$ rpki-client -vvf repo-rpki.idnic.net/repo/785bff41-2420-42b1-9b83-d41c18043d65/0/8ACB520B0E2DE66CE528B80DA6A5ED66E4B5CF2E.mft File: 8ACB520B0E2DE66CE528B80DA6A5ED66E4B5CF2E.mft (raw, json) Hash identifier: OVAzsCLy8r5LlGv4ngUI9z/moSXE1rsX+/TcEX9WlZA= Subject key identifier: E5:EA:F7:B0:60:CE:48:2F:29:62:F4:90:BE:B3:60:27:BE:15:3F:D5 Authority key identifier: 8A:CB:52:0B:0E:2D:E6:6C:E5:28:B8:0D:A6:A5:ED:66:E4:B5:CF:2E Certificate issuer: /CN=8ACB520B0E2DE66CE528B80DA6A5ED66E4B5CF2E Certificate serial: 0C38482E5E36D02E10B4CC34E2E13F18ACFF7486 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8ACB520B0E2DE66CE528B80DA6A5ED66E4B5CF2E.cer Subject info access: rsync://repo-rpki.idnic.net/repo/785bff41-2420-42b1-9b83-d41c18043d65/0/8ACB520B0E2DE66CE528B80DA6A5ED66E4B5CF2E.mft Manifest number: 0191 Signing time: Sun 07 Sep 2025 02:01:22 +0000 Manifest this update: Sun 07 Sep 2025 01:56:22 +0000 Manifest next update: Wed 10 Sep 2025 02:39:22 +0000 Files and hashes: 1: 3130332e3137392e3235322e302f32332d3233203d3e20313439333530.roa (hash: SOLno68sPPJ1WEP8d6UDWvS0+ZdY5j1GxBVKsZxB5cY=) 2: 8ACB520B0E2DE66CE528B80DA6A5ED66E4B5CF2E.crl (hash: pMbV6zuJhej0VQKbAzZ1zEOnF04CSynbNSNm4L4azHU=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/785bff41-2420-42b1-9b83-d41c18043d65/0/8ACB520B0E2DE66CE528B80DA6A5ED66E4B5CF2E.crl rsync://repo-rpki.idnic.net/repo/785bff41-2420-42b1-9b83-d41c18043d65/0/8ACB520B0E2DE66CE528B80DA6A5ED66E4B5CF2E.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8ACB520B0E2DE66CE528B80DA6A5ED66E4B5CF2E.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 10 Sep 2025 02:39:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0c:38:48:2e:5e:36:d0:2e:10:b4:cc:34:e2:e1:3f:18:ac:ff:74:86 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8ACB520B0E2DE66CE528B80DA6A5ED66E4B5CF2E Validity Not Before: Sep 7 01:56:22 2025 GMT Not After : Sep 10 02:39:22 2025 GMT Subject: CN=E5EAF7B060CE482F2962F490BEB36027BE153FD5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:9a:6b:b6:25:d7:93:c2:16:ae:35:3c:53:69: d7:d1:42:fd:04:02:17:f4:c7:a6:94:dc:be:8a:2e: e7:84:e5:21:06:48:a6:8b:4c:8d:fd:11:f7:78:27: a2:fe:5c:2b:a4:e7:1c:85:14:b6:00:7b:dd:a2:f4: 48:3b:d2:56:ac:fd:4c:bb:22:c6:8e:7a:ff:e1:24: 37:43:29:76:01:b4:6a:7f:48:f8:b5:c8:10:d7:43: b1:9e:50:d2:57:3f:90:d4:06:19:af:3b:d9:25:15: c4:e0:49:85:60:60:14:78:8e:1f:89:21:1f:57:65: a4:d3:84:c9:8e:5e:76:89:30:24:b1:64:18:46:02: f4:7e:be:9a:a4:ad:a5:84:32:e2:c6:fc:40:be:d5: ac:9b:d8:0f:44:16:2f:f4:57:f1:44:f6:e1:8f:25: f2:f8:40:02:6f:78:8b:66:95:33:b0:bb:1c:f5:f4: 6e:ae:e2:55:d8:2a:ac:00:9a:a7:3a:e7:b1:8c:a4: 2f:f0:2d:6d:d3:ab:81:83:ec:20:68:c8:1c:c6:45: 9b:3c:f2:66:d5:fa:14:7a:86:02:b8:a7:c6:3b:2d: 78:fe:12:97:a6:c2:24:f0:c0:e3:a3:a6:56:23:93: 8a:a2:fc:d0:ca:1d:af:81:46:a6:26:df:1b:e9:8c: 86:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E5:EA:F7:B0:60:CE:48:2F:29:62:F4:90:BE:B3:60:27:BE:15:3F:D5 X509v3 Authority Key Identifier: keyid:8A:CB:52:0B:0E:2D:E6:6C:E5:28:B8:0D:A6:A5:ED:66:E4:B5:CF:2E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/785bff41-2420-42b1-9b83-d41c18043d65/0/8ACB520B0E2DE66CE528B80DA6A5ED66E4B5CF2E.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8ACB520B0E2DE66CE528B80DA6A5ED66E4B5CF2E.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/785bff41-2420-42b1-9b83-d41c18043d65/0/8ACB520B0E2DE66CE528B80DA6A5ED66E4B5CF2E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 25:87:ae:86:78:13:ca:7f:17:ba:6e:28:e0:f1:1c:ce:8b:96: 91:fe:5a:cb:40:90:f6:1a:bc:62:44:41:49:2d:ee:84:51:bc: fb:82:a5:a5:55:06:67:a8:26:c0:57:6f:dd:79:38:7e:de:e8: b2:00:c4:e0:58:37:40:2d:25:b8:19:b1:3e:68:11:21:a7:48: 1e:dd:08:00:71:b5:1a:14:88:39:3e:60:47:63:88:3a:86:0a: 61:fd:d2:11:a7:34:13:77:b2:a9:4a:4b:d2:9b:c5:9c:10:87: 62:a7:97:49:ac:19:6a:71:0f:c0:a3:b1:7f:43:d6:f0:7b:4c: 75:92:07:57:ab:ff:2c:29:2e:ac:3e:a5:2e:1a:b4:cd:07:94: 31:05:a1:d4:d2:ed:03:8b:22:22:27:ee:44:56:3e:de:53:fb: 52:c5:76:7f:39:71:b8:0e:20:b1:8e:91:99:b2:f8:45:6f:39: d8:49:0e:73:20:ff:35:c6:e0:96:97:8c:29:b6:b6:32:57:29: c4:a8:a9:b8:c8:3c:e4:a3:02:b5:4a:7d:c9:df:ab:9c:f7:93: 30:27:ba:d7:53:fb:e1:8a:a9:74:9e:e7:42:51:80:2e:2e:5d: 35:bb:7d:6f:10:58:65:f6:34:df:4c:bb:46:c1:eb:55:6e:d2: 4a:33:75:03 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUDDhILl420C4QtMw04uE/GKz/dIYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEFDQjUyMEIwRTJERTY2Q0U1MjhCODBEQTZBNUVENjZF NEI1Q0YyRTAeFw0yNTA5MDcwMTU2MjJaFw0yNTA5MTAwMjM5MjJaMDMxMTAvBgNV BAMTKEU1RUFGN0IwNjBDRTQ4MkYyOTYyRjQ5MEJFQjM2MDI3QkUxNTNGRDUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/mmu2JdeTwhauNTxTadfRQv0E Ahf0x6aU3L6KLueE5SEGSKaLTI39Efd4J6L+XCuk5xyFFLYAe92i9Eg70las/Uy7 IsaOev/hJDdDKXYBtGp/SPi1yBDXQ7GeUNJXP5DUBhmvO9klFcTgSYVgYBR4jh+J IR9XZaTThMmOXnaJMCSxZBhGAvR+vpqkraWEMuLG/EC+1ayb2A9EFi/0V/FE9uGP JfL4QAJveItmlTOwuxz19G6u4lXYKqwAmqc657GMpC/wLW3Tq4GD7CBoyBzGRZs8 8mbV+hR6hgK4p8Y7LXj+EpemwiTwwOOjplYjk4qi/NDKHa+BRqYm3xvpjIZTAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU5er3sGDOSC8pYvSQvrNgJ74VP9UwHwYDVR0j BBgwFoAUistSCw4t5mzlKLgNpqXtZuS1zy4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 ODViZmY0MS0yNDIwLTQyYjEtOWI4My1kNDFjMTgwNDNkNjUvMC84QUNCNTIwQjBF MkRFNjZDRTUyOEI4MERBNkE1RUQ2NkU0QjVDRjJFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOEFDQjUyMEIwRTJERTY2Q0U1MjhCODBEQTZBNUVENjZFNEI1 Q0YyRS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNzg1YmZmNDEtMjQyMC00MmIxLTli ODMtZDQxYzE4MDQzZDY1LzAvOEFDQjUyMEIwRTJERTY2Q0U1MjhCODBEQTZBNUVE NjZFNEI1Q0YyRS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACWHroZ4E8p/F7puKODxHM6LlpH+WstAkPYa vGJEQUkt7oRRvPuCpaVVBmeoJsBXb915OH7e6LIAxOBYN0AtJbgZsT5oESGnSB7d CABxtRoUiDk+YEdjiDqGCmH90hGnNBN3sqlKS9KbxZwQh2Knl0msGWpxD8CjsX9D 1vB7THWSB1er/ywpLqw+pS4atM0HlDEFodTS7QOLIiIn7kRWPt5T+1LFdn85cbgO ILGOkZmy+EVvOdhJDnMg/zXG4JaXjCm2tjJXKcSoqbjIPOSjArVKfcnfq5z3kzAn utdT++GKqXSe50JRgC4uXTW7fW8QWGX2NN9Mu0bB61Vu0kozdQM= -----END CERTIFICATE-----Generated at Sun Sep 7 15:31:06 2025 by rpki-client