$ rpki-client -vvf repo-rpki.idnic.net/repo/83c891d7-4fcc-4770-82d4-367b87bb551e/0/F8C9E79ADDDE2928BC5FA27C3D621C1D93252169.mft File: F8C9E79ADDDE2928BC5FA27C3D621C1D93252169.mft (raw, json) Hash identifier: mN1YfjnUfxFZbcbzb57+kBbeeBt4Yi3CL0j7VuKixpk= Subject key identifier: CD:6B:8E:75:26:0E:0C:AD:38:F1:57:49:95:84:36:78:1B:C7:00:D3 Authority key identifier: F8:C9:E7:9A:DD:DE:29:28:BC:5F:A2:7C:3D:62:1C:1D:93:25:21:69 Certificate issuer: /CN=F8C9E79ADDDE2928BC5FA27C3D621C1D93252169 Certificate serial: 0141AF6BF390A2C076A6D5461CCD1E78530AF662 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/F8C9E79ADDDE2928BC5FA27C3D621C1D93252169.cer Subject info access: rsync://repo-rpki.idnic.net/repo/83c891d7-4fcc-4770-82d4-367b87bb551e/0/F8C9E79ADDDE2928BC5FA27C3D621C1D93252169.mft Manifest number: 0104 Signing time: Sat 30 Aug 2025 12:11:57 +0000 Manifest this update: Sat 30 Aug 2025 12:06:57 +0000 Manifest next update: Tue 02 Sep 2025 23:13:57 +0000 Files and hashes: 1: 3135372e31302e3137382e302f32342d3234203d3e20313532333435.roa (hash: +JuFG85/x7QzaCoYI5/f+ngEk0nIACmoHGyCt4qyPYU=) 2: F8C9E79ADDDE2928BC5FA27C3D621C1D93252169.crl (hash: 7JlX+fRAKLrulV6y1ktl4c6KDnMIev08PyD1Ml8ayuA=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/83c891d7-4fcc-4770-82d4-367b87bb551e/0/F8C9E79ADDDE2928BC5FA27C3D621C1D93252169.crl rsync://repo-rpki.idnic.net/repo/83c891d7-4fcc-4770-82d4-367b87bb551e/0/F8C9E79ADDDE2928BC5FA27C3D621C1D93252169.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/F8C9E79ADDDE2928BC5FA27C3D621C1D93252169.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 02 Sep 2025 02:27:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:41:af:6b:f3:90:a2:c0:76:a6:d5:46:1c:cd:1e:78:53:0a:f6:62 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F8C9E79ADDDE2928BC5FA27C3D621C1D93252169 Validity Not Before: Aug 30 12:06:57 2025 GMT Not After : Sep 2 23:13:57 2025 GMT Subject: CN=CD6B8E75260E0CAD38F15749958436781BC700D3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:e1:ad:92:5a:0f:29:80:f9:db:55:8c:7b:d8: 91:24:e5:52:e8:cf:d8:d0:97:7f:c5:e2:70:05:78: 1b:24:05:32:d6:ae:54:e7:db:6c:54:28:29:53:de: 28:0a:ed:2b:63:b4:6f:47:be:55:f1:2d:b4:de:59: 3b:4b:c0:39:31:a7:a3:c1:8e:23:3b:a8:0b:43:93: 07:55:a5:90:4e:66:b4:13:11:9f:28:45:dd:a6:88: 08:57:ec:45:fc:88:ca:34:ff:ea:da:8a:29:c2:05: f2:e3:6b:39:c2:9d:7a:a3:8c:ed:2f:c6:6e:4d:16: 28:df:45:16:7c:3e:3c:94:45:49:be:53:29:8d:7a: 99:31:9d:dd:b2:e6:92:b2:6c:f7:da:d3:a6:a3:4c: f0:43:99:75:1d:0e:67:46:6c:1d:77:2f:86:85:32: 45:01:71:fb:08:f7:20:94:27:1d:15:cb:6b:ed:f1: 8c:ee:1a:8f:ab:b7:cf:7c:b2:4c:d6:cc:92:0c:b9: 5a:77:e4:53:0d:fb:0f:9f:cb:68:b5:64:b8:4b:3f: 29:fe:4c:51:fb:18:54:63:c6:20:e5:11:8c:3c:ea: eb:a6:e5:b3:f1:c5:f0:10:14:13:79:7c:d3:e6:6d: 4c:ff:3a:3b:00:1e:3a:c3:b2:a6:b0:a1:6b:fa:3e: 3a:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CD:6B:8E:75:26:0E:0C:AD:38:F1:57:49:95:84:36:78:1B:C7:00:D3 X509v3 Authority Key Identifier: keyid:F8:C9:E7:9A:DD:DE:29:28:BC:5F:A2:7C:3D:62:1C:1D:93:25:21:69 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/83c891d7-4fcc-4770-82d4-367b87bb551e/0/F8C9E79ADDDE2928BC5FA27C3D621C1D93252169.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/F8C9E79ADDDE2928BC5FA27C3D621C1D93252169.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/83c891d7-4fcc-4770-82d4-367b87bb551e/0/F8C9E79ADDDE2928BC5FA27C3D621C1D93252169.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 38:23:3d:2b:03:ca:2c:5e:9d:3f:82:b4:97:af:67:f3:01:dd: b0:29:36:d6:44:15:ec:8f:6a:db:0c:00:fe:ee:b3:28:8f:04: b7:c7:ae:d2:06:c6:56:fc:ee:85:95:2c:a6:1a:83:83:0b:96: e4:43:51:fe:f2:3c:65:86:56:f6:c0:c0:04:25:e2:4d:cb:50: ef:80:27:e4:6a:b5:4d:0a:7e:07:51:9f:78:38:99:49:04:d5: 24:58:86:81:bc:24:8a:51:dc:d3:5a:65:ec:8a:f0:5e:4b:8f: cd:64:4b:d5:22:32:cb:33:d3:f2:8a:ec:06:66:c6:86:74:11: 4b:3e:6d:19:4e:2f:dd:9b:b5:cb:b4:ce:88:f8:d7:3a:cd:df: 67:15:61:ca:3f:53:e8:e2:73:5a:ee:ce:ad:d4:bf:12:8a:3d: 1a:ad:87:bb:55:8a:1a:19:96:7a:04:32:22:cd:91:e9:c2:9d: db:80:3d:8f:6f:0c:12:11:47:0f:4a:97:44:2d:5e:15:e7:cf: 7f:7d:1e:0b:b0:8d:60:94:c1:be:1c:63:7c:28:38:cc:9b:f8: 6f:be:c5:6f:df:b7:63:07:f6:a8:11:4c:7c:c9:1c:11:07:2f: b4:12:d0:b4:e4:95:4e:b9:67:bc:36:0b:b4:1b:3b:1a:b6:30: 6c:5c:ab:ab -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUAUGva/OQosB2ptVGHM0eeFMK9mIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjhDOUU3OUFERERFMjkyOEJDNUZBMjdDM0Q2MjFDMUQ5 MzI1MjE2OTAeFw0yNTA4MzAxMjA2NTdaFw0yNTA5MDIyMzEzNTdaMDMxMTAvBgNV BAMTKENENkI4RTc1MjYwRTBDQUQzOEYxNTc0OTk1ODQzNjc4MUJDNzAwRDMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCq4a2SWg8pgPnbVYx72JEk5VLo z9jQl3/F4nAFeBskBTLWrlTn22xUKClT3igK7StjtG9HvlXxLbTeWTtLwDkxp6PB jiM7qAtDkwdVpZBOZrQTEZ8oRd2miAhX7EX8iMo0/+raiinCBfLjaznCnXqjjO0v xm5NFijfRRZ8PjyURUm+UymNepkxnd2y5pKybPfa06ajTPBDmXUdDmdGbB13L4aF MkUBcfsI9yCUJx0Vy2vt8YzuGo+rt898skzWzJIMuVp35FMN+w+fy2i1ZLhLPyn+ TFH7GFRjxiDlEYw86uum5bPxxfAQFBN5fNPmbUz/OjsAHjrDsqawoWv6Pjq3AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUzWuOdSYODK048VdJlYQ2eBvHANMwHwYDVR0j BBgwFoAU+Mnnmt3eKSi8X6J8PWIcHZMlIWkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 M2M4OTFkNy00ZmNjLTQ3NzAtODJkNC0zNjdiODdiYjU1MWUvMC9GOEM5RTc5QURE REUyOTI4QkM1RkEyN0MzRDYyMUMxRDkzMjUyMTY5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvRjhDOUU3OUFERERFMjkyOEJDNUZBMjdDM0Q2MjFDMUQ5MzI1 MjE2OS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vODNjODkxZDctNGZjYy00NzcwLTgy ZDQtMzY3Yjg3YmI1NTFlLzAvRjhDOUU3OUFERERFMjkyOEJDNUZBMjdDM0Q2MjFD MUQ5MzI1MjE2OS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADgjPSsDyixenT+CtJevZ/MB3bApNtZEFeyP atsMAP7usyiPBLfHrtIGxlb87oWVLKYag4MLluRDUf7yPGWGVvbAwAQl4k3LUO+A J+RqtU0KfgdRn3g4mUkE1SRYhoG8JIpR3NNaZeyK8F5Lj81kS9UiMssz0/KK7AZm xoZ0EUs+bRlOL92btcu0zoj41zrN32cVYco/U+jic1ruzq3UvxKKPRqth7tVihoZ lnoEMiLNkenCnduAPY9vDBIRRw9Kl0QtXhXnz399HguwjWCUwb4cY3woOMyb+G++ xW/ft2MH9qgRTHzJHBEHL7QS0LTklU65Z7w2C7QbOxq2MGxcq6s= -----END CERTIFICATE-----Generated at Sun Aug 31 00:25:38 2025 by rpki-client