$ rpki-client -vvf repo-rpki.idnic.net/repo/9c80467c-aeb2-4095-8f54-85b9090d3908/0/8EE9EEE46EA0F860385C880C00E2EE5A59D6EA9B.mft File: 8EE9EEE46EA0F860385C880C00E2EE5A59D6EA9B.mft (raw, json) Hash identifier: MNmvnzipa3DTwxaIB+tvmjU4B2F9Ej4bVOSxceyIuyg= Subject key identifier: A5:4B:57:A6:DD:F9:69:E9:D7:13:FF:1F:C4:02:67:BB:5E:04:4B:81 Authority key identifier: 8E:E9:EE:E4:6E:A0:F8:60:38:5C:88:0C:00:E2:EE:5A:59:D6:EA:9B Certificate issuer: /CN=8EE9EEE46EA0F860385C880C00E2EE5A59D6EA9B Certificate serial: 55C8BEAE3E0D5573C37D2F4CBCD58C7A57970D73 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8EE9EEE46EA0F860385C880C00E2EE5A59D6EA9B.cer Subject info access: rsync://repo-rpki.idnic.net/repo/9c80467c-aeb2-4095-8f54-85b9090d3908/0/8EE9EEE46EA0F860385C880C00E2EE5A59D6EA9B.mft Manifest number: 01A6 Signing time: Fri 05 Sep 2025 01:00:40 +0000 Manifest this update: Fri 05 Sep 2025 00:55:40 +0000 Manifest next update: Mon 08 Sep 2025 02:17:40 +0000 Files and hashes: 1: 8EE9EEE46EA0F860385C880C00E2EE5A59D6EA9B.crl (hash: h2KGpzqWfXnn9merBH+lpz84XjcEd5oD5ayECLe35Sc=) 2: 3130332e3139372e3138382e302f32322d3234203d3e20313333383030.roa (hash: Q/xd/HC1bBeKjBCyWCDiCLVtwZ9rHYa7nKWTycy4dgg=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/9c80467c-aeb2-4095-8f54-85b9090d3908/0/8EE9EEE46EA0F860385C880C00E2EE5A59D6EA9B.crl rsync://repo-rpki.idnic.net/repo/9c80467c-aeb2-4095-8f54-85b9090d3908/0/8EE9EEE46EA0F860385C880C00E2EE5A59D6EA9B.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8EE9EEE46EA0F860385C880C00E2EE5A59D6EA9B.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 08 Sep 2025 02:17:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 55:c8:be:ae:3e:0d:55:73:c3:7d:2f:4c:bc:d5:8c:7a:57:97:0d:73 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8EE9EEE46EA0F860385C880C00E2EE5A59D6EA9B Validity Not Before: Sep 5 00:55:40 2025 GMT Not After : Sep 8 02:17:40 2025 GMT Subject: CN=A54B57A6DDF969E9D713FF1FC40267BB5E044B81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:e3:ec:f2:2f:1f:c6:49:0b:fa:1f:7d:ce:4f: 19:e0:82:c8:54:de:e4:be:63:64:46:53:b7:8d:0e: 6a:f7:23:df:24:56:81:24:3a:bf:b0:4b:d0:9e:41: a3:c2:fa:03:92:ac:de:21:8d:26:97:dc:25:6c:65: d8:e8:dd:e1:0e:6a:2a:67:81:46:9e:95:b9:17:7e: 4b:93:22:46:1c:e5:35:5d:e9:46:ee:6c:9f:ac:4f: 25:35:ca:7e:ae:4a:f0:ba:02:8f:76:af:5b:49:91: 70:ab:d3:5a:c9:b8:58:24:0c:8e:64:76:ef:4c:e8: 63:2f:b6:f8:4a:2d:18:de:68:ac:cd:66:73:91:67: db:e7:29:fd:32:1d:c6:f9:73:e4:f2:53:7c:13:78: e6:5d:a7:44:32:c4:d7:92:c5:b6:a7:f5:05:1b:b9: 99:81:ed:b7:a4:ad:00:89:f0:7e:bd:28:1b:29:8b: 61:0d:ea:49:33:1c:3d:66:b6:3d:25:99:0c:b8:0a: 4d:e6:ca:48:ef:80:fe:ab:04:95:b5:e1:ac:30:0d: e1:3c:be:0e:0f:3a:3f:2f:fe:b5:4b:ec:cb:b7:d8: 4a:5c:bc:dd:66:79:ae:b8:b7:67:a1:8e:10:18:9d: 6e:29:ba:57:61:2a:86:2a:31:4d:7e:4b:7a:d4:ab: 10:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:4B:57:A6:DD:F9:69:E9:D7:13:FF:1F:C4:02:67:BB:5E:04:4B:81 X509v3 Authority Key Identifier: keyid:8E:E9:EE:E4:6E:A0:F8:60:38:5C:88:0C:00:E2:EE:5A:59:D6:EA:9B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/9c80467c-aeb2-4095-8f54-85b9090d3908/0/8EE9EEE46EA0F860385C880C00E2EE5A59D6EA9B.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8EE9EEE46EA0F860385C880C00E2EE5A59D6EA9B.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/9c80467c-aeb2-4095-8f54-85b9090d3908/0/8EE9EEE46EA0F860385C880C00E2EE5A59D6EA9B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6f:09:ca:9c:67:5d:7c:ea:78:6a:93:61:a7:ed:ca:45:70:29: e2:96:c9:de:1c:66:ce:b5:28:53:0a:c2:2a:3c:9e:cf:82:78: 87:28:70:7e:bb:d5:21:a0:a1:01:fe:20:b0:64:af:05:fc:ca: 5f:de:58:9f:eb:84:ab:05:0a:dc:79:9d:b6:05:cb:36:1a:06: ea:30:8b:e5:65:dd:8b:d7:b3:ec:b5:be:b1:c9:a1:98:0c:a4: ed:87:64:86:10:f9:23:9c:fc:75:d4:41:a6:90:14:b4:b1:2f: 37:9e:d3:58:39:42:e9:22:a9:5b:96:9d:12:71:cf:d0:9c:eb: d8:2d:21:2b:f2:aa:78:1f:fe:f9:5b:e0:5d:83:ea:37:7f:72: 55:3c:1a:95:1e:b9:a8:51:a0:cf:e9:1a:05:81:5f:45:57:b5: ed:15:c2:34:0e:90:9b:65:ba:95:69:77:ca:2d:a8:18:17:bf: 9f:8d:da:81:4f:ba:63:fb:c5:1f:73:a8:fb:42:88:5c:fb:93: be:d1:13:9c:c2:4d:62:d2:1e:b3:0f:dd:59:dd:64:d5:8e:01: b1:52:e4:c4:bb:2b:9d:7d:e6:59:03:d3:61:0d:94:24:b0:55: 93:c4:99:37:89:d6:71:a7:b8:c3:7e:3e:13:b3:c8:c2:43:49: 75:ea:8f:2e -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUVci+rj4NVXPDfS9MvNWMeleXDXMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEVFOUVFRTQ2RUEwRjg2MDM4NUM4ODBDMDBFMkVFNUE1 OUQ2RUE5QjAeFw0yNTA5MDUwMDU1NDBaFw0yNTA5MDgwMjE3NDBaMDMxMTAvBgNV BAMTKEE1NEI1N0E2RERGOTY5RTlENzEzRkYxRkM0MDI2N0JCNUUwNDRCODEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDS4+zyLx/GSQv6H33OTxnggshU 3uS+Y2RGU7eNDmr3I98kVoEkOr+wS9CeQaPC+gOSrN4hjSaX3CVsZdjo3eEOaipn gUaelbkXfkuTIkYc5TVd6UbubJ+sTyU1yn6uSvC6Ao92r1tJkXCr01rJuFgkDI5k du9M6GMvtvhKLRjeaKzNZnORZ9vnKf0yHcb5c+TyU3wTeOZdp0QyxNeSxban9QUb uZmB7bekrQCJ8H69KBspi2EN6kkzHD1mtj0lmQy4Ck3mykjvgP6rBJW14awwDeE8 vg4POj8v/rVL7Mu32EpcvN1mea64t2ehjhAYnW4puldhKoYqMU1+S3rUqxAzAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUpUtXpt35aenXE/8fxAJnu14ES4EwHwYDVR0j BBgwFoAUjunu5G6g+GA4XIgMAOLuWlnW6pswDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 YzgwNDY3Yy1hZWIyLTQwOTUtOGY1NC04NWI5MDkwZDM5MDgvMC84RUU5RUVFNDZF QTBGODYwMzg1Qzg4MEMwMEUyRUU1QTU5RDZFQTlCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOEVFOUVFRTQ2RUEwRjg2MDM4NUM4ODBDMDBFMkVFNUE1OUQ2 RUE5Qi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOWM4MDQ2N2MtYWViMi00MDk1LThm NTQtODViOTA5MGQzOTA4LzAvOEVFOUVFRTQ2RUEwRjg2MDM4NUM4ODBDMDBFMkVF NUE1OUQ2RUE5Qi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAG8JypxnXXzqeGqTYaftykVwKeKWyd4cZs61 KFMKwio8ns+CeIcocH671SGgoQH+ILBkrwX8yl/eWJ/rhKsFCtx5nbYFyzYaBuow i+Vl3YvXs+y1vrHJoZgMpO2HZIYQ+SOc/HXUQaaQFLSxLzee01g5QukiqVuWnRJx z9Cc69gtISvyqngf/vlb4F2D6jd/clU8GpUeuahRoM/pGgWBX0VXte0VwjQOkJtl upVpd8otqBgXv5+N2oFPumP7xR9zqPtCiFz7k77RE5zCTWLSHrMP3VndZNWOAbFS 5MS7K5195lkD02ENlCSwVZPEmTeJ1nGnuMN+PhOzyMJDSXXqjy4= -----END CERTIFICATE-----Generated at Fri Sep 5 10:34:27 2025 by rpki-client