$ rpki-client -vvf repo-rpki.idnic.net/repo/8a66f350-e642-402f-8ac3-6aef7e11aac3/0/9852ABB8508DE551F1723BC9AC5EC39B35056AE2.mft File: 9852ABB8508DE551F1723BC9AC5EC39B35056AE2.mft (raw, json) Hash identifier: JOlFFId6qmetqiq500t8y1T4WoFEmJfkuThLu95882Q= Subject key identifier: 8A:BF:E2:E0:0A:D0:B7:B0:AD:25:59:56:FE:DE:5E:28:1D:6A:3F:21 Authority key identifier: 98:52:AB:B8:50:8D:E5:51:F1:72:3B:C9:AC:5E:C3:9B:35:05:6A:E2 Certificate issuer: /CN=9852ABB8508DE551F1723BC9AC5EC39B35056AE2 Certificate serial: 799EF238B89417F444BE680272AFEE3AB2FFA085 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9852ABB8508DE551F1723BC9AC5EC39B35056AE2.cer Subject info access: rsync://repo-rpki.idnic.net/repo/8a66f350-e642-402f-8ac3-6aef7e11aac3/0/9852ABB8508DE551F1723BC9AC5EC39B35056AE2.mft Manifest number: 04F3 Signing time: Tue 22 Jul 2025 23:31:55 +0000 Manifest this update: Tue 22 Jul 2025 23:26:55 +0000 Manifest next update: Sat 26 Jul 2025 11:11:55 +0000 Files and hashes: 1: 323030313a6466343a366430303a3a2f34382d3438203d3e20313337333734.roa (hash: 415EQue+5BmAk6tXc9Eh3zzXOH8qdWNQfAsbBNLYlC0=) 2: 3130332e3131302e3138342e302f32332d3234203d3e20313337333734.roa (hash: t6DqUPB7zlmhbQqkH/Czn9ueyAzHtFeCOGR6aaj9LSw=) 3: 9852ABB8508DE551F1723BC9AC5EC39B35056AE2.crl (hash: GCOs3Xzt5N1MWarBmRPI5ZCvqnzegGolX1tEfVGLgeI=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/8a66f350-e642-402f-8ac3-6aef7e11aac3/0/9852ABB8508DE551F1723BC9AC5EC39B35056AE2.crl rsync://repo-rpki.idnic.net/repo/8a66f350-e642-402f-8ac3-6aef7e11aac3/0/9852ABB8508DE551F1723BC9AC5EC39B35056AE2.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9852ABB8508DE551F1723BC9AC5EC39B35056AE2.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Jul 2025 11:11:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 79:9e:f2:38:b8:94:17:f4:44:be:68:02:72:af:ee:3a:b2:ff:a0:85 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9852ABB8508DE551F1723BC9AC5EC39B35056AE2 Validity Not Before: Jul 22 23:26:55 2025 GMT Not After : Jul 26 11:11:55 2025 GMT Subject: CN=8ABFE2E00AD0B7B0AD255956FEDE5E281D6A3F21 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:f3:e7:21:2e:92:1e:de:3a:11:f8:a3:18:d2: b6:48:de:17:3a:a0:e4:38:1f:79:38:19:e4:ec:ba: 6e:f7:45:00:8c:1a:c0:1c:60:93:ed:c9:8f:fb:f3: 4c:a2:2f:ba:b9:0e:f4:66:18:aa:80:fb:91:a4:92: 64:87:00:7c:b5:c9:c8:f9:1c:0f:12:54:e8:56:83: 55:fb:3c:56:3c:9f:fc:19:43:28:dd:95:58:78:92: aa:b7:7c:10:c0:c1:b1:bc:9a:90:ae:12:0c:23:21: 44:f6:7b:90:c1:af:4a:6f:48:11:24:77:ad:1f:ee: bf:7c:4d:18:7f:d0:6d:a2:a1:bf:2a:d7:43:2a:1f: ca:4e:fa:bf:d7:52:18:cf:d8:5b:1d:50:3a:5a:d6: 43:63:05:dd:5f:de:0b:78:76:e2:45:29:7d:a9:42: a0:e2:97:8f:6f:9f:54:5a:b4:de:8e:1a:08:ee:2d: 31:63:e2:02:c7:59:f2:3b:c7:65:af:ca:01:69:75: 55:46:ad:3e:9b:d3:a2:22:d3:ef:6e:d7:93:b0:f7: b5:f2:a2:a3:21:d1:6c:47:34:72:29:53:d0:b3:24: d3:09:cc:c8:51:01:a9:e4:a0:c3:09:4d:cd:da:01: 86:d1:06:22:91:ae:f7:5b:64:97:de:15:26:8f:43: ce:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:BF:E2:E0:0A:D0:B7:B0:AD:25:59:56:FE:DE:5E:28:1D:6A:3F:21 X509v3 Authority Key Identifier: keyid:98:52:AB:B8:50:8D:E5:51:F1:72:3B:C9:AC:5E:C3:9B:35:05:6A:E2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/8a66f350-e642-402f-8ac3-6aef7e11aac3/0/9852ABB8508DE551F1723BC9AC5EC39B35056AE2.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9852ABB8508DE551F1723BC9AC5EC39B35056AE2.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/8a66f350-e642-402f-8ac3-6aef7e11aac3/0/9852ABB8508DE551F1723BC9AC5EC39B35056AE2.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3d:d3:94:a9:81:ae:32:62:c2:0b:93:99:58:e9:6c:29:27:93: 5b:4a:83:3f:b1:9a:d8:a8:95:fb:f8:33:de:ca:bf:66:30:e8: 90:f0:10:af:53:75:ed:1d:59:e8:df:8e:d6:60:cf:cf:49:07: 32:9f:be:26:13:ae:f2:32:b6:a1:7e:34:7e:d8:2f:0b:f1:0e: a8:8f:e1:91:cf:aa:f4:e7:fa:18:90:58:77:ee:a0:b8:fa:1a: af:33:2b:92:d0:c9:ff:05:3e:0c:67:dc:da:f1:fe:20:c5:0b: 3d:4a:6e:26:9a:c8:fe:91:24:8f:01:97:36:2a:d8:f7:eb:2d: 78:7d:54:07:c1:6f:e0:2e:9e:e4:f4:a3:97:3b:29:0c:2e:c8: bf:0f:84:95:76:f5:59:ea:4c:07:8c:fb:13:7c:71:7e:ac:20: 07:a3:87:4d:d6:4d:a8:ad:fa:6a:04:b2:c0:22:5d:4f:1f:02: 4b:ad:08:0f:f4:38:d5:73:d9:e0:7c:66:0e:d1:6c:33:e9:19: d2:e1:3a:9d:99:9e:d5:e4:ec:f0:fd:70:a5:a5:3c:6d:2a:7f: 98:6c:74:94:0e:25:ca:4e:1b:ca:3d:bb:b0:07:76:2f:50:0b: 00:28:df:00:19:2b:e9:81:9f:65:29:df:d9:69:c4:42:0a:2a: 1f:9d:67:ae -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUeZ7yOLiUF/REvmgCcq/uOrL/oIUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTg1MkFCQjg1MDhERTU1MUYxNzIzQkM5QUM1RUMzOUIz NTA1NkFFMjAeFw0yNTA3MjIyMzI2NTVaFw0yNTA3MjYxMTExNTVaMDMxMTAvBgNV BAMTKDhBQkZFMkUwMEFEMEI3QjBBRDI1NTk1NkZFREU1RTI4MUQ2QTNGMjEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDE8+chLpIe3joR+KMY0rZI3hc6 oOQ4H3k4GeTsum73RQCMGsAcYJPtyY/780yiL7q5DvRmGKqA+5GkkmSHAHy1ycj5 HA8SVOhWg1X7PFY8n/wZQyjdlVh4kqq3fBDAwbG8mpCuEgwjIUT2e5DBr0pvSBEk d60f7r98TRh/0G2iob8q10MqH8pO+r/XUhjP2FsdUDpa1kNjBd1f3gt4duJFKX2p QqDil49vn1RatN6OGgjuLTFj4gLHWfI7x2WvygFpdVVGrT6b06Ii0+9u15Ow97Xy oqMh0WxHNHIpU9CzJNMJzMhRAankoMMJTc3aAYbRBiKRrvdbZJfeFSaPQ85TAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUir/i4ArQt7CtJVlW/t5eKB1qPyEwHwYDVR0j BBgwFoAUmFKruFCN5VHxcjvJrF7DmzUFauIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 YTY2ZjM1MC1lNjQyLTQwMmYtOGFjMy02YWVmN2UxMWFhYzMvMC85ODUyQUJCODUw OERFNTUxRjE3MjNCQzlBQzVFQzM5QjM1MDU2QUUyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOTg1MkFCQjg1MDhERTU1MUYxNzIzQkM5QUM1RUMzOUIzNTA1 NkFFMi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOGE2NmYzNTAtZTY0Mi00MDJmLThh YzMtNmFlZjdlMTFhYWMzLzAvOTg1MkFCQjg1MDhERTU1MUYxNzIzQkM5QUM1RUMz OUIzNTA1NkFFMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAD3TlKmBrjJiwguTmVjpbCknk1tKgz+xmtio lfv4M97Kv2Yw6JDwEK9Tde0dWejfjtZgz89JBzKfviYTrvIytqF+NH7YLwvxDqiP 4ZHPqvTn+hiQWHfuoLj6Gq8zK5LQyf8FPgxn3Nrx/iDFCz1KbiaayP6RJI8BlzYq 2PfrLXh9VAfBb+AunuT0o5c7KQwuyL8PhJV29VnqTAeM+xN8cX6sIAejh03WTait +moEssAiXU8fAkutCA/0ONVz2eB8Zg7RbDPpGdLhOp2ZntXk7PD9cKWlPG0qf5hs dJQOJcpOG8o9u7AHdi9QCwAo3wAZK+mBn2Up39lpxEIKKh+dZ64= -----END CERTIFICATE-----Generated at Wed Jul 23 02:02:21 2025 by rpki-client