$ rpki-client -vvf repo-rpki.idnic.net/repo/09a88897-c387-4735-acd8-1d1c53cde264/0/8B7E0099F26BEEE90826C9B0E424575BDE128403.mft File: 8B7E0099F26BEEE90826C9B0E424575BDE128403.mft (raw, json) Hash identifier: WHilZ35nGlpvwT5hJSli/JpyqTddKuiqAT9AKUwB/5Q= Subject key identifier: CE:B9:D6:E5:55:93:6F:E1:1B:C4:3F:49:F0:8D:59:8D:9C:82:C0:30 Authority key identifier: 8B:7E:00:99:F2:6B:EE:E9:08:26:C9:B0:E4:24:57:5B:DE:12:84:03 Certificate issuer: /CN=8B7E0099F26BEEE90826C9B0E424575BDE128403 Certificate serial: 05730FACA8BA52FB2A4DDE0F7A138508F50F2B11 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8B7E0099F26BEEE90826C9B0E424575BDE128403.cer Subject info access: rsync://repo-rpki.idnic.net/repo/09a88897-c387-4735-acd8-1d1c53cde264/0/8B7E0099F26BEEE90826C9B0E424575BDE128403.mft Manifest number: 0278 Signing time: Mon 21 Jul 2025 15:32:04 +0000 Manifest this update: Mon 21 Jul 2025 15:27:04 +0000 Manifest next update: Thu 24 Jul 2025 19:08:04 +0000 Files and hashes: 1: 8B7E0099F26BEEE90826C9B0E424575BDE128403.crl (hash: MdZq5T2hyYiTxxbMB8dL7PAB6JH7xddC9buHnFg2zN4=) 2: 3130332e3137392e38362e302f32332d3234203d3e20313430333839.roa (hash: rY4tz9/kQego7cZpv2afdmhIw5rIucEsOqMDCxyUCMk=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/09a88897-c387-4735-acd8-1d1c53cde264/0/8B7E0099F26BEEE90826C9B0E424575BDE128403.crl rsync://repo-rpki.idnic.net/repo/09a88897-c387-4735-acd8-1d1c53cde264/0/8B7E0099F26BEEE90826C9B0E424575BDE128403.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8B7E0099F26BEEE90826C9B0E424575BDE128403.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 24 Jul 2025 19:08:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 05:73:0f:ac:a8:ba:52:fb:2a:4d:de:0f:7a:13:85:08:f5:0f:2b:11 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8B7E0099F26BEEE90826C9B0E424575BDE128403 Validity Not Before: Jul 21 15:27:04 2025 GMT Not After : Jul 24 19:08:04 2025 GMT Subject: CN=CEB9D6E555936FE11BC43F49F08D598D9C82C030 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:b9:f0:bc:b9:68:14:e7:81:bd:9b:57:30:ad: 33:32:bf:62:54:94:89:7e:63:da:ac:15:f6:82:57: 00:b1:71:04:57:e8:3f:da:0e:0a:86:54:d4:e8:b4: 55:9b:3b:f8:2f:ae:57:b3:02:40:4a:4f:b1:d3:ff: bb:47:8f:87:4f:77:39:87:09:0d:4d:bb:48:d2:fa: 3d:1d:25:19:51:b7:03:8f:a9:b2:97:61:7f:15:b0: a5:31:d5:a6:49:c7:6b:86:e7:cd:2e:31:d7:40:2f: 7c:a9:a9:63:b0:36:94:db:6c:87:8b:37:92:51:71: 3e:23:93:d8:6b:4e:f1:d0:0a:2a:43:45:6d:88:d9: 6a:19:26:9f:1e:ba:00:61:a3:d4:35:02:cf:d1:0a: 97:cd:50:ec:e8:14:e2:1d:47:6a:75:ab:f3:43:b2: 57:b1:d5:91:fc:c1:89:1e:d0:3c:80:e9:50:60:9a: 05:c1:a6:49:f6:dc:0a:9e:dd:2b:72:e9:86:fb:71: 5f:d7:9b:04:fa:fa:b1:89:dc:4d:7e:b6:41:0f:46: 05:e9:a0:74:d2:31:e8:58:4e:bf:db:52:f4:ae:44: c0:5c:03:41:0c:d1:4b:e5:25:01:f8:f0:19:bc:59: 9a:85:06:8e:7f:6e:a6:fe:77:a1:c4:61:84:97:41: 54:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CE:B9:D6:E5:55:93:6F:E1:1B:C4:3F:49:F0:8D:59:8D:9C:82:C0:30 X509v3 Authority Key Identifier: keyid:8B:7E:00:99:F2:6B:EE:E9:08:26:C9:B0:E4:24:57:5B:DE:12:84:03 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/09a88897-c387-4735-acd8-1d1c53cde264/0/8B7E0099F26BEEE90826C9B0E424575BDE128403.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8B7E0099F26BEEE90826C9B0E424575BDE128403.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/09a88897-c387-4735-acd8-1d1c53cde264/0/8B7E0099F26BEEE90826C9B0E424575BDE128403.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 63:a1:99:b7:92:3b:f5:c9:a9:ce:d2:5e:ff:67:10:da:45:35: 92:23:43:cb:80:37:eb:a1:97:b1:f8:61:10:f4:79:d1:8e:82: b6:75:7a:d8:03:87:1f:d5:51:d1:ec:31:2c:88:4f:b4:d3:c8: 61:3d:7e:ec:c4:1b:d3:58:a2:5e:94:4a:47:1b:fa:d3:20:24: b3:fc:1c:80:1b:d1:ee:9a:44:54:23:cf:bc:a2:f7:7a:a2:81: b7:b8:13:d5:3d:b4:40:c5:1f:35:87:2c:68:8a:e5:77:50:aa: ef:3f:c3:82:53:e3:69:62:65:92:53:ac:b6:01:76:f3:df:74: fa:a5:1c:37:47:1d:66:2d:9c:d6:9c:18:fe:be:4b:ac:9e:92: 3b:0c:29:f1:49:c0:40:d5:3c:f0:5a:ff:83:79:23:eb:22:4d: e1:ab:f3:fd:60:8f:27:3c:94:80:86:da:f6:51:57:c8:e5:ce: 90:9a:f3:a9:98:c9:14:0d:39:e9:bc:90:f1:ce:5a:00:dd:e3: b6:c7:02:f4:4b:88:bb:a7:f9:e5:3c:8e:ab:1b:36:41:b7:2c: c0:14:78:c0:fe:e3:02:e9:88:dc:85:05:06:a2:51:aa:ee:a7: 8d:0c:2a:81:5d:b2:be:08:c2:9d:0a:d2:2f:80:05:fc:05:f5: c3:ef:81:7a -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUBXMPrKi6UvsqTd4PehOFCPUPKxEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEI3RTAwOTlGMjZCRUVFOTA4MjZDOUIwRTQyNDU3NUJE RTEyODQwMzAeFw0yNTA3MjExNTI3MDRaFw0yNTA3MjQxOTA4MDRaMDMxMTAvBgNV BAMTKENFQjlENkU1NTU5MzZGRTExQkM0M0Y0OUYwOEQ1OThEOUM4MkMwMzAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDCufC8uWgU54G9m1cwrTMyv2JU lIl+Y9qsFfaCVwCxcQRX6D/aDgqGVNTotFWbO/gvrlezAkBKT7HT/7tHj4dPdzmH CQ1Nu0jS+j0dJRlRtwOPqbKXYX8VsKUx1aZJx2uG580uMddAL3ypqWOwNpTbbIeL N5JRcT4jk9hrTvHQCipDRW2I2WoZJp8eugBho9Q1As/RCpfNUOzoFOIdR2p1q/ND slex1ZH8wYke0DyA6VBgmgXBpkn23Aqe3Sty6Yb7cV/XmwT6+rGJ3E1+tkEPRgXp oHTSMehYTr/bUvSuRMBcA0EM0UvlJQH48Bm8WZqFBo5/bqb+d6HEYYSXQVSxAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUzrnW5VWTb+EbxD9J8I1ZjZyCwDAwHwYDVR0j BBgwFoAUi34AmfJr7ukIJsmw5CRXW94ShAMwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w OWE4ODg5Ny1jMzg3LTQ3MzUtYWNkOC0xZDFjNTNjZGUyNjQvMC84QjdFMDA5OUYy NkJFRUU5MDgyNkM5QjBFNDI0NTc1QkRFMTI4NDAzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOEI3RTAwOTlGMjZCRUVFOTA4MjZDOUIwRTQyNDU3NUJERTEy ODQwMy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMDlhODg4OTctYzM4Ny00NzM1LWFj ZDgtMWQxYzUzY2RlMjY0LzAvOEI3RTAwOTlGMjZCRUVFOTA4MjZDOUIwRTQyNDU3 NUJERTEyODQwMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGOhmbeSO/XJqc7SXv9nENpFNZIjQ8uAN+uh l7H4YRD0edGOgrZ1etgDhx/VUdHsMSyIT7TTyGE9fuzEG9NYol6USkcb+tMgJLP8 HIAb0e6aRFQjz7yi93qigbe4E9U9tEDFHzWHLGiK5XdQqu8/w4JT42liZZJTrLYB dvPfdPqlHDdHHWYtnNacGP6+S6yekjsMKfFJwEDVPPBa/4N5I+siTeGr8/1gjyc8 lICG2vZRV8jlzpCa86mYyRQNOem8kPHOWgDd47bHAvRLiLun+eU8jqsbNkG3LMAU eMD+4wLpiNyFBQaiUarup40MKoFdsr4Iwp0K0i+ABfwF9cPvgXo= -----END CERTIFICATE-----Generated at Mon Jul 21 23:57:20 2025 by rpki-client