$ rpki-client -vvf repo-rpki.idnic.net/repo/a2e5ff81-b082-4334-ad29-55dc8d1e53b9/0/A8CDD576A9B5E448A869BEA4D516BAFC5A879503.mft File: A8CDD576A9B5E448A869BEA4D516BAFC5A879503.mft (raw, json) Hash identifier: +QmOzMtaKdaG+t4ri7GKAUAwx4FP3EB3hl1Kpqbq6xQ= Subject key identifier: 22:77:7D:CA:AA:E2:38:C9:78:F2:A6:80:C7:6B:08:60:AE:77:29:4A Authority key identifier: A8:CD:D5:76:A9:B5:E4:48:A8:69:BE:A4:D5:16:BA:FC:5A:87:95:03 Certificate issuer: /CN=A8CDD576A9B5E448A869BEA4D516BAFC5A879503 Certificate serial: 71BDC769941E18055C12AC5E8C3FBB143DDCA825 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/A8CDD576A9B5E448A869BEA4D516BAFC5A879503.cer Subject info access: rsync://repo-rpki.idnic.net/repo/a2e5ff81-b082-4334-ad29-55dc8d1e53b9/0/A8CDD576A9B5E448A869BEA4D516BAFC5A879503.mft Manifest number: C7 Signing time: Sat 06 Sep 2025 18:02:21 +0000 Manifest this update: Sat 06 Sep 2025 17:57:21 +0000 Manifest next update: Tue 09 Sep 2025 21:18:21 +0000 Files and hashes: 1: A8CDD576A9B5E448A869BEA4D516BAFC5A879503.crl (hash: 1pQORHPl+nAE8h/BNG35fAX1FjWj1HX7BcWkHs/nKCw=) 2: 3136302e31392e3134352e302f32342d3234203d3e203435333035.roa (hash: b0d54b5VfP0y4Y/gj0JeZ9te1p1dA7COr+bHtkAFBE4=) 3: 3136302e31392e3134342e302f32342d3234203d3e20313532373838.roa (hash: zcdVZSiLzuXwzNXJqyWuf4sDbiVxTodHTiD95Tvz7k8=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/a2e5ff81-b082-4334-ad29-55dc8d1e53b9/0/A8CDD576A9B5E448A869BEA4D516BAFC5A879503.crl rsync://repo-rpki.idnic.net/repo/a2e5ff81-b082-4334-ad29-55dc8d1e53b9/0/A8CDD576A9B5E448A869BEA4D516BAFC5A879503.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/A8CDD576A9B5E448A869BEA4D516BAFC5A879503.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 09 Sep 2025 21:18:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 71:bd:c7:69:94:1e:18:05:5c:12:ac:5e:8c:3f:bb:14:3d:dc:a8:25 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A8CDD576A9B5E448A869BEA4D516BAFC5A879503 Validity Not Before: Sep 6 17:57:21 2025 GMT Not After : Sep 9 21:18:21 2025 GMT Subject: CN=22777DCAAAE238C978F2A680C76B0860AE77294A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:51:35:cf:82:21:90:57:8d:e3:01:77:4b:58: ab:08:a6:ef:ad:47:1d:ea:3f:aa:7b:8c:12:aa:40: b8:51:e1:21:73:4d:4c:af:72:1a:33:9a:e6:49:95: ca:17:3c:c5:c2:7a:7a:6c:f8:9b:14:c5:f7:3d:55: ab:b7:f7:99:58:8c:26:64:38:ed:dd:d1:8c:82:18: 3d:01:ca:2d:39:72:14:96:72:4d:96:55:76:93:a4: 45:ac:67:d9:85:04:fb:9d:6f:af:90:16:5c:ce:62: f2:16:4e:57:e8:bf:a2:db:c1:f4:e8:a1:42:6e:6f: 81:2c:7f:50:ba:20:af:0f:ef:90:a0:bd:75:e9:11: b6:3b:45:fe:f6:c2:f1:37:26:e6:d8:76:da:a7:d4: 4b:d3:2d:b6:00:a2:d8:c4:a1:36:64:01:24:fc:83: d0:80:e9:ee:19:14:10:95:6e:20:6c:b1:27:19:c2: 47:c7:54:a9:fd:85:a7:7e:b7:25:f4:2b:ed:7a:55: 6d:a9:dc:02:19:91:16:0d:b6:52:6b:d0:c4:e2:86: 33:9e:f7:17:57:cb:2c:9b:35:0c:72:ff:8e:69:59: 88:b9:7b:bd:8d:1f:09:2e:4a:62:5b:35:2c:89:f3: 52:b4:b3:9b:0e:45:40:e3:f1:e2:fa:69:c3:3f:26: 20:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:77:7D:CA:AA:E2:38:C9:78:F2:A6:80:C7:6B:08:60:AE:77:29:4A X509v3 Authority Key Identifier: keyid:A8:CD:D5:76:A9:B5:E4:48:A8:69:BE:A4:D5:16:BA:FC:5A:87:95:03 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/a2e5ff81-b082-4334-ad29-55dc8d1e53b9/0/A8CDD576A9B5E448A869BEA4D516BAFC5A879503.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/A8CDD576A9B5E448A869BEA4D516BAFC5A879503.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a2e5ff81-b082-4334-ad29-55dc8d1e53b9/0/A8CDD576A9B5E448A869BEA4D516BAFC5A879503.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1e:23:7d:f3:88:16:86:99:81:62:ee:f7:fc:02:75:c4:7a:23: 7c:d7:cd:c3:e3:0f:7b:16:19:20:ce:71:4e:cd:c5:ed:8d:c6: 35:19:83:94:e2:0e:d4:82:6a:a6:13:a9:1b:7f:f1:80:35:1f: 48:d7:51:6e:12:ec:cc:17:f7:b8:cb:3e:30:fc:9f:56:df:00: bf:f9:62:33:ef:60:c8:0a:0c:6c:1a:03:f6:d4:b0:25:55:20: 8b:47:cc:dd:af:ae:ee:5e:8c:23:02:e2:11:ab:ab:07:c1:a8: 0c:f6:08:f1:a2:07:72:4d:a8:ff:9c:59:3f:2a:a7:30:71:53: 19:2f:16:63:5d:e6:89:db:bb:45:67:3e:da:9c:d0:5a:a1:fd: c1:84:dc:79:50:2f:d9:e4:82:89:a2:b2:75:b2:86:49:5a:f4: 6e:ce:2a:ea:50:13:ce:a9:c0:06:60:c9:09:65:27:40:e1:48: 0a:bb:fa:f7:68:f4:e2:ab:8f:6b:2c:af:94:d9:ac:bf:83:f5: 03:55:30:49:ba:f6:bc:c3:d5:43:ef:46:b5:f0:9e:06:92:33: f7:c4:45:8f:21:1b:b5:ca:16:74:23:f2:f8:f7:cf:b2:68:90: 4c:d4:b8:81:19:28:bc:bd:cc:6a:bb:00:7e:f8:0d:d9:ad:90: 9b:4c:ec:ab -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUcb3HaZQeGAVcEqxejD+7FD3cqCUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQThDREQ1NzZBOUI1RTQ0OEE4NjlCRUE0RDUxNkJBRkM1 QTg3OTUwMzAeFw0yNTA5MDYxNzU3MjFaFw0yNTA5MDkyMTE4MjFaMDMxMTAvBgNV BAMTKDIyNzc3RENBQUFFMjM4Qzk3OEYyQTY4MEM3NkIwODYwQUU3NzI5NEEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDqUTXPgiGQV43jAXdLWKsIpu+t Rx3qP6p7jBKqQLhR4SFzTUyvchozmuZJlcoXPMXCenps+JsUxfc9Vau395lYjCZk OO3d0YyCGD0Byi05chSWck2WVXaTpEWsZ9mFBPudb6+QFlzOYvIWTlfov6LbwfTo oUJub4Esf1C6IK8P75CgvXXpEbY7Rf72wvE3JubYdtqn1EvTLbYAotjEoTZkAST8 g9CA6e4ZFBCVbiBssScZwkfHVKn9had+tyX0K+16VW2p3AIZkRYNtlJr0MTihjOe 9xdXyyybNQxy/45pWYi5e72NHwkuSmJbNSyJ81K0s5sORUDj8eL6acM/JiDRAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUInd9yqriOMl48qaAx2sIYK53KUowHwYDVR0j BBgwFoAUqM3Vdqm15Eioab6k1Ra6/FqHlQMwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h MmU1ZmY4MS1iMDgyLTQzMzQtYWQyOS01NWRjOGQxZTUzYjkvMC9BOENERDU3NkE5 QjVFNDQ4QTg2OUJFQTRENTE2QkFGQzVBODc5NTAzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvQThDREQ1NzZBOUI1RTQ0OEE4NjlCRUE0RDUxNkJBRkM1QTg3 OTUwMy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYTJlNWZmODEtYjA4Mi00MzM0LWFk MjktNTVkYzhkMWU1M2I5LzAvQThDREQ1NzZBOUI1RTQ0OEE4NjlCRUE0RDUxNkJB RkM1QTg3OTUwMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAB4jffOIFoaZgWLu9/wCdcR6I3zXzcPjD3sW GSDOcU7Nxe2NxjUZg5TiDtSCaqYTqRt/8YA1H0jXUW4S7MwX97jLPjD8n1bfAL/5 YjPvYMgKDGwaA/bUsCVVIItHzN2vru5ejCMC4hGrqwfBqAz2CPGiB3JNqP+cWT8q pzBxUxkvFmNd5onbu0VnPtqc0Fqh/cGE3HlQL9nkgomisnWyhkla9G7OKupQE86p wAZgyQllJ0DhSAq7+vdo9OKrj2ssr5TZrL+D9QNVMEm69rzD1UPvRrXwngaSM/fE RY8hG7XKFnQj8vj3z7JokEzUuIEZKLy9zGq7AH74DdmtkJtM7Ks= -----END CERTIFICATE-----Generated at Sun Sep 7 03:38:14 2025 by rpki-client