$ rpki-client -vvf repo-rpki.idnic.net/repo/6e9b0bad-66b9-4f28-a7c5-e9a9fe120ad7/0/8DAFDBD814B60F568505D65130E4661FCD7D665F.mft File: 8DAFDBD814B60F568505D65130E4661FCD7D665F.mft (raw, json) Hash identifier: jwWb2iFxJ3y/zSXPA4227YApq0KS0BTQa5uL5cYKcRs= Subject key identifier: 17:08:AD:85:A8:2C:94:88:08:63:14:76:7E:08:CE:18:97:38:96:B1 Authority key identifier: 8D:AF:DB:D8:14:B6:0F:56:85:05:D6:51:30:E4:66:1F:CD:7D:66:5F Certificate issuer: /CN=8DAFDBD814B60F568505D65130E4661FCD7D665F Certificate serial: 1A3349C0BF9269DB8083E6749E35D741D7CF6F9C Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8DAFDBD814B60F568505D65130E4661FCD7D665F.cer Subject info access: rsync://repo-rpki.idnic.net/repo/6e9b0bad-66b9-4f28-a7c5-e9a9fe120ad7/0/8DAFDBD814B60F568505D65130E4661FCD7D665F.mft Manifest number: 0232 Signing time: Fri 05 Sep 2025 08:51:52 +0000 Manifest this update: Fri 05 Sep 2025 08:46:52 +0000 Manifest next update: Mon 08 Sep 2025 16:08:52 +0000 Files and hashes: 1: 8DAFDBD814B60F568505D65130E4661FCD7D665F.crl (hash: AV8yE0qnBH770lYjuKrGvH0MoO4+dbQyTx7Kdu8+eLg=) 2: 3130332e3136382e3139302e302f32342d3234203d3e20313432333139.roa (hash: /4nmgLfcCNw5dynQDZtGk4IBxc3BmveSB9gkF4R0RCk=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/6e9b0bad-66b9-4f28-a7c5-e9a9fe120ad7/0/8DAFDBD814B60F568505D65130E4661FCD7D665F.crl rsync://repo-rpki.idnic.net/repo/6e9b0bad-66b9-4f28-a7c5-e9a9fe120ad7/0/8DAFDBD814B60F568505D65130E4661FCD7D665F.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8DAFDBD814B60F568505D65130E4661FCD7D665F.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 08 Sep 2025 16:08:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1a:33:49:c0:bf:92:69:db:80:83:e6:74:9e:35:d7:41:d7:cf:6f:9c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8DAFDBD814B60F568505D65130E4661FCD7D665F Validity Not Before: Sep 5 08:46:52 2025 GMT Not After : Sep 8 16:08:52 2025 GMT Subject: CN=1708AD85A82C9488086314767E08CE18973896B1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:7a:dc:85:a7:d0:c1:33:e4:c9:d7:70:87:78: df:fc:bf:f9:50:5d:79:35:b8:fc:08:7b:4f:01:4e: db:2a:31:b2:25:4b:db:31:a4:62:dc:ea:10:47:23: 8d:17:7b:ff:95:f3:59:3b:3e:50:60:2d:be:e0:f7: f0:0c:2d:1f:97:b1:47:f8:a0:5c:3c:01:0c:7a:04: cb:9d:e5:73:a3:da:31:87:5b:e4:17:28:96:a3:ed: de:f4:d1:fe:2c:84:34:a8:44:2b:e0:63:2d:ae:a1: 37:72:65:a0:26:7f:f2:de:c7:b0:2f:36:85:c6:14: 44:5c:e4:96:59:d4:d0:d8:c4:b6:d8:23:3a:36:74: d3:72:47:a1:94:b7:ad:34:e5:87:29:0d:75:58:bc: 1d:15:83:60:c4:4e:12:6a:42:b0:9c:97:cb:fd:04: 26:09:2b:03:a4:c0:bc:0f:3a:e8:b5:d7:ba:ff:67: 78:f3:38:c3:90:f3:8a:d4:2d:c4:f4:9d:d6:31:88: ff:7e:22:5c:b1:b4:70:7b:71:36:6f:9f:e2:fd:64: 46:f6:8e:dd:52:7f:38:49:e8:f6:a2:c3:46:85:8a: 52:23:8f:f0:cd:8a:30:54:ca:89:ad:1c:a9:5c:1f: 7b:57:52:26:1d:72:83:61:8f:5f:61:a8:6f:bd:46: e1:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:08:AD:85:A8:2C:94:88:08:63:14:76:7E:08:CE:18:97:38:96:B1 X509v3 Authority Key Identifier: keyid:8D:AF:DB:D8:14:B6:0F:56:85:05:D6:51:30:E4:66:1F:CD:7D:66:5F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/6e9b0bad-66b9-4f28-a7c5-e9a9fe120ad7/0/8DAFDBD814B60F568505D65130E4661FCD7D665F.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8DAFDBD814B60F568505D65130E4661FCD7D665F.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/6e9b0bad-66b9-4f28-a7c5-e9a9fe120ad7/0/8DAFDBD814B60F568505D65130E4661FCD7D665F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 62:3e:77:b4:c2:97:2c:3e:02:f7:2c:35:18:b3:34:bb:0d:57: cf:2d:b2:84:75:11:d2:5a:33:df:87:32:f1:33:46:5d:26:b5: 6f:72:e3:10:ec:af:ba:0f:3d:46:33:f1:82:2c:38:d0:71:20: 2b:27:36:35:31:9d:5f:24:61:5e:07:1b:07:88:3c:25:7a:e8: 44:e3:b8:f2:cf:f3:02:87:a9:89:0c:fc:d9:bb:fe:3d:7f:42: 57:c4:b5:21:5b:f8:c6:6b:c2:8c:fd:de:95:06:b8:41:47:65: 80:04:36:a5:3f:bb:c0:da:34:a5:fe:a7:ba:59:96:4d:c0:06: 03:5c:06:0a:69:6e:f2:31:5b:d6:19:74:99:c3:3f:8d:44:d4: 2c:06:87:d7:ea:b5:7b:8e:8f:3e:17:b9:49:f5:b2:48:d5:d7: d1:04:03:43:60:f6:eb:2b:05:f9:df:00:34:f5:c2:ab:7d:6b: ff:1e:42:be:3a:05:6f:10:38:ff:89:cb:96:15:52:ae:4d:6f: 7b:de:27:32:26:3a:e7:b9:78:dd:81:20:be:cc:a1:0f:2a:3c: fd:38:28:f6:ea:9d:27:97:e6:8f:51:16:05:69:52:70:b3:c8: 5e:98:08:e9:fe:2a:1c:1a:34:fd:82:78:f6:be:54:0d:4c:5f: 21:98:cc:02 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUGjNJwL+SaduAg+Z0njXXQdfPb5wwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOERBRkRCRDgxNEI2MEY1Njg1MDVENjUxMzBFNDY2MUZD RDdENjY1RjAeFw0yNTA5MDUwODQ2NTJaFw0yNTA5MDgxNjA4NTJaMDMxMTAvBgNV BAMTKDE3MDhBRDg1QTgyQzk0ODgwODYzMTQ3NjdFMDhDRTE4OTczODk2QjEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC9etyFp9DBM+TJ13CHeN/8v/lQ XXk1uPwIe08BTtsqMbIlS9sxpGLc6hBHI40Xe/+V81k7PlBgLb7g9/AMLR+XsUf4 oFw8AQx6BMud5XOj2jGHW+QXKJaj7d700f4shDSoRCvgYy2uoTdyZaAmf/Lex7Av NoXGFERc5JZZ1NDYxLbYIzo2dNNyR6GUt6005YcpDXVYvB0Vg2DEThJqQrCcl8v9 BCYJKwOkwLwPOui117r/Z3jzOMOQ84rULcT0ndYxiP9+IlyxtHB7cTZvn+L9ZEb2 jt1SfzhJ6Paiw0aFilIjj/DNijBUyomtHKlcH3tXUiYdcoNhj19hqG+9RuFlAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUFwithagslIgIYxR2fgjOGJc4lrEwHwYDVR0j BBgwFoAUja/b2BS2D1aFBdZRMORmH819Zl8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 ZTliMGJhZC02NmI5LTRmMjgtYTdjNS1lOWE5ZmUxMjBhZDcvMC84REFGREJEODE0 QjYwRjU2ODUwNUQ2NTEzMEU0NjYxRkNEN0Q2NjVGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOERBRkRCRDgxNEI2MEY1Njg1MDVENjUxMzBFNDY2MUZDRDdE NjY1Ri5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNmU5YjBiYWQtNjZiOS00ZjI4LWE3 YzUtZTlhOWZlMTIwYWQ3LzAvOERBRkRCRDgxNEI2MEY1Njg1MDVENjUxMzBFNDY2 MUZDRDdENjY1Ri5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGI+d7TClyw+AvcsNRizNLsNV88tsoR1EdJa M9+HMvEzRl0mtW9y4xDsr7oPPUYz8YIsONBxICsnNjUxnV8kYV4HGweIPCV66ETj uPLP8wKHqYkM/Nm7/j1/QlfEtSFb+MZrwoz93pUGuEFHZYAENqU/u8DaNKX+p7pZ lk3ABgNcBgppbvIxW9YZdJnDP41E1CwGh9fqtXuOjz4XuUn1skjV19EEA0Ng9usr BfnfADT1wqt9a/8eQr46BW8QOP+Jy5YVUq5Nb3veJzImOue5eN2BIL7MoQ8qPP04 KPbqnSeX5o9RFgVpUnCzyF6YCOn+KhwaNP2CePa+VA1MXyGYzAI= -----END CERTIFICATE-----Generated at Fri Sep 5 10:11:41 2025 by rpki-client