$ rpki-client -vvf repo-rpki.idnic.net/repo/d44dfb5a-6e24-4a4d-8969-eb3cbe34e47e/0/8F52E72816B856335390C4F4AFBAF207C21522F6.mft File: 8F52E72816B856335390C4F4AFBAF207C21522F6.mft (raw, json) Hash identifier: n3ojCOdU9nT0juC9NoldSCtwLkpQQtobLJyywdcitck= Subject key identifier: 85:3F:19:17:3D:4E:0C:D2:A3:D8:FE:D7:AB:8F:B1:77:53:DE:7E:DC Authority key identifier: 8F:52:E7:28:16:B8:56:33:53:90:C4:F4:AF:BA:F2:07:C2:15:22:F6 Certificate issuer: /CN=8F52E72816B856335390C4F4AFBAF207C21522F6 Certificate serial: 545B70A13A2034DA026EF1AB6E95C7CBD8E0A642 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8F52E72816B856335390C4F4AFBAF207C21522F6.cer Subject info access: rsync://repo-rpki.idnic.net/repo/d44dfb5a-6e24-4a4d-8969-eb3cbe34e47e/0/8F52E72816B856335390C4F4AFBAF207C21522F6.mft Manifest number: 0203 Signing time: Thu 04 Sep 2025 06:52:15 +0000 Manifest this update: Thu 04 Sep 2025 06:47:15 +0000 Manifest next update: Sun 07 Sep 2025 11:47:15 +0000 Files and hashes: 1: 3130332e3135382e3132362e302f32332d3234203d3e203338333230.roa (hash: sAEVe363BvIs2dOx1hxbCSZZoE73/9sHIDXoFlichKA=) 2: 8F52E72816B856335390C4F4AFBAF207C21522F6.crl (hash: ukIEprbZskPwC24A5T2bcsKPZRBA8oRm5YADw1JG82Q=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/d44dfb5a-6e24-4a4d-8969-eb3cbe34e47e/0/8F52E72816B856335390C4F4AFBAF207C21522F6.crl rsync://repo-rpki.idnic.net/repo/d44dfb5a-6e24-4a4d-8969-eb3cbe34e47e/0/8F52E72816B856335390C4F4AFBAF207C21522F6.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8F52E72816B856335390C4F4AFBAF207C21522F6.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 07 Sep 2025 11:47:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 54:5b:70:a1:3a:20:34:da:02:6e:f1:ab:6e:95:c7:cb:d8:e0:a6:42 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8F52E72816B856335390C4F4AFBAF207C21522F6 Validity Not Before: Sep 4 06:47:15 2025 GMT Not After : Sep 7 11:47:15 2025 GMT Subject: CN=853F19173D4E0CD2A3D8FED7AB8FB17753DE7EDC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:b6:cd:0d:dc:12:68:b3:43:60:96:f9:75:31: b5:97:d4:6a:9c:65:5e:ef:32:b6:d5:9f:ac:00:65: 7e:22:99:2b:3e:23:64:df:9c:b7:2b:4e:8a:7c:63: 48:f6:01:78:07:52:4d:55:1f:19:8f:1e:78:cb:71: 6b:32:45:7d:7c:40:e0:ea:e4:0a:13:f6:d4:6f:83: 05:46:7b:9b:ed:65:9b:ce:e5:dc:30:73:30:75:1a: d7:29:3a:0a:fc:b6:ec:9c:2e:fd:e8:3f:0d:5f:be: a6:ed:fc:c1:92:f3:1b:d8:87:60:42:ec:10:ec:6d: 39:50:f3:d5:68:46:da:33:fa:48:36:9f:80:b0:38: 35:7b:ef:56:1a:34:65:c0:c3:55:d2:ae:67:e1:d5: 0d:07:af:04:5c:34:45:ef:8d:c8:09:a2:81:65:df: 8d:d8:65:f0:6d:97:d9:99:0b:d1:1e:9c:8e:54:83: 12:57:1d:fc:47:84:67:c6:86:a1:2a:f0:de:5e:7c: 32:3c:4f:b8:00:c6:e5:74:f0:18:5f:78:a7:e3:3d: b3:28:65:bf:ad:5f:e7:74:ca:c9:b5:0b:7e:90:9c: c9:62:07:39:7c:35:b0:8e:c7:d4:79:bf:09:28:e0: 36:fb:1d:53:ab:87:05:02:4b:a8:8a:33:9b:10:99: 43:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:3F:19:17:3D:4E:0C:D2:A3:D8:FE:D7:AB:8F:B1:77:53:DE:7E:DC X509v3 Authority Key Identifier: keyid:8F:52:E7:28:16:B8:56:33:53:90:C4:F4:AF:BA:F2:07:C2:15:22:F6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/d44dfb5a-6e24-4a4d-8969-eb3cbe34e47e/0/8F52E72816B856335390C4F4AFBAF207C21522F6.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8F52E72816B856335390C4F4AFBAF207C21522F6.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d44dfb5a-6e24-4a4d-8969-eb3cbe34e47e/0/8F52E72816B856335390C4F4AFBAF207C21522F6.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 51:c7:64:d3:eb:21:47:84:cf:bb:41:64:5f:3a:31:8f:e6:cb: 6a:d1:bd:9b:0d:bc:36:1a:92:eb:fa:8b:ba:e4:11:1d:3d:52: e7:cd:0f:e7:91:87:ee:28:79:ae:8e:d0:43:55:15:2b:78:56: 40:7a:87:60:a6:52:32:d1:52:ae:c3:c0:1a:47:df:c9:8d:bd: 0f:f1:c7:84:da:fd:e5:b8:54:52:36:fb:0b:21:24:31:2e:fa: 5e:e3:7a:bb:e6:0b:5a:01:b4:7a:9d:0a:8b:d4:c8:7b:46:60: 56:b2:06:31:63:14:ce:58:a2:b8:57:71:da:9a:39:4e:61:d7: 11:28:23:53:63:fd:13:78:a5:b3:72:d0:12:4c:db:6a:1b:c0: 39:97:fa:a5:b4:f6:f3:cc:6a:99:e8:67:4a:bc:0a:88:38:ea: 28:0f:e6:61:f9:4f:74:26:9f:a0:7e:9e:1d:fb:6b:99:1d:05: 0b:b4:4b:2a:6e:b9:ed:f2:ca:83:87:08:96:c4:5a:e5:1b:40: 25:2c:89:d4:44:e6:87:18:e5:f3:b7:ee:63:05:f9:69:68:65: de:e9:00:a3:68:08:80:ef:cf:41:eb:f9:76:58:d4:72:2f:11: b8:46:6a:dc:76:04:d9:17:a9:86:1e:6e:07:59:cb:13:0b:99: ed:99:06:e8 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUVFtwoTogNNoCbvGrbpXHy9jgpkIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEY1MkU3MjgxNkI4NTYzMzUzOTBDNEY0QUZCQUYyMDdD MjE1MjJGNjAeFw0yNTA5MDQwNjQ3MTVaFw0yNTA5MDcxMTQ3MTVaMDMxMTAvBgNV BAMTKDg1M0YxOTE3M0Q0RTBDRDJBM0Q4RkVEN0FCOEZCMTc3NTNERTdFREMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDUts0N3BJos0Nglvl1MbWX1Gqc ZV7vMrbVn6wAZX4imSs+I2TfnLcrTop8Y0j2AXgHUk1VHxmPHnjLcWsyRX18QODq 5AoT9tRvgwVGe5vtZZvO5dwwczB1GtcpOgr8tuycLv3oPw1fvqbt/MGS8xvYh2BC 7BDsbTlQ89VoRtoz+kg2n4CwODV771YaNGXAw1XSrmfh1Q0HrwRcNEXvjcgJooFl 343YZfBtl9mZC9EenI5UgxJXHfxHhGfGhqEq8N5efDI8T7gAxuV08BhfeKfjPbMo Zb+tX+d0ysm1C36QnMliBzl8NbCOx9R5vwko4Db7HVOrhwUCS6iKM5sQmUNzAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUhT8ZFz1ODNKj2P7Xq4+xd1PeftwwHwYDVR0j BBgwFoAUj1LnKBa4VjNTkMT0r7ryB8IVIvYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k NDRkZmI1YS02ZTI0LTRhNGQtODk2OS1lYjNjYmUzNGU0N2UvMC84RjUyRTcyODE2 Qjg1NjMzNTM5MEM0RjRBRkJBRjIwN0MyMTUyMkY2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOEY1MkU3MjgxNkI4NTYzMzUzOTBDNEY0QUZCQUYyMDdDMjE1 MjJGNi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZDQ0ZGZiNWEtNmUyNC00YTRkLTg5 NjktZWIzY2JlMzRlNDdlLzAvOEY1MkU3MjgxNkI4NTYzMzUzOTBDNEY0QUZCQUYy MDdDMjE1MjJGNi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFHHZNPrIUeEz7tBZF86MY/my2rRvZsNvDYa kuv6i7rkER09UufND+eRh+4oea6O0ENVFSt4VkB6h2CmUjLRUq7DwBpH38mNvQ/x x4Ta/eW4VFI2+wshJDEu+l7jervmC1oBtHqdCovUyHtGYFayBjFjFM5YorhXcdqa OU5h1xEoI1Nj/RN4pbNy0BJM22obwDmX+qW09vPMapnoZ0q8Cog46igP5mH5T3Qm n6B+nh37a5kdBQu0Sypuue3yyoOHCJbEWuUbQCUsidRE5ocY5fO37mMF+WloZd7p AKNoCIDvz0Hr+XZY1HIvEbhGatx2BNkXqYYebgdZyxMLme2ZBug= -----END CERTIFICATE-----Generated at Fri Sep 5 10:29:31 2025 by rpki-client