$ rpki-client -vvf repo-rpki.idnic.net/repo/f0a929c6-1e25-494a-b0f9-55fc4fc94fbc/0/8A0F7659BE6C916702994F1B653CA6335CF48F9F.mft File: 8A0F7659BE6C916702994F1B653CA6335CF48F9F.mft (raw, json) Hash identifier: dXEmKwiA/xQwWoPYD1u2oh5XoKEG2lmCw0frcUTy43A= Subject key identifier: 16:CE:A7:26:74:60:68:BE:D7:4E:17:1D:FB:5D:A5:7C:7B:2D:D1:2A Authority key identifier: 8A:0F:76:59:BE:6C:91:67:02:99:4F:1B:65:3C:A6:33:5C:F4:8F:9F Certificate issuer: /CN=8A0F7659BE6C916702994F1B653CA6335CF48F9F Certificate serial: 63C2F05E0953FC2A60DA345EF3548A7F7E4F8AC5 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8A0F7659BE6C916702994F1B653CA6335CF48F9F.cer Subject info access: rsync://repo-rpki.idnic.net/repo/f0a929c6-1e25-494a-b0f9-55fc4fc94fbc/0/8A0F7659BE6C916702994F1B653CA6335CF48F9F.mft Manifest number: 03F1 Signing time: Sat 06 Sep 2025 16:52:04 +0000 Manifest this update: Sat 06 Sep 2025 16:47:04 +0000 Manifest next update: Tue 09 Sep 2025 22:34:04 +0000 Files and hashes: 1: 8A0F7659BE6C916702994F1B653CA6335CF48F9F.crl (hash: bbybIJAF2LxDSsCX04Oz4hOogQouNZRdOmR+vIeccnE=) 2: 323430343a3530303a3a2f33322d3438203d3e203234323031.roa (hash: ZncYvkH3fAKDn8QBBs6vlpl5n6FCs5nY6O2LpIihUog=) 3: 3230322e38372e3234382e302f32312d3234203d3e203234323031.roa (hash: YIGWj76AnaLSHaaCNOVsCHFGKespwS6XW2pML5MbQts=) 4: 3130332e3232382e3234302e302f32322d3234203d3e203435373030.roa (hash: q34ctZRabkzgVMwhpjzkGD0HvYBu2zTW+lnhs8q/u94=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/f0a929c6-1e25-494a-b0f9-55fc4fc94fbc/0/8A0F7659BE6C916702994F1B653CA6335CF48F9F.crl rsync://repo-rpki.idnic.net/repo/f0a929c6-1e25-494a-b0f9-55fc4fc94fbc/0/8A0F7659BE6C916702994F1B653CA6335CF48F9F.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8A0F7659BE6C916702994F1B653CA6335CF48F9F.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 09 Sep 2025 22:34:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 63:c2:f0:5e:09:53:fc:2a:60:da:34:5e:f3:54:8a:7f:7e:4f:8a:c5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8A0F7659BE6C916702994F1B653CA6335CF48F9F Validity Not Before: Sep 6 16:47:04 2025 GMT Not After : Sep 9 22:34:04 2025 GMT Subject: CN=16CEA726746068BED74E171DFB5DA57C7B2DD12A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:61:ff:5c:9a:8d:7f:81:ad:c8:33:68:df:65: ea:58:3e:83:20:db:6a:76:56:eb:43:a0:a0:60:16: 68:3e:a3:a7:9b:b9:59:4e:45:56:c4:6b:3d:9a:3c: fc:83:96:07:f4:5f:a5:93:7c:cb:ca:8e:7c:a5:fa: cc:81:b2:69:ab:86:ba:df:86:04:82:76:e0:eb:0d: fa:23:91:d1:36:ff:d6:98:05:59:dc:a0:c2:48:1c: c5:d4:94:3b:f7:60:bb:95:1c:4b:bc:8c:e9:3b:18: 16:a0:3e:08:43:d6:1e:c8:5d:dc:14:6c:0b:07:78: 27:db:3b:68:b8:ec:9d:cc:10:84:23:c6:06:5f:a2: 15:74:08:32:5e:5d:7d:3a:4a:6a:a6:a2:c3:cd:7c: 88:39:90:ec:41:50:c5:c0:41:e3:40:52:17:e8:da: 6d:bd:b3:f4:6f:e6:76:eb:9b:8c:5c:d7:f9:41:fd: b0:90:5c:08:13:53:93:b1:13:a4:72:88:a8:af:52: ab:22:fc:0b:9e:66:e1:ea:3d:e3:3e:96:88:b5:4d: 3a:2a:8e:83:0a:3a:ad:3c:fa:cc:9b:d7:d4:c3:ab: 4c:64:e8:a5:7b:74:a1:93:a0:d9:c0:ba:b5:1b:54: a1:48:f3:7b:24:5e:fb:b0:46:f0:1d:57:4c:c3:96: 97:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 16:CE:A7:26:74:60:68:BE:D7:4E:17:1D:FB:5D:A5:7C:7B:2D:D1:2A X509v3 Authority Key Identifier: keyid:8A:0F:76:59:BE:6C:91:67:02:99:4F:1B:65:3C:A6:33:5C:F4:8F:9F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/f0a929c6-1e25-494a-b0f9-55fc4fc94fbc/0/8A0F7659BE6C916702994F1B653CA6335CF48F9F.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8A0F7659BE6C916702994F1B653CA6335CF48F9F.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f0a929c6-1e25-494a-b0f9-55fc4fc94fbc/0/8A0F7659BE6C916702994F1B653CA6335CF48F9F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 93:17:a3:04:e1:46:3d:4b:0f:3a:63:b9:33:3d:e1:e3:ee:a0: 40:d6:e5:2e:db:9f:94:1d:f9:42:4e:de:4a:41:ed:eb:52:28: 83:23:d7:9f:13:f1:16:d8:c2:cd:00:56:85:09:0e:06:3d:0f: 06:8c:ad:41:cb:e6:69:ff:c7:1f:59:9d:88:d8:0d:14:da:21: 67:bf:04:b0:fb:ed:19:da:0b:b3:91:a8:af:4d:0d:ff:8f:92: e8:cb:4d:16:e7:66:9b:9c:fc:f9:6b:09:c3:33:28:b9:94:4e: 7b:c2:12:bb:f7:e0:82:52:e1:b1:59:46:0c:f1:2f:94:10:72: f5:07:bd:cc:cd:67:21:cb:4f:dc:1e:fa:59:54:ac:86:d6:f4: 52:7b:43:36:93:21:e4:08:78:29:33:16:a6:16:76:13:33:18: 1d:90:5e:88:bd:04:e2:dc:6e:03:c0:07:db:15:27:15:96:61: 01:dd:69:aa:0e:ba:e7:b6:a8:10:2d:be:bc:2a:22:d1:f4:57: e2:b6:e1:3e:88:0b:92:e4:d5:77:41:de:65:c1:42:e3:d6:f4: 83:5c:d2:ec:6a:b9:22:44:e6:9d:b7:2c:54:5a:fc:ad:a4:df: 60:2a:63:c8:8e:65:54:17:a7:17:b2:f2:f3:65:91:17:38:50: 37:fd:19:b6 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUY8LwXglT/Cpg2jRe81SKf35PisUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEEwRjc2NTlCRTZDOTE2NzAyOTk0RjFCNjUzQ0E2MzM1 Q0Y0OEY5RjAeFw0yNTA5MDYxNjQ3MDRaFw0yNTA5MDkyMjM0MDRaMDMxMTAvBgNV BAMTKDE2Q0VBNzI2NzQ2MDY4QkVENzRFMTcxREZCNURBNTdDN0IyREQxMkEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDJYf9cmo1/ga3IM2jfZepYPoMg 22p2VutDoKBgFmg+o6ebuVlORVbEaz2aPPyDlgf0X6WTfMvKjnyl+syBsmmrhrrf hgSCduDrDfojkdE2/9aYBVncoMJIHMXUlDv3YLuVHEu8jOk7GBagPghD1h7IXdwU bAsHeCfbO2i47J3MEIQjxgZfohV0CDJeXX06SmqmosPNfIg5kOxBUMXAQeNAUhfo 2m29s/Rv5nbrm4xc1/lB/bCQXAgTU5OxE6RyiKivUqsi/AueZuHqPeM+loi1TToq joMKOq08+syb19TDq0xk6KV7dKGToNnAurUbVKFI83skXvuwRvAdV0zDlpcfAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUFs6nJnRgaL7XThcd+12lfHst0SowHwYDVR0j BBgwFoAUig92Wb5skWcCmU8bZTymM1z0j58wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m MGE5MjljNi0xZTI1LTQ5NGEtYjBmOS01NWZjNGZjOTRmYmMvMC84QTBGNzY1OUJF NkM5MTY3MDI5OTRGMUI2NTNDQTYzMzVDRjQ4RjlGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOEEwRjc2NTlCRTZDOTE2NzAyOTk0RjFCNjUzQ0E2MzM1Q0Y0 OEY5Ri5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZjBhOTI5YzYtMWUyNS00OTRhLWIw ZjktNTVmYzRmYzk0ZmJjLzAvOEEwRjc2NTlCRTZDOTE2NzAyOTk0RjFCNjUzQ0E2 MzM1Q0Y0OEY5Ri5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJMXowThRj1LDzpjuTM94ePuoEDW5S7bn5Qd +UJO3kpB7etSKIMj158T8RbYws0AVoUJDgY9DwaMrUHL5mn/xx9ZnYjYDRTaIWe/ BLD77RnaC7ORqK9NDf+PkujLTRbnZpuc/PlrCcMzKLmUTnvCErv34IJS4bFZRgzx L5QQcvUHvczNZyHLT9we+llUrIbW9FJ7QzaTIeQIeCkzFqYWdhMzGB2QXoi9BOLc bgPAB9sVJxWWYQHdaaoOuue2qBAtvrwqItH0V+K24T6IC5Lk1XdB3mXBQuPW9INc 0uxquSJE5p23LFRa/K2k32AqY8iOZVQXpxey8vNlkRc4UDf9GbY= -----END CERTIFICATE-----Generated at Sun Sep 7 14:00:44 2025 by rpki-client