$ rpki-client -vvf repo-rpki.idnic.net/repo/5252ead3-dc8f-4d86-afcf-a140e5b87532/0/8CFB227DA1EF51DB23364BBA034D0F68A09A5F59.mft File: 8CFB227DA1EF51DB23364BBA034D0F68A09A5F59.mft (raw, json) Hash identifier: n3PsnmGEXYoZwywSupHIZz1xjlUIzqTmq4InzSPKis8= Subject key identifier: A9:F8:87:82:8E:B0:1C:99:6C:27:EA:28:91:87:A7:CC:B6:FB:B3:E8 Authority key identifier: 8C:FB:22:7D:A1:EF:51:DB:23:36:4B:BA:03:4D:0F:68:A0:9A:5F:59 Certificate issuer: /CN=8CFB227DA1EF51DB23364BBA034D0F68A09A5F59 Certificate serial: 5EC65605DAC2C44F515EE8B6EA5116C6FD7248DA Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8CFB227DA1EF51DB23364BBA034D0F68A09A5F59.cer Subject info access: rsync://repo-rpki.idnic.net/repo/5252ead3-dc8f-4d86-afcf-a140e5b87532/0/8CFB227DA1EF51DB23364BBA034D0F68A09A5F59.mft Manifest number: 0222 Signing time: Wed 03 Sep 2025 21:51:34 +0000 Manifest this update: Wed 03 Sep 2025 21:46:34 +0000 Manifest next update: Sun 07 Sep 2025 04:45:34 +0000 Files and hashes: 1: 3130332e3138362e3139352e302f32342d3234203d3e203438343635.roa (hash: 9nS/psP6uP/NgK0GsDYJioeVISZGFYj6wNXBWyPXoig=) 2: 3130332e3138362e3139342e302f32342d3234203d3e203438343635.roa (hash: nuw56AWJFQx7bF2mLso7Fp7ypapHW7bx18alMUZHm9U=) 3: 3130332e3138362e3139342e302f32332d3234203d3e20313439373132.roa (hash: S9MFaIq/j9TJ63dOJfnzWaZP6j2QyCQRqTU45iGYFSM=) 4: 8CFB227DA1EF51DB23364BBA034D0F68A09A5F59.crl (hash: O2n9XRaUj49LwaAYTE6TOvrBEwA0bCCdsEkQfRqygpc=) 5: 3130332e3138362e3139342e302f32332d3233203d3e20313439373132.roa (hash: swBTOVyl/nQxFd9eqJx6PzMQ7ExSAWTFjV6g64/KqU0=) 6: 3130332e3138362e3139342e302f32342d3234203d3e20313439373132.roa (hash: uzPIoUslKlL0kCJ3Mr8GlDHsPvFS4WU5l7ZsMhLtDsU=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/5252ead3-dc8f-4d86-afcf-a140e5b87532/0/8CFB227DA1EF51DB23364BBA034D0F68A09A5F59.crl rsync://repo-rpki.idnic.net/repo/5252ead3-dc8f-4d86-afcf-a140e5b87532/0/8CFB227DA1EF51DB23364BBA034D0F68A09A5F59.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8CFB227DA1EF51DB23364BBA034D0F68A09A5F59.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 07 Sep 2025 04:45:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5e:c6:56:05:da:c2:c4:4f:51:5e:e8:b6:ea:51:16:c6:fd:72:48:da Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8CFB227DA1EF51DB23364BBA034D0F68A09A5F59 Validity Not Before: Sep 3 21:46:34 2025 GMT Not After : Sep 7 04:45:34 2025 GMT Subject: CN=A9F887828EB01C996C27EA289187A7CCB6FBB3E8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:ad:17:7b:cf:e6:78:58:bc:19:e2:20:1f:cb: 4d:30:a8:53:ad:f8:14:82:d8:19:e2:e3:2d:11:fc: 9d:8f:20:c5:c2:ff:c9:2e:35:65:67:cd:3b:3a:cf: 38:3d:2a:98:6a:99:cb:1f:f2:7e:e0:85:d8:4e:dc: 35:1e:81:63:b2:ee:e4:87:6c:b8:b7:71:f8:c6:ec: 8f:0e:9a:28:bb:e3:e4:01:04:24:d8:eb:92:aa:92: fe:1f:86:67:f0:9d:19:73:51:c7:c2:0a:4e:a4:b6: 86:c8:1b:37:10:b9:bf:28:06:1f:fc:e5:b8:f3:32: a6:88:64:0e:3a:c3:0e:e9:00:eb:2f:2a:b2:95:fd: 4b:34:a5:9f:11:c1:58:9e:1d:86:2f:ab:ef:5c:70: 16:f4:67:d5:14:ce:0f:52:60:d3:48:ea:fa:df:1a: e6:32:82:f4:50:32:23:1f:0e:b3:34:52:67:13:c9: 84:53:e0:c2:b3:8c:a3:b8:e9:5f:a4:ee:62:5f:3e: 0a:2a:ba:8a:4c:a6:f4:aa:3a:00:18:ac:ab:09:46: da:3d:76:82:8c:9a:19:74:35:fe:aa:f8:7b:ad:34: 6f:a8:ec:9d:f2:9a:47:ad:45:2a:09:dc:78:24:2f: c9:78:97:18:da:cb:ec:95:54:d6:38:4b:ac:89:24: 07:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:F8:87:82:8E:B0:1C:99:6C:27:EA:28:91:87:A7:CC:B6:FB:B3:E8 X509v3 Authority Key Identifier: keyid:8C:FB:22:7D:A1:EF:51:DB:23:36:4B:BA:03:4D:0F:68:A0:9A:5F:59 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/5252ead3-dc8f-4d86-afcf-a140e5b87532/0/8CFB227DA1EF51DB23364BBA034D0F68A09A5F59.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8CFB227DA1EF51DB23364BBA034D0F68A09A5F59.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/5252ead3-dc8f-4d86-afcf-a140e5b87532/0/8CFB227DA1EF51DB23364BBA034D0F68A09A5F59.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2b:f7:c7:ec:35:fe:74:a8:6e:c2:fe:a0:e9:e2:9d:22:a0:6a: 2e:79:f0:03:ca:67:52:49:92:2e:54:81:23:1c:b4:6a:98:b0: 17:87:cd:2c:1a:4a:6f:28:c8:44:3f:98:73:60:0f:24:9d:1c: 64:62:5c:71:1d:b6:06:12:28:4e:5a:65:02:82:62:69:cb:5f: 09:09:9d:b3:80:dc:ec:cd:67:85:f7:0f:f5:1b:d9:29:77:11: 3b:a8:37:b7:c3:b8:94:34:60:14:0e:89:ae:f6:76:8b:b7:f0: 88:1a:b0:a9:2f:32:40:26:03:c6:cf:dd:56:65:2e:74:28:55: 66:ef:32:e9:73:6f:d2:db:27:52:dc:9f:2b:6c:1e:61:2f:42: 2d:8f:84:17:a7:93:4c:25:2e:8a:fb:2d:62:9f:0d:8b:a4:40: 8d:36:1c:d8:51:a3:ad:5f:41:90:b3:af:4d:ad:14:37:b5:f7: 84:af:8f:f0:a3:e2:c2:81:f4:66:03:f7:99:55:08:bc:23:59: 3d:3e:d1:6c:a3:e9:49:1d:07:c3:bb:91:f9:9c:fd:3d:b4:59: 98:19:c7:2c:34:34:44:b0:86:4e:96:c2:09:3c:3a:8b:95:47: da:95:9f:8c:b4:8d:10:76:a3:6a:06:75:56:77:ad:61:3f:b6: e9:2f:a9:d2 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUXsZWBdrCxE9RXui26lEWxv1ySNowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOENGQjIyN0RBMUVGNTFEQjIzMzY0QkJBMDM0RDBGNjhB MDlBNUY1OTAeFw0yNTA5MDMyMTQ2MzRaFw0yNTA5MDcwNDQ1MzRaMDMxMTAvBgNV BAMTKEE5Rjg4NzgyOEVCMDFDOTk2QzI3RUEyODkxODdBN0NDQjZGQkIzRTgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCmrRd7z+Z4WLwZ4iAfy00wqFOt +BSC2Bni4y0R/J2PIMXC/8kuNWVnzTs6zzg9Kphqmcsf8n7ghdhO3DUegWOy7uSH bLi3cfjG7I8Omii74+QBBCTY65Kqkv4fhmfwnRlzUcfCCk6ktobIGzcQub8oBh/8 5bjzMqaIZA46ww7pAOsvKrKV/Us0pZ8RwVieHYYvq+9ccBb0Z9UUzg9SYNNI6vrf GuYygvRQMiMfDrM0UmcTyYRT4MKzjKO46V+k7mJfPgoquopMpvSqOgAYrKsJRto9 doKMmhl0Nf6q+HutNG+o7J3ymketRSoJ3HgkL8l4lxjay+yVVNY4S6yJJAcvAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUqfiHgo6wHJlsJ+ookYenzLb7s+gwHwYDVR0j BBgwFoAUjPsifaHvUdsjNku6A00PaKCaX1kwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 MjUyZWFkMy1kYzhmLTRkODYtYWZjZi1hMTQwZTViODc1MzIvMC84Q0ZCMjI3REEx RUY1MURCMjMzNjRCQkEwMzREMEY2OEEwOUE1RjU5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOENGQjIyN0RBMUVGNTFEQjIzMzY0QkJBMDM0RDBGNjhBMDlB NUY1OS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNTI1MmVhZDMtZGM4Zi00ZDg2LWFm Y2YtYTE0MGU1Yjg3NTMyLzAvOENGQjIyN0RBMUVGNTFEQjIzMzY0QkJBMDM0RDBG NjhBMDlBNUY1OS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACv3x+w1/nSobsL+oOninSKgai558APKZ1JJ ki5UgSMctGqYsBeHzSwaSm8oyEQ/mHNgDySdHGRiXHEdtgYSKE5aZQKCYmnLXwkJ nbOA3OzNZ4X3D/Ub2Sl3ETuoN7fDuJQ0YBQOia72dou38IgasKkvMkAmA8bP3VZl LnQoVWbvMulzb9LbJ1LcnytsHmEvQi2PhBenk0wlLor7LWKfDYukQI02HNhRo61f QZCzr02tFDe194Svj/Cj4sKB9GYD95lVCLwjWT0+0Wyj6UkdB8O7kfmc/T20WZgZ xyw0NESwhk6Wwgk8OouVR9qVn4y0jRB2o2oGdVZ3rWE/tukvqdI= -----END CERTIFICATE-----Generated at Fri Sep 5 10:13:41 2025 by rpki-client