$ rpki-client -vvf repo-rpki.idnic.net/repo/5e6c2a91-6afc-4767-bbc1-750613264585/0/8BF02D8172D4CA8A00A9EE2EB8CC099F0727F1CB.mft File: 8BF02D8172D4CA8A00A9EE2EB8CC099F0727F1CB.mft (raw, json) Hash identifier: cLxE8AYN/jFpxbECzeXMOyMBzusCHanl3AaGgfISozs= Subject key identifier: AC:14:3B:B1:A2:BF:4B:3F:DD:4B:4F:D8:02:2C:AC:B8:88:9E:2D:38 Authority key identifier: 8B:F0:2D:81:72:D4:CA:8A:00:A9:EE:2E:B8:CC:09:9F:07:27:F1:CB Certificate issuer: /CN=8BF02D8172D4CA8A00A9EE2EB8CC099F0727F1CB Certificate serial: 4CFC5561FBCDB5EC3BA5AC511247C98917AD9783 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8BF02D8172D4CA8A00A9EE2EB8CC099F0727F1CB.cer Subject info access: rsync://repo-rpki.idnic.net/repo/5e6c2a91-6afc-4767-bbc1-750613264585/0/8BF02D8172D4CA8A00A9EE2EB8CC099F0727F1CB.mft Manifest number: 0202 Signing time: Sat 06 Sep 2025 15:41:49 +0000 Manifest this update: Sat 06 Sep 2025 15:36:49 +0000 Manifest next update: Tue 09 Sep 2025 19:45:49 +0000 Files and hashes: 1: 8BF02D8172D4CA8A00A9EE2EB8CC099F0727F1CB.crl (hash: S+45RnXbM7cJnTA1wjtsXRSbSzd1vEycCEyAJlkgRjM=) 2: 3130332e3133352e342e302f32322d3234203d3e203338333230.roa (hash: 8BpU0pm5UxOt5Z/5pCKxKlre5ZOR7m9ogADS2QXiNkA=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/5e6c2a91-6afc-4767-bbc1-750613264585/0/8BF02D8172D4CA8A00A9EE2EB8CC099F0727F1CB.crl rsync://repo-rpki.idnic.net/repo/5e6c2a91-6afc-4767-bbc1-750613264585/0/8BF02D8172D4CA8A00A9EE2EB8CC099F0727F1CB.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8BF02D8172D4CA8A00A9EE2EB8CC099F0727F1CB.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 09 Sep 2025 19:45:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4c:fc:55:61:fb:cd:b5:ec:3b:a5:ac:51:12:47:c9:89:17:ad:97:83 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8BF02D8172D4CA8A00A9EE2EB8CC099F0727F1CB Validity Not Before: Sep 6 15:36:49 2025 GMT Not After : Sep 9 19:45:49 2025 GMT Subject: CN=AC143BB1A2BF4B3FDD4B4FD8022CACB8889E2D38 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:8f:12:63:80:9b:a6:c5:b8:24:1f:c9:6e:f9: b2:9d:0f:b3:7e:50:17:69:34:cc:e2:58:f0:e8:0c: 19:6b:e4:99:ce:a5:e8:41:e5:61:20:76:f7:b4:47: 9b:82:32:d9:6a:d0:65:af:88:97:6f:de:1a:8d:4f: a8:e3:2c:05:5e:06:93:5f:64:15:e1:a5:19:7a:85: 5c:65:5b:4b:2d:2e:57:c6:bc:dc:59:41:20:4a:ab: cc:79:a7:50:48:17:b2:72:41:50:7e:5c:e4:7a:00: 44:bc:b4:ce:45:a9:68:41:73:ff:0e:08:f5:2b:4d: 2f:cc:dd:17:d8:9f:5d:36:7d:48:0a:78:cf:d8:a1: ba:a0:17:4e:1d:71:4a:58:77:80:bd:ef:88:73:6d: cc:91:60:ba:29:9e:01:19:b3:ee:a8:47:ad:48:3d: 48:96:39:20:a7:ac:92:c1:e8:3c:fe:3b:54:f6:de: 57:14:47:b5:83:c4:4e:89:0d:bf:56:28:7e:5b:c3: 32:60:6b:68:b5:67:82:23:40:c6:12:3f:18:06:af: 62:d9:83:bf:98:89:4c:00:a2:5d:38:ec:bc:7e:26: a6:6a:b6:3a:17:85:4c:90:d6:20:9a:91:0f:ba:d0: 43:72:14:d0:bf:df:38:97:d4:dc:de:1f:6e:c2:55: fb:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AC:14:3B:B1:A2:BF:4B:3F:DD:4B:4F:D8:02:2C:AC:B8:88:9E:2D:38 X509v3 Authority Key Identifier: keyid:8B:F0:2D:81:72:D4:CA:8A:00:A9:EE:2E:B8:CC:09:9F:07:27:F1:CB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/5e6c2a91-6afc-4767-bbc1-750613264585/0/8BF02D8172D4CA8A00A9EE2EB8CC099F0727F1CB.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8BF02D8172D4CA8A00A9EE2EB8CC099F0727F1CB.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/5e6c2a91-6afc-4767-bbc1-750613264585/0/8BF02D8172D4CA8A00A9EE2EB8CC099F0727F1CB.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5f:94:77:9a:04:e2:14:89:ae:e3:9c:c5:f2:ca:c0:0e:a9:67: f5:52:fe:f2:5e:66:c0:69:4f:e2:31:97:95:02:d5:2e:ab:7b: 2c:93:e5:5e:b0:ad:e7:23:07:e8:bb:b8:a0:fa:ee:c3:5b:ba: 80:92:0e:d7:da:6e:64:a8:70:88:de:6a:99:a9:55:f5:c2:36: b6:0a:ed:8a:b6:bc:dd:2b:d8:96:61:de:41:e7:78:a1:7e:35: 7c:03:0b:02:3e:47:5b:68:e5:da:fb:6b:6d:5f:f0:79:7e:b4: 99:04:9c:95:a8:34:cb:ba:0d:4c:82:48:f4:60:42:c7:ae:41: ac:5c:dc:1c:f1:ca:c9:e9:04:ab:d8:44:65:62:d3:85:6b:f8: 14:44:d8:7c:ce:ad:b2:85:24:0b:c7:9a:50:79:d5:87:6a:51: 08:ef:d2:55:51:0f:22:1a:c9:b4:66:fe:9b:2b:79:ef:4a:a7: d2:79:42:89:66:8e:04:54:f5:c6:78:61:ef:20:c6:54:dc:47: da:11:2e:18:72:0f:8f:9f:0d:a7:ae:21:e1:3b:c1:16:71:a1: e8:e2:b0:93:17:3c:fc:b1:e5:98:87:48:ed:15:32:74:cb:cd: cc:94:bb:c3:41:15:77:e9:8e:2a:2a:43:45:65:4a:2a:bf:72: f8:9b:76:67 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUTPxVYfvNtew7paxREkfJiRetl4MwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEJGMDJEODE3MkQ0Q0E4QTAwQTlFRTJFQjhDQzA5OUYw NzI3RjFDQjAeFw0yNTA5MDYxNTM2NDlaFw0yNTA5MDkxOTQ1NDlaMDMxMTAvBgNV BAMTKEFDMTQzQkIxQTJCRjRCM0ZERDRCNEZEODAyMkNBQ0I4ODg5RTJEMzgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDXjxJjgJumxbgkH8lu+bKdD7N+ UBdpNMziWPDoDBlr5JnOpehB5WEgdve0R5uCMtlq0GWviJdv3hqNT6jjLAVeBpNf ZBXhpRl6hVxlW0stLlfGvNxZQSBKq8x5p1BIF7JyQVB+XOR6AES8tM5FqWhBc/8O CPUrTS/M3RfYn102fUgKeM/YobqgF04dcUpYd4C974hzbcyRYLopngEZs+6oR61I PUiWOSCnrJLB6Dz+O1T23lcUR7WDxE6JDb9WKH5bwzJga2i1Z4IjQMYSPxgGr2LZ g7+YiUwAol047Lx+JqZqtjoXhUyQ1iCakQ+60ENyFNC/3ziX1NzeH27CVfs/AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUrBQ7saK/Sz/dS0/YAiysuIieLTgwHwYDVR0j BBgwFoAUi/AtgXLUyooAqe4uuMwJnwcn8cswDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 ZTZjMmE5MS02YWZjLTQ3NjctYmJjMS03NTA2MTMyNjQ1ODUvMC84QkYwMkQ4MTcy RDRDQThBMDBBOUVFMkVCOENDMDk5RjA3MjdGMUNCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOEJGMDJEODE3MkQ0Q0E4QTAwQTlFRTJFQjhDQzA5OUYwNzI3 RjFDQi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNWU2YzJhOTEtNmFmYy00NzY3LWJi YzEtNzUwNjEzMjY0NTg1LzAvOEJGMDJEODE3MkQ0Q0E4QTAwQTlFRTJFQjhDQzA5 OUYwNzI3RjFDQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAF+Ud5oE4hSJruOcxfLKwA6pZ/VS/vJeZsBp T+Ixl5UC1S6reyyT5V6wrecjB+i7uKD67sNbuoCSDtfabmSocIjeapmpVfXCNrYK 7Yq2vN0r2JZh3kHneKF+NXwDCwI+R1to5dr7a21f8Hl+tJkEnJWoNMu6DUyCSPRg QseuQaxc3BzxysnpBKvYRGVi04Vr+BRE2HzOrbKFJAvHmlB51YdqUQjv0lVRDyIa ybRm/psree9Kp9J5QolmjgRU9cZ4Ye8gxlTcR9oRLhhyD4+fDaeuIeE7wRZxoeji sJMXPPyx5ZiHSO0VMnTLzcyUu8NBFXfpjioqQ0VlSiq/cvibdmc= -----END CERTIFICATE-----Generated at Mon Sep 8 16:08:47 2025 by rpki-client