$ rpki-client -vvf repo-rpki.idnic.net/repo/cf0ba1e7-d142-47cd-8d8f-2a372b922223/0/8874CE775F191B6E0B34A789A359EB9FB93B737E.mft File: 8874CE775F191B6E0B34A789A359EB9FB93B737E.mft (raw, json) Hash identifier: J+Uq3AHHdAJMNynaWYIoL+5p2U+SqK1DffSFqRfQL5w= Subject key identifier: 06:07:E5:D4:41:A4:FD:ED:C4:D8:7D:B4:22:EF:FE:49:9B:9F:8A:4D Authority key identifier: 88:74:CE:77:5F:19:1B:6E:0B:34:A7:89:A3:59:EB:9F:B9:3B:73:7E Certificate issuer: /CN=8874CE775F191B6E0B34A789A359EB9FB93B737E Certificate serial: 3700B875DFA4D981DE7E0CAD46EC27D04AA9B75C Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8874CE775F191B6E0B34A789A359EB9FB93B737E.cer Subject info access: rsync://repo-rpki.idnic.net/repo/cf0ba1e7-d142-47cd-8d8f-2a372b922223/0/8874CE775F191B6E0B34A789A359EB9FB93B737E.mft Manifest number: 025D Signing time: Wed 03 Sep 2025 10:40:44 +0000 Manifest this update: Wed 03 Sep 2025 10:35:44 +0000 Manifest next update: Sat 06 Sep 2025 14:57:44 +0000 Files and hashes: 1: 3130332e3137322e32342e302f32342d3234203d3e20313432333837.roa (hash: Y9XARniDJgg4OUqj6GjFvuZ0EXuuYtQJNDhXyplaxBY=) 2: 3130332e3137322e32352e302f32342d3234203d3e20313432333837.roa (hash: CcBFwGpASAvXeD5i1IQiNWPfNj9jmof+ADOKkYxnqW8=) 3: 8874CE775F191B6E0B34A789A359EB9FB93B737E.crl (hash: Vur/FB7SmoYdXKEPQQY0lTHUkWYewySDnYIXOG4wUkI=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/cf0ba1e7-d142-47cd-8d8f-2a372b922223/0/8874CE775F191B6E0B34A789A359EB9FB93B737E.crl rsync://repo-rpki.idnic.net/repo/cf0ba1e7-d142-47cd-8d8f-2a372b922223/0/8874CE775F191B6E0B34A789A359EB9FB93B737E.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8874CE775F191B6E0B34A789A359EB9FB93B737E.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 06 Sep 2025 14:57:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 37:00:b8:75:df:a4:d9:81:de:7e:0c:ad:46:ec:27:d0:4a:a9:b7:5c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8874CE775F191B6E0B34A789A359EB9FB93B737E Validity Not Before: Sep 3 10:35:44 2025 GMT Not After : Sep 6 14:57:44 2025 GMT Subject: CN=0607E5D441A4FDEDC4D87DB422EFFE499B9F8A4D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:a5:76:f7:1b:bb:14:29:86:f2:7d:7c:d6:e3: 21:24:ba:0b:fe:48:16:d7:d0:94:75:72:0f:7d:c1: 7b:11:21:1c:66:13:a5:a9:1f:ec:4f:7f:29:e0:69: 29:04:f8:b0:b5:8a:a8:34:f5:56:c5:95:71:31:3f: 8b:00:73:03:79:3c:6c:b3:78:6c:60:5a:ce:cb:eb: 1c:12:43:d8:d0:fa:43:67:5a:35:ba:e7:ea:7a:28: 0b:9a:48:35:8f:28:45:9c:3b:80:2e:7f:bd:71:b1: 2d:87:7a:64:15:3d:cf:b6:77:de:ac:a4:54:25:2e: 85:0f:bb:6c:a0:35:ef:d1:29:5e:d2:ac:87:56:7f: b3:6d:88:50:51:d3:29:e4:89:0d:52:bb:e3:d1:76: 82:e2:e2:45:e7:6e:37:d0:13:ac:f4:ce:65:14:31: 40:c8:5e:d5:75:66:dc:7d:21:1b:81:29:3f:8d:e3: 41:3b:d5:ba:db:91:db:47:21:f2:a3:94:44:5c:0c: 2f:0e:b3:6e:3f:cf:b3:d2:09:b6:6a:63:57:07:29: 6c:17:1f:69:79:0d:24:58:e2:8e:c6:b7:01:74:3e: 3e:be:e1:b1:42:54:00:aa:68:c3:af:11:2b:bf:3a: ef:ea:72:f3:5f:ca:23:5c:d2:78:38:75:88:c3:dc: 8a:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 06:07:E5:D4:41:A4:FD:ED:C4:D8:7D:B4:22:EF:FE:49:9B:9F:8A:4D X509v3 Authority Key Identifier: keyid:88:74:CE:77:5F:19:1B:6E:0B:34:A7:89:A3:59:EB:9F:B9:3B:73:7E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/cf0ba1e7-d142-47cd-8d8f-2a372b922223/0/8874CE775F191B6E0B34A789A359EB9FB93B737E.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8874CE775F191B6E0B34A789A359EB9FB93B737E.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/cf0ba1e7-d142-47cd-8d8f-2a372b922223/0/8874CE775F191B6E0B34A789A359EB9FB93B737E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 48:d1:e2:f6:68:b4:5a:47:c7:04:2c:d7:3a:6d:e9:d1:d1:21: ac:c1:0b:84:9d:93:0f:91:cb:45:30:27:a3:95:a3:b2:f8:d6: 65:9c:5c:1d:30:0e:d3:06:89:a8:ed:37:e5:be:b9:78:53:76: ca:14:f8:a3:03:46:9c:66:19:4f:6d:fa:c1:ba:e5:af:be:8b: b8:b5:f7:81:2b:28:2a:f8:43:5a:eb:37:2e:69:ce:82:60:c7: 87:81:74:b0:77:5c:9b:cb:14:73:09:8b:bb:12:01:1c:08:7c: 12:49:2b:08:44:92:a6:8c:0e:5d:0c:ba:37:22:f1:72:cb:b1: de:a6:36:40:ac:49:c1:ea:66:f4:59:19:ef:44:71:f1:a4:6d: e6:fb:ee:7d:0f:a6:ea:bf:36:7d:18:97:8f:06:59:8d:83:2e: 8f:92:1a:52:5f:8a:de:33:8a:e3:2f:cd:9b:4d:b4:78:31:0c: 79:bd:59:5e:a4:c5:af:ba:cf:c5:ac:77:a3:3a:b8:5d:c3:6e: 72:d6:6b:e0:d2:9e:81:50:97:9d:14:a3:eb:f3:82:63:04:3d: e3:5d:20:be:ab:ce:c7:26:67:5a:04:c6:12:44:c5:c3:4e:7d: 9c:bb:cf:e3:09:68:02:9c:df:9c:a1:33:cc:e8:5e:bb:6a:b5: aa:81:07:28 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUNwC4dd+k2YHefgytRuwn0Eqpt1wwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODg3NENFNzc1RjE5MUI2RTBCMzRBNzg5QTM1OUVCOUZC OTNCNzM3RTAeFw0yNTA5MDMxMDM1NDRaFw0yNTA5MDYxNDU3NDRaMDMxMTAvBgNV BAMTKDA2MDdFNUQ0NDFBNEZERURDNEQ4N0RCNDIyRUZGRTQ5OUI5RjhBNEQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC4pXb3G7sUKYbyfXzW4yEkugv+ SBbX0JR1cg99wXsRIRxmE6WpH+xPfyngaSkE+LC1iqg09VbFlXExP4sAcwN5PGyz eGxgWs7L6xwSQ9jQ+kNnWjW65+p6KAuaSDWPKEWcO4Auf71xsS2HemQVPc+2d96s pFQlLoUPu2ygNe/RKV7SrIdWf7NtiFBR0ynkiQ1Su+PRdoLi4kXnbjfQE6z0zmUU MUDIXtV1Ztx9IRuBKT+N40E71brbkdtHIfKjlERcDC8Os24/z7PSCbZqY1cHKWwX H2l5DSRY4o7GtwF0Pj6+4bFCVACqaMOvESu/Ou/qcvNfyiNc0ng4dYjD3IrRAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUBgfl1EGk/e3E2H20Iu/+SZufik0wHwYDVR0j BBgwFoAUiHTOd18ZG24LNKeJo1nrn7k7c34wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j ZjBiYTFlNy1kMTQyLTQ3Y2QtOGQ4Zi0yYTM3MmI5MjIyMjMvMC84ODc0Q0U3NzVG MTkxQjZFMEIzNEE3ODlBMzU5RUI5RkI5M0I3MzdFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvODg3NENFNzc1RjE5MUI2RTBCMzRBNzg5QTM1OUVCOUZCOTNC NzM3RS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vY2YwYmExZTctZDE0Mi00N2NkLThk OGYtMmEzNzJiOTIyMjIzLzAvODg3NENFNzc1RjE5MUI2RTBCMzRBNzg5QTM1OUVC OUZCOTNCNzM3RS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEjR4vZotFpHxwQs1zpt6dHRIazBC4Sdkw+R y0UwJ6OVo7L41mWcXB0wDtMGiajtN+W+uXhTdsoU+KMDRpxmGU9t+sG65a++i7i1 94ErKCr4Q1rrNy5pzoJgx4eBdLB3XJvLFHMJi7sSARwIfBJJKwhEkqaMDl0Mujci 8XLLsd6mNkCsScHqZvRZGe9EcfGkbeb77n0Ppuq/Nn0Yl48GWY2DLo+SGlJfit4z iuMvzZtNtHgxDHm9WV6kxa+6z8Wsd6M6uF3DbnLWa+DSnoFQl50Uo+vzgmMEPeNd IL6rzscmZ1oExhJExcNOfZy7z+MJaAKc35yhM8zoXrtqtaqBByg= -----END CERTIFICATE-----Generated at Fri Sep 5 10:36:18 2025 by rpki-client