$ rpki-client -vvf repo-rpki.idnic.net/repo/d44dfb5a-6e24-4a4d-8969-eb3cbe34e47e/0/8F52E72816B856335390C4F4AFBAF207C21522F6.mft File: 8F52E72816B856335390C4F4AFBAF207C21522F6.mft (raw, json) Hash identifier: GdAH4vE9EgVz56+KBk+N1N7U3bJaQNSWZPojamv/Ups= Subject key identifier: 7C:F4:CC:33:2C:D6:F4:37:85:40:8A:39:E3:30:16:9C:78:66:A1:3D Authority key identifier: 8F:52:E7:28:16:B8:56:33:53:90:C4:F4:AF:BA:F2:07:C2:15:22:F6 Certificate issuer: /CN=8F52E72816B856335390C4F4AFBAF207C21522F6 Certificate serial: 2EE00812D5B975696432E5C25AC80DB14DEB5D1B Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8F52E72816B856335390C4F4AFBAF207C21522F6.cer Subject info access: rsync://repo-rpki.idnic.net/repo/d44dfb5a-6e24-4a4d-8969-eb3cbe34e47e/0/8F52E72816B856335390C4F4AFBAF207C21522F6.mft Manifest number: 01FD Signing time: Fri 22 Aug 2025 00:12:14 +0000 Manifest this update: Fri 22 Aug 2025 00:07:14 +0000 Manifest next update: Mon 25 Aug 2025 01:32:14 +0000 Files and hashes: 1: 3130332e3135382e3132362e302f32332d3234203d3e203338333230.roa (hash: sAEVe363BvIs2dOx1hxbCSZZoE73/9sHIDXoFlichKA=) 2: 8F52E72816B856335390C4F4AFBAF207C21522F6.crl (hash: x8UdnZ+BNy30418vLIj2JYLLm/iXjInINr/qjK6SvKY=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/d44dfb5a-6e24-4a4d-8969-eb3cbe34e47e/0/8F52E72816B856335390C4F4AFBAF207C21522F6.crl rsync://repo-rpki.idnic.net/repo/d44dfb5a-6e24-4a4d-8969-eb3cbe34e47e/0/8F52E72816B856335390C4F4AFBAF207C21522F6.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8F52E72816B856335390C4F4AFBAF207C21522F6.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 25 Aug 2025 01:32:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2e:e0:08:12:d5:b9:75:69:64:32:e5:c2:5a:c8:0d:b1:4d:eb:5d:1b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8F52E72816B856335390C4F4AFBAF207C21522F6 Validity Not Before: Aug 22 00:07:14 2025 GMT Not After : Aug 25 01:32:14 2025 GMT Subject: CN=7CF4CC332CD6F43785408A39E330169C7866A13D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:ce:b5:75:53:2a:33:11:47:22:fc:bc:bd:e1: 25:53:15:d7:1e:cc:11:5c:7d:c2:76:d4:4b:98:15: 67:57:83:67:56:45:f6:a8:2e:4a:27:b8:0d:04:84: a7:34:fa:5d:86:00:59:eb:7c:48:c0:8c:70:ea:54: ac:60:85:b8:c4:0f:3a:0a:c8:7b:31:3f:13:a8:38: d5:7b:9d:f8:13:af:4c:ac:a5:77:b8:39:5b:37:c0: 8e:3a:ad:6d:7a:49:f8:05:be:66:40:9c:15:05:6a: f3:a1:af:d5:1d:06:a8:67:6d:01:66:0f:92:53:a1: 95:b5:ae:a8:b0:98:64:cc:0e:96:01:3f:89:1c:c3: 75:cd:75:08:8c:00:03:ba:b8:08:18:7a:c5:b6:74: 27:e9:62:49:0e:f6:4a:f0:fd:c9:7c:8e:3c:e8:b6: 9f:22:dc:4a:c4:0a:03:17:32:51:76:91:49:d2:8b: aa:19:e1:82:e3:7d:34:17:1d:60:99:84:75:12:d2: 89:58:69:74:66:62:29:fc:4b:e7:23:fe:a2:c0:f1: 84:48:4f:ea:63:bd:9c:38:09:d8:9a:93:15:db:b0: c2:42:60:9d:ee:d6:73:76:63:5b:5e:f1:28:f4:cd: 1b:bb:c4:12:c2:c4:de:5d:a4:09:bc:e2:61:ac:3a: 57:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7C:F4:CC:33:2C:D6:F4:37:85:40:8A:39:E3:30:16:9C:78:66:A1:3D X509v3 Authority Key Identifier: keyid:8F:52:E7:28:16:B8:56:33:53:90:C4:F4:AF:BA:F2:07:C2:15:22:F6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/d44dfb5a-6e24-4a4d-8969-eb3cbe34e47e/0/8F52E72816B856335390C4F4AFBAF207C21522F6.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8F52E72816B856335390C4F4AFBAF207C21522F6.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d44dfb5a-6e24-4a4d-8969-eb3cbe34e47e/0/8F52E72816B856335390C4F4AFBAF207C21522F6.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 47:12:55:87:31:d1:f5:fd:6a:1a:94:02:1d:60:2f:34:6e:33: dd:96:26:ed:f3:58:ff:a7:2d:c5:62:1f:4a:f7:6d:81:de:d5: 60:0c:5e:5b:af:b0:9c:d0:08:67:54:cc:57:ac:e6:46:72:da: c1:1d:f8:5d:9e:53:7b:71:be:d6:73:ab:d6:61:0d:7e:95:98: 0e:8e:83:03:c7:e8:7c:92:34:60:c9:66:4e:bd:84:57:dc:86: 64:8c:2d:74:87:32:a9:8b:2e:20:19:c2:6f:c4:19:87:48:7f: 31:a0:da:3f:56:8a:2c:88:0a:d7:e1:52:60:ca:26:3a:ff:f7: c2:b1:fe:fd:ec:c2:45:6a:e6:8e:64:0d:8f:ea:3e:da:77:f0: 40:bb:83:39:88:09:eb:8e:b8:fb:db:48:f0:d5:07:c3:79:5a: fe:30:cb:95:7a:d1:44:66:f0:6a:53:56:40:86:eb:21:89:da: 41:71:ba:74:2e:0e:c8:3a:49:5e:60:3d:f1:15:92:30:0a:fd: 05:a2:6b:ce:16:34:98:0c:99:95:f7:9b:de:96:81:9a:94:b4: 4a:c6:6c:17:b2:b4:2d:5e:59:35:a8:94:cc:79:41:39:26:4e: 2e:81:0a:89:40:b0:ce:c6:d4:fd:df:6a:d8:ab:e3:1b:6d:a8: 4a:bc:2c:2d -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIULuAIEtW5dWlkMuXCWsgNsU3rXRswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEY1MkU3MjgxNkI4NTYzMzUzOTBDNEY0QUZCQUYyMDdD MjE1MjJGNjAeFw0yNTA4MjIwMDA3MTRaFw0yNTA4MjUwMTMyMTRaMDMxMTAvBgNV BAMTKDdDRjRDQzMzMkNENkY0Mzc4NTQwOEEzOUUzMzAxNjlDNzg2NkExM0QwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDgzrV1UyozEUci/Ly94SVTFdce zBFcfcJ21EuYFWdXg2dWRfaoLkonuA0EhKc0+l2GAFnrfEjAjHDqVKxghbjEDzoK yHsxPxOoONV7nfgTr0yspXe4OVs3wI46rW16SfgFvmZAnBUFavOhr9UdBqhnbQFm D5JToZW1rqiwmGTMDpYBP4kcw3XNdQiMAAO6uAgYesW2dCfpYkkO9krw/cl8jjzo tp8i3ErECgMXMlF2kUnSi6oZ4YLjfTQXHWCZhHUS0olYaXRmYin8S+cj/qLA8YRI T+pjvZw4CdiakxXbsMJCYJ3u1nN2Y1te8Sj0zRu7xBLCxN5dpAm84mGsOlfXAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUfPTMMyzW9DeFQIo54zAWnHhmoT0wHwYDVR0j BBgwFoAUj1LnKBa4VjNTkMT0r7ryB8IVIvYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k NDRkZmI1YS02ZTI0LTRhNGQtODk2OS1lYjNjYmUzNGU0N2UvMC84RjUyRTcyODE2 Qjg1NjMzNTM5MEM0RjRBRkJBRjIwN0MyMTUyMkY2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOEY1MkU3MjgxNkI4NTYzMzUzOTBDNEY0QUZCQUYyMDdDMjE1 MjJGNi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZDQ0ZGZiNWEtNmUyNC00YTRkLTg5 NjktZWIzY2JlMzRlNDdlLzAvOEY1MkU3MjgxNkI4NTYzMzUzOTBDNEY0QUZCQUYy MDdDMjE1MjJGNi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEcSVYcx0fX9ahqUAh1gLzRuM92WJu3zWP+n LcViH0r3bYHe1WAMXluvsJzQCGdUzFes5kZy2sEd+F2eU3txvtZzq9ZhDX6VmA6O gwPH6HySNGDJZk69hFfchmSMLXSHMqmLLiAZwm/EGYdIfzGg2j9WiiyICtfhUmDK Jjr/98Kx/v3swkVq5o5kDY/qPtp38EC7gzmICeuOuPvbSPDVB8N5Wv4wy5V60URm 8GpTVkCG6yGJ2kFxunQuDsg6SV5gPfEVkjAK/QWia84WNJgMmZX3m96WgZqUtErG bBeytC1eWTWolMx5QTkmTi6BColAsM7G1P3fatir4xttqEq8LC0= -----END CERTIFICATE-----Generated at Sat Aug 23 10:18:43 2025 by rpki-client