$ rpki-client -vvf repo-rpki.idnic.net/repo/f0520b54-3ba7-4631-af0b-55984b0ba7f2/0/8CDF716F25D64DEB3E1036E6A36DB724CDE1E5D0.mft File: 8CDF716F25D64DEB3E1036E6A36DB724CDE1E5D0.mft (raw, json) Hash identifier: bStoupiA34x1v4AHmOSQCloWsJva7tGT9onv0Ll2+/8= Subject key identifier: 85:5F:F7:32:62:B4:A8:58:85:36:2F:BD:6B:00:56:C0:D9:B9:AF:D4 Authority key identifier: 8C:DF:71:6F:25:D6:4D:EB:3E:10:36:E6:A3:6D:B7:24:CD:E1:E5:D0 Certificate issuer: /CN=8CDF716F25D64DEB3E1036E6A36DB724CDE1E5D0 Certificate serial: 0E33965F2F727FF46BAD8C6DBF398A94875A7EB6 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8CDF716F25D64DEB3E1036E6A36DB724CDE1E5D0.cer Subject info access: rsync://repo-rpki.idnic.net/repo/f0520b54-3ba7-4631-af0b-55984b0ba7f2/0/8CDF716F25D64DEB3E1036E6A36DB724CDE1E5D0.mft Manifest number: 0383 Signing time: Fri 05 Sep 2025 23:30:41 +0000 Manifest this update: Fri 05 Sep 2025 23:25:41 +0000 Manifest next update: Tue 09 Sep 2025 06:02:41 +0000 Files and hashes: 1: 3130332e3136322e3134362e302f32332d3234203d3e203137393935.roa (hash: glmRxvHF4g4HTvz1muaudxYOmNWHdjodUPYRc5xhUvY=) 2: 8CDF716F25D64DEB3E1036E6A36DB724CDE1E5D0.crl (hash: RPi0Ozc8J8y7cVmuiX4tHF54twET82ZcBDz+6O0gWe8=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/f0520b54-3ba7-4631-af0b-55984b0ba7f2/0/8CDF716F25D64DEB3E1036E6A36DB724CDE1E5D0.crl rsync://repo-rpki.idnic.net/repo/f0520b54-3ba7-4631-af0b-55984b0ba7f2/0/8CDF716F25D64DEB3E1036E6A36DB724CDE1E5D0.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8CDF716F25D64DEB3E1036E6A36DB724CDE1E5D0.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 09 Sep 2025 06:02:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0e:33:96:5f:2f:72:7f:f4:6b:ad:8c:6d:bf:39:8a:94:87:5a:7e:b6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8CDF716F25D64DEB3E1036E6A36DB724CDE1E5D0 Validity Not Before: Sep 5 23:25:41 2025 GMT Not After : Sep 9 06:02:41 2025 GMT Subject: CN=855FF73262B4A85885362FBD6B0056C0D9B9AFD4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f0:2c:46:63:7a:83:e0:f9:35:9b:6f:e1:40:ed: be:a3:48:18:c1:cf:23:2c:18:c3:c8:23:f6:f9:95: e2:09:2f:34:7c:ed:1b:a3:3b:86:55:6d:4a:22:7e: ac:e0:db:0a:48:f1:30:25:ff:07:8f:4e:d4:65:23: d6:7c:75:f6:ed:1b:e7:28:3b:bd:18:38:3d:b0:da: 17:2f:c8:0c:f5:e3:c3:f9:b4:45:00:d9:a9:b6:77: b4:36:fb:b7:cb:15:14:57:79:47:08:3e:ea:8e:6d: 2f:9c:f4:19:be:5f:45:b6:8e:90:df:9a:32:51:11: cb:f3:64:ad:46:6e:1f:88:75:aa:7e:77:e7:96:b0: 07:76:af:21:ff:3c:6e:91:5a:41:78:ff:e1:c7:52: b4:56:b8:97:b8:8b:8e:e5:64:25:4a:86:b5:a1:40: 38:b0:7c:bc:dd:f2:cf:0b:06:8e:61:1e:df:90:bb: b8:79:20:59:be:67:9a:83:32:e4:e2:a1:d8:09:e5: 2a:c4:35:6c:60:ef:d1:1b:c2:be:ad:12:73:e8:66: eb:a7:d1:08:0f:fa:21:1f:32:4a:a1:2a:db:66:07: f7:17:d8:ca:1d:91:b3:6f:fb:2b:c5:4a:e9:1a:9c: 1c:07:be:d2:c7:3c:9d:7b:4b:49:28:21:e4:73:2b: 24:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:5F:F7:32:62:B4:A8:58:85:36:2F:BD:6B:00:56:C0:D9:B9:AF:D4 X509v3 Authority Key Identifier: keyid:8C:DF:71:6F:25:D6:4D:EB:3E:10:36:E6:A3:6D:B7:24:CD:E1:E5:D0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/f0520b54-3ba7-4631-af0b-55984b0ba7f2/0/8CDF716F25D64DEB3E1036E6A36DB724CDE1E5D0.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8CDF716F25D64DEB3E1036E6A36DB724CDE1E5D0.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f0520b54-3ba7-4631-af0b-55984b0ba7f2/0/8CDF716F25D64DEB3E1036E6A36DB724CDE1E5D0.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 53:40:4f:b4:2c:b7:bb:c8:02:1f:14:2d:b9:43:75:d1:1a:02: 12:31:4e:07:ca:ec:ca:5e:fb:2b:22:3e:e6:0d:b8:4c:5b:3b: 99:72:e4:10:73:98:31:d6:f8:92:39:5c:b0:98:d3:64:94:1f: 37:c8:7f:a4:ff:8a:77:cc:ee:c4:21:9c:1c:f8:b1:7a:27:d6: e8:29:21:16:0f:a5:4e:f6:fb:9a:cc:4f:41:94:38:9e:6f:f7: d4:98:4b:7e:f1:04:ee:b0:31:30:00:89:bf:07:ca:8c:66:19: 94:ab:b4:39:ba:9e:c3:76:fc:a8:34:1c:3c:86:2f:59:03:dc: 1a:a3:2f:4a:48:6d:1b:59:34:79:0b:89:ef:b0:3c:3e:22:f5: 3b:81:cc:cc:97:21:c4:c9:ff:9e:4d:69:c7:a7:51:fb:0e:6b: 13:56:9c:71:2b:53:f0:f7:d2:24:08:56:3c:07:42:cd:2f:27: f4:76:40:58:bf:e4:4c:da:0c:21:97:b0:32:74:0b:dc:5e:f8: 24:c5:0f:90:fb:84:70:f4:6a:b4:b8:79:eb:53:09:f7:41:9e: 9c:6c:5d:ab:2d:d1:2f:ac:a3:71:a6:5f:9d:56:f3:89:d3:46: 32:bd:b4:a4:c3:3d:38:f5:71:b0:28:2d:c2:c7:d0:9f:f9:b6: 47:52:4b:04 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUDjOWXy9yf/RrrYxtvzmKlIdafrYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOENERjcxNkYyNUQ2NERFQjNFMTAzNkU2QTM2REI3MjRD REUxRTVEMDAeFw0yNTA5MDUyMzI1NDFaFw0yNTA5MDkwNjAyNDFaMDMxMTAvBgNV BAMTKDg1NUZGNzMyNjJCNEE4NTg4NTM2MkZCRDZCMDA1NkMwRDlCOUFGRDQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDwLEZjeoPg+TWbb+FA7b6jSBjB zyMsGMPII/b5leIJLzR87RujO4ZVbUoifqzg2wpI8TAl/wePTtRlI9Z8dfbtG+co O70YOD2w2hcvyAz148P5tEUA2am2d7Q2+7fLFRRXeUcIPuqObS+c9Bm+X0W2jpDf mjJREcvzZK1Gbh+Idap+d+eWsAd2ryH/PG6RWkF4/+HHUrRWuJe4i47lZCVKhrWh QDiwfLzd8s8LBo5hHt+Qu7h5IFm+Z5qDMuTiodgJ5SrENWxg79Ebwr6tEnPoZuun 0QgP+iEfMkqhKttmB/cX2ModkbNv+yvFSukanBwHvtLHPJ17S0koIeRzKyRRAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUhV/3MmK0qFiFNi+9awBWwNm5r9QwHwYDVR0j BBgwFoAUjN9xbyXWTes+EDbmo223JM3h5dAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m MDUyMGI1NC0zYmE3LTQ2MzEtYWYwYi01NTk4NGIwYmE3ZjIvMC84Q0RGNzE2RjI1 RDY0REVCM0UxMDM2RTZBMzZEQjcyNENERTFFNUQwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOENERjcxNkYyNUQ2NERFQjNFMTAzNkU2QTM2REI3MjRDREUx RTVEMC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZjA1MjBiNTQtM2JhNy00NjMxLWFm MGItNTU5ODRiMGJhN2YyLzAvOENERjcxNkYyNUQ2NERFQjNFMTAzNkU2QTM2REI3 MjRDREUxRTVEMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFNAT7Qst7vIAh8ULblDddEaAhIxTgfK7Mpe +ysiPuYNuExbO5ly5BBzmDHW+JI5XLCY02SUHzfIf6T/infM7sQhnBz4sXon1ugp IRYPpU72+5rMT0GUOJ5v99SYS37xBO6wMTAAib8HyoxmGZSrtDm6nsN2/Kg0HDyG L1kD3BqjL0pIbRtZNHkLie+wPD4i9TuBzMyXIcTJ/55NacenUfsOaxNWnHErU/D3 0iQIVjwHQs0vJ/R2QFi/5EzaDCGXsDJ0C9xe+CTFD5D7hHD0arS4eetTCfdBnpxs Xast0S+so3GmX51W84nTRjK9tKTDPTj1cbAoLcLH0J/5tkdSSwQ= -----END CERTIFICATE-----Generated at Sun Sep 7 14:03:58 2025 by rpki-client