$ rpki-client -vvf repo-rpki.idnic.net/repo/3c86cb5d-f07d-426a-8e5e-a77a978dd2ee/0/8DA8C02216F0C7D625FEFA7EF659021425920442.mft File: 8DA8C02216F0C7D625FEFA7EF659021425920442.mft (raw, json) Hash identifier: oR5kEPpu2kaza1PSmR8YheLvMsjHOArL6H0Uc2FAAaY= Subject key identifier: D1:58:84:EC:06:A7:37:95:13:66:81:B2:3D:EB:D9:F9:10:27:42:50 Authority key identifier: 8D:A8:C0:22:16:F0:C7:D6:25:FE:FA:7E:F6:59:02:14:25:92:04:42 Certificate issuer: /CN=8DA8C02216F0C7D625FEFA7EF659021425920442 Certificate serial: 7028CEFD0C09B523D75C88FF1E678A311D696E78 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8DA8C02216F0C7D625FEFA7EF659021425920442.cer Subject info access: rsync://repo-rpki.idnic.net/repo/3c86cb5d-f07d-426a-8e5e-a77a978dd2ee/0/8DA8C02216F0C7D625FEFA7EF659021425920442.mft Manifest number: 01C4 Signing time: Sat 06 Sep 2025 08:01:41 +0000 Manifest this update: Sat 06 Sep 2025 07:56:41 +0000 Manifest next update: Tue 09 Sep 2025 08:33:41 +0000 Files and hashes: 1: 3130332e37312e32352e302f32342d3234203d3e20313530323333.roa (hash: 7V+15ddHSP30dhzOt3k9NRabUa1L2vfsDa5xrSuHr2U=) 2: 8DA8C02216F0C7D625FEFA7EF659021425920442.crl (hash: +sFhJASc9r/NuHmxPrHPvPidr8dmE3S3gXGlo2VyBS4=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/3c86cb5d-f07d-426a-8e5e-a77a978dd2ee/0/8DA8C02216F0C7D625FEFA7EF659021425920442.crl rsync://repo-rpki.idnic.net/repo/3c86cb5d-f07d-426a-8e5e-a77a978dd2ee/0/8DA8C02216F0C7D625FEFA7EF659021425920442.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8DA8C02216F0C7D625FEFA7EF659021425920442.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 09 Sep 2025 08:33:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 70:28:ce:fd:0c:09:b5:23:d7:5c:88:ff:1e:67:8a:31:1d:69:6e:78 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8DA8C02216F0C7D625FEFA7EF659021425920442 Validity Not Before: Sep 6 07:56:41 2025 GMT Not After : Sep 9 08:33:41 2025 GMT Subject: CN=D15884EC06A73795136681B23DEBD9F910274250 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:0f:47:1f:c4:9f:10:a6:de:2c:42:d7:1f:8c: 3f:de:45:bb:3e:db:6d:79:ba:2a:e4:55:86:a1:af: ef:b8:49:8d:d6:38:a9:11:2a:2c:9a:ae:01:16:03: 35:64:0b:27:7f:37:2c:f6:7d:09:4a:55:eb:fb:20: d7:24:b7:a4:7c:1e:5c:c5:c8:00:80:0d:7b:02:fb: b8:9d:45:76:d8:31:ad:c9:68:78:54:08:11:4c:be: ba:a0:10:7b:aa:75:6e:b9:d8:90:43:ee:a3:d8:f4: ea:cc:07:2b:35:85:a2:ca:3c:b0:30:fe:ec:0a:1e: da:19:be:68:65:53:2b:fe:28:02:2d:97:0b:02:21: 17:f5:a3:e2:8b:bb:e9:3c:03:5a:51:a7:d2:3a:c5: 2e:6b:c2:e1:5e:e5:d9:1b:7b:a7:3f:99:a9:3b:55: 2c:7f:78:59:77:e8:35:46:ca:5a:be:84:bc:c8:18: 7d:57:cb:c5:09:e9:10:24:5d:8c:7c:3e:b8:4a:d9: 35:aa:47:a1:05:5e:46:1e:08:80:c5:77:bd:82:70: f0:bd:1d:7a:61:05:d6:aa:61:cd:da:78:15:43:d8: 19:58:b4:0f:00:45:0d:64:f6:65:71:cb:c1:f4:df: b3:8f:34:4d:bb:0c:c0:c2:73:5a:d4:7e:9c:e9:f4: f8:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D1:58:84:EC:06:A7:37:95:13:66:81:B2:3D:EB:D9:F9:10:27:42:50 X509v3 Authority Key Identifier: keyid:8D:A8:C0:22:16:F0:C7:D6:25:FE:FA:7E:F6:59:02:14:25:92:04:42 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/3c86cb5d-f07d-426a-8e5e-a77a978dd2ee/0/8DA8C02216F0C7D625FEFA7EF659021425920442.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8DA8C02216F0C7D625FEFA7EF659021425920442.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3c86cb5d-f07d-426a-8e5e-a77a978dd2ee/0/8DA8C02216F0C7D625FEFA7EF659021425920442.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6e:01:e2:1c:80:0f:7d:49:7a:0f:36:41:3f:84:57:2a:bc:c4: f7:c7:0c:f3:c6:85:10:84:0f:70:6b:a4:e8:2e:b6:65:e9:5f: 40:60:55:20:e6:60:3b:68:f6:2a:4b:3f:8e:56:36:37:f4:05: e3:7a:04:00:ca:c5:55:80:e8:18:93:cd:81:b5:a7:d7:59:67: 64:7a:ce:2d:25:40:fd:fc:8f:a4:8d:0f:9f:a0:e2:c5:d6:e6: 0e:be:c8:c2:e8:cd:5b:cd:63:6c:00:a9:0b:a0:91:21:84:5b: 7b:2c:95:2b:b7:6e:f5:7d:8d:0c:4c:da:53:1a:9e:41:f0:5f: f1:be:b1:e7:3d:ca:4b:44:dc:12:ef:5e:63:49:12:3f:e5:4d: 4f:6f:cc:c7:67:de:7b:a0:0a:19:5d:e8:1e:0d:d9:8f:a7:43: 97:f7:c4:83:b7:97:03:99:f3:09:44:d4:e7:3b:10:04:01:11: d4:aa:6e:53:c0:ec:7a:3d:11:57:a2:13:10:a1:d8:7f:e2:4a: 9f:61:4e:8d:80:90:29:b4:38:a1:2a:86:ee:7d:a5:eb:66:8b: a2:2c:e2:2f:1b:16:37:43:7b:62:9d:41:a9:64:4b:c8:68:c5: 82:f8:2a:cf:b0:40:66:f7:8c:a9:b4:0b:a2:53:c3:70:72:ad: 3f:7f:62:74 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUcCjO/QwJtSPXXIj/HmeKMR1pbngwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOERBOEMwMjIxNkYwQzdENjI1RkVGQTdFRjY1OTAyMTQy NTkyMDQ0MjAeFw0yNTA5MDYwNzU2NDFaFw0yNTA5MDkwODMzNDFaMDMxMTAvBgNV BAMTKEQxNTg4NEVDMDZBNzM3OTUxMzY2ODFCMjNERUJEOUY5MTAyNzQyNTAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC3D0cfxJ8Qpt4sQtcfjD/eRbs+ 2215uirkVYahr++4SY3WOKkRKiyargEWAzVkCyd/Nyz2fQlKVev7INckt6R8HlzF yACADXsC+7idRXbYMa3JaHhUCBFMvrqgEHuqdW652JBD7qPY9OrMBys1haLKPLAw /uwKHtoZvmhlUyv+KAItlwsCIRf1o+KLu+k8A1pRp9I6xS5rwuFe5dkbe6c/mak7 VSx/eFl36DVGylq+hLzIGH1Xy8UJ6RAkXYx8PrhK2TWqR6EFXkYeCIDFd72CcPC9 HXphBdaqYc3aeBVD2BlYtA8ARQ1k9mVxy8H037OPNE27DMDCc1rUfpzp9PixAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU0ViE7AanN5UTZoGyPevZ+RAnQlAwHwYDVR0j BBgwFoAUjajAIhbwx9Yl/vp+9lkCFCWSBEIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z Yzg2Y2I1ZC1mMDdkLTQyNmEtOGU1ZS1hNzdhOTc4ZGQyZWUvMC84REE4QzAyMjE2 RjBDN0Q2MjVGRUZBN0VGNjU5MDIxNDI1OTIwNDQyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOERBOEMwMjIxNkYwQzdENjI1RkVGQTdFRjY1OTAyMTQyNTky MDQ0Mi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vM2M4NmNiNWQtZjA3ZC00MjZhLThl NWUtYTc3YTk3OGRkMmVlLzAvOERBOEMwMjIxNkYwQzdENjI1RkVGQTdFRjY1OTAy MTQyNTkyMDQ0Mi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAG4B4hyAD31Jeg82QT+EVyq8xPfHDPPGhRCE D3BrpOgutmXpX0BgVSDmYDto9ipLP45WNjf0BeN6BADKxVWA6BiTzYG1p9dZZ2R6 zi0lQP38j6SND5+g4sXW5g6+yMLozVvNY2wAqQugkSGEW3sslSu3bvV9jQxM2lMa nkHwX/G+sec9yktE3BLvXmNJEj/lTU9vzMdn3nugChld6B4N2Y+nQ5f3xIO3lwOZ 8wlE1Oc7EAQBEdSqblPA7Ho9EVeiExCh2H/iSp9hTo2AkCm0OKEqhu59petmi6Is 4i8bFjdDe2KdQalkS8hoxYL4Ks+wQGb3jKm0C6JTw3ByrT9/YnQ= -----END CERTIFICATE-----Generated at Sun Sep 7 14:05:21 2025 by rpki-client