$ rpki-client -vvf repo-rpki.idnic.net/repo/2d2a5b51-bc00-4d6b-8761-c7d0d3f6de12/0/8C5FA2EBD7AF40393883FB08E71BDF41AAE20F57.mft File: 8C5FA2EBD7AF40393883FB08E71BDF41AAE20F57.mft (raw, json) Hash identifier: jkj8RjrgsfqtOplJ3l8mwiX4ITOTpkcfcI5jmvOtpzc= Subject key identifier: BB:34:8C:3C:48:8B:A8:2B:16:AA:1D:1D:31:EB:B1:2D:84:1D:19:3A Authority key identifier: 8C:5F:A2:EB:D7:AF:40:39:38:83:FB:08:E7:1B:DF:41:AA:E2:0F:57 Certificate issuer: /CN=8C5FA2EBD7AF40393883FB08E71BDF41AAE20F57 Certificate serial: 5786CCBF922BC0187B1E8A7125CC4B2A9F99CD7F Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8C5FA2EBD7AF40393883FB08E71BDF41AAE20F57.cer Subject info access: rsync://repo-rpki.idnic.net/repo/2d2a5b51-bc00-4d6b-8761-c7d0d3f6de12/0/8C5FA2EBD7AF40393883FB08E71BDF41AAE20F57.mft Manifest number: 04B0 Signing time: Sat 06 Sep 2025 12:21:26 +0000 Manifest this update: Sat 06 Sep 2025 12:16:26 +0000 Manifest next update: Tue 09 Sep 2025 22:11:26 +0000 Files and hashes: 1: 8C5FA2EBD7AF40393883FB08E71BDF41AAE20F57.crl (hash: psfwf4GK5xVuz3MzNgRRd+hjN5UCEI3rPG21HlzHHTk=) 2: 323430333a333163303a3a2f33322d3332203d3e20313337333736.roa (hash: ZFgZf5/tUMHm0Xvm8MvmyqUsY/m95WPUFwA/Bk3NXco=) 3: 3130332e3131382e3132342e302f32322d3234203d3e20313337333736.roa (hash: GgQGIVctlCvNlOfS2rEwMFV2kj5ohQAxfF74xcz3/1E=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/2d2a5b51-bc00-4d6b-8761-c7d0d3f6de12/0/8C5FA2EBD7AF40393883FB08E71BDF41AAE20F57.crl rsync://repo-rpki.idnic.net/repo/2d2a5b51-bc00-4d6b-8761-c7d0d3f6de12/0/8C5FA2EBD7AF40393883FB08E71BDF41AAE20F57.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8C5FA2EBD7AF40393883FB08E71BDF41AAE20F57.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 09 Sep 2025 22:11:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 57:86:cc:bf:92:2b:c0:18:7b:1e:8a:71:25:cc:4b:2a:9f:99:cd:7f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8C5FA2EBD7AF40393883FB08E71BDF41AAE20F57 Validity Not Before: Sep 6 12:16:26 2025 GMT Not After : Sep 9 22:11:26 2025 GMT Subject: CN=BB348C3C488BA82B16AA1D1D31EBB12D841D193A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:dd:ab:f8:45:0f:cc:9f:56:61:ab:4b:40:e8: f1:11:a5:29:62:22:ae:7d:b8:07:6b:8f:fb:fa:9e: c8:db:f1:50:ec:de:31:eb:a4:4d:0e:68:9b:47:0d: d1:19:27:41:de:35:a2:bf:d4:3a:d4:4c:ee:aa:61: 45:d7:1f:74:89:43:8e:3a:8a:6e:28:9c:63:9d:6f: 07:57:0a:a4:ea:0a:1d:7b:37:29:34:ac:af:99:86: f2:cc:71:89:6e:6a:bc:43:54:36:6c:3c:5f:bd:fc: 1f:62:63:42:69:91:27:73:70:2c:4b:3f:a8:e2:bf: b5:1d:92:90:f9:5f:12:47:eb:d8:1f:02:8d:81:e4: e3:11:fe:89:bb:ba:8d:3f:7e:52:64:fd:d9:61:c0: 74:e9:f0:c3:c5:ec:c7:eb:b4:9a:de:a6:7f:ae:31: 88:b5:9f:96:5f:0b:b5:ac:d3:c5:1a:1a:1c:7d:7c: 2a:49:67:5a:e2:0a:66:76:05:3e:19:de:e0:ef:ec: 92:45:07:05:a4:43:71:aa:27:b1:02:bc:da:32:52: d1:52:bc:9a:77:35:2b:4b:55:ac:23:4b:3f:b8:1e: 02:3a:39:67:ac:98:4e:30:88:0b:59:52:d8:b4:c2: c1:93:35:00:31:01:bf:2a:87:64:1b:e3:8b:a5:92: 24:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BB:34:8C:3C:48:8B:A8:2B:16:AA:1D:1D:31:EB:B1:2D:84:1D:19:3A X509v3 Authority Key Identifier: keyid:8C:5F:A2:EB:D7:AF:40:39:38:83:FB:08:E7:1B:DF:41:AA:E2:0F:57 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/2d2a5b51-bc00-4d6b-8761-c7d0d3f6de12/0/8C5FA2EBD7AF40393883FB08E71BDF41AAE20F57.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8C5FA2EBD7AF40393883FB08E71BDF41AAE20F57.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/2d2a5b51-bc00-4d6b-8761-c7d0d3f6de12/0/8C5FA2EBD7AF40393883FB08E71BDF41AAE20F57.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 28:7c:86:ea:9a:2b:6e:a8:10:4a:43:69:89:86:d0:56:42:6a: 2e:85:35:99:a2:3b:61:74:68:26:dd:d6:71:a0:87:98:cb:3f: 59:9a:ae:d4:25:64:ab:8e:d3:50:51:09:28:fa:03:7e:66:61: 44:ab:24:43:9f:45:8c:73:3d:c7:65:92:4e:c7:99:25:ef:d8: 5b:f3:6a:a3:c8:1e:3d:58:64:0c:3e:91:c7:c6:1e:99:d2:7e: 82:de:94:fd:f8:e8:52:79:68:54:5e:40:89:3a:35:e4:92:fb: 1b:02:60:44:74:b2:79:39:e5:35:df:44:e1:69:22:23:ff:da: 1c:82:a4:e1:86:e6:a4:b8:6b:68:bf:e0:d8:e4:0f:5d:49:d6: df:a1:d5:2b:dd:fe:cf:a3:d8:0e:c4:59:a3:0c:36:63:34:14: a3:7a:82:b9:b6:9d:7e:19:b4:e8:73:5b:35:3a:d7:6d:80:4b: ae:6f:f0:2c:d2:a1:7a:9a:aa:cc:cc:7d:90:f5:a4:52:36:94: 63:31:c8:fd:7d:36:d1:64:64:cc:d2:a9:c2:94:90:e1:19:d8: e9:5f:9e:57:20:21:5d:84:92:e4:4e:03:dc:b1:30:06:e3:1b: a2:6c:94:77:22:52:ab:a4:d0:1a:c6:59:00:dc:49:a7:fe:d5: 82:27:b0:b7 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUV4bMv5IrwBh7HopxJcxLKp+ZzX8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEM1RkEyRUJEN0FGNDAzOTM4ODNGQjA4RTcxQkRGNDFB QUUyMEY1NzAeFw0yNTA5MDYxMjE2MjZaFw0yNTA5MDkyMjExMjZaMDMxMTAvBgNV BAMTKEJCMzQ4QzNDNDg4QkE4MkIxNkFBMUQxRDMxRUJCMTJEODQxRDE5M0EwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC63av4RQ/Mn1Zhq0tA6PERpSli Iq59uAdrj/v6nsjb8VDs3jHrpE0OaJtHDdEZJ0HeNaK/1DrUTO6qYUXXH3SJQ446 im4onGOdbwdXCqTqCh17Nyk0rK+ZhvLMcYluarxDVDZsPF+9/B9iY0JpkSdzcCxL P6jiv7UdkpD5XxJH69gfAo2B5OMR/om7uo0/flJk/dlhwHTp8MPF7MfrtJrepn+u MYi1n5ZfC7Ws08UaGhx9fCpJZ1riCmZ2BT4Z3uDv7JJFBwWkQ3GqJ7ECvNoyUtFS vJp3NStLVawjSz+4HgI6OWesmE4wiAtZUti0wsGTNQAxAb8qh2Qb44ulkiTjAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUuzSMPEiLqCsWqh0dMeuxLYQdGTowHwYDVR0j BBgwFoAUjF+i69evQDk4g/sI5xvfQariD1cwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y ZDJhNWI1MS1iYzAwLTRkNmItODc2MS1jN2QwZDNmNmRlMTIvMC84QzVGQTJFQkQ3 QUY0MDM5Mzg4M0ZCMDhFNzFCREY0MUFBRTIwRjU3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOEM1RkEyRUJEN0FGNDAzOTM4ODNGQjA4RTcxQkRGNDFBQUUy MEY1Ny5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMmQyYTViNTEtYmMwMC00ZDZiLTg3 NjEtYzdkMGQzZjZkZTEyLzAvOEM1RkEyRUJEN0FGNDAzOTM4ODNGQjA4RTcxQkRG NDFBQUUyMEY1Ny5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACh8huqaK26oEEpDaYmG0FZCai6FNZmiO2F0 aCbd1nGgh5jLP1martQlZKuO01BRCSj6A35mYUSrJEOfRYxzPcdlkk7HmSXv2Fvz aqPIHj1YZAw+kcfGHpnSfoLelP346FJ5aFReQIk6NeSS+xsCYER0snk55TXfROFp IiP/2hyCpOGG5qS4a2i/4NjkD11J1t+h1Svd/s+j2A7EWaMMNmM0FKN6grm2nX4Z tOhzWzU6122AS65v8CzSoXqaqszMfZD1pFI2lGMxyP19NtFkZMzSqcKUkOEZ2Olf nlcgIV2EkuROA9yxMAbjG6JslHciUquk0BrGWQDcSaf+1YInsLc= -----END CERTIFICATE-----Generated at Sun Sep 7 13:55:50 2025 by rpki-client