$ rpki-client -vvf repo-rpki.idnic.net/repo/dfee82b7-c182-4e83-897c-e00f3ce1b0d2/0/08E555759AA0C18576364C83261B6CEA4BCF0CCB.mft File: 08E555759AA0C18576364C83261B6CEA4BCF0CCB.mft (raw, json) Hash identifier: /xC5ayh3Cw4fjLo5idAo7GQZti5bCOMmBMMplOjtnh8= Subject key identifier: B8:E6:8C:5A:D5:91:E2:2A:0C:76:6C:36:67:0E:C7:08:A5:F6:1C:8F Authority key identifier: 08:E5:55:75:9A:A0:C1:85:76:36:4C:83:26:1B:6C:EA:4B:CF:0C:CB Certificate issuer: /CN=08E555759AA0C18576364C83261B6CEA4BCF0CCB Certificate serial: 65AA186C3F19C910B7FD525AB6BF131199EA5C36 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/08E555759AA0C18576364C83261B6CEA4BCF0CCB.cer Subject info access: rsync://repo-rpki.idnic.net/repo/dfee82b7-c182-4e83-897c-e00f3ce1b0d2/0/08E555759AA0C18576364C83261B6CEA4BCF0CCB.mft Manifest number: 01E8 Signing time: Wed 03 Sep 2025 17:32:19 +0000 Manifest this update: Wed 03 Sep 2025 17:27:19 +0000 Manifest next update: Sun 07 Sep 2025 02:05:19 +0000 Files and hashes: 1: 3130332e3232392e3138342e302f32342d3234203d3e2039333431.roa (hash: wfRjzL8bQ7dLLloZedRWystpfn4vijpj4SNcPfcqhxI=) 2: 08E555759AA0C18576364C83261B6CEA4BCF0CCB.crl (hash: vuBu/rabXaMASuBJC/27cSPWn+F5U7DeYP69WWqVKgU=) 3: 3130332e3232392e3138352e302f32342d3234203d3e2039333431.roa (hash: bYUXew86UoI4/31WSjYGIt5ZDZ5ojqbj3fo7ufpNm20=) 4: 3130332e3232392e3138342e302f32332d3233203d3e2039333431.roa (hash: 7OzNX15Yuahy0/8eEN1/yzezZR+83/JHbFFyRpwzwPM=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/dfee82b7-c182-4e83-897c-e00f3ce1b0d2/0/08E555759AA0C18576364C83261B6CEA4BCF0CCB.crl rsync://repo-rpki.idnic.net/repo/dfee82b7-c182-4e83-897c-e00f3ce1b0d2/0/08E555759AA0C18576364C83261B6CEA4BCF0CCB.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/08E555759AA0C18576364C83261B6CEA4BCF0CCB.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 07 Sep 2025 02:05:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 65:aa:18:6c:3f:19:c9:10:b7:fd:52:5a:b6:bf:13:11:99:ea:5c:36 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=08E555759AA0C18576364C83261B6CEA4BCF0CCB Validity Not Before: Sep 3 17:27:19 2025 GMT Not After : Sep 7 02:05:19 2025 GMT Subject: CN=B8E68C5AD591E22A0C766C36670EC708A5F61C8F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:97:2d:00:1e:02:2e:46:1e:18:9f:8c:e7:41: d5:c5:e4:b4:de:60:87:90:5a:f4:88:1d:e3:f1:f4: fe:55:73:1b:58:f9:ce:68:d8:73:90:14:19:28:6b: eb:8d:d1:1a:4e:0f:4b:69:62:0e:9a:ed:8a:27:12: cd:85:26:4c:ba:99:1e:20:f1:2f:b0:64:ef:eb:21: 6f:e6:64:cc:90:fa:9c:8c:a0:19:53:ba:f9:83:97: 4b:c3:d1:f7:0d:65:6b:c2:ef:84:87:2e:c2:84:0b: 81:4a:e2:e7:b9:bf:cb:8b:4f:47:23:f4:d5:80:eb: ce:ce:df:cf:14:1b:c6:73:5a:cb:1c:8e:9b:bc:e0: cb:20:62:85:9e:43:51:d0:c0:9f:e0:ef:30:b1:f1: 61:44:d9:21:71:44:ee:37:b7:64:91:30:16:0e:e0: 08:10:10:0b:9b:0d:d6:d8:44:7d:0e:6b:04:7c:f7: e7:02:82:b8:cf:0c:64:67:5d:6d:5b:b2:87:4f:dc: 86:a5:93:d8:e8:6a:28:69:b6:f6:46:9a:0d:b3:2c: bd:df:56:86:01:ce:d5:54:a1:0a:09:b9:ed:f8:24: 25:fd:9b:6e:01:91:7b:56:95:5f:94:76:dc:a4:09: 7b:8d:33:fe:45:72:21:f9:02:89:f9:bc:8b:08:cb: f8:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:E6:8C:5A:D5:91:E2:2A:0C:76:6C:36:67:0E:C7:08:A5:F6:1C:8F X509v3 Authority Key Identifier: keyid:08:E5:55:75:9A:A0:C1:85:76:36:4C:83:26:1B:6C:EA:4B:CF:0C:CB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/dfee82b7-c182-4e83-897c-e00f3ce1b0d2/0/08E555759AA0C18576364C83261B6CEA4BCF0CCB.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/08E555759AA0C18576364C83261B6CEA4BCF0CCB.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/dfee82b7-c182-4e83-897c-e00f3ce1b0d2/0/08E555759AA0C18576364C83261B6CEA4BCF0CCB.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4e:38:41:6e:eb:51:4b:68:26:6d:0f:7b:d8:b4:6f:fb:27:46: 53:5d:19:82:ad:88:8e:04:fd:59:0d:80:79:0f:e3:9c:e3:15: 3d:b3:1d:4d:7c:8a:20:cb:08:6f:33:a3:e7:7c:5a:01:1f:6d: 69:2b:70:70:54:1f:b3:95:68:fc:87:ad:31:e1:8f:44:fd:dd: 4d:97:71:13:8f:75:b5:72:1f:1a:1d:38:d2:44:37:36:ff:38: 37:9a:a0:53:59:5f:ea:96:c9:a7:3f:24:08:fb:c5:83:7d:e5: a2:58:09:9b:58:3a:f5:05:80:aa:fe:1d:1a:b5:1e:19:cb:24: aa:52:ba:0a:5a:e1:30:ce:f1:4a:9c:89:bf:38:ae:9f:71:cf: f0:cd:5e:51:da:8a:0c:7f:13:c4:1d:42:62:93:de:de:fd:1c: 2b:e1:c8:cb:e0:2f:ba:ba:76:42:b4:a4:3e:88:8e:2b:84:6b: e2:d8:fd:79:7c:b9:98:40:08:84:3a:8d:08:26:07:be:47:c5: 18:be:d1:39:e6:49:01:a9:21:3d:47:b5:3a:b5:2c:4a:4d:b2: 9e:45:49:f5:44:bc:30:2c:09:28:3d:0a:37:5e:b4:b4:65:9b: 38:c2:90:5d:78:ed:20:0f:8e:20:cd:bd:8c:62:b2:4e:de:36: 51:0f:a8:5f -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUZaoYbD8ZyRC3/VJatr8TEZnqXDYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDhFNTU1NzU5QUEwQzE4NTc2MzY0QzgzMjYxQjZDRUE0 QkNGMENDQjAeFw0yNTA5MDMxNzI3MTlaFw0yNTA5MDcwMjA1MTlaMDMxMTAvBgNV BAMTKEI4RTY4QzVBRDU5MUUyMkEwQzc2NkMzNjY3MEVDNzA4QTVGNjFDOEYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDgly0AHgIuRh4Yn4znQdXF5LTe YIeQWvSIHePx9P5VcxtY+c5o2HOQFBkoa+uN0RpOD0tpYg6a7YonEs2FJky6mR4g 8S+wZO/rIW/mZMyQ+pyMoBlTuvmDl0vD0fcNZWvC74SHLsKEC4FK4ue5v8uLT0cj 9NWA687O388UG8ZzWsscjpu84MsgYoWeQ1HQwJ/g7zCx8WFE2SFxRO43t2SRMBYO 4AgQEAubDdbYRH0OawR89+cCgrjPDGRnXW1bsodP3Ialk9joaihptvZGmg2zLL3f VoYBztVUoQoJue34JCX9m24BkXtWlV+UdtykCXuNM/5FciH5Aon5vIsIy/iXAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUuOaMWtWR4ioMdmw2Zw7HCKX2HI8wHwYDVR0j BBgwFoAUCOVVdZqgwYV2NkyDJhts6kvPDMswDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k ZmVlODJiNy1jMTgyLTRlODMtODk3Yy1lMDBmM2NlMWIwZDIvMC8wOEU1NTU3NTlB QTBDMTg1NzYzNjRDODMyNjFCNkNFQTRCQ0YwQ0NCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMDhFNTU1NzU5QUEwQzE4NTc2MzY0QzgzMjYxQjZDRUE0QkNG MENDQi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZGZlZTgyYjctYzE4Mi00ZTgzLTg5 N2MtZTAwZjNjZTFiMGQyLzAvMDhFNTU1NzU5QUEwQzE4NTc2MzY0QzgzMjYxQjZD RUE0QkNGMENDQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAE44QW7rUUtoJm0Pe9i0b/snRlNdGYKtiI4E /VkNgHkP45zjFT2zHU18iiDLCG8zo+d8WgEfbWkrcHBUH7OVaPyHrTHhj0T93U2X cROPdbVyHxodONJENzb/ODeaoFNZX+qWyac/JAj7xYN95aJYCZtYOvUFgKr+HRq1 HhnLJKpSugpa4TDO8Uqcib84rp9xz/DNXlHaigx/E8QdQmKT3t79HCvhyMvgL7q6 dkK0pD6IjiuEa+LY/Xl8uZhACIQ6jQgmB75HxRi+0TnmSQGpIT1HtTq1LEpNsp5F SfVEvDAsCSg9CjdetLRlmzjCkF147SAPjiDNvYxisk7eNlEPqF8= -----END CERTIFICATE-----Generated at Fri Sep 5 12:12:16 2025 by rpki-client