$ rpki-client -vvf repo-rpki.idnic.net/repo/fc6f0700-9116-4a05-8f6b-d8edafdb72ec/0/8AE8A9B51BDA923FC8956ACB086F56E776D409C8.mft File: 8AE8A9B51BDA923FC8956ACB086F56E776D409C8.mft (raw, json) Hash identifier: yc/76nf6vXNheKlH5YIRl596eyFAiu7axGN3jxwDnrQ= Subject key identifier: AC:A4:DC:E8:95:35:82:D8:EC:5C:3F:26:BD:EB:D8:26:6E:80:21:7D Authority key identifier: 8A:E8:A9:B5:1B:DA:92:3F:C8:95:6A:CB:08:6F:56:E7:76:D4:09:C8 Certificate issuer: /CN=8AE8A9B51BDA923FC8956ACB086F56E776D409C8 Certificate serial: 7093A7B4B3F5A8FB7F12FD159440724035E280EA Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8AE8A9B51BDA923FC8956ACB086F56E776D409C8.cer Subject info access: rsync://repo-rpki.idnic.net/repo/fc6f0700-9116-4a05-8f6b-d8edafdb72ec/0/8AE8A9B51BDA923FC8956ACB086F56E776D409C8.mft Manifest number: F1 Signing time: Thu 04 Sep 2025 23:01:34 +0000 Manifest this update: Thu 04 Sep 2025 22:56:34 +0000 Manifest next update: Mon 08 Sep 2025 03:02:34 +0000 Files and hashes: 1: 3130332e3231302e37302e302f32332d3234203d3e20313530393936.roa (hash: 9twnyIhBB5/nG5JidLHITBuzB/j3WQpuRt6+R8EPn7s=) 2: 8AE8A9B51BDA923FC8956ACB086F56E776D409C8.crl (hash: HzGcPEWAziwv1OWQyNsTG06i/fmQj8lp8qn30Ykg6cQ=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/fc6f0700-9116-4a05-8f6b-d8edafdb72ec/0/8AE8A9B51BDA923FC8956ACB086F56E776D409C8.crl rsync://repo-rpki.idnic.net/repo/fc6f0700-9116-4a05-8f6b-d8edafdb72ec/0/8AE8A9B51BDA923FC8956ACB086F56E776D409C8.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8AE8A9B51BDA923FC8956ACB086F56E776D409C8.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 08 Sep 2025 03:02:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 70:93:a7:b4:b3:f5:a8:fb:7f:12:fd:15:94:40:72:40:35:e2:80:ea Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8AE8A9B51BDA923FC8956ACB086F56E776D409C8 Validity Not Before: Sep 4 22:56:34 2025 GMT Not After : Sep 8 03:02:34 2025 GMT Subject: CN=ACA4DCE8953582D8EC5C3F26BDEBD8266E80217D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:5e:54:5c:28:24:cd:c5:94:6c:28:c4:89:f3: a1:e7:f9:b3:cf:01:94:db:67:7b:d3:bc:10:8e:50: a5:f2:5c:f0:7a:f1:7a:63:d9:cc:50:52:53:db:9e: 17:2b:fe:5e:78:d0:27:ef:45:96:f4:30:dd:e6:23: 16:22:9a:89:54:d7:0e:3c:b9:a2:f4:74:64:a9:7e: ba:05:22:86:80:7d:02:2d:c1:0e:1d:83:e8:d4:fd: ba:8a:b0:57:56:7a:c7:db:0a:59:f4:57:19:ef:75: 32:00:39:5c:94:5a:34:58:6b:57:33:7b:a0:12:e3: 98:11:80:e0:63:47:fa:15:7a:23:8c:4f:6c:66:e3: 28:a0:ef:bd:93:a6:f3:0a:40:ad:2a:53:52:3c:00: 2c:8c:09:87:ab:20:5b:5d:70:ad:fd:72:d4:35:e7: 14:25:db:32:d1:47:96:78:3e:6e:8e:a8:79:04:61: 2c:ea:e7:9e:19:0b:02:bc:87:0f:16:ed:47:1a:e3: 04:c8:9c:26:71:d7:16:c1:9b:eb:4c:b8:02:fa:75: 2a:1c:03:6e:c3:fc:e0:93:61:ae:9e:4e:77:89:25: e2:ea:bd:b4:6f:b0:c5:b0:c1:79:22:1d:11:d5:42: b6:28:bb:2b:f0:87:96:5c:2c:a7:eb:72:f1:a0:6e: f1:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AC:A4:DC:E8:95:35:82:D8:EC:5C:3F:26:BD:EB:D8:26:6E:80:21:7D X509v3 Authority Key Identifier: keyid:8A:E8:A9:B5:1B:DA:92:3F:C8:95:6A:CB:08:6F:56:E7:76:D4:09:C8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/fc6f0700-9116-4a05-8f6b-d8edafdb72ec/0/8AE8A9B51BDA923FC8956ACB086F56E776D409C8.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8AE8A9B51BDA923FC8956ACB086F56E776D409C8.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/fc6f0700-9116-4a05-8f6b-d8edafdb72ec/0/8AE8A9B51BDA923FC8956ACB086F56E776D409C8.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 48:eb:6b:d3:34:b4:c3:0a:14:01:da:40:a1:72:99:e8:8a:11: d0:95:df:b5:9c:49:08:e1:2b:23:ad:65:b6:3b:22:ef:e3:ef: 81:cc:37:b3:85:41:df:dd:0b:9f:1f:1d:9f:5a:15:83:b7:09: 5b:6e:c7:0c:e5:f0:aa:00:14:83:d5:f0:4a:5d:23:b5:1b:ff: 7e:61:eb:68:f9:3c:28:f5:e5:28:fb:6d:98:78:3f:78:07:60: 89:f8:e8:e5:97:d2:6e:ac:2a:b9:ed:22:4b:f5:46:c2:70:30: 4d:d1:ba:6c:06:2e:2e:08:ea:96:f1:2e:5b:26:2c:93:8a:b7: 29:11:4b:34:a3:e6:d2:fd:78:45:e6:f3:26:b2:2c:ec:d2:85: fd:18:2e:5a:7e:ee:c1:00:60:64:41:b3:9f:f3:39:07:fa:04: 6a:42:83:31:6f:f8:8f:51:dc:46:5c:0e:0d:51:8a:28:bc:31: e8:05:78:12:5c:3b:e1:a3:07:f2:98:ac:f3:1f:76:50:30:f0: 2e:ba:d8:97:2b:17:8d:3d:34:9d:ea:d0:c5:2c:1b:0a:5b:e4: 76:14:ae:52:52:52:24:36:22:fa:c5:67:fe:4d:b3:e0:54:3e: 01:9b:52:11:1f:24:5c:ab:96:ce:2b:41:b3:64:6b:f8:e4:cd: f7:98:0a:51 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUcJOntLP1qPt/Ev0VlEByQDXigOowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEFFOEE5QjUxQkRBOTIzRkM4OTU2QUNCMDg2RjU2RTc3 NkQ0MDlDODAeFw0yNTA5MDQyMjU2MzRaFw0yNTA5MDgwMzAyMzRaMDMxMTAvBgNV BAMTKEFDQTREQ0U4OTUzNTgyRDhFQzVDM0YyNkJERUJEODI2NkU4MDIxN0QwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDdXlRcKCTNxZRsKMSJ86Hn+bPP AZTbZ3vTvBCOUKXyXPB68Xpj2cxQUlPbnhcr/l540CfvRZb0MN3mIxYimolU1w48 uaL0dGSpfroFIoaAfQItwQ4dg+jU/bqKsFdWesfbCln0VxnvdTIAOVyUWjRYa1cz e6AS45gRgOBjR/oVeiOMT2xm4yig772TpvMKQK0qU1I8ACyMCYerIFtdcK39ctQ1 5xQl2zLRR5Z4Pm6OqHkEYSzq554ZCwK8hw8W7Uca4wTInCZx1xbBm+tMuAL6dSoc A27D/OCTYa6eTneJJeLqvbRvsMWwwXkiHRHVQrYouyvwh5ZcLKfrcvGgbvHTAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUrKTc6JU1gtjsXD8mvevYJm6AIX0wHwYDVR0j BBgwFoAUiuiptRvakj/IlWrLCG9W53bUCcgwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m YzZmMDcwMC05MTE2LTRhMDUtOGY2Yi1kOGVkYWZkYjcyZWMvMC84QUU4QTlCNTFC REE5MjNGQzg5NTZBQ0IwODZGNTZFNzc2RDQwOUM4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOEFFOEE5QjUxQkRBOTIzRkM4OTU2QUNCMDg2RjU2RTc3NkQ0 MDlDOC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZmM2ZjA3MDAtOTExNi00YTA1LThm NmItZDhlZGFmZGI3MmVjLzAvOEFFOEE5QjUxQkRBOTIzRkM4OTU2QUNCMDg2RjU2 RTc3NkQ0MDlDOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEjra9M0tMMKFAHaQKFymeiKEdCV37WcSQjh KyOtZbY7Iu/j74HMN7OFQd/dC58fHZ9aFYO3CVtuxwzl8KoAFIPV8EpdI7Ub/35h 62j5PCj15Sj7bZh4P3gHYIn46OWX0m6sKrntIkv1RsJwME3RumwGLi4I6pbxLlsm LJOKtykRSzSj5tL9eEXm8yayLOzShf0YLlp+7sEAYGRBs5/zOQf6BGpCgzFv+I9R 3EZcDg1Riii8MegFeBJcO+GjB/KYrPMfdlAw8C662JcrF409NJ3q0MUsGwpb5HYU rlJSUiQ2IvrFZ/5Ns+BUPgGbUhEfJFyrls4rQbNka/jkzfeYClE= -----END CERTIFICATE-----Generated at Fri Sep 5 10:34:22 2025 by rpki-client