$ rpki-client -vvf repo-rpki.idnic.net/repo/aef837b3-dfd2-42cc-9b79-74b6bafd4e2d/0/8711D05D82BAFB7BEAB275E079A72DDD554064EA.mft File: 8711D05D82BAFB7BEAB275E079A72DDD554064EA.mft (raw, json) Hash identifier: cmRYEpuW7snAIUv3tsAm5HNNdEGI867JeAG6T6WAvpM= Subject key identifier: 6C:E8:20:E8:D9:90:AA:C6:B7:F4:1F:1C:D1:8E:6B:F4:CA:58:AF:51 Authority key identifier: 87:11:D0:5D:82:BA:FB:7B:EA:B2:75:E0:79:A7:2D:DD:55:40:64:EA Certificate issuer: /CN=8711D05D82BAFB7BEAB275E079A72DDD554064EA Certificate serial: 44F42E026A19E1AE0320D35617EED885DCE91A21 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8711D05D82BAFB7BEAB275E079A72DDD554064EA.cer Subject info access: rsync://repo-rpki.idnic.net/repo/aef837b3-dfd2-42cc-9b79-74b6bafd4e2d/0/8711D05D82BAFB7BEAB275E079A72DDD554064EA.mft Manifest number: 01D2 Signing time: Sat 06 Sep 2025 19:02:07 +0000 Manifest this update: Sat 06 Sep 2025 18:57:07 +0000 Manifest next update: Tue 09 Sep 2025 21:08:07 +0000 Files and hashes: 1: 8711D05D82BAFB7BEAB275E079A72DDD554064EA.crl (hash: davxqHcRMUgfxLJFHDYsrSgZipotOWgjQG1dJLXPCag=) 2: 3130332e31372e3137382e302f32342d3234203d3e20313530323236.roa (hash: 6sZc5cLjn8BGU3ndbP5aYFbkGJW/EMEDKLHgtlwJygA=) 3: 3130332e31372e3137392e302f32342d3234203d3e20313530323236.roa (hash: zZiAzMvnjGpr4Mq+/OGXUdFHQPaHJLr/tCxwWuWhySI=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/aef837b3-dfd2-42cc-9b79-74b6bafd4e2d/0/8711D05D82BAFB7BEAB275E079A72DDD554064EA.crl rsync://repo-rpki.idnic.net/repo/aef837b3-dfd2-42cc-9b79-74b6bafd4e2d/0/8711D05D82BAFB7BEAB275E079A72DDD554064EA.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8711D05D82BAFB7BEAB275E079A72DDD554064EA.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 09 Sep 2025 21:08:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 44:f4:2e:02:6a:19:e1:ae:03:20:d3:56:17:ee:d8:85:dc:e9:1a:21 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8711D05D82BAFB7BEAB275E079A72DDD554064EA Validity Not Before: Sep 6 18:57:07 2025 GMT Not After : Sep 9 21:08:07 2025 GMT Subject: CN=6CE820E8D990AAC6B7F41F1CD18E6BF4CA58AF51 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:63:65:92:20:45:99:dc:72:62:05:73:19:e6: d9:75:37:c2:95:bd:32:10:83:4c:27:a7:40:21:3e: 07:da:60:08:26:a5:90:35:40:58:82:78:8d:c7:85: 06:79:d7:c9:03:ce:94:0a:ad:c6:21:98:85:89:3c: 2c:8a:1d:93:c9:34:9e:70:07:df:8d:e7:11:9d:54: a5:b2:34:4f:90:93:47:c1:35:d2:c1:cf:30:0b:08: 64:b0:4c:f9:a0:8a:cf:97:fa:9b:ea:91:f5:a1:70: 09:cd:c9:31:5b:21:96:54:f2:56:65:e1:c9:91:73: ed:5d:31:c0:d2:ad:c4:1c:bf:3d:01:62:4c:c7:ae: d8:59:e0:51:97:7d:52:f5:01:63:72:2f:18:42:4f: 2a:cb:60:83:fc:d4:71:d5:16:7a:1d:f0:41:cf:9b: 87:27:80:cb:14:4e:19:73:18:a1:6b:c8:16:16:46: 00:f3:2a:47:40:d2:2e:d7:c6:93:ca:5d:9c:40:94: a5:49:35:17:cb:dd:05:7c:b4:02:ce:46:20:fc:b2: 6a:b5:80:0c:0e:5c:d2:22:30:6a:dd:a6:50:3b:0b: f2:60:41:01:aa:0a:f8:b6:43:25:8e:88:28:80:8e: 23:58:69:01:0a:4e:1a:b8:80:bd:b7:47:b3:b9:86: 1c:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6C:E8:20:E8:D9:90:AA:C6:B7:F4:1F:1C:D1:8E:6B:F4:CA:58:AF:51 X509v3 Authority Key Identifier: keyid:87:11:D0:5D:82:BA:FB:7B:EA:B2:75:E0:79:A7:2D:DD:55:40:64:EA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/aef837b3-dfd2-42cc-9b79-74b6bafd4e2d/0/8711D05D82BAFB7BEAB275E079A72DDD554064EA.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8711D05D82BAFB7BEAB275E079A72DDD554064EA.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/aef837b3-dfd2-42cc-9b79-74b6bafd4e2d/0/8711D05D82BAFB7BEAB275E079A72DDD554064EA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 26:40:71:2a:ca:b1:30:b7:35:7a:e9:89:9c:a7:77:4d:49:16: f9:2b:d9:34:4e:66:bd:03:12:b5:1e:74:a9:4e:fa:b7:48:98: 0a:05:a8:2c:25:a5:c4:e8:69:3d:48:49:f2:d5:12:d0:9e:5b: 38:cd:0d:79:d8:6a:1f:1f:20:b1:2a:44:92:51:1f:c3:a1:2c: 57:d5:1d:bc:98:81:73:0c:d5:48:5d:2a:1a:5e:88:63:67:be: 64:fd:b4:13:68:61:7a:32:f3:ba:bf:a6:6a:ea:79:51:78:23: e5:fb:b9:cd:91:f7:6e:fc:de:cf:d6:b5:a6:ad:af:a9:4a:01: cf:d1:42:f0:df:2d:99:70:e8:d1:a6:16:e7:4e:35:a6:3b:bf: 9f:71:cf:d3:fb:71:d6:4a:ef:dd:1e:19:a2:15:7b:a2:3d:cf: bf:0d:6a:a4:16:3c:9d:aa:4b:8a:49:3c:0e:41:f6:08:32:03: bc:00:7e:e6:8f:9f:2e:7e:7c:94:58:f3:72:4d:41:4e:af:07: e1:f0:16:cf:a3:89:eb:8e:9f:7f:f6:23:ad:80:ac:9f:60:d4: 0e:1b:09:ce:86:10:07:12:1d:5d:dd:4c:0a:6e:69:fe:f5:0a: ee:9c:9e:7a:c0:2a:9d:a0:cf:b4:cf:4b:c0:b2:6d:73:08:64: 94:4b:5c:66 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIURPQuAmoZ4a4DINNWF+7YhdzpGiEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODcxMUQwNUQ4MkJBRkI3QkVBQjI3NUUwNzlBNzJEREQ1 NTQwNjRFQTAeFw0yNTA5MDYxODU3MDdaFw0yNTA5MDkyMTA4MDdaMDMxMTAvBgNV BAMTKDZDRTgyMEU4RDk5MEFBQzZCN0Y0MUYxQ0QxOEU2QkY0Q0E1OEFGNTEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCaY2WSIEWZ3HJiBXMZ5tl1N8KV vTIQg0wnp0AhPgfaYAgmpZA1QFiCeI3HhQZ518kDzpQKrcYhmIWJPCyKHZPJNJ5w B9+N5xGdVKWyNE+Qk0fBNdLBzzALCGSwTPmgis+X+pvqkfWhcAnNyTFbIZZU8lZl 4cmRc+1dMcDSrcQcvz0BYkzHrthZ4FGXfVL1AWNyLxhCTyrLYIP81HHVFnod8EHP m4cngMsUThlzGKFryBYWRgDzKkdA0i7XxpPKXZxAlKVJNRfL3QV8tALORiD8smq1 gAwOXNIiMGrdplA7C/JgQQGqCvi2QyWOiCiAjiNYaQEKThq4gL23R7O5hhxDAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUbOgg6NmQqsa39B8c0Y5r9MpYr1EwHwYDVR0j BBgwFoAUhxHQXYK6+3vqsnXgeact3VVAZOowDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h ZWY4MzdiMy1kZmQyLTQyY2MtOWI3OS03NGI2YmFmZDRlMmQvMC84NzExRDA1RDgy QkFGQjdCRUFCMjc1RTA3OUE3MkRERDU1NDA2NEVBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvODcxMUQwNUQ4MkJBRkI3QkVBQjI3NUUwNzlBNzJEREQ1NTQw NjRFQS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYWVmODM3YjMtZGZkMi00MmNjLTli NzktNzRiNmJhZmQ0ZTJkLzAvODcxMUQwNUQ4MkJBRkI3QkVBQjI3NUUwNzlBNzJE REQ1NTQwNjRFQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACZAcSrKsTC3NXrpiZynd01JFvkr2TROZr0D ErUedKlO+rdImAoFqCwlpcToaT1ISfLVEtCeWzjNDXnYah8fILEqRJJRH8OhLFfV HbyYgXMM1UhdKhpeiGNnvmT9tBNoYXoy87q/pmrqeVF4I+X7uc2R92783s/Wtaat r6lKAc/RQvDfLZlw6NGmFudONaY7v59xz9P7cdZK790eGaIVe6I9z78NaqQWPJ2q S4pJPA5B9ggyA7wAfuaPny5+fJRY83JNQU6vB+HwFs+jieuOn3/2I62ArJ9g1A4b Cc6GEAcSHV3dTApuaf71Cu6cnnrAKp2gz7TPS8CybXMIZJRLXGY= -----END CERTIFICATE-----Generated at Sun Sep 7 13:56:46 2025 by rpki-client