$ rpki-client -vvf repo-rpki.idnic.net/repo/fc6f0700-9116-4a05-8f6b-d8edafdb72ec/0/8AE8A9B51BDA923FC8956ACB086F56E776D409C8.mft File: 8AE8A9B51BDA923FC8956ACB086F56E776D409C8.mft (raw, json) Hash identifier: PderuWqTkNb9mNy38JA0+9MfWI1YLkgkm57iDsCXhKo= Subject key identifier: 6C:55:B1:89:8C:57:11:77:56:E6:F0:B0:FD:0B:8F:82:30:A4:88:48 Authority key identifier: 8A:E8:A9:B5:1B:DA:92:3F:C8:95:6A:CB:08:6F:56:E7:76:D4:09:C8 Certificate issuer: /CN=8AE8A9B51BDA923FC8956ACB086F56E776D409C8 Certificate serial: 1A0E22FE15D493A9241AC8CF261B74B563629B50 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8AE8A9B51BDA923FC8956ACB086F56E776D409C8.cer Subject info access: rsync://repo-rpki.idnic.net/repo/fc6f0700-9116-4a05-8f6b-d8edafdb72ec/0/8AE8A9B51BDA923FC8956ACB086F56E776D409C8.mft Manifest number: EB Signing time: Sat 23 Aug 2025 00:01:34 +0000 Manifest this update: Fri 22 Aug 2025 23:56:34 +0000 Manifest next update: Tue 26 Aug 2025 04:43:34 +0000 Files and hashes: 1: 3130332e3231302e37302e302f32332d3234203d3e20313530393936.roa (hash: 9twnyIhBB5/nG5JidLHITBuzB/j3WQpuRt6+R8EPn7s=) 2: 8AE8A9B51BDA923FC8956ACB086F56E776D409C8.crl (hash: iXZ8nvakduKdBhIAhKIw7gWTfOnmDgcIL4iI9TNYDcA=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/fc6f0700-9116-4a05-8f6b-d8edafdb72ec/0/8AE8A9B51BDA923FC8956ACB086F56E776D409C8.crl rsync://repo-rpki.idnic.net/repo/fc6f0700-9116-4a05-8f6b-d8edafdb72ec/0/8AE8A9B51BDA923FC8956ACB086F56E776D409C8.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8AE8A9B51BDA923FC8956ACB086F56E776D409C8.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 26 Aug 2025 04:43:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1a:0e:22:fe:15:d4:93:a9:24:1a:c8:cf:26:1b:74:b5:63:62:9b:50 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8AE8A9B51BDA923FC8956ACB086F56E776D409C8 Validity Not Before: Aug 22 23:56:34 2025 GMT Not After : Aug 26 04:43:34 2025 GMT Subject: CN=6C55B1898C57117756E6F0B0FD0B8F8230A48848 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:f8:14:47:cc:38:8e:cd:42:15:fb:90:4a:e5: 28:67:54:25:d3:1c:f5:12:51:fc:24:ae:92:38:f6: 0e:1b:de:30:b8:80:1b:9b:3b:63:b6:5e:1d:07:d1: e2:84:a3:c9:8c:9e:7f:3d:8b:dd:67:fb:50:f7:42: 00:d7:3f:58:c6:bf:64:e8:4e:03:e6:ed:4d:5a:20: ad:fe:e1:f5:01:b8:5a:a9:3f:96:de:90:67:b7:18: 2c:0e:e9:ed:80:3f:93:81:b0:4d:43:3b:94:30:ad: ba:d4:88:72:41:70:d2:bf:d7:54:89:e3:0f:89:3d: 6d:2c:d6:48:d2:17:ed:d2:48:dc:1b:4f:99:27:29: 98:d3:ad:a8:4f:14:e0:b7:47:5a:2a:f9:78:f0:f3: 55:ae:c6:ce:b8:5f:e9:c5:55:c8:5f:a3:36:7c:06: 3c:7e:7a:a8:21:f1:bf:5d:48:7f:75:88:8f:b5:5f: d4:af:5b:74:6d:ac:7c:82:74:ee:f5:57:36:a9:a5: ce:3b:6e:fc:a5:a8:fc:fd:72:2e:c8:83:58:cc:15: aa:17:93:bb:ff:4b:ae:c6:26:b3:53:01:98:cb:bd: 1e:ea:ce:9e:7d:29:cc:c0:95:55:bf:d5:48:c8:72: fd:38:d6:7a:2d:6a:c7:a0:9e:e9:b4:ca:72:77:ff: 30:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6C:55:B1:89:8C:57:11:77:56:E6:F0:B0:FD:0B:8F:82:30:A4:88:48 X509v3 Authority Key Identifier: keyid:8A:E8:A9:B5:1B:DA:92:3F:C8:95:6A:CB:08:6F:56:E7:76:D4:09:C8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/fc6f0700-9116-4a05-8f6b-d8edafdb72ec/0/8AE8A9B51BDA923FC8956ACB086F56E776D409C8.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8AE8A9B51BDA923FC8956ACB086F56E776D409C8.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/fc6f0700-9116-4a05-8f6b-d8edafdb72ec/0/8AE8A9B51BDA923FC8956ACB086F56E776D409C8.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3d:1d:2f:e7:fb:47:21:4a:1e:ad:0a:38:4e:c6:e8:85:c7:e0: ba:7d:18:a6:f1:70:d2:38:4e:16:17:13:9d:92:d5:0c:3f:fa: b9:4d:05:76:5b:22:e5:e3:1e:97:18:f2:c9:d6:97:d2:4c:77: 9c:a1:55:03:b7:8d:35:4c:c2:3f:68:49:74:63:3b:69:bc:e7: cb:b9:1a:3f:d2:06:18:5f:be:a3:ba:3d:eb:50:55:5a:1f:63: 68:b7:07:0b:65:0f:b8:ca:7e:89:ba:72:77:8f:f3:ca:bc:b5: d7:89:2b:ec:83:25:b4:82:37:bd:aa:54:19:5d:4e:9c:c9:08: db:e9:90:89:c1:62:99:73:b2:4b:b0:3d:08:58:73:ce:af:f6: 22:ee:e6:bc:35:f2:da:4b:2f:5a:e3:8b:ee:62:2f:e6:aa:99: 62:cf:77:00:24:51:fd:11:71:a5:e9:83:07:97:56:51:b7:e1: 8a:65:b2:ec:ba:3e:b2:56:6f:7b:7f:8b:81:04:7b:f5:0a:8c: b6:78:04:75:dd:6f:d7:fb:60:0f:62:91:7d:db:23:51:66:30: 1b:2f:64:c9:55:f9:31:5b:67:37:7a:a6:ef:46:81:b8:5f:73: b0:0a:61:55:37:69:f7:2e:27:f6:bd:83:02:cd:c0:ff:bc:20: d1:70:5e:47 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUGg4i/hXUk6kkGsjPJht0tWNim1AwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEFFOEE5QjUxQkRBOTIzRkM4OTU2QUNCMDg2RjU2RTc3 NkQ0MDlDODAeFw0yNTA4MjIyMzU2MzRaFw0yNTA4MjYwNDQzMzRaMDMxMTAvBgNV BAMTKDZDNTVCMTg5OEM1NzExNzc1NkU2RjBCMEZEMEI4RjgyMzBBNDg4NDgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/+BRHzDiOzUIV+5BK5ShnVCXT HPUSUfwkrpI49g4b3jC4gBubO2O2Xh0H0eKEo8mMnn89i91n+1D3QgDXP1jGv2To TgPm7U1aIK3+4fUBuFqpP5bekGe3GCwO6e2AP5OBsE1DO5QwrbrUiHJBcNK/11SJ 4w+JPW0s1kjSF+3SSNwbT5knKZjTrahPFOC3R1oq+Xjw81Wuxs64X+nFVchfozZ8 Bjx+eqgh8b9dSH91iI+1X9SvW3RtrHyCdO71Vzappc47bvylqPz9ci7Ig1jMFaoX k7v/S67GJrNTAZjLvR7qzp59KczAlVW/1UjIcv041notasegnum0ynJ3/zBjAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUbFWxiYxXEXdW5vCw/QuPgjCkiEgwHwYDVR0j BBgwFoAUiuiptRvakj/IlWrLCG9W53bUCcgwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m YzZmMDcwMC05MTE2LTRhMDUtOGY2Yi1kOGVkYWZkYjcyZWMvMC84QUU4QTlCNTFC REE5MjNGQzg5NTZBQ0IwODZGNTZFNzc2RDQwOUM4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOEFFOEE5QjUxQkRBOTIzRkM4OTU2QUNCMDg2RjU2RTc3NkQ0 MDlDOC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZmM2ZjA3MDAtOTExNi00YTA1LThm NmItZDhlZGFmZGI3MmVjLzAvOEFFOEE5QjUxQkRBOTIzRkM4OTU2QUNCMDg2RjU2 RTc3NkQ0MDlDOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAD0dL+f7RyFKHq0KOE7G6IXH4Lp9GKbxcNI4 ThYXE52S1Qw/+rlNBXZbIuXjHpcY8snWl9JMd5yhVQO3jTVMwj9oSXRjO2m858u5 Gj/SBhhfvqO6PetQVVofY2i3BwtlD7jKfom6cneP88q8tdeJK+yDJbSCN72qVBld TpzJCNvpkInBYplzskuwPQhYc86v9iLu5rw18tpLL1rji+5iL+aqmWLPdwAkUf0R caXpgweXVlG34Yplsuy6PrJWb3t/i4EEe/UKjLZ4BHXdb9f7YA9ikX3bI1FmMBsv ZMlV+TFbZzd6pu9Ggbhfc7AKYVU3afcuJ/a9gwLNwP+8INFwXkc= -----END CERTIFICATE-----Generated at Sat Aug 23 10:35:27 2025 by rpki-client