$ rpki-client -vvf repo-rpki.idnic.net/repo/d7ff01d0-26f9-4b20-a318-c311c267f2af/0/8A54C81A444D07051A24AACF743F01863F8129AB.mft File: 8A54C81A444D07051A24AACF743F01863F8129AB.mft (raw, json) Hash identifier: UNwR/wIN3kSvZLAry3SJfED5Qxxof+d8oknOQ51Z864= Subject key identifier: CB:DE:C4:01:2E:39:AE:D4:28:3B:15:9C:64:5F:A3:2D:50:BB:E6:95 Authority key identifier: 8A:54:C8:1A:44:4D:07:05:1A:24:AA:CF:74:3F:01:86:3F:81:29:AB Certificate issuer: /CN=8A54C81A444D07051A24AACF743F01863F8129AB Certificate serial: 0EBFD1C2E48996E2584B67460E365E7AFB9D4E74 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8A54C81A444D07051A24AACF743F01863F8129AB.cer Subject info access: rsync://repo-rpki.idnic.net/repo/d7ff01d0-26f9-4b20-a318-c311c267f2af/0/8A54C81A444D07051A24AACF743F01863F8129AB.mft Manifest number: 02DD Signing time: Fri 22 Aug 2025 00:30:42 +0000 Manifest this update: Fri 22 Aug 2025 00:25:42 +0000 Manifest next update: Mon 25 Aug 2025 03:10:42 +0000 Files and hashes: 1: 3130332e3136362e3135382e302f32332d3233203d3e20313431393535.roa (hash: 8iqd/DLPSKXzm6qMwrWasV0WJDuso56p2m5ElmgcTDA=) 2: 3130332e3136362e3135392e302f32342d3234203d3e20313431393535.roa (hash: D5y/dOOdbevGbXtghOHQINTcjdbypBLwek1XQ3CqPYE=) 3: 8A54C81A444D07051A24AACF743F01863F8129AB.crl (hash: Hfemm18KOPARWyZvHU5m/QKAY3Xg0Swmw4rAQdm/jI8=) 4: 3130332e3136362e3135382e302f32342d3234203d3e20313431393535.roa (hash: Bup7LELWa0M49WEmJBOXwO3r0+CyN1znNANGE751Xcc=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/d7ff01d0-26f9-4b20-a318-c311c267f2af/0/8A54C81A444D07051A24AACF743F01863F8129AB.crl rsync://repo-rpki.idnic.net/repo/d7ff01d0-26f9-4b20-a318-c311c267f2af/0/8A54C81A444D07051A24AACF743F01863F8129AB.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8A54C81A444D07051A24AACF743F01863F8129AB.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 25 Aug 2025 03:10:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0e:bf:d1:c2:e4:89:96:e2:58:4b:67:46:0e:36:5e:7a:fb:9d:4e:74 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8A54C81A444D07051A24AACF743F01863F8129AB Validity Not Before: Aug 22 00:25:42 2025 GMT Not After : Aug 25 03:10:42 2025 GMT Subject: CN=CBDEC4012E39AED4283B159C645FA32D50BBE695 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:33:84:d2:50:77:e6:0e:a3:8b:45:74:7a:39: e2:f2:aa:14:f5:2b:5a:7e:c2:db:e8:c8:85:1d:3f: d1:86:61:6f:0f:fa:af:bb:ce:15:d8:69:d9:fd:6c: ba:5a:cf:9c:6d:b1:d9:cc:c3:80:0d:52:d8:d6:c7: 24:fb:fb:85:9d:d7:98:ee:72:eb:f0:97:64:f9:ac: 63:94:c0:c7:4a:db:2c:94:1d:82:a6:c8:bd:aa:36: b6:05:d1:ff:88:03:61:c7:83:93:e7:f7:8c:7a:76: 65:51:ea:3d:95:ed:06:b7:47:ea:fe:56:85:62:1e: 6a:7c:d0:9f:91:ef:63:1f:50:f5:cc:75:58:62:21: ee:a9:d5:58:f2:89:31:62:d7:eb:2b:db:13:84:0a: 20:62:5b:9e:16:bb:c8:73:de:06:f3:b5:da:e7:26: 09:56:c7:11:c6:93:70:5c:b2:7b:b2:06:27:5b:c6: dd:11:1d:8e:44:c5:47:bf:1e:91:c8:08:dc:a6:19: ae:d2:32:a1:6a:83:ab:7c:94:57:0e:2f:a5:f1:92: 53:03:68:21:72:fb:6a:b0:8a:eb:04:03:f4:cb:79: c9:71:14:84:ba:35:36:07:ba:37:0b:65:14:4e:34: 7b:71:f4:9c:78:20:f1:50:42:15:21:ec:c7:91:5e: f7:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CB:DE:C4:01:2E:39:AE:D4:28:3B:15:9C:64:5F:A3:2D:50:BB:E6:95 X509v3 Authority Key Identifier: keyid:8A:54:C8:1A:44:4D:07:05:1A:24:AA:CF:74:3F:01:86:3F:81:29:AB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/d7ff01d0-26f9-4b20-a318-c311c267f2af/0/8A54C81A444D07051A24AACF743F01863F8129AB.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8A54C81A444D07051A24AACF743F01863F8129AB.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d7ff01d0-26f9-4b20-a318-c311c267f2af/0/8A54C81A444D07051A24AACF743F01863F8129AB.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9c:31:c7:f7:67:f2:29:fc:cf:e4:90:66:ac:22:f0:b6:c8:8a: 3a:1c:71:51:51:05:d4:28:85:b7:9f:48:e4:93:cc:3a:64:e5: eb:54:bb:e4:2d:5c:ab:24:7c:40:29:92:11:1a:cb:85:dd:02: b8:7c:86:44:f2:6d:bd:22:d5:55:9d:7f:24:16:de:06:95:5c: af:ac:d7:f9:d3:79:3c:2e:fb:d0:69:54:33:36:df:c7:51:51: c5:17:ab:b4:8d:b9:ef:a6:c7:3a:cd:e5:ac:40:b9:0b:e2:86: ce:37:53:34:49:98:c1:de:16:64:0c:8c:fd:b8:d7:4e:3b:ab: af:c3:ea:d3:be:2d:28:82:85:6e:0c:19:22:79:2d:8b:95:18: 18:d7:9b:40:47:ea:a1:7d:d2:85:b1:c7:4e:0b:66:cb:6d:09: d5:ec:6f:a5:20:c8:94:56:6f:6b:db:e9:67:c4:7d:e4:85:c7: b7:14:2f:32:7d:ef:2b:c2:b4:8d:66:ee:19:94:3a:5f:3c:34: c5:c1:10:1c:ac:f5:85:0b:b5:1c:cb:d5:3e:ad:96:69:7f:06: 6b:c8:2f:7f:21:24:d6:32:22:8e:3b:62:b2:bd:23:9a:ce:32: 2a:49:dd:2e:08:ea:3d:d8:ba:20:3a:c9:c9:a7:60:b6:f5:9e: 26:c2:8e:2f -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUDr/RwuSJluJYS2dGDjZeevudTnQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEE1NEM4MUE0NDREMDcwNTFBMjRBQUNGNzQzRjAxODYz RjgxMjlBQjAeFw0yNTA4MjIwMDI1NDJaFw0yNTA4MjUwMzEwNDJaMDMxMTAvBgNV BAMTKENCREVDNDAxMkUzOUFFRDQyODNCMTU5QzY0NUZBMzJENTBCQkU2OTUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC7M4TSUHfmDqOLRXR6OeLyqhT1 K1p+wtvoyIUdP9GGYW8P+q+7zhXYadn9bLpaz5xtsdnMw4ANUtjWxyT7+4Wd15ju cuvwl2T5rGOUwMdK2yyUHYKmyL2qNrYF0f+IA2HHg5Pn94x6dmVR6j2V7Qa3R+r+ VoViHmp80J+R72MfUPXMdVhiIe6p1VjyiTFi1+sr2xOECiBiW54Wu8hz3gbztdrn JglWxxHGk3BcsnuyBidbxt0RHY5ExUe/HpHICNymGa7SMqFqg6t8lFcOL6XxklMD aCFy+2qwiusEA/TLeclxFIS6NTYHujcLZRRONHtx9Jx4IPFQQhUh7MeRXvejAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUy97EAS45rtQoOxWcZF+jLVC75pUwHwYDVR0j BBgwFoAUilTIGkRNBwUaJKrPdD8Bhj+BKaswDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k N2ZmMDFkMC0yNmY5LTRiMjAtYTMxOC1jMzExYzI2N2YyYWYvMC84QTU0QzgxQTQ0 NEQwNzA1MUEyNEFBQ0Y3NDNGMDE4NjNGODEyOUFCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOEE1NEM4MUE0NDREMDcwNTFBMjRBQUNGNzQzRjAxODYzRjgx MjlBQi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZDdmZjAxZDAtMjZmOS00YjIwLWEz MTgtYzMxMWMyNjdmMmFmLzAvOEE1NEM4MUE0NDREMDcwNTFBMjRBQUNGNzQzRjAx ODYzRjgxMjlBQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJwxx/dn8in8z+SQZqwi8LbIijoccVFRBdQo hbefSOSTzDpk5etUu+QtXKskfEApkhEay4XdArh8hkTybb0i1VWdfyQW3gaVXK+s 1/nTeTwu+9BpVDM238dRUcUXq7SNue+mxzrN5axAuQvihs43UzRJmMHeFmQMjP24 1047q6/D6tO+LSiChW4MGSJ5LYuVGBjXm0BH6qF90oWxx04LZsttCdXsb6UgyJRW b2vb6WfEfeSFx7cULzJ97yvCtI1m7hmUOl88NMXBEBys9YULtRzL1T6tlml/BmvI L38hJNYyIo47YrK9I5rOMipJ3S4I6j3YuiA6ycmnYLb1nibCji8= -----END CERTIFICATE-----Generated at Sat Aug 23 12:19:20 2025 by rpki-client