$ rpki-client -vvf repo-rpki.idnic.net/repo/f9e7a28a-62f0-4d14-8702-403a5190eae1/0/8A4FF836588BBDC5E5CC526BBBEB66D5140D1B86.mft File: 8A4FF836588BBDC5E5CC526BBBEB66D5140D1B86.mft (raw, json) Hash identifier: qiXTgtrJAWnKkA9TiDNdXVc1h8q2qxit1+9r3r/eqOQ= Subject key identifier: E7:47:79:B7:8E:90:9C:D6:8A:9C:D1:E3:FA:E1:4C:98:4F:CD:EC:BC Authority key identifier: 8A:4F:F8:36:58:8B:BD:C5:E5:CC:52:6B:BB:EB:66:D5:14:0D:1B:86 Certificate issuer: /CN=8A4FF836588BBDC5E5CC526BBBEB66D5140D1B86 Certificate serial: A54D5B6303614D07FF2C8D6FD250C2FD8430E4 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8A4FF836588BBDC5E5CC526BBBEB66D5140D1B86.cer Subject info access: rsync://repo-rpki.idnic.net/repo/f9e7a28a-62f0-4d14-8702-403a5190eae1/0/8A4FF836588BBDC5E5CC526BBBEB66D5140D1B86.mft Manifest number: 031C Signing time: Sun 20 Jul 2025 15:01:18 +0000 Manifest this update: Sun 20 Jul 2025 14:56:18 +0000 Manifest next update: Wed 23 Jul 2025 17:46:18 +0000 Files and hashes: 1: 3130332e3137312e33302e302f32332d3234203d3e20313331313131.roa (hash: 0IdcwPtxZArM5JrmLtgkLYtthS0u5GSXZS6q7IiPcxg=) 2: 8A4FF836588BBDC5E5CC526BBBEB66D5140D1B86.crl (hash: aXKxoBSYZKnm4NSVHC+clnkI0ddGwGeOEEgByWgjOz8=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/f9e7a28a-62f0-4d14-8702-403a5190eae1/0/8A4FF836588BBDC5E5CC526BBBEB66D5140D1B86.crl rsync://repo-rpki.idnic.net/repo/f9e7a28a-62f0-4d14-8702-403a5190eae1/0/8A4FF836588BBDC5E5CC526BBBEB66D5140D1B86.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8A4FF836588BBDC5E5CC526BBBEB66D5140D1B86.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 23 Jul 2025 17:46:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: a5:4d:5b:63:03:61:4d:07:ff:2c:8d:6f:d2:50:c2:fd:84:30:e4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8A4FF836588BBDC5E5CC526BBBEB66D5140D1B86 Validity Not Before: Jul 20 14:56:18 2025 GMT Not After : Jul 23 17:46:18 2025 GMT Subject: CN=E74779B78E909CD68A9CD1E3FAE14C984FCDECBC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:1f:04:e6:84:60:29:3f:34:ed:6b:47:7c:0e: 3b:29:1b:cf:f4:c1:80:44:03:1a:c1:b8:e2:9e:65: 77:c5:5d:87:0f:d7:74:ab:de:76:48:6e:38:23:7d: 2d:f2:a3:42:a1:c5:34:86:39:b1:3f:a0:7a:30:47: cb:5e:67:3d:2c:75:b9:20:28:cc:48:c6:14:c3:5b: f4:e7:47:ac:7b:85:cd:ce:a5:de:4f:6a:3b:66:6b: 27:14:e0:69:54:50:ed:a5:70:13:e9:60:86:33:f6: 90:db:8c:18:bf:95:18:0c:32:fd:5c:bb:5a:5a:d2: 35:49:09:5b:62:d9:a1:92:b8:9b:2b:0b:5e:1f:81: 20:e6:71:b8:5e:d3:25:9d:ae:14:72:88:2f:f5:57: f0:19:c6:24:68:a4:43:3a:b1:ef:b2:04:d5:52:3f: a3:74:30:cb:92:11:8e:da:7d:fc:0d:6d:ef:78:67: b0:05:54:a0:64:56:9f:22:f5:10:8d:45:22:35:a3: a9:6c:43:68:4a:85:8a:e5:bf:29:1e:65:62:45:6b: 01:d7:9e:6f:d1:94:b3:87:b0:ae:83:f8:bd:d5:da: f2:96:04:d1:47:31:ca:09:88:d1:09:94:53:67:a9: 1e:73:76:84:9a:f6:8c:4f:c4:b0:9a:48:81:a4:e9: 02:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E7:47:79:B7:8E:90:9C:D6:8A:9C:D1:E3:FA:E1:4C:98:4F:CD:EC:BC X509v3 Authority Key Identifier: keyid:8A:4F:F8:36:58:8B:BD:C5:E5:CC:52:6B:BB:EB:66:D5:14:0D:1B:86 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/f9e7a28a-62f0-4d14-8702-403a5190eae1/0/8A4FF836588BBDC5E5CC526BBBEB66D5140D1B86.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8A4FF836588BBDC5E5CC526BBBEB66D5140D1B86.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f9e7a28a-62f0-4d14-8702-403a5190eae1/0/8A4FF836588BBDC5E5CC526BBBEB66D5140D1B86.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 13:25:92:41:f5:de:6f:32:6a:91:38:96:75:af:54:69:cf:cb: f7:3f:62:aa:4e:87:56:be:12:bf:98:d7:3f:3c:fc:a3:0f:0b: 70:40:ad:4f:cb:ac:68:40:aa:24:2c:cf:52:65:29:22:01:69: 25:a0:72:4f:fc:8a:ef:16:1b:a2:d7:5a:94:af:7f:7d:f6:79: 29:cb:5e:8a:93:1d:06:b8:42:5f:c6:0c:8e:34:43:0b:35:77: ff:fe:fb:bd:d5:6f:17:1e:13:3a:d4:ac:14:8b:5a:cb:61:b4: ab:2b:5a:48:9c:ac:8e:32:1a:36:ee:95:f5:9d:6e:56:18:88: 19:63:fb:c9:8f:b6:af:85:8c:62:93:d6:bb:5b:55:f3:94:86: 17:c2:cf:f8:0a:cc:3c:6f:f7:08:27:5c:5a:c5:fd:e9:e4:25: 95:b2:78:8b:ce:17:b7:5c:1e:78:2e:36:e8:35:4a:61:fc:c9: 78:2c:34:1e:5a:a4:04:5e:b5:6c:2f:98:ff:31:30:aa:b0:ee: f6:92:de:91:c7:96:c9:a8:d2:1a:e9:a8:58:7d:08:28:31:bc: 28:67:4b:68:63:f7:e5:55:9b:f8:0a:8c:f6:41:69:8c:de:2d: 0c:0e:45:96:24:d9:a1:08:c1:80:b5:ae:12:1b:d5:13:a7:ce: af:1e:a5:19 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUAKVNW2MDYU0H/yyNb9JQwv2EMOQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEE0RkY4MzY1ODhCQkRDNUU1Q0M1MjZCQkJFQjY2RDUx NDBEMUI4NjAeFw0yNTA3MjAxNDU2MThaFw0yNTA3MjMxNzQ2MThaMDMxMTAvBgNV BAMTKEU3NDc3OUI3OEU5MDlDRDY4QTlDRDFFM0ZBRTE0Qzk4NEZDREVDQkMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDcHwTmhGApPzTta0d8DjspG8/0 wYBEAxrBuOKeZXfFXYcP13Sr3nZIbjgjfS3yo0KhxTSGObE/oHowR8teZz0sdbkg KMxIxhTDW/TnR6x7hc3Opd5PajtmaycU4GlUUO2lcBPpYIYz9pDbjBi/lRgMMv1c u1pa0jVJCVti2aGSuJsrC14fgSDmcbhe0yWdrhRyiC/1V/AZxiRopEM6se+yBNVS P6N0MMuSEY7affwNbe94Z7AFVKBkVp8i9RCNRSI1o6lsQ2hKhYrlvykeZWJFawHX nm/RlLOHsK6D+L3V2vKWBNFHMcoJiNEJlFNnqR5zdoSa9oxPxLCaSIGk6QLpAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU50d5t46QnNaKnNHj+uFMmE/N7LwwHwYDVR0j BBgwFoAUik/4NliLvcXlzFJru+tm1RQNG4YwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m OWU3YTI4YS02MmYwLTRkMTQtODcwMi00MDNhNTE5MGVhZTEvMC84QTRGRjgzNjU4 OEJCREM1RTVDQzUyNkJCQkVCNjZENTE0MEQxQjg2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOEE0RkY4MzY1ODhCQkRDNUU1Q0M1MjZCQkJFQjY2RDUxNDBE MUI4Ni5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZjllN2EyOGEtNjJmMC00ZDE0LTg3 MDItNDAzYTUxOTBlYWUxLzAvOEE0RkY4MzY1ODhCQkRDNUU1Q0M1MjZCQkJFQjY2 RDUxNDBEMUI4Ni5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABMlkkH13m8yapE4lnWvVGnPy/c/YqpOh1a+ Er+Y1z88/KMPC3BArU/LrGhAqiQsz1JlKSIBaSWgck/8iu8WG6LXWpSvf332eSnL XoqTHQa4Ql/GDI40Qws1d//++73VbxceEzrUrBSLWsthtKsrWkicrI4yGjbulfWd blYYiBlj+8mPtq+FjGKT1rtbVfOUhhfCz/gKzDxv9wgnXFrF/enkJZWyeIvOF7dc HnguNug1SmH8yXgsNB5apARetWwvmP8xMKqw7vaS3pHHlsmo0hrpqFh9CCgxvChn S2hj9+VVm/gKjPZBaYzeLQwORZYk2aEIwYC1rhIb1ROnzq8epRk= -----END CERTIFICATE-----Generated at Sun Jul 20 21:28:30 2025 by rpki-client