$ rpki-client -vvf repo-rpki.idnic.net/repo/81c09c9e-fe8a-4989-b5bb-ae419338f873/0/8137472FE4C7D48501352601D84D624E0EC41C19.mft File: 8137472FE4C7D48501352601D84D624E0EC41C19.mft (raw, json) Hash identifier: xONh/H8Ho1S/Zn+a7EPXn/M0fZfvKUkXIKUzcjwmjLU= Subject key identifier: 1E:2D:2B:37:AC:C3:1C:9D:09:CC:35:77:20:CE:AC:D0:4A:D0:FD:6D Authority key identifier: 81:37:47:2F:E4:C7:D4:85:01:35:26:01:D8:4D:62:4E:0E:C4:1C:19 Certificate issuer: /CN=8137472FE4C7D48501352601D84D624E0EC41C19 Certificate serial: 057CD57689BDE9C6BEB3D437645C8B47871CF34F Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/8137472FE4C7D48501352601D84D624E0EC41C19.cer Subject info access: rsync://repo-rpki.idnic.net/repo/81c09c9e-fe8a-4989-b5bb-ae419338f873/0/8137472FE4C7D48501352601D84D624E0EC41C19.mft Manifest number: 8C Signing time: Sat 19 Jul 2025 16:30:42 +0000 Manifest this update: Sat 19 Jul 2025 16:25:42 +0000 Manifest next update: Tue 22 Jul 2025 18:52:42 +0000 Files and hashes: 1: 8137472FE4C7D48501352601D84D624E0EC41C19.crl (hash: jGjKZ/g0H2lONL1/z4ePhp1F4xcI1VHIP0LDsyRRk0w=) 2: 3136302e32302e37362e302f32332d3234203d3e20313532383133.roa (hash: 4kXINOSVtSGjG6eeRCPr1tzpMPx3xypkpdeYlchZ0eU=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/81c09c9e-fe8a-4989-b5bb-ae419338f873/0/8137472FE4C7D48501352601D84D624E0EC41C19.crl rsync://repo-rpki.idnic.net/repo/81c09c9e-fe8a-4989-b5bb-ae419338f873/0/8137472FE4C7D48501352601D84D624E0EC41C19.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/8137472FE4C7D48501352601D84D624E0EC41C19.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 22 Jul 2025 18:52:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 05:7c:d5:76:89:bd:e9:c6:be:b3:d4:37:64:5c:8b:47:87:1c:f3:4f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8137472FE4C7D48501352601D84D624E0EC41C19 Validity Not Before: Jul 19 16:25:42 2025 GMT Not After : Jul 22 18:52:42 2025 GMT Subject: CN=1E2D2B37ACC31C9D09CC357720CEACD04AD0FD6D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:6a:ec:db:ba:96:19:3d:b0:fd:72:f3:15:80: f3:e6:f4:93:b0:8d:50:44:e6:e8:f2:57:c1:0a:2c: f7:48:a3:fd:fc:37:e0:34:62:58:40:9e:30:93:17: a3:8b:b4:cd:7a:73:46:6d:ea:11:77:1d:08:74:06: da:fa:44:85:fb:0f:ab:b5:b0:5f:23:ef:53:71:b3: 64:b0:6c:f3:b8:c3:30:85:ca:f4:2a:1d:75:73:8d: b5:f9:0f:0e:87:37:33:65:9a:57:83:0c:e3:b0:40: 9a:63:94:69:a4:ec:c5:a7:5e:91:e0:0f:27:fc:e4: bd:fd:44:10:ad:3b:ec:93:15:b9:ec:8e:45:57:27: d2:29:eb:4d:01:4e:56:57:6e:78:9a:08:c6:6f:97: 9f:10:2a:22:95:1a:d1:8b:68:38:c9:e6:e3:b9:c3: e0:b9:26:f1:3d:51:cb:2c:1b:5c:cf:88:d0:4a:a1: 18:25:66:96:0c:3e:b3:0c:87:05:c0:c9:12:7d:0e: 60:e3:28:9c:71:a8:76:cd:0f:a3:aa:c2:2e:3d:32: c9:54:a0:99:60:16:f3:58:7b:a6:05:3b:6c:18:07: 34:6c:96:b2:13:4b:90:f4:f6:76:7f:1c:e9:ca:d1: 89:ea:53:bd:08:cc:58:71:32:25:54:ff:02:e6:da: c8:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1E:2D:2B:37:AC:C3:1C:9D:09:CC:35:77:20:CE:AC:D0:4A:D0:FD:6D X509v3 Authority Key Identifier: keyid:81:37:47:2F:E4:C7:D4:85:01:35:26:01:D8:4D:62:4E:0E:C4:1C:19 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/81c09c9e-fe8a-4989-b5bb-ae419338f873/0/8137472FE4C7D48501352601D84D624E0EC41C19.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/8137472FE4C7D48501352601D84D624E0EC41C19.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/81c09c9e-fe8a-4989-b5bb-ae419338f873/0/8137472FE4C7D48501352601D84D624E0EC41C19.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 40:5b:ea:80:46:49:ee:a6:b3:39:b3:f9:a0:57:65:f4:b9:70: 9f:b5:ba:a8:83:eb:11:69:22:07:71:d1:42:3e:0d:bc:1d:b6: 59:8b:c3:87:a1:5d:34:8a:11:4a:4a:35:da:35:fd:ef:de:d4: bf:3a:2e:7f:59:82:bf:c6:a0:b4:2f:7b:f4:60:fd:45:a7:85: f6:38:2b:c0:fb:03:2a:6e:93:67:26:29:58:99:36:c9:e9:ea: 95:7a:c4:49:8e:13:f6:fc:91:83:0d:66:f9:89:42:4b:b8:85: 6d:14:68:46:59:fe:20:02:6c:16:d8:25:a3:35:05:ee:ae:01: 5f:1d:e4:45:08:29:d2:80:32:35:11:65:ea:60:0d:78:03:45: 7e:d5:2c:91:ca:cf:57:98:8f:91:ef:51:05:ff:2f:5e:8c:6f: 10:ca:7a:a4:f7:ba:ea:fa:28:44:53:1c:6c:e0:b5:b2:dd:0a: 7a:1a:1d:a3:95:50:1a:bc:c4:02:bb:36:a1:48:1c:92:b7:27: 2d:a7:51:95:fd:73:30:36:9e:02:a7:8f:01:be:78:5a:53:8a: 16:ab:3b:b0:31:e4:ab:46:44:35:b4:6f:bc:65:66:d9:97:c3: dd:93:1f:a7:e0:08:5e:7a:df:e9:ac:e3:2f:70:52:1d:e2:3f: 1a:0b:5a:49 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUBXzVdom96ca+s9Q3ZFyLR4cc808wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODEzNzQ3MkZFNEM3RDQ4NTAxMzUyNjAxRDg0RDYyNEUw RUM0MUMxOTAeFw0yNTA3MTkxNjI1NDJaFw0yNTA3MjIxODUyNDJaMDMxMTAvBgNV BAMTKDFFMkQyQjM3QUNDMzFDOUQwOUNDMzU3NzIwQ0VBQ0QwNEFEMEZENkQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDNauzbupYZPbD9cvMVgPPm9JOw jVBE5ujyV8EKLPdIo/38N+A0YlhAnjCTF6OLtM16c0Zt6hF3HQh0Btr6RIX7D6u1 sF8j71Nxs2SwbPO4wzCFyvQqHXVzjbX5Dw6HNzNlmleDDOOwQJpjlGmk7MWnXpHg Dyf85L39RBCtO+yTFbnsjkVXJ9Ip600BTlZXbniaCMZvl58QKiKVGtGLaDjJ5uO5 w+C5JvE9UcssG1zPiNBKoRglZpYMPrMMhwXAyRJ9DmDjKJxxqHbND6Oqwi49MslU oJlgFvNYe6YFO2wYBzRslrITS5D09nZ/HOnK0YnqU70IzFhxMiVU/wLm2silAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUHi0rN6zDHJ0JzDV3IM6s0ErQ/W0wHwYDVR0j BBgwFoAUgTdHL+TH1IUBNSYB2E1iTg7EHBkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 MWMwOWM5ZS1mZThhLTQ5ODktYjViYi1hZTQxOTMzOGY4NzMvMC84MTM3NDcyRkU0 QzdENDg1MDEzNTI2MDFEODRENjI0RTBFQzQxQzE5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvODEzNzQ3MkZFNEM3RDQ4NTAxMzUyNjAxRDg0RDYyNEUwRUM0 MUMxOS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vODFjMDljOWUtZmU4YS00OTg5LWI1 YmItYWU0MTkzMzhmODczLzAvODEzNzQ3MkZFNEM3RDQ4NTAxMzUyNjAxRDg0RDYy NEUwRUM0MUMxOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEBb6oBGSe6mszmz+aBXZfS5cJ+1uqiD6xFp Igdx0UI+DbwdtlmLw4ehXTSKEUpKNdo1/e/e1L86Ln9Zgr/GoLQve/Rg/UWnhfY4 K8D7Aypuk2cmKViZNsnp6pV6xEmOE/b8kYMNZvmJQku4hW0UaEZZ/iACbBbYJaM1 Be6uAV8d5EUIKdKAMjURZepgDXgDRX7VLJHKz1eYj5HvUQX/L16MbxDKeqT3uur6 KERTHGzgtbLdCnoaHaOVUBq8xAK7NqFIHJK3Jy2nUZX9czA2ngKnjwG+eFpTihar O7Ax5KtGRDW0b7xlZtmXw92TH6fgCF563+ms4y9wUh3iPxoLWkk= -----END CERTIFICATE-----Generated at Mon Jul 21 10:47:25 2025 by rpki-client