$ rpki-client -vvf repo-rpki.idnic.net/repo/aa914ada-a9aa-4d7f-9e47-594bcb7a70ab/0/8E3F7441403B9CDF2FD603CCBAF13D1671202D2D.mft File: 8E3F7441403B9CDF2FD603CCBAF13D1671202D2D.mft (raw, json) Hash identifier: wBVBiszalaNXy7wPbRklluwnZ7wsCZnfaKLhyVNiZBo= Subject key identifier: AE:D6:75:1B:DB:4C:E4:7E:FC:37:17:29:87:1D:90:5A:E8:98:8B:43 Authority key identifier: 8E:3F:74:41:40:3B:9C:DF:2F:D6:03:CC:BA:F1:3D:16:71:20:2D:2D Certificate issuer: /CN=8E3F7441403B9CDF2FD603CCBAF13D1671202D2D Certificate serial: 4EBCCD08D6B0067BFD32E2EB5F02261B5CAF91D7 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8E3F7441403B9CDF2FD603CCBAF13D1671202D2D.cer Subject info access: rsync://repo-rpki.idnic.net/repo/aa914ada-a9aa-4d7f-9e47-594bcb7a70ab/0/8E3F7441403B9CDF2FD603CCBAF13D1671202D2D.mft Manifest number: 0310 Signing time: Sat 06 Sep 2025 05:51:45 +0000 Manifest this update: Sat 06 Sep 2025 05:46:45 +0000 Manifest next update: Tue 09 Sep 2025 15:29:45 +0000 Files and hashes: 1: 323430353a366463303a3a2f33322d3332203d3e20313339343237.roa (hash: wF6dopi/8yFT5FMMEEtbalVZ2HlgmQH2NzcCqjkPo/A=) 2: 3130332e3134342e3133352e302f32342d3234203d3e20313339343237.roa (hash: zWJYN2XG8P0RnY9CSUVBnEgmuVsEalWKm5k5yR0nlxQ=) 3: 3130332e3134342e3133342e302f32342d3234203d3e20313339343237.roa (hash: i2RCXQ2h/tijX2X+SFP27I82J2d7eFOatLRW4qkSUTs=) 4: 8E3F7441403B9CDF2FD603CCBAF13D1671202D2D.crl (hash: Ug7romxFOeYGayf5a6B0wpxT9NgtZuIGzLbtg4w/8jY=) 5: 3130332e3134342e3133342e302f32332d3233203d3e20313339343237.roa (hash: CwI8o18dMmmdKMsJY38paR/SR1tzAkJd4x6YF0hfFxY=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/aa914ada-a9aa-4d7f-9e47-594bcb7a70ab/0/8E3F7441403B9CDF2FD603CCBAF13D1671202D2D.crl rsync://repo-rpki.idnic.net/repo/aa914ada-a9aa-4d7f-9e47-594bcb7a70ab/0/8E3F7441403B9CDF2FD603CCBAF13D1671202D2D.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8E3F7441403B9CDF2FD603CCBAF13D1671202D2D.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 09 Sep 2025 15:29:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4e:bc:cd:08:d6:b0:06:7b:fd:32:e2:eb:5f:02:26:1b:5c:af:91:d7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8E3F7441403B9CDF2FD603CCBAF13D1671202D2D Validity Not Before: Sep 6 05:46:45 2025 GMT Not After : Sep 9 15:29:45 2025 GMT Subject: CN=AED6751BDB4CE47EFC371729871D905AE8988B43 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:2a:4c:d7:0a:09:05:fc:1e:5a:43:23:14:f5: 60:28:af:f8:2a:46:9c:d5:ca:a8:d2:da:ea:d0:d8: f4:de:55:a5:00:a0:68:68:71:fc:6c:3b:b2:a3:8a: cb:56:bd:f9:72:1c:a1:9c:01:69:20:dc:44:b7:ac: bf:be:42:58:a2:2b:65:7b:60:61:1b:17:e4:11:c0: 16:f1:97:fe:44:06:65:0e:0b:c1:0c:5a:20:ad:5e: 63:a9:70:98:8e:3e:93:6b:0a:47:0c:30:d8:e8:f6: a6:1c:c3:2e:5b:c2:3f:64:18:08:7d:93:f5:4b:84: 17:18:ca:a7:04:ec:72:92:33:4e:a3:8a:25:9c:b5: 2a:31:16:ef:85:d5:2e:dd:83:2c:f2:bf:8a:59:65: 0b:32:1c:16:61:a7:dc:b8:e0:e1:24:37:4a:65:25: 40:81:32:38:7e:eb:0d:a2:ec:7f:14:63:35:fd:dd: 2f:f6:f8:84:66:ed:8b:8a:e1:43:d6:4f:3a:d7:5d: 88:85:ea:c7:39:1a:8f:33:f6:58:0c:1e:c7:6f:41: ea:4a:65:4e:05:04:90:de:d6:d5:74:1a:ec:f2:a0: c9:91:42:c6:d1:08:45:1f:7f:94:fd:93:42:f1:43: b0:97:4e:bf:eb:2b:05:e5:d1:19:d6:9c:d5:ab:3e: d0:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AE:D6:75:1B:DB:4C:E4:7E:FC:37:17:29:87:1D:90:5A:E8:98:8B:43 X509v3 Authority Key Identifier: keyid:8E:3F:74:41:40:3B:9C:DF:2F:D6:03:CC:BA:F1:3D:16:71:20:2D:2D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/aa914ada-a9aa-4d7f-9e47-594bcb7a70ab/0/8E3F7441403B9CDF2FD603CCBAF13D1671202D2D.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8E3F7441403B9CDF2FD603CCBAF13D1671202D2D.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/aa914ada-a9aa-4d7f-9e47-594bcb7a70ab/0/8E3F7441403B9CDF2FD603CCBAF13D1671202D2D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 90:6e:3a:18:59:bf:f6:6f:d6:56:6e:90:8b:be:4a:d2:cb:6c: 98:85:ea:e5:1f:af:e0:44:a1:0e:0f:2b:4e:e4:80:9b:98:6e: 86:9b:c8:4a:6b:e9:42:05:c2:a7:60:b8:df:3b:20:d9:2d:a4: e2:a2:45:fb:1e:a0:5e:12:4e:1d:5c:34:43:1a:d5:99:6b:92: b3:82:c4:2a:6a:ab:7c:96:fc:de:86:21:6a:3a:12:06:b7:37: d5:df:54:5a:fa:b8:4a:99:3d:94:1d:e7:d2:b2:24:55:7d:37: dc:f8:20:13:18:32:3a:21:98:32:51:2b:17:69:58:0b:e2:66: 83:16:88:ee:1c:30:d9:95:39:99:e4:56:b9:8b:0e:b2:43:4b: 67:9c:f7:cf:77:32:82:cd:02:ed:e1:23:0c:12:89:42:66:93: 4a:aa:21:2d:a7:a6:ba:07:a0:1d:bc:c2:e4:ce:91:4e:2d:75: 48:7c:72:35:31:6d:4d:18:c3:3b:2e:54:04:6d:ea:f3:ac:f1: a3:26:bc:ee:2c:cc:29:b2:cf:8e:ff:1f:74:7c:98:33:b1:5f: 05:17:ed:97:b5:44:2c:ab:c4:f7:ee:bf:65:93:6b:28:be:15: 79:a6:70:e3:a7:5b:e8:da:32:46:6d:1e:45:33:a5:bc:70:4c: ac:83:d0:3f -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUTrzNCNawBnv9MuLrXwImG1yvkdcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEUzRjc0NDE0MDNCOUNERjJGRDYwM0NDQkFGMTNEMTY3 MTIwMkQyRDAeFw0yNTA5MDYwNTQ2NDVaFw0yNTA5MDkxNTI5NDVaMDMxMTAvBgNV BAMTKEFFRDY3NTFCREI0Q0U0N0VGQzM3MTcyOTg3MUQ5MDVBRTg5ODhCNDMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDcKkzXCgkF/B5aQyMU9WAor/gq RpzVyqjS2urQ2PTeVaUAoGhocfxsO7KjistWvflyHKGcAWkg3ES3rL++QliiK2V7 YGEbF+QRwBbxl/5EBmUOC8EMWiCtXmOpcJiOPpNrCkcMMNjo9qYcwy5bwj9kGAh9 k/VLhBcYyqcE7HKSM06jiiWctSoxFu+F1S7dgyzyv4pZZQsyHBZhp9y44OEkN0pl JUCBMjh+6w2i7H8UYzX93S/2+IRm7YuK4UPWTzrXXYiF6sc5Go8z9lgMHsdvQepK ZU4FBJDe1tV0GuzyoMmRQsbRCEUff5T9k0LxQ7CXTr/rKwXl0RnWnNWrPtD3AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUrtZ1G9tM5H78Nxcphx2QWuiYi0MwHwYDVR0j BBgwFoAUjj90QUA7nN8v1gPMuvE9FnEgLS0wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h YTkxNGFkYS1hOWFhLTRkN2YtOWU0Ny01OTRiY2I3YTcwYWIvMC84RTNGNzQ0MTQw M0I5Q0RGMkZENjAzQ0NCQUYxM0QxNjcxMjAyRDJELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOEUzRjc0NDE0MDNCOUNERjJGRDYwM0NDQkFGMTNEMTY3MTIw MkQyRC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYWE5MTRhZGEtYTlhYS00ZDdmLTll NDctNTk0YmNiN2E3MGFiLzAvOEUzRjc0NDE0MDNCOUNERjJGRDYwM0NDQkFGMTNE MTY3MTIwMkQyRC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJBuOhhZv/Zv1lZukIu+StLLbJiF6uUfr+BE oQ4PK07kgJuYboabyEpr6UIFwqdguN87INktpOKiRfseoF4STh1cNEMa1ZlrkrOC xCpqq3yW/N6GIWo6Ega3N9XfVFr6uEqZPZQd59KyJFV9N9z4IBMYMjohmDJRKxdp WAviZoMWiO4cMNmVOZnkVrmLDrJDS2ec9893MoLNAu3hIwwSiUJmk0qqIS2nproH oB28wuTOkU4tdUh8cjUxbU0YwzsuVARt6vOs8aMmvO4szCmyz47/H3R8mDOxXwUX 7Ze1RCyrxPfuv2WTayi+FXmmcOOnW+jaMkZtHkUzpbxwTKyD0D8= -----END CERTIFICATE-----Generated at Sun Sep 7 15:34:23 2025 by rpki-client