$ rpki-client -vvf repo-rpki.idnic.net/repo/a0ba85a0-3534-49a4-a826-13a735f94369/0/8C210840D9E28A465D4F0B9F3A1D7C31CC6680C0.mft File: 8C210840D9E28A465D4F0B9F3A1D7C31CC6680C0.mft (raw, json) Hash identifier: WaPBoRMuuowhywMQ81B5va+oN5hlj4YJa6RvttuTiC4= Subject key identifier: 84:CF:86:93:01:3D:A9:87:2C:75:74:F1:9D:35:05:D0:68:97:68:71 Authority key identifier: 8C:21:08:40:D9:E2:8A:46:5D:4F:0B:9F:3A:1D:7C:31:CC:66:80:C0 Certificate issuer: /CN=8C210840D9E28A465D4F0B9F3A1D7C31CC6680C0 Certificate serial: 726B4F715546D30BF807434627CED5CBA11CE797 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/8C210840D9E28A465D4F0B9F3A1D7C31CC6680C0.cer Subject info access: rsync://repo-rpki.idnic.net/repo/a0ba85a0-3534-49a4-a826-13a735f94369/0/8C210840D9E28A465D4F0B9F3A1D7C31CC6680C0.mft Manifest number: AC Signing time: Sun 20 Jul 2025 20:00:46 +0000 Manifest this update: Sun 20 Jul 2025 19:55:46 +0000 Manifest next update: Thu 24 Jul 2025 05:27:46 +0000 Files and hashes: 1: 8C210840D9E28A465D4F0B9F3A1D7C31CC6680C0.crl (hash: WhQqTSDylTwbW2gjUAEovahmcGJQMCQlr5o3n6H2ItA=) 2: 3136302e32322e3139342e302f32332d3234203d3e20313532383236.roa (hash: 8CRgA1ByY654Nlat1fHrKnqGH93mDlUGlMXfJsCa4ik=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/a0ba85a0-3534-49a4-a826-13a735f94369/0/8C210840D9E28A465D4F0B9F3A1D7C31CC6680C0.crl rsync://repo-rpki.idnic.net/repo/a0ba85a0-3534-49a4-a826-13a735f94369/0/8C210840D9E28A465D4F0B9F3A1D7C31CC6680C0.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/8C210840D9E28A465D4F0B9F3A1D7C31CC6680C0.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 24 Jul 2025 05:27:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 72:6b:4f:71:55:46:d3:0b:f8:07:43:46:27:ce:d5:cb:a1:1c:e7:97 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8C210840D9E28A465D4F0B9F3A1D7C31CC6680C0 Validity Not Before: Jul 20 19:55:46 2025 GMT Not After : Jul 24 05:27:46 2025 GMT Subject: CN=84CF8693013DA9872C7574F19D3505D068976871 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:72:12:70:b1:b4:c6:e2:c3:80:31:ca:e0:12: 33:97:f3:ab:e1:cb:ba:2d:ba:7f:6e:2a:ce:e4:1b: c0:83:0a:64:a4:17:b9:71:ee:05:67:9f:26:1f:f1: 14:fe:71:1b:1f:15:be:55:9d:53:de:5e:9e:87:f4: cc:00:8c:5c:ee:3f:69:51:8a:96:f3:9f:67:17:d4: b1:5c:94:c9:a8:d6:e4:ae:21:16:49:81:4b:1f:89: 15:33:05:ba:f0:6d:37:e6:e3:8a:fa:62:0b:b4:eb: 0f:24:3c:0f:7c:12:10:e9:e4:65:e3:38:8e:f5:81: 5c:37:e7:ae:b2:aa:33:89:63:83:f7:3b:88:74:bf: 6d:de:b3:47:eb:91:c1:8d:9b:c5:2a:f0:e9:bc:d1: 06:8d:65:c2:6c:e4:18:b6:3d:c7:c1:ad:cf:cb:a6: 19:e4:c1:5d:6a:b7:e7:74:f9:90:df:65:be:af:11: 7d:5e:6f:3f:5e:a5:58:99:e9:fe:06:dd:6f:d5:74: 4a:81:90:9b:ac:15:ee:8a:c9:12:e6:29:35:58:84: c6:b4:b9:ba:c6:e0:fc:13:99:1d:1d:4c:82:65:43: ab:7c:ec:ed:e5:ed:56:2b:ca:5e:11:b7:02:82:46: 77:08:fc:93:99:16:77:af:52:c9:f4:40:7a:76:01: 39:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:CF:86:93:01:3D:A9:87:2C:75:74:F1:9D:35:05:D0:68:97:68:71 X509v3 Authority Key Identifier: keyid:8C:21:08:40:D9:E2:8A:46:5D:4F:0B:9F:3A:1D:7C:31:CC:66:80:C0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/a0ba85a0-3534-49a4-a826-13a735f94369/0/8C210840D9E28A465D4F0B9F3A1D7C31CC6680C0.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/8C210840D9E28A465D4F0B9F3A1D7C31CC6680C0.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a0ba85a0-3534-49a4-a826-13a735f94369/0/8C210840D9E28A465D4F0B9F3A1D7C31CC6680C0.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5c:ee:b6:e6:ec:4a:50:78:16:b8:86:88:44:d0:70:24:cb:71: eb:99:96:58:c0:cc:95:a1:ca:15:98:d5:c4:be:e5:2e:04:33: ab:3b:b9:e8:ae:90:1f:5a:2b:0e:4c:a2:01:c2:33:8a:7a:c6: f8:80:53:9b:b0:52:dd:48:93:61:c1:b5:2f:8c:55:e6:1b:b1: 7e:d4:56:35:0b:05:f6:4d:fc:6b:23:df:a7:74:3b:61:3e:08: 39:9f:4a:90:5d:65:4a:e2:19:bb:96:9d:5e:3d:df:b3:9b:43: 01:32:9b:da:38:d1:da:59:eb:dc:ce:ee:01:f1:08:51:c6:21: ff:91:bc:5b:ac:a5:7f:18:b5:46:09:ee:53:ec:fc:68:44:8e: 11:c6:5e:55:dc:57:11:c2:11:22:0b:c3:07:a0:59:34:30:d9: 6f:8d:cd:cf:37:1e:6d:5d:8a:05:55:a6:0d:b4:24:71:65:4b: fa:7d:8a:9f:3c:e2:37:8e:03:40:0f:f3:2e:f2:ac:ee:31:f8: be:f8:d7:e5:8c:45:f5:91:58:92:a0:02:32:dc:f2:c4:42:06: ba:a1:c8:aa:f8:f4:9c:6f:63:47:98:12:e3:42:6a:af:31:c5: ac:be:fb:d6:56:e7:95:e6:dc:99:a0:ae:05:40:49:22:07:51: 7e:01:6b:ab -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUcmtPcVVG0wv4B0NGJ87Vy6Ec55cwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEMyMTA4NDBEOUUyOEE0NjVENEYwQjlGM0ExRDdDMzFD QzY2ODBDMDAeFw0yNTA3MjAxOTU1NDZaFw0yNTA3MjQwNTI3NDZaMDMxMTAvBgNV BAMTKDg0Q0Y4NjkzMDEzREE5ODcyQzc1NzRGMTlEMzUwNUQwNjg5NzY4NzEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDgchJwsbTG4sOAMcrgEjOX86vh y7otun9uKs7kG8CDCmSkF7lx7gVnnyYf8RT+cRsfFb5VnVPeXp6H9MwAjFzuP2lR ipbzn2cX1LFclMmo1uSuIRZJgUsfiRUzBbrwbTfm44r6Ygu06w8kPA98EhDp5GXj OI71gVw3566yqjOJY4P3O4h0v23es0frkcGNm8Uq8Om80QaNZcJs5Bi2PcfBrc/L phnkwV1qt+d0+ZDfZb6vEX1ebz9epViZ6f4G3W/VdEqBkJusFe6KyRLmKTVYhMa0 ubrG4PwTmR0dTIJlQ6t87O3l7VYryl4RtwKCRncI/JOZFnevUsn0QHp2ATmNAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUhM+GkwE9qYcsdXTxnTUF0GiXaHEwHwYDVR0j BBgwFoAUjCEIQNniikZdTwufOh18McxmgMAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h MGJhODVhMC0zNTM0LTQ5YTQtYTgyNi0xM2E3MzVmOTQzNjkvMC84QzIxMDg0MEQ5 RTI4QTQ2NUQ0RjBCOUYzQTFEN0MzMUNDNjY4MEMwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvOEMyMTA4NDBEOUUyOEE0NjVENEYwQjlGM0ExRDdDMzFDQzY2 ODBDMC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYTBiYTg1YTAtMzUzNC00OWE0LWE4 MjYtMTNhNzM1Zjk0MzY5LzAvOEMyMTA4NDBEOUUyOEE0NjVENEYwQjlGM0ExRDdD MzFDQzY2ODBDMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFzutubsSlB4FriGiETQcCTLceuZlljAzJWh yhWY1cS+5S4EM6s7ueiukB9aKw5MogHCM4p6xviAU5uwUt1Ik2HBtS+MVeYbsX7U VjULBfZN/Gsj36d0O2E+CDmfSpBdZUriGbuWnV4937ObQwEym9o40dpZ69zO7gHx CFHGIf+RvFuspX8YtUYJ7lPs/GhEjhHGXlXcVxHCESILwwegWTQw2W+Nzc83Hm1d igVVpg20JHFlS/p9ip884jeOA0AP8y7yrO4x+L741+WMRfWRWJKgAjLc8sRCBrqh yKr49JxvY0eYEuNCaq8xxay++9ZW55Xm3JmgrgVASSIHUX4Ba6s= -----END CERTIFICATE-----Generated at Tue Jul 22 19:30:58 2025 by rpki-client