$ rpki-client -vvf repo-rpki.idnic.net/repo/f195b4b4-bc8a-4ce5-b550-9aa7b36ee1fa/0/8107B8970680BF15377E222E6093ED124116C40F.mft File: 8107B8970680BF15377E222E6093ED124116C40F.mft (raw, json) Hash identifier: hzAvjNbM2kPQ3e5QF5w+8adr8qCGb4Oubr3YxUMG96s= Subject key identifier: C2:FC:00:7B:40:D0:60:71:9A:92:A1:59:AC:B7:59:E4:ED:59:BA:31 Authority key identifier: 81:07:B8:97:06:80:BF:15:37:7E:22:2E:60:93:ED:12:41:16:C4:0F Certificate issuer: /CN=8107B8970680BF15377E222E6093ED124116C40F Certificate serial: 1701ED08C697516EA9437CF700F361FB09E5368F Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/8107B8970680BF15377E222E6093ED124116C40F.cer Subject info access: rsync://repo-rpki.idnic.net/repo/f195b4b4-bc8a-4ce5-b550-9aa7b36ee1fa/0/8107B8970680BF15377E222E6093ED124116C40F.mft Manifest number: 9C Signing time: Sun 07 Sep 2025 08:20:03 +0000 Manifest this update: Sun 07 Sep 2025 08:15:03 +0000 Manifest next update: Wed 10 Sep 2025 16:14:03 +0000 Files and hashes: 1: 8107B8970680BF15377E222E6093ED124116C40F.crl (hash: aR+scYFRRrBR3Bpl/ymypbiNpJ+JykQQX0d1AaumWDo=) 2: 3136302e32322e3133362e302f32332d3233203d3e20313532383131.roa (hash: 2LacJURrRGdpqkr8B8+Js6eubdkn8GpcOPwFPaGcYgA=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/f195b4b4-bc8a-4ce5-b550-9aa7b36ee1fa/0/8107B8970680BF15377E222E6093ED124116C40F.crl rsync://repo-rpki.idnic.net/repo/f195b4b4-bc8a-4ce5-b550-9aa7b36ee1fa/0/8107B8970680BF15377E222E6093ED124116C40F.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/8107B8970680BF15377E222E6093ED124116C40F.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 10 Sep 2025 16:14:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 17:01:ed:08:c6:97:51:6e:a9:43:7c:f7:00:f3:61:fb:09:e5:36:8f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8107B8970680BF15377E222E6093ED124116C40F Validity Not Before: Sep 7 08:15:03 2025 GMT Not After : Sep 10 16:14:03 2025 GMT Subject: CN=C2FC007B40D060719A92A159ACB759E4ED59BA31 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:ac:32:0c:ae:21:aa:0e:c0:73:76:2e:d5:3b: 98:f6:c0:de:ef:a2:6d:63:f3:78:56:99:44:62:8b: 8e:6b:20:27:42:f9:a0:40:e2:fa:5c:86:9e:40:5e: 16:74:dd:4b:6a:03:e1:6d:f2:b9:f4:71:c3:3e:e3: 6a:d5:87:83:3a:13:09:b1:32:d2:45:df:b6:1b:c3: e0:16:9d:9b:e9:4c:8d:f9:af:87:7b:7b:d1:cf:7f: 24:f6:e1:29:f3:d6:01:c7:bc:17:e1:94:bd:fe:16: db:bf:be:83:85:be:43:6d:aa:ef:a0:9c:46:fe:96: f4:fb:60:a0:53:f0:0d:6c:d2:3c:59:66:5a:30:60: 13:93:c2:3a:73:eb:0e:cb:9a:fc:24:22:cc:5f:72: 24:d3:ad:f8:05:4e:24:ed:34:9e:d0:18:4a:e9:8e: 02:da:fc:8c:ce:09:20:99:bf:34:90:0b:cb:ea:a1: 78:8c:55:89:89:9e:88:86:8f:27:0c:30:4b:f0:09: 71:35:f8:91:53:cf:5e:06:94:43:14:f4:f6:6d:9d: 0c:a4:8e:46:01:67:c4:27:c4:c3:ca:5c:0a:75:b6: d7:85:71:b0:5d:a0:00:9c:32:20:b7:2d:0d:c0:16: f6:ba:08:51:84:97:dc:30:48:ef:36:9a:71:b5:f4: 64:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C2:FC:00:7B:40:D0:60:71:9A:92:A1:59:AC:B7:59:E4:ED:59:BA:31 X509v3 Authority Key Identifier: keyid:81:07:B8:97:06:80:BF:15:37:7E:22:2E:60:93:ED:12:41:16:C4:0F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/f195b4b4-bc8a-4ce5-b550-9aa7b36ee1fa/0/8107B8970680BF15377E222E6093ED124116C40F.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/8107B8970680BF15377E222E6093ED124116C40F.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f195b4b4-bc8a-4ce5-b550-9aa7b36ee1fa/0/8107B8970680BF15377E222E6093ED124116C40F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5e:1b:16:c1:ae:71:bb:49:86:c4:d3:1d:5a:a1:51:2e:0b:a1: 3b:a1:4a:9e:55:58:b6:6b:57:6c:65:e1:ee:c1:4e:c4:b0:27: a9:22:ac:44:22:17:8e:fc:64:cf:37:4f:30:f6:85:e2:30:57: c5:b2:7a:63:c3:ec:4e:01:46:84:7a:1b:bb:34:01:16:6d:18: 0b:eb:28:55:31:80:fd:a3:b2:00:ca:2f:3b:cf:8e:71:2f:91: 12:63:4b:15:61:52:fb:fb:68:0a:af:84:f7:7b:ed:e9:d6:ff: 66:81:a3:39:3a:fc:c7:30:9e:25:f2:d8:73:9f:58:2f:e5:14: 6b:ab:43:12:fa:78:c6:4d:3e:f5:d8:b5:63:13:41:38:4f:69: d2:96:99:97:3f:f4:cc:a2:07:e3:29:41:c0:6a:00:a3:fc:21: a0:69:fe:43:1e:8b:97:e5:49:a1:82:b5:b0:a3:a6:14:e3:4c: 65:5f:e0:b8:86:95:4c:85:78:c2:c1:96:2f:98:ae:ac:e3:89: d7:90:3d:a0:f4:56:7c:51:d1:c5:d7:a0:fa:bb:11:90:db:a8: 98:a5:70:7d:1e:f2:49:7b:99:3a:36:c6:69:21:c4:80:5e:cc: 78:b1:71:a2:c3:ea:9c:f0:05:7c:5f:b8:b9:e0:6e:25:c9:7b: 78:72:16:41 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUFwHtCMaXUW6pQ3z3APNh+wnlNo8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODEwN0I4OTcwNjgwQkYxNTM3N0UyMjJFNjA5M0VEMTI0 MTE2QzQwRjAeFw0yNTA5MDcwODE1MDNaFw0yNTA5MTAxNjE0MDNaMDMxMTAvBgNV BAMTKEMyRkMwMDdCNDBEMDYwNzE5QTkyQTE1OUFDQjc1OUU0RUQ1OUJBMzEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCnrDIMriGqDsBzdi7VO5j2wN7v om1j83hWmURii45rICdC+aBA4vpchp5AXhZ03UtqA+Ft8rn0ccM+42rVh4M6Ewmx MtJF37Ybw+AWnZvpTI35r4d7e9HPfyT24Snz1gHHvBfhlL3+Ftu/voOFvkNtqu+g nEb+lvT7YKBT8A1s0jxZZlowYBOTwjpz6w7LmvwkIsxfciTTrfgFTiTtNJ7QGErp jgLa/IzOCSCZvzSQC8vqoXiMVYmJnoiGjycMMEvwCXE1+JFTz14GlEMU9PZtnQyk jkYBZ8QnxMPKXAp1tteFcbBdoACcMiC3LQ3AFva6CFGEl9wwSO82mnG19GT9AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUwvwAe0DQYHGakqFZrLdZ5O1ZujEwHwYDVR0j BBgwFoAUgQe4lwaAvxU3fiIuYJPtEkEWxA8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m MTk1YjRiNC1iYzhhLTRjZTUtYjU1MC05YWE3YjM2ZWUxZmEvMC84MTA3Qjg5NzA2 ODBCRjE1Mzc3RTIyMkU2MDkzRUQxMjQxMTZDNDBGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvODEwN0I4OTcwNjgwQkYxNTM3N0UyMjJFNjA5M0VEMTI0MTE2 QzQwRi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZjE5NWI0YjQtYmM4YS00Y2U1LWI1 NTAtOWFhN2IzNmVlMWZhLzAvODEwN0I4OTcwNjgwQkYxNTM3N0UyMjJFNjA5M0VE MTI0MTE2QzQwRi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAF4bFsGucbtJhsTTHVqhUS4LoTuhSp5VWLZr V2xl4e7BTsSwJ6kirEQiF478ZM83TzD2heIwV8WyemPD7E4BRoR6G7s0ARZtGAvr KFUxgP2jsgDKLzvPjnEvkRJjSxVhUvv7aAqvhPd77enW/2aBozk6/McwniXy2HOf WC/lFGurQxL6eMZNPvXYtWMTQThPadKWmZc/9MyiB+MpQcBqAKP8IaBp/kMei5fl SaGCtbCjphTjTGVf4LiGlUyFeMLBli+YrqzjideQPaD0VnxR0cXXoPq7EZDbqJil cH0e8kl7mTo2xmkhxIBezHixcaLD6pzwBXxfuLngbiXJe3hyFkE= -----END CERTIFICATE-----Generated at Mon Sep 8 05:18:30 2025 by rpki-client