$ rpki-client -vvf repo-rpki.idnic.net/repo/d8b98722-1cb4-40d4-ac8b-c3bca2bca217/0/8A95FAF723EC129E336E75ACE1CD4F3094FB6481.mft File: 8A95FAF723EC129E336E75ACE1CD4F3094FB6481.mft (raw, json) Hash identifier: QCY7rMiO5s1BXb1EfjvX+2kcAhqQrET2KdRQr232nls= Subject key identifier: 77:A3:C5:B9:7D:82:50:BB:01:4B:DA:BE:2A:7D:4D:52:4A:8A:43:BE Authority key identifier: 8A:95:FA:F7:23:EC:12:9E:33:6E:75:AC:E1:CD:4F:30:94:FB:64:81 Certificate issuer: /CN=8A95FAF723EC129E336E75ACE1CD4F3094FB6481 Certificate serial: 1504272D9C3A2CFAEBFAC3530D33F5E2632D0172 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8A95FAF723EC129E336E75ACE1CD4F3094FB6481.cer Subject info access: rsync://repo-rpki.idnic.net/repo/d8b98722-1cb4-40d4-ac8b-c3bca2bca217/0/8A95FAF723EC129E336E75ACE1CD4F3094FB6481.mft Manifest number: 0447 Signing time: Thu 21 Aug 2025 17:01:29 +0000 Manifest this update: Thu 21 Aug 2025 16:56:29 +0000 Manifest next update: Sun 24 Aug 2025 17:55:29 +0000 Files and hashes: 1: 34332e3234352e3138302e302f32322d3234203d3e203538333937.roa (hash: f+W5KSnYaSOmv7obX83rwEJhTHZvGPxy0VlZOsEAh+k=) 2: 3130332e32332e32302e302f32322d3234203d3e203538333937.roa (hash: y/aRgAk/Ol217uqThdECq/g+tO93bdhzL10rqxPOy5s=) 3: 323030313a6466303a663830303a3a2f34382d3438203d3e203538333937.roa (hash: 8qFDAcssXXUuL7jdU+5MBpRRNuUnSR4XPXnprUszlok=) 4: 8A95FAF723EC129E336E75ACE1CD4F3094FB6481.crl (hash: Vgx1Zhdq2KdQRByfoVN5HOJqBrKkZr8/LtXu+cnEmDE=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/d8b98722-1cb4-40d4-ac8b-c3bca2bca217/0/8A95FAF723EC129E336E75ACE1CD4F3094FB6481.crl rsync://repo-rpki.idnic.net/repo/d8b98722-1cb4-40d4-ac8b-c3bca2bca217/0/8A95FAF723EC129E336E75ACE1CD4F3094FB6481.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8A95FAF723EC129E336E75ACE1CD4F3094FB6481.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 24 Aug 2025 17:55:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 15:04:27:2d:9c:3a:2c:fa:eb:fa:c3:53:0d:33:f5:e2:63:2d:01:72 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8A95FAF723EC129E336E75ACE1CD4F3094FB6481 Validity Not Before: Aug 21 16:56:29 2025 GMT Not After : Aug 24 17:55:29 2025 GMT Subject: CN=77A3C5B97D8250BB014BDABE2A7D4D524A8A43BE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:67:2b:73:73:7e:3e:75:f3:4f:b3:92:d8:63: 85:98:e7:51:15:b7:e9:0a:dd:e8:cf:0b:93:3e:b4: 06:19:c1:76:80:c7:a5:5b:27:7b:fc:77:8c:37:30: 39:7a:8f:70:ce:e3:82:01:e5:72:f4:23:d4:b4:9a: 10:26:1e:f6:ac:44:9a:c1:82:08:7c:00:d7:dd:46: 1b:a6:6e:16:e0:d1:f5:4d:d0:73:51:80:97:4e:60: 3a:03:e5:c8:24:fd:36:72:2d:7f:49:56:5f:53:a8: 4d:7c:d6:bf:8d:dd:03:ee:4c:0c:2d:3a:f0:a4:e1: 58:a9:fa:65:ce:df:79:af:d7:ab:51:41:d8:60:2f: 97:68:fa:f0:c3:dc:ae:26:48:51:9b:e6:ae:eb:c4: 56:07:a1:45:7f:ee:94:ea:b3:96:a1:f4:d4:02:0b: b7:e0:23:63:c8:ac:31:a8:ff:40:86:97:22:58:3e: 87:41:0e:7e:1f:db:d4:ad:62:e8:7c:75:bf:83:51: 99:e1:2a:9b:66:b3:37:39:a9:5c:ec:29:61:13:38: 95:f5:c0:95:ce:1c:9b:33:b2:e8:23:fc:78:aa:f7: 06:fb:70:d8:ab:d0:48:4c:60:c0:be:d3:b5:11:4d: 5e:79:a1:9c:5f:0c:93:04:92:fa:b7:3e:44:52:fa: 1d:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 77:A3:C5:B9:7D:82:50:BB:01:4B:DA:BE:2A:7D:4D:52:4A:8A:43:BE X509v3 Authority Key Identifier: keyid:8A:95:FA:F7:23:EC:12:9E:33:6E:75:AC:E1:CD:4F:30:94:FB:64:81 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/d8b98722-1cb4-40d4-ac8b-c3bca2bca217/0/8A95FAF723EC129E336E75ACE1CD4F3094FB6481.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8A95FAF723EC129E336E75ACE1CD4F3094FB6481.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d8b98722-1cb4-40d4-ac8b-c3bca2bca217/0/8A95FAF723EC129E336E75ACE1CD4F3094FB6481.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1c:d4:f0:17:3d:95:5e:2c:f4:55:d8:c4:ec:15:76:0a:c9:8a: a6:ec:6c:61:1c:36:f8:59:34:77:0b:0a:f0:de:92:82:bc:3b: a8:c8:af:68:b0:f3:0e:ea:98:61:ec:ad:0a:06:f8:7d:99:5a: 31:7f:e8:59:0b:c6:bb:55:d5:cf:24:73:97:e1:a3:f6:a6:2f: f0:da:6b:a7:59:27:91:7f:43:f6:a8:39:09:0e:fa:55:ef:94: ab:06:c8:65:5d:3d:ac:14:f4:a0:e1:f9:7b:03:35:8c:9e:f1: 6d:63:56:d7:cf:e0:65:87:e8:82:21:de:a7:7c:8b:29:13:b4: 61:97:f2:bf:2c:00:d3:fd:1b:ff:15:bf:c6:26:09:39:0d:a0: 5a:ce:64:c0:a1:4e:26:1d:dd:25:07:f0:93:37:af:fa:c6:61: 37:b7:e6:ef:78:58:a5:36:f5:e8:dd:20:0f:ad:68:cf:3a:f8: a9:df:be:11:ef:43:f3:9d:6d:8e:c8:f2:a7:e0:8f:27:42:92: 86:2d:a5:14:80:93:cc:b0:36:c9:55:0b:0b:b7:ea:29:b0:33: 4f:e9:4e:37:63:e7:13:ff:f7:a5:7c:9a:94:e1:79:5a:f4:d3: ce:90:cd:8c:43:a9:68:75:6a:a6:6a:91:87:aa:03:46:aa:b2: 2b:b1:af:b7 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUFQQnLZw6LPrr+sNTDTP14mMtAXIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEE5NUZBRjcyM0VDMTI5RTMzNkU3NUFDRTFDRDRGMzA5 NEZCNjQ4MTAeFw0yNTA4MjExNjU2MjlaFw0yNTA4MjQxNzU1MjlaMDMxMTAvBgNV BAMTKDc3QTNDNUI5N0Q4MjUwQkIwMTRCREFCRTJBN0Q0RDUyNEE4QTQzQkUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDQZytzc34+dfNPs5LYY4WY51EV t+kK3ejPC5M+tAYZwXaAx6VbJ3v8d4w3MDl6j3DO44IB5XL0I9S0mhAmHvasRJrB ggh8ANfdRhumbhbg0fVN0HNRgJdOYDoD5cgk/TZyLX9JVl9TqE181r+N3QPuTAwt OvCk4Vip+mXO33mv16tRQdhgL5do+vDD3K4mSFGb5q7rxFYHoUV/7pTqs5ah9NQC C7fgI2PIrDGo/0CGlyJYPodBDn4f29StYuh8db+DUZnhKptmszc5qVzsKWETOJX1 wJXOHJszsugj/Hiq9wb7cNir0EhMYMC+07URTV55oZxfDJMEkvq3PkRS+h2hAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUd6PFuX2CULsBS9q+Kn1NUkqKQ74wHwYDVR0j BBgwFoAUipX69yPsEp4zbnWs4c1PMJT7ZIEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k OGI5ODcyMi0xY2I0LTQwZDQtYWM4Yi1jM2JjYTJiY2EyMTcvMC84QTk1RkFGNzIz RUMxMjlFMzM2RTc1QUNFMUNENEYzMDk0RkI2NDgxLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOEE5NUZBRjcyM0VDMTI5RTMzNkU3NUFDRTFDRDRGMzA5NEZC NjQ4MS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZDhiOTg3MjItMWNiNC00MGQ0LWFj OGItYzNiY2EyYmNhMjE3LzAvOEE5NUZBRjcyM0VDMTI5RTMzNkU3NUFDRTFDRDRG MzA5NEZCNjQ4MS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABzU8Bc9lV4s9FXYxOwVdgrJiqbsbGEcNvhZ NHcLCvDekoK8O6jIr2iw8w7qmGHsrQoG+H2ZWjF/6FkLxrtV1c8kc5fho/amL/Da a6dZJ5F/Q/aoOQkO+lXvlKsGyGVdPawU9KDh+XsDNYye8W1jVtfP4GWH6IIh3qd8 iykTtGGX8r8sANP9G/8Vv8YmCTkNoFrOZMChTiYd3SUH8JM3r/rGYTe35u94WKU2 9ejdIA+taM86+KnfvhHvQ/OdbY7I8qfgjydCkoYtpRSAk8ywNslVCwu36imwM0/p Tjdj5xP/96V8mpTheVr0086QzYxDqWh1aqZqkYeqA0aqsiuxr7c= -----END CERTIFICATE-----Generated at Sat Aug 23 18:31:37 2025 by rpki-client