$ rpki-client -vvf repo-rpki.idnic.net/repo/27d9f851-7e73-4384-950e-8be8e15fd3ee/0/8F84D6FEEAF8C5D3C5D13F101BC70B758BF50F6A.mft File: 8F84D6FEEAF8C5D3C5D13F101BC70B758BF50F6A.mft (raw, json) Hash identifier: 8A0tVeTbNy92EhVX3t1TsEPpYcxym4vzJ+/3V6H3vSI= Subject key identifier: A9:22:77:38:78:03:4D:2C:6D:47:4C:D0:7F:B2:FD:2B:0E:45:3E:1F Authority key identifier: 8F:84:D6:FE:EA:F8:C5:D3:C5:D1:3F:10:1B:C7:0B:75:8B:F5:0F:6A Certificate issuer: /CN=8F84D6FEEAF8C5D3C5D13F101BC70B758BF50F6A Certificate serial: 06BC5D747D40532CF8CD6F0CD5C2B03545D5F96E Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8F84D6FEEAF8C5D3C5D13F101BC70B758BF50F6A.cer Subject info access: rsync://repo-rpki.idnic.net/repo/27d9f851-7e73-4384-950e-8be8e15fd3ee/0/8F84D6FEEAF8C5D3C5D13F101BC70B758BF50F6A.mft Manifest number: 05C4 Signing time: Sat 06 Sep 2025 00:30:36 +0000 Manifest this update: Sat 06 Sep 2025 00:25:36 +0000 Manifest next update: Tue 09 Sep 2025 09:29:36 +0000 Files and hashes: 1: 34392e302e302e302f32322d3234203d3e203535373031.roa (hash: yzJFuCgJdtqHHRWns+YkV15nd/BuBUJW5VOi1zg7H6Q=) 2: 3230322e37332e32372e302f32342d3234203d3e203535373031.roa (hash: 7FX65tSRyznIseHKWjzPuHzH3CNvHvrWJempYLyB19A=) 3: 3230322e37332e32352e302f32342d3234203d3e20313431383932.roa (hash: L3e7xhgbdKiD6xLSCC6o4EcC4VabYtoVoPe/Fd1r3p4=) 4: 3230322e37332e32342e302f32342d3234203d3e203535373031.roa (hash: 4zJcjhi99V9+23NjQKwrFy3Y4HQGoSDMxwY4qblbwdg=) 5: 8F84D6FEEAF8C5D3C5D13F101BC70B758BF50F6A.crl (hash: GUplufQ7JlMQj08l65MMHRKTZCnEem3LDhgiSKFwaQ0=) 6: 3130332e31382e37362e302f32322d3234203d3e203535373031.roa (hash: oa5lMgIER/j9/ZBqK2jTnvVzB4d9A9ON67O4sbQz5Lo=) 7: 3230322e37332e32362e302f32342d3234203d3e20313431383932.roa (hash: QqG89TEZjAnI8K1IrPR29kJtDOMjh4sJXdy9wDe7GkQ=) 8: 34332e3235322e3233382e302f32342d3234203d3e203535373031.roa (hash: Nnf66JxT1+eZbCkYQn8x6cz4I9We7qQ0T90RTh7FkG0=) 9: 34332e3235322e3233362e302f32332d3234203d3e203535373031.roa (hash: Dc8BdtAPO03Z1L5MRp5Y72lj+merY2MxA64B93hGmbo=) 10: 3130332e33312e3233322e302f32322d3234203d3e203535373031.roa (hash: BrB/GW7Td9VbCbmZFNch6tbk4BKMd6sCGKbNPlrCa44=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/27d9f851-7e73-4384-950e-8be8e15fd3ee/0/8F84D6FEEAF8C5D3C5D13F101BC70B758BF50F6A.crl rsync://repo-rpki.idnic.net/repo/27d9f851-7e73-4384-950e-8be8e15fd3ee/0/8F84D6FEEAF8C5D3C5D13F101BC70B758BF50F6A.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8F84D6FEEAF8C5D3C5D13F101BC70B758BF50F6A.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 09 Sep 2025 09:29:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 06:bc:5d:74:7d:40:53:2c:f8:cd:6f:0c:d5:c2:b0:35:45:d5:f9:6e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8F84D6FEEAF8C5D3C5D13F101BC70B758BF50F6A Validity Not Before: Sep 6 00:25:36 2025 GMT Not After : Sep 9 09:29:36 2025 GMT Subject: CN=A922773878034D2C6D474CD07FB2FD2B0E453E1F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:3b:0b:ec:44:54:b6:14:31:f9:d4:d7:0d:39: c9:c4:02:69:cd:f9:10:c8:8e:8e:3f:ea:70:24:06: 34:1f:09:b3:d3:42:44:8a:cd:e9:c0:32:b4:25:c0: cd:ff:c4:c3:9b:eb:25:67:4f:d3:f4:b1:d2:26:49: c7:fd:24:c6:2a:7d:a0:e8:44:df:91:fd:ae:55:43: a8:54:67:a2:6c:d2:36:63:e7:c6:f3:03:e3:84:4c: fa:7c:a4:82:46:8c:1e:8a:4e:0a:44:72:4c:08:5b: 47:29:c7:4d:33:ba:09:4c:b4:79:69:d1:40:ae:1e: e8:6e:d0:cd:86:23:51:93:1c:51:24:b8:58:00:ff: 65:89:96:88:49:86:de:2b:8f:7d:82:90:f3:68:1c: dd:21:de:b1:9a:6b:ae:a2:50:82:73:7e:b0:f4:29: 24:98:03:13:75:14:61:f5:00:db:27:da:ff:b8:f9: 37:71:d8:f7:02:cb:75:3c:12:ec:8a:9b:1b:59:b9: 48:10:f0:af:21:be:8d:1a:11:4a:e3:db:c0:41:b8: 3f:ba:ba:c9:32:21:ef:8c:2c:b0:d0:ca:7e:5e:3a: 03:ec:0a:8b:40:7d:f4:cc:ad:c1:a5:80:da:7f:c5: ac:60:66:c5:3e:b0:9f:9a:3e:16:2c:5c:52:84:2e: 22:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:22:77:38:78:03:4D:2C:6D:47:4C:D0:7F:B2:FD:2B:0E:45:3E:1F X509v3 Authority Key Identifier: keyid:8F:84:D6:FE:EA:F8:C5:D3:C5:D1:3F:10:1B:C7:0B:75:8B:F5:0F:6A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/27d9f851-7e73-4384-950e-8be8e15fd3ee/0/8F84D6FEEAF8C5D3C5D13F101BC70B758BF50F6A.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8F84D6FEEAF8C5D3C5D13F101BC70B758BF50F6A.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/27d9f851-7e73-4384-950e-8be8e15fd3ee/0/8F84D6FEEAF8C5D3C5D13F101BC70B758BF50F6A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 63:9b:ab:14:8d:1a:da:4b:9c:ff:c6:dc:43:25:25:68:c3:cd: d0:0b:4c:67:8c:89:d0:a0:c4:c7:8e:3a:cf:c7:f3:59:9e:5f: 59:c2:b3:82:9c:da:3c:69:37:66:fd:cf:13:37:c1:19:b4:87: db:13:3b:01:4b:35:84:e2:38:8c:18:49:ca:5c:b1:a8:37:97: 1a:d2:7d:a7:d0:7f:2e:17:8a:b3:3f:78:b9:09:b6:98:77:9a: 27:cf:9d:88:92:20:4d:0d:c3:3a:0d:52:d1:28:37:d1:f4:e9: a2:1a:8f:b4:c5:c0:6a:83:be:bb:a7:c0:b0:6f:0f:48:1e:a2: 49:00:5f:52:11:82:b3:0b:85:81:04:d1:5e:8c:ce:36:35:3e: 5a:3a:c4:b5:b0:94:d4:87:f6:05:4d:24:eb:c0:e0:9d:4e:6b: 8d:45:5d:46:a6:d3:52:49:21:d4:49:dc:20:f3:1e:53:71:b9: ef:f0:46:6e:6c:46:d9:ff:17:e5:4e:e3:f6:97:f9:36:16:b0: 9d:81:e8:e8:f1:df:ea:19:e6:36:b5:26:6d:9b:8b:4e:1c:f5: d7:ee:4b:93:f9:d4:90:c0:58:41:19:67:1a:d6:e5:68:15:d1: 9f:7e:2c:35:7a:a6:b0:f8:6a:f9:29:29:71:3f:c1:27:c4:77: a3:0c:0e:a0 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUBrxddH1AUyz4zW8M1cKwNUXV+W4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEY4NEQ2RkVFQUY4QzVEM0M1RDEzRjEwMUJDNzBCNzU4 QkY1MEY2QTAeFw0yNTA5MDYwMDI1MzZaFw0yNTA5MDkwOTI5MzZaMDMxMTAvBgNV BAMTKEE5MjI3NzM4NzgwMzREMkM2RDQ3NENEMDdGQjJGRDJCMEU0NTNFMUYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDaOwvsRFS2FDH51NcNOcnEAmnN +RDIjo4/6nAkBjQfCbPTQkSKzenAMrQlwM3/xMOb6yVnT9P0sdImScf9JMYqfaDo RN+R/a5VQ6hUZ6Js0jZj58bzA+OETPp8pIJGjB6KTgpEckwIW0cpx00zuglMtHlp 0UCuHuhu0M2GI1GTHFEkuFgA/2WJlohJht4rj32CkPNoHN0h3rGaa66iUIJzfrD0 KSSYAxN1FGH1ANsn2v+4+Tdx2PcCy3U8EuyKmxtZuUgQ8K8hvo0aEUrj28BBuD+6 uskyIe+MLLDQyn5eOgPsCotAffTMrcGlgNp/xaxgZsU+sJ+aPhYsXFKELiKpAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUqSJ3OHgDTSxtR0zQf7L9Kw5FPh8wHwYDVR0j BBgwFoAUj4TW/ur4xdPF0T8QG8cLdYv1D2owDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y N2Q5Zjg1MS03ZTczLTQzODQtOTUwZS04YmU4ZTE1ZmQzZWUvMC84Rjg0RDZGRUVB RjhDNUQzQzVEMTNGMTAxQkM3MEI3NThCRjUwRjZBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOEY4NEQ2RkVFQUY4QzVEM0M1RDEzRjEwMUJDNzBCNzU4QkY1 MEY2QS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMjdkOWY4NTEtN2U3My00Mzg0LTk1 MGUtOGJlOGUxNWZkM2VlLzAvOEY4NEQ2RkVFQUY4QzVEM0M1RDEzRjEwMUJDNzBC NzU4QkY1MEY2QS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGObqxSNGtpLnP/G3EMlJWjDzdALTGeMidCg xMeOOs/H81meX1nCs4Kc2jxpN2b9zxM3wRm0h9sTOwFLNYTiOIwYScpcsag3lxrS fafQfy4XirM/eLkJtph3mifPnYiSIE0NwzoNUtEoN9H06aIaj7TFwGqDvrunwLBv D0geokkAX1IRgrMLhYEE0V6MzjY1Plo6xLWwlNSH9gVNJOvA4J1Oa41FXUam01JJ IdRJ3CDzHlNxue/wRm5sRtn/F+VO4/aX+TYWsJ2B6Ojx3+oZ5ja1Jm2bi04c9dfu S5P51JDAWEEZZxrW5WgV0Z9+LDV6prD4avkpKXE/wSfEd6MMDqA= -----END CERTIFICATE-----Generated at Sat Sep 6 11:59:04 2025 by rpki-client