$ rpki-client -vvf repo-rpki.idnic.net/repo/506cd155-b53f-4146-a17c-7f1375eca24a/0/A8ACDEBC6EB4FF09A48B38FEB17CC145AA5E9F36.mft File: A8ACDEBC6EB4FF09A48B38FEB17CC145AA5E9F36.mft (raw, json) Hash identifier: GUUdtt8fuRc9WGgUujy3yXMW/F4TWkvXJpNBDrmpjPg= Subject key identifier: 0C:39:DE:00:4E:62:EE:7B:57:7B:C8:20:C6:C4:4F:BB:62:89:BE:26 Authority key identifier: A8:AC:DE:BC:6E:B4:FF:09:A4:8B:38:FE:B1:7C:C1:45:AA:5E:9F:36 Certificate issuer: /CN=A8ACDEBC6EB4FF09A48B38FEB17CC145AA5E9F36 Certificate serial: 3F3E8E2D3A69A5087A877FEE86306B69F4AD1BC8 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A8ACDEBC6EB4FF09A48B38FEB17CC145AA5E9F36.cer Subject info access: rsync://repo-rpki.idnic.net/repo/506cd155-b53f-4146-a17c-7f1375eca24a/0/A8ACDEBC6EB4FF09A48B38FEB17CC145AA5E9F36.mft Manifest number: 0507 Signing time: Sat 06 Sep 2025 20:10:02 +0000 Manifest this update: Sat 06 Sep 2025 20:05:02 +0000 Manifest next update: Wed 10 Sep 2025 08:03:02 +0000 Files and hashes: 1: 3130332e37392e39362e302f32342d3234203d3e203634333038.roa (hash: wGapFjIoWrukGBmT8iRgZP0dNhbzHUcz+UdRp6Wb0WM=) 2: A8ACDEBC6EB4FF09A48B38FEB17CC145AA5E9F36.crl (hash: XljaeGUsMqiXWIiSZnI3+19AabpBz9yBqu0Dtr9tehI=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/506cd155-b53f-4146-a17c-7f1375eca24a/0/A8ACDEBC6EB4FF09A48B38FEB17CC145AA5E9F36.crl rsync://repo-rpki.idnic.net/repo/506cd155-b53f-4146-a17c-7f1375eca24a/0/A8ACDEBC6EB4FF09A48B38FEB17CC145AA5E9F36.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A8ACDEBC6EB4FF09A48B38FEB17CC145AA5E9F36.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 10 Sep 2025 08:03:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3f:3e:8e:2d:3a:69:a5:08:7a:87:7f:ee:86:30:6b:69:f4:ad:1b:c8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A8ACDEBC6EB4FF09A48B38FEB17CC145AA5E9F36 Validity Not Before: Sep 6 20:05:02 2025 GMT Not After : Sep 10 08:03:02 2025 GMT Subject: CN=0C39DE004E62EE7B577BC820C6C44FBB6289BE26 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:e7:b0:51:69:cb:b1:2a:24:19:0d:a4:18:84: c8:b4:85:26:24:66:41:7b:83:46:39:19:72:0a:ae: 0e:b3:89:9b:d7:de:cf:20:c2:7f:88:6c:09:ee:93: 37:f9:79:7b:7b:36:42:23:cd:7d:76:80:16:fc:44: 85:33:09:b9:06:28:a8:8f:1d:01:de:31:5a:58:cc: 40:d5:68:30:98:44:af:51:7b:99:d0:0d:2d:66:67: c7:4e:a6:de:af:50:ab:54:64:79:2e:48:74:89:44: 9b:01:14:20:27:50:a9:a3:f4:50:df:fb:35:f6:1a: e9:c7:d5:41:1a:62:63:d3:82:ce:3b:17:8d:bf:02: a1:dc:3b:c0:b8:c6:6f:8e:fe:f3:b6:11:32:4b:83: 54:bd:37:5c:c9:01:6a:1f:f1:3d:68:1f:13:05:c5: 0a:d1:b9:b1:00:20:cb:6b:68:df:32:96:3a:bd:d1: e1:c7:df:f8:1b:10:0e:1e:a5:8c:ee:eb:55:68:92: 34:f7:7a:9e:77:d2:43:85:d2:96:ca:25:d0:16:df: c9:bc:e1:6f:69:f7:d8:66:c3:e5:28:af:e1:d7:c5: 0e:ee:a3:ff:6e:c4:6c:e6:2e:98:52:eb:b0:89:27: c8:b7:87:72:05:d7:d5:68:c2:98:0f:fd:8d:f3:2b: 77:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0C:39:DE:00:4E:62:EE:7B:57:7B:C8:20:C6:C4:4F:BB:62:89:BE:26 X509v3 Authority Key Identifier: keyid:A8:AC:DE:BC:6E:B4:FF:09:A4:8B:38:FE:B1:7C:C1:45:AA:5E:9F:36 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/506cd155-b53f-4146-a17c-7f1375eca24a/0/A8ACDEBC6EB4FF09A48B38FEB17CC145AA5E9F36.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A8ACDEBC6EB4FF09A48B38FEB17CC145AA5E9F36.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/506cd155-b53f-4146-a17c-7f1375eca24a/0/A8ACDEBC6EB4FF09A48B38FEB17CC145AA5E9F36.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 84:12:e7:f5:87:63:7f:9c:8b:b9:af:f5:4e:87:a3:24:c4:03: c6:68:fc:9d:c0:a3:8a:21:1c:1b:c7:89:06:c4:fb:ff:0e:37: 5c:fc:49:1c:b2:a0:00:9c:fa:27:08:b3:51:95:3c:99:62:4f: f3:f6:1c:e3:c8:37:69:12:27:61:42:e4:c0:3d:3a:e9:37:41: e6:b3:af:1d:fb:87:7f:06:b6:5b:29:c5:23:35:8d:c7:31:ac: d2:0b:c4:b7:b9:02:77:be:ad:d3:50:09:db:8e:c7:85:1f:22: 7a:2d:69:57:9a:ce:70:f8:f4:4f:ce:b4:18:ec:7b:1c:b0:a8: 9b:5a:e2:d2:a6:ff:26:a8:5e:f9:55:d8:6c:c0:f1:3b:c9:93: 77:6e:cb:01:a9:20:72:f1:4f:08:e0:07:8f:51:68:29:b1:15: 10:5c:8c:c6:62:07:e6:18:ad:78:2e:85:ed:84:8c:44:4d:d4: e8:22:43:5d:70:60:8c:99:58:d3:d4:fa:15:dc:1d:d6:fb:dc: 5c:f1:58:31:d5:48:58:7e:21:a7:09:6e:53:e8:16:10:e1:b9: 1c:fe:c5:0b:ac:eb:a4:c5:4b:07:ae:c1:34:b2:45:16:de:72: 1b:68:29:c1:bc:f4:d2:65:cb:8a:74:1d:d1:d0:05:33:0d:28: d0:9e:70:cb -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUPz6OLTpppQh6h3/uhjBrafStG8gwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQThBQ0RFQkM2RUI0RkYwOUE0OEIzOEZFQjE3Q0MxNDVB QTVFOUYzNjAeFw0yNTA5MDYyMDA1MDJaFw0yNTA5MTAwODAzMDJaMDMxMTAvBgNV BAMTKDBDMzlERTAwNEU2MkVFN0I1NzdCQzgyMEM2QzQ0RkJCNjI4OUJFMjYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDO57BRacuxKiQZDaQYhMi0hSYk ZkF7g0Y5GXIKrg6ziZvX3s8gwn+IbAnukzf5eXt7NkIjzX12gBb8RIUzCbkGKKiP HQHeMVpYzEDVaDCYRK9Re5nQDS1mZ8dOpt6vUKtUZHkuSHSJRJsBFCAnUKmj9FDf +zX2GunH1UEaYmPTgs47F42/AqHcO8C4xm+O/vO2ETJLg1S9N1zJAWof8T1oHxMF xQrRubEAIMtraN8yljq90eHH3/gbEA4epYzu61VokjT3ep530kOF0pbKJdAW38m8 4W9p99hmw+Uor+HXxQ7uo/9uxGzmLphS67CJJ8i3h3IF19VowpgP/Y3zK3eDAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUDDneAE5i7ntXe8ggxsRPu2KJviYwHwYDVR0j BBgwFoAUqKzevG60/wmkizj+sXzBRapenzYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 MDZjZDE1NS1iNTNmLTQxNDYtYTE3Yy03ZjEzNzVlY2EyNGEvMC9BOEFDREVCQzZF QjRGRjA5QTQ4QjM4RkVCMTdDQzE0NUFBNUU5RjM2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQThBQ0RFQkM2RUI0RkYwOUE0OEIzOEZFQjE3Q0MxNDVBQTVF OUYzNi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNTA2Y2QxNTUtYjUzZi00MTQ2LWEx N2MtN2YxMzc1ZWNhMjRhLzAvQThBQ0RFQkM2RUI0RkYwOUE0OEIzOEZFQjE3Q0Mx NDVBQTVFOUYzNi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIQS5/WHY3+ci7mv9U6HoyTEA8Zo/J3Ao4oh HBvHiQbE+/8ON1z8SRyyoACc+icIs1GVPJliT/P2HOPIN2kSJ2FC5MA9Ouk3Qeaz rx37h38GtlspxSM1jccxrNILxLe5Ane+rdNQCduOx4UfInotaVeaznD49E/OtBjs exywqJta4tKm/yaoXvlV2GzA8TvJk3duywGpIHLxTwjgB49RaCmxFRBcjMZiB+YY rXguhe2EjERN1OgiQ11wYIyZWNPU+hXcHdb73FzxWDHVSFh+IacJblPoFhDhuRz+ xQus66TFSweuwTSyRRbechtoKcG89NJly4p0HdHQBTMNKNCecMs= -----END CERTIFICATE-----Generated at Sun Sep 7 14:04:00 2025 by rpki-client