$ rpki-client -vvf repo-rpki.idnic.net/repo/d8b98722-1cb4-40d4-ac8b-c3bca2bca217/0/8A95FAF723EC129E336E75ACE1CD4F3094FB6481.mft File: 8A95FAF723EC129E336E75ACE1CD4F3094FB6481.mft (raw, json) Hash identifier: 6VjjAve+HYCXZT8R4BjuTR9CHWEgOfHmnXywSISzpss= Subject key identifier: 07:11:B4:66:33:6E:C6:4E:D6:2C:A9:E5:0C:B0:48:39:75:7F:CB:B6 Authority key identifier: 8A:95:FA:F7:23:EC:12:9E:33:6E:75:AC:E1:CD:4F:30:94:FB:64:81 Certificate issuer: /CN=8A95FAF723EC129E336E75ACE1CD4F3094FB6481 Certificate serial: 7C31C2D09011E0F841700924FBD77653A40707EC Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8A95FAF723EC129E336E75ACE1CD4F3094FB6481.cer Subject info access: rsync://repo-rpki.idnic.net/repo/d8b98722-1cb4-40d4-ac8b-c3bca2bca217/0/8A95FAF723EC129E336E75ACE1CD4F3094FB6481.mft Manifest number: 044E Signing time: Sat 06 Sep 2025 08:01:25 +0000 Manifest this update: Sat 06 Sep 2025 07:56:25 +0000 Manifest next update: Tue 09 Sep 2025 15:14:25 +0000 Files and hashes: 1: 323030313a6466303a663830303a3a2f34382d3438203d3e203538333937.roa (hash: 8qFDAcssXXUuL7jdU+5MBpRRNuUnSR4XPXnprUszlok=) 2: 34332e3234352e3138302e302f32322d3234203d3e203538333937.roa (hash: f+W5KSnYaSOmv7obX83rwEJhTHZvGPxy0VlZOsEAh+k=) 3: 8A95FAF723EC129E336E75ACE1CD4F3094FB6481.crl (hash: uFXVUvxxMJPT6wyMaMWjjJuxEzIpHm41re/Ebb9AQ6c=) 4: 3130332e32332e32302e302f32322d3234203d3e203538333937.roa (hash: y/aRgAk/Ol217uqThdECq/g+tO93bdhzL10rqxPOy5s=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/d8b98722-1cb4-40d4-ac8b-c3bca2bca217/0/8A95FAF723EC129E336E75ACE1CD4F3094FB6481.crl rsync://repo-rpki.idnic.net/repo/d8b98722-1cb4-40d4-ac8b-c3bca2bca217/0/8A95FAF723EC129E336E75ACE1CD4F3094FB6481.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8A95FAF723EC129E336E75ACE1CD4F3094FB6481.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 09 Sep 2025 15:14:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7c:31:c2:d0:90:11:e0:f8:41:70:09:24:fb:d7:76:53:a4:07:07:ec Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8A95FAF723EC129E336E75ACE1CD4F3094FB6481 Validity Not Before: Sep 6 07:56:25 2025 GMT Not After : Sep 9 15:14:25 2025 GMT Subject: CN=0711B466336EC64ED62CA9E50CB04839757FCBB6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:cb:a8:6f:bb:cc:81:8c:13:e3:e2:7c:d0:19: 69:34:37:52:a2:a0:fc:6c:61:a1:0d:0e:8a:cf:88: 09:02:0e:c7:8c:de:c4:e6:bf:d5:5e:9e:b6:85:99: 12:54:87:1c:94:fb:cc:d0:eb:80:7c:d1:d9:2f:c6: a2:a5:ff:8c:95:8d:2a:12:51:6f:ab:21:3e:82:d8: 1f:26:1c:88:91:11:f0:a1:92:56:35:01:52:bd:b4: d4:2c:11:83:b0:09:8c:00:6e:02:49:8c:45:6b:80: 07:57:93:8b:fb:ed:88:02:2b:fe:c7:18:71:ab:da: ec:1e:9e:27:04:d0:fc:dc:80:f9:74:f2:3a:98:de: d3:74:44:0c:79:e6:58:b4:c6:58:3d:45:b4:fe:b8: 8d:8d:9f:db:94:12:4b:77:e7:83:5d:9e:b5:a1:1e: 8f:32:d0:3e:ed:26:3e:6e:88:3a:9f:42:8e:0c:56: 5d:dc:fa:f3:0b:5a:cd:3a:9e:79:58:81:82:2b:f0: 1c:6a:fb:cb:8d:6b:3c:ec:cb:48:01:99:16:11:9c: 28:dd:6a:29:d0:41:fe:de:6b:d2:b0:96:c0:a7:c1: dc:4f:30:0e:de:ba:77:88:77:03:11:52:15:f1:b3: d1:24:e5:51:dd:61:90:e8:a4:6d:67:40:db:d8:e0: 21:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 07:11:B4:66:33:6E:C6:4E:D6:2C:A9:E5:0C:B0:48:39:75:7F:CB:B6 X509v3 Authority Key Identifier: keyid:8A:95:FA:F7:23:EC:12:9E:33:6E:75:AC:E1:CD:4F:30:94:FB:64:81 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/d8b98722-1cb4-40d4-ac8b-c3bca2bca217/0/8A95FAF723EC129E336E75ACE1CD4F3094FB6481.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8A95FAF723EC129E336E75ACE1CD4F3094FB6481.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d8b98722-1cb4-40d4-ac8b-c3bca2bca217/0/8A95FAF723EC129E336E75ACE1CD4F3094FB6481.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 57:e0:32:a8:6a:3c:06:c8:bb:d8:d2:2b:45:78:8a:cd:1c:8e: 48:88:c3:e0:1c:4d:cb:ac:62:f5:f5:8d:7d:0d:44:85:d3:fe: 89:54:36:eb:58:2f:a6:88:7b:be:e9:cc:67:e9:3b:00:64:20: 20:b7:af:9f:b4:d7:61:b3:31:90:7f:1c:25:61:f4:1e:b7:8a: a7:46:c5:cd:a5:5e:14:9d:ad:99:a4:47:a8:85:9c:59:24:f6: 1d:66:9f:1e:05:cd:27:49:b8:de:7a:d0:00:27:e2:d4:0d:df: 50:fe:31:fd:ef:de:74:3e:aa:8f:91:77:55:3d:e4:54:74:c2: a4:00:f7:ab:13:7c:c5:04:73:54:2c:ba:66:f3:ed:40:a8:65: 21:d3:a0:d6:a0:1e:2e:ea:af:99:5c:93:06:99:04:b9:df:17: b6:e3:50:bd:ac:c8:e0:48:26:66:df:64:47:e3:3e:4d:a8:7c: 73:bb:7e:13:26:c8:c4:c3:d3:15:db:28:8e:23:5e:86:18:e0: 9f:f3:d3:b2:66:c1:a1:6c:d0:d5:0a:59:88:e9:af:d1:a6:83: a9:07:0b:6d:12:df:57:38:74:8d:f8:ca:e8:e6:d1:05:14:65: bd:81:f1:1a:8d:94:b6:12:a7:62:da:bd:85:2e:80:87:0b:02: 62:01:14:30 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUfDHC0JAR4PhBcAkk+9d2U6QHB+wwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEE5NUZBRjcyM0VDMTI5RTMzNkU3NUFDRTFDRDRGMzA5 NEZCNjQ4MTAeFw0yNTA5MDYwNzU2MjVaFw0yNTA5MDkxNTE0MjVaMDMxMTAvBgNV BAMTKDA3MTFCNDY2MzM2RUM2NEVENjJDQTlFNTBDQjA0ODM5NzU3RkNCQjYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCjy6hvu8yBjBPj4nzQGWk0N1Ki oPxsYaENDorPiAkCDseM3sTmv9VenraFmRJUhxyU+8zQ64B80dkvxqKl/4yVjSoS UW+rIT6C2B8mHIiREfChklY1AVK9tNQsEYOwCYwAbgJJjEVrgAdXk4v77YgCK/7H GHGr2uwenicE0PzcgPl08jqY3tN0RAx55li0xlg9RbT+uI2Nn9uUEkt354NdnrWh Ho8y0D7tJj5uiDqfQo4MVl3c+vMLWs06nnlYgYIr8Bxq+8uNazzsy0gBmRYRnCjd ainQQf7ea9KwlsCnwdxPMA7euneIdwMRUhXxs9Ek5VHdYZDopG1nQNvY4CHxAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUBxG0ZjNuxk7WLKnlDLBIOXV/y7YwHwYDVR0j BBgwFoAUipX69yPsEp4zbnWs4c1PMJT7ZIEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k OGI5ODcyMi0xY2I0LTQwZDQtYWM4Yi1jM2JjYTJiY2EyMTcvMC84QTk1RkFGNzIz RUMxMjlFMzM2RTc1QUNFMUNENEYzMDk0RkI2NDgxLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOEE5NUZBRjcyM0VDMTI5RTMzNkU3NUFDRTFDRDRGMzA5NEZC NjQ4MS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZDhiOTg3MjItMWNiNC00MGQ0LWFj OGItYzNiY2EyYmNhMjE3LzAvOEE5NUZBRjcyM0VDMTI5RTMzNkU3NUFDRTFDRDRG MzA5NEZCNjQ4MS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFfgMqhqPAbIu9jSK0V4is0cjkiIw+AcTcus YvX1jX0NRIXT/olUNutYL6aIe77pzGfpOwBkICC3r5+012GzMZB/HCVh9B63iqdG xc2lXhSdrZmkR6iFnFkk9h1mnx4FzSdJuN560AAn4tQN31D+Mf3v3nQ+qo+Rd1U9 5FR0wqQA96sTfMUEc1Qsumbz7UCoZSHToNagHi7qr5lckwaZBLnfF7bjUL2syOBI JmbfZEfjPk2ofHO7fhMmyMTD0xXbKI4jXoYY4J/z07JmwaFs0NUKWYjpr9Gmg6kH C20S31c4dI34yujm0QUUZb2B8RqNlLYSp2LavYUugIcLAmIBFDA= -----END CERTIFICATE-----Generated at Sun Sep 7 13:57:25 2025 by rpki-client