$ rpki-client -vvf repo-rpki.idnic.net/repo/e8ced18d-a7cc-4b44-af4a-85f304f9eb6c/0/08683ED5C748B79A346EF705A2DCF809A31C75DF.mft File: 08683ED5C748B79A346EF705A2DCF809A31C75DF.mft (raw, json) Hash identifier: cyf1wp7FP3E3TPsXncc47ZUwaqYi2PdVNgf4EI3faAQ= Subject key identifier: A5:FD:9E:EC:59:0C:06:BB:62:82:49:38:78:DF:C8:7A:3D:E0:6C:3B Authority key identifier: 08:68:3E:D5:C7:48:B7:9A:34:6E:F7:05:A2:DC:F8:09:A3:1C:75:DF Certificate issuer: /CN=08683ED5C748B79A346EF705A2DCF809A31C75DF Certificate serial: 1C706F5033A009BE2A60731AAEEC75B44100F15C Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/08683ED5C748B79A346EF705A2DCF809A31C75DF.cer Subject info access: rsync://repo-rpki.idnic.net/repo/e8ced18d-a7cc-4b44-af4a-85f304f9eb6c/0/08683ED5C748B79A346EF705A2DCF809A31C75DF.mft Manifest number: D4 Signing time: Thu 21 Aug 2025 16:31:23 +0000 Manifest this update: Thu 21 Aug 2025 16:26:23 +0000 Manifest next update: Mon 25 Aug 2025 01:00:23 +0000 Files and hashes: 1: 08683ED5C748B79A346EF705A2DCF809A31C75DF.crl (hash: A3rKHqWx3WrZMgSP0Dbl31qzJDxzWbpTPk8bksI9LBk=) 2: 3135372e32302e3233332e302f32342d3234203d3e20313532343339.roa (hash: 7TI4pzLcqyxuF39YuyeEo0KkPf4qVThK/j4OGDR/rss=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/e8ced18d-a7cc-4b44-af4a-85f304f9eb6c/0/08683ED5C748B79A346EF705A2DCF809A31C75DF.crl rsync://repo-rpki.idnic.net/repo/e8ced18d-a7cc-4b44-af4a-85f304f9eb6c/0/08683ED5C748B79A346EF705A2DCF809A31C75DF.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/08683ED5C748B79A346EF705A2DCF809A31C75DF.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 25 Aug 2025 01:00:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1c:70:6f:50:33:a0:09:be:2a:60:73:1a:ae:ec:75:b4:41:00:f1:5c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=08683ED5C748B79A346EF705A2DCF809A31C75DF Validity Not Before: Aug 21 16:26:23 2025 GMT Not After : Aug 25 01:00:23 2025 GMT Subject: CN=A5FD9EEC590C06BB6282493878DFC87A3DE06C3B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:95:50:5c:23:4a:9e:ec:1c:9c:e7:cf:bb:f7: 14:b0:31:ba:ef:b4:c4:cd:f6:f8:47:c5:dc:0c:06: b3:9a:a2:8c:2e:78:7a:c4:f5:b3:19:60:6f:6e:f4: 28:70:1b:a0:11:41:e2:70:b4:06:b2:c2:55:23:4e: cb:80:8d:0a:ea:65:44:75:b4:e9:8c:3a:b3:d5:04: 4f:f8:66:80:31:7b:a9:2c:47:84:84:cf:76:68:94: 6e:a3:63:75:fd:01:f1:1a:bd:22:cf:d7:97:b8:72: f3:43:63:3f:fb:f2:0d:dd:0d:93:23:7c:e2:78:20: 67:f5:2b:c8:a2:33:b4:96:b7:8e:80:e4:57:5a:fd: 60:1a:e6:47:2a:79:d0:0a:14:75:7f:bb:86:3f:a9: 08:d4:d2:04:00:48:bd:91:c3:b5:b4:cf:46:a1:ac: 53:50:3e:5f:0b:7e:a1:d2:15:2e:0f:76:b3:62:80: 4b:5b:49:c4:e9:a5:5f:7c:f4:c9:24:57:43:99:cf: 41:6a:39:b7:e2:b1:55:23:af:4f:89:9d:87:8f:99: 90:d0:31:af:45:58:08:b4:c9:8e:c6:14:74:62:4f: 8a:6f:68:99:84:ef:62:0a:5b:14:40:2e:06:13:69: 3b:d8:93:fe:d1:cd:27:19:b0:0b:51:06:96:50:c5: 2b:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:FD:9E:EC:59:0C:06:BB:62:82:49:38:78:DF:C8:7A:3D:E0:6C:3B X509v3 Authority Key Identifier: keyid:08:68:3E:D5:C7:48:B7:9A:34:6E:F7:05:A2:DC:F8:09:A3:1C:75:DF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/e8ced18d-a7cc-4b44-af4a-85f304f9eb6c/0/08683ED5C748B79A346EF705A2DCF809A31C75DF.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/08683ED5C748B79A346EF705A2DCF809A31C75DF.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e8ced18d-a7cc-4b44-af4a-85f304f9eb6c/0/08683ED5C748B79A346EF705A2DCF809A31C75DF.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 18:08:f6:9f:fd:3d:f4:a5:80:4b:13:31:ac:80:41:69:d1:bc: 99:18:5e:2a:0d:e8:9d:31:dc:4c:2a:a0:17:87:3d:4c:6c:b3: 16:8f:8f:65:46:24:cb:59:1c:0a:de:9c:99:23:c4:dc:b1:ad: 58:16:67:b9:ca:4c:89:58:32:6e:8b:54:68:01:5b:16:58:07: 6c:cf:0b:87:b5:92:8b:79:b1:7d:95:22:09:dc:97:c6:c1:d3: 5a:86:a4:78:bd:f2:2a:47:4e:b9:14:13:93:10:70:f6:2f:a6: 5f:09:36:36:b1:d5:0d:2b:92:4e:c1:d9:ae:5c:62:e3:73:01: 7d:3e:70:ee:81:a5:c2:ad:10:77:f8:52:22:fd:b3:1c:f7:47: 22:ee:06:32:83:36:e0:02:73:e2:d8:8a:b3:4a:b5:53:07:1e: 99:ae:62:1d:d2:f9:c0:e6:21:85:a2:12:7d:88:1d:4f:9e:87: 38:8b:af:9f:b1:42:92:7f:a1:de:5f:5e:b5:d9:f5:fb:4d:cc: 54:81:8e:9e:eb:2c:c7:8b:ca:d7:5d:16:36:a1:d4:3e:b4:15: 3f:f9:e7:e1:cf:44:58:ce:87:4c:43:42:32:fd:98:3f:1e:eb: 7f:86:28:70:03:be:4a:6b:a3:87:62:99:6a:a3:b4:0a:c8:b9: 1e:f6:ae:c2 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUHHBvUDOgCb4qYHMarux1tEEA8VwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDg2ODNFRDVDNzQ4Qjc5QTM0NkVGNzA1QTJEQ0Y4MDlB MzFDNzVERjAeFw0yNTA4MjExNjI2MjNaFw0yNTA4MjUwMTAwMjNaMDMxMTAvBgNV BAMTKEE1RkQ5RUVDNTkwQzA2QkI2MjgyNDkzODc4REZDODdBM0RFMDZDM0IwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDJlVBcI0qe7Byc58+79xSwMbrv tMTN9vhHxdwMBrOaoowueHrE9bMZYG9u9ChwG6ARQeJwtAaywlUjTsuAjQrqZUR1 tOmMOrPVBE/4ZoAxe6ksR4SEz3ZolG6jY3X9AfEavSLP15e4cvNDYz/78g3dDZMj fOJ4IGf1K8iiM7SWt46A5Fda/WAa5kcqedAKFHV/u4Y/qQjU0gQASL2Rw7W0z0ah rFNQPl8LfqHSFS4PdrNigEtbScTppV989MkkV0OZz0FqObfisVUjr0+JnYePmZDQ Ma9FWAi0yY7GFHRiT4pvaJmE72IKWxRALgYTaTvYk/7RzScZsAtRBpZQxSstAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUpf2e7FkMBrtigkk4eN/Iej3gbDswHwYDVR0j BBgwFoAUCGg+1cdIt5o0bvcFotz4CaMcdd8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l OGNlZDE4ZC1hN2NjLTRiNDQtYWY0YS04NWYzMDRmOWViNmMvMC8wODY4M0VENUM3 NDhCNzlBMzQ2RUY3MDVBMkRDRjgwOUEzMUM3NURGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvMDg2ODNFRDVDNzQ4Qjc5QTM0NkVGNzA1QTJEQ0Y4MDlBMzFD NzVERi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZThjZWQxOGQtYTdjYy00YjQ0LWFm NGEtODVmMzA0ZjllYjZjLzAvMDg2ODNFRDVDNzQ4Qjc5QTM0NkVGNzA1QTJEQ0Y4 MDlBMzFDNzVERi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABgI9p/9PfSlgEsTMayAQWnRvJkYXioN6J0x 3EwqoBeHPUxssxaPj2VGJMtZHArenJkjxNyxrVgWZ7nKTIlYMm6LVGgBWxZYB2zP C4e1kot5sX2VIgncl8bB01qGpHi98ipHTrkUE5MQcPYvpl8JNjax1Q0rkk7B2a5c YuNzAX0+cO6BpcKtEHf4UiL9sxz3RyLuBjKDNuACc+LYirNKtVMHHpmuYh3S+cDm IYWiEn2IHU+ehziLr5+xQpJ/od5fXrXZ9ftNzFSBjp7rLMeLytddFjah1D60FT/5 5+HPRFjOh0xDQjL9mD8e63+GKHADvkpro4dimWqjtArIuR72rsI= -----END CERTIFICATE-----Generated at Sat Aug 23 21:19:00 2025 by rpki-client