$ rpki-client -vvf repo-rpki.idnic.net/repo/42083d44-7835-443d-853a-0a79cf00e950/0/08A94FD7F0E8A287AD318D7A26254192431E175F.mft File: 08A94FD7F0E8A287AD318D7A26254192431E175F.mft (raw, json) Hash identifier: iUxLErtpSihBSUvl1heT8aexRLCI7LaPfJaIYXw6g5Q= Subject key identifier: BC:00:34:EA:61:1F:1E:9D:DF:EE:4C:26:09:B9:44:96:57:23:FA:1D Authority key identifier: 08:A9:4F:D7:F0:E8:A2:87:AD:31:8D:7A:26:25:41:92:43:1E:17:5F Certificate issuer: /CN=08A94FD7F0E8A287AD318D7A26254192431E175F Certificate serial: 218D3729F3F9B0C829D636D5AC50EA72D24D9748 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/08A94FD7F0E8A287AD318D7A26254192431E175F.cer Subject info access: rsync://repo-rpki.idnic.net/repo/42083d44-7835-443d-853a-0a79cf00e950/0/08A94FD7F0E8A287AD318D7A26254192431E175F.mft Manifest number: 01CA Signing time: Mon 08 Sep 2025 06:30:38 +0000 Manifest this update: Mon 08 Sep 2025 06:25:38 +0000 Manifest next update: Thu 11 Sep 2025 11:01:38 +0000 Files and hashes: 1: 08A94FD7F0E8A287AD318D7A26254192431E175F.crl (hash: LUnIhw1LsHoW/XsBMIRoWdetkQ7hqbsWpyekgULwrD8=) 2: 3130332e34332e32352e302f32342d3234203d3e20313431353931.roa (hash: wqJtSQHwbnqm8jiqozWh9r8aZJIccaguRYiH+0smDl0=) 3: 3130332e34332e32342e302f32342d3234203d3e20313339343139.roa (hash: n37UknBhv1+9WuSxzltTO8fZT8WF7d4rSmL/iPmFdNo=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/42083d44-7835-443d-853a-0a79cf00e950/0/08A94FD7F0E8A287AD318D7A26254192431E175F.crl rsync://repo-rpki.idnic.net/repo/42083d44-7835-443d-853a-0a79cf00e950/0/08A94FD7F0E8A287AD318D7A26254192431E175F.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/08A94FD7F0E8A287AD318D7A26254192431E175F.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 11 Sep 2025 11:01:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 21:8d:37:29:f3:f9:b0:c8:29:d6:36:d5:ac:50:ea:72:d2:4d:97:48 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=08A94FD7F0E8A287AD318D7A26254192431E175F Validity Not Before: Sep 8 06:25:38 2025 GMT Not After : Sep 11 11:01:38 2025 GMT Subject: CN=BC0034EA611F1E9DDFEE4C2609B944965723FA1D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:ec:fa:d3:09:55:52:2c:b0:c5:b5:13:d5:7f: e5:64:05:42:a0:24:04:93:ff:b5:22:37:c8:9c:6d: ae:f1:14:db:5b:17:cb:57:17:92:8d:b1:d0:1f:a9: cf:9e:7e:60:7e:71:0d:4b:a3:23:ef:b2:32:8c:07: 78:e3:c9:22:a5:da:19:81:04:d2:28:df:c1:2c:22: ea:ed:48:d9:00:39:da:ef:43:9c:11:bd:a5:52:67: 58:b9:53:a3:b5:fc:74:81:8d:0e:60:ee:79:a9:80: 74:17:6f:24:f6:e9:92:2d:2e:9c:ab:c5:ec:4d:7d: 3b:04:f3:f3:2f:f7:67:29:f3:05:4c:bf:f4:e6:97: 15:fb:b0:0c:73:fa:44:b4:45:69:15:85:76:2d:a4: 12:29:1b:1e:42:8e:7b:7e:69:6b:95:00:7e:e1:97: 56:6e:36:f1:23:00:92:66:12:4f:b9:da:fc:33:99: 09:e9:24:0c:19:b3:49:cf:5d:39:ca:72:82:d5:60: 47:63:42:37:42:94:91:b1:d4:ae:20:42:f5:36:68: 4b:2f:18:5a:c7:7d:c6:68:4b:73:16:50:e9:5d:01: ee:03:3b:b2:69:89:02:a5:02:b6:4c:31:cb:85:bc: 49:9e:31:d3:73:5b:37:6b:04:ba:2c:59:cd:8d:af: eb:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BC:00:34:EA:61:1F:1E:9D:DF:EE:4C:26:09:B9:44:96:57:23:FA:1D X509v3 Authority Key Identifier: keyid:08:A9:4F:D7:F0:E8:A2:87:AD:31:8D:7A:26:25:41:92:43:1E:17:5F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/42083d44-7835-443d-853a-0a79cf00e950/0/08A94FD7F0E8A287AD318D7A26254192431E175F.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/08A94FD7F0E8A287AD318D7A26254192431E175F.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/42083d44-7835-443d-853a-0a79cf00e950/0/08A94FD7F0E8A287AD318D7A26254192431E175F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3f:f4:3a:f9:8c:8d:96:54:31:d7:e7:63:cf:2e:5b:54:2e:a3: 3c:9c:b6:0f:b4:8d:bf:a5:dd:cf:98:12:1f:c5:d6:97:bf:f1: 8e:fc:51:e4:ee:37:8e:4d:78:6c:85:59:9f:68:eb:53:36:e9: 75:58:78:2e:8a:f5:cb:01:cf:51:29:36:6b:fb:b6:ad:16:0d: e3:5d:62:0d:1c:03:b0:4f:f1:b0:4c:70:01:64:ba:b6:06:f3: 07:d9:31:29:0e:89:ed:67:67:39:72:59:59:8e:d1:1e:54:e0: ee:be:d1:e6:62:ac:f2:da:ed:53:97:de:4f:37:f4:bd:55:8f: c3:76:99:e3:fa:88:24:f6:39:85:24:32:b8:d3:b2:a6:d8:7d: a9:a0:49:9e:d2:ca:70:16:fd:5e:c0:2d:de:8a:ed:ec:2b:f6: 92:4f:65:38:74:2d:ed:0c:74:e6:fe:2d:36:33:e9:46:5e:57: 65:b2:43:04:7d:3c:03:54:27:1f:ff:e7:bb:39:5c:b1:24:9c: 8a:53:58:12:16:66:f2:16:b6:8a:44:73:5c:88:2e:37:0a:c2: eb:93:02:46:15:f1:79:03:9c:1f:91:2d:51:8e:54:b8:e3:14: 1b:36:25:49:bb:75:b7:40:8c:a6:09:af:7a:3b:9e:79:9a:ac: 57:88:c5:3e -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUIY03KfP5sMgp1jbVrFDqctJNl0gwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDhBOTRGRDdGMEU4QTI4N0FEMzE4RDdBMjYyNTQxOTI0 MzFFMTc1RjAeFw0yNTA5MDgwNjI1MzhaFw0yNTA5MTExMTAxMzhaMDMxMTAvBgNV BAMTKEJDMDAzNEVBNjExRjFFOURERkVFNEMyNjA5Qjk0NDk2NTcyM0ZBMUQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDT7PrTCVVSLLDFtRPVf+VkBUKg JAST/7UiN8icba7xFNtbF8tXF5KNsdAfqc+efmB+cQ1LoyPvsjKMB3jjySKl2hmB BNIo38EsIurtSNkAOdrvQ5wRvaVSZ1i5U6O1/HSBjQ5g7nmpgHQXbyT26ZItLpyr xexNfTsE8/Mv92cp8wVMv/TmlxX7sAxz+kS0RWkVhXYtpBIpGx5Cjnt+aWuVAH7h l1ZuNvEjAJJmEk+52vwzmQnpJAwZs0nPXTnKcoLVYEdjQjdClJGx1K4gQvU2aEsv GFrHfcZoS3MWUOldAe4DO7JpiQKlArZMMcuFvEmeMdNzWzdrBLosWc2Nr+tBAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUvAA06mEfHp3f7kwmCblEllcj+h0wHwYDVR0j BBgwFoAUCKlP1/DoooetMY16JiVBkkMeF18wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 MjA4M2Q0NC03ODM1LTQ0M2QtODUzYS0wYTc5Y2YwMGU5NTAvMC8wOEE5NEZEN0Yw RThBMjg3QUQzMThEN0EyNjI1NDE5MjQzMUUxNzVGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMDhBOTRGRDdGMEU4QTI4N0FEMzE4RDdBMjYyNTQxOTI0MzFF MTc1Ri5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNDIwODNkNDQtNzgzNS00NDNkLTg1 M2EtMGE3OWNmMDBlOTUwLzAvMDhBOTRGRDdGMEU4QTI4N0FEMzE4RDdBMjYyNTQx OTI0MzFFMTc1Ri5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAD/0OvmMjZZUMdfnY88uW1Quozyctg+0jb+l 3c+YEh/F1pe/8Y78UeTuN45NeGyFWZ9o61M26XVYeC6K9csBz1EpNmv7tq0WDeNd Yg0cA7BP8bBMcAFkurYG8wfZMSkOie1nZzlyWVmO0R5U4O6+0eZirPLa7VOX3k83 9L1Vj8N2meP6iCT2OYUkMrjTsqbYfamgSZ7SynAW/V7ALd6K7ewr9pJPZTh0Le0M dOb+LTYz6UZeV2WyQwR9PANUJx//57s5XLEknIpTWBIWZvIWtopEc1yILjcKwuuT AkYV8XkDnB+RLVGOVLjjFBs2JUm7dbdAjKYJr3o7nnmarFeIxT4= -----END CERTIFICATE-----Generated at Tue Sep 9 02:32:39 2025 by rpki-client