$ rpki-client -vvf repo-rpki.idnic.net/repo/dacb7187-7a5f-4e23-be94-593a0c288cb9/0/8C6B9FE80EF1DA40B964D4429F78785ADDD29EFB.mft File: 8C6B9FE80EF1DA40B964D4429F78785ADDD29EFB.mft (raw, json) Hash identifier: kU1U9VXXjn7Am2drR6tKOnileEUOZQH6N2NRCKu1bPM= Subject key identifier: 68:8F:FE:3E:DC:41:CB:BD:98:3D:67:64:58:36:71:74:82:D6:CD:A1 Authority key identifier: 8C:6B:9F:E8:0E:F1:DA:40:B9:64:D4:42:9F:78:78:5A:DD:D2:9E:FB Certificate issuer: /CN=8C6B9FE80EF1DA40B964D4429F78785ADDD29EFB Certificate serial: 61ACFF6C29811A0BE4B63DF6F24B0A2A6AC9A28D Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8C6B9FE80EF1DA40B964D4429F78785ADDD29EFB.cer Subject info access: rsync://repo-rpki.idnic.net/repo/dacb7187-7a5f-4e23-be94-593a0c288cb9/0/8C6B9FE80EF1DA40B964D4429F78785ADDD29EFB.mft Manifest number: 01D7 Signing time: Thu 21 Aug 2025 18:31:24 +0000 Manifest this update: Thu 21 Aug 2025 18:26:24 +0000 Manifest next update: Sun 24 Aug 2025 20:13:24 +0000 Files and hashes: 1: 3130332e31302e37302e302f32342d3234203d3e20313530323130.roa (hash: 5JDd/HA007WXvt9HRMOrUb4bJ8L4vCr7oaVmKSZ2Ddg=) 2: 3130332e31302e37312e302f32342d3234203d3e20313530323130.roa (hash: wDta+92k3x+gK76Z0kGm3qQTLhs6WF7nJtND4k4DV9Y=) 3: 8C6B9FE80EF1DA40B964D4429F78785ADDD29EFB.crl (hash: BvvASoQt+SGZsX2dvWifaTkvl7apA4Qd86MoUW0RFQU=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/dacb7187-7a5f-4e23-be94-593a0c288cb9/0/8C6B9FE80EF1DA40B964D4429F78785ADDD29EFB.crl rsync://repo-rpki.idnic.net/repo/dacb7187-7a5f-4e23-be94-593a0c288cb9/0/8C6B9FE80EF1DA40B964D4429F78785ADDD29EFB.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8C6B9FE80EF1DA40B964D4429F78785ADDD29EFB.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 24 Aug 2025 20:13:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 61:ac:ff:6c:29:81:1a:0b:e4:b6:3d:f6:f2:4b:0a:2a:6a:c9:a2:8d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8C6B9FE80EF1DA40B964D4429F78785ADDD29EFB Validity Not Before: Aug 21 18:26:24 2025 GMT Not After : Aug 24 20:13:24 2025 GMT Subject: CN=688FFE3EDC41CBBD983D67645836717482D6CDA1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:bf:11:f8:0a:73:9d:e5:df:6d:f5:c6:b6:26: 0d:e3:f3:09:9a:4c:86:3d:de:8d:f9:78:85:3f:0a: 7c:b0:e8:94:a8:a4:a6:e0:d0:13:9e:ab:d7:e6:30: 49:7b:11:73:a6:cb:74:0f:f4:43:2d:a7:25:2a:39: ba:14:8f:d2:ea:38:a9:d1:d4:74:ec:ba:9c:54:37: 53:84:32:d3:03:ac:0b:47:08:2e:0e:3e:19:b6:94: 10:bf:32:79:a8:28:50:5e:2d:37:78:fe:7d:0c:10: 0a:39:74:97:7b:a6:30:d6:f9:22:52:d1:47:d5:95: c0:73:af:37:68:39:22:de:bb:bf:13:5a:2f:ab:0e: 1c:72:0e:86:09:94:5d:8b:3f:fa:6a:ec:4b:65:f1: c4:54:6e:86:fe:34:d5:20:02:26:53:5e:a2:94:d1: 75:8e:be:4b:61:88:b0:35:06:07:9f:bc:d3:e0:44: ac:d4:9a:b9:93:b9:5d:08:70:69:f5:51:1b:a4:53: ec:db:3e:cc:1c:08:65:6d:8a:c0:ce:40:77:ae:df: 86:02:41:55:8d:5b:09:a0:9a:8f:d3:0b:24:ef:0e: 17:b1:f3:e3:d4:5f:70:ba:9e:a7:21:46:5d:a7:84: 41:40:7c:0a:a7:98:2c:1d:bc:86:78:4c:44:8e:e3: de:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:8F:FE:3E:DC:41:CB:BD:98:3D:67:64:58:36:71:74:82:D6:CD:A1 X509v3 Authority Key Identifier: keyid:8C:6B:9F:E8:0E:F1:DA:40:B9:64:D4:42:9F:78:78:5A:DD:D2:9E:FB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/dacb7187-7a5f-4e23-be94-593a0c288cb9/0/8C6B9FE80EF1DA40B964D4429F78785ADDD29EFB.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8C6B9FE80EF1DA40B964D4429F78785ADDD29EFB.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/dacb7187-7a5f-4e23-be94-593a0c288cb9/0/8C6B9FE80EF1DA40B964D4429F78785ADDD29EFB.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 98:98:5c:a0:9c:ea:9a:6c:e4:3a:d1:8a:84:fa:ef:1f:44:2b: 8f:ab:fa:9c:74:73:d7:24:6e:0a:42:34:37:c4:3e:c5:1c:37: be:36:df:58:a1:e0:7f:f9:ec:47:e4:92:ce:dd:fe:d6:bf:2d: 72:e2:6e:00:6d:75:a7:e7:e1:3f:ef:e6:fd:90:84:d1:6a:89: 8b:a6:12:6f:ee:76:41:22:6a:a8:5e:90:8d:7e:5b:a5:f5:68: 5c:7a:f7:e7:8a:79:66:4b:e8:7f:0a:52:98:39:bd:38:a6:47: 63:6d:5c:ef:cc:d5:41:cc:14:c3:b2:61:be:40:69:78:d7:d8: a6:24:24:f2:4a:0c:43:83:7f:78:3c:d6:c4:a3:15:c1:41:b0: 49:ca:00:b7:7e:6b:8c:ef:36:03:61:ea:f7:30:42:89:eb:b3: fc:08:dd:79:e4:df:44:2e:35:29:56:6b:b0:d5:60:94:57:c6: 72:2e:c5:19:61:a0:9e:10:51:ec:2a:5a:da:75:22:4f:39:d8: a3:8e:14:cc:82:a8:15:db:d1:da:a8:ac:c3:e3:2e:8a:a1:b9: 82:24:77:b3:f7:39:aa:ae:65:b1:e6:5b:1a:8a:4a:b8:3a:9c: d7:b5:72:42:d3:92:a9:b6:87:1c:f2:5c:80:b4:22:cd:08:63: 14:c6:72:97 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUYaz/bCmBGgvktj328ksKKmrJoo0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEM2QjlGRTgwRUYxREE0MEI5NjRENDQyOUY3ODc4NUFE REQyOUVGQjAeFw0yNTA4MjExODI2MjRaFw0yNTA4MjQyMDEzMjRaMDMxMTAvBgNV BAMTKDY4OEZGRTNFREM0MUNCQkQ5ODNENjc2NDU4MzY3MTc0ODJENkNEQTEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDFvxH4CnOd5d9t9ca2Jg3j8wma TIY93o35eIU/Cnyw6JSopKbg0BOeq9fmMEl7EXOmy3QP9EMtpyUqOboUj9LqOKnR 1HTsupxUN1OEMtMDrAtHCC4OPhm2lBC/MnmoKFBeLTd4/n0MEAo5dJd7pjDW+SJS 0UfVlcBzrzdoOSLeu78TWi+rDhxyDoYJlF2LP/pq7Etl8cRUbob+NNUgAiZTXqKU 0XWOvkthiLA1BgefvNPgRKzUmrmTuV0IcGn1URukU+zbPswcCGVtisDOQHeu34YC QVWNWwmgmo/TCyTvDhex8+PUX3C6nqchRl2nhEFAfAqnmCwdvIZ4TESO494jAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUaI/+PtxBy72YPWdkWDZxdILWzaEwHwYDVR0j BBgwFoAUjGuf6A7x2kC5ZNRCn3h4Wt3SnvswDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k YWNiNzE4Ny03YTVmLTRlMjMtYmU5NC01OTNhMGMyODhjYjkvMC84QzZCOUZFODBF RjFEQTQwQjk2NEQ0NDI5Rjc4Nzg1QURERDI5RUZCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOEM2QjlGRTgwRUYxREE0MEI5NjRENDQyOUY3ODc4NUFEREQy OUVGQi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZGFjYjcxODctN2E1Zi00ZTIzLWJl OTQtNTkzYTBjMjg4Y2I5LzAvOEM2QjlGRTgwRUYxREE0MEI5NjRENDQyOUY3ODc4 NUFEREQyOUVGQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJiYXKCc6pps5DrRioT67x9EK4+r+px0c9ck bgpCNDfEPsUcN74231ih4H/57Efkks7d/ta/LXLibgBtdafn4T/v5v2QhNFqiYum Em/udkEiaqhekI1+W6X1aFx69+eKeWZL6H8KUpg5vTimR2NtXO/M1UHMFMOyYb5A aXjX2KYkJPJKDEODf3g81sSjFcFBsEnKALd+a4zvNgNh6vcwQonrs/wI3Xnk30Qu NSlWa7DVYJRXxnIuxRlhoJ4QUewqWtp1Ik852KOOFMyCqBXb0dqorMPjLoqhuYIk d7P3OaquZbHmWxqKSrg6nNe1ckLTkqm2hxzyXIC0Is0IYxTGcpc= -----END CERTIFICATE-----Generated at Sat Aug 23 17:28:45 2025 by rpki-client