$ rpki-client -vvf repo-rpki.idnic.net/repo/696a74df-d907-4aaf-a836-43e4e1968525/0/8D956CF1DF56850C9CF6173DF90141A9C6A46868.mft File: 8D956CF1DF56850C9CF6173DF90141A9C6A46868.mft (raw, json) Hash identifier: hKR0sf/ReP0NZPQR1GMSB4Hu84dUIdbruRPi17PM1fc= Subject key identifier: 30:D9:CC:51:62:E9:2D:CA:2C:CA:6D:9F:7F:D4:4C:D2:6D:0C:86:2D Authority key identifier: 8D:95:6C:F1:DF:56:85:0C:9C:F6:17:3D:F9:01:41:A9:C6:A4:68:68 Certificate issuer: /CN=8D956CF1DF56850C9CF6173DF90141A9C6A46868 Certificate serial: 21D4F9772C5E2A32F14367A41FFAF279487A0411 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8D956CF1DF56850C9CF6173DF90141A9C6A46868.cer Subject info access: rsync://repo-rpki.idnic.net/repo/696a74df-d907-4aaf-a836-43e4e1968525/0/8D956CF1DF56850C9CF6173DF90141A9C6A46868.mft Manifest number: 01D6 Signing time: Sat 06 Sep 2025 01:41:53 +0000 Manifest this update: Sat 06 Sep 2025 01:36:53 +0000 Manifest next update: Tue 09 Sep 2025 09:56:53 +0000 Files and hashes: 1: 3130332e3135332e39372e302f32342d3234203d3e20313430343630.roa (hash: 2CDFzM/b08FBAmMsE5mkOznd4mOppWCjC4ZNYfj8Grs=) 2: 3130332e3135332e39362e302f32342d3234203d3e20313430343630.roa (hash: AlVmqpfL/WFpHYoBKjxWx/LAHevtz/DHHIwmIJ22kko=) 3: 8D956CF1DF56850C9CF6173DF90141A9C6A46868.crl (hash: pRBRdBQWBSFPzA+TtmM+efy+yDkPxOv/1+zNZVmogr8=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/696a74df-d907-4aaf-a836-43e4e1968525/0/8D956CF1DF56850C9CF6173DF90141A9C6A46868.crl rsync://repo-rpki.idnic.net/repo/696a74df-d907-4aaf-a836-43e4e1968525/0/8D956CF1DF56850C9CF6173DF90141A9C6A46868.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8D956CF1DF56850C9CF6173DF90141A9C6A46868.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 09 Sep 2025 09:56:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 21:d4:f9:77:2c:5e:2a:32:f1:43:67:a4:1f:fa:f2:79:48:7a:04:11 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8D956CF1DF56850C9CF6173DF90141A9C6A46868 Validity Not Before: Sep 6 01:36:53 2025 GMT Not After : Sep 9 09:56:53 2025 GMT Subject: CN=30D9CC5162E92DCA2CCA6D9F7FD44CD26D0C862D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:35:a9:65:68:4b:b0:36:d5:13:f9:4a:e0:8a: 54:d8:c0:1e:4c:ec:d6:65:77:32:87:bb:e2:76:c5: 7e:f6:e6:ed:0c:a2:0f:73:b7:90:71:67:79:6f:46: e9:69:f7:b2:f6:d4:23:3d:0f:a3:6b:2e:a1:6b:37: 68:20:c7:bd:c4:5d:fc:51:ef:92:1c:45:c8:3e:e6: 9e:74:09:03:ce:3e:65:2d:62:8b:12:76:d2:38:5f: 6c:26:7c:24:bd:d0:2d:bf:32:42:05:ed:e5:8a:6d: 78:f6:3b:b7:e2:21:97:0d:a8:93:61:e3:2d:89:d7: 6a:d6:75:42:d4:d9:15:95:03:61:a6:d1:a5:12:9f: 31:e0:b6:fb:f3:86:08:7a:5d:cf:fa:89:b5:5f:f9: a3:6e:37:fd:51:90:bc:e3:df:ec:dd:e2:eb:ae:9d: a6:e9:b3:f9:6b:bc:ec:2e:94:84:d4:c6:58:a1:83: 8e:e6:66:69:9e:43:2f:2e:86:11:c6:13:bc:08:51: ca:da:17:20:2e:1f:90:e9:d9:d8:78:e9:f8:a4:93: 5e:4a:9f:19:18:2b:45:b0:8c:0f:b8:88:7d:cc:47: 29:70:7e:2e:16:9a:cc:55:06:c7:26:67:4e:98:24: aa:7f:71:cc:d5:ba:d4:4b:be:42:cd:8e:e8:45:24: 85:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 30:D9:CC:51:62:E9:2D:CA:2C:CA:6D:9F:7F:D4:4C:D2:6D:0C:86:2D X509v3 Authority Key Identifier: keyid:8D:95:6C:F1:DF:56:85:0C:9C:F6:17:3D:F9:01:41:A9:C6:A4:68:68 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/696a74df-d907-4aaf-a836-43e4e1968525/0/8D956CF1DF56850C9CF6173DF90141A9C6A46868.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8D956CF1DF56850C9CF6173DF90141A9C6A46868.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/696a74df-d907-4aaf-a836-43e4e1968525/0/8D956CF1DF56850C9CF6173DF90141A9C6A46868.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7f:9d:ce:09:75:8a:4d:72:29:f6:f7:3e:76:fb:5e:fd:56:13: 7b:40:d9:a3:ac:14:c1:93:d5:16:ae:29:29:6c:2b:f4:28:3b: 07:6a:a1:81:10:78:a3:8a:fe:45:97:47:d8:ae:42:ee:81:40: 75:28:6a:d3:7a:d5:31:3e:8c:74:43:64:d0:24:62:1f:c3:3b: ed:11:6c:2d:7f:68:82:89:5f:5d:b7:f1:e7:b5:48:82:a3:8c: b2:51:a9:84:88:2f:3e:0f:7d:d1:f5:34:7d:62:14:1d:95:71: b8:54:37:d1:b4:98:a5:e3:41:06:8c:bd:ca:c4:38:09:22:8a: a0:3a:c8:f1:0a:77:15:f7:69:bb:76:2d:8a:a8:26:7b:6d:54: d5:50:13:18:80:ff:5e:ce:fb:8a:f0:27:19:af:1b:3b:eb:a5: 40:71:80:ab:63:f2:0e:46:f7:c9:35:07:28:1c:be:f7:e3:d2: 99:40:e9:ae:c7:4c:c8:12:80:36:4e:a7:2e:16:b3:ba:05:d9: 87:37:b7:71:64:aa:01:03:2f:64:0b:04:98:9a:3e:86:45:bc: 33:c1:5c:2c:bb:31:8d:26:ea:db:b5:7d:d3:2d:c7:c6:c1:d8: 36:a6:37:0f:69:d5:89:1f:58:36:8b:a7:1a:e9:ed:13:e5:1b: 19:39:3f:69 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUIdT5dyxeKjLxQ2ekH/ryeUh6BBEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEQ5NTZDRjFERjU2ODUwQzlDRjYxNzNERjkwMTQxQTlD NkE0Njg2ODAeFw0yNTA5MDYwMTM2NTNaFw0yNTA5MDkwOTU2NTNaMDMxMTAvBgNV BAMTKDMwRDlDQzUxNjJFOTJEQ0EyQ0NBNkQ5RjdGRDQ0Q0QyNkQwQzg2MkQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDBNallaEuwNtUT+UrgilTYwB5M 7NZldzKHu+J2xX725u0Mog9zt5BxZ3lvRulp97L21CM9D6NrLqFrN2ggx73EXfxR 75IcRcg+5p50CQPOPmUtYosSdtI4X2wmfCS90C2/MkIF7eWKbXj2O7fiIZcNqJNh 4y2J12rWdULU2RWVA2Gm0aUSnzHgtvvzhgh6Xc/6ibVf+aNuN/1RkLzj3+zd4uuu nabps/lrvOwulITUxlihg47mZmmeQy8uhhHGE7wIUcraFyAuH5Dp2dh46fikk15K nxkYK0WwjA+4iH3MRylwfi4WmsxVBscmZ06YJKp/cczVutRLvkLNjuhFJIXxAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUMNnMUWLpLcosym2ff9RM0m0Mhi0wHwYDVR0j BBgwFoAUjZVs8d9WhQyc9hc9+QFBqcakaGgwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 OTZhNzRkZi1kOTA3LTRhYWYtYTgzNi00M2U0ZTE5Njg1MjUvMC84RDk1NkNGMURG NTY4NTBDOUNGNjE3M0RGOTAxNDFBOUM2QTQ2ODY4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOEQ5NTZDRjFERjU2ODUwQzlDRjYxNzNERjkwMTQxQTlDNkE0 Njg2OC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNjk2YTc0ZGYtZDkwNy00YWFmLWE4 MzYtNDNlNGUxOTY4NTI1LzAvOEQ5NTZDRjFERjU2ODUwQzlDRjYxNzNERjkwMTQx QTlDNkE0Njg2OC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAH+dzgl1ik1yKfb3Pnb7Xv1WE3tA2aOsFMGT 1RauKSlsK/QoOwdqoYEQeKOK/kWXR9iuQu6BQHUoatN61TE+jHRDZNAkYh/DO+0R bC1/aIKJX1238ee1SIKjjLJRqYSILz4PfdH1NH1iFB2VcbhUN9G0mKXjQQaMvcrE OAkiiqA6yPEKdxX3abt2LYqoJnttVNVQExiA/17O+4rwJxmvGzvrpUBxgKtj8g5G 98k1Bygcvvfj0plA6a7HTMgSgDZOpy4Ws7oF2Yc3t3FkqgEDL2QLBJiaPoZFvDPB XCy7MY0m6tu1fdMtx8bB2DamNw9p1YkfWDaLpxrp7RPlGxk5P2k= -----END CERTIFICATE-----Generated at Sun Sep 7 13:59:43 2025 by rpki-client