$ rpki-client -vvf repo-rpki.idnic.net/repo/908ab157-d827-49a8-bb86-28be131c3d26/0/8E2059B2D2448585D11ED2B0143FEFC0E9B2DA36.mft File: 8E2059B2D2448585D11ED2B0143FEFC0E9B2DA36.mft (raw, json) Hash identifier: NBt9hf64OCYJondFyt7vlwtkuftK8aJcilsClKxQ+jc= Subject key identifier: E6:01:75:58:86:C2:67:93:F2:DE:F0:C2:DA:E5:EB:8A:83:C1:8D:DD Authority key identifier: 8E:20:59:B2:D2:44:85:85:D1:1E:D2:B0:14:3F:EF:C0:E9:B2:DA:36 Certificate issuer: /CN=8E2059B2D2448585D11ED2B0143FEFC0E9B2DA36 Certificate serial: 7A4308DBACE05B4191214913937B720F4032A7F9 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/8E2059B2D2448585D11ED2B0143FEFC0E9B2DA36.cer Subject info access: rsync://repo-rpki.idnic.net/repo/908ab157-d827-49a8-bb86-28be131c3d26/0/8E2059B2D2448585D11ED2B0143FEFC0E9B2DA36.mft Manifest number: A9 Signing time: Sat 06 Sep 2025 13:40:46 +0000 Manifest this update: Sat 06 Sep 2025 13:35:46 +0000 Manifest next update: Tue 09 Sep 2025 15:41:46 +0000 Files and hashes: 1: 3136302e32322e3235302e302f32332d3233203d3e20313430343536.roa (hash: MO6/lQY/Nl8VnXin+gA+foQOLuvJOUz6SX7TNLs7MqE=) 2: 8E2059B2D2448585D11ED2B0143FEFC0E9B2DA36.crl (hash: iLgFkoL51ubxmT5frnsQkzRhEf8dbRXervnfYEyToNI=) 3: 3136302e32322e3235312e302f32342d3234203d3e20313430343536.roa (hash: k9ZzAkFQGvt+xqoKJ82nD9k3QBtwiwB5qwFg/LMZg2I=) 4: 3136302e32322e3235302e302f32342d3234203d3e20313430343536.roa (hash: oOhjxNchKYaSdtA4Y1DYNdIAblAIJ4R/DzgKf/zg2vo=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/908ab157-d827-49a8-bb86-28be131c3d26/0/8E2059B2D2448585D11ED2B0143FEFC0E9B2DA36.crl rsync://repo-rpki.idnic.net/repo/908ab157-d827-49a8-bb86-28be131c3d26/0/8E2059B2D2448585D11ED2B0143FEFC0E9B2DA36.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/8E2059B2D2448585D11ED2B0143FEFC0E9B2DA36.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 09 Sep 2025 15:41:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7a:43:08:db:ac:e0:5b:41:91:21:49:13:93:7b:72:0f:40:32:a7:f9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8E2059B2D2448585D11ED2B0143FEFC0E9B2DA36 Validity Not Before: Sep 6 13:35:46 2025 GMT Not After : Sep 9 15:41:46 2025 GMT Subject: CN=E601755886C26793F2DEF0C2DAE5EB8A83C18DDD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:e2:42:3b:cf:23:16:cf:55:de:7d:95:2b:93: bb:b8:1a:5a:cd:41:05:0c:83:58:73:6d:73:2b:df: cd:48:b6:b3:d9:05:8c:ba:7b:22:27:27:25:ef:a6: 19:66:40:3c:6e:3b:2e:94:4e:c6:68:29:e6:c7:d0: 65:ce:23:fa:6f:1b:9e:b1:b2:11:a6:90:0d:c3:66: e7:03:f9:09:df:8b:85:1a:5f:5a:ea:bb:67:4a:e7: 8c:42:e5:f0:17:5e:92:72:1e:d6:72:2d:00:bb:86: 75:c4:d7:ff:f7:de:75:82:a6:d8:e1:91:f3:b8:0b: b6:35:74:c4:e2:f8:60:1d:f2:e0:57:c1:46:ea:c6: b4:a7:36:c3:22:b8:a0:a5:be:a2:ac:f9:7c:4f:f4: 7a:85:48:94:e4:cd:3e:23:24:5b:88:a5:9c:9d:60: 74:59:9d:cd:e0:13:53:62:00:15:09:37:b5:67:2c: 82:9c:bf:a6:31:15:d1:8c:a0:44:eb:fb:2b:1a:f5: 4c:78:60:62:41:a2:e0:1a:72:6a:6a:83:23:ee:e8: 16:af:48:b2:51:2e:c3:de:ea:81:3c:6b:25:ef:cf: 57:b9:33:e0:6d:f1:21:c3:64:e1:85:89:c1:e6:9a: 8f:c2:08:4e:c9:a6:85:69:9e:b9:7e:39:a8:45:50: c8:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E6:01:75:58:86:C2:67:93:F2:DE:F0:C2:DA:E5:EB:8A:83:C1:8D:DD X509v3 Authority Key Identifier: keyid:8E:20:59:B2:D2:44:85:85:D1:1E:D2:B0:14:3F:EF:C0:E9:B2:DA:36 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/908ab157-d827-49a8-bb86-28be131c3d26/0/8E2059B2D2448585D11ED2B0143FEFC0E9B2DA36.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/8E2059B2D2448585D11ED2B0143FEFC0E9B2DA36.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/908ab157-d827-49a8-bb86-28be131c3d26/0/8E2059B2D2448585D11ED2B0143FEFC0E9B2DA36.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b0:a7:cd:8f:e6:85:ba:62:cf:aa:62:a5:4a:8d:89:49:80:75: 23:c3:58:13:49:20:f9:32:53:e1:c4:9b:8b:ba:1e:0e:2c:38: cd:fa:1c:9d:64:44:54:63:c4:64:70:1c:ca:12:64:c9:69:43: 8c:66:08:40:cc:3a:70:c0:d3:35:14:7f:7a:0f:da:63:dd:86: 82:9a:bd:56:a7:72:d6:25:aa:86:44:64:b2:27:4f:1f:e9:8a: 0e:f2:5f:86:08:09:52:5a:15:cd:99:32:ba:f5:f5:47:be:f9: ba:bb:70:7d:e4:46:67:37:b8:78:2f:0b:f4:d3:e6:87:88:9b: 89:72:77:45:57:90:89:cf:aa:96:f8:19:4e:53:85:01:62:ac: 54:37:af:84:4b:79:ef:a9:8c:79:02:cb:a6:55:99:5b:ce:1c: 83:a1:0e:93:67:3f:ba:cb:72:0c:f7:26:15:82:df:10:c5:b1: 0d:0c:43:5b:dd:ca:79:4a:a1:30:2c:68:99:c8:78:46:e8:e1: 89:ce:85:34:cd:10:73:a8:21:8c:22:0a:17:f2:16:04:a5:91: 76:e7:d1:f7:bf:ed:a0:f4:36:cc:38:d4:56:ee:b4:f1:ef:a5: 44:17:fb:9b:4c:f5:d4:a5:53:45:7c:51:97:40:76:00:13:96: 38:8a:fe:22 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUekMI26zgW0GRIUkTk3tyD0Ayp/kwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEUyMDU5QjJEMjQ0ODU4NUQxMUVEMkIwMTQzRkVGQzBF OUIyREEzNjAeFw0yNTA5MDYxMzM1NDZaFw0yNTA5MDkxNTQxNDZaMDMxMTAvBgNV BAMTKEU2MDE3NTU4ODZDMjY3OTNGMkRFRjBDMkRBRTVFQjhBODNDMThEREQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDI4kI7zyMWz1XefZUrk7u4GlrN QQUMg1hzbXMr381ItrPZBYy6eyInJyXvphlmQDxuOy6UTsZoKebH0GXOI/pvG56x shGmkA3DZucD+Qnfi4UaX1rqu2dK54xC5fAXXpJyHtZyLQC7hnXE1//33nWCptjh kfO4C7Y1dMTi+GAd8uBXwUbqxrSnNsMiuKClvqKs+XxP9HqFSJTkzT4jJFuIpZyd YHRZnc3gE1NiABUJN7VnLIKcv6YxFdGMoETr+ysa9Ux4YGJBouAacmpqgyPu6Bav SLJRLsPe6oE8ayXvz1e5M+Bt8SHDZOGFicHmmo/CCE7JpoVpnrl+OahFUMjBAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU5gF1WIbCZ5Py3vDC2uXrioPBjd0wHwYDVR0j BBgwFoAUjiBZstJEhYXRHtKwFD/vwOmy2jYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 MDhhYjE1Ny1kODI3LTQ5YTgtYmI4Ni0yOGJlMTMxYzNkMjYvMC84RTIwNTlCMkQy NDQ4NTg1RDExRUQyQjAxNDNGRUZDMEU5QjJEQTM2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvOEUyMDU5QjJEMjQ0ODU4NUQxMUVEMkIwMTQzRkVGQzBFOUIy REEzNi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOTA4YWIxNTctZDgyNy00OWE4LWJi ODYtMjhiZTEzMWMzZDI2LzAvOEUyMDU5QjJEMjQ0ODU4NUQxMUVEMkIwMTQzRkVG QzBFOUIyREEzNi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALCnzY/mhbpiz6pipUqNiUmAdSPDWBNJIPky U+HEm4u6Hg4sOM36HJ1kRFRjxGRwHMoSZMlpQ4xmCEDMOnDA0zUUf3oP2mPdhoKa vVanctYlqoZEZLInTx/pig7yX4YICVJaFc2ZMrr19Ue++bq7cH3kRmc3uHgvC/TT 5oeIm4lyd0VXkInPqpb4GU5ThQFirFQ3r4RLee+pjHkCy6ZVmVvOHIOhDpNnP7rL cgz3JhWC3xDFsQ0MQ1vdynlKoTAsaJnIeEbo4YnOhTTNEHOoIYwiChfyFgSlkXbn 0fe/7aD0Nsw41FbutPHvpUQX+5tM9dSlU0V8UZdAdgATljiK/iI= -----END CERTIFICATE-----Generated at Mon Sep 8 08:47:35 2025 by rpki-client