$ rpki-client -vvf repo-rpki.idnic.net/repo/d7ff01d0-26f9-4b20-a318-c311c267f2af/0/8A54C81A444D07051A24AACF743F01863F8129AB.mft File: 8A54C81A444D07051A24AACF743F01863F8129AB.mft (raw, json) Hash identifier: TTYlg7//eck35Zb47Hr6AkjfO8pT72NcLA2g1TSFTN0= Subject key identifier: 25:3F:7E:5B:6E:71:02:76:54:59:95:68:61:67:6C:A2:30:C5:38:DE Authority key identifier: 8A:54:C8:1A:44:4D:07:05:1A:24:AA:CF:74:3F:01:86:3F:81:29:AB Certificate issuer: /CN=8A54C81A444D07051A24AACF743F01863F8129AB Certificate serial: 6A1A366661C4C81F04E27B182870C185CC751442 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8A54C81A444D07051A24AACF743F01863F8129AB.cer Subject info access: rsync://repo-rpki.idnic.net/repo/d7ff01d0-26f9-4b20-a318-c311c267f2af/0/8A54C81A444D07051A24AACF743F01863F8129AB.mft Manifest number: 02E3 Signing time: Thu 04 Sep 2025 18:40:38 +0000 Manifest this update: Thu 04 Sep 2025 18:35:38 +0000 Manifest next update: Mon 08 Sep 2025 02:59:38 +0000 Files and hashes: 1: 3130332e3136362e3135382e302f32342d3234203d3e20313431393535.roa (hash: Bup7LELWa0M49WEmJBOXwO3r0+CyN1znNANGE751Xcc=) 2: 3130332e3136362e3135392e302f32342d3234203d3e20313431393535.roa (hash: D5y/dOOdbevGbXtghOHQINTcjdbypBLwek1XQ3CqPYE=) 3: 8A54C81A444D07051A24AACF743F01863F8129AB.crl (hash: dnCtBatxl+TwPOtiNN6BPE8Idc9yGQPuL9jxOQ3v9eQ=) 4: 3130332e3136362e3135382e302f32332d3233203d3e20313431393535.roa (hash: 8iqd/DLPSKXzm6qMwrWasV0WJDuso56p2m5ElmgcTDA=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/d7ff01d0-26f9-4b20-a318-c311c267f2af/0/8A54C81A444D07051A24AACF743F01863F8129AB.crl rsync://repo-rpki.idnic.net/repo/d7ff01d0-26f9-4b20-a318-c311c267f2af/0/8A54C81A444D07051A24AACF743F01863F8129AB.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8A54C81A444D07051A24AACF743F01863F8129AB.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 08 Sep 2025 02:59:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6a:1a:36:66:61:c4:c8:1f:04:e2:7b:18:28:70:c1:85:cc:75:14:42 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8A54C81A444D07051A24AACF743F01863F8129AB Validity Not Before: Sep 4 18:35:38 2025 GMT Not After : Sep 8 02:59:38 2025 GMT Subject: CN=253F7E5B6E7102765459956861676CA230C538DE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:58:a3:c7:d4:6c:35:9c:24:ef:50:02:b9:0e: 42:cd:be:6d:90:34:a8:15:af:47:ea:fd:54:16:cd: 79:01:58:54:05:5f:33:dd:7e:b2:c3:6f:8b:44:65: a9:ed:43:5d:fd:8b:1d:b3:7e:52:06:db:ee:44:04: 76:29:48:53:13:94:e9:71:45:0f:1d:f6:94:62:32: eb:ad:ff:39:01:b2:4e:10:d2:44:c6:56:b0:d8:87: 8a:7a:88:0d:20:98:d5:a4:a8:68:13:9e:a0:67:38: b6:5b:63:f2:cc:cd:91:d4:38:1a:f3:10:10:2f:96: 27:0a:40:39:c7:a0:bc:53:e8:9b:12:af:73:63:c6: ad:9b:fe:18:68:61:97:5c:71:e8:4d:1c:b0:14:5a: 11:19:84:94:45:98:19:3a:0a:85:ca:ec:f2:28:1f: 6e:1f:23:97:fb:d5:a9:f5:1a:d6:0f:80:e0:56:67: b8:35:9e:bc:55:ee:dc:04:6e:e6:c9:61:c9:58:43: 82:f9:a7:96:05:e6:18:f4:4d:d2:34:c7:3b:c3:93: 3c:af:22:4c:b9:f7:85:c9:7b:11:15:34:c9:f0:2e: ab:e6:ec:5d:a2:fd:9b:dc:2f:d7:f6:f7:e8:96:0b: d5:5d:2b:b8:45:2d:32:67:c4:2d:b8:27:90:99:42: 51:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 25:3F:7E:5B:6E:71:02:76:54:59:95:68:61:67:6C:A2:30:C5:38:DE X509v3 Authority Key Identifier: keyid:8A:54:C8:1A:44:4D:07:05:1A:24:AA:CF:74:3F:01:86:3F:81:29:AB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/d7ff01d0-26f9-4b20-a318-c311c267f2af/0/8A54C81A444D07051A24AACF743F01863F8129AB.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8A54C81A444D07051A24AACF743F01863F8129AB.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d7ff01d0-26f9-4b20-a318-c311c267f2af/0/8A54C81A444D07051A24AACF743F01863F8129AB.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 46:ac:63:f6:03:76:fb:5e:6f:6f:98:a7:2c:42:b9:e1:b8:0a: 5b:2e:1f:bf:0e:e4:6a:3f:cf:f6:d7:29:39:01:0a:28:e3:c6: fe:63:f2:29:ad:20:25:35:83:5d:b2:0a:3a:b4:f1:fb:fa:6a: 15:cf:69:72:70:a0:d1:96:96:3a:02:83:07:de:27:59:82:63: 30:05:43:02:1f:a4:98:13:44:ba:5d:30:8c:1d:46:18:68:12: c7:98:96:2c:96:84:c4:04:07:48:ac:25:23:ae:5b:68:61:74: d0:ea:09:31:26:b7:19:0f:bf:17:8f:ed:85:22:26:20:fe:f6: 29:ce:ac:4c:dd:42:76:70:b0:77:f4:44:47:b7:e3:2e:1f:8d: 1e:2d:f5:36:fc:80:cb:1d:d2:9a:01:83:45:dc:39:95:37:45: 99:18:37:f9:35:68:19:e6:76:6b:e0:06:5b:83:76:2a:c1:14: a3:88:34:08:54:1f:1e:1f:87:0a:9b:fa:84:5e:24:4f:c6:2f: 5d:a4:e6:88:3f:13:66:fa:b8:8d:b4:68:68:3d:ae:56:9a:9f: e6:bc:3d:d7:0a:0e:1a:ab:e6:6e:fb:2e:84:e2:03:44:eb:55: d6:be:d0:9c:1b:2b:6e:68:49:d8:6f:4d:da:80:c0:01:9f:b3: c2:b1:21:a2 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUaho2ZmHEyB8E4nsYKHDBhcx1FEIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEE1NEM4MUE0NDREMDcwNTFBMjRBQUNGNzQzRjAxODYz RjgxMjlBQjAeFw0yNTA5MDQxODM1MzhaFw0yNTA5MDgwMjU5MzhaMDMxMTAvBgNV BAMTKDI1M0Y3RTVCNkU3MTAyNzY1NDU5OTU2ODYxNjc2Q0EyMzBDNTM4REUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDkWKPH1Gw1nCTvUAK5DkLNvm2Q NKgVr0fq/VQWzXkBWFQFXzPdfrLDb4tEZantQ139ix2zflIG2+5EBHYpSFMTlOlx RQ8d9pRiMuut/zkBsk4Q0kTGVrDYh4p6iA0gmNWkqGgTnqBnOLZbY/LMzZHUOBrz EBAvlicKQDnHoLxT6JsSr3Njxq2b/hhoYZdccehNHLAUWhEZhJRFmBk6CoXK7PIo H24fI5f71an1GtYPgOBWZ7g1nrxV7twEbubJYclYQ4L5p5YF5hj0TdI0xzvDkzyv Iky594XJexEVNMnwLqvm7F2i/ZvcL9f29+iWC9VdK7hFLTJnxC24J5CZQlFNAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUJT9+W25xAnZUWZVoYWdsojDFON4wHwYDVR0j BBgwFoAUilTIGkRNBwUaJKrPdD8Bhj+BKaswDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k N2ZmMDFkMC0yNmY5LTRiMjAtYTMxOC1jMzExYzI2N2YyYWYvMC84QTU0QzgxQTQ0 NEQwNzA1MUEyNEFBQ0Y3NDNGMDE4NjNGODEyOUFCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOEE1NEM4MUE0NDREMDcwNTFBMjRBQUNGNzQzRjAxODYzRjgx MjlBQi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZDdmZjAxZDAtMjZmOS00YjIwLWEz MTgtYzMxMWMyNjdmMmFmLzAvOEE1NEM4MUE0NDREMDcwNTFBMjRBQUNGNzQzRjAx ODYzRjgxMjlBQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEasY/YDdvteb2+YpyxCueG4ClsuH78O5Go/ z/bXKTkBCijjxv5j8imtICU1g12yCjq08fv6ahXPaXJwoNGWljoCgwfeJ1mCYzAF QwIfpJgTRLpdMIwdRhhoEseYliyWhMQEB0isJSOuW2hhdNDqCTEmtxkPvxeP7YUi JiD+9inOrEzdQnZwsHf0REe34y4fjR4t9Tb8gMsd0poBg0XcOZU3RZkYN/k1aBnm dmvgBluDdirBFKOINAhUHx4fhwqb+oReJE/GL12k5og/E2b6uI20aGg9rlaan+a8 PdcKDhqr5m77LoTiA0TrVda+0JwbK25oSdhvTdqAwAGfs8KxIaI= -----END CERTIFICATE-----Generated at Fri Sep 5 10:18:37 2025 by rpki-client