$ rpki-client -vvf repo-rpki.idnic.net/repo/8a2e5b69-adbd-4e2d-847d-374815581d86/0/8CFA88063D5C0A51C1D737A5170338865A245358.mft File: 8CFA88063D5C0A51C1D737A5170338865A245358.mft (raw, json) Hash identifier: 9/QNY2jyNEGIp+uUshxuCtS0NSIn3HPdyQ1AvAde0Ng= Subject key identifier: 63:31:0A:0A:9A:0E:6A:FD:CA:F5:B0:74:02:B4:14:A9:9C:F3:BE:EA Authority key identifier: 8C:FA:88:06:3D:5C:0A:51:C1:D7:37:A5:17:03:38:86:5A:24:53:58 Certificate issuer: /CN=8CFA88063D5C0A51C1D737A5170338865A245358 Certificate serial: 34401A56D8170E46D01D497DAB92893853CEBED3 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8CFA88063D5C0A51C1D737A5170338865A245358.cer Subject info access: rsync://repo-rpki.idnic.net/repo/8a2e5b69-adbd-4e2d-847d-374815581d86/0/8CFA88063D5C0A51C1D737A5170338865A245358.mft Manifest number: 0504 Signing time: Fri 05 Sep 2025 06:21:44 +0000 Manifest this update: Fri 05 Sep 2025 06:16:44 +0000 Manifest next update: Mon 08 Sep 2025 09:54:44 +0000 Files and hashes: 1: 8CFA88063D5C0A51C1D737A5170338865A245358.crl (hash: 6ZHuj8TnUrRFW8mdbYh1+N1NCKd/ji+4xF4TuIejqQg=) 2: 3130332e3132362e3230302e302f32322d3232203d3e20313338313133.roa (hash: iKqR4sdrDvQYzAbaXB9On/A/Jy5fdaFvtV4f3tabdnk=) 3: 3130332e3132362e3230322e302f32332d3233203d3e20313338313133.roa (hash: x7tsLph+/FB0QeKJjGm8RZPvo26S0bN0rsI7VAab3d8=) 4: 323430343a313034303a3a2f33322d3332203d3e20313338313133.roa (hash: IwOy6L011wgRp4Z43jUYFVOd/TCfuz6IilpFz+BTytc=) 5: 3130332e3132362e3230302e302f32332d3233203d3e20313338313133.roa (hash: OX5qJy0ELn8OIpv9cwcHP0OwwrzKVk8H6b2UKzBtyEg=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/8a2e5b69-adbd-4e2d-847d-374815581d86/0/8CFA88063D5C0A51C1D737A5170338865A245358.crl rsync://repo-rpki.idnic.net/repo/8a2e5b69-adbd-4e2d-847d-374815581d86/0/8CFA88063D5C0A51C1D737A5170338865A245358.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8CFA88063D5C0A51C1D737A5170338865A245358.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 08 Sep 2025 09:54:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 34:40:1a:56:d8:17:0e:46:d0:1d:49:7d:ab:92:89:38:53:ce:be:d3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8CFA88063D5C0A51C1D737A5170338865A245358 Validity Not Before: Sep 5 06:16:44 2025 GMT Not After : Sep 8 09:54:44 2025 GMT Subject: CN=63310A0A9A0E6AFDCAF5B07402B414A99CF3BEEA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:b2:b1:49:66:81:e2:4d:f0:d6:44:43:4e:70: a4:44:af:69:6c:74:8e:6a:14:98:4a:44:ad:93:f5: e9:a0:78:12:eb:80:32:70:f4:ce:7f:09:33:88:3a: 42:21:3d:63:78:a4:ce:01:b2:e4:62:02:84:24:49: d7:a9:10:22:5c:9a:bf:85:7e:f5:49:25:93:a6:f8: 96:02:bc:70:37:82:49:ad:be:4c:33:84:3d:65:a9: 73:a9:56:26:c7:7e:09:9a:62:df:7e:85:f5:6c:3c: df:18:55:68:31:05:9b:a1:9d:c2:cd:75:6d:a0:9c: d7:03:84:d3:4d:8b:77:56:5a:76:87:a6:61:cf:c6: 5b:b9:2b:05:69:2c:d4:72:d2:a2:1e:2d:aa:77:c1: 0d:99:3e:36:99:32:6d:98:52:a1:f2:06:a5:49:a3: 50:01:99:be:c3:fa:63:19:ea:11:1c:0f:d0:c6:10: 7e:56:2c:16:5b:6a:d2:81:1a:d0:43:7f:29:da:d7: 3b:8a:a3:a4:e4:41:f7:51:bb:29:61:8a:4e:29:60: f1:af:c6:e6:65:47:94:ca:4a:d9:46:c7:55:f1:71: 64:a3:7d:2f:9e:f8:ac:28:41:ec:34:ca:a8:d3:47: f3:d4:c4:aa:f7:a9:b1:a7:83:8a:f0:48:f5:bd:cf: 33:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 63:31:0A:0A:9A:0E:6A:FD:CA:F5:B0:74:02:B4:14:A9:9C:F3:BE:EA X509v3 Authority Key Identifier: keyid:8C:FA:88:06:3D:5C:0A:51:C1:D7:37:A5:17:03:38:86:5A:24:53:58 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/8a2e5b69-adbd-4e2d-847d-374815581d86/0/8CFA88063D5C0A51C1D737A5170338865A245358.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8CFA88063D5C0A51C1D737A5170338865A245358.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/8a2e5b69-adbd-4e2d-847d-374815581d86/0/8CFA88063D5C0A51C1D737A5170338865A245358.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 80:ee:06:bb:1d:11:01:1b:09:5e:53:31:7a:24:c4:22:ac:a9: b2:e9:59:40:b9:e8:6c:b1:61:4e:4e:5d:23:5a:26:9c:ac:ca: ce:b5:8f:b3:98:3f:5a:e7:4f:97:c7:ba:8b:2a:fd:4f:05:3a: 80:53:12:ed:d9:e8:91:42:3e:fa:e1:3d:24:43:1f:cd:7b:fb: f1:36:00:ff:4e:9c:9c:c4:87:22:93:5e:c6:a8:e8:d6:65:ec: 06:88:60:a9:70:e9:e1:6d:c2:52:47:5f:29:82:e5:a0:fe:71: 9a:d5:1d:58:49:e0:46:f5:0d:09:e5:d1:ba:e2:cd:b4:80:34: 01:70:d1:f8:dd:86:90:e3:1e:98:aa:ab:f5:d0:ab:fc:42:76: 45:6c:e4:c7:35:3f:68:52:c3:fa:bd:e5:d3:b9:bd:1b:99:15: 4f:d5:99:f6:31:f3:d0:2f:6c:2d:26:77:bf:e2:e9:05:a9:ed: 11:40:c7:45:b7:91:b6:96:a6:70:e2:66:53:fd:f3:79:d8:f1: ac:d7:d0:90:b1:23:a0:59:56:f3:b9:d0:6f:a6:0a:9a:11:9a: 07:bd:05:cc:08:4a:82:65:0b:ae:aa:df:81:c8:2d:94:05:b0: 32:47:16:69:a4:65:75:a6:20:81:0c:8f:cf:5d:76:f3:3e:0e: 74:2c:47:0d -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUNEAaVtgXDkbQHUl9q5KJOFPOvtMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOENGQTg4MDYzRDVDMEE1MUMxRDczN0E1MTcwMzM4ODY1 QTI0NTM1ODAeFw0yNTA5MDUwNjE2NDRaFw0yNTA5MDgwOTU0NDRaMDMxMTAvBgNV BAMTKDYzMzEwQTBBOUEwRTZBRkRDQUY1QjA3NDAyQjQxNEE5OUNGM0JFRUEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDYsrFJZoHiTfDWRENOcKREr2ls dI5qFJhKRK2T9emgeBLrgDJw9M5/CTOIOkIhPWN4pM4BsuRiAoQkSdepECJcmr+F fvVJJZOm+JYCvHA3gkmtvkwzhD1lqXOpVibHfgmaYt9+hfVsPN8YVWgxBZuhncLN dW2gnNcDhNNNi3dWWnaHpmHPxlu5KwVpLNRy0qIeLap3wQ2ZPjaZMm2YUqHyBqVJ o1ABmb7D+mMZ6hEcD9DGEH5WLBZbatKBGtBDfyna1zuKo6TkQfdRuylhik4pYPGv xuZlR5TKStlGx1XxcWSjfS+e+KwoQew0yqjTR/PUxKr3qbGng4rwSPW9zzPPAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUYzEKCpoOav3K9bB0ArQUqZzzvuowHwYDVR0j BBgwFoAUjPqIBj1cClHB1zelFwM4hlokU1gwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 YTJlNWI2OS1hZGJkLTRlMmQtODQ3ZC0zNzQ4MTU1ODFkODYvMC84Q0ZBODgwNjNE NUMwQTUxQzFENzM3QTUxNzAzMzg4NjVBMjQ1MzU4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOENGQTg4MDYzRDVDMEE1MUMxRDczN0E1MTcwMzM4ODY1QTI0 NTM1OC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOGEyZTViNjktYWRiZC00ZTJkLTg0 N2QtMzc0ODE1NTgxZDg2LzAvOENGQTg4MDYzRDVDMEE1MUMxRDczN0E1MTcwMzM4 ODY1QTI0NTM1OC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIDuBrsdEQEbCV5TMXokxCKsqbLpWUC56Gyx YU5OXSNaJpysys61j7OYP1rnT5fHuosq/U8FOoBTEu3Z6JFCPvrhPSRDH817+/E2 AP9OnJzEhyKTXsao6NZl7AaIYKlw6eFtwlJHXymC5aD+cZrVHVhJ4Eb1DQnl0bri zbSANAFw0fjdhpDjHpiqq/XQq/xCdkVs5Mc1P2hSw/q95dO5vRuZFU/VmfYx89Av bC0md7/i6QWp7RFAx0W3kbaWpnDiZlP983nY8azX0JCxI6BZVvO50G+mCpoRmge9 BcwISoJlC66q34HILZQFsDJHFmmkZXWmIIEMj89ddvM+DnQsRw0= -----END CERTIFICATE-----Generated at Fri Sep 5 10:39:40 2025 by rpki-client