$ rpki-client -vvf repo-rpki.idnic.net/repo/f9e7a28a-62f0-4d14-8702-403a5190eae1/0/8A4FF836588BBDC5E5CC526BBBEB66D5140D1B86.mft File: 8A4FF836588BBDC5E5CC526BBBEB66D5140D1B86.mft (raw, json) Hash identifier: Rulc6Lt9oSO/MmCU4HnqwMfd3Nz0fI0MA11HorsVMfA= Subject key identifier: FF:AE:9E:71:17:ED:97:92:E1:BD:72:D4:15:DF:F9:28:AA:40:B9:01 Authority key identifier: 8A:4F:F8:36:58:8B:BD:C5:E5:CC:52:6B:BB:EB:66:D5:14:0D:1B:86 Certificate issuer: /CN=8A4FF836588BBDC5E5CC526BBBEB66D5140D1B86 Certificate serial: 395BECEF8099F2E7CD9F1E7A36912027502E4617 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8A4FF836588BBDC5E5CC526BBBEB66D5140D1B86.cer Subject info access: rsync://repo-rpki.idnic.net/repo/f9e7a28a-62f0-4d14-8702-403a5190eae1/0/8A4FF836588BBDC5E5CC526BBBEB66D5140D1B86.mft Manifest number: 0331 Signing time: Fri 05 Sep 2025 13:11:20 +0000 Manifest this update: Fri 05 Sep 2025 13:06:20 +0000 Manifest next update: Tue 09 Sep 2025 00:51:20 +0000 Files and hashes: 1: 3130332e3137312e33302e302f32332d3234203d3e20313331313131.roa (hash: 0IdcwPtxZArM5JrmLtgkLYtthS0u5GSXZS6q7IiPcxg=) 2: 8A4FF836588BBDC5E5CC526BBBEB66D5140D1B86.crl (hash: Dea/dwevHJmut3JDFsmAW84xI+8eQn/6ItCPaLcc430=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/f9e7a28a-62f0-4d14-8702-403a5190eae1/0/8A4FF836588BBDC5E5CC526BBBEB66D5140D1B86.crl rsync://repo-rpki.idnic.net/repo/f9e7a28a-62f0-4d14-8702-403a5190eae1/0/8A4FF836588BBDC5E5CC526BBBEB66D5140D1B86.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8A4FF836588BBDC5E5CC526BBBEB66D5140D1B86.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 09 Sep 2025 00:51:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 39:5b:ec:ef:80:99:f2:e7:cd:9f:1e:7a:36:91:20:27:50:2e:46:17 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8A4FF836588BBDC5E5CC526BBBEB66D5140D1B86 Validity Not Before: Sep 5 13:06:20 2025 GMT Not After : Sep 9 00:51:20 2025 GMT Subject: CN=FFAE9E7117ED9792E1BD72D415DFF928AA40B901 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:cd:b0:31:a3:0f:04:f4:27:73:bf:93:04:00: 30:fe:b8:95:0f:85:83:6e:69:45:f1:2f:ae:09:66: 2a:f0:5f:25:d0:3b:bc:ce:8a:9a:23:03:6e:03:07: a1:7d:19:61:47:81:c2:e4:02:92:35:4f:c6:57:b6: 1f:f8:0f:43:a5:a5:93:7a:7f:15:df:9e:95:1a:20: 5b:a7:ca:69:f3:9d:cc:fe:65:51:91:3e:32:3f:4e: 96:bb:6d:a9:b8:1b:d0:b4:12:42:ed:62:30:e7:dd: 9c:db:04:d1:5a:dd:e4:cf:59:2c:14:3d:b9:d9:66: 75:9d:07:48:23:2a:eb:a4:71:8c:ad:78:ed:c0:62: cc:13:3f:eb:7b:62:7a:9a:68:9e:fb:8a:c3:db:51: 64:31:9a:ab:86:aa:cb:02:1e:25:3c:53:32:11:ed: ce:1b:cb:ed:9e:34:1a:0a:40:69:83:83:61:82:57: 44:dc:66:59:4b:4b:a3:24:9e:9d:8c:5e:bc:03:42: 73:66:5b:06:11:b3:98:47:e1:64:65:50:7d:c7:60: aa:ef:45:05:50:01:2a:24:83:26:df:3c:7d:a1:d5: ed:e5:fc:16:5e:e5:0e:d6:25:b9:96:64:05:13:f7: 96:ea:b4:35:ae:a7:7c:57:e2:3e:92:2d:d4:22:ed: 50:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FF:AE:9E:71:17:ED:97:92:E1:BD:72:D4:15:DF:F9:28:AA:40:B9:01 X509v3 Authority Key Identifier: keyid:8A:4F:F8:36:58:8B:BD:C5:E5:CC:52:6B:BB:EB:66:D5:14:0D:1B:86 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/f9e7a28a-62f0-4d14-8702-403a5190eae1/0/8A4FF836588BBDC5E5CC526BBBEB66D5140D1B86.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8A4FF836588BBDC5E5CC526BBBEB66D5140D1B86.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f9e7a28a-62f0-4d14-8702-403a5190eae1/0/8A4FF836588BBDC5E5CC526BBBEB66D5140D1B86.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b0:9d:6c:a2:3d:00:6e:2b:7c:e3:a7:05:1c:72:19:51:12:79: fc:d7:90:48:c5:64:84:7a:c9:f5:1e:fa:7b:1e:75:5e:a5:1b: 74:2b:49:42:2d:66:2d:55:8e:41:15:ae:a9:5e:64:38:01:be: b4:8e:5d:ad:e9:d7:00:ae:79:9f:d1:24:82:25:b7:07:df:fa: d3:65:81:d7:3d:2a:1e:b8:26:ed:ae:35:01:b9:88:68:5b:af: 33:a0:ad:6d:d6:42:ce:95:17:a2:1f:e0:ac:70:c5:c6:71:85: 93:5d:b6:9c:af:84:86:9b:60:62:71:8f:32:bd:d8:e1:59:e0: 21:62:45:dd:22:d6:1a:5e:a3:9a:3f:2c:10:86:21:07:e7:d9: fc:4f:01:96:12:18:bd:8e:ca:f4:1b:b2:d8:9f:7c:2e:65:0d: 29:af:66:36:af:3c:88:14:ec:11:81:7e:99:fe:71:60:bd:23: 3a:0f:aa:6b:61:7b:80:90:f9:d4:ab:56:85:28:6b:e0:a4:e3: 04:fe:15:01:ce:66:32:f2:0b:44:d5:2d:ff:71:3d:b0:56:e5: 91:d2:00:41:4d:52:a4:6f:e5:78:8c:da:cc:0d:41:ba:bc:94: b4:a9:23:97:ed:0e:c8:82:a9:24:21:54:f0:6f:9e:b3:62:1f: 6e:b6:22:9d -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUOVvs74CZ8ufNnx56NpEgJ1AuRhcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEE0RkY4MzY1ODhCQkRDNUU1Q0M1MjZCQkJFQjY2RDUx NDBEMUI4NjAeFw0yNTA5MDUxMzA2MjBaFw0yNTA5MDkwMDUxMjBaMDMxMTAvBgNV BAMTKEZGQUU5RTcxMTdFRDk3OTJFMUJENzJENDE1REZGOTI4QUE0MEI5MDEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC6zbAxow8E9Cdzv5MEADD+uJUP hYNuaUXxL64JZirwXyXQO7zOipojA24DB6F9GWFHgcLkApI1T8ZXth/4D0OlpZN6 fxXfnpUaIFunymnzncz+ZVGRPjI/Tpa7bam4G9C0EkLtYjDn3ZzbBNFa3eTPWSwU PbnZZnWdB0gjKuukcYyteO3AYswTP+t7YnqaaJ77isPbUWQxmquGqssCHiU8UzIR 7c4by+2eNBoKQGmDg2GCV0TcZllLS6Mknp2MXrwDQnNmWwYRs5hH4WRlUH3HYKrv RQVQASokgybfPH2h1e3l/BZe5Q7WJbmWZAUT95bqtDWup3xX4j6SLdQi7VAVAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU/66ecRftl5LhvXLUFd/5KKpAuQEwHwYDVR0j BBgwFoAUik/4NliLvcXlzFJru+tm1RQNG4YwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m OWU3YTI4YS02MmYwLTRkMTQtODcwMi00MDNhNTE5MGVhZTEvMC84QTRGRjgzNjU4 OEJCREM1RTVDQzUyNkJCQkVCNjZENTE0MEQxQjg2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOEE0RkY4MzY1ODhCQkRDNUU1Q0M1MjZCQkJFQjY2RDUxNDBE MUI4Ni5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZjllN2EyOGEtNjJmMC00ZDE0LTg3 MDItNDAzYTUxOTBlYWUxLzAvOEE0RkY4MzY1ODhCQkRDNUU1Q0M1MjZCQkJFQjY2 RDUxNDBEMUI4Ni5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALCdbKI9AG4rfOOnBRxyGVESefzXkEjFZIR6 yfUe+nsedV6lG3QrSUItZi1VjkEVrqleZDgBvrSOXa3p1wCueZ/RJIIltwff+tNl gdc9Kh64Ju2uNQG5iGhbrzOgrW3WQs6VF6If4KxwxcZxhZNdtpyvhIabYGJxjzK9 2OFZ4CFiRd0i1hpeo5o/LBCGIQfn2fxPAZYSGL2OyvQbstiffC5lDSmvZjavPIgU 7BGBfpn+cWC9IzoPqmthe4CQ+dSrVoUoa+Ck4wT+FQHOZjLyC0TVLf9xPbBW5ZHS AEFNUqRv5XiM2swNQbq8lLSpI5ftDsiCqSQhVPBvnrNiH262Ip0= -----END CERTIFICATE-----Generated at Sun Sep 7 15:29:08 2025 by rpki-client