$ rpki-client -vvf repo-rpki.idnic.net/repo/f195b4b4-bc8a-4ce5-b550-9aa7b36ee1fa/0/8107B8970680BF15377E222E6093ED124116C40F.mft File: 8107B8970680BF15377E222E6093ED124116C40F.mft (raw, json) Hash identifier: hyFldAfG7x0UViC64UtT4lca8Ucg54TOIk/xiCHPrTo= Subject key identifier: 81:FA:1B:8E:0B:BF:AA:B1:25:B7:F9:2A:2C:A9:CF:78:5B:3C:86:3D Authority key identifier: 81:07:B8:97:06:80:BF:15:37:7E:22:2E:60:93:ED:12:41:16:C4:0F Certificate issuer: /CN=8107B8970680BF15377E222E6093ED124116C40F Certificate serial: 7D4E638CB2996C1289C421D14181C6AC70AD9930 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/8107B8970680BF15377E222E6093ED124116C40F.cer Subject info access: rsync://repo-rpki.idnic.net/repo/f195b4b4-bc8a-4ce5-b550-9aa7b36ee1fa/0/8107B8970680BF15377E222E6093ED124116C40F.mft Manifest number: 86 Signing time: Mon 21 Jul 2025 01:30:02 +0000 Manifest this update: Mon 21 Jul 2025 01:25:02 +0000 Manifest next update: Thu 24 Jul 2025 10:41:02 +0000 Files and hashes: 1: 3136302e32322e3133362e302f32332d3233203d3e20313532383131.roa (hash: V4/cqqOZ7RegowJp1D+ect85LbWcjDnGy47RvlaSPIU=) 2: 8107B8970680BF15377E222E6093ED124116C40F.crl (hash: ooR3PYmilnyvpFXQi5pYluiY/FE9G3gGWlJvgwaywJc=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/f195b4b4-bc8a-4ce5-b550-9aa7b36ee1fa/0/8107B8970680BF15377E222E6093ED124116C40F.crl rsync://repo-rpki.idnic.net/repo/f195b4b4-bc8a-4ce5-b550-9aa7b36ee1fa/0/8107B8970680BF15377E222E6093ED124116C40F.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/8107B8970680BF15377E222E6093ED124116C40F.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 24 Jul 2025 10:41:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7d:4e:63:8c:b2:99:6c:12:89:c4:21:d1:41:81:c6:ac:70:ad:99:30 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8107B8970680BF15377E222E6093ED124116C40F Validity Not Before: Jul 21 01:25:02 2025 GMT Not After : Jul 24 10:41:02 2025 GMT Subject: CN=81FA1B8E0BBFAAB125B7F92A2CA9CF785B3C863D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:2b:d1:6f:b9:75:f9:08:f9:79:d3:95:96:8b: 96:b3:42:a6:f6:9f:d5:3a:5f:fb:bb:5c:43:2e:aa: 50:e9:8f:a5:6a:df:59:d8:ec:bb:fc:5e:c0:9f:ae: 33:24:cc:7f:c6:b3:d5:e4:23:f7:8e:0f:43:a9:45: d8:8a:de:ea:24:ae:6d:0e:ac:82:64:09:7c:f8:df: bd:f1:5c:61:f2:36:2e:43:37:0d:5b:d9:44:9b:6e: 93:ef:ad:e3:ec:a8:b5:35:39:a1:3f:64:39:c1:05: 69:a5:85:3e:77:ed:21:93:61:b2:72:c4:83:d6:2b: e4:36:7b:af:ee:0d:ef:74:99:14:45:df:de:02:1f: 70:8b:fa:6a:e0:4c:b0:af:ed:18:6e:0c:62:e0:42: f9:12:9b:04:ec:51:38:4f:64:4f:41:f4:0a:eb:04: 25:5f:42:55:5c:df:9d:f2:11:9e:ec:19:71:df:1d: ec:5d:20:58:28:95:b7:12:1f:71:03:86:af:b9:b5: c0:d6:b6:3b:f7:9e:34:88:fe:32:de:b3:3a:f9:9d: f1:95:80:8e:83:98:c5:62:f0:18:05:fc:31:71:9a: 05:f3:43:8f:b5:6d:be:e6:67:0a:df:a2:10:b2:33: e7:ee:a8:d2:2c:4b:65:d5:ae:0d:4b:cd:de:2a:6d: 45:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 81:FA:1B:8E:0B:BF:AA:B1:25:B7:F9:2A:2C:A9:CF:78:5B:3C:86:3D X509v3 Authority Key Identifier: keyid:81:07:B8:97:06:80:BF:15:37:7E:22:2E:60:93:ED:12:41:16:C4:0F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/f195b4b4-bc8a-4ce5-b550-9aa7b36ee1fa/0/8107B8970680BF15377E222E6093ED124116C40F.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/8107B8970680BF15377E222E6093ED124116C40F.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f195b4b4-bc8a-4ce5-b550-9aa7b36ee1fa/0/8107B8970680BF15377E222E6093ED124116C40F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 51:38:44:bc:5d:67:e3:34:79:6d:35:9b:33:bf:4a:9b:8e:43: 64:06:b1:59:08:08:2a:78:03:6d:80:d0:b8:cb:ee:05:0a:28: e4:e2:88:b4:20:05:40:a0:6d:1b:4e:90:6e:bd:b8:6f:7c:03: b4:8b:93:2b:68:a4:8b:5b:7a:a3:1d:75:21:a7:c0:66:eb:38: 1a:f3:63:8c:0a:be:14:5d:fe:94:f9:7a:aa:42:38:f0:4b:10: 38:5d:28:77:65:86:a2:8f:0e:88:d4:a6:b8:2f:27:1a:b8:4e: b0:a0:73:31:a2:30:fc:a2:21:50:2c:16:64:da:2d:22:e6:b3: 8f:01:33:7b:2d:de:4e:ca:ee:a7:22:eb:35:e7:12:d4:bc:39: 33:4c:4e:aa:9f:18:ad:88:bd:06:4e:17:a2:ed:45:0f:45:fc: f7:81:6a:6c:f0:33:7c:c6:92:40:4a:3d:5e:fa:aa:d1:f3:e6: d5:2a:49:f5:aa:b2:4e:36:69:ba:f9:c9:04:b5:a3:7f:2b:ec: c0:e7:86:02:a5:66:f7:20:36:eb:0e:68:66:eb:67:99:df:24: 09:82:28:bd:20:7f:f1:9c:81:6e:ed:09:df:f7:7d:b7:4d:f8: 2b:a9:63:cc:55:ba:74:a2:f7:96:89:0f:76:ae:21:47:b3:67: 4d:f6:0e:55 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUfU5jjLKZbBKJxCHRQYHGrHCtmTAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODEwN0I4OTcwNjgwQkYxNTM3N0UyMjJFNjA5M0VEMTI0 MTE2QzQwRjAeFw0yNTA3MjEwMTI1MDJaFw0yNTA3MjQxMDQxMDJaMDMxMTAvBgNV BAMTKDgxRkExQjhFMEJCRkFBQjEyNUI3RjkyQTJDQTlDRjc4NUIzQzg2M0QwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDVK9FvuXX5CPl505WWi5azQqb2 n9U6X/u7XEMuqlDpj6Vq31nY7Lv8XsCfrjMkzH/Gs9XkI/eOD0OpRdiK3uokrm0O rIJkCXz4373xXGHyNi5DNw1b2USbbpPvrePsqLU1OaE/ZDnBBWmlhT537SGTYbJy xIPWK+Q2e6/uDe90mRRF394CH3CL+mrgTLCv7RhuDGLgQvkSmwTsUThPZE9B9Arr BCVfQlVc353yEZ7sGXHfHexdIFgolbcSH3EDhq+5tcDWtjv3njSI/jLeszr5nfGV gI6DmMVi8BgF/DFxmgXzQ4+1bb7mZwrfohCyM+fuqNIsS2XVrg1Lzd4qbUV/AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUgfobjgu/qrElt/kqLKnPeFs8hj0wHwYDVR0j BBgwFoAUgQe4lwaAvxU3fiIuYJPtEkEWxA8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m MTk1YjRiNC1iYzhhLTRjZTUtYjU1MC05YWE3YjM2ZWUxZmEvMC84MTA3Qjg5NzA2 ODBCRjE1Mzc3RTIyMkU2MDkzRUQxMjQxMTZDNDBGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvODEwN0I4OTcwNjgwQkYxNTM3N0UyMjJFNjA5M0VEMTI0MTE2 QzQwRi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZjE5NWI0YjQtYmM4YS00Y2U1LWI1 NTAtOWFhN2IzNmVlMWZhLzAvODEwN0I4OTcwNjgwQkYxNTM3N0UyMjJFNjA5M0VE MTI0MTE2QzQwRi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFE4RLxdZ+M0eW01mzO/SpuOQ2QGsVkICCp4 A22A0LjL7gUKKOTiiLQgBUCgbRtOkG69uG98A7SLkytopItbeqMddSGnwGbrOBrz Y4wKvhRd/pT5eqpCOPBLEDhdKHdlhqKPDojUprgvJxq4TrCgczGiMPyiIVAsFmTa LSLms48BM3st3k7K7qci6zXnEtS8OTNMTqqfGK2IvQZOF6LtRQ9F/PeBamzwM3zG kkBKPV76qtHz5tUqSfWqsk42abr5yQS1o38r7MDnhgKlZvcgNusOaGbrZ5nfJAmC KL0gf/GcgW7tCd/3fbdN+CupY8xVunSi95aJD3auIUezZ032DlU= -----END CERTIFICATE-----Generated at Tue Jul 22 11:57:37 2025 by rpki-client