$ rpki-client -vvf repo-rpki.idnic.net/repo/5252ead3-dc8f-4d86-afcf-a140e5b87532/0/8CFB227DA1EF51DB23364BBA034D0F68A09A5F59.mft File: 8CFB227DA1EF51DB23364BBA034D0F68A09A5F59.mft (raw, json) Hash identifier: hMpgqK3RZkYtM9quSF5kwWwlXJHz51vdlDuqE1HmFHM= Subject key identifier: 83:76:A1:93:2F:72:5C:B5:F3:69:7D:83:F0:F6:2C:20:73:9F:A2:46 Authority key identifier: 8C:FB:22:7D:A1:EF:51:DB:23:36:4B:BA:03:4D:0F:68:A0:9A:5F:59 Certificate issuer: /CN=8CFB227DA1EF51DB23364BBA034D0F68A09A5F59 Certificate serial: 514014F9ED109DE3912AD2F86F3D07D578F702DA Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8CFB227DA1EF51DB23364BBA034D0F68A09A5F59.cer Subject info access: rsync://repo-rpki.idnic.net/repo/5252ead3-dc8f-4d86-afcf-a140e5b87532/0/8CFB227DA1EF51DB23364BBA034D0F68A09A5F59.mft Manifest number: 020E Signing time: Sun 20 Jul 2025 01:21:30 +0000 Manifest this update: Sun 20 Jul 2025 01:16:30 +0000 Manifest next update: Wed 23 Jul 2025 01:46:30 +0000 Files and hashes: 1: 8CFB227DA1EF51DB23364BBA034D0F68A09A5F59.crl (hash: +9bvukr9jHT0xsbdocg210RSb/EGYLcw0sSKI1Ts24s=) 2: 3130332e3138362e3139352e302f32342d3234203d3e203438343635.roa (hash: 9nS/psP6uP/NgK0GsDYJioeVISZGFYj6wNXBWyPXoig=) 3: 3130332e3138362e3139342e302f32342d3234203d3e20313439373132.roa (hash: uzPIoUslKlL0kCJ3Mr8GlDHsPvFS4WU5l7ZsMhLtDsU=) 4: 3130332e3138362e3139342e302f32332d3234203d3e20313439373132.roa (hash: S9MFaIq/j9TJ63dOJfnzWaZP6j2QyCQRqTU45iGYFSM=) 5: 3130332e3138362e3139342e302f32342d3234203d3e203438343635.roa (hash: nuw56AWJFQx7bF2mLso7Fp7ypapHW7bx18alMUZHm9U=) 6: 3130332e3138362e3139342e302f32332d3233203d3e20313439373132.roa (hash: swBTOVyl/nQxFd9eqJx6PzMQ7ExSAWTFjV6g64/KqU0=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/5252ead3-dc8f-4d86-afcf-a140e5b87532/0/8CFB227DA1EF51DB23364BBA034D0F68A09A5F59.crl rsync://repo-rpki.idnic.net/repo/5252ead3-dc8f-4d86-afcf-a140e5b87532/0/8CFB227DA1EF51DB23364BBA034D0F68A09A5F59.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8CFB227DA1EF51DB23364BBA034D0F68A09A5F59.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 23 Jul 2025 01:46:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 51:40:14:f9:ed:10:9d:e3:91:2a:d2:f8:6f:3d:07:d5:78:f7:02:da Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8CFB227DA1EF51DB23364BBA034D0F68A09A5F59 Validity Not Before: Jul 20 01:16:30 2025 GMT Not After : Jul 23 01:46:30 2025 GMT Subject: CN=8376A1932F725CB5F3697D83F0F62C20739FA246 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:d4:d6:ab:55:25:cd:86:3f:7c:6a:a3:ab:ba: c4:b9:36:39:fe:eb:4f:db:1d:d1:c3:2c:e2:73:b5: a8:e0:cf:4b:6d:82:83:d1:3b:c4:b1:e2:e5:58:e7: 4c:9c:8a:fb:a1:c8:fb:49:58:2a:8e:9f:57:e1:db: 8d:ff:ea:fd:a7:04:5d:2e:35:06:50:f1:f8:ae:bc: f8:c8:32:46:ff:6c:64:25:03:69:9f:17:d7:49:68: 78:d1:af:98:9e:09:3f:6a:6a:18:4f:38:1c:18:e4: 2b:da:f4:be:0b:05:8d:57:8d:eb:69:e3:9c:bc:77: 24:dc:17:3c:c6:71:07:6a:d9:27:73:ed:fc:cb:79: 78:fc:c9:60:b2:5a:c7:08:b0:5b:82:3c:c2:45:cb: e2:62:f3:ed:65:89:50:c5:55:6f:6b:e6:28:06:e7: c8:b1:4a:d3:08:58:0e:0d:fa:89:55:2b:e3:5a:32: 16:5c:68:5b:af:f8:63:62:b0:cc:90:19:fb:93:83: 11:63:43:d4:b9:56:e5:c6:9d:db:2b:27:41:6d:cc: 34:6f:c4:95:76:10:01:e9:43:54:8e:66:4d:95:7d: 12:01:ab:85:0b:2b:b9:17:21:fe:2b:70:a5:60:99: ac:68:5b:2e:1a:c4:62:49:ab:8c:3e:f8:d2:72:bd: f0:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 83:76:A1:93:2F:72:5C:B5:F3:69:7D:83:F0:F6:2C:20:73:9F:A2:46 X509v3 Authority Key Identifier: keyid:8C:FB:22:7D:A1:EF:51:DB:23:36:4B:BA:03:4D:0F:68:A0:9A:5F:59 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/5252ead3-dc8f-4d86-afcf-a140e5b87532/0/8CFB227DA1EF51DB23364BBA034D0F68A09A5F59.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8CFB227DA1EF51DB23364BBA034D0F68A09A5F59.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/5252ead3-dc8f-4d86-afcf-a140e5b87532/0/8CFB227DA1EF51DB23364BBA034D0F68A09A5F59.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption be:ba:b2:87:53:78:cf:e8:1f:f4:95:67:ea:24:f5:d7:1c:de: c6:6b:cd:a0:03:fd:53:57:61:d7:7a:34:c3:d0:47:ca:9d:39: d8:6f:eb:7b:30:4c:f3:58:37:2f:7d:f1:fb:af:e3:66:79:b2: f3:ea:56:a8:f0:e1:3a:b4:4f:bf:b2:79:21:53:c8:c8:ba:9f: 69:64:4a:36:ae:8c:7a:d1:93:ac:52:ae:be:c4:88:18:7a:e7: 50:aa:61:45:36:d3:60:0e:84:55:d1:5e:43:5d:7b:99:d6:56: c1:e8:50:03:c8:9f:da:ab:35:eb:13:1a:19:b2:27:d4:e6:52: 4a:84:7e:16:31:80:c9:1d:de:9e:23:42:a4:4d:82:fa:b3:ba: c7:f4:a8:c6:ff:82:5b:36:92:ff:43:56:ab:dd:4c:0c:0a:10: 0d:e7:69:d7:a0:08:9d:e2:b1:b4:8f:a0:aa:92:1f:07:6f:58: 94:4c:73:2c:b3:c9:37:7b:d5:da:c3:2d:f2:a7:0b:28:c1:d1: 17:d7:63:23:54:88:35:2b:28:17:74:94:96:b8:e3:2a:93:f4: 4f:22:d0:ce:9d:ae:8d:ab:e9:05:8a:5c:99:ae:21:56:35:b7: 08:bd:0c:dd:7e:ac:6a:cf:40:ae:6f:65:b2:e3:64:b3:0a:5f: 46:2d:08:a4 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUUUAU+e0QneORKtL4bz0H1Xj3AtowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOENGQjIyN0RBMUVGNTFEQjIzMzY0QkJBMDM0RDBGNjhB MDlBNUY1OTAeFw0yNTA3MjAwMTE2MzBaFw0yNTA3MjMwMTQ2MzBaMDMxMTAvBgNV BAMTKDgzNzZBMTkzMkY3MjVDQjVGMzY5N0Q4M0YwRjYyQzIwNzM5RkEyNDYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC91NarVSXNhj98aqOrusS5Njn+ 60/bHdHDLOJztajgz0ttgoPRO8Sx4uVY50ycivuhyPtJWCqOn1fh243/6v2nBF0u NQZQ8fiuvPjIMkb/bGQlA2mfF9dJaHjRr5ieCT9qahhPOBwY5Cva9L4LBY1Xjetp 45y8dyTcFzzGcQdq2Sdz7fzLeXj8yWCyWscIsFuCPMJFy+Ji8+1liVDFVW9r5igG 58ixStMIWA4N+olVK+NaMhZcaFuv+GNisMyQGfuTgxFjQ9S5VuXGndsrJ0FtzDRv xJV2EAHpQ1SOZk2VfRIBq4ULK7kXIf4rcKVgmaxoWy4axGJJq4w++NJyvfC3AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUg3ahky9yXLXzaX2D8PYsIHOfokYwHwYDVR0j BBgwFoAUjPsifaHvUdsjNku6A00PaKCaX1kwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 MjUyZWFkMy1kYzhmLTRkODYtYWZjZi1hMTQwZTViODc1MzIvMC84Q0ZCMjI3REEx RUY1MURCMjMzNjRCQkEwMzREMEY2OEEwOUE1RjU5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOENGQjIyN0RBMUVGNTFEQjIzMzY0QkJBMDM0RDBGNjhBMDlB NUY1OS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNTI1MmVhZDMtZGM4Zi00ZDg2LWFm Y2YtYTE0MGU1Yjg3NTMyLzAvOENGQjIyN0RBMUVGNTFEQjIzMzY0QkJBMDM0RDBG NjhBMDlBNUY1OS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAL66sodTeM/oH/SVZ+ok9dcc3sZrzaAD/VNX Ydd6NMPQR8qdOdhv63swTPNYNy998fuv42Z5svPqVqjw4Tq0T7+yeSFTyMi6n2lk SjaujHrRk6xSrr7EiBh651CqYUU202AOhFXRXkNde5nWVsHoUAPIn9qrNesTGhmy J9TmUkqEfhYxgMkd3p4jQqRNgvqzusf0qMb/gls2kv9DVqvdTAwKEA3nadegCJ3i sbSPoKqSHwdvWJRMcyyzyTd71drDLfKnCyjB0RfXYyNUiDUrKBd0lJa44yqT9E8i 0M6dro2r6QWKXJmuIVY1twi9DN1+rGrPQK5vZbLjZLMKX0YtCKQ= -----END CERTIFICATE-----Generated at Mon Jul 21 07:28:00 2025 by rpki-client