$ rpki-client -vvf repo-rpki.idnic.net/repo/88788a8b-541b-4cbf-bab9-8dc377bc1284/0/8208317A24AB4CD828CD8855F81F3EF2B53CC681.mft File: 8208317A24AB4CD828CD8855F81F3EF2B53CC681.mft (raw, json) Hash identifier: RiyAy+nq0/lABMJTRC1SDZp7g9OYNyfomo39XfQSueA= Subject key identifier: 9A:F6:14:B6:30:CF:F0:26:55:D0:92:1F:92:C6:C8:62:6A:CA:DE:41 Authority key identifier: 82:08:31:7A:24:AB:4C:D8:28:CD:88:55:F8:1F:3E:F2:B5:3C:C6:81 Certificate issuer: /CN=8208317A24AB4CD828CD8855F81F3EF2B53CC681 Certificate serial: 06BF93C65F4BBEA82E2E0CF0DB6C082E2D8A4DB3 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8208317A24AB4CD828CD8855F81F3EF2B53CC681.cer Subject info access: rsync://repo-rpki.idnic.net/repo/88788a8b-541b-4cbf-bab9-8dc377bc1284/0/8208317A24AB4CD828CD8855F81F3EF2B53CC681.mft Manifest number: 017E Signing time: Fri 05 Sep 2025 14:52:08 +0000 Manifest this update: Fri 05 Sep 2025 14:47:08 +0000 Manifest next update: Mon 08 Sep 2025 18:29:08 +0000 Files and hashes: 1: 3130332e3131342e3134342e302f32342d3234203d3e20313337333531.roa (hash: ty2A/+XUIZKKt+5K+zVnVNMiG2s1JjDQEBRNkGaNrQE=) 2: 8208317A24AB4CD828CD8855F81F3EF2B53CC681.crl (hash: snbnIuIFXJup16nD0K+WdOqhMVp3y5RG9YS4UvvG5tk=) 3: 323030313a6466343a663930303a3a2f34382d3438203d3e20313337333531.roa (hash: b4NjxQmSbJ+wk760b/yGVrpvatI7XP4yXIQB6LdeYtw=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/88788a8b-541b-4cbf-bab9-8dc377bc1284/0/8208317A24AB4CD828CD8855F81F3EF2B53CC681.crl rsync://repo-rpki.idnic.net/repo/88788a8b-541b-4cbf-bab9-8dc377bc1284/0/8208317A24AB4CD828CD8855F81F3EF2B53CC681.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8208317A24AB4CD828CD8855F81F3EF2B53CC681.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 08 Sep 2025 18:29:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 06:bf:93:c6:5f:4b:be:a8:2e:2e:0c:f0:db:6c:08:2e:2d:8a:4d:b3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8208317A24AB4CD828CD8855F81F3EF2B53CC681 Validity Not Before: Sep 5 14:47:08 2025 GMT Not After : Sep 8 18:29:08 2025 GMT Subject: CN=9AF614B630CFF02655D0921F92C6C8626ACADE41 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:73:11:16:82:cb:77:b7:2a:13:14:0e:96:69: 3a:4e:41:c2:7a:63:01:ea:19:06:0d:0d:6d:d2:6f: 47:bd:14:25:59:ef:4f:0f:4e:21:6b:db:b2:cd:17: b4:69:9c:1a:66:ba:bd:5e:3c:af:07:e8:24:ba:9e: 01:73:80:63:72:ed:1e:af:74:75:ec:29:d4:17:55: 7f:89:e7:3b:23:ab:2b:d7:49:0b:b0:96:73:e7:6e: c5:96:10:57:aa:83:35:d8:b9:d4:84:78:12:9d:ec: 47:49:d0:d3:d9:ba:ff:fb:4b:1d:14:f1:e1:79:8d: f4:60:e2:b3:1f:6d:7d:a5:b1:f3:b6:c1:dc:2b:40: 69:ff:d4:14:62:82:37:43:e2:10:ca:1a:86:27:f3: 0b:d8:a5:0e:c6:04:31:b8:d3:db:de:2c:18:e4:d7: 8f:23:77:f6:6d:5e:dd:4e:bf:54:6f:9c:3e:3f:e4: d0:52:85:e5:1c:14:5e:50:81:3d:fc:a7:b9:1d:57: a9:72:ec:5c:ef:80:87:f6:e2:12:09:80:d1:9d:22: bb:99:ee:fb:9c:13:3d:1a:34:0a:10:48:25:42:aa: 75:9b:1a:e9:ab:93:58:ce:ae:0a:73:18:c7:a8:7d: 4b:3c:11:91:00:b2:98:ac:15:6c:d1:af:6b:79:5a: 9c:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9A:F6:14:B6:30:CF:F0:26:55:D0:92:1F:92:C6:C8:62:6A:CA:DE:41 X509v3 Authority Key Identifier: keyid:82:08:31:7A:24:AB:4C:D8:28:CD:88:55:F8:1F:3E:F2:B5:3C:C6:81 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/88788a8b-541b-4cbf-bab9-8dc377bc1284/0/8208317A24AB4CD828CD8855F81F3EF2B53CC681.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8208317A24AB4CD828CD8855F81F3EF2B53CC681.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/88788a8b-541b-4cbf-bab9-8dc377bc1284/0/8208317A24AB4CD828CD8855F81F3EF2B53CC681.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 93:b9:63:e4:81:0f:e5:6a:5d:60:0d:fe:f2:71:8e:d0:01:d5: b2:f7:e6:08:d3:0b:87:4c:5a:5c:44:a2:3a:7f:ab:30:46:1f: 2b:d7:b8:15:81:5b:42:79:4e:47:7a:c7:01:0a:64:4b:1c:7e: d1:ef:96:a1:2a:bb:59:2a:78:0a:07:eb:11:d4:21:2c:8a:81: 1d:e1:d2:ec:a6:ca:f5:f4:13:9c:06:bb:27:04:8c:4c:bf:e0: c4:15:3f:64:72:eb:2f:7b:83:1c:c5:55:bc:21:e6:53:20:4c: 42:86:ed:b5:04:62:13:ba:e2:1d:ae:60:fe:f8:2c:12:50:c6: 6d:f9:12:94:e5:8c:78:e8:28:1c:e4:46:37:ff:43:0d:88:6f: aa:82:10:2d:52:ea:44:2b:68:54:b0:64:30:25:81:54:f4:ae: 2b:78:03:d5:5e:80:2a:68:75:08:1a:ae:f3:c7:dc:95:a8:ca: f2:c8:a6:9c:54:00:a0:3f:21:c6:51:30:85:61:52:15:53:ff: 21:2e:8d:07:af:c3:15:39:06:a4:e8:b4:e6:cb:69:97:a8:49: a6:ae:ed:dc:d1:27:38:bf:11:ff:00:8b:dc:ae:46:a0:2b:e6: 30:0b:15:dd:c5:76:70:1d:16:2d:e2:99:ac:be:80:64:c8:a3: 93:05:fa:e7 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUBr+Txl9LvqguLgzw22wILi2KTbMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODIwODMxN0EyNEFCNENEODI4Q0Q4ODU1RjgxRjNFRjJC NTNDQzY4MTAeFw0yNTA5MDUxNDQ3MDhaFw0yNTA5MDgxODI5MDhaMDMxMTAvBgNV BAMTKDlBRjYxNEI2MzBDRkYwMjY1NUQwOTIxRjkyQzZDODYyNkFDQURFNDEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDicxEWgst3tyoTFA6WaTpOQcJ6 YwHqGQYNDW3Sb0e9FCVZ708PTiFr27LNF7RpnBpmur1ePK8H6CS6ngFzgGNy7R6v dHXsKdQXVX+J5zsjqyvXSQuwlnPnbsWWEFeqgzXYudSEeBKd7EdJ0NPZuv/7Sx0U 8eF5jfRg4rMfbX2lsfO2wdwrQGn/1BRigjdD4hDKGoYn8wvYpQ7GBDG409veLBjk 148jd/ZtXt1Ov1RvnD4/5NBSheUcFF5QgT38p7kdV6ly7FzvgIf24hIJgNGdIruZ 7vucEz0aNAoQSCVCqnWbGumrk1jOrgpzGMeofUs8EZEAspisFWzRr2t5WpyzAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUmvYUtjDP8CZV0JIfksbIYmrK3kEwHwYDVR0j BBgwFoAUgggxeiSrTNgozYhV+B8+8rU8xoEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 ODc4OGE4Yi01NDFiLTRjYmYtYmFiOS04ZGMzNzdiYzEyODQvMC84MjA4MzE3QTI0 QUI0Q0Q4MjhDRDg4NTVGODFGM0VGMkI1M0NDNjgxLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvODIwODMxN0EyNEFCNENEODI4Q0Q4ODU1RjgxRjNFRjJCNTND QzY4MS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vODg3ODhhOGItNTQxYi00Y2JmLWJh YjktOGRjMzc3YmMxMjg0LzAvODIwODMxN0EyNEFCNENEODI4Q0Q4ODU1RjgxRjNF RjJCNTNDQzY4MS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJO5Y+SBD+VqXWAN/vJxjtAB1bL35gjTC4dM WlxEojp/qzBGHyvXuBWBW0J5Tkd6xwEKZEscftHvlqEqu1kqeAoH6xHUISyKgR3h 0uymyvX0E5wGuycEjEy/4MQVP2Ry6y97gxzFVbwh5lMgTEKG7bUEYhO64h2uYP74 LBJQxm35EpTljHjoKBzkRjf/Qw2Ib6qCEC1S6kQraFSwZDAlgVT0rit4A9VegCpo dQgarvPH3JWoyvLIppxUAKA/IcZRMIVhUhVT/yEujQevwxU5BqTotObLaZeoSaau 7dzRJzi/Ef8Ai9yuRqAr5jALFd3FdnAdFi3imay+gGTIo5MF+uc= -----END CERTIFICATE-----Generated at Sun Sep 7 14:04:39 2025 by rpki-client