$ rpki-client -vvf repo-rpki.idnic.net/repo/fbb5fa4a-bea6-464f-b409-11d9a3761a6c/1/8D4158039A86C34D5D36A83DDC40C959EDA21342.mft File: 8D4158039A86C34D5D36A83DDC40C959EDA21342.mft (raw, json) Hash identifier: VgSA6RRmGFq+itr2WRCdPk/hKC3CaCjM1EgROEoaLKs= Subject key identifier: F3:0A:C5:AC:1E:63:90:87:A2:51:F9:DA:16:3A:02:4B:94:A4:99:DE Authority key identifier: 8D:41:58:03:9A:86:C3:4D:5D:36:A8:3D:DC:40:C9:59:ED:A2:13:42 Certificate issuer: /CN=8D4158039A86C34D5D36A83DDC40C959EDA21342 Certificate serial: 7CE4767102BAF3174B9F97A7F70A1E43218D3C9E Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8D4158039A86C34D5D36A83DDC40C959EDA21342.cer Subject info access: rsync://repo-rpki.idnic.net/repo/fbb5fa4a-bea6-464f-b409-11d9a3761a6c/1/8D4158039A86C34D5D36A83DDC40C959EDA21342.mft Manifest number: B9 Signing time: Fri 22 Aug 2025 03:41:09 +0000 Manifest this update: Fri 22 Aug 2025 03:36:09 +0000 Manifest next update: Mon 25 Aug 2025 04:05:09 +0000 Files and hashes: 1: 8D4158039A86C34D5D36A83DDC40C959EDA21342.crl (hash: Es3JFDZUAJmTZ24H7bD8HYUxFsE5VVE9g2hZ3JI9dE8=) 2: 323030313a6466333a643363303a3a2f34382d3438203d3e20313532373930.roa (hash: XrGI552jWV7sNKcYT4/cR05JGNQdxhyBqphUE36lIJ0=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/fbb5fa4a-bea6-464f-b409-11d9a3761a6c/1/8D4158039A86C34D5D36A83DDC40C959EDA21342.crl rsync://repo-rpki.idnic.net/repo/fbb5fa4a-bea6-464f-b409-11d9a3761a6c/1/8D4158039A86C34D5D36A83DDC40C959EDA21342.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8D4158039A86C34D5D36A83DDC40C959EDA21342.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 25 Aug 2025 04:05:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7c:e4:76:71:02:ba:f3:17:4b:9f:97:a7:f7:0a:1e:43:21:8d:3c:9e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8D4158039A86C34D5D36A83DDC40C959EDA21342 Validity Not Before: Aug 22 03:36:09 2025 GMT Not After : Aug 25 04:05:09 2025 GMT Subject: CN=F30AC5AC1E639087A251F9DA163A024B94A499DE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:c6:15:09:26:75:3b:6e:8b:4f:ad:e0:a7:2c: 93:62:29:b7:48:1a:16:61:70:6d:3a:55:a0:7d:ca: a6:60:5b:ac:ab:d5:82:f1:7a:bf:9a:e2:56:61:2d: bd:93:53:aa:b7:f5:10:cc:ef:00:d9:11:28:e0:40: 01:12:6b:df:d3:ee:dc:37:01:5e:70:d3:f1:54:af: ae:f0:4d:82:33:36:ec:01:d9:41:b3:93:ec:71:e3: d1:7e:40:e9:4c:0e:a6:bc:15:47:1a:18:57:84:f7: 5e:2d:5a:19:47:04:d2:d4:53:d3:84:96:6a:4b:97: f9:d6:fe:9e:44:6f:6a:8c:89:46:d5:36:88:ce:ce: 8f:86:8f:77:df:6d:58:1c:89:7e:0a:2a:c9:a7:92: 08:26:24:7a:59:6e:41:cc:96:f0:e5:5e:63:be:52: 6a:f3:6b:58:cf:7d:78:11:64:58:22:33:5c:52:62: ac:68:e5:2c:91:c9:48:e4:15:0e:c9:7d:22:3a:bf: eb:fc:3d:38:af:65:52:1a:95:4e:a5:e8:cd:90:ab: 8c:eb:8b:12:ec:43:e4:08:49:a4:cb:f3:5c:72:48: db:9f:8f:2f:8c:ee:20:c8:24:a8:7b:90:8b:65:a6: be:f9:e4:01:89:ba:e8:b4:2d:6c:25:af:c8:83:9a: df:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F3:0A:C5:AC:1E:63:90:87:A2:51:F9:DA:16:3A:02:4B:94:A4:99:DE X509v3 Authority Key Identifier: keyid:8D:41:58:03:9A:86:C3:4D:5D:36:A8:3D:DC:40:C9:59:ED:A2:13:42 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/fbb5fa4a-bea6-464f-b409-11d9a3761a6c/1/8D4158039A86C34D5D36A83DDC40C959EDA21342.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8D4158039A86C34D5D36A83DDC40C959EDA21342.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/fbb5fa4a-bea6-464f-b409-11d9a3761a6c/1/8D4158039A86C34D5D36A83DDC40C959EDA21342.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 75:cd:96:b7:31:a0:e6:e0:08:dd:e4:c3:06:50:74:a8:69:65: b6:cb:bb:c9:35:c1:82:88:b4:1e:7c:9a:95:47:3c:79:9e:51: 90:67:49:18:ca:6d:22:9d:b7:0a:89:f3:f8:bf:43:00:37:fd: 72:fc:e9:7f:44:3f:20:4d:82:ed:ec:3b:a4:27:70:05:32:4a: e5:2c:4c:1c:99:58:46:9b:f8:b2:72:54:da:ac:f0:4b:78:97: f6:1f:c6:a6:b7:f4:13:ef:12:98:5c:b6:17:a9:17:49:18:e3: e4:f6:35:8d:a7:c5:67:dd:2f:cd:41:7c:b3:5f:aa:86:ee:d2: 9e:04:36:e4:6b:0e:66:59:35:df:43:7c:5d:19:b3:68:54:65: a3:2c:ed:79:93:70:99:af:8c:8a:15:f7:70:c6:80:30:3c:69: 93:bf:04:2f:73:fc:77:cc:80:83:90:4d:84:69:f3:e0:ac:87: 03:de:99:24:10:88:c4:09:3e:d3:4e:05:c2:ce:79:74:e6:1a: 63:07:0a:6e:67:ab:7d:c8:74:51:0f:ab:08:29:56:10:17:2a: fa:ff:bf:a6:b3:28:08:76:e0:fc:33:16:06:9e:89:74:ce:5c: ec:26:47:be:f1:d8:5c:a1:b2:87:64:14:7c:3d:b2:be:c7:33: 14:c6:49:3d -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUfOR2cQK68xdLn5en9woeQyGNPJ4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEQ0MTU4MDM5QTg2QzM0RDVEMzZBODNEREM0MEM5NTlF REEyMTM0MjAeFw0yNTA4MjIwMzM2MDlaFw0yNTA4MjUwNDA1MDlaMDMxMTAvBgNV BAMTKEYzMEFDNUFDMUU2MzkwODdBMjUxRjlEQTE2M0EwMjRCOTRBNDk5REUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDIxhUJJnU7botPreCnLJNiKbdI GhZhcG06VaB9yqZgW6yr1YLxer+a4lZhLb2TU6q39RDM7wDZESjgQAESa9/T7tw3 AV5w0/FUr67wTYIzNuwB2UGzk+xx49F+QOlMDqa8FUcaGFeE914tWhlHBNLUU9OE lmpLl/nW/p5Eb2qMiUbVNojOzo+Gj3ffbVgciX4KKsmnkggmJHpZbkHMlvDlXmO+ Umrza1jPfXgRZFgiM1xSYqxo5SyRyUjkFQ7JfSI6v+v8PTivZVIalU6l6M2Qq4zr ixLsQ+QISaTL81xySNufjy+M7iDIJKh7kItlpr755AGJuui0LWwlr8iDmt/PAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU8wrFrB5jkIeiUfnaFjoCS5Skmd4wHwYDVR0j BBgwFoAUjUFYA5qGw01dNqg93EDJWe2iE0IwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m YmI1ZmE0YS1iZWE2LTQ2NGYtYjQwOS0xMWQ5YTM3NjFhNmMvMS84RDQxNTgwMzlB ODZDMzRENUQzNkE4M0REQzQwQzk1OUVEQTIxMzQyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOEQ0MTU4MDM5QTg2QzM0RDVEMzZBODNEREM0MEM5NTlFREEy MTM0Mi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZmJiNWZhNGEtYmVhNi00NjRmLWI0 MDktMTFkOWEzNzYxYTZjLzEvOEQ0MTU4MDM5QTg2QzM0RDVEMzZBODNEREM0MEM5 NTlFREEyMTM0Mi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHXNlrcxoObgCN3kwwZQdKhpZbbLu8k1wYKI tB58mpVHPHmeUZBnSRjKbSKdtwqJ8/i/QwA3/XL86X9EPyBNgu3sO6QncAUySuUs TByZWEab+LJyVNqs8Et4l/Yfxqa39BPvEphcthepF0kY4+T2NY2nxWfdL81BfLNf qobu0p4ENuRrDmZZNd9DfF0Zs2hUZaMs7XmTcJmvjIoV93DGgDA8aZO/BC9z/HfM gIOQTYRp8+CshwPemSQQiMQJPtNOBcLOeXTmGmMHCm5nq33IdFEPqwgpVhAXKvr/ v6azKAh24PwzFgaeiXTOXOwmR77x2FyhsodkFHw9sr7HMxTGST0= -----END CERTIFICATE-----Generated at Sat Aug 23 12:02:49 2025 by rpki-client