$ rpki-client -vvf repo-rpki.idnic.net/repo/927a6f34-1b6e-4e92-b2d2-0b9301a666a5/0/8DEDABAD21AD1A6BEF27E91FCEE30465563DFE72.mft File: 8DEDABAD21AD1A6BEF27E91FCEE30465563DFE72.mft (raw, json) Hash identifier: lMp+NlcajUCx561WiaseaE4RhvWu9X8NpoMvggGBth4= Subject key identifier: C0:C9:14:F7:F4:E1:C7:42:A9:27:BC:11:CF:DA:A7:55:FF:9E:58:33 Authority key identifier: 8D:ED:AB:AD:21:AD:1A:6B:EF:27:E9:1F:CE:E3:04:65:56:3D:FE:72 Certificate issuer: /CN=8DEDABAD21AD1A6BEF27E91FCEE30465563DFE72 Certificate serial: 17B79BFABA92020FC8E93803AEA3882386870CD3 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8DEDABAD21AD1A6BEF27E91FCEE30465563DFE72.cer Subject info access: rsync://repo-rpki.idnic.net/repo/927a6f34-1b6e-4e92-b2d2-0b9301a666a5/0/8DEDABAD21AD1A6BEF27E91FCEE30465563DFE72.mft Manifest number: 0504 Signing time: Sun 07 Sep 2025 13:22:14 +0000 Manifest this update: Sun 07 Sep 2025 13:17:14 +0000 Manifest next update: Wed 10 Sep 2025 18:30:14 +0000 Files and hashes: 1: 8DEDABAD21AD1A6BEF27E91FCEE30465563DFE72.crl (hash: 3A9G8M6FA8wm0iifBrCTkQ6WJJcOgd+Lkxm6uU4aLBg=) 2: 323430323a653330303a3a2f33322d3438203d3e20313331373036.roa (hash: EV88jOIELhWBAVSmJqvptwA4m5UyL3dS/vav1cA94d8=) 3: 3130332e3234372e31322e302f32322d3234203d3e20313331373036.roa (hash: mWjb/DW+b3X3xyLO8KMUDwzQ73HydHkJibyBar99dKU=) 4: 3132312e3130312e3132382e302f32312d3234203d3e20313331373036.roa (hash: LxNIC9GUMk4NDV//CAiwhidJ9aXKaAFBBW+ysgKoUy0=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/927a6f34-1b6e-4e92-b2d2-0b9301a666a5/0/8DEDABAD21AD1A6BEF27E91FCEE30465563DFE72.crl rsync://repo-rpki.idnic.net/repo/927a6f34-1b6e-4e92-b2d2-0b9301a666a5/0/8DEDABAD21AD1A6BEF27E91FCEE30465563DFE72.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8DEDABAD21AD1A6BEF27E91FCEE30465563DFE72.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 10 Sep 2025 10:23:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 17:b7:9b:fa:ba:92:02:0f:c8:e9:38:03:ae:a3:88:23:86:87:0c:d3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8DEDABAD21AD1A6BEF27E91FCEE30465563DFE72 Validity Not Before: Sep 7 13:17:14 2025 GMT Not After : Sep 10 18:30:14 2025 GMT Subject: CN=C0C914F7F4E1C742A927BC11CFDAA755FF9E5833 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:8f:a5:59:5f:5b:aa:86:7d:97:e3:2d:5b:1f: 4b:cd:cf:e4:62:c1:81:8c:fa:f2:2d:8d:40:d8:4c: 06:97:d7:d9:99:60:63:9e:ec:03:18:f1:d5:ba:fb: bd:2a:f0:c9:9b:f4:f8:2c:fd:91:ee:6b:13:12:d1: 83:c7:39:78:92:8b:6e:46:d9:24:e0:e6:57:32:45: 6a:a3:18:7a:47:e2:43:53:e8:12:38:f0:86:b9:89: a5:3f:18:88:8c:59:0c:d0:95:2e:41:2f:2d:bc:44: b8:4e:b0:b9:09:e3:a9:86:a7:c1:84:3c:85:02:87: 07:72:87:aa:0e:4c:28:4a:36:df:f9:2a:7d:b0:da: 61:fc:a6:fc:a6:60:f8:fc:1a:33:25:ac:69:92:86: 11:7b:8b:fd:92:70:f3:69:56:f9:60:85:0d:fd:5d: 80:5f:0e:a7:2f:5d:9f:04:09:14:12:4e:1e:b2:49: f7:df:5e:b0:ed:0f:4e:19:03:86:0d:3c:1b:8b:c2: 6a:9f:e9:b7:03:fe:eb:4d:36:79:40:c4:e0:97:80: 5a:41:98:f9:a8:34:5a:d5:39:a7:44:c5:c7:0e:d1: 1a:94:95:d7:f7:7d:fb:05:b4:00:a5:dc:22:47:c3: e9:79:09:fb:fc:b1:8d:fe:65:f1:09:49:6a:4b:35: 80:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C0:C9:14:F7:F4:E1:C7:42:A9:27:BC:11:CF:DA:A7:55:FF:9E:58:33 X509v3 Authority Key Identifier: keyid:8D:ED:AB:AD:21:AD:1A:6B:EF:27:E9:1F:CE:E3:04:65:56:3D:FE:72 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/927a6f34-1b6e-4e92-b2d2-0b9301a666a5/0/8DEDABAD21AD1A6BEF27E91FCEE30465563DFE72.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8DEDABAD21AD1A6BEF27E91FCEE30465563DFE72.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/927a6f34-1b6e-4e92-b2d2-0b9301a666a5/0/8DEDABAD21AD1A6BEF27E91FCEE30465563DFE72.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1c:be:85:68:a0:35:d4:78:1d:94:dd:b7:b8:8e:4c:34:df:e6: b0:80:82:37:3a:d1:d1:c4:c4:73:39:6c:7b:08:90:a9:5b:90: 76:1e:68:25:87:f3:bc:09:d5:8b:89:de:1a:c7:2a:fd:a2:e1: 32:e5:f4:79:f3:16:17:0d:54:9d:1e:11:e8:bb:d7:2c:49:e4: 2d:72:a9:dc:ba:f5:e4:44:49:3c:3e:de:3b:c0:39:82:2c:78: 55:4b:64:b4:3c:65:4c:13:69:ee:ee:ea:c9:25:69:c0:b8:70: 65:06:3d:67:35:97:45:0b:95:4f:ec:a4:cb:df:8b:31:ce:d2: 93:34:a5:df:aa:a5:d9:4e:1a:3a:f4:c0:b6:d3:3e:7e:b8:9b: 7a:6a:5b:ef:fa:df:68:4e:6c:c7:4c:4a:29:77:69:20:62:81: 72:a1:8a:0b:5e:b1:9f:92:21:2c:1e:c4:2b:5a:c4:a5:30:24: 81:a8:b9:be:3b:93:77:3c:61:b6:c8:3b:dd:49:4a:64:1b:56: 7e:1f:4b:63:23:24:50:89:d4:59:67:d8:e8:8b:92:98:e5:5f: eb:74:c3:92:57:77:d0:fa:6e:27:c9:aa:5c:4a:02:da:80:f2: c0:e9:4f:61:40:2f:90:d2:26:8f:df:e2:1a:74:68:fa:24:99: 6b:da:79:9e -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUF7eb+rqSAg/I6TgDrqOII4aHDNMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOERFREFCQUQyMUFEMUE2QkVGMjdFOTFGQ0VFMzA0NjU1 NjNERkU3MjAeFw0yNTA5MDcxMzE3MTRaFw0yNTA5MTAxODMwMTRaMDMxMTAvBgNV BAMTKEMwQzkxNEY3RjRFMUM3NDJBOTI3QkMxMUNGREFBNzU1RkY5RTU4MzMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC1j6VZX1uqhn2X4y1bH0vNz+Ri wYGM+vItjUDYTAaX19mZYGOe7AMY8dW6+70q8Mmb9Pgs/ZHuaxMS0YPHOXiSi25G 2STg5lcyRWqjGHpH4kNT6BI48Ia5iaU/GIiMWQzQlS5BLy28RLhOsLkJ46mGp8GE PIUChwdyh6oOTChKNt/5Kn2w2mH8pvymYPj8GjMlrGmShhF7i/2ScPNpVvlghQ39 XYBfDqcvXZ8ECRQSTh6ySfffXrDtD04ZA4YNPBuLwmqf6bcD/utNNnlAxOCXgFpB mPmoNFrVOadExccO0RqUldf3ffsFtACl3CJHw+l5Cfv8sY3+ZfEJSWpLNYArAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUwMkU9/Thx0KpJ7wRz9qnVf+eWDMwHwYDVR0j BBgwFoAUje2rrSGtGmvvJ+kfzuMEZVY9/nIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 MjdhNmYzNC0xYjZlLTRlOTItYjJkMi0wYjkzMDFhNjY2YTUvMC84REVEQUJBRDIx QUQxQTZCRUYyN0U5MUZDRUUzMDQ2NTU2M0RGRTcyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOERFREFCQUQyMUFEMUE2QkVGMjdFOTFGQ0VFMzA0NjU1NjNE RkU3Mi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOTI3YTZmMzQtMWI2ZS00ZTkyLWIy ZDItMGI5MzAxYTY2NmE1LzAvOERFREFCQUQyMUFEMUE2QkVGMjdFOTFGQ0VFMzA0 NjU1NjNERkU3Mi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABy+hWigNdR4HZTdt7iOTDTf5rCAgjc60dHE xHM5bHsIkKlbkHYeaCWH87wJ1YuJ3hrHKv2i4TLl9HnzFhcNVJ0eEei71yxJ5C1y qdy69eRESTw+3jvAOYIseFVLZLQ8ZUwTae7u6sklacC4cGUGPWc1l0ULlU/spMvf izHO0pM0pd+qpdlOGjr0wLbTPn64m3pqW+/632hObMdMSil3aSBigXKhigtesZ+S ISwexCtaxKUwJIGoub47k3c8YbbIO91JSmQbVn4fS2MjJFCJ1Fln2OiLkpjlX+t0 w5JXd9D6bifJqlxKAtqA8sDpT2FAL5DSJo/f4hp0aPokmWvaeZ4= -----END CERTIFICATE-----Generated at Sun Sep 7 15:25:38 2025 by rpki-client