$ rpki-client -vvf repo-rpki.idnic.net/repo/d8b98722-1cb4-40d4-ac8b-c3bca2bca217/0/8A95FAF723EC129E336E75ACE1CD4F3094FB6481.mft File: 8A95FAF723EC129E336E75ACE1CD4F3094FB6481.mft (raw, json) Hash identifier: eezdTjIeEsSsKz0NeZHxiZF2hZ1gBriQc6ddc777pFY= Subject key identifier: 19:2D:D7:77:69:E6:95:EE:ED:66:18:0D:45:98:B2:66:7D:DF:44:B7 Authority key identifier: 8A:95:FA:F7:23:EC:12:9E:33:6E:75:AC:E1:CD:4F:30:94:FB:64:81 Certificate issuer: /CN=8A95FAF723EC129E336E75ACE1CD4F3094FB6481 Certificate serial: 5BC3C361EBE038D357FD966EB747A27F374ED303 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8A95FAF723EC129E336E75ACE1CD4F3094FB6481.cer Subject info access: rsync://repo-rpki.idnic.net/repo/d8b98722-1cb4-40d4-ac8b-c3bca2bca217/0/8A95FAF723EC129E336E75ACE1CD4F3094FB6481.mft Manifest number: 0439 Signing time: Tue 22 Jul 2025 07:21:25 +0000 Manifest this update: Tue 22 Jul 2025 07:16:25 +0000 Manifest next update: Fri 25 Jul 2025 08:53:25 +0000 Files and hashes: 1: 3130332e32332e32302e302f32322d3234203d3e203538333937.roa (hash: y/aRgAk/Ol217uqThdECq/g+tO93bdhzL10rqxPOy5s=) 2: 323030313a6466303a663830303a3a2f34382d3438203d3e203538333937.roa (hash: 8qFDAcssXXUuL7jdU+5MBpRRNuUnSR4XPXnprUszlok=) 3: 34332e3234352e3138302e302f32322d3234203d3e203538333937.roa (hash: f+W5KSnYaSOmv7obX83rwEJhTHZvGPxy0VlZOsEAh+k=) 4: 8A95FAF723EC129E336E75ACE1CD4F3094FB6481.crl (hash: xmoi4Xxq45gMCTM6XyWf6WEm9avibQcCZcnfxigWwhk=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/d8b98722-1cb4-40d4-ac8b-c3bca2bca217/0/8A95FAF723EC129E336E75ACE1CD4F3094FB6481.crl rsync://repo-rpki.idnic.net/repo/d8b98722-1cb4-40d4-ac8b-c3bca2bca217/0/8A95FAF723EC129E336E75ACE1CD4F3094FB6481.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8A95FAF723EC129E336E75ACE1CD4F3094FB6481.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Jul 2025 08:53:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5b:c3:c3:61:eb:e0:38:d3:57:fd:96:6e:b7:47:a2:7f:37:4e:d3:03 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8A95FAF723EC129E336E75ACE1CD4F3094FB6481 Validity Not Before: Jul 22 07:16:25 2025 GMT Not After : Jul 25 08:53:25 2025 GMT Subject: CN=192DD77769E695EEED66180D4598B2667DDF44B7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:d2:8e:55:67:46:18:10:9d:03:50:ed:8f:f8: 3f:d0:68:76:69:bb:3e:b8:32:83:23:6f:9c:c3:30: 12:38:35:fc:5c:12:7d:7d:8f:2a:7d:2c:10:c0:c1: 33:5d:94:aa:35:6d:57:1d:24:1c:da:05:51:77:98: 2b:35:39:e8:4d:82:26:d9:74:3d:dc:e4:ac:3a:76: 87:ff:8c:c5:4a:50:24:bd:15:94:0e:73:c2:ba:28: ce:36:d0:1a:bc:ed:3f:1e:ea:a9:a0:73:83:d1:9e: db:d4:06:81:d5:fc:92:d4:7e:2b:e4:61:19:e2:99: fd:4f:6a:cb:07:c0:ef:b2:9d:f2:0b:d5:91:ae:17: 64:d8:39:6c:00:2b:15:d4:a0:6d:64:3e:53:a0:ee: 65:96:9e:cc:c1:1e:57:ba:fb:b2:f9:e2:e3:e1:58: 95:5b:df:e8:da:9c:5e:a4:a5:52:86:55:19:b7:09: f0:9b:a8:23:21:48:9a:37:bc:97:6e:4b:6d:e2:a4: f4:c3:98:6c:98:92:ab:0e:a9:40:d4:0a:84:75:ae: cb:75:77:08:24:be:36:3b:e7:9c:98:a5:02:d6:9b: c7:7d:20:aa:66:dc:c6:27:d1:c9:7d:4b:55:26:09: 6d:20:7e:c3:0d:f2:74:d0:2b:5d:79:7f:6e:2a:04: a8:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 19:2D:D7:77:69:E6:95:EE:ED:66:18:0D:45:98:B2:66:7D:DF:44:B7 X509v3 Authority Key Identifier: keyid:8A:95:FA:F7:23:EC:12:9E:33:6E:75:AC:E1:CD:4F:30:94:FB:64:81 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/d8b98722-1cb4-40d4-ac8b-c3bca2bca217/0/8A95FAF723EC129E336E75ACE1CD4F3094FB6481.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8A95FAF723EC129E336E75ACE1CD4F3094FB6481.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d8b98722-1cb4-40d4-ac8b-c3bca2bca217/0/8A95FAF723EC129E336E75ACE1CD4F3094FB6481.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b3:de:2d:7f:8e:73:cc:14:1f:70:f8:44:b6:57:68:83:53:cf: 64:9e:7c:67:c1:5d:16:2e:51:9b:56:b6:8a:c2:b8:15:0e:87: 72:5a:9f:80:5b:07:a7:9e:e9:89:90:58:1b:35:1f:ed:99:32: 9a:1e:bb:88:91:0e:3f:3c:f1:dc:f5:20:c0:be:77:37:b4:af: 76:05:9a:ea:21:82:df:55:ea:9e:bb:89:ac:3c:9c:97:70:0b: aa:b5:a8:e0:75:ce:23:49:f9:23:87:81:7c:20:00:16:87:a1: 19:84:8a:c6:e1:47:b9:31:d7:cb:8a:0b:7e:f3:95:88:35:63: 4e:a4:57:aa:ac:97:d3:77:aa:00:60:f0:c3:2a:fd:24:48:6b: 06:ed:ec:ab:15:43:46:48:32:5e:12:e1:03:ee:e7:26:5f:83: d9:ab:36:ac:e8:91:02:0c:88:96:a4:81:13:ca:4f:b9:fe:b2: 6c:8b:58:25:36:03:07:85:5d:93:dd:86:27:6d:8d:57:f8:a7: 4b:cb:ce:f7:fb:f6:a2:68:d2:06:b9:d2:40:f7:b0:6c:52:14: 8c:37:a3:1c:df:b1:c4:e9:fd:b3:6a:f1:0b:d0:d4:e4:9e:a9: d2:bd:bc:a9:ce:84:d5:3c:f5:90:61:59:e0:f4:14:c5:c0:f0: 26:7d:a4:55 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUW8PDYevgONNX/ZZut0eifzdO0wMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEE5NUZBRjcyM0VDMTI5RTMzNkU3NUFDRTFDRDRGMzA5 NEZCNjQ4MTAeFw0yNTA3MjIwNzE2MjVaFw0yNTA3MjUwODUzMjVaMDMxMTAvBgNV BAMTKDE5MkRENzc3NjlFNjk1RUVFRDY2MTgwRDQ1OThCMjY2N0RERjQ0QjcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDI0o5VZ0YYEJ0DUO2P+D/QaHZp uz64MoMjb5zDMBI4NfxcEn19jyp9LBDAwTNdlKo1bVcdJBzaBVF3mCs1OehNgibZ dD3c5Kw6dof/jMVKUCS9FZQOc8K6KM420Bq87T8e6qmgc4PRntvUBoHV/JLUfivk YRnimf1PassHwO+ynfIL1ZGuF2TYOWwAKxXUoG1kPlOg7mWWnszBHle6+7L54uPh WJVb3+janF6kpVKGVRm3CfCbqCMhSJo3vJduS23ipPTDmGyYkqsOqUDUCoR1rst1 dwgkvjY755yYpQLWm8d9IKpm3MYn0cl9S1UmCW0gfsMN8nTQK115f24qBKirAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUGS3Xd2nmle7tZhgNRZiyZn3fRLcwHwYDVR0j BBgwFoAUipX69yPsEp4zbnWs4c1PMJT7ZIEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k OGI5ODcyMi0xY2I0LTQwZDQtYWM4Yi1jM2JjYTJiY2EyMTcvMC84QTk1RkFGNzIz RUMxMjlFMzM2RTc1QUNFMUNENEYzMDk0RkI2NDgxLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOEE5NUZBRjcyM0VDMTI5RTMzNkU3NUFDRTFDRDRGMzA5NEZC NjQ4MS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZDhiOTg3MjItMWNiNC00MGQ0LWFj OGItYzNiY2EyYmNhMjE3LzAvOEE5NUZBRjcyM0VDMTI5RTMzNkU3NUFDRTFDRDRG MzA5NEZCNjQ4MS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALPeLX+Oc8wUH3D4RLZXaINTz2SefGfBXRYu UZtWtorCuBUOh3Jan4BbB6ee6YmQWBs1H+2ZMpoeu4iRDj888dz1IMC+dze0r3YF muohgt9V6p67iaw8nJdwC6q1qOB1ziNJ+SOHgXwgABaHoRmEisbhR7kx18uKC37z lYg1Y06kV6qsl9N3qgBg8MMq/SRIawbt7KsVQ0ZIMl4S4QPu5yZfg9mrNqzokQIM iJakgRPKT7n+smyLWCU2AweFXZPdhidtjVf4p0vLzvf79qJo0ga50kD3sGxSFIw3 oxzfscTp/bNq8QvQ1OSeqdK9vKnOhNU89ZBhWeD0FMXA8CZ9pFU= -----END CERTIFICATE-----Generated at Wed Jul 23 18:34:02 2025 by rpki-client