$ rpki-client -vvf repo-rpki.idnic.net/repo/7328b476-6224-4e01-b186-80bcec9bc0e3/0/8762A545785B5A6352FB7DA20689CECA8A47432E.mft File: 8762A545785B5A6352FB7DA20689CECA8A47432E.mft (raw, json) Hash identifier: 8YCLu1ImipFuLBQDx/LSDRQqRGRT/XLKe33meXmbeA0= Subject key identifier: BF:20:13:EA:0A:FE:0A:5D:06:13:97:DB:53:32:03:D9:5D:BA:90:38 Authority key identifier: 87:62:A5:45:78:5B:5A:63:52:FB:7D:A2:06:89:CE:CA:8A:47:43:2E Certificate issuer: /CN=8762A545785B5A6352FB7DA20689CECA8A47432E Certificate serial: 6E24C6C2B89BACE3583222351D3FC4B33325DB1C Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8762A545785B5A6352FB7DA20689CECA8A47432E.cer Subject info access: rsync://repo-rpki.idnic.net/repo/7328b476-6224-4e01-b186-80bcec9bc0e3/0/8762A545785B5A6352FB7DA20689CECA8A47432E.mft Manifest number: 0113 Signing time: Sat 06 Sep 2025 17:22:18 +0000 Manifest this update: Sat 06 Sep 2025 17:17:18 +0000 Manifest next update: Tue 09 Sep 2025 23:55:18 +0000 Files and hashes: 1: 3131332e3139322e302e302f32342d3234203d3e20313532303630.roa (hash: QXl0cqQS/4SuO2ouoaV9qpvotcMaHaX/8Ve/TSlnoOs=) 2: 3131332e3139322e312e302f32342d3234203d3e20313532303630.roa (hash: oj9chbs5OVG53Fer0emzdLkJa1HgsbB46XHGonJX/no=) 3: 3131332e3139322e302e302f32332d3233203d3e20313532303630.roa (hash: 4RpzWO2+21rLjO+oWBeOo/H9H+KppI82T9nIyJDFZDI=) 4: 8762A545785B5A6352FB7DA20689CECA8A47432E.crl (hash: 4WiTxyEKI053iOD/bi2aFRNFmKf8VJU1ddevcnDn3Pc=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/7328b476-6224-4e01-b186-80bcec9bc0e3/0/8762A545785B5A6352FB7DA20689CECA8A47432E.crl rsync://repo-rpki.idnic.net/repo/7328b476-6224-4e01-b186-80bcec9bc0e3/0/8762A545785B5A6352FB7DA20689CECA8A47432E.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8762A545785B5A6352FB7DA20689CECA8A47432E.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 09 Sep 2025 23:55:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6e:24:c6:c2:b8:9b:ac:e3:58:32:22:35:1d:3f:c4:b3:33:25:db:1c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8762A545785B5A6352FB7DA20689CECA8A47432E Validity Not Before: Sep 6 17:17:18 2025 GMT Not After : Sep 9 23:55:18 2025 GMT Subject: CN=BF2013EA0AFE0A5D061397DB533203D95DBA9038 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:dc:65:72:4b:bf:3d:f9:01:06:c0:01:b6:41: 1a:fa:78:1e:b6:c0:25:8b:9c:e2:9d:cc:44:db:70: f5:87:5d:96:1f:81:b4:30:ef:4a:da:ae:58:e0:b8: 97:fc:03:75:e4:37:8f:de:a6:fe:35:aa:7d:a4:7a: de:1e:ee:38:90:00:b6:98:e5:0b:b5:2b:d7:9e:c9: 36:36:5d:c4:82:a9:f0:d3:3e:6c:db:ce:91:91:57: 1e:4b:e0:99:fb:a6:dd:fa:70:55:a3:95:91:61:b3: e6:28:63:49:4d:05:01:99:c3:f6:86:e8:8a:3e:94: ea:fa:5c:28:96:07:a4:e5:17:57:a0:75:7e:0f:ec: d6:d5:1b:27:fd:49:3c:a7:c5:cc:18:e8:77:9d:56: fc:69:52:56:c5:00:8b:6c:c7:26:75:d1:1a:58:42: 3c:46:cb:0b:5d:50:07:27:3d:9a:f1:41:55:a6:85: dd:06:60:36:43:92:6b:2f:e7:d7:fa:b4:bd:5f:9d: cd:ee:db:ff:8a:bf:cf:59:77:fa:42:2d:2e:dc:b7: b0:5a:84:d9:3f:b3:e0:24:6f:ae:50:a0:47:e3:10: cd:a2:47:30:30:b0:21:43:98:30:1c:0a:4f:4a:39: b0:e6:34:a9:cd:c2:ce:64:e2:85:08:6f:58:0d:aa: ac:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:20:13:EA:0A:FE:0A:5D:06:13:97:DB:53:32:03:D9:5D:BA:90:38 X509v3 Authority Key Identifier: keyid:87:62:A5:45:78:5B:5A:63:52:FB:7D:A2:06:89:CE:CA:8A:47:43:2E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/7328b476-6224-4e01-b186-80bcec9bc0e3/0/8762A545785B5A6352FB7DA20689CECA8A47432E.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8762A545785B5A6352FB7DA20689CECA8A47432E.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/7328b476-6224-4e01-b186-80bcec9bc0e3/0/8762A545785B5A6352FB7DA20689CECA8A47432E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2a:42:0e:4d:24:b9:42:a0:96:fe:1d:78:81:6f:79:8f:2f:b8: 77:89:e2:78:ff:a2:da:f0:77:90:a1:41:90:5a:3c:fe:3a:fc: 80:50:0a:46:29:d4:45:d3:92:91:21:06:1e:21:c1:95:6a:60: a3:aa:e7:02:84:e6:14:44:b6:f4:d9:a3:25:25:75:46:81:33: 39:47:0e:8d:ca:5d:e8:b9:ec:01:d3:61:c5:df:25:df:d3:5f: 9c:c6:58:34:ad:4b:cd:66:6b:0e:84:ee:0f:d1:8c:42:3c:d2: ba:bf:8e:7a:e7:5c:ea:31:54:fb:9f:68:c0:fc:49:57:62:a4: d5:2b:7a:9c:f8:9b:2b:df:80:bd:a3:af:55:9c:93:b3:fb:0e: c3:9e:72:28:15:fd:5a:dd:d3:ba:83:13:aa:6f:ae:bc:15:0f: e5:b0:28:78:97:b7:16:55:ea:0c:92:1d:84:a9:fa:d2:6a:d4: 30:dd:2f:da:22:db:84:dc:fd:ab:07:6d:71:34:9a:05:e8:c2: 05:39:45:14:6b:18:e7:05:b1:cd:74:80:01:f1:22:dc:02:ef: cc:6b:77:12:1d:25:a5:ce:54:30:a9:fa:f7:21:2f:be:da:e6: 13:ba:bf:49:62:36:38:e5:e9:44:b6:33:8a:5c:c8:83:df:d4: b7:c2:0b:e4 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUbiTGwribrONYMiI1HT/EszMl2xwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODc2MkE1NDU3ODVCNUE2MzUyRkI3REEyMDY4OUNFQ0E4 QTQ3NDMyRTAeFw0yNTA5MDYxNzE3MThaFw0yNTA5MDkyMzU1MThaMDMxMTAvBgNV BAMTKEJGMjAxM0VBMEFGRTBBNUQwNjEzOTdEQjUzMzIwM0Q5NURCQTkwMzgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDW3GVyS789+QEGwAG2QRr6eB62 wCWLnOKdzETbcPWHXZYfgbQw70rarljguJf8A3XkN4/epv41qn2ket4e7jiQALaY 5Qu1K9eeyTY2XcSCqfDTPmzbzpGRVx5L4Jn7pt36cFWjlZFhs+YoY0lNBQGZw/aG 6Io+lOr6XCiWB6TlF1egdX4P7NbVGyf9STynxcwY6HedVvxpUlbFAItsxyZ10RpY QjxGywtdUAcnPZrxQVWmhd0GYDZDkmsv59f6tL1fnc3u2/+Kv89Zd/pCLS7ct7Ba hNk/s+Akb65QoEfjEM2iRzAwsCFDmDAcCk9KObDmNKnNws5k4oUIb1gNqqwzAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUvyAT6gr+Cl0GE5fbUzID2V26kDgwHwYDVR0j BBgwFoAUh2KlRXhbWmNS+32iBonOyopHQy4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 MzI4YjQ3Ni02MjI0LTRlMDEtYjE4Ni04MGJjZWM5YmMwZTMvMC84NzYyQTU0NTc4 NUI1QTYzNTJGQjdEQTIwNjg5Q0VDQThBNDc0MzJFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvODc2MkE1NDU3ODVCNUE2MzUyRkI3REEyMDY4OUNFQ0E4QTQ3 NDMyRS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNzMyOGI0NzYtNjIyNC00ZTAxLWIx ODYtODBiY2VjOWJjMGUzLzAvODc2MkE1NDU3ODVCNUE2MzUyRkI3REEyMDY4OUNF Q0E4QTQ3NDMyRS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACpCDk0kuUKglv4deIFveY8vuHeJ4nj/otrw d5ChQZBaPP46/IBQCkYp1EXTkpEhBh4hwZVqYKOq5wKE5hREtvTZoyUldUaBMzlH Do3KXei57AHTYcXfJd/TX5zGWDStS81maw6E7g/RjEI80rq/jnrnXOoxVPufaMD8 SVdipNUrepz4myvfgL2jr1Wck7P7DsOecigV/Vrd07qDE6pvrrwVD+WwKHiXtxZV 6gySHYSp+tJq1DDdL9oi24Tc/asHbXE0mgXowgU5RRRrGOcFsc10gAHxItwC78xr dxIdJaXOVDCp+vchL77a5hO6v0liNjjl6US2M4pcyIPf1LfCC+Q= -----END CERTIFICATE-----Generated at Sun Sep 7 14:02:12 2025 by rpki-client