$ rpki-client -vvf repo-rpki.idnic.net/repo/02913fa1-33ae-4e33-bbe2-81bd9f03c84b/0/8C57C5860BF938BB57E0B7ED0F890D70BFEE55A0.mft File: 8C57C5860BF938BB57E0B7ED0F890D70BFEE55A0.mft (raw, json) Hash identifier: 1ZbgWQzi42CeEmssuxYHCWcdAy2sUzaOp7atamaX8Ts= Subject key identifier: 20:D8:D2:37:49:DF:E8:33:16:E3:91:66:40:9B:D4:C0:F1:48:DD:BD Authority key identifier: 8C:57:C5:86:0B:F9:38:BB:57:E0:B7:ED:0F:89:0D:70:BF:EE:55:A0 Certificate issuer: /CN=8C57C5860BF938BB57E0B7ED0F890D70BFEE55A0 Certificate serial: 212478527974C5973E4B714290DAF78DA1AC50C7 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8C57C5860BF938BB57E0B7ED0F890D70BFEE55A0.cer Subject info access: rsync://repo-rpki.idnic.net/repo/02913fa1-33ae-4e33-bbe2-81bd9f03c84b/0/8C57C5860BF938BB57E0B7ED0F890D70BFEE55A0.mft Manifest number: 0331 Signing time: Thu 04 Sep 2025 00:40:03 +0000 Manifest this update: Thu 04 Sep 2025 00:35:03 +0000 Manifest next update: Sun 07 Sep 2025 05:02:03 +0000 Files and hashes: 1: 8C57C5860BF938BB57E0B7ED0F890D70BFEE55A0.crl (hash: AJ+4gPLBi4uj3Usd2gCm4mzz+2E6XkY/ey6fKON4xAU=) 2: 3130332e3135392e3230322e302f32332d3234203d3e20313331313131.roa (hash: Ho5Y5TOHX49gl1fZYVO+j2M3OjYa1AKAk+KnhAmd/6M=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/02913fa1-33ae-4e33-bbe2-81bd9f03c84b/0/8C57C5860BF938BB57E0B7ED0F890D70BFEE55A0.crl rsync://repo-rpki.idnic.net/repo/02913fa1-33ae-4e33-bbe2-81bd9f03c84b/0/8C57C5860BF938BB57E0B7ED0F890D70BFEE55A0.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8C57C5860BF938BB57E0B7ED0F890D70BFEE55A0.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 07 Sep 2025 05:02:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 21:24:78:52:79:74:c5:97:3e:4b:71:42:90:da:f7:8d:a1:ac:50:c7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8C57C5860BF938BB57E0B7ED0F890D70BFEE55A0 Validity Not Before: Sep 4 00:35:03 2025 GMT Not After : Sep 7 05:02:03 2025 GMT Subject: CN=20D8D23749DFE83316E39166409BD4C0F148DDBD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:86:17:30:6f:30:9c:b2:61:ba:cb:9a:fb:5e: 2e:19:15:e9:9f:f6:16:d9:37:99:ef:70:61:35:96: 91:f8:d5:99:3f:2c:77:f1:51:d4:bc:e6:28:a3:7f: 4b:90:cf:c6:75:3a:03:57:82:08:2a:c2:77:b5:33: ad:c7:e7:91:4b:90:d8:a8:c9:9c:ae:b9:a7:34:ec: b0:78:b8:d8:0c:a7:52:68:68:5c:d2:b5:39:6d:7b: bf:7f:6c:9d:45:dc:bc:93:68:c9:64:14:1c:51:9e: 05:1e:0c:db:d0:df:80:fc:79:28:c5:e5:65:10:a1: 4e:62:63:b7:27:ff:6d:96:f7:c6:7c:fd:0f:d8:6d: 76:a1:94:fe:d1:97:a1:51:a0:14:6b:00:ad:0d:29: 0f:5e:d9:45:aa:ac:48:82:16:09:6e:3c:e4:92:3d: 5f:6d:63:83:db:29:ac:a9:ea:df:e0:d5:e0:b5:c9: 3f:f8:d4:19:71:ff:19:a6:ff:f4:94:c6:3f:73:df: fa:4e:f8:36:ef:c4:4b:90:01:f1:a1:ae:ea:1e:53: 13:d5:9c:c0:e6:d6:d7:ed:a4:05:48:b5:7e:94:f0: 5f:ec:b8:c6:2a:b6:ac:e2:7e:37:41:fa:e2:54:13: 99:4b:17:bb:7d:2b:14:3a:da:ba:7a:f7:57:ea:42: ec:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:D8:D2:37:49:DF:E8:33:16:E3:91:66:40:9B:D4:C0:F1:48:DD:BD X509v3 Authority Key Identifier: keyid:8C:57:C5:86:0B:F9:38:BB:57:E0:B7:ED:0F:89:0D:70:BF:EE:55:A0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/02913fa1-33ae-4e33-bbe2-81bd9f03c84b/0/8C57C5860BF938BB57E0B7ED0F890D70BFEE55A0.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8C57C5860BF938BB57E0B7ED0F890D70BFEE55A0.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/02913fa1-33ae-4e33-bbe2-81bd9f03c84b/0/8C57C5860BF938BB57E0B7ED0F890D70BFEE55A0.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 81:ca:b5:9f:3a:86:7b:a1:7b:b0:99:01:58:76:31:4d:15:c9: e0:72:84:f9:43:94:7c:50:09:44:36:ef:9d:8a:fd:37:2b:45: 6c:15:fe:dc:32:a2:24:9e:82:84:42:b6:1c:89:cc:b3:0e:1b: b8:b1:3d:0f:49:a3:95:57:ad:08:c9:8c:fe:1a:9c:e7:ef:9e: 05:99:5f:16:97:77:23:53:6d:dc:d9:b6:28:92:02:5d:5a:aa: d1:ca:74:79:3f:6d:1f:df:39:b2:14:e8:de:94:55:70:a0:35: 68:81:be:ff:ec:11:c8:e5:81:37:33:a8:12:b2:d4:13:4b:6a: b9:6a:fb:c5:51:65:37:dc:64:50:1b:e6:71:bf:6b:79:3d:a6: a8:18:f8:7d:26:f6:f0:b2:98:ad:1f:08:88:e3:5a:80:67:e7: cf:73:10:2e:fb:35:af:a8:9c:23:2a:f1:f5:fe:a6:41:e9:c0: 7e:31:b4:9c:a5:7e:f3:a9:d6:19:f7:38:e9:c3:72:20:4e:21: ea:76:c9:5d:af:6a:8a:13:a1:78:f4:8f:0b:e2:ca:2e:82:d2: 82:b6:21:ab:94:d4:be:e3:b3:e0:af:94:80:0b:48:92:c3:8f: 25:af:0e:d9:57:aa:78:03:f1:ab:9d:88:7d:d2:69:f0:bd:4f: fb:cf:e5:26 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUISR4Unl0xZc+S3FCkNr3jaGsUMcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEM1N0M1ODYwQkY5MzhCQjU3RTBCN0VEMEY4OTBENzBC RkVFNTVBMDAeFw0yNTA5MDQwMDM1MDNaFw0yNTA5MDcwNTAyMDNaMDMxMTAvBgNV BAMTKDIwRDhEMjM3NDlERkU4MzMxNkUzOTE2NjQwOUJENEMwRjE0OEREQkQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDZhhcwbzCcsmG6y5r7Xi4ZFemf 9hbZN5nvcGE1lpH41Zk/LHfxUdS85iijf0uQz8Z1OgNXgggqwne1M63H55FLkNio yZyuuac07LB4uNgMp1JoaFzStTlte79/bJ1F3LyTaMlkFBxRngUeDNvQ34D8eSjF 5WUQoU5iY7cn/22W98Z8/Q/YbXahlP7Rl6FRoBRrAK0NKQ9e2UWqrEiCFgluPOSS PV9tY4PbKayp6t/g1eC1yT/41Blx/xmm//SUxj9z3/pO+DbvxEuQAfGhruoeUxPV nMDm1tftpAVItX6U8F/suMYqtqzifjdB+uJUE5lLF7t9KxQ62rp691fqQuypAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUINjSN0nf6DMW45FmQJvUwPFI3b0wHwYDVR0j BBgwFoAUjFfFhgv5OLtX4LftD4kNcL/uVaAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w MjkxM2ZhMS0zM2FlLTRlMzMtYmJlMi04MWJkOWYwM2M4NGIvMC84QzU3QzU4NjBC RjkzOEJCNTdFMEI3RUQwRjg5MEQ3MEJGRUU1NUEwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOEM1N0M1ODYwQkY5MzhCQjU3RTBCN0VEMEY4OTBENzBCRkVF NTVBMC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMDI5MTNmYTEtMzNhZS00ZTMzLWJi ZTItODFiZDlmMDNjODRiLzAvOEM1N0M1ODYwQkY5MzhCQjU3RTBCN0VEMEY4OTBE NzBCRkVFNTVBMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIHKtZ86hnuhe7CZAVh2MU0VyeByhPlDlHxQ CUQ2752K/TcrRWwV/twyoiSegoRCthyJzLMOG7ixPQ9Jo5VXrQjJjP4anOfvngWZ XxaXdyNTbdzZtiiSAl1aqtHKdHk/bR/fObIU6N6UVXCgNWiBvv/sEcjlgTczqBKy 1BNLarlq+8VRZTfcZFAb5nG/a3k9pqgY+H0m9vCymK0fCIjjWoBn589zEC77Na+o nCMq8fX+pkHpwH4xtJylfvOp1hn3OOnDciBOIep2yV2vaooToXj0jwviyi6C0oK2 IauU1L7js+CvlIALSJLDjyWvDtlXqngD8audiH3SafC9T/vP5SY= -----END CERTIFICATE-----Generated at Fri Sep 5 10:34:29 2025 by rpki-client