$ rpki-client -vvf repo-rpki.idnic.net/repo/bf25b968-0927-4594-887e-67f53f967b12/0/131807BDDAAF97ED72214DFBC5C539ACB04FDCBE.mft File: 131807BDDAAF97ED72214DFBC5C539ACB04FDCBE.mft (raw, json) Hash identifier: 8LYZhJMjIR8J6P6wi/Zz6AquRqInaJUHEJu7GQOAOVM= Subject key identifier: 8C:B9:16:8E:8D:7E:1C:A2:7F:1A:D5:A4:59:51:24:14:39:13:21:7D Authority key identifier: 13:18:07:BD:DA:AF:97:ED:72:21:4D:FB:C5:C5:39:AC:B0:4F:DC:BE Certificate issuer: /CN=131807BDDAAF97ED72214DFBC5C539ACB04FDCBE Certificate serial: 165DC1F995F86264392283C56DB83FF5A87BB8D1 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/131807BDDAAF97ED72214DFBC5C539ACB04FDCBE.cer Subject info access: rsync://repo-rpki.idnic.net/repo/bf25b968-0927-4594-887e-67f53f967b12/0/131807BDDAAF97ED72214DFBC5C539ACB04FDCBE.mft Manifest number: 0303 Signing time: Thu 21 Aug 2025 08:20:55 +0000 Manifest this update: Thu 21 Aug 2025 08:15:55 +0000 Manifest next update: Sun 24 Aug 2025 17:46:55 +0000 Files and hashes: 1: 131807BDDAAF97ED72214DFBC5C539ACB04FDCBE.crl (hash: t0sjWRI8r1vVtyAbkARVZUJ1NlZ5mZa00sc6CHi7tsw=) 2: 3130332e3137342e32342e302f32332d3234203d3e20313331313131.roa (hash: IcV/PuSEjSNsy6cbDUeXZVgPYs8xhMimlvvll5vTiXU=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/bf25b968-0927-4594-887e-67f53f967b12/0/131807BDDAAF97ED72214DFBC5C539ACB04FDCBE.crl rsync://repo-rpki.idnic.net/repo/bf25b968-0927-4594-887e-67f53f967b12/0/131807BDDAAF97ED72214DFBC5C539ACB04FDCBE.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/131807BDDAAF97ED72214DFBC5C539ACB04FDCBE.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 24 Aug 2025 17:46:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 16:5d:c1:f9:95:f8:62:64:39:22:83:c5:6d:b8:3f:f5:a8:7b:b8:d1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=131807BDDAAF97ED72214DFBC5C539ACB04FDCBE Validity Not Before: Aug 21 08:15:55 2025 GMT Not After : Aug 24 17:46:55 2025 GMT Subject: CN=8CB9168E8D7E1CA27F1AD5A4595124143913217D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:2c:65:79:08:f7:bb:65:7c:27:a3:c4:5b:dc: df:e0:9c:ae:e3:b4:64:13:bc:e2:d9:5b:c6:33:f0: e5:a2:73:3b:3b:ec:6e:12:9f:37:42:b6:bb:85:22: 93:59:1f:b4:15:13:84:0e:dc:24:fd:25:2f:b5:1d: c4:98:44:8b:a8:ff:97:2d:30:a7:0a:1e:e0:43:b1: d6:03:45:05:4d:fd:4d:9a:44:3e:49:d6:42:b8:fd: a2:21:5b:98:c2:69:ee:0d:83:26:1c:34:48:2a:9a: f3:05:96:1c:34:53:d9:46:94:de:d7:bb:6f:75:80: 31:fb:df:aa:8d:84:88:34:0f:b2:44:50:e7:18:6c: ae:5e:e6:16:fa:10:8f:3f:00:fe:8d:8b:ac:05:7f: 44:d3:43:fe:a0:6d:d8:a5:a0:eb:d0:ff:45:58:26: fe:4f:12:f3:a1:14:2e:06:93:ba:7b:65:23:f0:2e: 14:6c:e1:2a:f4:37:99:9c:71:81:63:30:c7:5c:79: 8b:be:88:ea:14:83:04:2c:3a:ff:3f:a2:55:f3:91: eb:83:f6:69:33:38:1f:f3:84:42:8b:0a:4e:6c:f7: a4:86:2d:74:fd:fd:83:20:10:d3:51:9b:bb:25:6b: 8e:3c:42:b9:61:9c:89:88:d9:df:07:86:2a:4b:b4: 48:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8C:B9:16:8E:8D:7E:1C:A2:7F:1A:D5:A4:59:51:24:14:39:13:21:7D X509v3 Authority Key Identifier: keyid:13:18:07:BD:DA:AF:97:ED:72:21:4D:FB:C5:C5:39:AC:B0:4F:DC:BE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/bf25b968-0927-4594-887e-67f53f967b12/0/131807BDDAAF97ED72214DFBC5C539ACB04FDCBE.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/131807BDDAAF97ED72214DFBC5C539ACB04FDCBE.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/bf25b968-0927-4594-887e-67f53f967b12/0/131807BDDAAF97ED72214DFBC5C539ACB04FDCBE.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0f:47:c4:6b:e8:70:7a:2d:06:c6:7c:63:cc:bb:98:a1:aa:57: f1:6d:84:45:92:78:e0:50:e9:cf:8a:22:c4:32:9e:b1:d3:b4: 0b:67:67:0c:f5:3a:06:61:63:19:5d:5f:e6:36:a9:47:4c:1f: 3e:88:1a:8c:20:e0:5a:e9:c5:e9:be:5a:80:ab:6f:80:3c:52: 22:d1:bb:6b:ba:ee:ca:2b:c2:0b:10:c9:84:12:83:ab:19:8d: df:33:01:95:d4:68:90:89:69:38:2c:7e:db:ec:e2:f2:57:45: 62:ff:98:83:e5:4c:c8:6f:76:d0:98:f0:fc:88:63:b0:8f:65: 6d:ad:be:b9:8a:34:02:a3:ca:32:b3:a7:9f:c7:22:44:cf:d6: 76:69:9c:a6:37:28:8c:20:08:b9:47:2c:ab:b4:26:07:68:35: 4b:53:aa:a6:de:a2:d2:52:8f:27:8a:a2:9f:d4:68:0e:3d:f5: 34:ca:2b:62:11:b2:cc:7a:8a:0e:62:a0:d5:dd:f4:94:38:68: 9a:0d:4c:7c:e4:dd:bd:4a:10:b5:9a:10:25:71:04:25:57:e7: 18:8c:52:f4:28:2f:75:a3:77:c1:41:b6:79:8c:33:b8:2c:b7: 94:16:3e:0b:44:ae:5f:2b:44:60:57:0f:fb:cf:ed:27:b0:45: 23:86:7e:02 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUFl3B+ZX4YmQ5IoPFbbg/9ah7uNEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTMxODA3QkREQUFGOTdFRDcyMjE0REZCQzVDNTM5QUNC MDRGRENCRTAeFw0yNTA4MjEwODE1NTVaFw0yNTA4MjQxNzQ2NTVaMDMxMTAvBgNV BAMTKDhDQjkxNjhFOEQ3RTFDQTI3RjFBRDVBNDU5NTEyNDE0MzkxMzIxN0QwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+LGV5CPe7ZXwno8Rb3N/gnK7j tGQTvOLZW8Yz8OWiczs77G4SnzdCtruFIpNZH7QVE4QO3CT9JS+1HcSYRIuo/5ct MKcKHuBDsdYDRQVN/U2aRD5J1kK4/aIhW5jCae4NgyYcNEgqmvMFlhw0U9lGlN7X u291gDH736qNhIg0D7JEUOcYbK5e5hb6EI8/AP6Ni6wFf0TTQ/6gbdiloOvQ/0VY Jv5PEvOhFC4Gk7p7ZSPwLhRs4Sr0N5mccYFjMMdceYu+iOoUgwQsOv8/olXzkeuD 9mkzOB/zhEKLCk5s96SGLXT9/YMgENNRm7sla448QrlhnImI2d8HhipLtEgFAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUjLkWjo1+HKJ/GtWkWVEkFDkTIX0wHwYDVR0j BBgwFoAUExgHvdqvl+1yIU37xcU5rLBP3L4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i ZjI1Yjk2OC0wOTI3LTQ1OTQtODg3ZS02N2Y1M2Y5NjdiMTIvMC8xMzE4MDdCRERB QUY5N0VENzIyMTRERkJDNUM1MzlBQ0IwNEZEQ0JFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMTMxODA3QkREQUFGOTdFRDcyMjE0REZCQzVDNTM5QUNCMDRG RENCRS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYmYyNWI5NjgtMDkyNy00NTk0LTg4 N2UtNjdmNTNmOTY3YjEyLzAvMTMxODA3QkREQUFGOTdFRDcyMjE0REZCQzVDNTM5 QUNCMDRGRENCRS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAA9HxGvocHotBsZ8Y8y7mKGqV/FthEWSeOBQ 6c+KIsQynrHTtAtnZwz1OgZhYxldX+Y2qUdMHz6IGowg4Frpxem+WoCrb4A8UiLR u2u67sorwgsQyYQSg6sZjd8zAZXUaJCJaTgsftvs4vJXRWL/mIPlTMhvdtCY8PyI Y7CPZW2tvrmKNAKjyjKzp5/HIkTP1nZpnKY3KIwgCLlHLKu0JgdoNUtTqqbeotJS jyeKop/UaA499TTKK2IRssx6ig5ioNXd9JQ4aJoNTHzk3b1KELWaECVxBCVX5xiM UvQoL3Wjd8FBtnmMM7gst5QWPgtErl8rRGBXD/vP7SewRSOGfgI= -----END CERTIFICATE-----Generated at Sat Aug 23 13:40:41 2025 by rpki-client