$ rpki-client -vvf repo-rpki.idnic.net/repo/f195b4b4-bc8a-4ce5-b550-9aa7b36ee1fa/0/8107B8970680BF15377E222E6093ED124116C40F.mft File: 8107B8970680BF15377E222E6093ED124116C40F.mft (raw, json) Hash identifier: hdDOH9yh7RXKq7Pq6bJUWZUb3ehqyIjpX1WhjjTPFbs= Subject key identifier: 56:53:F6:90:3F:42:60:15:06:52:49:15:AB:38:6B:73:89:CF:D4:D2 Authority key identifier: 81:07:B8:97:06:80:BF:15:37:7E:22:2E:60:93:ED:12:41:16:C4:0F Certificate issuer: /CN=8107B8970680BF15377E222E6093ED124116C40F Certificate serial: 0AA0F093A0FC9B9DFD8830CACC44F22F51368B15 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/8107B8970680BF15377E222E6093ED124116C40F.cer Subject info access: rsync://repo-rpki.idnic.net/repo/f195b4b4-bc8a-4ce5-b550-9aa7b36ee1fa/0/8107B8970680BF15377E222E6093ED124116C40F.mft Manifest number: 94 Signing time: Thu 21 Aug 2025 21:10:02 +0000 Manifest this update: Thu 21 Aug 2025 21:05:02 +0000 Manifest next update: Mon 25 Aug 2025 08:56:02 +0000 Files and hashes: 1: 3136302e32322e3133362e302f32332d3233203d3e20313532383131.roa (hash: V4/cqqOZ7RegowJp1D+ect85LbWcjDnGy47RvlaSPIU=) 2: 8107B8970680BF15377E222E6093ED124116C40F.crl (hash: iXbtr+leaF0dSJ119fGWni8H7nyeMPytjG5Q6A0bwJQ=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/f195b4b4-bc8a-4ce5-b550-9aa7b36ee1fa/0/8107B8970680BF15377E222E6093ED124116C40F.crl rsync://repo-rpki.idnic.net/repo/f195b4b4-bc8a-4ce5-b550-9aa7b36ee1fa/0/8107B8970680BF15377E222E6093ED124116C40F.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/8107B8970680BF15377E222E6093ED124116C40F.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 25 Aug 2025 08:56:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0a:a0:f0:93:a0:fc:9b:9d:fd:88:30:ca:cc:44:f2:2f:51:36:8b:15 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8107B8970680BF15377E222E6093ED124116C40F Validity Not Before: Aug 21 21:05:02 2025 GMT Not After : Aug 25 08:56:02 2025 GMT Subject: CN=5653F6903F42601506524915AB386B7389CFD4D2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:06:be:a5:4c:03:a0:6e:34:83:e7:f4:d5:79: bc:e7:41:81:df:92:8c:dc:12:9b:19:5b:c1:9a:55: b2:5d:09:69:e1:5f:38:13:16:5e:e2:c9:52:23:14: 9e:b5:44:62:a7:25:6b:61:00:c1:1b:74:ec:c7:94: 62:a9:70:cb:57:a4:a0:de:19:ca:14:36:22:3c:c2: 2d:c2:fc:0d:85:b8:1d:9f:5b:19:55:87:a1:89:4f: 2d:e1:76:23:57:8c:04:c3:d2:04:ad:74:87:fd:7f: 1e:29:32:1e:f1:44:e2:14:28:fa:d7:68:c4:5d:3e: 80:30:03:78:69:20:b9:e0:04:35:03:7b:1e:6e:95: aa:85:80:34:d1:b5:2c:df:fe:56:fa:77:a5:26:72: 9d:78:7e:51:30:b4:32:96:5b:f4:b0:80:72:3a:f3: dc:ed:6b:54:ca:7c:30:8e:5f:81:58:81:22:72:2a: 9c:c7:f2:92:36:6b:c5:c1:c0:06:26:8f:23:30:2d: 71:be:42:a4:e9:6e:d5:bc:27:6a:e1:7e:4b:2c:f6: 07:9a:3c:31:93:0a:30:30:97:07:bb:de:e4:54:d6: ea:e1:81:83:61:f2:b9:dc:4b:72:e9:46:39:0e:19: 6c:1e:d8:f8:60:41:8a:32:42:e5:08:c5:4d:5f:d8: e0:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 56:53:F6:90:3F:42:60:15:06:52:49:15:AB:38:6B:73:89:CF:D4:D2 X509v3 Authority Key Identifier: keyid:81:07:B8:97:06:80:BF:15:37:7E:22:2E:60:93:ED:12:41:16:C4:0F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/f195b4b4-bc8a-4ce5-b550-9aa7b36ee1fa/0/8107B8970680BF15377E222E6093ED124116C40F.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/8107B8970680BF15377E222E6093ED124116C40F.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f195b4b4-bc8a-4ce5-b550-9aa7b36ee1fa/0/8107B8970680BF15377E222E6093ED124116C40F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1d:91:89:9b:59:67:c8:5a:60:05:61:30:c7:8f:24:68:26:a5: 43:48:f2:f8:83:56:f7:e7:77:19:b0:4e:79:cb:4a:3d:ec:79: 81:03:07:ff:9b:c2:8f:11:38:05:bf:2d:20:fb:bc:cd:d8:22: bb:2e:c8:3c:aa:21:76:5e:2d:d4:3f:ce:cd:c7:ab:bd:be:0c: 57:51:09:2d:4f:e5:b5:5c:eb:b5:ef:ba:88:d5:91:c3:bb:27: 73:a6:60:7d:67:14:7c:6c:c7:43:8d:89:f1:22:2c:b7:8c:bf: 7e:5e:2b:7d:19:9f:a4:73:87:98:8f:c0:50:07:c5:83:9d:55: f8:3c:4f:92:85:a2:e3:9c:6e:05:be:5a:6f:91:bc:83:51:a8: 1f:21:df:11:b0:f2:88:d0:e4:cf:69:f5:6f:f8:46:ac:0c:b2: 36:f6:24:6d:4d:cb:d4:1b:28:a9:aa:6c:b9:34:57:40:17:88: 47:fb:b4:44:50:c1:a8:39:93:04:4f:87:96:03:fe:55:cf:b2: b0:0c:a5:e2:7e:cd:00:06:87:56:35:7e:b7:2a:09:fa:8b:6b: d4:b6:1e:64:fe:e3:fa:12:d0:f8:31:fe:d2:f9:52:15:e5:ae: e6:8c:90:9a:f5:f5:8e:a9:cc:ef:ae:6e:7f:31:e7:8e:d3:a8: 67:c8:31:98 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUCqDwk6D8m539iDDKzETyL1E2ixUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODEwN0I4OTcwNjgwQkYxNTM3N0UyMjJFNjA5M0VEMTI0 MTE2QzQwRjAeFw0yNTA4MjEyMTA1MDJaFw0yNTA4MjUwODU2MDJaMDMxMTAvBgNV BAMTKDU2NTNGNjkwM0Y0MjYwMTUwNjUyNDkxNUFCMzg2QjczODlDRkQ0RDIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+Br6lTAOgbjSD5/TVebznQYHf kozcEpsZW8GaVbJdCWnhXzgTFl7iyVIjFJ61RGKnJWthAMEbdOzHlGKpcMtXpKDe GcoUNiI8wi3C/A2FuB2fWxlVh6GJTy3hdiNXjATD0gStdIf9fx4pMh7xROIUKPrX aMRdPoAwA3hpILngBDUDex5ulaqFgDTRtSzf/lb6d6Umcp14flEwtDKWW/SwgHI6 89zta1TKfDCOX4FYgSJyKpzH8pI2a8XBwAYmjyMwLXG+QqTpbtW8J2rhfkss9gea PDGTCjAwlwe73uRU1urhgYNh8rncS3LpRjkOGWwe2PhgQYoyQuUIxU1f2OA/AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUVlP2kD9CYBUGUkkVqzhrc4nP1NIwHwYDVR0j BBgwFoAUgQe4lwaAvxU3fiIuYJPtEkEWxA8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m MTk1YjRiNC1iYzhhLTRjZTUtYjU1MC05YWE3YjM2ZWUxZmEvMC84MTA3Qjg5NzA2 ODBCRjE1Mzc3RTIyMkU2MDkzRUQxMjQxMTZDNDBGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvODEwN0I4OTcwNjgwQkYxNTM3N0UyMjJFNjA5M0VEMTI0MTE2 QzQwRi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZjE5NWI0YjQtYmM4YS00Y2U1LWI1 NTAtOWFhN2IzNmVlMWZhLzAvODEwN0I4OTcwNjgwQkYxNTM3N0UyMjJFNjA5M0VE MTI0MTE2QzQwRi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAB2RiZtZZ8haYAVhMMePJGgmpUNI8viDVvfn dxmwTnnLSj3seYEDB/+bwo8ROAW/LSD7vM3YIrsuyDyqIXZeLdQ/zs3Hq72+DFdR CS1P5bVc67XvuojVkcO7J3OmYH1nFHxsx0ONifEiLLeMv35eK30Zn6Rzh5iPwFAH xYOdVfg8T5KFouOcbgW+Wm+RvINRqB8h3xGw8ojQ5M9p9W/4RqwMsjb2JG1Ny9Qb KKmqbLk0V0AXiEf7tERQwag5kwRPh5YD/lXPsrAMpeJ+zQAGh1Y1frcqCfqLa9S2 HmT+4/oS0Pgx/tL5UhXlruaMkJr19Y6pzO+ubn8x547TqGfIMZg= -----END CERTIFICATE-----Generated at Sun Aug 24 06:25:16 2025 by rpki-client