$ rpki-client -vvf repo-rpki.idnic.net/repo/42083d44-7835-443d-853a-0a79cf00e950/0/08A94FD7F0E8A287AD318D7A26254192431E175F.mft File: 08A94FD7F0E8A287AD318D7A26254192431E175F.mft (raw, json) Hash identifier: AWf6lhlCC/apK3nxn4JX1EAZDxgJBHEMQX+f+nskuIA= Subject key identifier: 8C:97:61:99:61:8A:E2:77:7E:89:91:C2:86:6C:16:5F:04:F1:28:6C Authority key identifier: 08:A9:4F:D7:F0:E8:A2:87:AD:31:8D:7A:26:25:41:92:43:1E:17:5F Certificate issuer: /CN=08A94FD7F0E8A287AD318D7A26254192431E175F Certificate serial: 0E3BEC3EF7272D6A14F31FE37ABE2461F3BB2CBF Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/08A94FD7F0E8A287AD318D7A26254192431E175F.cer Subject info access: rsync://repo-rpki.idnic.net/repo/42083d44-7835-443d-853a-0a79cf00e950/0/08A94FD7F0E8A287AD318D7A26254192431E175F.mft Manifest number: 01B2 Signing time: Mon 21 Jul 2025 09:20:37 +0000 Manifest this update: Mon 21 Jul 2025 09:15:37 +0000 Manifest next update: Thu 24 Jul 2025 11:06:37 +0000 Files and hashes: 1: 3130332e34332e32352e302f32342d3234203d3e20313339343139.roa (hash: qjzhR95ymw0taG0t2O442+cnY2VZL01g0Ypqud4E2Io=) 2: 3130332e34332e32342e302f32342d3234203d3e20313339343139.roa (hash: n37UknBhv1+9WuSxzltTO8fZT8WF7d4rSmL/iPmFdNo=) 3: 08A94FD7F0E8A287AD318D7A26254192431E175F.crl (hash: Jjn+aPbG8uWgCa61TJkZSz9YGRoONeRLU2YiN/WtmYA=) 4: 3130332e34332e32342e302f32332d3233203d3e20313339343139.roa (hash: hbNG6hIOkdyYmaAkCW7DcbNe2DcTn/F6KWsqvk9yDQk=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/42083d44-7835-443d-853a-0a79cf00e950/0/08A94FD7F0E8A287AD318D7A26254192431E175F.crl rsync://repo-rpki.idnic.net/repo/42083d44-7835-443d-853a-0a79cf00e950/0/08A94FD7F0E8A287AD318D7A26254192431E175F.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/08A94FD7F0E8A287AD318D7A26254192431E175F.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 24 Jul 2025 11:06:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0e:3b:ec:3e:f7:27:2d:6a:14:f3:1f:e3:7a:be:24:61:f3:bb:2c:bf Signature Algorithm: sha256WithRSAEncryption Issuer: CN=08A94FD7F0E8A287AD318D7A26254192431E175F Validity Not Before: Jul 21 09:15:37 2025 GMT Not After : Jul 24 11:06:37 2025 GMT Subject: CN=8C976199618AE2777E8991C2866C165F04F1286C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:c1:57:70:50:39:aa:30:d0:9c:e7:85:74:f3: 8a:f7:d8:b8:cb:ef:ae:4c:0e:98:fe:93:19:e9:97: 0e:2c:58:b1:b7:43:ed:2b:f7:bb:ca:0e:35:f7:0f: 45:62:4a:e5:88:fe:b5:08:bc:5a:7f:fc:ca:d7:f9: 99:7f:fc:b1:86:69:12:df:53:f9:2e:af:0d:4f:d6: ac:2f:3c:bd:65:1b:88:e0:2a:ce:6b:47:33:d1:b9: 82:bd:41:cb:1a:d3:f3:70:3d:0d:bf:10:36:a4:ed: 82:e4:a3:b7:dd:88:71:24:c4:84:d2:1c:2b:ce:ab: 43:e6:2f:4f:aa:6f:87:30:bc:e6:16:01:95:27:16: 47:04:b2:9d:40:70:4e:cd:7c:57:f5:09:45:03:7e: 2f:fa:1a:93:86:92:98:62:d0:a4:70:8b:1f:1c:36: 78:7c:d7:4d:91:10:ec:63:03:f4:37:2d:88:f7:9b: 40:6d:2b:cf:1b:88:77:d7:c1:19:85:6b:f7:4b:db: c8:4a:75:ac:28:64:e3:bf:9f:c9:61:88:ec:04:e2: b2:bd:aa:89:00:22:67:68:ee:88:19:e0:92:25:59: 96:04:7b:8a:9c:d7:b3:02:33:0c:93:8a:d2:dd:0c: 79:ec:b8:f8:52:78:69:c7:c3:b0:bf:50:cd:68:fb: c5:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8C:97:61:99:61:8A:E2:77:7E:89:91:C2:86:6C:16:5F:04:F1:28:6C X509v3 Authority Key Identifier: keyid:08:A9:4F:D7:F0:E8:A2:87:AD:31:8D:7A:26:25:41:92:43:1E:17:5F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/42083d44-7835-443d-853a-0a79cf00e950/0/08A94FD7F0E8A287AD318D7A26254192431E175F.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/08A94FD7F0E8A287AD318D7A26254192431E175F.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/42083d44-7835-443d-853a-0a79cf00e950/0/08A94FD7F0E8A287AD318D7A26254192431E175F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4d:e0:5c:df:6b:f5:4b:ec:49:ae:05:8f:59:e0:30:97:50:d4: 91:e1:b0:30:cb:e4:c2:2c:49:71:6c:5e:43:a2:5b:c3:d1:2b: 1a:d8:d4:72:fc:7f:dd:47:47:bc:48:c5:72:c1:94:71:7a:8a: 66:36:d1:2f:be:55:02:3e:3d:56:6e:b2:e8:d6:ce:48:9f:be: 2d:c5:86:93:dc:a0:c3:1b:ea:e8:7d:bb:c4:e9:4e:a6:94:5f: 6b:54:66:a3:d1:0b:6b:f1:ee:13:71:e8:64:5c:c2:5e:fc:8e: 4e:88:1a:ac:f4:8c:d8:59:36:a8:cb:db:1e:58:75:56:09:8d: 7b:1b:a9:0c:2e:ec:4f:89:7b:11:c9:42:da:d5:d7:57:e1:4b: 42:86:49:72:00:4d:44:ef:e5:dc:cc:ef:c9:df:a4:f1:26:e8: 65:c0:f3:a4:9b:ae:61:38:ff:5c:83:d5:cc:2c:ac:bd:cf:71: 41:6d:6b:c4:9c:fb:41:ef:1a:bb:08:63:b9:70:90:80:94:73: 97:6c:0c:1a:09:d9:94:16:6a:e1:1e:1d:5a:09:c7:34:cb:e5: ca:94:a9:fb:a4:2f:1e:f2:e9:0b:29:07:1a:9d:08:09:46:3d: d9:7b:9c:48:cc:dd:c0:41:66:f2:4d:ef:68:68:d5:ed:f0:37: f1:7d:ae:c8 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUDjvsPvcnLWoU8x/jer4kYfO7LL8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDhBOTRGRDdGMEU4QTI4N0FEMzE4RDdBMjYyNTQxOTI0 MzFFMTc1RjAeFw0yNTA3MjEwOTE1MzdaFw0yNTA3MjQxMTA2MzdaMDMxMTAvBgNV BAMTKDhDOTc2MTk5NjE4QUUyNzc3RTg5OTFDMjg2NkMxNjVGMDRGMTI4NkMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCpwVdwUDmqMNCc54V084r32LjL 765MDpj+kxnplw4sWLG3Q+0r97vKDjX3D0ViSuWI/rUIvFp//MrX+Zl//LGGaRLf U/kurw1P1qwvPL1lG4jgKs5rRzPRuYK9Qcsa0/NwPQ2/EDak7YLko7fdiHEkxITS HCvOq0PmL0+qb4cwvOYWAZUnFkcEsp1AcE7NfFf1CUUDfi/6GpOGkphi0KRwix8c Nnh8102REOxjA/Q3LYj3m0BtK88biHfXwRmFa/dL28hKdawoZOO/n8lhiOwE4rK9 qokAImdo7ogZ4JIlWZYEe4qc17MCMwyTitLdDHnsuPhSeGnHw7C/UM1o+8X1AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUjJdhmWGK4nd+iZHChmwWXwTxKGwwHwYDVR0j BBgwFoAUCKlP1/DoooetMY16JiVBkkMeF18wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 MjA4M2Q0NC03ODM1LTQ0M2QtODUzYS0wYTc5Y2YwMGU5NTAvMC8wOEE5NEZEN0Yw RThBMjg3QUQzMThEN0EyNjI1NDE5MjQzMUUxNzVGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMDhBOTRGRDdGMEU4QTI4N0FEMzE4RDdBMjYyNTQxOTI0MzFF MTc1Ri5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNDIwODNkNDQtNzgzNS00NDNkLTg1 M2EtMGE3OWNmMDBlOTUwLzAvMDhBOTRGRDdGMEU4QTI4N0FEMzE4RDdBMjYyNTQx OTI0MzFFMTc1Ri5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAE3gXN9r9UvsSa4Fj1ngMJdQ1JHhsDDL5MIs SXFsXkOiW8PRKxrY1HL8f91HR7xIxXLBlHF6imY20S++VQI+PVZusujWzkifvi3F hpPcoMMb6uh9u8TpTqaUX2tUZqPRC2vx7hNx6GRcwl78jk6IGqz0jNhZNqjL2x5Y dVYJjXsbqQwu7E+JexHJQtrV11fhS0KGSXIATUTv5dzM78nfpPEm6GXA86SbrmE4 /1yD1cwsrL3PcUFta8Sc+0HvGrsIY7lwkICUc5dsDBoJ2ZQWauEeHVoJxzTL5cqU qfukLx7y6QspBxqdCAlGPdl7nEjM3cBBZvJN72ho1e3wN/F9rsg= -----END CERTIFICATE-----Generated at Wed Jul 23 02:17:39 2025 by rpki-client