$ rpki-client -vvf repo-rpki.idnic.net/repo/a0ba85a0-3534-49a4-a826-13a735f94369/0/8C210840D9E28A465D4F0B9F3A1D7C31CC6680C0.mft File: 8C210840D9E28A465D4F0B9F3A1D7C31CC6680C0.mft (raw, json) Hash identifier: jO5FzJFLoi58lV0Weklt57ohkPMGE9Kyx4eDT24VxFk= Subject key identifier: C5:66:82:0B:49:70:F9:3E:31:F9:AF:AB:DE:CF:B9:3E:C1:8A:CC:09 Authority key identifier: 8C:21:08:40:D9:E2:8A:46:5D:4F:0B:9F:3A:1D:7C:31:CC:66:80:C0 Certificate issuer: /CN=8C210840D9E28A465D4F0B9F3A1D7C31CC6680C0 Certificate serial: 12AA69E767157E7C024252F790BA19C862E782FA Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/8C210840D9E28A465D4F0B9F3A1D7C31CC6680C0.cer Subject info access: rsync://repo-rpki.idnic.net/repo/a0ba85a0-3534-49a4-a826-13a735f94369/0/8C210840D9E28A465D4F0B9F3A1D7C31CC6680C0.mft Manifest number: C2 Signing time: Mon 08 Sep 2025 01:00:41 +0000 Manifest this update: Mon 08 Sep 2025 00:55:41 +0000 Manifest next update: Thu 11 Sep 2025 12:41:41 +0000 Files and hashes: 1: 3136302e32322e3139342e302f32332d3234203d3e20313532383236.roa (hash: 8CRgA1ByY654Nlat1fHrKnqGH93mDlUGlMXfJsCa4ik=) 2: 8C210840D9E28A465D4F0B9F3A1D7C31CC6680C0.crl (hash: fkwYNHKdulgqaxspVE4PM1+hlqrpvUmbNTJkc9zcQ9s=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/a0ba85a0-3534-49a4-a826-13a735f94369/0/8C210840D9E28A465D4F0B9F3A1D7C31CC6680C0.crl rsync://repo-rpki.idnic.net/repo/a0ba85a0-3534-49a4-a826-13a735f94369/0/8C210840D9E28A465D4F0B9F3A1D7C31CC6680C0.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/8C210840D9E28A465D4F0B9F3A1D7C31CC6680C0.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 11 Sep 2025 07:33:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 12:aa:69:e7:67:15:7e:7c:02:42:52:f7:90:ba:19:c8:62:e7:82:fa Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8C210840D9E28A465D4F0B9F3A1D7C31CC6680C0 Validity Not Before: Sep 8 00:55:41 2025 GMT Not After : Sep 11 12:41:41 2025 GMT Subject: CN=C566820B4970F93E31F9AFABDECFB93EC18ACC09 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:da:63:25:e8:af:f6:ce:b8:97:87:7f:08:4c: 8f:12:e2:86:43:b4:49:12:38:67:9c:88:33:1d:67: 15:5d:c9:85:84:a3:bb:7b:a3:af:57:57:3d:83:da: f6:82:ae:23:f1:b4:42:cc:de:ec:db:b0:fc:16:56: e6:16:d4:f1:a9:f3:88:25:65:15:46:01:86:f6:eb: 04:5a:02:8e:16:a8:89:a0:ac:9f:ab:6d:c5:eb:62: 31:7c:c5:3c:62:0a:82:3c:d0:42:79:92:fb:32:c9: 5a:6f:98:d9:59:11:7b:1c:c8:d6:cb:b9:82:5f:85: ae:4e:3f:4d:55:a8:fd:55:b3:89:65:11:21:88:2e: d7:7a:f1:6c:1b:b6:a0:c6:13:5d:cb:fb:37:d8:36: 22:44:80:66:fb:aa:97:d2:8f:21:0c:dc:79:3d:38: 8d:3c:fc:fa:39:b2:82:a2:49:e1:d7:eb:a5:ab:43: 3f:bd:8d:b2:de:5a:73:ad:15:10:c5:29:b6:4c:60: 3a:f2:d1:00:ae:c1:b1:e3:63:e4:45:df:e0:fd:ac: e5:e7:ad:d8:ee:e3:55:07:67:bd:d7:30:3a:b9:d2: 04:3d:74:4b:8c:32:92:ce:ed:81:0d:8b:0a:02:1f: 3f:1b:40:9d:c1:c8:97:64:1c:9a:68:dd:6a:6f:ba: d0:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:66:82:0B:49:70:F9:3E:31:F9:AF:AB:DE:CF:B9:3E:C1:8A:CC:09 X509v3 Authority Key Identifier: keyid:8C:21:08:40:D9:E2:8A:46:5D:4F:0B:9F:3A:1D:7C:31:CC:66:80:C0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/a0ba85a0-3534-49a4-a826-13a735f94369/0/8C210840D9E28A465D4F0B9F3A1D7C31CC6680C0.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/8C210840D9E28A465D4F0B9F3A1D7C31CC6680C0.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a0ba85a0-3534-49a4-a826-13a735f94369/0/8C210840D9E28A465D4F0B9F3A1D7C31CC6680C0.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 93:b0:7f:54:59:c6:7c:80:7a:21:93:38:82:dd:b8:d5:44:4b: c0:7b:86:7b:61:1f:72:d4:da:88:42:13:30:cc:d7:16:0a:dc: 15:e5:12:13:3b:7b:88:e2:6a:1b:4e:97:88:fa:d3:97:c0:eb: 09:bf:17:e8:d3:c9:29:cf:ad:8c:2c:fa:58:80:cb:23:3b:27: 2a:37:ee:01:e5:72:66:7c:ad:95:ae:c7:3e:43:11:3a:15:e5: d9:81:0a:07:d1:2a:ff:15:f5:a7:49:e7:20:f1:5b:44:e9:ff: 28:7a:e5:5f:f7:69:a9:72:24:e8:e3:bb:1b:5e:c6:a0:60:f3: 2c:35:b6:86:56:a5:e4:7f:f4:3d:ad:dd:f0:07:28:05:65:c7: 1f:23:23:0a:ba:38:5c:ac:f0:18:7c:54:97:4c:12:46:98:b9: b4:aa:db:55:a3:cb:65:bb:2d:3a:0a:f1:6f:d2:2e:7c:4a:a4: 38:1e:58:63:88:79:88:d4:68:e5:40:2e:93:ab:7d:d6:f6:42: 7e:19:88:b5:6e:29:63:1b:3e:dc:66:6b:b4:17:61:cd:c7:55: 31:c1:84:35:e5:0c:f8:f1:90:7e:ef:49:e8:5f:2b:6c:3a:fd: 30:5e:e2:63:1e:b4:23:9e:bc:89:d8:7b:bd:6b:21:ef:01:1b: 72:6a:db:37 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUEqpp52cVfnwCQlL3kLoZyGLngvowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEMyMTA4NDBEOUUyOEE0NjVENEYwQjlGM0ExRDdDMzFD QzY2ODBDMDAeFw0yNTA5MDgwMDU1NDFaFw0yNTA5MTExMjQxNDFaMDMxMTAvBgNV BAMTKEM1NjY4MjBCNDk3MEY5M0UzMUY5QUZBQkRFQ0ZCOTNFQzE4QUNDMDkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDP2mMl6K/2zriXh38ITI8S4oZD tEkSOGeciDMdZxVdyYWEo7t7o69XVz2D2vaCriPxtELM3uzbsPwWVuYW1PGp84gl ZRVGAYb26wRaAo4WqImgrJ+rbcXrYjF8xTxiCoI80EJ5kvsyyVpvmNlZEXscyNbL uYJfha5OP01VqP1Vs4llESGILtd68WwbtqDGE13L+zfYNiJEgGb7qpfSjyEM3Hk9 OI08/Po5soKiSeHX66WrQz+9jbLeWnOtFRDFKbZMYDry0QCuwbHjY+RF3+D9rOXn rdju41UHZ73XMDq50gQ9dEuMMpLO7YENiwoCHz8bQJ3ByJdkHJpo3WpvutANAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUxWaCC0lw+T4x+a+r3s+5PsGKzAkwHwYDVR0j BBgwFoAUjCEIQNniikZdTwufOh18McxmgMAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h MGJhODVhMC0zNTM0LTQ5YTQtYTgyNi0xM2E3MzVmOTQzNjkvMC84QzIxMDg0MEQ5 RTI4QTQ2NUQ0RjBCOUYzQTFEN0MzMUNDNjY4MEMwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvOEMyMTA4NDBEOUUyOEE0NjVENEYwQjlGM0ExRDdDMzFDQzY2 ODBDMC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYTBiYTg1YTAtMzUzNC00OWE0LWE4 MjYtMTNhNzM1Zjk0MzY5LzAvOEMyMTA4NDBEOUUyOEE0NjVENEYwQjlGM0ExRDdD MzFDQzY2ODBDMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJOwf1RZxnyAeiGTOILduNVES8B7hnthH3LU 2ohCEzDM1xYK3BXlEhM7e4jiahtOl4j605fA6wm/F+jTySnPrYws+liAyyM7Jyo3 7gHlcmZ8rZWuxz5DEToV5dmBCgfRKv8V9adJ5yDxW0Tp/yh65V/3aalyJOjjuxte xqBg8yw1toZWpeR/9D2t3fAHKAVlxx8jIwq6OFys8Bh8VJdMEkaYubSq21Wjy2W7 LToK8W/SLnxKpDgeWGOIeYjUaOVALpOrfdb2Qn4ZiLVuKWMbPtxma7QXYc3HVTHB hDXlDPjxkH7vSehfK2w6/TBe4mMetCOevInYe71rIe8BG3Jq2zc= -----END CERTIFICATE-----Generated at Mon Sep 8 05:08:59 2025 by rpki-client