE4RDJEOEQ1OTlEQ0U5RDlEQUQ1OUVGOTg5N0JGN0I2MTgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCvJ8FDP3b37JIOuZ4WnRrF2UP6 s9n5PUNE1RlGpMb/7wrdMvzkiSpE/cxxUs3lwWImJ/LLk8eth9qrE4jmrWc7yUSR U0VgC6fwNgPClwZAr+Bvpgbp8Ucf/KSbOcaPEkN/mFYJzSdK3WwUFLKcULjCoXZI DLdSCMMPd9Z9B4rCU1zHsc3ipfenPkUjg3r1u8JgyFKThncBXz5W3AMT0mlLGzVw 03uu7pM5GtL7c9kZHNJasR8wNG/V6pVJm6O4RBWirWM20kcok5HZtaPruYQXkpAp bmaXIz81nVK5NOfjr6PAkatOP/4r1dbUQ8E2QD70MlLCT7USvR3anFnLFv8zAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUTWIbGNLY1Znc6dna1Z75iXv3thgwHwYDVR0j BBgwFoAUhxHQXYK6+3vqsnXgeact3VVAZOowDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h ZWY4MzdiMy1kZmQyLTQyY2MtOWI3OS03NGI2YmFmZDRlMmQvMC84NzExRDA1RDgy QkFGQjdCRUFCMjc1RTA3OUE3MkRERDU1NDA2NEVBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvODcxMUQwNUQ4MkJBRkI3QkVBQjI3NUUwNzlBNzJEREQ1NTQw NjRFQS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYWVmODM3YjMtZGZkMi00MmNjLTli NzktNzRiNmJhZmQ0ZTJkLzAvODcxMUQwNUQ4MkJBRkI3QkVBQjI3NUUwNzlBNzJE REQ1NTQwNjRFQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABQo0xIhWt0w3AWPYnlnMz+ItphJTQ5dgBwP B00Fr4nUZM1LM5eHg63HrXb8SXz94AGUP9W8ArDpSnVoXjl8uGBlvQBCHNQDapQr aGtje0vIlJmUZLoPvnCUcMCbeX+Agwjbmw1/GlE+dCY17Za9DUHwRsdfDyExA9dq fTBjqOBplCen2hlxGp1kzGtpsKBZyiAhp6MiCueVqrVffffT7Ra7H77s6WNo1bPD lvQqlI1hvsaZ+x6YFxL3u6WEV/gOObJFl1NnNnAocGdx3Eb+Mf3ftojwnvuNOW+Y IzAaXpMvrltHYebPIahs3nqayZZaiKqF6JDeXMx8zblwphBjuzw= -----END CERTIFICATE-----Generated at Sat Aug 23 10:06:45 2025 by rpki-client