$ rpki-client -vvf repo-rpki.idnic.net/repo/0a75d371-18c7-48df-8f61-1d404b646413/0/8EEE0584B224A95915512EA70FE012A4AF134C7A.mft File: 8EEE0584B224A95915512EA70FE012A4AF134C7A.mft (raw, json) Hash identifier: 6Vzj9xIXMkLdZA2FZxJZBt4OgzhnmeYiC5uvv+tDloM= Subject key identifier: 14:84:C9:C1:9E:2E:6D:57:37:50:8F:06:4E:2D:51:52:14:95:9B:83 Authority key identifier: 8E:EE:05:84:B2:24:A9:59:15:51:2E:A7:0F:E0:12:A4:AF:13:4C:7A Certificate issuer: /CN=8EEE0584B224A95915512EA70FE012A4AF134C7A Certificate serial: 437AE274E4FE588EC1F0AD9FDE6249A751BBA1EE Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8EEE0584B224A95915512EA70FE012A4AF134C7A.cer Subject info access: rsync://repo-rpki.idnic.net/repo/0a75d371-18c7-48df-8f61-1d404b646413/0/8EEE0584B224A95915512EA70FE012A4AF134C7A.mft Manifest number: 0504 Signing time: Thu 04 Sep 2025 16:31:08 +0000 Manifest this update: Thu 04 Sep 2025 16:26:08 +0000 Manifest next update: Sun 07 Sep 2025 20:56:08 +0000 Files and hashes: 1: 8EEE0584B224A95915512EA70FE012A4AF134C7A.crl (hash: DXq1gae/ILMPW6IYYnuNG1KSd5Ban4iSmr74yo27IRA=) 2: 3130332e39352e3136302e302f32332d3234203d3e20313336313236.roa (hash: KD7T4Ue/VEXioee+nFto/OfNIEmRxJwHxyIAd7JKH2Q=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/0a75d371-18c7-48df-8f61-1d404b646413/0/8EEE0584B224A95915512EA70FE012A4AF134C7A.crl rsync://repo-rpki.idnic.net/repo/0a75d371-18c7-48df-8f61-1d404b646413/0/8EEE0584B224A95915512EA70FE012A4AF134C7A.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8EEE0584B224A95915512EA70FE012A4AF134C7A.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 07 Sep 2025 20:56:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 43:7a:e2:74:e4:fe:58:8e:c1:f0:ad:9f:de:62:49:a7:51:bb:a1:ee Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8EEE0584B224A95915512EA70FE012A4AF134C7A Validity Not Before: Sep 4 16:26:08 2025 GMT Not After : Sep 7 20:56:08 2025 GMT Subject: CN=1484C9C19E2E6D5737508F064E2D515214959B83 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:f8:06:38:37:4b:2a:e6:fb:97:34:47:ed:c5: ad:9b:44:d7:73:74:27:c1:83:07:a8:41:a7:5e:8f: 3f:a3:e2:24:d4:0c:43:4e:a6:4c:37:be:b3:c1:a2: 01:fa:d8:2f:fe:55:1c:26:47:09:77:a1:56:85:0b: 3a:49:a0:df:dd:5d:d8:9a:92:07:b2:64:f2:2c:92: 84:3f:00:bf:83:ae:f7:6a:06:58:18:7b:55:aa:c5: 2c:39:8e:5d:71:10:1e:d6:16:29:cb:06:7f:62:05: 57:94:8b:47:de:56:ac:dc:7f:08:9f:ef:b6:35:a5: c1:cf:c5:b7:d7:03:c2:5c:6c:29:8f:e8:a3:6e:51: bd:15:11:07:05:fa:4c:e9:39:a5:c1:6f:b4:ec:c4: 5c:cf:2e:74:8f:42:a3:41:51:70:87:7b:eb:19:cf: cd:a1:47:fc:8c:f1:52:3a:7a:76:98:3d:fc:31:c5: aa:6e:ff:8f:86:58:3c:03:49:f2:9e:34:a0:e2:8c: 19:3a:f9:6b:ab:d7:e8:27:2b:bd:dd:a5:f8:5a:4a: 70:2e:1a:ac:7f:f2:94:36:57:1a:f3:6f:87:81:7c: 1d:56:c6:49:70:82:ad:c6:49:e6:8f:59:8c:f4:a7: 37:85:a9:91:ce:e3:bb:df:86:25:83:27:0e:69:81: d9:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:84:C9:C1:9E:2E:6D:57:37:50:8F:06:4E:2D:51:52:14:95:9B:83 X509v3 Authority Key Identifier: keyid:8E:EE:05:84:B2:24:A9:59:15:51:2E:A7:0F:E0:12:A4:AF:13:4C:7A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/0a75d371-18c7-48df-8f61-1d404b646413/0/8EEE0584B224A95915512EA70FE012A4AF134C7A.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8EEE0584B224A95915512EA70FE012A4AF134C7A.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/0a75d371-18c7-48df-8f61-1d404b646413/0/8EEE0584B224A95915512EA70FE012A4AF134C7A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 04:ca:53:89:64:c6:a4:81:0f:1e:ad:d7:6c:78:59:c8:12:4a: af:2a:58:ce:bd:6e:04:6b:07:c4:76:94:16:0a:9d:e2:db:4a: a8:9a:27:09:df:da:94:25:d9:3b:7a:1f:36:cc:59:bb:fa:3f: 6f:d2:cd:55:cb:01:1f:f7:a3:e4:90:05:68:e0:87:d9:ec:89: cc:ce:47:f9:3d:bc:71:2c:bf:01:14:f3:fd:e6:74:15:7e:3b: a6:b9:87:1a:ee:5d:da:92:33:3d:3e:2e:a9:82:2b:84:e4:ab: 8f:97:4d:8d:68:d2:cc:85:43:59:1d:e1:1c:91:af:65:ef:04: a4:a2:e6:4f:14:0d:a0:7b:ac:f0:c1:2b:bc:cd:3f:c7:fb:67: 81:f0:ab:e0:ba:1b:b6:d6:2f:e8:f2:86:31:8b:76:f4:48:5d: 51:9d:e2:ba:dc:63:0a:26:cc:48:06:97:d5:d3:72:ca:5a:17: 07:dd:d7:9a:8d:ef:b2:70:44:40:ce:fa:46:4a:97:7e:f1:f1: 89:9c:09:5c:45:03:cb:b1:24:93:4d:6a:54:09:5d:db:73:e1: b0:2c:90:5d:10:84:80:15:2c:1e:8d:2b:9e:eb:23:85:7e:bd: d1:79:c2:f7:21:c2:12:46:17:0e:64:b9:52:28:f9:b2:bd:57: ed:e4:d6:55 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUQ3ridOT+WI7B8K2f3mJJp1G7oe4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEVFRTA1ODRCMjI0QTk1OTE1NTEyRUE3MEZFMDEyQTRB RjEzNEM3QTAeFw0yNTA5MDQxNjI2MDhaFw0yNTA5MDcyMDU2MDhaMDMxMTAvBgNV BAMTKDE0ODRDOUMxOUUyRTZENTczNzUwOEYwNjRFMkQ1MTUyMTQ5NTlCODMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDb+AY4N0sq5vuXNEftxa2bRNdz dCfBgweoQadejz+j4iTUDENOpkw3vrPBogH62C/+VRwmRwl3oVaFCzpJoN/dXdia kgeyZPIskoQ/AL+DrvdqBlgYe1WqxSw5jl1xEB7WFinLBn9iBVeUi0feVqzcfwif 77Y1pcHPxbfXA8JcbCmP6KNuUb0VEQcF+kzpOaXBb7TsxFzPLnSPQqNBUXCHe+sZ z82hR/yM8VI6enaYPfwxxapu/4+GWDwDSfKeNKDijBk6+Wur1+gnK73dpfhaSnAu Gqx/8pQ2Vxrzb4eBfB1Wxklwgq3GSeaPWYz0pzeFqZHO47vfhiWDJw5pgdlpAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUFITJwZ4ubVc3UI8GTi1RUhSVm4MwHwYDVR0j BBgwFoAUju4FhLIkqVkVUS6nD+ASpK8TTHowDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w YTc1ZDM3MS0xOGM3LTQ4ZGYtOGY2MS0xZDQwNGI2NDY0MTMvMC84RUVFMDU4NEIy MjRBOTU5MTU1MTJFQTcwRkUwMTJBNEFGMTM0QzdBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOEVFRTA1ODRCMjI0QTk1OTE1NTEyRUE3MEZFMDEyQTRBRjEz NEM3QS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMGE3NWQzNzEtMThjNy00OGRmLThm NjEtMWQ0MDRiNjQ2NDEzLzAvOEVFRTA1ODRCMjI0QTk1OTE1NTEyRUE3MEZFMDEy QTRBRjEzNEM3QS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAATKU4lkxqSBDx6t12x4WcgSSq8qWM69bgRr B8R2lBYKneLbSqiaJwnf2pQl2Tt6HzbMWbv6P2/SzVXLAR/3o+SQBWjgh9nsiczO R/k9vHEsvwEU8/3mdBV+O6a5hxruXdqSMz0+LqmCK4Tkq4+XTY1o0syFQ1kd4RyR r2XvBKSi5k8UDaB7rPDBK7zNP8f7Z4Hwq+C6G7bWL+jyhjGLdvRIXVGd4rrcYwom zEgGl9XTcspaFwfd15qN77JwREDO+kZKl37x8YmcCVxFA8uxJJNNalQJXdtz4bAs kF0QhIAVLB6NK57rI4V+vdF5wvchwhJGFw5kuVIo+bK9V+3k1lU= -----END CERTIFICATE-----Generated at Fri Sep 5 10:16:16 2025 by rpki-client