$ rpki-client -vvf repo-rpki.idnic.net/repo/7846fed7-f88e-48ea-a6d1-6f756bcf8db6/0/8E9447BD6E58024BA4182380EFF3743772CEBED8.mft File: 8E9447BD6E58024BA4182380EFF3743772CEBED8.mft (raw, json) Hash identifier: SNinqqiJa/2FG+ZeLpjGQ3/9Mq50fZjMQaA+IYFA5Oo= Subject key identifier: 4D:56:72:F7:5E:42:C3:B7:DD:2C:3D:DB:40:A5:39:19:E4:F7:69:04 Authority key identifier: 8E:94:47:BD:6E:58:02:4B:A4:18:23:80:EF:F3:74:37:72:CE:BE:D8 Certificate issuer: /CN=8E9447BD6E58024BA4182380EFF3743772CEBED8 Certificate serial: 63C8EAA68037768B957EC1262323F70B57BBA556 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8E9447BD6E58024BA4182380EFF3743772CEBED8.cer Subject info access: rsync://repo-rpki.idnic.net/repo/7846fed7-f88e-48ea-a6d1-6f756bcf8db6/0/8E9447BD6E58024BA4182380EFF3743772CEBED8.mft Manifest number: 01E3 Signing time: Fri 05 Sep 2025 00:02:10 +0000 Manifest this update: Thu 04 Sep 2025 23:57:10 +0000 Manifest next update: Mon 08 Sep 2025 04:45:10 +0000 Files and hashes: 1: 8E9447BD6E58024BA4182380EFF3743772CEBED8.crl (hash: P1KSpAKQnjmezLYdcYSZJAXU43C59FC/6j/FA+WX/TM=) 2: 3130332e3136302e33372e302f32342d3234203d3e20313431353834.roa (hash: +IMY2tCHHq00hfSj0qqAGK3VJsbjGklWL5sab/AdO2Q=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/7846fed7-f88e-48ea-a6d1-6f756bcf8db6/0/8E9447BD6E58024BA4182380EFF3743772CEBED8.crl rsync://repo-rpki.idnic.net/repo/7846fed7-f88e-48ea-a6d1-6f756bcf8db6/0/8E9447BD6E58024BA4182380EFF3743772CEBED8.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8E9447BD6E58024BA4182380EFF3743772CEBED8.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 08 Sep 2025 04:45:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 63:c8:ea:a6:80:37:76:8b:95:7e:c1:26:23:23:f7:0b:57:bb:a5:56 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8E9447BD6E58024BA4182380EFF3743772CEBED8 Validity Not Before: Sep 4 23:57:10 2025 GMT Not After : Sep 8 04:45:10 2025 GMT Subject: CN=4D5672F75E42C3B7DD2C3DDB40A53919E4F76904 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:34:07:e1:48:92:6b:75:c8:4b:d1:2f:0b:58: 97:39:0e:98:cc:ae:0d:77:6a:88:24:23:2f:73:ca: 3f:75:41:9f:bb:13:bb:51:5e:8e:da:97:97:2c:db: 9f:32:1e:0d:92:ad:60:fe:7f:f8:ef:45:b3:92:84: 01:c1:e7:ee:e3:b5:03:6a:17:52:86:82:c0:2a:e4: 4b:12:51:f6:65:09:99:82:84:7d:71:24:fa:d5:fc: 2e:1f:8e:1d:01:0d:6f:cb:f3:f7:19:17:f9:ab:8d: 16:10:d3:d8:20:58:d1:e5:84:b7:c6:b8:c7:9c:40: 48:4b:1d:10:be:7e:37:4e:8d:83:5f:0b:1e:96:0c: d0:98:86:ad:70:cf:50:4e:4e:3b:35:3e:1e:25:76: 62:ec:0d:b5:c8:c9:a0:2d:8e:68:19:85:4e:4a:b3: 5b:dd:f1:e9:a5:3c:be:27:7a:d7:c3:6d:19:6b:05: 26:61:7d:54:4a:82:ee:b1:40:25:1c:cc:e8:cf:e8: 12:f7:07:63:1e:5d:8a:15:f0:ac:8e:5f:15:bd:d3: c8:9e:7d:9a:fe:fa:25:eb:cc:81:62:fb:62:51:a8: db:48:64:51:86:60:12:bd:c2:fa:7b:1e:d5:a2:c3: 90:8f:84:43:9d:97:2c:9e:0c:d3:3a:80:65:79:87: a8:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4D:56:72:F7:5E:42:C3:B7:DD:2C:3D:DB:40:A5:39:19:E4:F7:69:04 X509v3 Authority Key Identifier: keyid:8E:94:47:BD:6E:58:02:4B:A4:18:23:80:EF:F3:74:37:72:CE:BE:D8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/7846fed7-f88e-48ea-a6d1-6f756bcf8db6/0/8E9447BD6E58024BA4182380EFF3743772CEBED8.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8E9447BD6E58024BA4182380EFF3743772CEBED8.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/7846fed7-f88e-48ea-a6d1-6f756bcf8db6/0/8E9447BD6E58024BA4182380EFF3743772CEBED8.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1b:9e:6d:a8:9c:2a:b7:37:7e:01:aa:fb:6f:ad:45:c6:8b:a5: 80:28:6b:92:59:e9:05:d8:79:df:58:4f:a7:ea:15:22:4c:b2: 6c:e4:da:81:25:3f:01:fc:db:be:d2:40:2b:41:dc:58:2d:08: c1:12:2b:b1:f7:05:2f:cc:24:a6:9a:ee:99:a2:cb:71:50:5b: 2f:42:7b:e6:2e:c0:f7:45:01:78:d0:62:5e:28:22:01:9a:b0: 46:f7:3d:00:fc:bf:d1:1b:80:70:c6:ee:0c:ee:4e:e3:68:49: 58:21:64:ec:ec:a4:28:36:02:98:a2:b9:66:e2:1f:b2:88:c5: 2f:d4:45:3f:4c:97:37:aa:bb:19:dc:bc:d7:23:08:48:e3:d1: 61:b5:5a:2a:e0:d5:c9:3f:a2:ad:3f:fe:b4:55:e3:54:e8:30: 60:e7:1f:92:9c:43:fb:f3:34:fd:12:cb:e3:48:bc:bf:b8:e4: 67:13:4b:db:ef:ab:95:55:cc:31:33:3e:fa:4d:da:c6:45:c6: c2:44:1b:c0:4d:8d:d1:9e:5b:62:09:5f:aa:8b:81:1d:fd:22: e0:12:cc:5d:78:d9:dd:1d:ee:0d:17:a1:33:62:3f:8c:9f:5d: f3:f7:b8:3b:a7:88:45:29:c2:ac:fe:97:f9:78:55:35:b2:64: ef:96:1a:f9 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUY8jqpoA3douVfsEmIyP3C1e7pVYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEU5NDQ3QkQ2RTU4MDI0QkE0MTgyMzgwRUZGMzc0Mzc3 MkNFQkVEODAeFw0yNTA5MDQyMzU3MTBaFw0yNTA5MDgwNDQ1MTBaMDMxMTAvBgNV BAMTKDRENTY3MkY3NUU0MkMzQjdERDJDM0REQjQwQTUzOTE5RTRGNzY5MDQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC9NAfhSJJrdchL0S8LWJc5DpjM rg13aogkIy9zyj91QZ+7E7tRXo7al5cs258yHg2SrWD+f/jvRbOShAHB5+7jtQNq F1KGgsAq5EsSUfZlCZmChH1xJPrV/C4fjh0BDW/L8/cZF/mrjRYQ09ggWNHlhLfG uMecQEhLHRC+fjdOjYNfCx6WDNCYhq1wz1BOTjs1Ph4ldmLsDbXIyaAtjmgZhU5K s1vd8emlPL4netfDbRlrBSZhfVRKgu6xQCUczOjP6BL3B2MeXYoV8KyOXxW908ie fZr++iXrzIFi+2JRqNtIZFGGYBK9wvp7HtWiw5CPhEOdlyyeDNM6gGV5h6ihAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUTVZy915Cw7fdLD3bQKU5GeT3aQQwHwYDVR0j BBgwFoAUjpRHvW5YAkukGCOA7/N0N3LOvtgwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 ODQ2ZmVkNy1mODhlLTQ4ZWEtYTZkMS02Zjc1NmJjZjhkYjYvMC84RTk0NDdCRDZF NTgwMjRCQTQxODIzODBFRkYzNzQzNzcyQ0VCRUQ4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOEU5NDQ3QkQ2RTU4MDI0QkE0MTgyMzgwRUZGMzc0Mzc3MkNF QkVEOC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNzg0NmZlZDctZjg4ZS00OGVhLWE2 ZDEtNmY3NTZiY2Y4ZGI2LzAvOEU5NDQ3QkQ2RTU4MDI0QkE0MTgyMzgwRUZGMzc0 Mzc3MkNFQkVEOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABuebaicKrc3fgGq+2+tRcaLpYAoa5JZ6QXY ed9YT6fqFSJMsmzk2oElPwH8277SQCtB3FgtCMESK7H3BS/MJKaa7pmiy3FQWy9C e+YuwPdFAXjQYl4oIgGasEb3PQD8v9EbgHDG7gzuTuNoSVghZOzspCg2ApiiuWbi H7KIxS/URT9MlzequxncvNcjCEjj0WG1Wirg1ck/oq0//rRV41ToMGDnH5KcQ/vz NP0Sy+NIvL+45GcTS9vvq5VVzDEzPvpN2sZFxsJEG8BNjdGeW2IJX6qLgR39IuAS zF142d0d7g0XoTNiP4yfXfP3uDuniEUpwqz+l/l4VTWyZO+WGvk= -----END CERTIFICATE-----Generated at Fri Sep 5 10:36:19 2025 by rpki-client