$ rpki-client -vvf repo-rpki.idnic.net/repo/dacb7187-7a5f-4e23-be94-593a0c288cb9/0/8C6B9FE80EF1DA40B964D4429F78785ADDD29EFB.mft File: 8C6B9FE80EF1DA40B964D4429F78785ADDD29EFB.mft (raw, json) Hash identifier: yODOdH9NURV8p1upq4hf17D2DefokpCRo1LJ7sklZEM= Subject key identifier: 35:DA:62:B0:9E:5C:68:9C:5E:B9:A1:03:83:C4:5A:1A:C1:0B:05:1D Authority key identifier: 8C:6B:9F:E8:0E:F1:DA:40:B9:64:D4:42:9F:78:78:5A:DD:D2:9E:FB Certificate issuer: /CN=8C6B9FE80EF1DA40B964D4429F78785ADDD29EFB Certificate serial: 3862B7495E859BAF4B8F917883EE0788D70FE1D9 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8C6B9FE80EF1DA40B964D4429F78785ADDD29EFB.cer Subject info access: rsync://repo-rpki.idnic.net/repo/dacb7187-7a5f-4e23-be94-593a0c288cb9/0/8C6B9FE80EF1DA40B964D4429F78785ADDD29EFB.mft Manifest number: 01C9 Signing time: Sun 20 Jul 2025 19:41:29 +0000 Manifest this update: Sun 20 Jul 2025 19:36:29 +0000 Manifest next update: Wed 23 Jul 2025 20:54:29 +0000 Files and hashes: 1: 3130332e31302e37312e302f32342d3234203d3e20313530323130.roa (hash: wDta+92k3x+gK76Z0kGm3qQTLhs6WF7nJtND4k4DV9Y=) 2: 8C6B9FE80EF1DA40B964D4429F78785ADDD29EFB.crl (hash: ufHyOYkSm680khOxZ6im+nJWVVw5298Pq5N0V8Om7C8=) 3: 3130332e31302e37302e302f32342d3234203d3e20313530323130.roa (hash: 5JDd/HA007WXvt9HRMOrUb4bJ8L4vCr7oaVmKSZ2Ddg=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/dacb7187-7a5f-4e23-be94-593a0c288cb9/0/8C6B9FE80EF1DA40B964D4429F78785ADDD29EFB.crl rsync://repo-rpki.idnic.net/repo/dacb7187-7a5f-4e23-be94-593a0c288cb9/0/8C6B9FE80EF1DA40B964D4429F78785ADDD29EFB.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8C6B9FE80EF1DA40B964D4429F78785ADDD29EFB.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 23 Jul 2025 20:54:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 38:62:b7:49:5e:85:9b:af:4b:8f:91:78:83:ee:07:88:d7:0f:e1:d9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8C6B9FE80EF1DA40B964D4429F78785ADDD29EFB Validity Not Before: Jul 20 19:36:29 2025 GMT Not After : Jul 23 20:54:29 2025 GMT Subject: CN=35DA62B09E5C689C5EB9A10383C45A1AC10B051D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:29:df:e9:22:91:02:83:64:1d:91:bc:61:04: 63:d7:19:5c:37:15:05:24:24:ce:7b:63:f8:0a:92: 36:c7:b1:99:1d:f3:6b:8f:5f:a5:3e:3a:2c:21:8f: 39:d7:bc:8e:16:17:aa:d5:00:fa:4e:2c:2c:1b:48: f9:0a:9f:7c:33:01:94:ed:a9:5c:e5:e5:ad:48:08: fb:0c:96:53:ca:af:a2:99:3d:73:43:fa:4b:51:27: 0b:42:32:83:1f:f0:93:5e:b4:fb:c8:eb:c0:3c:7e: b1:05:92:75:80:01:6d:c2:af:c9:c7:b4:bf:84:26: bc:f0:b7:c5:79:1f:7d:24:02:15:23:17:57:95:c7: dc:17:d0:94:89:1a:1f:c9:94:41:2d:5e:fa:1b:6e: 80:96:ea:c1:ae:42:25:3d:16:3c:88:f1:a5:6f:95: dc:a9:96:0f:af:79:89:51:48:67:0e:10:5a:a6:4a: 94:c7:c4:dd:40:9f:a9:83:dc:86:e9:62:d8:da:14: 26:fa:90:9f:d0:d6:09:b4:15:ff:89:56:0c:2c:a0: f1:8c:7c:15:8e:1c:38:11:a6:1b:7a:c7:5f:d2:af: 1f:c1:c0:a6:b2:33:53:6a:8d:ed:4c:f9:82:a4:37: 50:e4:f5:f8:1a:81:8a:a8:6f:d9:ca:ce:4d:3e:d2: 89:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:DA:62:B0:9E:5C:68:9C:5E:B9:A1:03:83:C4:5A:1A:C1:0B:05:1D X509v3 Authority Key Identifier: keyid:8C:6B:9F:E8:0E:F1:DA:40:B9:64:D4:42:9F:78:78:5A:DD:D2:9E:FB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/dacb7187-7a5f-4e23-be94-593a0c288cb9/0/8C6B9FE80EF1DA40B964D4429F78785ADDD29EFB.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8C6B9FE80EF1DA40B964D4429F78785ADDD29EFB.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/dacb7187-7a5f-4e23-be94-593a0c288cb9/0/8C6B9FE80EF1DA40B964D4429F78785ADDD29EFB.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ad:59:d9:0c:9b:01:17:1f:4e:f7:dd:27:c5:4d:21:91:22:82: 74:ff:64:b8:0d:14:4d:02:71:19:5f:63:bb:eb:6c:d8:a0:e0: f9:54:dc:e5:25:73:ca:41:22:02:9d:24:62:ef:85:b5:16:6b: 1e:6b:b9:8e:5b:5d:61:7b:d2:75:92:c0:1b:1d:b2:4b:03:c7: 4e:e0:73:21:27:2d:4e:e6:14:1f:cd:07:88:df:d8:0d:f8:06: 78:55:35:f4:cc:82:db:63:ca:96:a0:6f:ad:f1:7c:6c:2c:70: 9f:8d:40:f2:0f:fb:e6:3c:38:09:68:f1:30:56:63:ee:ad:d8: 5d:e8:bf:f5:05:ee:72:6e:c7:97:08:6e:4e:75:91:da:62:53: ad:47:22:aa:59:32:0d:41:cc:56:c8:a3:32:39:ed:e5:57:37: af:8f:cb:99:d0:91:b7:bd:53:ca:6d:ba:16:34:00:0d:1e:fb: 03:a6:40:06:97:8f:34:ec:2b:74:fb:1a:46:51:de:0a:6d:49: c3:dc:21:de:91:94:0e:52:64:6a:d4:96:af:73:2f:16:c0:0b: d2:11:da:f1:4b:bf:30:b5:0d:6f:b2:04:af:26:a2:c1:d8:89: 17:42:90:c2:c3:9c:01:91:9d:4c:5a:6d:39:39:0b:0b:90:75: eb:5e:7a:b4 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUOGK3SV6Fm69Lj5F4g+4HiNcP4dkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEM2QjlGRTgwRUYxREE0MEI5NjRENDQyOUY3ODc4NUFE REQyOUVGQjAeFw0yNTA3MjAxOTM2MjlaFw0yNTA3MjMyMDU0MjlaMDMxMTAvBgNV BAMTKDM1REE2MkIwOUU1QzY4OUM1RUI5QTEwMzgzQzQ1QTFBQzEwQjA1MUQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDLKd/pIpECg2QdkbxhBGPXGVw3 FQUkJM57Y/gKkjbHsZkd82uPX6U+OiwhjznXvI4WF6rVAPpOLCwbSPkKn3wzAZTt qVzl5a1ICPsMllPKr6KZPXND+ktRJwtCMoMf8JNetPvI68A8frEFknWAAW3Cr8nH tL+EJrzwt8V5H30kAhUjF1eVx9wX0JSJGh/JlEEtXvobboCW6sGuQiU9FjyI8aVv ldyplg+veYlRSGcOEFqmSpTHxN1An6mD3IbpYtjaFCb6kJ/Q1gm0Ff+JVgwsoPGM fBWOHDgRpht6x1/Srx/BwKayM1Nqje1M+YKkN1Dk9fgagYqob9nKzk0+0oltAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUNdpisJ5caJxeuaEDg8RaGsELBR0wHwYDVR0j BBgwFoAUjGuf6A7x2kC5ZNRCn3h4Wt3SnvswDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k YWNiNzE4Ny03YTVmLTRlMjMtYmU5NC01OTNhMGMyODhjYjkvMC84QzZCOUZFODBF RjFEQTQwQjk2NEQ0NDI5Rjc4Nzg1QURERDI5RUZCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOEM2QjlGRTgwRUYxREE0MEI5NjRENDQyOUY3ODc4NUFEREQy OUVGQi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZGFjYjcxODctN2E1Zi00ZTIzLWJl OTQtNTkzYTBjMjg4Y2I5LzAvOEM2QjlGRTgwRUYxREE0MEI5NjRENDQyOUY3ODc4 NUFEREQyOUVGQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAK1Z2QybARcfTvfdJ8VNIZEignT/ZLgNFE0C cRlfY7vrbNig4PlU3OUlc8pBIgKdJGLvhbUWax5ruY5bXWF70nWSwBsdsksDx07g cyEnLU7mFB/NB4jf2A34BnhVNfTMgttjypagb63xfGwscJ+NQPIP++Y8OAlo8TBW Y+6t2F3ov/UF7nJux5cIbk51kdpiU61HIqpZMg1BzFbIozI57eVXN6+Py5nQkbe9 U8ptuhY0AA0e+wOmQAaXjzTsK3T7GkZR3gptScPcId6RlA5SZGrUlq9zLxbAC9IR 2vFLvzC1DW+yBK8mosHYiRdCkMLDnAGRnUxabTk5CwuQdeteerQ= -----END CERTIFICATE-----Generated at Mon Jul 21 07:27:00 2025 by rpki-client