$ rpki-client -vvf repo-rpki.idnic.net/repo/f9d6acc6-0af3-4b97-99a4-0f45e8ecf576/0/0A8E8E063785238467D4AD1F507CC97B30DBB959.mft File: 0A8E8E063785238467D4AD1F507CC97B30DBB959.mft (raw, json) Hash identifier: +/1zQa7T9/SNmGhEN/VbHyj1KCgPK5wNMQcJEIGyZXg= Subject key identifier: 9F:9B:CD:1A:CF:7D:D8:47:E4:D4:E0:F9:D8:C5:CF:FE:A2:E5:FD:46 Authority key identifier: 0A:8E:8E:06:37:85:23:84:67:D4:AD:1F:50:7C:C9:7B:30:DB:B9:59 Certificate issuer: /CN=0A8E8E063785238467D4AD1F507CC97B30DBB959 Certificate serial: 1705C4813CDE3A0858BE368D60E23128DB31857C Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0A8E8E063785238467D4AD1F507CC97B30DBB959.cer Subject info access: rsync://repo-rpki.idnic.net/repo/f9d6acc6-0af3-4b97-99a4-0f45e8ecf576/0/0A8E8E063785238467D4AD1F507CC97B30DBB959.mft Manifest number: 0167 Signing time: Sat 23 Aug 2025 03:21:18 +0000 Manifest this update: Sat 23 Aug 2025 03:16:18 +0000 Manifest next update: Tue 26 Aug 2025 06:22:18 +0000 Files and hashes: 1: 323430363a356334303a313030303a3a2f33362d3438203d3e20313331373035.roa (hash: Mk93/Py1aNdqibCxnW5rDhu68jIUBJ5f2wQcM99902Q=) 2: 3130332e3135342e3137382e302f32342d3234203d3e20313331373035.roa (hash: dY5S+6E2tTu7kTt3kud9rHyNZ8ICT/4MYY6A5gKdkm0=) 3: 323430363a356334303a373737373a3a2f34382d3438203d3e20313331373035.roa (hash: uxf3gr1qNXj16NXsE/3S99HOdYs6kHV+q6L/TWnS+ag=) 4: 323430363a356334303a393939393a3a2f34382d3438203d3e20313331373035.roa (hash: cSd8oWkoy/PciTBhaM2sT+kEpSFLFHXqmquC1grDeYk=) 5: 323430363a356334303a383838383a3a2f34382d3438203d3e20313331373035.roa (hash: xhrHJkeZ6ORZKPQ3ePW270bQNoXqgZH/hWdzMzXe/Ng=) 6: 3130332e3135342e3137392e302f32342d3234203d3e20313331373035.roa (hash: fuYAXhPxVSs3uQDGyVoloAUdGAB1vPzhCZLoObuSwWo=) 7: 323430363a356334303a323030303a3a2f33362d3438203d3e20313331373035.roa (hash: 34w8SIWSSd8kqURH0Jn+B/R9XKBmDHxtyVWAlqGJxJo=) 8: 323430363a356334303a3a2f33362d3438203d3e20313331373035.roa (hash: vVX9J+iIt5S0zLOqjzNP9A3DgvrDc3RqZLM36XJo31Q=) 9: 3130332e3135342e3137382e302f32332d3234203d3e20313331373035.roa (hash: z6Vlo67b6HowiJ4eNQMIImpcN0YW2LjWV36x2SeZA5M=) 10: 323430363a356334303a3a2f33322d3438203d3e20313331373035.roa (hash: ZrrNvfIdpKFxME3MijZJjel9mkVCFWr1LKlyTLKuOmk=) 11: 0A8E8E063785238467D4AD1F507CC97B30DBB959.crl (hash: CNiRwdU5BmoamyJiAYyibLFODlOSM9RywyV5mrxeMFs=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/f9d6acc6-0af3-4b97-99a4-0f45e8ecf576/0/0A8E8E063785238467D4AD1F507CC97B30DBB959.crl rsync://repo-rpki.idnic.net/repo/f9d6acc6-0af3-4b97-99a4-0f45e8ecf576/0/0A8E8E063785238467D4AD1F507CC97B30DBB959.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0A8E8E063785238467D4AD1F507CC97B30DBB959.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 26 Aug 2025 06:22:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 17:05:c4:81:3c:de:3a:08:58:be:36:8d:60:e2:31:28:db:31:85:7c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0A8E8E063785238467D4AD1F507CC97B30DBB959 Validity Not Before: Aug 23 03:16:18 2025 GMT Not After : Aug 26 06:22:18 2025 GMT Subject: CN=9F9BCD1ACF7DD847E4D4E0F9D8C5CFFEA2E5FD46 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:37:3f:2c:c2:4b:f1:03:3e:05:f8:ec:ff:2e: 93:df:73:58:1f:72:ed:62:5e:ed:d8:87:6c:dd:b5: 02:57:1b:17:42:5d:df:d3:31:83:24:47:57:30:8c: 31:dc:27:f9:c3:a6:f7:53:73:1e:2f:0b:b2:d0:c6: e9:c0:71:a7:36:10:23:23:6e:12:d3:4e:7b:6e:a0: 53:5a:b4:7e:3c:12:e4:22:66:d9:44:23:7d:87:3b: bc:07:ba:8c:bd:2a:02:9f:b5:17:68:8a:ef:98:96: 90:c6:13:74:e1:d5:23:2d:d0:90:06:f5:0c:ce:cb: 4f:c1:d5:ca:ed:7e:26:86:89:c3:93:59:a9:12:21: fe:bc:92:e1:ed:8e:17:6c:e5:a2:92:c1:39:50:61: fb:3d:05:e2:70:ea:b9:27:67:eb:9d:66:08:2e:a2: 5d:e1:69:69:e2:7b:6b:e0:78:32:12:2d:33:9a:a2: d7:2b:af:e3:e8:5d:09:bf:b5:50:63:c6:f8:e4:11: c1:74:17:88:41:28:8f:10:da:ef:d8:e4:d1:4b:15: 38:89:ef:01:5d:b6:42:64:d2:bd:87:0d:62:ed:ab: 40:29:20:e3:cd:b4:97:ce:ff:fb:4f:4e:2a:2f:cb: 0a:c1:a4:a8:63:fb:33:5b:23:21:d9:34:18:1d:b0: f2:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9F:9B:CD:1A:CF:7D:D8:47:E4:D4:E0:F9:D8:C5:CF:FE:A2:E5:FD:46 X509v3 Authority Key Identifier: keyid:0A:8E:8E:06:37:85:23:84:67:D4:AD:1F:50:7C:C9:7B:30:DB:B9:59 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/f9d6acc6-0af3-4b97-99a4-0f45e8ecf576/0/0A8E8E063785238467D4AD1F507CC97B30DBB959.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0A8E8E063785238467D4AD1F507CC97B30DBB959.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f9d6acc6-0af3-4b97-99a4-0f45e8ecf576/0/0A8E8E063785238467D4AD1F507CC97B30DBB959.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 54:49:59:77:31:29:4f:18:3c:c6:87:41:0c:b7:dd:0f:7f:ed: 05:d1:ae:56:9b:56:d8:e8:7a:f4:41:16:b3:9b:21:ec:c9:ab: 75:7d:54:a2:b8:7b:e4:78:72:22:29:00:ba:a4:97:7e:81:5a: e5:c8:8f:e7:f4:c5:39:b5:be:9c:1a:44:bf:91:ba:1f:a5:2a: 21:a7:0a:e3:ab:82:23:c7:72:d0:24:14:38:9d:94:45:c8:2e: 40:ea:3b:27:f2:4c:bd:c1:71:7a:aa:2a:db:a3:4e:fe:29:64: 96:8f:32:fc:66:7e:64:b0:fa:ca:11:b6:64:6f:ab:97:1d:79: f4:54:98:1f:01:8d:e8:4c:d7:5e:16:6a:ef:38:43:8e:af:5c: ec:9d:eb:35:25:a3:90:7e:c0:58:e8:d3:d0:4e:34:bd:f7:34: f2:09:6f:36:bb:72:a7:b9:46:78:f7:78:97:9d:00:1e:af:51: 30:e3:3f:4b:1e:bd:64:5b:eb:fd:c8:fb:f0:37:71:1d:2c:44: c3:02:fd:b6:ca:52:81:f7:fe:60:e0:f3:ec:e9:fc:58:71:3e: f1:a0:c8:9f:2f:a8:d0:de:05:e8:4f:0b:1f:c1:c9:28:62:c6: 4c:57:e9:16:16:f1:61:34:86:f3:98:85:33:91:de:d5:cd:eb: 56:3e:80:a1 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUFwXEgTzeOghYvjaNYOIxKNsxhXwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMEE4RThFMDYzNzg1MjM4NDY3RDRBRDFGNTA3Q0M5N0Iz MERCQjk1OTAeFw0yNTA4MjMwMzE2MThaFw0yNTA4MjYwNjIyMThaMDMxMTAvBgNV BAMTKDlGOUJDRDFBQ0Y3REQ4NDdFNEQ0RTBGOUQ4QzVDRkZFQTJFNUZENDYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQClNz8swkvxAz4F+Oz/LpPfc1gf cu1iXu3Yh2zdtQJXGxdCXd/TMYMkR1cwjDHcJ/nDpvdTcx4vC7LQxunAcac2ECMj bhLTTntuoFNatH48EuQiZtlEI32HO7wHuoy9KgKftRdoiu+YlpDGE3Th1SMt0JAG 9QzOy0/B1crtfiaGicOTWakSIf68kuHtjhds5aKSwTlQYfs9BeJw6rknZ+udZggu ol3haWnie2vgeDISLTOaotcrr+PoXQm/tVBjxvjkEcF0F4hBKI8Q2u/Y5NFLFTiJ 7wFdtkJk0r2HDWLtq0ApIOPNtJfO//tPTiovywrBpKhj+zNbIyHZNBgdsPLJAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUn5vNGs992Efk1OD52MXP/qLl/UYwHwYDVR0j BBgwFoAUCo6OBjeFI4Rn1K0fUHzJezDbuVkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m OWQ2YWNjNi0wYWYzLTRiOTctOTlhNC0wZjQ1ZThlY2Y1NzYvMC8wQThFOEUwNjM3 ODUyMzg0NjdENEFEMUY1MDdDQzk3QjMwREJCOTU5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMEE4RThFMDYzNzg1MjM4NDY3RDRBRDFGNTA3Q0M5N0IzMERC Qjk1OS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZjlkNmFjYzYtMGFmMy00Yjk3LTk5 YTQtMGY0NWU4ZWNmNTc2LzAvMEE4RThFMDYzNzg1MjM4NDY3RDRBRDFGNTA3Q0M5 N0IzMERCQjk1OS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFRJWXcxKU8YPMaHQQy33Q9/7QXRrlabVtjo evRBFrObIezJq3V9VKK4e+R4ciIpALqkl36BWuXIj+f0xTm1vpwaRL+Ruh+lKiGn CuOrgiPHctAkFDidlEXILkDqOyfyTL3BcXqqKtujTv4pZJaPMvxmfmSw+soRtmRv q5cdefRUmB8BjehM114Wau84Q46vXOyd6zUlo5B+wFjo09BONL33NPIJbza7cqe5 Rnj3eJedAB6vUTDjP0sevWRb6/3I+/A3cR0sRMMC/bbKUoH3/mDg8+zp/FhxPvGg yJ8vqNDeBehPCx/ByShixkxX6RYW8WE0hvOYhTOR3tXN61Y+gKE= -----END CERTIFICATE-----Generated at Sat Aug 23 12:16:02 2025 by rpki-client