$ rpki-client -vvf repo-rpki.idnic.net/repo/bfdb18ef-659f-4b1e-a2e0-b58af6b1271f/0/8D1D84B8A56224B4E290FBDA5C790CD1F03F11A7.mft File: 8D1D84B8A56224B4E290FBDA5C790CD1F03F11A7.mft (raw, json) Hash identifier: 78Mz+Vz+D8R862yaT11iRhXQKGFV9xlGWxV2KX/3Zm8= Subject key identifier: 3E:74:52:07:2B:AE:1B:A9:65:5E:E7:94:B4:13:47:82:13:7E:73:61 Authority key identifier: 8D:1D:84:B8:A5:62:24:B4:E2:90:FB:DA:5C:79:0C:D1:F0:3F:11:A7 Certificate issuer: /CN=8D1D84B8A56224B4E290FBDA5C790CD1F03F11A7 Certificate serial: 7D49E203B97236599AE3B47172D37CDB5F4CD44D Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8D1D84B8A56224B4E290FBDA5C790CD1F03F11A7.cer Subject info access: rsync://repo-rpki.idnic.net/repo/bfdb18ef-659f-4b1e-a2e0-b58af6b1271f/0/8D1D84B8A56224B4E290FBDA5C790CD1F03F11A7.mft Manifest number: 01FE Signing time: Sat 23 Aug 2025 07:01:48 +0000 Manifest this update: Sat 23 Aug 2025 06:56:48 +0000 Manifest next update: Tue 26 Aug 2025 12:28:48 +0000 Files and hashes: 1: 3130332e3136302e3133382e302f32332d3234203d3e203338333230.roa (hash: 1fOWEp4TrzIX6lJGhVie2BUvo2f5cu7g23YUAHBTka8=) 2: 8D1D84B8A56224B4E290FBDA5C790CD1F03F11A7.crl (hash: kdude5zbxZN0R38f0IZNUxh5ft0qHPPGAG7Z2r9413Q=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/bfdb18ef-659f-4b1e-a2e0-b58af6b1271f/0/8D1D84B8A56224B4E290FBDA5C790CD1F03F11A7.crl rsync://repo-rpki.idnic.net/repo/bfdb18ef-659f-4b1e-a2e0-b58af6b1271f/0/8D1D84B8A56224B4E290FBDA5C790CD1F03F11A7.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8D1D84B8A56224B4E290FBDA5C790CD1F03F11A7.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 26 Aug 2025 10:19:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7d:49:e2:03:b9:72:36:59:9a:e3:b4:71:72:d3:7c:db:5f:4c:d4:4d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8D1D84B8A56224B4E290FBDA5C790CD1F03F11A7 Validity Not Before: Aug 23 06:56:48 2025 GMT Not After : Aug 26 12:28:48 2025 GMT Subject: CN=3E7452072BAE1BA9655EE794B4134782137E7361 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:a2:e0:40:f5:27:0f:11:a5:32:e2:04:5d:ea: a1:c9:37:39:fa:6c:c9:19:a0:ae:49:12:be:e1:22: 02:80:54:ba:51:45:a2:5b:eb:26:c8:0f:9c:5b:b2: 54:09:88:2e:c2:b9:c3:3a:20:f5:2b:0f:2e:d4:ec: 30:28:78:83:38:63:97:3a:18:71:5a:af:48:e0:e9: 94:d8:62:c6:f6:0a:de:6b:0e:7a:f8:a9:cc:2f:35: 2a:a4:97:69:74:36:db:74:84:3c:48:82:71:58:32: 38:6b:ea:b5:6e:3e:05:ec:88:dc:d1:db:a8:92:a5: 5f:82:70:92:ca:b5:11:65:dd:2e:e7:10:c1:d3:70: 02:33:b6:b6:a0:6f:7a:be:f8:eb:a8:92:6a:d8:04: 57:1d:82:50:11:d3:a1:31:65:7d:dc:de:31:3d:13: eb:a2:b7:1c:3e:ce:32:d1:6b:58:a0:69:4e:2a:f5: 48:a0:8c:8a:94:f2:01:3c:ee:88:1b:75:1b:86:5b: 2d:dc:b7:cd:4d:45:cc:ac:a2:00:c2:e7:41:88:91: 3c:b5:00:6b:3f:7d:53:d8:cc:25:5c:91:ee:06:53: dc:7d:cf:03:48:a2:38:cc:9f:5e:6a:04:6f:e3:63: dc:18:bc:93:af:9f:4a:68:e7:a4:47:35:28:0f:29: f1:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3E:74:52:07:2B:AE:1B:A9:65:5E:E7:94:B4:13:47:82:13:7E:73:61 X509v3 Authority Key Identifier: keyid:8D:1D:84:B8:A5:62:24:B4:E2:90:FB:DA:5C:79:0C:D1:F0:3F:11:A7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/bfdb18ef-659f-4b1e-a2e0-b58af6b1271f/0/8D1D84B8A56224B4E290FBDA5C790CD1F03F11A7.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8D1D84B8A56224B4E290FBDA5C790CD1F03F11A7.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/bfdb18ef-659f-4b1e-a2e0-b58af6b1271f/0/8D1D84B8A56224B4E290FBDA5C790CD1F03F11A7.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3a:d7:8c:7e:58:e4:99:78:1d:08:1b:1f:ac:62:a8:61:4b:6c: ef:e7:f6:0c:bc:91:6b:dc:ba:24:ef:3d:a6:0c:6b:43:70:df: 2c:46:6f:e3:05:e5:c3:f0:b9:34:cc:e6:6d:93:1a:e0:40:53: 0b:af:a1:b4:ea:be:8f:d3:56:1f:28:90:19:bd:09:e2:62:4e: 2b:b2:ae:2e:e2:15:ad:32:7e:1b:f4:58:af:b2:a0:f4:96:f4: 17:4c:65:6f:5f:b0:c4:24:c2:c4:34:1f:6f:d1:49:a7:d8:35: bd:ed:cb:12:51:c4:3c:9d:ee:9b:ec:ae:37:55:50:a9:59:ae: a6:24:e1:4b:aa:99:d5:c0:b6:e6:64:50:ab:fe:98:2a:3b:5d: 5c:14:c2:df:79:d6:7e:f4:76:a6:40:a8:80:fb:d1:eb:1d:86: d6:73:1e:f7:38:8b:3f:09:4f:4a:32:16:5d:77:00:df:43:a0: f4:47:d9:e6:40:c3:51:61:4d:27:5b:09:dd:39:48:5a:67:e2: 47:e2:bd:8a:31:1b:f8:50:43:2d:31:dd:b5:85:61:46:c9:41: 84:85:47:7e:fb:96:66:1f:75:32:bf:28:fe:eb:99:eb:bd:4b: 7b:18:95:f4:5a:d4:f0:38:04:7d:8c:ae:cc:5d:74:13:db:db: 71:19:0f:d7 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUfUniA7lyNlma47RxctN8219M1E0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEQxRDg0QjhBNTYyMjRCNEUyOTBGQkRBNUM3OTBDRDFG MDNGMTFBNzAeFw0yNTA4MjMwNjU2NDhaFw0yNTA4MjYxMjI4NDhaMDMxMTAvBgNV BAMTKDNFNzQ1MjA3MkJBRTFCQTk2NTVFRTc5NEI0MTM0NzgyMTM3RTczNjEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDGouBA9ScPEaUy4gRd6qHJNzn6 bMkZoK5JEr7hIgKAVLpRRaJb6ybID5xbslQJiC7CucM6IPUrDy7U7DAoeIM4Y5c6 GHFar0jg6ZTYYsb2Ct5rDnr4qcwvNSqkl2l0Ntt0hDxIgnFYMjhr6rVuPgXsiNzR 26iSpV+CcJLKtRFl3S7nEMHTcAIztragb3q++OuokmrYBFcdglAR06ExZX3c3jE9 E+uitxw+zjLRa1igaU4q9UigjIqU8gE87ogbdRuGWy3ct81NRcysogDC50GIkTy1 AGs/fVPYzCVcke4GU9x9zwNIojjMn15qBG/jY9wYvJOvn0po56RHNSgPKfFNAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUPnRSByuuG6llXueUtBNHghN+c2EwHwYDVR0j BBgwFoAUjR2EuKViJLTikPvaXHkM0fA/EacwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i ZmRiMThlZi02NTlmLTRiMWUtYTJlMC1iNThhZjZiMTI3MWYvMC84RDFEODRCOEE1 NjIyNEI0RTI5MEZCREE1Qzc5MENEMUYwM0YxMUE3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOEQxRDg0QjhBNTYyMjRCNEUyOTBGQkRBNUM3OTBDRDFGMDNG MTFBNy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYmZkYjE4ZWYtNjU5Zi00YjFlLWEy ZTAtYjU4YWY2YjEyNzFmLzAvOEQxRDg0QjhBNTYyMjRCNEUyOTBGQkRBNUM3OTBD RDFGMDNGMTFBNy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADrXjH5Y5Jl4HQgbH6xiqGFLbO/n9gy8kWvc uiTvPaYMa0Nw3yxGb+MF5cPwuTTM5m2TGuBAUwuvobTqvo/TVh8okBm9CeJiTiuy ri7iFa0yfhv0WK+yoPSW9BdMZW9fsMQkwsQ0H2/RSafYNb3tyxJRxDyd7pvsrjdV UKlZrqYk4UuqmdXAtuZkUKv+mCo7XVwUwt951n70dqZAqID70esdhtZzHvc4iz8J T0oyFl13AN9DoPRH2eZAw1FhTSdbCd05SFpn4kfivYoxG/hQQy0x3bWFYUbJQYSF R377lmYfdTK/KP7rmeu9S3sYlfRa1PA4BH2MrsxddBPb23EZD9c= -----END CERTIFICATE-----Generated at Sat Aug 23 13:30:25 2025 by rpki-client