$ rpki-client -vvf repo-rpki.idnic.net/repo/7e8cbdc8-d195-4c7d-b3e8-0a8fbae8c284/0/8790EFE9518BF8664B34E1227585F3516FDC5367.mft File: 8790EFE9518BF8664B34E1227585F3516FDC5367.mft (raw, json) Hash identifier: bCy7ReqS9JzXor1WtrLshMAyWPjJDaZISQ2Z7RUTwtA= Subject key identifier: 58:99:91:6D:53:58:E8:5F:6D:9E:E4:47:BA:74:1E:40:03:A0:09:79 Authority key identifier: 87:90:EF:E9:51:8B:F8:66:4B:34:E1:22:75:85:F3:51:6F:DC:53:67 Certificate issuer: /CN=8790EFE9518BF8664B34E1227585F3516FDC5367 Certificate serial: 1848BDDABCBB8204C8FC0EBD8D3F30553058C3B7 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8790EFE9518BF8664B34E1227585F3516FDC5367.cer Subject info access: rsync://repo-rpki.idnic.net/repo/7e8cbdc8-d195-4c7d-b3e8-0a8fbae8c284/0/8790EFE9518BF8664B34E1227585F3516FDC5367.mft Manifest number: 0202 Signing time: Wed 03 Sep 2025 21:01:30 +0000 Manifest this update: Wed 03 Sep 2025 20:56:30 +0000 Manifest next update: Sun 07 Sep 2025 01:22:30 +0000 Files and hashes: 1: 3130332e3136362e39302e302f32332d3234203d3e20313431393431.roa (hash: u/DfRKi6okqGd/2PRwDyTkJXR+LfAGJBXiMbBVUigkU=) 2: 8790EFE9518BF8664B34E1227585F3516FDC5367.crl (hash: 93k5zFB5evaO3FN4m6bTkdVCeNCXq8rbJ81FCPFf9fw=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/7e8cbdc8-d195-4c7d-b3e8-0a8fbae8c284/0/8790EFE9518BF8664B34E1227585F3516FDC5367.crl rsync://repo-rpki.idnic.net/repo/7e8cbdc8-d195-4c7d-b3e8-0a8fbae8c284/0/8790EFE9518BF8664B34E1227585F3516FDC5367.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8790EFE9518BF8664B34E1227585F3516FDC5367.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 07 Sep 2025 01:22:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 18:48:bd:da:bc:bb:82:04:c8:fc:0e:bd:8d:3f:30:55:30:58:c3:b7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8790EFE9518BF8664B34E1227585F3516FDC5367 Validity Not Before: Sep 3 20:56:30 2025 GMT Not After : Sep 7 01:22:30 2025 GMT Subject: CN=5899916D5358E85F6D9EE447BA741E4003A00979 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:7c:b0:d3:e3:df:64:98:55:33:ce:a6:ba:5c: e8:c7:1f:a4:b3:fd:75:57:0b:4e:53:d7:2c:61:c0: a6:72:6a:d5:99:8d:19:0f:58:e5:5b:d6:80:1e:9e: 3f:25:d4:5e:e2:36:0e:c9:ff:f6:84:84:e4:38:59: 47:91:f2:fd:4c:b1:d3:38:f2:96:35:88:72:82:bd: 37:02:75:8d:83:c4:b5:be:77:12:d8:d8:2a:b5:42: c5:cf:e1:b0:f3:06:d2:4e:9e:06:71:ee:96:fa:d1: 7a:71:46:ce:65:ad:f7:17:2e:85:ec:e3:4c:4c:a0: 2f:47:93:de:a5:7c:a0:40:d7:a6:80:02:79:e1:c9: d0:f2:a2:2c:39:b7:79:75:83:e4:0a:59:e7:09:e1: f9:f4:4b:bb:60:c4:18:33:c7:63:ef:aa:9e:23:b9: e0:31:d5:7c:e6:48:2c:a4:cb:7c:5c:6a:63:ca:01: 12:e7:84:e5:39:99:c5:e4:cf:4e:c7:39:50:ef:28: 1c:2f:3d:78:7f:b7:b7:a3:9d:52:fa:48:25:27:c7: 16:00:89:13:9e:0b:69:7e:49:49:32:be:b5:a5:b0: df:2e:7d:e9:34:12:d0:79:41:b0:3f:e5:a9:3e:88: af:e2:bd:ee:4d:1b:16:65:52:50:f0:e4:25:b3:1e: cd:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:99:91:6D:53:58:E8:5F:6D:9E:E4:47:BA:74:1E:40:03:A0:09:79 X509v3 Authority Key Identifier: keyid:87:90:EF:E9:51:8B:F8:66:4B:34:E1:22:75:85:F3:51:6F:DC:53:67 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/7e8cbdc8-d195-4c7d-b3e8-0a8fbae8c284/0/8790EFE9518BF8664B34E1227585F3516FDC5367.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8790EFE9518BF8664B34E1227585F3516FDC5367.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/7e8cbdc8-d195-4c7d-b3e8-0a8fbae8c284/0/8790EFE9518BF8664B34E1227585F3516FDC5367.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8f:97:2e:a9:ff:ce:69:2b:de:a3:db:2d:e8:df:ee:b5:5d:d9: 5b:db:35:0e:0a:ce:07:04:ae:cb:90:36:95:09:4a:89:18:91: c3:ad:9d:d8:9e:0c:46:b9:34:ff:59:e2:8d:42:21:e3:7c:11: 30:ea:76:46:7e:a0:62:fb:1c:f9:4b:bb:f6:fb:db:1e:81:e8: de:2c:bc:5d:95:ef:99:45:5b:f0:37:23:a4:b6:0b:77:f2:d0: cc:f7:43:03:ac:fa:1a:0a:12:50:c7:a8:93:3b:a3:c3:53:f2: ac:79:13:7e:02:be:e6:5c:9b:b4:e5:24:88:85:b1:ce:f4:f8: b0:78:f7:ce:e1:9a:c8:88:22:d6:e2:2b:c7:15:61:01:ce:87: 3f:20:bf:07:21:6a:f7:48:4e:ae:ce:9e:1a:82:31:2a:f6:cf: 97:cf:de:e3:8f:27:0b:89:4a:3f:32:46:18:07:ab:a1:bc:80: 11:5b:a4:7c:76:63:74:eb:5d:33:d7:58:30:43:32:f4:d6:07: f0:fe:7b:ea:8a:5e:fd:db:22:9e:fb:5b:17:6b:b1:e5:60:7c: 7f:1a:10:ce:72:46:4b:c8:9e:3d:f1:f8:3c:f2:8a:b2:9e:e0: 98:9a:a2:58:b4:d4:87:6a:9f:14:ea:71:cd:0a:43:65:60:77: c0:b7:71:f9 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUGEi92ry7ggTI/A69jT8wVTBYw7cwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODc5MEVGRTk1MThCRjg2NjRCMzRFMTIyNzU4NUYzNTE2 RkRDNTM2NzAeFw0yNTA5MDMyMDU2MzBaFw0yNTA5MDcwMTIyMzBaMDMxMTAvBgNV BAMTKDU4OTk5MTZENTM1OEU4NUY2RDlFRTQ0N0JBNzQxRTQwMDNBMDA5NzkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCffLDT499kmFUzzqa6XOjHH6Sz /XVXC05T1yxhwKZyatWZjRkPWOVb1oAenj8l1F7iNg7J//aEhOQ4WUeR8v1MsdM4 8pY1iHKCvTcCdY2DxLW+dxLY2Cq1QsXP4bDzBtJOngZx7pb60XpxRs5lrfcXLoXs 40xMoC9Hk96lfKBA16aAAnnhydDyoiw5t3l1g+QKWecJ4fn0S7tgxBgzx2Pvqp4j ueAx1XzmSCyky3xcamPKARLnhOU5mcXkz07HOVDvKBwvPXh/t7ejnVL6SCUnxxYA iROeC2l+SUkyvrWlsN8ufek0EtB5QbA/5ak+iK/ive5NGxZlUlDw5CWzHs3zAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUWJmRbVNY6F9tnuRHunQeQAOgCXkwHwYDVR0j BBgwFoAUh5Dv6VGL+GZLNOEidYXzUW/cU2cwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 ZThjYmRjOC1kMTk1LTRjN2QtYjNlOC0wYThmYmFlOGMyODQvMC84NzkwRUZFOTUx OEJGODY2NEIzNEUxMjI3NTg1RjM1MTZGREM1MzY3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvODc5MEVGRTk1MThCRjg2NjRCMzRFMTIyNzU4NUYzNTE2RkRD NTM2Ny5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vN2U4Y2JkYzgtZDE5NS00YzdkLWIz ZTgtMGE4ZmJhZThjMjg0LzAvODc5MEVGRTk1MThCRjg2NjRCMzRFMTIyNzU4NUYz NTE2RkRDNTM2Ny5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAI+XLqn/zmkr3qPbLejf7rVd2VvbNQ4KzgcE rsuQNpUJSokYkcOtndieDEa5NP9Z4o1CIeN8ETDqdkZ+oGL7HPlLu/b72x6B6N4s vF2V75lFW/A3I6S2C3fy0Mz3QwOs+hoKElDHqJM7o8NT8qx5E34CvuZcm7TlJIiF sc70+LB4987hmsiIItbiK8cVYQHOhz8gvwchavdITq7OnhqCMSr2z5fP3uOPJwuJ Sj8yRhgHq6G8gBFbpHx2Y3TrXTPXWDBDMvTWB/D+e+qKXv3bIp77WxdrseVgfH8a EM5yRkvInj3x+DzyirKe4Jiaoli01IdqnxTqcc0KQ2Vgd8C3cfk= -----END CERTIFICATE-----Generated at Fri Sep 5 10:36:21 2025 by rpki-client