$ rpki-client -vvf repo-rpki.idnic.net/repo/17e26aa3-3073-4276-bd74-ad86f099c253/0/8955B36815B4084BAFC7908A639810631BEED49F.mft File: 8955B36815B4084BAFC7908A639810631BEED49F.mft (raw, json) Hash identifier: nifJtTq/cNZP6C0lmI6hZi7x0b9A+MWGId/6oZYEgj8= Subject key identifier: 1B:38:C8:43:77:F9:36:FE:CA:0F:20:EA:3B:0F:D7:C7:94:3C:D7:FB Authority key identifier: 89:55:B3:68:15:B4:08:4B:AF:C7:90:8A:63:98:10:63:1B:EE:D4:9F Certificate issuer: /CN=8955B36815B4084BAFC7908A639810631BEED49F Certificate serial: 4641C8C4F33ACDA9044A3E7870EF440DAFCF81AB Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8955B36815B4084BAFC7908A639810631BEED49F.cer Subject info access: rsync://repo-rpki.idnic.net/repo/17e26aa3-3073-4276-bd74-ad86f099c253/0/8955B36815B4084BAFC7908A639810631BEED49F.mft Manifest number: 04F5 Signing time: Thu 04 Sep 2025 21:20:44 +0000 Manifest this update: Thu 04 Sep 2025 21:15:44 +0000 Manifest next update: Sun 07 Sep 2025 22:50:44 +0000 Files and hashes: 1: 8955B36815B4084BAFC7908A639810631BEED49F.crl (hash: hLdXpUSLRorIpXKEq/krmkDq7bFeO5s4I/iALJbDJ0g=) 2: 3130332e3135332e3234342e302f32342d3234203d3e20313430343734.roa (hash: anheo7/IFUA2/H9FN8liseYHAvu0fSEkGprdILkGE3g=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/17e26aa3-3073-4276-bd74-ad86f099c253/0/8955B36815B4084BAFC7908A639810631BEED49F.crl rsync://repo-rpki.idnic.net/repo/17e26aa3-3073-4276-bd74-ad86f099c253/0/8955B36815B4084BAFC7908A639810631BEED49F.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8955B36815B4084BAFC7908A639810631BEED49F.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 07 Sep 2025 22:50:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 46:41:c8:c4:f3:3a:cd:a9:04:4a:3e:78:70:ef:44:0d:af:cf:81:ab Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8955B36815B4084BAFC7908A639810631BEED49F Validity Not Before: Sep 4 21:15:44 2025 GMT Not After : Sep 7 22:50:44 2025 GMT Subject: CN=1B38C84377F936FECA0F20EA3B0FD7C7943CD7FB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:c4:28:0d:6d:92:9f:b0:86:b6:4a:89:15:01: 24:48:a5:d7:f8:92:5f:8e:df:ee:c9:f3:47:9c:2e: d6:3d:3b:63:3c:d6:e4:f6:9d:9f:2c:70:a0:9e:fd: 21:2b:4d:32:64:2f:cb:03:43:6a:3f:de:6d:f4:6a: f9:dc:6c:90:c3:32:25:c6:10:ec:24:27:93:76:fe: 45:8a:91:3f:8b:b0:61:61:d3:3b:65:f4:73:0f:1d: 7b:66:df:cf:23:fd:ae:8d:b9:aa:14:1f:49:af:a3: aa:b5:32:54:cb:12:c1:1a:9e:4d:d6:3e:22:15:8e: 16:aa:ee:79:6d:77:ca:67:20:19:04:19:5f:18:4b: 35:bc:b6:f6:a7:f4:0b:74:9a:5c:71:be:45:74:e9: cb:0c:e1:ae:7a:bb:ff:d1:ba:5f:05:b0:1c:e9:20: ff:fb:cb:b9:cb:f5:47:15:2d:6d:48:97:25:ef:71: d8:1d:4e:37:f8:fb:43:d3:91:66:69:7e:54:12:22: fd:6e:f1:77:0e:1a:55:5c:f6:34:88:dc:1c:ae:31: a2:4f:fa:ce:83:04:98:9b:4a:b4:5c:85:0d:12:61: d1:63:8a:79:e6:b2:cd:60:44:b0:b8:bf:42:13:02: 67:af:a7:43:88:b4:47:2f:b0:ba:fc:c4:9b:9f:42: e3:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1B:38:C8:43:77:F9:36:FE:CA:0F:20:EA:3B:0F:D7:C7:94:3C:D7:FB X509v3 Authority Key Identifier: keyid:89:55:B3:68:15:B4:08:4B:AF:C7:90:8A:63:98:10:63:1B:EE:D4:9F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/17e26aa3-3073-4276-bd74-ad86f099c253/0/8955B36815B4084BAFC7908A639810631BEED49F.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8955B36815B4084BAFC7908A639810631BEED49F.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/17e26aa3-3073-4276-bd74-ad86f099c253/0/8955B36815B4084BAFC7908A639810631BEED49F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 86:8d:2f:8b:a5:16:da:4c:e6:c4:24:a6:25:1e:0a:29:cf:ef: 2a:3b:6b:e7:1b:ef:2c:69:c5:7a:0b:1f:c4:b6:cf:2a:b8:3d: bc:a9:2c:2d:66:fd:57:68:0a:bb:ea:fe:f8:03:f2:45:23:c6: 25:d4:6a:64:0a:00:2c:d6:ea:ed:6f:44:3b:f7:cf:ee:6e:5d: 0d:e8:e2:1a:ce:5b:52:ca:ae:4a:6e:2b:00:a6:53:a4:e2:a5: e0:5b:9d:04:5d:6a:83:84:53:30:6f:09:e8:18:f0:b7:99:c2: a5:9a:1f:a6:b2:6b:7d:ff:d5:5b:45:35:4a:17:61:3d:e3:51: 93:6f:ed:04:ac:c1:77:73:e2:7e:6d:24:58:e7:9f:e1:24:ab: aa:95:92:2e:77:c7:69:d6:56:95:40:46:de:90:a6:ae:14:20: 26:da:31:88:ef:ed:16:bd:56:a0:06:50:78:a4:0d:cb:2e:e6: 96:8e:65:2e:95:c4:b1:d4:11:cb:8f:66:b5:20:06:58:0f:aa: 5f:43:eb:3b:95:9f:50:03:c9:3b:54:03:3d:7a:d8:6e:48:5e: 93:66:55:3a:df:47:e9:72:46:fc:35:e4:d7:95:df:e5:60:49: cd:6b:0d:e3:86:4c:5b:45:f7:a7:75:22:12:c1:19:3e:d4:01: ff:15:3f:9b -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIURkHIxPM6zakESj54cO9EDa/PgaswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODk1NUIzNjgxNUI0MDg0QkFGQzc5MDhBNjM5ODEwNjMx QkVFRDQ5RjAeFw0yNTA5MDQyMTE1NDRaFw0yNTA5MDcyMjUwNDRaMDMxMTAvBgNV BAMTKDFCMzhDODQzNzdGOTM2RkVDQTBGMjBFQTNCMEZEN0M3OTQzQ0Q3RkIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCmxCgNbZKfsIa2SokVASRIpdf4 kl+O3+7J80ecLtY9O2M81uT2nZ8scKCe/SErTTJkL8sDQ2o/3m30avncbJDDMiXG EOwkJ5N2/kWKkT+LsGFh0ztl9HMPHXtm388j/a6NuaoUH0mvo6q1MlTLEsEank3W PiIVjhaq7nltd8pnIBkEGV8YSzW8tvan9At0mlxxvkV06csM4a56u//Rul8FsBzp IP/7y7nL9UcVLW1IlyXvcdgdTjf4+0PTkWZpflQSIv1u8XcOGlVc9jSI3ByuMaJP +s6DBJibSrRchQ0SYdFjinnmss1gRLC4v0ITAmevp0OItEcvsLr8xJufQuO7AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUGzjIQ3f5Nv7KDyDqOw/Xx5Q81/swHwYDVR0j BBgwFoAUiVWzaBW0CEuvx5CKY5gQYxvu1J8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x N2UyNmFhMy0zMDczLTQyNzYtYmQ3NC1hZDg2ZjA5OWMyNTMvMC84OTU1QjM2ODE1 QjQwODRCQUZDNzkwOEE2Mzk4MTA2MzFCRUVENDlGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvODk1NUIzNjgxNUI0MDg0QkFGQzc5MDhBNjM5ODEwNjMxQkVF RDQ5Ri5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMTdlMjZhYTMtMzA3My00Mjc2LWJk NzQtYWQ4NmYwOTljMjUzLzAvODk1NUIzNjgxNUI0MDg0QkFGQzc5MDhBNjM5ODEw NjMxQkVFRDQ5Ri5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIaNL4ulFtpM5sQkpiUeCinP7yo7a+cb7yxp xXoLH8S2zyq4PbypLC1m/VdoCrvq/vgD8kUjxiXUamQKACzW6u1vRDv3z+5uXQ3o 4hrOW1LKrkpuKwCmU6TipeBbnQRdaoOEUzBvCegY8LeZwqWaH6aya33/1VtFNUoX YT3jUZNv7QSswXdz4n5tJFjnn+Ekq6qVki53x2nWVpVARt6Qpq4UICbaMYjv7Ra9 VqAGUHikDcsu5paOZS6VxLHUEcuPZrUgBlgPql9D6zuVn1ADyTtUAz162G5IXpNm VTrfR+lyRvw15NeV3+VgSc1rDeOGTFtF96d1IhLBGT7UAf8VP5s= -----END CERTIFICATE-----Generated at Fri Sep 5 10:39:39 2025 by rpki-client