$ rpki-client -vvf repo-rpki.idnic.net/repo/481d54cb-57a9-4a16-a70e-c5f6024e139d/0/C08E65A250AEDC93967004D660D25DB8293AB419.mft File: C08E65A250AEDC93967004D660D25DB8293AB419.mft (raw, json) Hash identifier: ZKY4BwmNZ1xpG1fTijUXVX1tyVXMXJt9jn94iXzPrbk= Subject key identifier: 83:09:F9:8E:8B:DB:BF:EA:DA:FF:88:34:28:29:D0:CE:50:54:6B:CA Authority key identifier: C0:8E:65:A2:50:AE:DC:93:96:70:04:D6:60:D2:5D:B8:29:3A:B4:19 Certificate issuer: /CN=C08E65A250AEDC93967004D660D25DB8293AB419 Certificate serial: 40C622AD96E35C8527FE1A3804712FD51F2EB6AB Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/C08E65A250AEDC93967004D660D25DB8293AB419.cer Subject info access: rsync://repo-rpki.idnic.net/repo/481d54cb-57a9-4a16-a70e-c5f6024e139d/0/C08E65A250AEDC93967004D660D25DB8293AB419.mft Manifest number: 8F Signing time: Sat 06 Sep 2025 01:31:15 +0000 Manifest this update: Sat 06 Sep 2025 01:26:15 +0000 Manifest next update: Tue 09 Sep 2025 06:07:15 +0000 Files and hashes: 1: 3136302e3138372e3231382e302f32332d3233203d3e20313533313332.roa (hash: sdFf65pWHqDguzQodheeefSyOGT0g0gjcknsFa81ar4=) 2: C08E65A250AEDC93967004D660D25DB8293AB419.crl (hash: kdw4CBzD4STz82858RhFQwWFYO5QBtgdNnIIU8/AOkY=) 3: 3136302e3138372e3231382e302f32342d3234203d3e20313533313332.roa (hash: acW7MmyfNG3sUp37/a67TBL3VhsulHr1Ydf1eaVxfYA=) 4: 3136302e3138372e3231392e302f32342d3234203d3e20313533313332.roa (hash: TxTC2v3sBGuNzD/7pAwJq8+hVg6iPYD1W71+E9F+XzU=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/481d54cb-57a9-4a16-a70e-c5f6024e139d/0/C08E65A250AEDC93967004D660D25DB8293AB419.crl rsync://repo-rpki.idnic.net/repo/481d54cb-57a9-4a16-a70e-c5f6024e139d/0/C08E65A250AEDC93967004D660D25DB8293AB419.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/C08E65A250AEDC93967004D660D25DB8293AB419.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 09 Sep 2025 06:07:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 40:c6:22:ad:96:e3:5c:85:27:fe:1a:38:04:71:2f:d5:1f:2e:b6:ab Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C08E65A250AEDC93967004D660D25DB8293AB419 Validity Not Before: Sep 6 01:26:15 2025 GMT Not After : Sep 9 06:07:15 2025 GMT Subject: CN=8309F98E8BDBBFEADAFF88342829D0CE50546BCA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:c2:cc:16:4e:d9:31:f9:50:75:00:02:3b:6a: de:78:a3:bf:8b:34:cc:aa:04:71:09:a8:23:86:6f: a9:bf:dd:4c:77:1e:5e:b7:b3:b7:d4:7e:92:50:18: 5b:c6:3c:03:bf:e3:89:cd:fb:30:b6:a1:dd:ad:ca: 22:a1:50:14:bd:6e:bd:7d:28:1e:3a:db:7e:03:d1: 17:c9:eb:33:2e:03:dd:86:1c:ea:88:c9:54:da:63: ce:87:25:11:4b:26:59:42:45:4a:e9:17:7b:e4:65: 19:21:77:da:c0:f1:96:e9:01:ee:d2:fd:29:c5:bd: 95:bf:a6:5f:c7:21:69:c1:ba:94:86:37:08:27:00: 79:3b:d0:3f:42:62:f0:d0:cc:e4:e6:34:da:35:da: a4:0e:1b:19:90:df:ae:b6:5f:16:ff:1e:3e:bd:b8: 1c:0a:c6:49:09:f8:b1:3f:62:b6:94:18:57:c9:e7: 7f:ad:1f:aa:7c:45:28:f9:df:cc:e1:24:1d:fa:ef: d7:4d:fa:e7:18:b1:84:a0:91:5e:d2:6d:ef:54:e6: 4d:c9:c9:eb:78:de:d6:f9:b0:23:63:28:f9:f5:29: 8d:13:37:b6:b7:db:50:66:4c:92:09:33:42:99:14: 95:b7:d3:1c:f0:3a:55:0e:b9:a2:e0:ad:b1:46:0a: 71:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 83:09:F9:8E:8B:DB:BF:EA:DA:FF:88:34:28:29:D0:CE:50:54:6B:CA X509v3 Authority Key Identifier: keyid:C0:8E:65:A2:50:AE:DC:93:96:70:04:D6:60:D2:5D:B8:29:3A:B4:19 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/481d54cb-57a9-4a16-a70e-c5f6024e139d/0/C08E65A250AEDC93967004D660D25DB8293AB419.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/C08E65A250AEDC93967004D660D25DB8293AB419.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/481d54cb-57a9-4a16-a70e-c5f6024e139d/0/C08E65A250AEDC93967004D660D25DB8293AB419.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1e:2c:78:83:62:85:25:5d:4e:4a:7c:01:8d:44:72:ae:1a:3e: 3f:0d:67:54:a6:26:05:0f:d7:5e:69:20:01:d6:41:ed:74:e6: 4e:cf:2e:ae:b7:ca:b0:eb:01:a0:e4:82:70:61:04:d3:1a:a3: 9a:42:b2:68:00:25:5c:db:76:2a:71:c0:6e:49:b0:1a:78:4c: 25:62:9f:ad:9a:f8:18:fe:fb:ab:4b:25:48:df:f5:44:04:f3: 97:58:77:ee:22:a4:e0:38:9d:92:a1:6b:fa:03:08:18:f8:63: 05:b5:e5:50:bf:bf:3b:6f:a6:cb:05:e4:63:95:50:8c:b1:f0: f4:26:9a:55:2a:65:60:8a:13:b4:31:10:87:d5:d4:a2:ac:1e: 46:d8:79:8c:81:b7:5c:6d:83:85:b2:f9:8f:02:f1:77:92:48: 63:06:a6:db:36:b3:23:89:47:e0:af:bd:0d:8e:ba:20:d8:33: b5:da:6b:9a:62:c3:b7:a0:81:19:e4:71:1e:89:13:e5:19:9f: 62:d2:5b:05:88:9e:e7:35:50:5a:fb:bf:0c:7c:8f:5f:01:96: aa:d2:a6:bd:33:59:47:19:4b:78:61:8a:9c:d8:d1:97:1e:f3: 53:ff:c9:98:e7:b1:9f:9a:c9:f9:d1:d3:98:e2:38:1b:89:82: 39:6b:9a:41 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUQMYirZbjXIUn/ho4BHEv1R8utqswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzA4RTY1QTI1MEFFREM5Mzk2NzAwNEQ2NjBEMjVEQjgy OTNBQjQxOTAeFw0yNTA5MDYwMTI2MTVaFw0yNTA5MDkwNjA3MTVaMDMxMTAvBgNV BAMTKDgzMDlGOThFOEJEQkJGRUFEQUZGODgzNDI4MjlEMENFNTA1NDZCQ0EwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC1wswWTtkx+VB1AAI7at54o7+L NMyqBHEJqCOGb6m/3Ux3Hl63s7fUfpJQGFvGPAO/44nN+zC2od2tyiKhUBS9br19 KB46234D0RfJ6zMuA92GHOqIyVTaY86HJRFLJllCRUrpF3vkZRkhd9rA8ZbpAe7S /SnFvZW/pl/HIWnBupSGNwgnAHk70D9CYvDQzOTmNNo12qQOGxmQ3662Xxb/Hj69 uBwKxkkJ+LE/YraUGFfJ53+tH6p8RSj538zhJB3679dN+ucYsYSgkV7Sbe9U5k3J yet43tb5sCNjKPn1KY0TN7a321BmTJIJM0KZFJW30xzwOlUOuaLgrbFGCnHTAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUgwn5jovbv+ra/4g0KCnQzlBUa8owHwYDVR0j BBgwFoAUwI5lolCu3JOWcATWYNJduCk6tBkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 ODFkNTRjYi01N2E5LTRhMTYtYTcwZS1jNWY2MDI0ZTEzOWQvMC9DMDhFNjVBMjUw QUVEQzkzOTY3MDA0RDY2MEQyNURCODI5M0FCNDE5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvQzA4RTY1QTI1MEFFREM5Mzk2NzAwNEQ2NjBEMjVEQjgyOTNB QjQxOS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNDgxZDU0Y2ItNTdhOS00YTE2LWE3 MGUtYzVmNjAyNGUxMzlkLzAvQzA4RTY1QTI1MEFFREM5Mzk2NzAwNEQ2NjBEMjVE QjgyOTNBQjQxOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAB4seINihSVdTkp8AY1Ecq4aPj8NZ1SmJgUP 115pIAHWQe105k7PLq63yrDrAaDkgnBhBNMao5pCsmgAJVzbdipxwG5JsBp4TCVi n62a+Bj++6tLJUjf9UQE85dYd+4ipOA4nZKha/oDCBj4YwW15VC/vztvpssF5GOV UIyx8PQmmlUqZWCKE7QxEIfV1KKsHkbYeYyBt1xtg4Wy+Y8C8XeSSGMGpts2syOJ R+CvvQ2OuiDYM7Xaa5piw7eggRnkcR6JE+UZn2LSWwWInuc1UFr7vwx8j18BlqrS pr0zWUcZS3hhipzY0Zce81P/yZjnsZ+ayfnR05jiOBuJgjlrmkE= -----END CERTIFICATE-----Generated at Mon Sep 8 05:09:04 2025 by rpki-client