$ rpki-client -vvf repo-rpki.idnic.net/repo/a2aa16ea-2aec-495d-a9a3-6925730d5e0f/0/8458BC369C80A76B2875FC97DBE5D1A09B6AF317.mft File: 8458BC369C80A76B2875FC97DBE5D1A09B6AF317.mft (raw, json) Hash identifier: QUz6bvAHe0uWvHOKVJe3DNFa8XINUTTey7fBsXhIRjA= Subject key identifier: AB:46:92:94:DB:CD:16:95:F4:1D:AA:A3:84:86:1E:84:75:ED:9B:E5 Authority key identifier: 84:58:BC:36:9C:80:A7:6B:28:75:FC:97:DB:E5:D1:A0:9B:6A:F3:17 Certificate issuer: /CN=8458BC369C80A76B2875FC97DBE5D1A09B6AF317 Certificate serial: 7F795DBB07467D90C53726B3482615AE2C2733A7 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8458BC369C80A76B2875FC97DBE5D1A09B6AF317.cer Subject info access: rsync://repo-rpki.idnic.net/repo/a2aa16ea-2aec-495d-a9a3-6925730d5e0f/0/8458BC369C80A76B2875FC97DBE5D1A09B6AF317.mft Manifest number: 0506 Signing time: Sat 06 Sep 2025 12:21:44 +0000 Manifest this update: Sat 06 Sep 2025 12:16:44 +0000 Manifest next update: Tue 09 Sep 2025 18:11:44 +0000 Files and hashes: 1: 3130332e36362e36382e302f32342d3234203d3e203535363835.roa (hash: tpDStVFIFqB4DRm6j6XW2vqPZ0uybsz5vrF6Xuyk+08=) 2: 3130332e36362e36392e302f32342d3234203d3e203535363835.roa (hash: x+jv4TuSSXN4C68g+x8B9A51ZwulAwMClt9iXTwzSmY=) 3: 3130332e36362e37302e302f32342d3234203d3e20313333383430.roa (hash: Wxz1us2zDXrNlhEeTyTFEnQyiq4EZlAgNa1zZuJQj0g=) 4: 8458BC369C80A76B2875FC97DBE5D1A09B6AF317.crl (hash: HeMT2qMUD3FPyrQCHZo+vZBtm09qau1PXT/2gAqLyU8=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/a2aa16ea-2aec-495d-a9a3-6925730d5e0f/0/8458BC369C80A76B2875FC97DBE5D1A09B6AF317.crl rsync://repo-rpki.idnic.net/repo/a2aa16ea-2aec-495d-a9a3-6925730d5e0f/0/8458BC369C80A76B2875FC97DBE5D1A09B6AF317.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8458BC369C80A76B2875FC97DBE5D1A09B6AF317.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 09 Sep 2025 18:11:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7f:79:5d:bb:07:46:7d:90:c5:37:26:b3:48:26:15:ae:2c:27:33:a7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8458BC369C80A76B2875FC97DBE5D1A09B6AF317 Validity Not Before: Sep 6 12:16:44 2025 GMT Not After : Sep 9 18:11:44 2025 GMT Subject: CN=AB469294DBCD1695F41DAAA384861E8475ED9BE5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:dc:e7:79:64:59:43:91:a9:18:9d:da:fc:a5: b6:1a:9e:d3:66:0f:4c:87:77:e7:55:c5:30:51:fd: c4:02:36:68:2a:38:d0:d2:b0:0d:9d:b0:71:11:6f: 22:33:52:1b:b5:39:f4:5c:1a:ce:03:7e:3a:a6:73: b1:8e:69:05:a9:1f:e9:23:c2:4f:6b:a4:f3:0f:80: 15:f4:e3:e5:b3:74:d5:69:41:7d:1c:16:4a:2e:18: 19:71:91:83:fa:02:2d:54:e4:c8:46:18:f3:ae:0c: 5e:e2:79:24:ce:20:e4:1c:7d:c8:9e:b3:24:9a:cc: c8:f0:9b:9b:4a:2f:f8:da:72:63:e6:f0:ce:b4:b3: 9a:54:35:44:0b:42:d0:08:ca:49:03:5d:b6:2a:78: 93:e2:d0:cd:34:f4:0f:ed:0d:16:70:4a:4d:ab:ce: fe:68:aa:6a:72:4a:34:90:7b:25:85:df:01:1a:d2: c4:36:e8:0e:09:eb:b6:3a:be:5a:85:a4:0d:b7:c2: 00:95:be:c1:a8:b9:98:53:5f:59:f7:a6:0e:19:39: 11:90:69:3d:69:03:32:7c:4f:45:e3:2d:2a:62:d4: 69:14:77:c3:54:7c:1c:d0:bd:4f:e6:cf:2e:75:c8: 72:62:92:d9:ed:99:4f:aa:c6:90:b5:8e:6b:3c:93: 7e:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AB:46:92:94:DB:CD:16:95:F4:1D:AA:A3:84:86:1E:84:75:ED:9B:E5 X509v3 Authority Key Identifier: keyid:84:58:BC:36:9C:80:A7:6B:28:75:FC:97:DB:E5:D1:A0:9B:6A:F3:17 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/a2aa16ea-2aec-495d-a9a3-6925730d5e0f/0/8458BC369C80A76B2875FC97DBE5D1A09B6AF317.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8458BC369C80A76B2875FC97DBE5D1A09B6AF317.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a2aa16ea-2aec-495d-a9a3-6925730d5e0f/0/8458BC369C80A76B2875FC97DBE5D1A09B6AF317.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8f:0e:19:2c:96:0e:a5:b3:43:d0:ae:b8:45:93:47:71:a6:9a: 1b:3d:20:30:f3:8a:58:6d:0c:8f:c2:7e:26:c3:46:af:f9:2a: 4a:e9:c5:15:4a:1d:c7:e2:64:25:65:84:20:61:fa:65:e7:15: 2f:df:a8:b7:bc:bf:a6:d7:d2:07:2f:3a:ed:3d:9d:2a:47:d4: 39:8a:5b:f7:06:fc:78:68:65:9a:0c:6d:4f:18:e9:13:0b:97: 58:9d:48:12:6c:74:16:7d:0d:b5:15:57:3b:8b:f9:27:f1:36: dd:c5:6e:29:b0:df:5b:2f:cf:62:c0:94:02:e0:26:35:ad:42: 1c:72:09:c8:6f:39:5c:dd:47:21:57:8b:1a:ce:94:40:4e:ac: 2e:6c:09:cb:fa:5c:53:96:eb:e7:28:c3:b4:eb:7a:96:9a:e3: 97:54:54:eb:19:db:c6:5b:83:a2:b8:9f:c4:32:78:02:1a:bc: 47:bc:ff:3a:fa:d1:e1:ac:9e:2b:85:e1:cd:f4:16:e9:b1:ad: 4e:c7:d3:5e:df:4a:3a:8a:37:85:a8:38:5a:7d:0a:92:1e:0f: f6:13:4c:75:f4:0f:2f:c8:a8:67:f5:cf:50:43:e8:c2:ef:77: 6d:ce:c2:72:8c:a3:8d:e2:1a:8c:f2:89:67:28:1e:25:23:65: 62:b3:8b:bb -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUf3lduwdGfZDFNyazSCYVriwnM6cwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODQ1OEJDMzY5QzgwQTc2QjI4NzVGQzk3REJFNUQxQTA5 QjZBRjMxNzAeFw0yNTA5MDYxMjE2NDRaFw0yNTA5MDkxODExNDRaMDMxMTAvBgNV BAMTKEFCNDY5Mjk0REJDRDE2OTVGNDFEQUFBMzg0ODYxRTg0NzVFRDlCRTUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC13Od5ZFlDkakYndr8pbYantNm D0yHd+dVxTBR/cQCNmgqONDSsA2dsHERbyIzUhu1OfRcGs4Dfjqmc7GOaQWpH+kj wk9rpPMPgBX04+WzdNVpQX0cFkouGBlxkYP6Ai1U5MhGGPOuDF7ieSTOIOQcfcie sySazMjwm5tKL/jacmPm8M60s5pUNUQLQtAIykkDXbYqeJPi0M009A/tDRZwSk2r zv5oqmpySjSQeyWF3wEa0sQ26A4J67Y6vlqFpA23wgCVvsGouZhTX1n3pg4ZORGQ aT1pAzJ8T0XjLSpi1GkUd8NUfBzQvU/mzy51yHJiktntmU+qxpC1jms8k37jAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUq0aSlNvNFpX0HaqjhIYehHXtm+UwHwYDVR0j BBgwFoAUhFi8NpyAp2sodfyX2+XRoJtq8xcwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h MmFhMTZlYS0yYWVjLTQ5NWQtYTlhMy02OTI1NzMwZDVlMGYvMC84NDU4QkMzNjlD ODBBNzZCMjg3NUZDOTdEQkU1RDFBMDlCNkFGMzE3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvODQ1OEJDMzY5QzgwQTc2QjI4NzVGQzk3REJFNUQxQTA5QjZB RjMxNy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYTJhYTE2ZWEtMmFlYy00OTVkLWE5 YTMtNjkyNTczMGQ1ZTBmLzAvODQ1OEJDMzY5QzgwQTc2QjI4NzVGQzk3REJFNUQx QTA5QjZBRjMxNy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAI8OGSyWDqWzQ9CuuEWTR3Gmmhs9IDDzilht DI/CfibDRq/5KkrpxRVKHcfiZCVlhCBh+mXnFS/fqLe8v6bX0gcvOu09nSpH1DmK W/cG/HhoZZoMbU8Y6RMLl1idSBJsdBZ9DbUVVzuL+SfxNt3Fbimw31svz2LAlALg JjWtQhxyCchvOVzdRyFXixrOlEBOrC5sCcv6XFOW6+cow7Trepaa45dUVOsZ28Zb g6K4n8QyeAIavEe8/zr60eGsniuF4c30FumxrU7H017fSjqKN4WoOFp9CpIeD/YT THX0Dy/IqGf1z1BD6MLvd23OwnKMo43iGozyiWcoHiUjZWKzi7s= -----END CERTIFICATE-----Generated at Sun Sep 7 15:17:00 2025 by rpki-client