$ rpki-client -vvf repo-rpki.idnic.net/repo/cf0ba1e7-d142-47cd-8d8f-2a372b922223/0/8874CE775F191B6E0B34A789A359EB9FB93B737E.mft File: 8874CE775F191B6E0B34A789A359EB9FB93B737E.mft (raw, json) Hash identifier: 5IXkuU9qcJNA6dy64JOwCwggsPN14KMi5YsQortBCxY= Subject key identifier: EA:01:A7:5C:D0:13:DC:43:14:32:D6:37:9F:86:70:97:00:A8:F2:E3 Authority key identifier: 88:74:CE:77:5F:19:1B:6E:0B:34:A7:89:A3:59:EB:9F:B9:3B:73:7E Certificate issuer: /CN=8874CE775F191B6E0B34A789A359EB9FB93B737E Certificate serial: 0805CBE99AB0C21DBB20E491168101E931A61244 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8874CE775F191B6E0B34A789A359EB9FB93B737E.cer Subject info access: rsync://repo-rpki.idnic.net/repo/cf0ba1e7-d142-47cd-8d8f-2a372b922223/0/8874CE775F191B6E0B34A789A359EB9FB93B737E.mft Manifest number: 0258 Signing time: Fri 22 Aug 2025 19:50:47 +0000 Manifest this update: Fri 22 Aug 2025 19:45:47 +0000 Manifest next update: Tue 26 Aug 2025 07:28:47 +0000 Files and hashes: 1: 3130332e3137322e32352e302f32342d3234203d3e20313432333837.roa (hash: CcBFwGpASAvXeD5i1IQiNWPfNj9jmof+ADOKkYxnqW8=) 2: 8874CE775F191B6E0B34A789A359EB9FB93B737E.crl (hash: EsRBczAaXGHx46ms82+o3bCDKvvFR5/HmN2Wd3VjHnQ=) 3: 3130332e3137322e32342e302f32342d3234203d3e20313432333837.roa (hash: Y9XARniDJgg4OUqj6GjFvuZ0EXuuYtQJNDhXyplaxBY=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/cf0ba1e7-d142-47cd-8d8f-2a372b922223/0/8874CE775F191B6E0B34A789A359EB9FB93B737E.crl rsync://repo-rpki.idnic.net/repo/cf0ba1e7-d142-47cd-8d8f-2a372b922223/0/8874CE775F191B6E0B34A789A359EB9FB93B737E.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8874CE775F191B6E0B34A789A359EB9FB93B737E.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 26 Aug 2025 07:28:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 08:05:cb:e9:9a:b0:c2:1d:bb:20:e4:91:16:81:01:e9:31:a6:12:44 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8874CE775F191B6E0B34A789A359EB9FB93B737E Validity Not Before: Aug 22 19:45:47 2025 GMT Not After : Aug 26 07:28:47 2025 GMT Subject: CN=EA01A75CD013DC431432D6379F86709700A8F2E3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:f3:8b:e7:be:f3:a0:1c:13:81:8c:88:1e:ad: 9c:d0:a3:d3:00:2d:cb:f2:39:77:09:4e:7b:31:6f: ae:3f:33:c7:ad:89:99:b1:ec:eb:1c:54:b2:31:2a: 79:90:86:47:15:66:32:b4:b3:cd:98:25:4a:b0:5e: 79:a6:e8:9d:21:4e:53:08:9d:98:7f:a3:d3:f4:6f: 42:5b:89:f3:8b:40:3d:6c:53:87:b1:51:08:75:9e: 8f:8c:f2:9d:3b:07:79:33:ee:4a:ee:df:a1:f6:47: 4f:44:2e:b3:78:14:58:96:45:88:11:7e:a6:53:c9: 16:9f:1c:5e:03:2b:bc:a3:fe:f9:36:be:8f:2d:ac: 0c:ee:e9:47:cb:db:69:33:fd:2f:0e:e1:51:9d:79: 14:0c:8a:72:9c:e9:84:a2:e3:23:8f:01:61:07:b2: 07:0c:be:86:c8:37:e2:ab:d1:b9:cb:63:b9:b9:2f: 66:06:50:2e:cd:4e:ed:33:55:3d:8e:c1:10:fd:a9: 6d:4b:8e:23:bc:09:24:d4:25:72:bd:13:97:53:18: 2c:ee:cc:37:cf:3d:9a:9b:c6:5b:64:30:30:37:8f: 16:65:d2:f3:69:66:e6:28:8d:13:b1:d5:57:3c:b6: a3:3b:01:a9:06:09:6f:fe:84:0b:ed:ab:70:c8:46: 96:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EA:01:A7:5C:D0:13:DC:43:14:32:D6:37:9F:86:70:97:00:A8:F2:E3 X509v3 Authority Key Identifier: keyid:88:74:CE:77:5F:19:1B:6E:0B:34:A7:89:A3:59:EB:9F:B9:3B:73:7E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/cf0ba1e7-d142-47cd-8d8f-2a372b922223/0/8874CE775F191B6E0B34A789A359EB9FB93B737E.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8874CE775F191B6E0B34A789A359EB9FB93B737E.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/cf0ba1e7-d142-47cd-8d8f-2a372b922223/0/8874CE775F191B6E0B34A789A359EB9FB93B737E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 44:54:6f:c5:ef:c4:f2:64:13:7a:a8:42:cc:45:2d:91:92:27: bc:98:af:40:08:f0:af:db:82:45:65:dd:4a:ec:79:4a:f0:3a: ca:d8:47:e1:e0:11:23:58:ed:2c:f1:ab:e5:0a:81:f9:93:8d: 04:2a:39:7e:f5:d0:3a:d4:71:46:5a:1e:c0:3e:58:72:ba:4d: eb:e2:8d:2c:a3:a6:4a:63:ba:70:a4:3f:2d:ca:3c:f1:45:96: fe:d3:7a:58:24:30:8d:f3:1c:3b:f2:4a:b7:40:26:fe:1a:50: c9:5f:cb:de:6c:a9:a3:12:bb:ac:b6:3b:86:57:82:5f:b4:0d: dd:a1:16:d2:7d:8b:37:25:6c:f9:58:53:2a:e8:1d:a9:49:62: 5f:3c:a7:5a:fe:de:d4:f7:68:10:1d:1c:52:07:ca:42:0f:47: 3e:30:a7:df:13:bd:82:de:52:a7:14:71:e1:6c:bb:1b:14:b1: ac:e2:1c:b6:75:63:38:4f:a9:f5:ec:32:d7:69:b8:52:12:0f: d0:05:0e:2a:89:02:7e:4d:38:9f:ee:5c:6d:94:3b:cc:6a:30: 7f:69:54:f9:01:34:ce:a0:d7:d0:6a:5a:c7:84:32:82:7b:8d: 3f:63:ee:48:aa:1c:5d:09:9f:f3:23:53:24:13:49:f7:10:b4: cd:ee:c2:0e -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUCAXL6Zqwwh27IOSRFoEB6TGmEkQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODg3NENFNzc1RjE5MUI2RTBCMzRBNzg5QTM1OUVCOUZC OTNCNzM3RTAeFw0yNTA4MjIxOTQ1NDdaFw0yNTA4MjYwNzI4NDdaMDMxMTAvBgNV BAMTKEVBMDFBNzVDRDAxM0RDNDMxNDMyRDYzNzlGODY3MDk3MDBBOEYyRTMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDK84vnvvOgHBOBjIgerZzQo9MA LcvyOXcJTnsxb64/M8etiZmx7OscVLIxKnmQhkcVZjK0s82YJUqwXnmm6J0hTlMI nZh/o9P0b0JbifOLQD1sU4exUQh1no+M8p07B3kz7kru36H2R09ELrN4FFiWRYgR fqZTyRafHF4DK7yj/vk2vo8trAzu6UfL22kz/S8O4VGdeRQMinKc6YSi4yOPAWEH sgcMvobIN+Kr0bnLY7m5L2YGUC7NTu0zVT2OwRD9qW1LjiO8CSTUJXK9E5dTGCzu zDfPPZqbxltkMDA3jxZl0vNpZuYojROx1Vc8tqM7AakGCW/+hAvtq3DIRpYtAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU6gGnXNAT3EMUMtY3n4ZwlwCo8uMwHwYDVR0j BBgwFoAUiHTOd18ZG24LNKeJo1nrn7k7c34wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j ZjBiYTFlNy1kMTQyLTQ3Y2QtOGQ4Zi0yYTM3MmI5MjIyMjMvMC84ODc0Q0U3NzVG MTkxQjZFMEIzNEE3ODlBMzU5RUI5RkI5M0I3MzdFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvODg3NENFNzc1RjE5MUI2RTBCMzRBNzg5QTM1OUVCOUZCOTNC NzM3RS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vY2YwYmExZTctZDE0Mi00N2NkLThk OGYtMmEzNzJiOTIyMjIzLzAvODg3NENFNzc1RjE5MUI2RTBCMzRBNzg5QTM1OUVC OUZCOTNCNzM3RS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAERUb8XvxPJkE3qoQsxFLZGSJ7yYr0AI8K/b gkVl3UrseUrwOsrYR+HgESNY7Szxq+UKgfmTjQQqOX710DrUcUZaHsA+WHK6Tevi jSyjpkpjunCkPy3KPPFFlv7TelgkMI3zHDvySrdAJv4aUMlfy95sqaMSu6y2O4ZX gl+0Dd2hFtJ9izclbPlYUyroHalJYl88p1r+3tT3aBAdHFIHykIPRz4wp98TvYLe UqcUceFsuxsUsaziHLZ1YzhPqfXsMtdpuFISD9AFDiqJAn5NOJ/uXG2UO8xqMH9p VPkBNM6g19BqWseEMoJ7jT9j7kiqHF0Jn/MjUyQTSfcQtM3uwg4= -----END CERTIFICATE-----Generated at Sat Aug 23 15:16:57 2025 by rpki-client