$ rpki-client -vvf repo-rpki.idnic.net/repo/d9afd315-f47f-4f6a-b8b5-45a2280bbc85/0/8CC3A67DBA162B4430DF0F08F810A7B953CBA4A1.mft File: 8CC3A67DBA162B4430DF0F08F810A7B953CBA4A1.mft (raw, json) Hash identifier: jhO+r7A9VwOrOd/9iRi6bzpIxvQMvsSx8luQ5L68pXk= Subject key identifier: 96:75:CE:6A:2E:B2:6F:06:AE:8E:58:9B:89:90:78:0B:FA:B4:DE:CD Authority key identifier: 8C:C3:A6:7D:BA:16:2B:44:30:DF:0F:08:F8:10:A7:B9:53:CB:A4:A1 Certificate issuer: /CN=8CC3A67DBA162B4430DF0F08F810A7B953CBA4A1 Certificate serial: 7442ECC70DDC5B6D0E38F4BFBFC7981BADD765DC Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8CC3A67DBA162B4430DF0F08F810A7B953CBA4A1.cer Subject info access: rsync://repo-rpki.idnic.net/repo/d9afd315-f47f-4f6a-b8b5-45a2280bbc85/0/8CC3A67DBA162B4430DF0F08F810A7B953CBA4A1.mft Manifest number: 01FA Signing time: Fri 22 Aug 2025 20:10:58 +0000 Manifest this update: Fri 22 Aug 2025 20:05:58 +0000 Manifest next update: Tue 26 Aug 2025 06:04:58 +0000 Files and hashes: 1: 8CC3A67DBA162B4430DF0F08F810A7B953CBA4A1.crl (hash: TGO3LDCDdtP/yV2zQi8nhiSD4cgY2Hb0bID0w5M0IwY=) 2: 3130332e3139312e35322e302f32332d3234203d3e2034383030.roa (hash: e+A7LYn+NCGFiG7Es9xiBuZGY1wSb3yZo5rf4YGYc54=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/d9afd315-f47f-4f6a-b8b5-45a2280bbc85/0/8CC3A67DBA162B4430DF0F08F810A7B953CBA4A1.crl rsync://repo-rpki.idnic.net/repo/d9afd315-f47f-4f6a-b8b5-45a2280bbc85/0/8CC3A67DBA162B4430DF0F08F810A7B953CBA4A1.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8CC3A67DBA162B4430DF0F08F810A7B953CBA4A1.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 26 Aug 2025 06:04:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 74:42:ec:c7:0d:dc:5b:6d:0e:38:f4:bf:bf:c7:98:1b:ad:d7:65:dc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8CC3A67DBA162B4430DF0F08F810A7B953CBA4A1 Validity Not Before: Aug 22 20:05:58 2025 GMT Not After : Aug 26 06:04:58 2025 GMT Subject: CN=9675CE6A2EB26F06AE8E589B8990780BFAB4DECD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:d2:6f:87:21:20:fc:ce:af:9f:73:98:ee:f0: 1f:1f:b5:6a:5b:8a:e7:95:26:2f:82:db:4c:6c:17: f3:a0:03:e2:a7:dc:8b:fe:3d:6b:02:cc:2b:0e:78: 31:f3:a6:b5:5e:7f:72:9d:a2:d8:74:30:3d:41:c8: 7d:8b:49:48:70:37:e1:69:d6:80:b9:33:92:8c:11: c0:cf:f1:3f:50:eb:8d:8e:f1:f8:b3:24:5f:d8:0d: 21:09:c4:85:51:7e:7c:cf:10:d9:3e:39:5f:f5:be: 2b:98:c8:da:62:0b:23:ff:f7:fe:8f:fc:d1:55:7a: ff:11:91:87:82:ed:15:d2:56:85:64:be:30:ea:53: 22:5e:c8:95:db:71:3e:6f:15:f6:02:ac:65:f1:22: 0f:c1:6b:32:9d:7a:d9:6c:29:a3:6c:c2:2c:e3:5f: 06:b2:a0:95:84:fa:90:77:ed:95:6e:b2:2a:b3:d0: 8e:e0:c8:dd:9a:36:c7:23:0b:e4:0c:ae:06:91:01: b8:7b:e1:a2:3e:ca:8c:f7:4d:ef:4e:6c:71:ff:72: 5c:15:81:06:53:00:fe:1b:45:84:b4:c7:22:ab:db: cb:9d:94:a5:7e:43:c1:0d:83:45:d3:bc:59:cc:73: 37:75:a9:26:6a:55:83:8b:d8:53:9a:75:70:df:f8: 08:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:75:CE:6A:2E:B2:6F:06:AE:8E:58:9B:89:90:78:0B:FA:B4:DE:CD X509v3 Authority Key Identifier: keyid:8C:C3:A6:7D:BA:16:2B:44:30:DF:0F:08:F8:10:A7:B9:53:CB:A4:A1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/d9afd315-f47f-4f6a-b8b5-45a2280bbc85/0/8CC3A67DBA162B4430DF0F08F810A7B953CBA4A1.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8CC3A67DBA162B4430DF0F08F810A7B953CBA4A1.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d9afd315-f47f-4f6a-b8b5-45a2280bbc85/0/8CC3A67DBA162B4430DF0F08F810A7B953CBA4A1.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0b:f0:55:cd:f7:7a:66:79:ce:c8:eb:dd:3d:67:e8:07:b5:cd: 5a:a9:29:d0:f2:90:96:a9:1a:ed:cb:ad:63:73:64:ea:9c:dc: 07:25:d3:1e:42:b8:9a:9a:78:c2:0c:29:ca:f1:2c:26:65:dd: e1:88:77:c9:c8:12:4d:9c:99:f4:7f:b3:2c:0e:71:2b:a3:95: 22:00:30:33:12:5c:ee:3c:ee:9a:74:de:6f:bf:a4:9c:ca:38: e7:f1:6e:77:6e:fc:bd:74:f8:9c:5b:8b:e7:4e:ad:46:2e:54: 77:64:ce:e4:2a:fb:49:bd:17:7d:be:b6:48:cb:1f:91:91:da: 5f:32:5b:7a:97:da:be:9d:82:a1:2e:e3:88:e2:e1:34:75:aa: 0c:d6:af:cd:60:24:e9:b6:ab:c9:0b:a9:37:3a:91:e7:07:cb: a6:15:ac:61:9d:96:da:fc:85:58:e4:d9:e8:03:34:cb:da:ed: de:64:99:92:96:ff:93:f1:91:68:0c:41:91:20:8b:80:55:71: 52:57:1c:ae:45:d0:d9:00:4b:8b:e5:f3:73:a6:c9:e4:66:91: 30:36:f0:79:1a:02:34:7d:a3:3f:55:e6:bd:1e:fc:e8:50:48: 7c:54:d0:94:08:f3:f2:7e:c0:25:40:5e:98:6a:0d:70:a7:a9: 37:d2:50:76 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUdELsxw3cW20OOPS/v8eYG63XZdwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOENDM0E2N0RCQTE2MkI0NDMwREYwRjA4RjgxMEE3Qjk1 M0NCQTRBMTAeFw0yNTA4MjIyMDA1NThaFw0yNTA4MjYwNjA0NThaMDMxMTAvBgNV BAMTKDk2NzVDRTZBMkVCMjZGMDZBRThFNTg5Qjg5OTA3ODBCRkFCNERFQ0QwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDC0m+HISD8zq+fc5ju8B8ftWpb iueVJi+C20xsF/OgA+Kn3Iv+PWsCzCsOeDHzprVef3Kdoth0MD1ByH2LSUhwN+Fp 1oC5M5KMEcDP8T9Q642O8fizJF/YDSEJxIVRfnzPENk+OV/1viuYyNpiCyP/9/6P /NFVev8RkYeC7RXSVoVkvjDqUyJeyJXbcT5vFfYCrGXxIg/BazKdetlsKaNswizj XwayoJWE+pB37ZVusiqz0I7gyN2aNscjC+QMrgaRAbh74aI+yoz3Te9ObHH/clwV gQZTAP4bRYS0xyKr28udlKV+Q8ENg0XTvFnMczd1qSZqVYOL2FOadXDf+AjHAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUlnXOai6ybwaujlibiZB4C/q03s0wHwYDVR0j BBgwFoAUjMOmfboWK0Qw3w8I+BCnuVPLpKEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k OWFmZDMxNS1mNDdmLTRmNmEtYjhiNS00NWEyMjgwYmJjODUvMC84Q0MzQTY3REJB MTYyQjQ0MzBERjBGMDhGODEwQTdCOTUzQ0JBNEExLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOENDM0E2N0RCQTE2MkI0NDMwREYwRjA4RjgxMEE3Qjk1M0NC QTRBMS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZDlhZmQzMTUtZjQ3Zi00ZjZhLWI4 YjUtNDVhMjI4MGJiYzg1LzAvOENDM0E2N0RCQTE2MkI0NDMwREYwRjA4RjgxMEE3 Qjk1M0NCQTRBMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAvwVc33emZ5zsjr3T1n6Ae1zVqpKdDykJap Gu3LrWNzZOqc3Acl0x5CuJqaeMIMKcrxLCZl3eGId8nIEk2cmfR/sywOcSujlSIA MDMSXO487pp03m+/pJzKOOfxbndu/L10+Jxbi+dOrUYuVHdkzuQq+0m9F32+tkjL H5GR2l8yW3qX2r6dgqEu44ji4TR1qgzWr81gJOm2q8kLqTc6kecHy6YVrGGdltr8 hVjk2egDNMva7d5kmZKW/5PxkWgMQZEgi4BVcVJXHK5F0NkAS4vl83OmyeRmkTA2 8HkaAjR9oz9V5r0e/OhQSHxU0JQI8/J+wCVAXphqDXCnqTfSUHY= -----END CERTIFICATE-----Generated at Sat Aug 23 12:06:32 2025 by rpki-client