$ rpki-client -vvf repo-rpki.idnic.net/repo/71403409-bf04-42e9-9567-b06ec823d901/0/8910B51FCAA7F54124A76AF839CE19F4055A1061.mft File: 8910B51FCAA7F54124A76AF839CE19F4055A1061.mft (raw, json) Hash identifier: KBSUtiX8OFwHPLFbWrfLCt6m0rWKJQOzhKxyl571KYI= Subject key identifier: EF:C3:AA:7F:EC:16:E9:E8:1A:ED:17:EA:D3:56:08:E9:45:29:40:FB Authority key identifier: 89:10:B5:1F:CA:A7:F5:41:24:A7:6A:F8:39:CE:19:F4:05:5A:10:61 Certificate issuer: /CN=8910B51FCAA7F54124A76AF839CE19F4055A1061 Certificate serial: 5E6575EDFE354FBB7B0152CF97BA4C706FF70CEB Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/8910B51FCAA7F54124A76AF839CE19F4055A1061.cer Subject info access: rsync://repo-rpki.idnic.net/repo/71403409-bf04-42e9-9567-b06ec823d901/0/8910B51FCAA7F54124A76AF839CE19F4055A1061.mft Manifest number: C0 Signing time: Thu 28 Aug 2025 20:21:54 +0000 Manifest this update: Thu 28 Aug 2025 20:16:54 +0000 Manifest next update: Mon 01 Sep 2025 03:15:54 +0000 Files and hashes: 1: 3136302e31392e31362e302f32342d3234203d3e20313532303733.roa (hash: BD9874huussdd9AhnhjODm64dILqVkWxIW7wjOoaAMQ=) 2: 8910B51FCAA7F54124A76AF839CE19F4055A1061.crl (hash: d3sFs32A5eOggWtE4L4mk227h0pf3+OtIpicApBE/ws=) 3: 3136302e31392e31372e302f32342d3234203d3e20313532303733.roa (hash: z0YgoG/ujpHrwuWoXrEZAv8nwDL/OBeAUxVX0QCVaBM=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/71403409-bf04-42e9-9567-b06ec823d901/0/8910B51FCAA7F54124A76AF839CE19F4055A1061.crl rsync://repo-rpki.idnic.net/repo/71403409-bf04-42e9-9567-b06ec823d901/0/8910B51FCAA7F54124A76AF839CE19F4055A1061.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/8910B51FCAA7F54124A76AF839CE19F4055A1061.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 01 Sep 2025 03:15:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5e:65:75:ed:fe:35:4f:bb:7b:01:52:cf:97:ba:4c:70:6f:f7:0c:eb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8910B51FCAA7F54124A76AF839CE19F4055A1061 Validity Not Before: Aug 28 20:16:54 2025 GMT Not After : Sep 1 03:15:54 2025 GMT Subject: CN=EFC3AA7FEC16E9E81AED17EAD35608E9452940FB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:b7:8c:d7:ae:8d:99:45:c5:29:0c:39:4f:77: ac:4c:9f:b0:fd:c0:5c:01:81:e6:d8:9a:e6:1a:f0: ad:7d:27:82:38:bf:43:5f:13:4d:df:70:86:49:03: 6f:99:5b:54:16:3f:d7:82:7c:fd:8c:e2:ad:22:fc: ab:f2:9e:00:39:57:a3:32:68:81:8e:51:0d:8f:03: 75:fb:da:43:4e:6f:36:1d:71:b6:fc:09:ac:71:15: fb:8b:2f:e3:f1:6a:80:de:aa:43:f9:fe:f3:52:11: dd:66:30:d7:04:40:f0:01:10:ec:a2:07:9b:96:af: 4e:29:18:60:9e:8e:75:0c:e1:ab:61:e9:05:91:d7: a5:59:4f:1e:79:24:8f:fd:0f:cf:e0:d2:56:64:4c: 8d:c5:19:df:c7:ef:bc:4f:68:7e:af:6b:41:af:f4: 8a:22:8c:1c:b6:9a:cd:fe:29:d9:50:47:99:60:d8: 56:c3:81:ca:1c:fd:bb:78:9f:e3:f5:c7:47:bc:44: a4:93:8a:04:bf:e2:9a:33:12:16:eb:13:54:27:15: 5b:8d:7d:cf:87:1b:98:bb:46:81:b7:0d:59:cd:b3: db:ce:a8:9f:2e:c2:e2:d8:c0:0f:e7:e8:8a:c5:ee: cf:41:05:f7:69:57:1c:bd:d1:bf:2f:b2:58:d7:d4: b9:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EF:C3:AA:7F:EC:16:E9:E8:1A:ED:17:EA:D3:56:08:E9:45:29:40:FB X509v3 Authority Key Identifier: keyid:89:10:B5:1F:CA:A7:F5:41:24:A7:6A:F8:39:CE:19:F4:05:5A:10:61 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/71403409-bf04-42e9-9567-b06ec823d901/0/8910B51FCAA7F54124A76AF839CE19F4055A1061.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/8910B51FCAA7F54124A76AF839CE19F4055A1061.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/71403409-bf04-42e9-9567-b06ec823d901/0/8910B51FCAA7F54124A76AF839CE19F4055A1061.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a1:0d:79:25:c4:1d:1e:1c:4f:09:85:57:0f:72:4c:c9:ba:c4: 8c:33:a4:67:5d:0b:23:22:97:51:aa:58:f9:c2:7a:3a:bc:8a: 43:69:0d:e3:d5:68:ee:cc:65:04:d6:48:11:4f:cc:cd:23:b5: 9b:82:2c:35:75:0b:25:ba:e2:ac:0e:ac:65:e8:30:b2:d9:8a: 6a:88:2e:a9:99:5e:e2:86:36:98:e8:46:dc:12:97:f7:50:3c: a4:19:22:e1:e2:e8:ac:f5:49:c4:30:4d:f9:7c:03:8c:fb:e7: 08:bd:3c:e2:5b:e7:d5:36:44:b5:2b:97:a3:39:c7:26:c9:85: 96:0e:17:fb:1f:1f:71:05:39:71:35:18:a7:7a:cb:b9:76:af: 59:39:78:fc:7a:f6:43:c6:7c:cf:1c:0b:c3:7c:07:de:19:aa: 1c:11:4e:54:6e:04:67:6b:e9:1b:df:3e:cd:89:7c:80:d3:84: 6f:f3:12:7a:4f:a6:0c:be:72:f4:e6:eb:95:a8:dc:c3:f4:26: 97:f9:b4:47:5c:2d:87:0a:d2:f6:c9:c9:16:70:d8:ab:c1:16: 63:71:0a:79:6f:fa:11:c1:60:ce:2d:77:9a:4e:e3:b8:cc:42: 2a:90:1a:a9:f9:8d:a7:2a:54:61:c9:c9:89:21:60:5a:71:0e: d2:fb:6a:52 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUXmV17f41T7t7AVLPl7pMcG/3DOswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODkxMEI1MUZDQUE3RjU0MTI0QTc2QUY4MzlDRTE5RjQw NTVBMTA2MTAeFw0yNTA4MjgyMDE2NTRaFw0yNTA5MDEwMzE1NTRaMDMxMTAvBgNV BAMTKEVGQzNBQTdGRUMxNkU5RTgxQUVEMTdFQUQzNTYwOEU5NDUyOTQwRkIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDOt4zXro2ZRcUpDDlPd6xMn7D9 wFwBgebYmuYa8K19J4I4v0NfE03fcIZJA2+ZW1QWP9eCfP2M4q0i/KvyngA5V6My aIGOUQ2PA3X72kNObzYdcbb8CaxxFfuLL+PxaoDeqkP5/vNSEd1mMNcEQPABEOyi B5uWr04pGGCejnUM4ath6QWR16VZTx55JI/9D8/g0lZkTI3FGd/H77xPaH6va0Gv 9IoijBy2ms3+KdlQR5lg2FbDgcoc/bt4n+P1x0e8RKSTigS/4pozEhbrE1QnFVuN fc+HG5i7RoG3DVnNs9vOqJ8uwuLYwA/n6IrF7s9BBfdpVxy90b8vsljX1LnzAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU78Oqf+wW6ega7Rfq01YI6UUpQPswHwYDVR0j BBgwFoAUiRC1H8qn9UEkp2r4Oc4Z9AVaEGEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 MTQwMzQwOS1iZjA0LTQyZTktOTU2Ny1iMDZlYzgyM2Q5MDEvMC84OTEwQjUxRkNB QTdGNTQxMjRBNzZBRjgzOUNFMTlGNDA1NUExMDYxLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvODkxMEI1MUZDQUE3RjU0MTI0QTc2QUY4MzlDRTE5RjQwNTVB MTA2MS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNzE0MDM0MDktYmYwNC00MmU5LTk1 NjctYjA2ZWM4MjNkOTAxLzAvODkxMEI1MUZDQUE3RjU0MTI0QTc2QUY4MzlDRTE5 RjQwNTVBMTA2MS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKENeSXEHR4cTwmFVw9yTMm6xIwzpGddCyMi l1GqWPnCejq8ikNpDePVaO7MZQTWSBFPzM0jtZuCLDV1CyW64qwOrGXoMLLZimqI LqmZXuKGNpjoRtwSl/dQPKQZIuHi6Kz1ScQwTfl8A4z75wi9POJb59U2RLUrl6M5 xybJhZYOF/sfH3EFOXE1GKd6y7l2r1k5ePx69kPGfM8cC8N8B94ZqhwRTlRuBGdr 6RvfPs2JfIDThG/zEnpPpgy+cvTm65Wo3MP0Jpf5tEdcLYcK0vbJyRZw2KvBFmNx Cnlv+hHBYM4td5pO47jMQiqQGqn5jacqVGHJyYkhYFpxDtL7alI= -----END CERTIFICATE-----Generated at Sun Aug 31 04:00:18 2025 by rpki-client