$ rpki-client -vvf repo-rpki.idnic.net/repo/f0520b54-3ba7-4631-af0b-55984b0ba7f2/0/8CDF716F25D64DEB3E1036E6A36DB724CDE1E5D0.mft File: 8CDF716F25D64DEB3E1036E6A36DB724CDE1E5D0.mft (raw, json) Hash identifier: +bSol+5HzOpXHC5KMNT3tH7X07I7cMp+99EMJGq16MM= Subject key identifier: D4:14:9D:72:FF:9A:1C:75:51:1B:ED:4F:E4:B0:BC:C9:A0:97:22:D9 Authority key identifier: 8C:DF:71:6F:25:D6:4D:EB:3E:10:36:E6:A3:6D:B7:24:CD:E1:E5:D0 Certificate issuer: /CN=8CDF716F25D64DEB3E1036E6A36DB724CDE1E5D0 Certificate serial: 70726921A16C97A014F8C86A7CF552E990D74C75 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8CDF716F25D64DEB3E1036E6A36DB724CDE1E5D0.cer Subject info access: rsync://repo-rpki.idnic.net/repo/f0520b54-3ba7-4631-af0b-55984b0ba7f2/0/8CDF716F25D64DEB3E1036E6A36DB724CDE1E5D0.mft Manifest number: 036E Signing time: Sat 19 Jul 2025 23:10:41 +0000 Manifest this update: Sat 19 Jul 2025 23:05:41 +0000 Manifest next update: Wed 23 Jul 2025 03:34:41 +0000 Files and hashes: 1: 3130332e3136322e3134362e302f32332d3234203d3e203137393935.roa (hash: glmRxvHF4g4HTvz1muaudxYOmNWHdjodUPYRc5xhUvY=) 2: 8CDF716F25D64DEB3E1036E6A36DB724CDE1E5D0.crl (hash: DDiLajRuWdC5lXauGGvqiqpe+QatzA/uTpWGoG7v+kQ=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/f0520b54-3ba7-4631-af0b-55984b0ba7f2/0/8CDF716F25D64DEB3E1036E6A36DB724CDE1E5D0.crl rsync://repo-rpki.idnic.net/repo/f0520b54-3ba7-4631-af0b-55984b0ba7f2/0/8CDF716F25D64DEB3E1036E6A36DB724CDE1E5D0.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8CDF716F25D64DEB3E1036E6A36DB724CDE1E5D0.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 23 Jul 2025 03:34:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 70:72:69:21:a1:6c:97:a0:14:f8:c8:6a:7c:f5:52:e9:90:d7:4c:75 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8CDF716F25D64DEB3E1036E6A36DB724CDE1E5D0 Validity Not Before: Jul 19 23:05:41 2025 GMT Not After : Jul 23 03:34:41 2025 GMT Subject: CN=D4149D72FF9A1C75511BED4FE4B0BCC9A09722D9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:99:d3:8c:2b:66:f3:d3:26:41:ed:0b:7e:1a: 44:81:7a:d6:3f:6f:e6:dc:74:76:eb:79:48:84:9f: e7:4f:e6:76:0f:96:d6:84:79:82:14:96:18:a9:e2: 41:65:a9:c4:13:e4:a0:8a:0b:cf:12:de:04:16:35: 93:f3:95:7a:15:09:29:02:b3:34:c4:5e:38:98:95: 8b:8d:b7:84:7a:f3:69:3a:91:b0:2f:5e:35:7a:f8: fe:9d:cd:61:34:4c:19:f5:96:98:3f:03:c4:cf:59: 95:46:4f:57:23:9c:7f:e5:f1:3b:5c:a5:cd:86:3c: fc:86:51:4d:6e:71:56:03:40:39:0e:19:57:90:f7: bd:e4:72:d9:bb:02:9f:81:6a:56:73:bb:6a:d8:c0: 23:31:a2:83:c1:4f:ee:0d:7b:e5:25:6b:ff:1a:d3: fb:c6:f2:83:55:07:49:7b:5e:b2:9c:20:52:14:24: 01:15:9f:88:28:9a:36:30:5d:59:20:aa:fc:5f:c7: 72:e7:af:18:37:43:b9:69:33:1b:c0:e0:bf:93:4c: 10:ea:6b:42:37:bf:92:c2:b4:6f:83:c2:5b:9c:b1: e2:92:87:92:f6:6c:bc:d8:d2:cf:c2:47:55:2b:0f: 7c:e0:a4:f2:62:cb:a9:50:70:10:7f:7c:79:c0:ae: d5:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D4:14:9D:72:FF:9A:1C:75:51:1B:ED:4F:E4:B0:BC:C9:A0:97:22:D9 X509v3 Authority Key Identifier: keyid:8C:DF:71:6F:25:D6:4D:EB:3E:10:36:E6:A3:6D:B7:24:CD:E1:E5:D0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/f0520b54-3ba7-4631-af0b-55984b0ba7f2/0/8CDF716F25D64DEB3E1036E6A36DB724CDE1E5D0.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8CDF716F25D64DEB3E1036E6A36DB724CDE1E5D0.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f0520b54-3ba7-4631-af0b-55984b0ba7f2/0/8CDF716F25D64DEB3E1036E6A36DB724CDE1E5D0.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 21:ef:b2:25:ff:b3:c1:49:12:ed:17:5c:9c:6e:1f:d3:64:04: 5c:98:50:c0:9b:ae:67:7e:46:81:76:d7:23:06:12:0d:38:be: 33:51:0e:7a:30:1f:0c:fc:ef:c1:2b:71:73:d9:3d:09:e6:8e: 24:37:28:03:86:56:e0:0a:38:bc:17:88:10:43:38:1c:ca:e4: 44:82:d3:ca:d1:96:27:21:e5:db:a2:2c:c2:a0:81:af:7b:1e: 74:c7:df:84:fb:49:7c:15:a1:db:7d:06:6a:a6:89:16:dd:6d: 91:42:f2:1f:6d:ab:c7:a0:8e:e4:fb:1f:4e:16:14:4e:67:d1: a6:13:aa:98:24:5e:0d:fc:17:3e:f5:be:78:cd:5f:6c:62:23: 6d:01:25:74:3b:c2:5b:bf:00:71:fe:bc:bc:e7:da:ee:cc:9a: 8f:a2:b5:a0:07:7a:9f:6e:40:19:a5:26:36:ad:dd:a7:a4:73: 3f:96:a0:44:20:1b:e5:ba:af:98:78:8e:c6:28:43:21:b9:52: cc:9b:56:7a:cc:31:2e:de:2a:af:60:91:93:84:fd:03:8b:91: b9:6c:97:dd:48:4a:77:36:3c:71:f3:b7:53:5b:81:13:f4:df: b9:cd:a4:bc:4d:cf:2f:da:02:36:03:cd:f1:fe:a3:32:fe:63: cd:81:2a:8e -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUcHJpIaFsl6AU+MhqfPVS6ZDXTHUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOENERjcxNkYyNUQ2NERFQjNFMTAzNkU2QTM2REI3MjRD REUxRTVEMDAeFw0yNTA3MTkyMzA1NDFaFw0yNTA3MjMwMzM0NDFaMDMxMTAvBgNV BAMTKEQ0MTQ5RDcyRkY5QTFDNzU1MTFCRUQ0RkU0QjBCQ0M5QTA5NzIyRDkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCkmdOMK2bz0yZB7Qt+GkSBetY/ b+bcdHbreUiEn+dP5nYPltaEeYIUlhip4kFlqcQT5KCKC88S3gQWNZPzlXoVCSkC szTEXjiYlYuNt4R682k6kbAvXjV6+P6dzWE0TBn1lpg/A8TPWZVGT1cjnH/l8Ttc pc2GPPyGUU1ucVYDQDkOGVeQ973kctm7Ap+BalZzu2rYwCMxooPBT+4Ne+Ula/8a 0/vG8oNVB0l7XrKcIFIUJAEVn4gomjYwXVkgqvxfx3Lnrxg3Q7lpMxvA4L+TTBDq a0I3v5LCtG+DwlucseKSh5L2bLzY0s/CR1UrD3zgpPJiy6lQcBB/fHnArtVzAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU1BSdcv+aHHVRG+1P5LC8yaCXItkwHwYDVR0j BBgwFoAUjN9xbyXWTes+EDbmo223JM3h5dAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m MDUyMGI1NC0zYmE3LTQ2MzEtYWYwYi01NTk4NGIwYmE3ZjIvMC84Q0RGNzE2RjI1 RDY0REVCM0UxMDM2RTZBMzZEQjcyNENERTFFNUQwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOENERjcxNkYyNUQ2NERFQjNFMTAzNkU2QTM2REI3MjRDREUx RTVEMC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZjA1MjBiNTQtM2JhNy00NjMxLWFm MGItNTU5ODRiMGJhN2YyLzAvOENERjcxNkYyNUQ2NERFQjNFMTAzNkU2QTM2REI3 MjRDREUxRTVEMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACHvsiX/s8FJEu0XXJxuH9NkBFyYUMCbrmd+ RoF21yMGEg04vjNRDnowHwz878ErcXPZPQnmjiQ3KAOGVuAKOLwXiBBDOBzK5ESC 08rRlich5duiLMKgga97HnTH34T7SXwVodt9BmqmiRbdbZFC8h9tq8egjuT7H04W FE5n0aYTqpgkXg38Fz71vnjNX2xiI20BJXQ7wlu/AHH+vLzn2u7Mmo+itaAHep9u QBmlJjat3aekcz+WoEQgG+W6r5h4jsYoQyG5UsybVnrMMS7eKq9gkZOE/QOLkbls l91ISnc2PHHzt1NbgRP037nNpLxNzy/aAjYDzfH+ozL+Y82BKo4= -----END CERTIFICATE-----Generated at Mon Jul 21 08:59:28 2025 by rpki-client