$ rpki-client -vvf repo-rpki.idnic.net/repo/8116fbc9-b31c-4225-a697-4fedbc234db6/0/C0C8E7243E4E8DECD7A8EA1D61FD424108E8D3D5.mft File: C0C8E7243E4E8DECD7A8EA1D61FD424108E8D3D5.mft (raw, json) Hash identifier: Q08b4LONIZht+nhd1z3qEtdGDRvZHvcpkuQreQi9Y+4= Subject key identifier: EC:97:6A:74:3C:7E:B7:F9:46:2A:F1:78:59:F9:3E:54:89:81:B2:7E Authority key identifier: C0:C8:E7:24:3E:4E:8D:EC:D7:A8:EA:1D:61:FD:42:41:08:E8:D3:D5 Certificate issuer: /CN=C0C8E7243E4E8DECD7A8EA1D61FD424108E8D3D5 Certificate serial: 7C4F3277C19BC44EDE0E183501E218FBF927C2A2 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C0C8E7243E4E8DECD7A8EA1D61FD424108E8D3D5.cer Subject info access: rsync://repo-rpki.idnic.net/repo/8116fbc9-b31c-4225-a697-4fedbc234db6/0/C0C8E7243E4E8DECD7A8EA1D61FD424108E8D3D5.mft Manifest number: A0 Signing time: Sat 06 Sep 2025 10:31:24 +0000 Manifest this update: Sat 06 Sep 2025 10:26:24 +0000 Manifest next update: Tue 09 Sep 2025 11:47:24 +0000 Files and hashes: 1: 3130332e37352e3233372e302f32342d3234203d3e203634333130.roa (hash: WLCShlxfdsF203Qx2wOYYjy6P8cT8pTLxL//5fp4yiA=) 2: C0C8E7243E4E8DECD7A8EA1D61FD424108E8D3D5.crl (hash: DMlUK0ayM74ZWUPbFi2htTp1jf5+VgYwiHl2s22Iae8=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/8116fbc9-b31c-4225-a697-4fedbc234db6/0/C0C8E7243E4E8DECD7A8EA1D61FD424108E8D3D5.crl rsync://repo-rpki.idnic.net/repo/8116fbc9-b31c-4225-a697-4fedbc234db6/0/C0C8E7243E4E8DECD7A8EA1D61FD424108E8D3D5.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C0C8E7243E4E8DECD7A8EA1D61FD424108E8D3D5.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 09 Sep 2025 11:47:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7c:4f:32:77:c1:9b:c4:4e:de:0e:18:35:01:e2:18:fb:f9:27:c2:a2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C0C8E7243E4E8DECD7A8EA1D61FD424108E8D3D5 Validity Not Before: Sep 6 10:26:24 2025 GMT Not After : Sep 9 11:47:24 2025 GMT Subject: CN=EC976A743C7EB7F9462AF17859F93E548981B27E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:09:f3:4c:87:02:f2:f2:d4:af:a0:b9:f0:d8: e7:31:4f:3a:f7:c2:f8:77:fe:57:5b:cc:92:8d:c7: c2:5a:e5:a1:78:43:40:40:86:d4:98:fc:9a:45:7b: 4e:17:67:3e:48:75:fc:3a:d6:48:e1:73:1c:2b:57: c2:8f:29:c2:e1:37:54:89:99:a5:62:25:cb:61:2e: 13:96:7c:64:63:73:da:df:5e:83:5a:b2:9d:cf:90: 18:9d:9c:80:81:40:30:f1:e0:e0:ca:67:bd:9e:21: d9:75:6e:5b:75:bf:c3:91:16:c0:df:e3:bc:61:f9: 87:fa:83:2c:b9:6b:4b:b4:cb:c2:34:90:9a:9e:a1: ed:77:14:32:6a:e0:e3:45:73:99:11:cc:99:95:fd: d4:67:f6:50:4b:13:7c:9c:a9:e1:92:03:59:77:ab: a4:3b:e4:ea:4f:6d:85:7e:ae:08:7a:2d:b3:a4:55: 83:05:0d:0e:f0:5f:2a:b2:87:44:04:6f:21:53:da: e5:a8:97:33:df:b9:22:e0:89:0c:35:a0:83:f2:a8: fb:27:6d:b0:3b:2b:0e:b8:01:7c:6f:2d:5f:62:72: 62:61:b1:0c:57:15:6e:0d:9c:fc:13:0f:d6:92:5e: 37:d2:c3:8f:7f:af:ef:3d:8f:40:7d:80:9f:ab:33: ff:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EC:97:6A:74:3C:7E:B7:F9:46:2A:F1:78:59:F9:3E:54:89:81:B2:7E X509v3 Authority Key Identifier: keyid:C0:C8:E7:24:3E:4E:8D:EC:D7:A8:EA:1D:61:FD:42:41:08:E8:D3:D5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/8116fbc9-b31c-4225-a697-4fedbc234db6/0/C0C8E7243E4E8DECD7A8EA1D61FD424108E8D3D5.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C0C8E7243E4E8DECD7A8EA1D61FD424108E8D3D5.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/8116fbc9-b31c-4225-a697-4fedbc234db6/0/C0C8E7243E4E8DECD7A8EA1D61FD424108E8D3D5.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 14:42:ea:33:ab:6c:5e:69:7c:f4:8d:08:94:13:bc:00:a6:2d: 05:67:3e:19:b4:56:9b:e2:11:d9:07:83:b7:07:07:1a:74:60: 84:7b:8a:6c:8a:01:6b:50:70:21:81:47:69:ed:46:68:ae:13: 22:a5:f2:4c:4d:3d:62:35:2d:f8:be:a0:32:bc:0e:67:29:f6: 9b:30:5d:17:f1:39:b6:06:84:e0:ed:64:5d:d3:a5:9a:61:ff: e6:10:b2:31:b9:ce:6e:27:cd:12:75:9d:6a:44:db:38:e8:db: 57:ee:5f:aa:fc:55:4a:2d:5c:63:6b:8e:c5:39:09:41:0e:80: af:99:25:8b:34:5b:5f:cc:c2:7b:00:9c:4f:dc:75:c1:ea:25: f9:21:92:41:fa:8e:07:06:37:bc:a5:51:6a:a0:79:72:92:2e: 88:e0:4e:2f:42:db:4e:ab:59:c2:b8:12:1b:ef:c4:6f:9f:38: 57:c5:f6:37:e3:89:48:19:17:03:6d:17:08:70:14:23:a8:f7: 89:78:65:cc:c6:00:0c:af:18:22:04:cc:22:9c:8a:61:be:01: 94:54:a4:ec:cc:fc:bb:73:5c:92:2f:97:4a:06:2c:87:26:99: d2:06:80:59:49:72:0e:c8:97:24:01:5f:88:0a:f2:7d:d0:c7: 0a:bd:69:a6 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUfE8yd8GbxE7eDhg1AeIY+/knwqIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzBDOEU3MjQzRTRFOERFQ0Q3QThFQTFENjFGRDQyNDEw OEU4RDNENTAeFw0yNTA5MDYxMDI2MjRaFw0yNTA5MDkxMTQ3MjRaMDMxMTAvBgNV BAMTKEVDOTc2QTc0M0M3RUI3Rjk0NjJBRjE3ODU5RjkzRTU0ODk4MUIyN0UwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDMCfNMhwLy8tSvoLnw2OcxTzr3 wvh3/ldbzJKNx8Ja5aF4Q0BAhtSY/JpFe04XZz5Idfw61kjhcxwrV8KPKcLhN1SJ maViJcthLhOWfGRjc9rfXoNasp3PkBidnICBQDDx4ODKZ72eIdl1blt1v8ORFsDf 47xh+Yf6gyy5a0u0y8I0kJqeoe13FDJq4ONFc5kRzJmV/dRn9lBLE3ycqeGSA1l3 q6Q75OpPbYV+rgh6LbOkVYMFDQ7wXyqyh0QEbyFT2uWolzPfuSLgiQw1oIPyqPsn bbA7Kw64AXxvLV9icmJhsQxXFW4NnPwTD9aSXjfSw49/r+89j0B9gJ+rM/+DAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU7JdqdDx+t/lGKvF4Wfk+VImBsn4wHwYDVR0j BBgwFoAUwMjnJD5OjezXqOodYf1CQQjo09UwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 MTE2ZmJjOS1iMzFjLTQyMjUtYTY5Ny00ZmVkYmMyMzRkYjYvMC9DMEM4RTcyNDNF NEU4REVDRDdBOEVBMUQ2MUZENDI0MTA4RThEM0Q1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQzBDOEU3MjQzRTRFOERFQ0Q3QThFQTFENjFGRDQyNDEwOEU4 RDNENS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vODExNmZiYzktYjMxYy00MjI1LWE2 OTctNGZlZGJjMjM0ZGI2LzAvQzBDOEU3MjQzRTRFOERFQ0Q3QThFQTFENjFGRDQy NDEwOEU4RDNENS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABRC6jOrbF5pfPSNCJQTvACmLQVnPhm0Vpvi EdkHg7cHBxp0YIR7imyKAWtQcCGBR2ntRmiuEyKl8kxNPWI1Lfi+oDK8Dmcp9psw XRfxObYGhODtZF3TpZph/+YQsjG5zm4nzRJ1nWpE2zjo21fuX6r8VUotXGNrjsU5 CUEOgK+ZJYs0W1/MwnsAnE/cdcHqJfkhkkH6jgcGN7ylUWqgeXKSLojgTi9C206r WcK4EhvvxG+fOFfF9jfjiUgZFwNtFwhwFCOo94l4ZczGAAyvGCIEzCKcimG+AZRU pOzM/LtzXJIvl0oGLIcmmdIGgFlJcg7IlyQBX4gK8n3Qxwq9aaY= -----END CERTIFICATE-----Generated at Sun Sep 7 15:26:59 2025 by rpki-client