$ rpki-client -vvf repo-rpki.idnic.net/repo/09a88897-c387-4735-acd8-1d1c53cde264/0/8B7E0099F26BEEE90826C9B0E424575BDE128403.mft File: 8B7E0099F26BEEE90826C9B0E424575BDE128403.mft (raw, json) Hash identifier: mlmYRIZhpy9Szit1TZPfJI7MIV8eTUMdgQ26u65Xmug= Subject key identifier: FA:64:3C:7A:84:E9:68:BD:78:50:F1:8E:93:54:3D:71:6D:3F:F3:E2 Authority key identifier: 8B:7E:00:99:F2:6B:EE:E9:08:26:C9:B0:E4:24:57:5B:DE:12:84:03 Certificate issuer: /CN=8B7E0099F26BEEE90826C9B0E424575BDE128403 Certificate serial: 248D5784C03299DF241249B5001ABDC9BBC1ED95 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8B7E0099F26BEEE90826C9B0E424575BDE128403.cer Subject info access: rsync://repo-rpki.idnic.net/repo/09a88897-c387-4735-acd8-1d1c53cde264/0/8B7E0099F26BEEE90826C9B0E424575BDE128403.mft Manifest number: 028C Signing time: Fri 05 Sep 2025 08:12:04 +0000 Manifest this update: Fri 05 Sep 2025 08:07:04 +0000 Manifest next update: Mon 08 Sep 2025 17:14:04 +0000 Files and hashes: 1: 8B7E0099F26BEEE90826C9B0E424575BDE128403.crl (hash: PbayQiH4dFG9iYSbhygnMPCl8g/drMryb+TsmlsjQBI=) 2: 3130332e3137392e38362e302f32332d3234203d3e20313430333839.roa (hash: rY4tz9/kQego7cZpv2afdmhIw5rIucEsOqMDCxyUCMk=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/09a88897-c387-4735-acd8-1d1c53cde264/0/8B7E0099F26BEEE90826C9B0E424575BDE128403.crl rsync://repo-rpki.idnic.net/repo/09a88897-c387-4735-acd8-1d1c53cde264/0/8B7E0099F26BEEE90826C9B0E424575BDE128403.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8B7E0099F26BEEE90826C9B0E424575BDE128403.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 08 Sep 2025 17:14:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 24:8d:57:84:c0:32:99:df:24:12:49:b5:00:1a:bd:c9:bb:c1:ed:95 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8B7E0099F26BEEE90826C9B0E424575BDE128403 Validity Not Before: Sep 5 08:07:04 2025 GMT Not After : Sep 8 17:14:04 2025 GMT Subject: CN=FA643C7A84E968BD7850F18E93543D716D3FF3E2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:82:28:5a:10:06:85:6b:b2:99:f5:38:60:97: 2c:fc:a8:a3:16:9a:22:51:6f:bc:ab:3e:eb:c7:7f: 18:58:21:72:4e:d4:79:fc:43:11:66:22:85:51:1b: c8:35:2e:b0:a7:09:e1:e4:94:77:8f:d5:8d:1c:33: ab:cf:8e:10:bb:a7:86:d6:f5:2c:46:7e:36:e8:52: 69:83:2a:44:78:35:cd:8f:c6:0b:3a:97:7c:07:11: ae:07:41:49:13:e1:8d:f2:8b:37:0b:e7:41:61:99: cf:a2:1c:43:a9:ec:97:e5:3a:62:68:ee:98:04:61: 30:18:46:fe:3e:02:a7:21:55:30:75:11:3e:f9:32: 28:bf:8d:10:88:77:31:95:13:3f:08:1c:95:de:62: 14:f9:30:35:01:a8:17:b4:3d:66:dd:bd:a0:4b:b3: 6b:c5:f2:6e:84:22:db:f9:43:17:9f:b2:dd:98:96: af:df:1a:6f:e1:62:88:80:ea:56:51:37:14:fd:4d: d3:5e:93:b8:35:17:51:46:79:18:32:8e:8f:8d:83: 25:99:de:6e:93:18:e0:2b:50:9e:9b:1e:a9:55:4c: 95:12:8f:b4:b7:a4:de:01:b9:98:24:c4:fc:b4:63: 37:8b:79:00:a1:7d:9a:8d:cb:e8:80:ee:d7:23:47: 6f:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FA:64:3C:7A:84:E9:68:BD:78:50:F1:8E:93:54:3D:71:6D:3F:F3:E2 X509v3 Authority Key Identifier: keyid:8B:7E:00:99:F2:6B:EE:E9:08:26:C9:B0:E4:24:57:5B:DE:12:84:03 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/09a88897-c387-4735-acd8-1d1c53cde264/0/8B7E0099F26BEEE90826C9B0E424575BDE128403.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8B7E0099F26BEEE90826C9B0E424575BDE128403.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/09a88897-c387-4735-acd8-1d1c53cde264/0/8B7E0099F26BEEE90826C9B0E424575BDE128403.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3f:b4:7c:8d:0c:9a:01:7f:ab:0b:d5:c0:3d:76:d0:6e:fa:1a: b9:6e:27:f8:23:67:91:48:4c:61:f8:61:fb:15:08:28:17:e7: 69:bf:2f:d0:20:b8:b3:ab:07:45:36:95:1a:b4:32:8b:0d:a0: 66:59:25:de:13:5a:e2:56:ec:38:5d:0d:48:36:a5:c1:68:f9: c0:49:27:33:81:4e:0b:dc:0d:23:2d:8a:e8:8e:6a:a6:ca:ad: 52:2e:21:48:c4:41:f0:4b:e2:9c:0d:81:53:51:ad:4b:9c:52: a0:6d:ff:6c:47:98:a7:42:dc:30:5d:2f:e5:5c:86:fe:9e:f4: f6:a2:7a:6f:79:0a:09:40:f0:ca:18:ed:88:95:0b:fd:c5:cf: a4:6f:98:f6:79:95:81:11:06:e7:89:36:34:0f:e3:3c:85:99: cc:fa:41:06:0b:f3:48:be:f1:ff:fe:aa:28:38:76:4e:1d:8e: 9b:ae:c4:3a:72:59:92:27:8d:f5:83:95:5f:59:61:e4:4f:92: 7b:67:9c:52:6b:6b:2a:95:39:00:c7:f6:bf:f2:87:d8:55:a7: ef:1a:12:ce:66:8b:ff:d5:9b:93:0b:46:bd:2e:be:10:36:2d: 10:16:d3:44:47:17:c0:69:e3:90:34:94:a6:fd:8b:51:9a:58: 45:7e:68:78 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUJI1XhMAymd8kEkm1ABq9ybvB7ZUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEI3RTAwOTlGMjZCRUVFOTA4MjZDOUIwRTQyNDU3NUJE RTEyODQwMzAeFw0yNTA5MDUwODA3MDRaFw0yNTA5MDgxNzE0MDRaMDMxMTAvBgNV BAMTKEZBNjQzQzdBODRFOTY4QkQ3ODUwRjE4RTkzNTQzRDcxNkQzRkYzRTIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCtgihaEAaFa7KZ9Thglyz8qKMW miJRb7yrPuvHfxhYIXJO1Hn8QxFmIoVRG8g1LrCnCeHklHeP1Y0cM6vPjhC7p4bW 9SxGfjboUmmDKkR4Nc2Pxgs6l3wHEa4HQUkT4Y3yizcL50Fhmc+iHEOp7JflOmJo 7pgEYTAYRv4+AqchVTB1ET75Mii/jRCIdzGVEz8IHJXeYhT5MDUBqBe0PWbdvaBL s2vF8m6EItv5Qxefst2Ylq/fGm/hYoiA6lZRNxT9TdNek7g1F1FGeRgyjo+NgyWZ 3m6TGOArUJ6bHqlVTJUSj7S3pN4BuZgkxPy0YzeLeQChfZqNy+iA7tcjR2/BAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU+mQ8eoTpaL14UPGOk1Q9cW0/8+IwHwYDVR0j BBgwFoAUi34AmfJr7ukIJsmw5CRXW94ShAMwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w OWE4ODg5Ny1jMzg3LTQ3MzUtYWNkOC0xZDFjNTNjZGUyNjQvMC84QjdFMDA5OUYy NkJFRUU5MDgyNkM5QjBFNDI0NTc1QkRFMTI4NDAzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOEI3RTAwOTlGMjZCRUVFOTA4MjZDOUIwRTQyNDU3NUJERTEy ODQwMy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMDlhODg4OTctYzM4Ny00NzM1LWFj ZDgtMWQxYzUzY2RlMjY0LzAvOEI3RTAwOTlGMjZCRUVFOTA4MjZDOUIwRTQyNDU3 NUJERTEyODQwMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAD+0fI0MmgF/qwvVwD120G76GrluJ/gjZ5FI TGH4YfsVCCgX52m/L9AguLOrB0U2lRq0MosNoGZZJd4TWuJW7DhdDUg2pcFo+cBJ JzOBTgvcDSMtiuiOaqbKrVIuIUjEQfBL4pwNgVNRrUucUqBt/2xHmKdC3DBdL+Vc hv6e9Paiem95CglA8MoY7YiVC/3Fz6RvmPZ5lYERBueJNjQP4zyFmcz6QQYL80i+ 8f/+qig4dk4djpuuxDpyWZInjfWDlV9ZYeRPkntnnFJrayqVOQDH9r/yh9hVp+8a Es5mi//Vm5MLRr0uvhA2LRAW00RHF8Bp45A0lKb9i1GaWEV+aHg= -----END CERTIFICATE-----Generated at Fri Sep 5 10:09:30 2025 by rpki-client