$ rpki-client -vvf repo-rpki.idnic.net/repo/758db87b-16cd-437a-a5b5-08cb35da97f0/0/8CBCE2EE006256C9A6207949314A7D1FCC415B5A.mft File: 8CBCE2EE006256C9A6207949314A7D1FCC415B5A.mft (raw, json) Hash identifier: 55GCM9o64jq4zfRgaCxwsLU6mn1OgUTcKuiMQjThF48= Subject key identifier: 6D:0A:D6:DD:9D:E0:33:79:25:32:77:62:D4:2B:C2:58:10:57:18:D8 Authority key identifier: 8C:BC:E2:EE:00:62:56:C9:A6:20:79:49:31:4A:7D:1F:CC:41:5B:5A Certificate issuer: /CN=8CBCE2EE006256C9A6207949314A7D1FCC415B5A Certificate serial: 4517D4F840039A7EEBE5E94CB530630DDFE4EA8B Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8CBCE2EE006256C9A6207949314A7D1FCC415B5A.cer Subject info access: rsync://repo-rpki.idnic.net/repo/758db87b-16cd-437a-a5b5-08cb35da97f0/0/8CBCE2EE006256C9A6207949314A7D1FCC415B5A.mft Manifest number: 0212 Signing time: Sat 06 Sep 2025 22:11:28 +0000 Manifest this update: Sat 06 Sep 2025 22:06:28 +0000 Manifest next update: Wed 10 Sep 2025 05:45:28 +0000 Files and hashes: 1: 3130332e3138372e3131322e302f32332d3234203d3e20313439373230.roa (hash: tJd9lCwOT2E5aUEAYGLVk9Vox9W7mUTKc82A3hANFMo=) 2: 8CBCE2EE006256C9A6207949314A7D1FCC415B5A.crl (hash: 7mddfMxqKCtciJFD5p35TjOsXXJcRgw80m4qc/xtuxQ=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/758db87b-16cd-437a-a5b5-08cb35da97f0/0/8CBCE2EE006256C9A6207949314A7D1FCC415B5A.crl rsync://repo-rpki.idnic.net/repo/758db87b-16cd-437a-a5b5-08cb35da97f0/0/8CBCE2EE006256C9A6207949314A7D1FCC415B5A.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8CBCE2EE006256C9A6207949314A7D1FCC415B5A.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 10 Sep 2025 05:45:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 45:17:d4:f8:40:03:9a:7e:eb:e5:e9:4c:b5:30:63:0d:df:e4:ea:8b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8CBCE2EE006256C9A6207949314A7D1FCC415B5A Validity Not Before: Sep 6 22:06:28 2025 GMT Not After : Sep 10 05:45:28 2025 GMT Subject: CN=6D0AD6DD9DE0337925327762D42BC258105718D8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:12:d9:3f:3f:ab:8a:d8:08:fd:65:52:49:90: 9f:15:47:93:a7:b5:29:90:ff:8e:46:f1:2a:9a:b0: f2:78:0b:63:d2:94:7e:73:28:07:be:69:91:7f:7d: 1b:39:ad:6a:8b:ac:2d:4a:74:67:f6:f9:fc:a4:89: b4:c2:ef:dc:70:32:83:72:c5:c9:7b:71:7d:a0:33: e3:be:fd:1d:95:46:40:93:98:70:18:e0:2d:33:fe: 07:e7:af:89:f0:2c:eb:01:ac:c7:2f:c3:8b:98:00: a2:2d:74:cf:45:4b:77:e2:76:08:90:1b:aa:e8:87: 2a:84:1e:fa:82:52:4c:9e:ec:82:f1:01:d6:0e:94: 38:6c:d6:c3:fc:5a:2a:a6:7e:18:9c:f5:7f:44:bc: 80:d8:1b:47:f9:9d:1c:d6:54:b9:2f:65:a0:dc:e2: 43:2d:97:81:7a:39:ac:ff:e3:c6:ec:25:61:5f:d6: 26:c5:db:42:2a:1b:53:3f:7e:3b:b9:5c:b6:08:d2: c1:96:41:33:6f:82:22:a0:45:ef:6a:80:77:93:d5: d4:ba:7e:0e:6d:47:9e:51:0c:ec:f4:64:ba:e6:d0: d9:fb:75:a6:b7:54:d0:a5:17:d4:aa:83:07:ab:01: 6d:26:af:6f:f3:ca:a9:f4:06:2c:ea:fb:df:45:4f: 0b:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6D:0A:D6:DD:9D:E0:33:79:25:32:77:62:D4:2B:C2:58:10:57:18:D8 X509v3 Authority Key Identifier: keyid:8C:BC:E2:EE:00:62:56:C9:A6:20:79:49:31:4A:7D:1F:CC:41:5B:5A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/758db87b-16cd-437a-a5b5-08cb35da97f0/0/8CBCE2EE006256C9A6207949314A7D1FCC415B5A.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8CBCE2EE006256C9A6207949314A7D1FCC415B5A.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/758db87b-16cd-437a-a5b5-08cb35da97f0/0/8CBCE2EE006256C9A6207949314A7D1FCC415B5A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a4:d8:4f:b7:9e:d8:e1:0a:df:df:94:ac:3c:e8:12:1b:3c:4f: a4:a3:dc:fe:a5:9c:2e:3a:f1:69:09:76:28:39:23:bb:3c:b3: ca:d4:26:fd:56:7a:51:bd:50:03:04:4d:25:13:bd:d1:fa:74: a9:ca:f2:b0:3a:7e:18:d5:f3:d3:db:16:e5:f0:1c:20:a5:93: 22:64:fb:10:06:e7:0b:07:cf:b0:f1:d6:c1:16:12:03:6f:3f: 28:3d:75:25:ac:f7:a9:cb:7f:a4:1d:de:64:9e:f6:59:ac:05: e5:4c:4e:58:de:f3:5d:f8:1c:36:25:c3:18:fc:c7:c9:7d:3a: c6:10:a3:dd:9b:bf:77:6c:9f:bb:f3:51:b1:ca:34:4a:86:78: 68:fa:d0:f3:e8:16:57:3a:7c:94:6c:2b:bd:28:e6:b6:03:f8: 33:43:fe:ff:35:4e:c0:ba:e5:b3:5d:51:0f:f3:3e:f7:15:88: d7:25:e4:9b:f0:74:ba:43:a9:b3:6c:7f:b2:a1:de:79:44:12: 6f:3c:54:ed:5e:b2:4e:63:0d:e5:94:90:91:fa:f9:c0:be:c3: 1b:5e:b3:59:3d:46:28:69:a6:ec:25:d8:a0:7e:98:e2:40:02: 7b:3b:c6:03:3b:13:31:da:1d:44:cd:6a:92:f9:03:75:c6:59: e1:6f:02:34 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIURRfU+EADmn7r5elMtTBjDd/k6oswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOENCQ0UyRUUwMDYyNTZDOUE2MjA3OTQ5MzE0QTdEMUZD QzQxNUI1QTAeFw0yNTA5MDYyMjA2MjhaFw0yNTA5MTAwNTQ1MjhaMDMxMTAvBgNV BAMTKDZEMEFENkREOURFMDMzNzkyNTMyNzc2MkQ0MkJDMjU4MTA1NzE4RDgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC1Etk/P6uK2Aj9ZVJJkJ8VR5On tSmQ/45G8SqasPJ4C2PSlH5zKAe+aZF/fRs5rWqLrC1KdGf2+fykibTC79xwMoNy xcl7cX2gM+O+/R2VRkCTmHAY4C0z/gfnr4nwLOsBrMcvw4uYAKItdM9FS3fidgiQ G6rohyqEHvqCUkye7ILxAdYOlDhs1sP8Wiqmfhic9X9EvIDYG0f5nRzWVLkvZaDc 4kMtl4F6Oaz/48bsJWFf1ibF20IqG1M/fju5XLYI0sGWQTNvgiKgRe9qgHeT1dS6 fg5tR55RDOz0ZLrm0Nn7daa3VNClF9SqgwerAW0mr2/zyqn0Bizq+99FTwt5AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUbQrW3Z3gM3klMndi1CvCWBBXGNgwHwYDVR0j BBgwFoAUjLzi7gBiVsmmIHlJMUp9H8xBW1owDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 NThkYjg3Yi0xNmNkLTQzN2EtYTViNS0wOGNiMzVkYTk3ZjAvMC84Q0JDRTJFRTAw NjI1NkM5QTYyMDc5NDkzMTRBN0QxRkNDNDE1QjVBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOENCQ0UyRUUwMDYyNTZDOUE2MjA3OTQ5MzE0QTdEMUZDQzQx NUI1QS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNzU4ZGI4N2ItMTZjZC00MzdhLWE1 YjUtMDhjYjM1ZGE5N2YwLzAvOENCQ0UyRUUwMDYyNTZDOUE2MjA3OTQ5MzE0QTdE MUZDQzQxNUI1QS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKTYT7ee2OEK39+UrDzoEhs8T6Sj3P6lnC46 8WkJdig5I7s8s8rUJv1WelG9UAMETSUTvdH6dKnK8rA6fhjV89PbFuXwHCClkyJk +xAG5wsHz7Dx1sEWEgNvPyg9dSWs96nLf6Qd3mSe9lmsBeVMTlje8134HDYlwxj8 x8l9OsYQo92bv3dsn7vzUbHKNEqGeGj60PPoFlc6fJRsK70o5rYD+DND/v81TsC6 5bNdUQ/zPvcViNcl5JvwdLpDqbNsf7Kh3nlEEm88VO1esk5jDeWUkJH6+cC+wxte s1k9Rihppuwl2KB+mOJAAns7xgM7EzHaHUTNapL5A3XGWeFvAjQ= -----END CERTIFICATE-----Generated at Sun Sep 7 15:34:27 2025 by rpki-client