$ rpki-client -vvf repo-rpki.idnic.net/repo/4288762c-3fc5-49cc-949a-594b331a13a1/0/8958EB1EA0022DEF783D17F1C5B6F0C54B0F5F1E.mft File: 8958EB1EA0022DEF783D17F1C5B6F0C54B0F5F1E.mft (raw, json) Hash identifier: /kRXfsuLUeM72wTbYGdsQIGBxoeGw/WsZ320c6OdSdg= Subject key identifier: 11:96:13:73:30:6A:40:0D:15:F9:DD:FA:74:1A:1D:69:64:D5:0C:68 Authority key identifier: 89:58:EB:1E:A0:02:2D:EF:78:3D:17:F1:C5:B6:F0:C5:4B:0F:5F:1E Certificate issuer: /CN=8958EB1EA0022DEF783D17F1C5B6F0C54B0F5F1E Certificate serial: 5DB1AE6DB5E6377F2F57F745A16D976646DF651B Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8958EB1EA0022DEF783D17F1C5B6F0C54B0F5F1E.cer Subject info access: rsync://repo-rpki.idnic.net/repo/4288762c-3fc5-49cc-949a-594b331a13a1/0/8958EB1EA0022DEF783D17F1C5B6F0C54B0F5F1E.mft Manifest number: 0106 Signing time: Wed 03 Sep 2025 14:20:03 +0000 Manifest this update: Wed 03 Sep 2025 14:15:03 +0000 Manifest next update: Sat 06 Sep 2025 22:43:03 +0000 Files and hashes: 1: 3230322e34372e3136302e302f32342d3234203d3e20313532303736.roa (hash: 7kwTbSO1puRUOTojUVn3A2nZmKPBj1Yf1FR09LrPep4=) 2: 8958EB1EA0022DEF783D17F1C5B6F0C54B0F5F1E.crl (hash: WKGYyj7g6V9dRsZZtiGG1/OuCUYYStH15IvLqxKSzc0=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/4288762c-3fc5-49cc-949a-594b331a13a1/0/8958EB1EA0022DEF783D17F1C5B6F0C54B0F5F1E.crl rsync://repo-rpki.idnic.net/repo/4288762c-3fc5-49cc-949a-594b331a13a1/0/8958EB1EA0022DEF783D17F1C5B6F0C54B0F5F1E.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8958EB1EA0022DEF783D17F1C5B6F0C54B0F5F1E.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 06 Sep 2025 22:43:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5d:b1:ae:6d:b5:e6:37:7f:2f:57:f7:45:a1:6d:97:66:46:df:65:1b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8958EB1EA0022DEF783D17F1C5B6F0C54B0F5F1E Validity Not Before: Sep 3 14:15:03 2025 GMT Not After : Sep 6 22:43:03 2025 GMT Subject: CN=11961373306A400D15F9DDFA741A1D6964D50C68 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:94:93:d8:25:b3:72:ba:e6:b3:82:11:d0:a3: 7c:99:10:b4:16:30:6c:ca:ea:0b:2f:74:27:e1:b9: 79:1f:7e:b3:ff:8e:f0:cd:6b:ca:c9:86:e7:e5:4b: f6:98:ae:83:ed:1a:ed:5d:00:b8:ae:d3:a5:78:b3: dd:48:24:d4:8f:f2:d7:ff:af:cc:74:8d:79:d7:40: a5:f2:1f:f6:85:57:62:2e:b5:6e:e9:f0:32:11:f5: f6:f0:d8:47:3d:79:5c:84:48:42:91:f9:8d:bc:21: c5:91:af:78:9b:8f:6e:d3:23:9e:dd:4c:b8:69:fd: ef:f4:1b:e6:fc:b9:8d:62:f7:81:6c:64:09:89:7c: 9a:5c:5f:1f:b6:ea:29:a5:62:65:73:fe:8e:b5:af: d5:93:c6:9b:de:bf:2c:af:82:21:fa:66:ee:d8:77: 41:1d:98:93:d5:68:ef:f7:ec:6d:8e:9f:92:bc:3b: b3:97:10:2f:b9:c0:20:6d:8e:06:fb:bb:e2:ad:37: 72:50:a8:a9:ff:5f:08:8f:77:f7:75:e1:ee:a6:90: 80:57:f0:f3:5f:4f:ee:ea:66:23:69:7c:f6:8c:a1: 7a:66:92:28:5c:c1:87:1a:76:29:16:d2:74:b7:ef: a5:21:2d:87:53:6a:a2:8e:dd:25:10:81:7c:82:7f: 51:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:96:13:73:30:6A:40:0D:15:F9:DD:FA:74:1A:1D:69:64:D5:0C:68 X509v3 Authority Key Identifier: keyid:89:58:EB:1E:A0:02:2D:EF:78:3D:17:F1:C5:B6:F0:C5:4B:0F:5F:1E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/4288762c-3fc5-49cc-949a-594b331a13a1/0/8958EB1EA0022DEF783D17F1C5B6F0C54B0F5F1E.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8958EB1EA0022DEF783D17F1C5B6F0C54B0F5F1E.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/4288762c-3fc5-49cc-949a-594b331a13a1/0/8958EB1EA0022DEF783D17F1C5B6F0C54B0F5F1E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption af:70:77:6b:be:3f:a1:1f:98:19:f1:62:f6:94:9e:ba:4e:05: b5:d7:6c:70:64:b1:c2:ab:04:10:c8:0a:7d:78:94:6a:41:37: 33:aa:31:11:ea:ac:53:9e:a6:af:16:53:c6:66:c9:2c:59:72: 4b:0b:85:01:0a:39:8d:c4:63:e6:6a:72:8f:7e:10:06:75:54: 28:13:b2:77:43:10:78:34:0f:c2:cc:3d:1e:ec:d6:f3:c4:0f: 08:5d:39:7a:ee:bf:32:76:62:f1:bb:50:22:d3:34:af:8e:53: 82:67:82:fa:cf:72:58:d9:ed:21:6f:ef:40:53:c4:20:69:a8: 53:95:3b:5e:25:53:34:07:2b:df:9c:7c:ba:3c:70:28:97:20: 14:e6:a5:ff:d3:0b:b6:5f:41:40:f3:90:da:e3:d2:7a:dc:af: 0b:0a:d5:78:f7:d1:67:22:8f:b2:58:47:d9:d9:ec:2b:80:0d: cf:18:ac:54:e5:4f:16:14:1c:9c:1b:4e:86:57:4e:f3:59:f3: 79:43:b2:11:a2:43:78:61:ce:d5:5c:e2:07:fb:d8:3d:f7:88: 73:5c:09:8e:42:9d:b5:8d:1e:26:f2:2b:0e:07:dd:4d:2d:2b: 33:43:1b:02:d4:2d:3a:91:2d:91:26:20:fd:0d:8e:c0:08:46: b6:23:d5:c6 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUXbGubbXmN38vV/dFoW2XZkbfZRswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODk1OEVCMUVBMDAyMkRFRjc4M0QxN0YxQzVCNkYwQzU0 QjBGNUYxRTAeFw0yNTA5MDMxNDE1MDNaFw0yNTA5MDYyMjQzMDNaMDMxMTAvBgNV BAMTKDExOTYxMzczMzA2QTQwMEQxNUY5RERGQTc0MUExRDY5NjRENTBDNjgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDOlJPYJbNyuuazghHQo3yZELQW MGzK6gsvdCfhuXkffrP/jvDNa8rJhuflS/aYroPtGu1dALiu06V4s91IJNSP8tf/ r8x0jXnXQKXyH/aFV2IutW7p8DIR9fbw2Ec9eVyESEKR+Y28IcWRr3ibj27TI57d TLhp/e/0G+b8uY1i94FsZAmJfJpcXx+26imlYmVz/o61r9WTxpvevyyvgiH6Zu7Y d0EdmJPVaO/37G2On5K8O7OXEC+5wCBtjgb7u+KtN3JQqKn/XwiPd/d14e6mkIBX 8PNfT+7qZiNpfPaMoXpmkihcwYcadikW0nS376UhLYdTaqKO3SUQgXyCf1GdAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUEZYTczBqQA0V+d36dBodaWTVDGgwHwYDVR0j BBgwFoAUiVjrHqACLe94PRfxxbbwxUsPXx4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 Mjg4NzYyYy0zZmM1LTQ5Y2MtOTQ5YS01OTRiMzMxYTEzYTEvMC84OTU4RUIxRUEw MDIyREVGNzgzRDE3RjFDNUI2RjBDNTRCMEY1RjFFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvODk1OEVCMUVBMDAyMkRFRjc4M0QxN0YxQzVCNkYwQzU0QjBG NUYxRS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNDI4ODc2MmMtM2ZjNS00OWNjLTk0 OWEtNTk0YjMzMWExM2ExLzAvODk1OEVCMUVBMDAyMkRFRjc4M0QxN0YxQzVCNkYw QzU0QjBGNUYxRS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAK9wd2u+P6EfmBnxYvaUnrpOBbXXbHBkscKr BBDICn14lGpBNzOqMRHqrFOepq8WU8ZmySxZcksLhQEKOY3EY+Zqco9+EAZ1VCgT sndDEHg0D8LMPR7s1vPEDwhdOXruvzJ2YvG7UCLTNK+OU4JngvrPcljZ7SFv70BT xCBpqFOVO14lUzQHK9+cfLo8cCiXIBTmpf/TC7ZfQUDzkNrj0nrcrwsK1Xj30Wci j7JYR9nZ7CuADc8YrFTlTxYUHJwbToZXTvNZ83lDshGiQ3hhztVc4gf72D33iHNc CY5CnbWNHibyKw4H3U0tKzNDGwLULTqRLZEmIP0NjsAIRrYj1cY= -----END CERTIFICATE-----Generated at Fri Sep 5 10:36:17 2025 by rpki-client