$ rpki-client -vvf repo-rpki.idnic.net/repo/dacb7187-7a5f-4e23-be94-593a0c288cb9/0/8C6B9FE80EF1DA40B964D4429F78785ADDD29EFB.mft File: 8C6B9FE80EF1DA40B964D4429F78785ADDD29EFB.mft (raw, json) Hash identifier: JlisE/BIklEz9Zy2DcjmYsmCOlA/DP+HUKxspMAX3WQ= Subject key identifier: FC:88:B1:9F:AD:A6:7B:A8:CD:A6:09:A2:EE:FA:5E:B1:72:33:7D:CA Authority key identifier: 8C:6B:9F:E8:0E:F1:DA:40:B9:64:D4:42:9F:78:78:5A:DD:D2:9E:FB Certificate issuer: /CN=8C6B9FE80EF1DA40B964D4429F78785ADDD29EFB Certificate serial: 62D15D5A381878BF611206A1BA5CF9E7F02820FD Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8C6B9FE80EF1DA40B964D4429F78785ADDD29EFB.cer Subject info access: rsync://repo-rpki.idnic.net/repo/dacb7187-7a5f-4e23-be94-593a0c288cb9/0/8C6B9FE80EF1DA40B964D4429F78785ADDD29EFB.mft Manifest number: 01DE Signing time: Sat 06 Sep 2025 06:01:24 +0000 Manifest this update: Sat 06 Sep 2025 05:56:24 +0000 Manifest next update: Tue 09 Sep 2025 09:05:24 +0000 Files and hashes: 1: 8C6B9FE80EF1DA40B964D4429F78785ADDD29EFB.crl (hash: rOLCFXlwmlExEete4TdBypaWJDSkDSn+rKvw+gMQFO4=) 2: 3130332e31302e37302e302f32342d3234203d3e20313530323130.roa (hash: 5JDd/HA007WXvt9HRMOrUb4bJ8L4vCr7oaVmKSZ2Ddg=) 3: 3130332e31302e37312e302f32342d3234203d3e20313530323130.roa (hash: wDta+92k3x+gK76Z0kGm3qQTLhs6WF7nJtND4k4DV9Y=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/dacb7187-7a5f-4e23-be94-593a0c288cb9/0/8C6B9FE80EF1DA40B964D4429F78785ADDD29EFB.crl rsync://repo-rpki.idnic.net/repo/dacb7187-7a5f-4e23-be94-593a0c288cb9/0/8C6B9FE80EF1DA40B964D4429F78785ADDD29EFB.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8C6B9FE80EF1DA40B964D4429F78785ADDD29EFB.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 09 Sep 2025 09:05:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 62:d1:5d:5a:38:18:78:bf:61:12:06:a1:ba:5c:f9:e7:f0:28:20:fd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8C6B9FE80EF1DA40B964D4429F78785ADDD29EFB Validity Not Before: Sep 6 05:56:24 2025 GMT Not After : Sep 9 09:05:24 2025 GMT Subject: CN=FC88B19FADA67BA8CDA609A2EEFA5EB172337DCA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:4c:38:f0:fb:6b:8a:34:e8:3e:80:28:20:40: 67:4f:e0:d5:6b:f2:6e:73:e8:0e:33:4e:93:87:2d: 03:9d:06:26:a9:b7:b5:23:00:0f:46:bf:ac:a8:18: 6b:6c:1d:6f:bb:f9:cc:98:3a:fd:51:af:e1:b1:92: bf:9c:28:4e:b7:6d:2b:32:0c:8e:4f:22:e1:53:c6: d9:cf:75:d6:fe:f8:4d:d8:e0:5f:66:21:f3:ba:85: 45:f1:b2:cf:2b:fc:44:39:27:9b:b0:b3:83:f1:b1: 69:32:54:e0:95:af:2b:9c:5f:d8:f9:b0:72:b4:ad: 83:84:80:88:1a:81:ac:23:7d:82:e0:4a:39:10:f0: bd:1b:04:53:e8:59:92:0c:35:f4:3b:0e:fb:31:8d: d1:ce:1a:33:a2:be:d8:ac:85:10:e9:5e:a9:64:a0: 36:24:35:69:a0:a1:be:44:29:94:56:2e:0a:eb:0c: ab:e5:2a:89:65:89:b2:b9:f9:96:da:57:1e:ee:e7: 97:70:20:02:36:77:86:74:f3:82:78:3f:5f:13:f6: 70:0a:e1:77:3f:1d:48:be:25:a5:e4:aa:9b:c4:02: 66:ec:ad:92:1a:11:b4:f1:d0:fa:6c:61:90:b9:4b: 52:1f:02:59:58:8b:b1:58:1e:89:fa:59:87:28:fe: bc:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FC:88:B1:9F:AD:A6:7B:A8:CD:A6:09:A2:EE:FA:5E:B1:72:33:7D:CA X509v3 Authority Key Identifier: keyid:8C:6B:9F:E8:0E:F1:DA:40:B9:64:D4:42:9F:78:78:5A:DD:D2:9E:FB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/dacb7187-7a5f-4e23-be94-593a0c288cb9/0/8C6B9FE80EF1DA40B964D4429F78785ADDD29EFB.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8C6B9FE80EF1DA40B964D4429F78785ADDD29EFB.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/dacb7187-7a5f-4e23-be94-593a0c288cb9/0/8C6B9FE80EF1DA40B964D4429F78785ADDD29EFB.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 21:4a:3b:f6:a5:b9:09:1c:e4:56:8c:28:b6:74:ee:16:9a:59: 2b:38:0e:7b:37:af:88:70:06:f7:47:13:3c:65:fb:48:d4:58: 66:3b:c4:36:22:b8:f9:72:83:cf:13:4d:1e:1c:b4:c5:83:78: 7a:a5:4d:47:1b:d3:15:41:4d:60:e0:b2:a4:a3:0d:a9:6c:78: 92:30:e5:46:c1:f9:94:65:34:ec:b3:13:a7:bb:fc:86:b8:0a: d4:cf:4d:20:fe:9b:f3:0c:43:8f:35:4c:76:ff:4b:2e:23:2b: 64:20:58:72:ef:fe:e6:2f:de:92:3d:26:c8:d0:0c:8b:48:2e: 1e:d3:3b:25:55:78:a6:54:08:6a:92:0d:4e:42:8e:e9:2d:b7: 94:76:5a:6e:89:31:89:9f:38:5f:52:5d:05:e6:fc:e4:bd:4b: bd:2a:85:fb:b3:c5:44:52:c3:1c:34:b9:cf:b7:23:f4:0e:a4: a8:e1:19:5b:ac:80:87:74:18:65:65:71:f6:7a:ea:32:10:96: 2e:d6:16:00:74:19:3f:78:50:69:ab:32:38:14:de:79:92:2e: 4d:ac:cf:df:9c:c7:b7:a2:18:34:23:d3:d2:f6:e3:f3:23:e4: a6:c8:c9:32:ff:4c:fb:4a:b0:35:a4:71:10:fe:ae:0a:65:6f: 90:4f:8f:33 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUYtFdWjgYeL9hEgahulz55/AoIP0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEM2QjlGRTgwRUYxREE0MEI5NjRENDQyOUY3ODc4NUFE REQyOUVGQjAeFw0yNTA5MDYwNTU2MjRaFw0yNTA5MDkwOTA1MjRaMDMxMTAvBgNV BAMTKEZDODhCMTlGQURBNjdCQThDREE2MDlBMkVFRkE1RUIxNzIzMzdEQ0EwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCvTDjw+2uKNOg+gCggQGdP4NVr 8m5z6A4zTpOHLQOdBiapt7UjAA9Gv6yoGGtsHW+7+cyYOv1Rr+Gxkr+cKE63bSsy DI5PIuFTxtnPddb++E3Y4F9mIfO6hUXxss8r/EQ5J5uws4PxsWkyVOCVryucX9j5 sHK0rYOEgIgagawjfYLgSjkQ8L0bBFPoWZIMNfQ7DvsxjdHOGjOivtishRDpXqlk oDYkNWmgob5EKZRWLgrrDKvlKollibK5+ZbaVx7u55dwIAI2d4Z084J4P18T9nAK 4Xc/HUi+JaXkqpvEAmbsrZIaEbTx0PpsYZC5S1IfAllYi7FYHon6WYco/rxzAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU/Iixn62me6jNpgmi7vpesXIzfcowHwYDVR0j BBgwFoAUjGuf6A7x2kC5ZNRCn3h4Wt3SnvswDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k YWNiNzE4Ny03YTVmLTRlMjMtYmU5NC01OTNhMGMyODhjYjkvMC84QzZCOUZFODBF RjFEQTQwQjk2NEQ0NDI5Rjc4Nzg1QURERDI5RUZCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOEM2QjlGRTgwRUYxREE0MEI5NjRENDQyOUY3ODc4NUFEREQy OUVGQi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZGFjYjcxODctN2E1Zi00ZTIzLWJl OTQtNTkzYTBjMjg4Y2I5LzAvOEM2QjlGRTgwRUYxREE0MEI5NjRENDQyOUY3ODc4 NUFEREQyOUVGQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACFKO/aluQkc5FaMKLZ07haaWSs4Dns3r4hw BvdHEzxl+0jUWGY7xDYiuPlyg88TTR4ctMWDeHqlTUcb0xVBTWDgsqSjDalseJIw 5UbB+ZRlNOyzE6e7/Ia4CtTPTSD+m/MMQ481THb/Sy4jK2QgWHLv/uYv3pI9JsjQ DItILh7TOyVVeKZUCGqSDU5Cjuktt5R2Wm6JMYmfOF9SXQXm/OS9S70qhfuzxURS wxw0uc+3I/QOpKjhGVusgId0GGVlcfZ66jIQli7WFgB0GT94UGmrMjgU3nmSLk2s z9+cx7eiGDQj09L24/Mj5KbIyTL/TPtKsDWkcRD+rgplb5BPjzM= -----END CERTIFICATE-----Generated at Sun Sep 7 15:36:50 2025 by rpki-client