$ rpki-client -vvf repo-rpki.idnic.net/repo/643db7d2-b3fd-4214-b6a4-d0162f95e72e/0/8714172B5D3FC9C36A83EBA27AB946FC69A4F821.mft File: 8714172B5D3FC9C36A83EBA27AB946FC69A4F821.mft (raw, json) Hash identifier: 2olQkD994IkQwZaGAvL5PduZvecI0q8ZQxoREX2E+Jc= Subject key identifier: 89:D2:61:DD:FC:83:AB:CC:02:24:AB:2E:D9:5D:47:79:51:14:1B:BC Authority key identifier: 87:14:17:2B:5D:3F:C9:C3:6A:83:EB:A2:7A:B9:46:FC:69:A4:F8:21 Certificate issuer: /CN=8714172B5D3FC9C36A83EBA27AB946FC69A4F821 Certificate serial: 50E9E57627D6A7255B725DDC4DAB82A31C2CDC86 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8714172B5D3FC9C36A83EBA27AB946FC69A4F821.cer Subject info access: rsync://repo-rpki.idnic.net/repo/643db7d2-b3fd-4214-b6a4-d0162f95e72e/0/8714172B5D3FC9C36A83EBA27AB946FC69A4F821.mft Manifest number: 01EE Signing time: Wed 03 Sep 2025 19:02:36 +0000 Manifest this update: Wed 03 Sep 2025 18:57:36 +0000 Manifest next update: Sat 06 Sep 2025 20:47:36 +0000 Files and hashes: 1: 3130332e32302e31362e302f32342d3234203d3e20313439393633.roa (hash: zDyrXTGOoVhoyVXFQzLfzvSBhhtitp+cvr9nrYj9PZk=) 2: 8714172B5D3FC9C36A83EBA27AB946FC69A4F821.crl (hash: 1kUxDzVGlkvv90vlfOd/g2MMNa5ItPppqg69GojeSV8=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/643db7d2-b3fd-4214-b6a4-d0162f95e72e/0/8714172B5D3FC9C36A83EBA27AB946FC69A4F821.crl rsync://repo-rpki.idnic.net/repo/643db7d2-b3fd-4214-b6a4-d0162f95e72e/0/8714172B5D3FC9C36A83EBA27AB946FC69A4F821.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8714172B5D3FC9C36A83EBA27AB946FC69A4F821.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 06 Sep 2025 20:47:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 50:e9:e5:76:27:d6:a7:25:5b:72:5d:dc:4d:ab:82:a3:1c:2c:dc:86 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8714172B5D3FC9C36A83EBA27AB946FC69A4F821 Validity Not Before: Sep 3 18:57:36 2025 GMT Not After : Sep 6 20:47:36 2025 GMT Subject: CN=89D261DDFC83ABCC0224AB2ED95D477951141BBC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f4:32:5a:f6:06:4d:24:9e:d3:80:74:49:7f:39: aa:20:1a:c1:62:a5:05:67:81:66:41:1d:ae:65:bd: 2b:ff:d1:11:9f:2b:73:99:43:c1:93:20:60:36:74: a2:64:2b:72:61:da:af:1b:9e:65:d0:26:55:b0:8f: 8e:7f:f1:ba:d6:bf:73:3a:15:85:9d:45:c1:6f:b8: 9b:00:4a:d6:a7:1a:ec:df:03:2d:b4:d5:85:d3:38: ae:f6:a2:3b:1f:51:7e:1a:b4:9e:5e:4c:b7:9a:48: 7a:8d:d7:bc:ac:ba:18:e8:14:e2:50:9a:e2:08:83: 0d:69:a3:a5:d0:e3:39:71:8a:02:c5:4d:a5:aa:27: 25:81:fe:02:49:4c:1e:08:ba:ed:01:85:fe:d5:96: 2d:70:66:70:da:a7:0a:36:19:2c:6f:a6:72:5f:89: dd:c2:cc:db:f5:00:c7:d9:b1:9a:92:db:2e:6b:3d: cf:76:73:8c:76:2d:74:5d:50:dc:b9:35:7d:f1:bf: 49:c4:e7:96:bf:51:87:0c:ff:a5:2e:54:9b:5f:3e: 48:f3:e9:7b:29:96:39:6a:2b:44:91:a8:99:fe:36: 2f:26:99:56:8b:57:28:80:3a:b6:83:de:81:bb:2a: be:d5:94:c2:70:ef:a9:c1:08:aa:bb:22:99:41:1b: e9:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:D2:61:DD:FC:83:AB:CC:02:24:AB:2E:D9:5D:47:79:51:14:1B:BC X509v3 Authority Key Identifier: keyid:87:14:17:2B:5D:3F:C9:C3:6A:83:EB:A2:7A:B9:46:FC:69:A4:F8:21 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/643db7d2-b3fd-4214-b6a4-d0162f95e72e/0/8714172B5D3FC9C36A83EBA27AB946FC69A4F821.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8714172B5D3FC9C36A83EBA27AB946FC69A4F821.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/643db7d2-b3fd-4214-b6a4-d0162f95e72e/0/8714172B5D3FC9C36A83EBA27AB946FC69A4F821.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b6:7d:9f:87:93:90:c4:01:1b:92:ad:95:9c:7b:c8:9f:d7:35: 80:6d:54:06:d8:52:b2:51:b4:ee:fe:ee:33:ec:d3:e4:4c:8d: 2c:59:fc:7a:fd:6a:ce:62:a5:7d:d6:05:5e:e1:a6:6a:ce:53: 1f:ec:be:59:73:ed:b4:0e:8f:0e:ac:41:9a:3d:ac:e0:78:06: 10:56:45:90:9f:f4:2b:23:53:44:2b:08:fa:56:de:82:9a:6d: 22:72:db:18:a5:e2:2e:38:5c:fa:2e:ab:95:c2:95:36:a4:c9: d8:bf:02:b0:ba:be:41:19:1d:4b:cb:4d:47:2a:81:20:e6:c7: e3:d4:12:76:16:b5:2b:49:50:38:14:55:3c:eb:85:b8:ca:99: 1f:c6:d4:26:3d:69:98:78:ce:ef:8b:d3:87:23:12:2c:ce:77: 7e:b4:7f:7c:bb:ce:24:69:82:c5:f8:69:3c:2c:8d:ac:ed:36: 35:02:d0:0d:08:b9:da:f0:cd:b8:b2:ee:54:5d:12:70:8d:e7: 3a:9b:b4:c0:9b:93:d8:b3:85:0a:73:47:e0:74:b2:ae:af:25: 5e:4d:ab:90:d3:2f:f4:14:1c:0d:16:2d:ef:94:c5:98:ed:69: 19:e2:8e:82:4b:04:cc:2d:02:93:ea:e8:7a:89:a4:61:40:18: d9:16:cf:de -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUUOnldifWpyVbcl3cTauCoxws3IYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODcxNDE3MkI1RDNGQzlDMzZBODNFQkEyN0FCOTQ2RkM2 OUE0RjgyMTAeFw0yNTA5MDMxODU3MzZaFw0yNTA5MDYyMDQ3MzZaMDMxMTAvBgNV BAMTKDg5RDI2MURERkM4M0FCQ0MwMjI0QUIyRUQ5NUQ0Nzc5NTExNDFCQkMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD0Mlr2Bk0kntOAdEl/OaogGsFi pQVngWZBHa5lvSv/0RGfK3OZQ8GTIGA2dKJkK3Jh2q8bnmXQJlWwj45/8brWv3M6 FYWdRcFvuJsAStanGuzfAy201YXTOK72ojsfUX4atJ5eTLeaSHqN17ysuhjoFOJQ muIIgw1po6XQ4zlxigLFTaWqJyWB/gJJTB4Iuu0Bhf7Vli1wZnDapwo2GSxvpnJf id3CzNv1AMfZsZqS2y5rPc92c4x2LXRdUNy5NX3xv0nE55a/UYcM/6UuVJtfPkjz 6XspljlqK0SRqJn+Ni8mmVaLVyiAOraD3oG7Kr7VlMJw76nBCKq7IplBG+lZAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUidJh3fyDq8wCJKsu2V1HeVEUG7wwHwYDVR0j BBgwFoAUhxQXK10/ycNqg+uierlG/Gmk+CEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 NDNkYjdkMi1iM2ZkLTQyMTQtYjZhNC1kMDE2MmY5NWU3MmUvMC84NzE0MTcyQjVE M0ZDOUMzNkE4M0VCQTI3QUI5NDZGQzY5QTRGODIxLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvODcxNDE3MkI1RDNGQzlDMzZBODNFQkEyN0FCOTQ2RkM2OUE0 RjgyMS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNjQzZGI3ZDItYjNmZC00MjE0LWI2 YTQtZDAxNjJmOTVlNzJlLzAvODcxNDE3MkI1RDNGQzlDMzZBODNFQkEyN0FCOTQ2 RkM2OUE0RjgyMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALZ9n4eTkMQBG5KtlZx7yJ/XNYBtVAbYUrJR tO7+7jPs0+RMjSxZ/Hr9as5ipX3WBV7hpmrOUx/svllz7bQOjw6sQZo9rOB4BhBW RZCf9CsjU0QrCPpW3oKabSJy2xil4i44XPouq5XClTakydi/ArC6vkEZHUvLTUcq gSDmx+PUEnYWtStJUDgUVTzrhbjKmR/G1CY9aZh4zu+L04cjEizOd360f3y7ziRp gsX4aTwsjaztNjUC0A0Iudrwzbiy7lRdEnCN5zqbtMCbk9izhQpzR+B0sq6vJV5N q5DTL/QUHA0WLe+UxZjtaRnijoJLBMwtApPq6HqJpGFAGNkWz94= -----END CERTIFICATE-----Generated at Fri Sep 5 12:46:52 2025 by rpki-client