$ rpki-client -vvf repo-rpki.idnic.net/repo/44b27303-9e3d-4d42-af25-6a0f11808f27/0/8C888E996588527BC5EF8ABD293676C3463A1A22.mft File: 8C888E996588527BC5EF8ABD293676C3463A1A22.mft (raw, json) Hash identifier: v8ZG63KaBXvMRj5iE4YHnV6O3ZmKzcN4F1qA1CFAvo0= Subject key identifier: DB:26:B1:6D:9D:6A:06:11:95:7D:2E:95:E9:F3:F3:D6:7F:EA:1B:1A Authority key identifier: 8C:88:8E:99:65:88:52:7B:C5:EF:8A:BD:29:36:76:C3:46:3A:1A:22 Certificate issuer: /CN=8C888E996588527BC5EF8ABD293676C3463A1A22 Certificate serial: 7E5FFB64CE4DD6B13F802948AAB8E1A2E952046B Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8C888E996588527BC5EF8ABD293676C3463A1A22.cer Subject info access: rsync://repo-rpki.idnic.net/repo/44b27303-9e3d-4d42-af25-6a0f11808f27/0/8C888E996588527BC5EF8ABD293676C3463A1A22.mft Manifest number: 0235 Signing time: Sun 07 Sep 2025 03:31:35 +0000 Manifest this update: Sun 07 Sep 2025 03:26:35 +0000 Manifest next update: Wed 10 Sep 2025 11:57:35 +0000 Files and hashes: 1: 3130332e39372e352e302f32342d3234203d3e20313336313237.roa (hash: cqTyGMrVXV3krfj6ahd0XiybL7qMxOankc/x3Ztfrtk=) 2: 8C888E996588527BC5EF8ABD293676C3463A1A22.crl (hash: zrWLXPBhrQstgGfwPrWDMXtmyTvHC9jBvF6+Is8KRuE=) 3: 3130332e39372e372e302f32342d3234203d3e20313336313237.roa (hash: JOk2hOEjt3VDU03LDOoQK88eKB9E+q6wdAJWayyHIwQ=) 4: 3130332e39372e362e302f32342d3234203d3e20313336313237.roa (hash: 953/1OAjNWabw3EekLLAXwzV4CYrLdUWpl5qPGTJpaU=) 5: 3130332e39372e342e302f32322d3234203d3e20313336313237.roa (hash: Fuo7Zv6Qy+uY4bdbE0UwMy6jWa9ZEF+DnD6ctpiueL4=) 6: 323430313a383034303a3a2f33322d3332203d3e20313336313237.roa (hash: ejjY61bhmlJl0lxMoyTYYJxk49QNB+St/BGfTNpwclI=) 7: 3130332e39372e342e302f32342d3234203d3e20313336313237.roa (hash: Jatff9pdbxHcTIoc61FwpQ4zDvedkS7YEGoxT4EFfu8=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/44b27303-9e3d-4d42-af25-6a0f11808f27/0/8C888E996588527BC5EF8ABD293676C3463A1A22.crl rsync://repo-rpki.idnic.net/repo/44b27303-9e3d-4d42-af25-6a0f11808f27/0/8C888E996588527BC5EF8ABD293676C3463A1A22.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8C888E996588527BC5EF8ABD293676C3463A1A22.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 10 Sep 2025 10:23:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7e:5f:fb:64:ce:4d:d6:b1:3f:80:29:48:aa:b8:e1:a2:e9:52:04:6b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8C888E996588527BC5EF8ABD293676C3463A1A22 Validity Not Before: Sep 7 03:26:35 2025 GMT Not After : Sep 10 11:57:35 2025 GMT Subject: CN=DB26B16D9D6A0611957D2E95E9F3F3D67FEA1B1A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:0c:a8:1a:95:17:33:0c:28:5c:b9:2a:5d:a8: 22:b3:fb:dd:bf:8e:a2:4f:b9:4d:e8:86:c8:8a:ff: 75:46:6d:b7:fe:ad:36:0b:0f:3e:94:c2:f6:36:c7: 55:c1:0d:a8:9e:9d:0c:66:20:de:f5:26:f4:a7:fe: 07:4c:f8:36:59:1e:88:23:b9:55:4e:cc:94:39:9c: 90:60:9b:23:47:05:0f:05:5f:e0:7a:20:1d:83:7f: 54:fc:8a:b3:93:40:67:26:16:de:a6:23:f9:14:d3: 36:d1:33:c9:72:19:be:e6:2d:8f:e9:39:76:ed:86: 18:18:c2:b1:e5:ad:25:4c:2d:2e:fc:b5:bd:2a:cb: 52:37:e5:cd:db:13:91:f4:c3:20:e0:14:35:09:b1: 62:5e:a0:a9:bb:bd:10:c3:f3:d0:97:5a:da:99:99: 0e:6d:6b:ed:80:18:25:29:1b:ce:6d:fe:29:fd:e3: c2:1f:24:cf:0b:b8:71:54:14:25:a4:95:2b:c0:36: 86:8b:b7:29:b5:43:a8:9b:f1:fc:76:51:c3:9f:34: b8:49:e8:d3:9a:f1:18:6f:58:f5:3f:e0:98:e9:d9: 21:ee:ac:be:62:76:23:b4:15:6b:9b:f8:bf:ae:ca: e6:8d:2b:0a:43:f2:75:33:48:54:f3:e5:26:5b:de: 57:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DB:26:B1:6D:9D:6A:06:11:95:7D:2E:95:E9:F3:F3:D6:7F:EA:1B:1A X509v3 Authority Key Identifier: keyid:8C:88:8E:99:65:88:52:7B:C5:EF:8A:BD:29:36:76:C3:46:3A:1A:22 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/44b27303-9e3d-4d42-af25-6a0f11808f27/0/8C888E996588527BC5EF8ABD293676C3463A1A22.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8C888E996588527BC5EF8ABD293676C3463A1A22.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/44b27303-9e3d-4d42-af25-6a0f11808f27/0/8C888E996588527BC5EF8ABD293676C3463A1A22.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 47:ea:e9:c7:fb:32:a5:e7:5d:27:7b:c0:37:81:cf:fa:91:9a: b2:0c:60:94:50:e5:9b:0b:90:7e:ea:2a:d6:a8:94:a6:e2:ef: 91:7f:b7:56:52:e9:1b:3e:b5:07:e1:af:a5:e6:f9:0c:42:1f: aa:fc:4b:ad:96:ec:3a:00:8d:ea:44:8e:dc:66:f8:f5:d8:c1: f6:a9:ab:ab:78:97:fb:07:67:09:6b:2c:b9:57:84:1c:96:71: a0:c9:6b:47:75:50:a3:ab:de:d1:2b:49:28:fa:51:d7:f3:76: 3e:60:ed:ea:62:28:c2:45:7e:6c:dd:5d:12:9d:52:fa:88:49: 38:aa:1a:b3:eb:54:43:f7:75:b7:96:01:8e:ea:59:cd:31:a1: 41:52:ef:b2:2a:b0:c6:a5:5e:93:a5:2b:4d:87:af:db:11:41: 05:70:48:76:f0:fc:45:17:e2:9b:52:aa:03:f1:93:95:c0:f7: 1f:68:25:b0:9f:03:e5:b5:f7:99:b2:e5:bb:9b:2d:77:de:dd: a2:42:95:66:54:05:46:ce:5b:8a:89:7c:a9:b7:c9:19:22:77: d3:55:5b:b2:4c:bd:1e:5a:db:a8:c1:e0:91:8a:d7:ff:89:be: bb:44:56:62:e1:00:21:a2:aa:8e:f4:ae:7a:9a:6e:e2:da:0e: 4f:0e:7e:b0 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUfl/7ZM5N1rE/gClIqrjhoulSBGswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEM4ODhFOTk2NTg4NTI3QkM1RUY4QUJEMjkzNjc2QzM0 NjNBMUEyMjAeFw0yNTA5MDcwMzI2MzVaFw0yNTA5MTAxMTU3MzVaMDMxMTAvBgNV BAMTKERCMjZCMTZEOUQ2QTA2MTE5NTdEMkU5NUU5RjNGM0Q2N0ZFQTFCMUEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDDDKgalRczDChcuSpdqCKz+92/ jqJPuU3ohsiK/3VGbbf+rTYLDz6UwvY2x1XBDaienQxmIN71JvSn/gdM+DZZHogj uVVOzJQ5nJBgmyNHBQ8FX+B6IB2Df1T8irOTQGcmFt6mI/kU0zbRM8lyGb7mLY/p OXbthhgYwrHlrSVMLS78tb0qy1I35c3bE5H0wyDgFDUJsWJeoKm7vRDD89CXWtqZ mQ5ta+2AGCUpG85t/in948IfJM8LuHFUFCWklSvANoaLtym1Q6ib8fx2UcOfNLhJ 6NOa8RhvWPU/4Jjp2SHurL5idiO0FWub+L+uyuaNKwpD8nUzSFTz5SZb3lcPAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU2yaxbZ1qBhGVfS6V6fPz1n/qGxowHwYDVR0j BBgwFoAUjIiOmWWIUnvF74q9KTZ2w0Y6GiIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 NGIyNzMwMy05ZTNkLTRkNDItYWYyNS02YTBmMTE4MDhmMjcvMC84Qzg4OEU5OTY1 ODg1MjdCQzVFRjhBQkQyOTM2NzZDMzQ2M0ExQTIyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOEM4ODhFOTk2NTg4NTI3QkM1RUY4QUJEMjkzNjc2QzM0NjNB MUEyMi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNDRiMjczMDMtOWUzZC00ZDQyLWFm MjUtNmEwZjExODA4ZjI3LzAvOEM4ODhFOTk2NTg4NTI3QkM1RUY4QUJEMjkzNjc2 QzM0NjNBMUEyMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEfq6cf7MqXnXSd7wDeBz/qRmrIMYJRQ5ZsL kH7qKtaolKbi75F/t1ZS6Rs+tQfhr6Xm+QxCH6r8S62W7DoAjepEjtxm+PXYwfap q6t4l/sHZwlrLLlXhByWcaDJa0d1UKOr3tErSSj6Udfzdj5g7epiKMJFfmzdXRKd UvqISTiqGrPrVEP3dbeWAY7qWc0xoUFS77IqsMalXpOlK02Hr9sRQQVwSHbw/EUX 4ptSqgPxk5XA9x9oJbCfA+W195my5bubLXfe3aJClWZUBUbOW4qJfKm3yRkid9NV W7JMvR5a26jB4JGK1/+JvrtEVmLhACGiqo70rnqabuLaDk8OfrA= -----END CERTIFICATE-----Generated at Sun Sep 7 15:27:01 2025 by rpki-client