$ rpki-client -vvf repo-rpki.idnic.net/repo/d7ff01d0-26f9-4b20-a318-c311c267f2af/0/8A54C81A444D07051A24AACF743F01863F8129AB.mft File: 8A54C81A444D07051A24AACF743F01863F8129AB.mft (raw, json) Hash identifier: EZKaxQS52pROGbHFfwAxPxhJiqNZJbZ3t1ROaladp9g= Subject key identifier: C5:27:62:E6:D9:A5:6F:9B:18:BD:F3:AF:36:52:72:87:4E:30:5E:59 Authority key identifier: 8A:54:C8:1A:44:4D:07:05:1A:24:AA:CF:74:3F:01:86:3F:81:29:AB Certificate issuer: /CN=8A54C81A444D07051A24AACF743F01863F8129AB Certificate serial: 3DD4C49B2E17E690E114BA7250F307420CF13BE2 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8A54C81A444D07051A24AACF743F01863F8129AB.cer Subject info access: rsync://repo-rpki.idnic.net/repo/d7ff01d0-26f9-4b20-a318-c311c267f2af/0/8A54C81A444D07051A24AACF743F01863F8129AB.mft Manifest number: 02CE Signing time: Sat 19 Jul 2025 03:40:37 +0000 Manifest this update: Sat 19 Jul 2025 03:35:37 +0000 Manifest next update: Tue 22 Jul 2025 13:28:37 +0000 Files and hashes: 1: 8A54C81A444D07051A24AACF743F01863F8129AB.crl (hash: ElEeRRcW/33nwLgzGqd45sycNjY4rjdH1CamZZGxsQw=) 2: 3130332e3136362e3135392e302f32342d3234203d3e20313431393535.roa (hash: D5y/dOOdbevGbXtghOHQINTcjdbypBLwek1XQ3CqPYE=) 3: 3130332e3136362e3135382e302f32332d3233203d3e20313431393535.roa (hash: 8iqd/DLPSKXzm6qMwrWasV0WJDuso56p2m5ElmgcTDA=) 4: 3130332e3136362e3135382e302f32342d3234203d3e20313431393535.roa (hash: Bup7LELWa0M49WEmJBOXwO3r0+CyN1znNANGE751Xcc=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/d7ff01d0-26f9-4b20-a318-c311c267f2af/0/8A54C81A444D07051A24AACF743F01863F8129AB.crl rsync://repo-rpki.idnic.net/repo/d7ff01d0-26f9-4b20-a318-c311c267f2af/0/8A54C81A444D07051A24AACF743F01863F8129AB.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8A54C81A444D07051A24AACF743F01863F8129AB.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 22 Jul 2025 13:28:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3d:d4:c4:9b:2e:17:e6:90:e1:14:ba:72:50:f3:07:42:0c:f1:3b:e2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8A54C81A444D07051A24AACF743F01863F8129AB Validity Not Before: Jul 19 03:35:37 2025 GMT Not After : Jul 22 13:28:37 2025 GMT Subject: CN=C52762E6D9A56F9B18BDF3AF365272874E305E59 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:c1:a8:32:4b:9e:99:bb:37:9e:9b:06:df:29: e8:6d:e4:c1:a0:c9:6a:f0:d5:ef:1b:27:30:d1:6c: a6:a7:ee:6c:d2:a7:fc:b0:e1:31:7c:e8:a3:64:88: 75:8a:6a:09:25:fc:13:a6:96:b4:96:a5:2d:25:d8: b1:cb:b4:c6:a3:49:0c:65:93:eb:50:25:cd:c6:e0: 63:fc:c9:fb:14:bd:88:69:57:e7:06:00:58:a1:8f: 79:5b:ba:a2:e6:f5:ee:c2:8f:b6:a8:87:d4:5c:46: 09:15:c3:7b:63:61:ab:3e:09:10:bb:65:97:69:a3: f0:cb:a7:81:3f:9a:7d:34:d9:d9:36:80:27:62:2e: 97:13:98:43:26:12:81:18:4a:fe:39:27:61:55:5c: ad:50:22:8b:dd:09:00:69:ea:22:54:3c:95:f0:d5: 95:de:81:8f:87:27:da:24:0e:83:c4:d1:cd:03:a1: 6c:c9:0d:d5:85:1c:a7:dd:6c:c1:de:bb:1d:89:fa: 6e:b0:03:72:9a:70:6c:a4:68:c2:71:13:03:77:a1: 0a:7c:4d:27:62:f1:44:1e:2f:05:46:78:6d:99:ec: 98:22:59:34:0f:9b:03:c0:05:7a:cb:19:8a:68:cc: 9a:96:ad:f3:fa:09:e0:5c:b7:c7:fa:31:ec:37:66: 9e:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:27:62:E6:D9:A5:6F:9B:18:BD:F3:AF:36:52:72:87:4E:30:5E:59 X509v3 Authority Key Identifier: keyid:8A:54:C8:1A:44:4D:07:05:1A:24:AA:CF:74:3F:01:86:3F:81:29:AB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/d7ff01d0-26f9-4b20-a318-c311c267f2af/0/8A54C81A444D07051A24AACF743F01863F8129AB.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8A54C81A444D07051A24AACF743F01863F8129AB.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d7ff01d0-26f9-4b20-a318-c311c267f2af/0/8A54C81A444D07051A24AACF743F01863F8129AB.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 68:6d:d9:ab:03:8b:49:27:83:b7:a1:50:27:86:d7:61:3a:b4: d2:69:58:0e:fc:9c:df:65:58:5a:2b:2e:0f:c5:27:1f:82:4d: d9:fb:7d:0e:b8:c4:28:28:33:42:5f:3c:fe:98:95:a4:58:c7: d5:19:24:91:92:71:16:b7:db:50:91:16:24:04:69:d1:98:2f: a2:e6:da:7d:a9:6c:58:86:57:50:0d:22:50:eb:75:c0:18:ae: 95:3a:ed:99:b1:1c:25:a4:da:ca:b1:a5:b8:56:3f:00:27:ad: da:69:d2:34:cc:dc:7d:57:6b:8c:75:29:d6:af:54:85:22:9d: bf:bc:88:da:a0:f7:ef:b3:3f:cb:30:d0:b6:7b:5c:bf:7e:e0: 87:d8:08:1e:4b:c4:a9:2d:30:01:98:36:33:11:76:29:bc:e2: aa:38:17:f7:e7:9d:95:92:87:6b:7e:8d:b8:07:7e:6e:ee:bc: c7:28:f8:80:79:07:8f:16:e1:00:af:f2:a8:97:bc:30:1f:70: 65:69:e4:9e:09:01:fd:a8:b2:c0:ad:13:24:a0:73:96:30:20: f1:d0:2a:48:92:75:03:eb:2e:7f:93:4a:fc:a8:57:d6:5c:d2: cc:b1:3b:86:98:d5:9c:71:da:91:a3:c0:9d:b2:40:36:7d:e9: 6a:88:32:33 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUPdTEmy4X5pDhFLpyUPMHQgzxO+IwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEE1NEM4MUE0NDREMDcwNTFBMjRBQUNGNzQzRjAxODYz RjgxMjlBQjAeFw0yNTA3MTkwMzM1MzdaFw0yNTA3MjIxMzI4MzdaMDMxMTAvBgNV BAMTKEM1Mjc2MkU2RDlBNTZGOUIxOEJERjNBRjM2NTI3Mjg3NEUzMDVFNTkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCnwagyS56ZuzeemwbfKeht5MGg yWrw1e8bJzDRbKan7mzSp/yw4TF86KNkiHWKagkl/BOmlrSWpS0l2LHLtMajSQxl k+tQJc3G4GP8yfsUvYhpV+cGAFihj3lbuqLm9e7Cj7aoh9RcRgkVw3tjYas+CRC7 ZZdpo/DLp4E/mn002dk2gCdiLpcTmEMmEoEYSv45J2FVXK1QIovdCQBp6iJUPJXw 1ZXegY+HJ9okDoPE0c0DoWzJDdWFHKfdbMHeux2J+m6wA3KacGykaMJxEwN3oQp8 TSdi8UQeLwVGeG2Z7JgiWTQPmwPABXrLGYpozJqWrfP6CeBct8f6Mew3Zp7ZAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUxSdi5tmlb5sYvfOvNlJyh04wXlkwHwYDVR0j BBgwFoAUilTIGkRNBwUaJKrPdD8Bhj+BKaswDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k N2ZmMDFkMC0yNmY5LTRiMjAtYTMxOC1jMzExYzI2N2YyYWYvMC84QTU0QzgxQTQ0 NEQwNzA1MUEyNEFBQ0Y3NDNGMDE4NjNGODEyOUFCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOEE1NEM4MUE0NDREMDcwNTFBMjRBQUNGNzQzRjAxODYzRjgx MjlBQi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZDdmZjAxZDAtMjZmOS00YjIwLWEz MTgtYzMxMWMyNjdmMmFmLzAvOEE1NEM4MUE0NDREMDcwNTFBMjRBQUNGNzQzRjAx ODYzRjgxMjlBQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGht2asDi0kng7ehUCeG12E6tNJpWA78nN9l WForLg/FJx+CTdn7fQ64xCgoM0JfPP6YlaRYx9UZJJGScRa321CRFiQEadGYL6Lm 2n2pbFiGV1ANIlDrdcAYrpU67ZmxHCWk2sqxpbhWPwAnrdpp0jTM3H1Xa4x1Kdav VIUinb+8iNqg9++zP8sw0LZ7XL9+4IfYCB5LxKktMAGYNjMRdim84qo4F/fnnZWS h2t+jbgHfm7uvMco+IB5B48W4QCv8qiXvDAfcGVp5J4JAf2ossCtEySgc5YwIPHQ KkiSdQPrLn+TSvyoV9Zc0syxO4aY1Zxx2pGjwJ2yQDZ96WqIMjM= -----END CERTIFICATE-----Generated at Mon Jul 21 02:05:35 2025 by rpki-client