$ rpki-client -vvf repo-rpki.idnic.net/repo/14758e8e-49c8-48b8-bdcb-35339e2ae601/0/8F9164714A1B3B906CF8A8B371F342EBA3540CD9.mft File: 8F9164714A1B3B906CF8A8B371F342EBA3540CD9.mft (raw, json) Hash identifier: CJ54fNvnVRux5Uc6Vwf6lKg0/5nFu64aoNq8jHzbJMw= Subject key identifier: B1:1C:AE:40:60:1D:39:40:3F:28:65:E1:84:7E:0F:89:1C:87:FD:F7 Authority key identifier: 8F:91:64:71:4A:1B:3B:90:6C:F8:A8:B3:71:F3:42:EB:A3:54:0C:D9 Certificate issuer: /CN=8F9164714A1B3B906CF8A8B371F342EBA3540CD9 Certificate serial: 65F6E01975C9F68CD0E67F505BB3DE922D21FA4F Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8F9164714A1B3B906CF8A8B371F342EBA3540CD9.cer Subject info access: rsync://repo-rpki.idnic.net/repo/14758e8e-49c8-48b8-bdcb-35339e2ae601/0/8F9164714A1B3B906CF8A8B371F342EBA3540CD9.mft Manifest number: 01FF Signing time: Fri 05 Sep 2025 10:20:35 +0000 Manifest this update: Fri 05 Sep 2025 10:15:34 +0000 Manifest next update: Mon 08 Sep 2025 21:06:34 +0000 Files and hashes: 1: 8F9164714A1B3B906CF8A8B371F342EBA3540CD9.crl (hash: prWNfuX4YzatqIRa2dfRkrnuj/p0onb2bMF23KIE6Mk=) 2: 3130332e3138382e3131392e302f32342d3234203d3e20313439373435.roa (hash: VHhhP8m98Q6XFX6o9Io0DEj5+ACOMVpb0NESi8BC7x8=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/14758e8e-49c8-48b8-bdcb-35339e2ae601/0/8F9164714A1B3B906CF8A8B371F342EBA3540CD9.crl rsync://repo-rpki.idnic.net/repo/14758e8e-49c8-48b8-bdcb-35339e2ae601/0/8F9164714A1B3B906CF8A8B371F342EBA3540CD9.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8F9164714A1B3B906CF8A8B371F342EBA3540CD9.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 08 Sep 2025 21:06:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 65:f6:e0:19:75:c9:f6:8c:d0:e6:7f:50:5b:b3:de:92:2d:21:fa:4f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8F9164714A1B3B906CF8A8B371F342EBA3540CD9 Validity Not Before: Sep 5 10:15:34 2025 GMT Not After : Sep 8 21:06:34 2025 GMT Subject: CN=B11CAE40601D39403F2865E1847E0F891C87FDF7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:6d:bc:10:a9:43:f6:00:7e:fd:92:a2:ab:23: 91:be:e6:e9:f5:f7:48:d0:d9:b9:f9:06:00:d4:a1: b0:b2:44:ca:f3:d9:89:fc:aa:b2:9a:b8:62:09:8a: f8:28:91:f7:c6:29:9e:d2:ff:f6:9c:ab:70:a3:d3: 9c:07:7f:a0:06:d2:6b:c0:ed:85:eb:fa:65:05:7c: a2:71:f0:24:4f:a8:ce:49:0a:ae:e2:c2:22:0c:b9: 8e:d9:ae:dc:d4:59:fb:6c:20:4b:98:a1:c4:bd:1f: 6e:b6:6e:c9:bc:f5:e6:8a:cc:ce:dd:21:1d:08:35: 9b:4a:7e:bf:bf:e9:dc:8b:38:de:5b:51:5c:e2:a3: 3b:85:c6:16:6b:f8:04:39:89:ef:39:6e:e0:92:04: 5a:53:34:08:05:9f:e5:58:ef:1b:ab:ad:7e:83:25: 4b:e7:14:44:0a:56:4c:b4:21:45:36:05:e5:2c:1f: 0a:ce:66:22:e2:00:c4:71:98:c6:61:f7:06:f3:9d: 27:d2:af:eb:3d:64:82:5a:da:25:c1:9f:2f:fc:5f: 41:c1:bd:56:76:a1:45:bc:03:b7:91:f4:42:ac:e7: 74:57:30:6d:c6:19:91:af:9d:c7:83:a8:a0:61:c2: dc:01:bd:42:db:94:fd:f3:06:db:06:64:42:5f:b7: 31:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B1:1C:AE:40:60:1D:39:40:3F:28:65:E1:84:7E:0F:89:1C:87:FD:F7 X509v3 Authority Key Identifier: keyid:8F:91:64:71:4A:1B:3B:90:6C:F8:A8:B3:71:F3:42:EB:A3:54:0C:D9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/14758e8e-49c8-48b8-bdcb-35339e2ae601/0/8F9164714A1B3B906CF8A8B371F342EBA3540CD9.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8F9164714A1B3B906CF8A8B371F342EBA3540CD9.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/14758e8e-49c8-48b8-bdcb-35339e2ae601/0/8F9164714A1B3B906CF8A8B371F342EBA3540CD9.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption d8:14:68:99:8d:7c:30:9b:54:c6:f1:7c:95:db:b4:cd:78:20: f8:5f:b3:1e:d7:68:e7:46:e7:30:23:83:2d:38:ff:0b:61:7e: f1:9a:44:db:6b:5a:c8:4d:3d:ea:b3:3c:36:5a:51:24:7c:96: f4:6a:fc:f0:92:98:17:f7:9c:b6:6b:6e:60:91:9b:f8:aa:e2: 9a:4b:b7:59:6e:96:9c:56:a8:e5:92:2c:10:72:3e:49:5b:59: 28:b3:66:a0:5c:32:36:7c:d6:5c:d6:af:bb:d0:d5:c4:51:87: c9:b8:90:dc:3d:45:c7:ee:27:24:05:c0:28:3d:d1:36:f2:01: 8b:33:b4:4d:bc:8a:58:bc:56:65:5c:5d:f6:5c:3d:02:ba:4d: e7:e8:c2:6b:ca:a5:19:dd:e2:f3:25:3e:57:ef:3d:c6:d3:f4: 5a:0a:50:0f:d8:c0:c7:42:c5:ba:0e:af:a3:e7:db:48:fa:20: 92:b7:a6:f5:1f:6e:d1:e6:04:f1:ee:bc:05:f3:30:fe:d8:e7: de:dd:d9:07:ce:44:b4:e4:c5:4d:7e:58:b8:25:59:59:75:45: 18:c9:b8:04:d7:1f:ee:70:e7:df:f8:43:8e:08:cc:4f:20:3a: a6:16:57:3c:11:a6:b8:14:70:ef:a0:11:1d:c8:2b:5f:71:4c: 94:e9:03:11 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUZfbgGXXJ9ozQ5n9QW7Peki0h+k8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEY5MTY0NzE0QTFCM0I5MDZDRjhBOEIzNzFGMzQyRUJB MzU0MENEOTAeFw0yNTA5MDUxMDE1MzRaFw0yNTA5MDgyMTA2MzRaMDMxMTAvBgNV BAMTKEIxMUNBRTQwNjAxRDM5NDAzRjI4NjVFMTg0N0UwRjg5MUM4N0ZERjcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC6bbwQqUP2AH79kqKrI5G+5un1 90jQ2bn5BgDUobCyRMrz2Yn8qrKauGIJivgokffGKZ7S//acq3Cj05wHf6AG0mvA 7YXr+mUFfKJx8CRPqM5JCq7iwiIMuY7ZrtzUWftsIEuYocS9H262bsm89eaKzM7d IR0INZtKfr+/6dyLON5bUVziozuFxhZr+AQ5ie85buCSBFpTNAgFn+VY7xurrX6D JUvnFEQKVky0IUU2BeUsHwrOZiLiAMRxmMZh9wbznSfSr+s9ZIJa2iXBny/8X0HB vVZ2oUW8A7eR9EKs53RXMG3GGZGvnceDqKBhwtwBvULblP3zBtsGZEJftzGnAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUsRyuQGAdOUA/KGXhhH4PiRyH/fcwHwYDVR0j BBgwFoAUj5FkcUobO5Bs+KizcfNC66NUDNkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x NDc1OGU4ZS00OWM4LTQ4YjgtYmRjYi0zNTMzOWUyYWU2MDEvMC84RjkxNjQ3MTRB MUIzQjkwNkNGOEE4QjM3MUYzNDJFQkEzNTQwQ0Q5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOEY5MTY0NzE0QTFCM0I5MDZDRjhBOEIzNzFGMzQyRUJBMzU0 MENEOS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMTQ3NThlOGUtNDljOC00OGI4LWJk Y2ItMzUzMzllMmFlNjAxLzAvOEY5MTY0NzE0QTFCM0I5MDZDRjhBOEIzNzFGMzQy RUJBMzU0MENEOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBANgUaJmNfDCbVMbxfJXbtM14IPhfsx7XaOdG 5zAjgy04/wthfvGaRNtrWshNPeqzPDZaUSR8lvRq/PCSmBf3nLZrbmCRm/iq4ppL t1lulpxWqOWSLBByPklbWSizZqBcMjZ81lzWr7vQ1cRRh8m4kNw9RcfuJyQFwCg9 0TbyAYsztE28ili8VmVcXfZcPQK6TefowmvKpRnd4vMlPlfvPcbT9FoKUA/YwMdC xboOr6Pn20j6IJK3pvUfbtHmBPHuvAXzMP7Y597d2QfORLTkxU1+WLglWVl1RRjJ uATXH+5w59/4Q44IzE8gOqYWVzwRprgUcO+gER3IK19xTJTpAxE= -----END CERTIFICATE-----Generated at Sun Sep 7 14:00:42 2025 by rpki-client