$ rpki-client -vvf repo-rpki.idnic.net/repo/0f8d824d-d6a1-4543-9cf0-d9926832f29f/0/84D5328962D0ADCA772ECA2A427E097F281CCEB4.mft File: 84D5328962D0ADCA772ECA2A427E097F281CCEB4.mft (raw, json) Hash identifier: tem2POk/twKdP/ftAuMPOoHR5kRSgRW7z9i1bOjaJIw= Subject key identifier: AB:A3:CA:6F:2A:80:D4:6A:6D:BC:39:C9:CA:91:0C:34:5E:63:40:68 Authority key identifier: 84:D5:32:89:62:D0:AD:CA:77:2E:CA:2A:42:7E:09:7F:28:1C:CE:B4 Certificate issuer: /CN=84D5328962D0ADCA772ECA2A427E097F281CCEB4 Certificate serial: 20BFD63D5BE7053156B232335E7358A0105F4037 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/84D5328962D0ADCA772ECA2A427E097F281CCEB4.cer Subject info access: rsync://repo-rpki.idnic.net/repo/0f8d824d-d6a1-4543-9cf0-d9926832f29f/0/84D5328962D0ADCA772ECA2A427E097F281CCEB4.mft Manifest number: C8 Signing time: Sat 30 Aug 2025 23:51:57 +0000 Manifest this update: Sat 30 Aug 2025 23:46:57 +0000 Manifest next update: Wed 03 Sep 2025 10:54:57 +0000 Files and hashes: 1: 84D5328962D0ADCA772ECA2A427E097F281CCEB4.crl (hash: v8BSpPtNmzpBBtJXJ/7h45ffApH7GJZSDqUQPPAygEs=) 2: 3135372e36362e3133312e302f32342d3234203d3e20313339393337.roa (hash: i4JiZSoYZHLIwwO6OZUV0v9wdjo3Gmg5PRc7UcGllf8=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/0f8d824d-d6a1-4543-9cf0-d9926832f29f/0/84D5328962D0ADCA772ECA2A427E097F281CCEB4.crl rsync://repo-rpki.idnic.net/repo/0f8d824d-d6a1-4543-9cf0-d9926832f29f/0/84D5328962D0ADCA772ECA2A427E097F281CCEB4.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/84D5328962D0ADCA772ECA2A427E097F281CCEB4.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 02 Sep 2025 02:27:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 20:bf:d6:3d:5b:e7:05:31:56:b2:32:33:5e:73:58:a0:10:5f:40:37 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=84D5328962D0ADCA772ECA2A427E097F281CCEB4 Validity Not Before: Aug 30 23:46:57 2025 GMT Not After : Sep 3 10:54:57 2025 GMT Subject: CN=ABA3CA6F2A80D46A6DBC39C9CA910C345E634068 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:d0:c7:6c:f2:24:46:c4:25:dc:f0:77:a2:16: 7d:be:95:a4:88:70:08:29:14:84:a9:37:5c:05:01: a3:7a:1e:83:87:5e:fd:11:df:35:6a:86:03:56:99: ce:84:d0:6e:5d:14:bc:c0:1c:f1:a4:b9:0c:74:0c: 39:ff:99:8d:4b:30:bc:eb:b0:87:d6:8f:35:3f:d5: 97:c6:8e:91:c2:06:b9:ae:60:b2:21:f6:af:69:af: 2a:64:48:68:90:64:26:ce:89:df:19:29:fd:2a:26: 3b:92:ed:71:57:45:0e:fe:d1:61:a2:1b:77:aa:ea: b1:c0:aa:96:3f:55:49:8e:38:e1:ec:41:59:b5:f4: 80:41:10:1c:c2:8b:aa:0e:85:37:ce:b5:92:ed:3b: de:dc:8f:0c:05:a9:b8:ac:23:ac:5b:0c:f3:8c:4d: 55:1c:b7:9f:04:14:19:4e:03:87:72:f3:ce:c0:45: 3c:41:1d:e7:bd:cf:e3:a6:a7:ab:04:46:2d:dd:3e: 44:b5:49:0e:78:70:50:2e:58:e1:3c:dc:f8:3b:c0: 70:71:b4:d5:fd:cc:66:51:9f:90:ec:26:6b:88:0f: bd:d8:41:72:f3:b6:b3:08:0b:9b:40:c7:56:8b:81: f9:5b:48:3e:8b:2f:93:3e:2b:19:fb:42:ea:8a:d6: d4:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AB:A3:CA:6F:2A:80:D4:6A:6D:BC:39:C9:CA:91:0C:34:5E:63:40:68 X509v3 Authority Key Identifier: keyid:84:D5:32:89:62:D0:AD:CA:77:2E:CA:2A:42:7E:09:7F:28:1C:CE:B4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/0f8d824d-d6a1-4543-9cf0-d9926832f29f/0/84D5328962D0ADCA772ECA2A427E097F281CCEB4.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/84D5328962D0ADCA772ECA2A427E097F281CCEB4.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/0f8d824d-d6a1-4543-9cf0-d9926832f29f/0/84D5328962D0ADCA772ECA2A427E097F281CCEB4.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 68:9e:19:23:2e:ec:69:0b:92:a5:5d:aa:79:1f:a2:1c:93:45: 21:6a:ef:86:4f:04:a1:c7:ec:fc:83:ec:2f:30:fb:45:ae:11: 9d:8a:42:71:29:f8:e3:1b:cf:17:39:db:b8:06:45:b3:f2:c4: 7e:41:c6:f4:54:81:e0:7a:e6:c8:68:07:75:39:ef:c6:90:6d: 92:d9:7d:84:d8:d5:d1:25:57:62:a1:ec:cd:86:27:4a:15:f8: ff:b0:97:34:85:37:cd:cf:34:99:a2:8c:06:a3:89:53:a2:45: 8e:b5:91:37:30:9b:05:47:72:08:e1:24:4d:30:fe:0b:98:3e: 01:6f:2e:be:93:22:d5:63:2a:9f:b9:9b:d9:5b:9e:42:03:91: 33:1c:95:7a:67:d6:68:60:d9:5d:81:d1:8d:6f:dd:fa:e9:17: 83:af:ff:42:e9:24:40:cf:9e:ae:97:1b:54:a9:fe:ab:16:ab: a7:18:8b:99:4f:e4:fb:dd:47:e0:23:cc:0d:dc:a9:d8:e5:bd: f0:78:e7:57:0c:d2:59:79:95:56:72:1f:1c:de:86:76:ef:40: d7:b6:25:40:e7:9c:25:74:fc:a9:97:5d:b9:c5:8b:69:25:b4: 83:e1:9a:bc:1b:cd:86:2e:da:b2:52:f8:64:4c:09:2c:e8:5b: ed:1a:ab:c4 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUIL/WPVvnBTFWsjIzXnNYoBBfQDcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODRENTMyODk2MkQwQURDQTc3MkVDQTJBNDI3RTA5N0Yy ODFDQ0VCNDAeFw0yNTA4MzAyMzQ2NTdaFw0yNTA5MDMxMDU0NTdaMDMxMTAvBgNV BAMTKEFCQTNDQTZGMkE4MEQ0NkE2REJDMzlDOUNBOTEwQzM0NUU2MzQwNjgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/0Mds8iRGxCXc8HeiFn2+laSI cAgpFISpN1wFAaN6HoOHXv0R3zVqhgNWmc6E0G5dFLzAHPGkuQx0DDn/mY1LMLzr sIfWjzU/1ZfGjpHCBrmuYLIh9q9prypkSGiQZCbOid8ZKf0qJjuS7XFXRQ7+0WGi G3eq6rHAqpY/VUmOOOHsQVm19IBBEBzCi6oOhTfOtZLtO97cjwwFqbisI6xbDPOM TVUct58EFBlOA4dy887ARTxBHee9z+Omp6sERi3dPkS1SQ54cFAuWOE83Pg7wHBx tNX9zGZRn5DsJmuID73YQXLztrMIC5tAx1aLgflbSD6LL5M+Kxn7QuqK1tTHAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUq6PKbyqA1GptvDnJypEMNF5jQGgwHwYDVR0j BBgwFoAUhNUyiWLQrcp3LsoqQn4JfygczrQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w ZjhkODI0ZC1kNmExLTQ1NDMtOWNmMC1kOTkyNjgzMmYyOWYvMC84NEQ1MzI4OTYy RDBBRENBNzcyRUNBMkE0MjdFMDk3RjI4MUNDRUI0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvODRENTMyODk2MkQwQURDQTc3MkVDQTJBNDI3RTA5N0YyODFD Q0VCNC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMGY4ZDgyNGQtZDZhMS00NTQzLTlj ZjAtZDk5MjY4MzJmMjlmLzAvODRENTMyODk2MkQwQURDQTc3MkVDQTJBNDI3RTA5 N0YyODFDQ0VCNC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGieGSMu7GkLkqVdqnkfohyTRSFq74ZPBKHH 7PyD7C8w+0WuEZ2KQnEp+OMbzxc527gGRbPyxH5BxvRUgeB65shoB3U578aQbZLZ fYTY1dElV2Kh7M2GJ0oV+P+wlzSFN83PNJmijAajiVOiRY61kTcwmwVHcgjhJE0w /guYPgFvLr6TItVjKp+5m9lbnkIDkTMclXpn1mhg2V2B0Y1v3frpF4Ov/0LpJEDP nq6XG1Sp/qsWq6cYi5lP5PvdR+AjzA3cqdjlvfB451cM0ll5lVZyHxzehnbvQNe2 JUDnnCV0/KmXXbnFi2kltIPhmrwbzYYu2rJS+GRMCSzoW+0aq8Q= -----END CERTIFICATE-----Generated at Sun Aug 31 14:08:27 2025 by rpki-client