$ rpki-client -vvf repo-rpki.idnic.net/repo/0a75d371-18c7-48df-8f61-1d404b646413/0/8EEE0584B224A95915512EA70FE012A4AF134C7A.mft File: 8EEE0584B224A95915512EA70FE012A4AF134C7A.mft (raw, json) Hash identifier: kFYKob/+bfciF2jjwE4HO3xh7x01SsO6SJxS8i6n+xo= Subject key identifier: 5B:26:B7:47:75:DE:CD:A6:B4:DF:0D:16:53:00:B5:C8:E0:D5:17:97 Authority key identifier: 8E:EE:05:84:B2:24:A9:59:15:51:2E:A7:0F:E0:12:A4:AF:13:4C:7A Certificate issuer: /CN=8EEE0584B224A95915512EA70FE012A4AF134C7A Certificate serial: 66E638AABF16743BB5BE05DD8EDF81EA7ED3446C Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8EEE0584B224A95915512EA70FE012A4AF134C7A.cer Subject info access: rsync://repo-rpki.idnic.net/repo/0a75d371-18c7-48df-8f61-1d404b646413/0/8EEE0584B224A95915512EA70FE012A4AF134C7A.mft Manifest number: 04EF Signing time: Sat 19 Jul 2025 05:21:07 +0000 Manifest this update: Sat 19 Jul 2025 05:16:07 +0000 Manifest next update: Tue 22 Jul 2025 11:03:07 +0000 Files and hashes: 1: 3130332e39352e3136302e302f32332d3234203d3e20313336313236.roa (hash: KD7T4Ue/VEXioee+nFto/OfNIEmRxJwHxyIAd7JKH2Q=) 2: 8EEE0584B224A95915512EA70FE012A4AF134C7A.crl (hash: noZmEXR3I/pInXpjdbum15ggekYjT3ns89pTuv2qCC8=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/0a75d371-18c7-48df-8f61-1d404b646413/0/8EEE0584B224A95915512EA70FE012A4AF134C7A.crl rsync://repo-rpki.idnic.net/repo/0a75d371-18c7-48df-8f61-1d404b646413/0/8EEE0584B224A95915512EA70FE012A4AF134C7A.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8EEE0584B224A95915512EA70FE012A4AF134C7A.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 22 Jul 2025 11:03:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 66:e6:38:aa:bf:16:74:3b:b5:be:05:dd:8e:df:81:ea:7e:d3:44:6c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8EEE0584B224A95915512EA70FE012A4AF134C7A Validity Not Before: Jul 19 05:16:07 2025 GMT Not After : Jul 22 11:03:07 2025 GMT Subject: CN=5B26B74775DECDA6B4DF0D165300B5C8E0D51797 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:89:c9:91:ef:82:50:cf:70:1a:b4:e9:ae:b7: 87:a1:8b:4b:a4:bd:18:d3:67:5f:67:e9:6d:b2:dd: ab:57:56:4c:a6:0d:0b:52:00:21:b0:e6:1e:e1:52: 91:a8:18:06:da:5e:fe:2f:28:82:88:a4:ed:9e:db: 16:bc:83:d6:36:a3:69:30:1b:b2:7f:6d:a6:a8:9c: 39:e6:97:c3:34:9f:36:65:04:fc:b6:ce:b3:1a:b5: 66:35:03:62:24:16:32:30:03:18:ad:98:ce:1f:df: 5e:dd:aa:ed:2b:ad:9f:ef:e4:d9:17:d6:4c:29:19: ee:43:1c:22:3b:5e:57:1a:e3:a0:5b:ae:a4:4d:60: f0:cd:09:ff:0d:c6:3a:41:95:97:4d:07:c0:df:00: e8:f8:cb:83:ca:1b:f3:54:62:a6:97:ad:71:e4:93: fb:ab:7b:ce:3c:f9:39:69:9f:98:d4:ce:75:91:e6: be:32:61:9e:3d:e1:36:2d:8a:36:de:ed:c0:28:ee: a4:75:78:ea:87:27:b6:92:b3:8e:42:91:f6:b9:34: 37:27:19:15:3b:b1:dc:92:ef:e8:84:ee:48:e4:f5: b5:22:47:8e:1c:d1:b0:c2:2d:8d:3e:62:d4:b1:02: 42:3e:52:6b:15:aa:61:cc:7a:4c:0d:45:40:f1:4c: 8c:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:26:B7:47:75:DE:CD:A6:B4:DF:0D:16:53:00:B5:C8:E0:D5:17:97 X509v3 Authority Key Identifier: keyid:8E:EE:05:84:B2:24:A9:59:15:51:2E:A7:0F:E0:12:A4:AF:13:4C:7A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/0a75d371-18c7-48df-8f61-1d404b646413/0/8EEE0584B224A95915512EA70FE012A4AF134C7A.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8EEE0584B224A95915512EA70FE012A4AF134C7A.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/0a75d371-18c7-48df-8f61-1d404b646413/0/8EEE0584B224A95915512EA70FE012A4AF134C7A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 32:48:fb:28:a4:af:f0:76:d4:58:68:dc:a3:c6:cf:21:31:ac: f4:b3:5e:f1:e2:a8:db:23:53:17:d9:92:ec:1d:69:d1:3d:74: ca:b7:6a:06:90:3e:a0:b8:cb:d8:df:cf:23:64:81:63:73:f9: 0c:de:d8:f4:32:16:aa:a8:3b:d0:70:c9:53:6e:ce:5e:d1:a8: 87:10:37:66:cc:6c:2d:26:a9:0e:37:7d:ff:7f:dc:7f:51:54: df:ca:e4:0c:e1:35:10:bf:83:a5:55:a4:34:32:4c:30:43:f4: a1:55:2b:3f:2b:4c:ee:b8:00:a8:25:c0:b2:49:cb:9c:20:d0: 19:fd:d0:4b:5d:6f:0b:cd:93:8f:62:ec:0d:82:d1:04:13:3e: 8d:34:77:ef:6c:af:90:7a:7a:78:d7:bf:95:b8:8f:82:5c:d0: 7f:2b:22:34:b0:c4:a2:aa:e6:e1:fb:f0:c4:5e:67:e5:89:02: 25:79:72:91:3c:da:b9:bc:92:57:44:2f:eb:91:b4:6f:34:5a: ae:59:8e:b5:ca:6d:c0:51:86:25:bc:8a:fc:bd:14:29:8e:2f: 46:31:54:ca:1a:63:f4:d7:07:4e:bf:99:2c:65:53:31:26:c0: 25:8e:df:ec:6d:ca:62:cd:7c:09:47:8f:87:8d:a1:c7:56:bf: 03:19:fa:de -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUZuY4qr8WdDu1vgXdjt+B6n7TRGwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEVFRTA1ODRCMjI0QTk1OTE1NTEyRUE3MEZFMDEyQTRB RjEzNEM3QTAeFw0yNTA3MTkwNTE2MDdaFw0yNTA3MjIxMTAzMDdaMDMxMTAvBgNV BAMTKDVCMjZCNzQ3NzVERUNEQTZCNERGMEQxNjUzMDBCNUM4RTBENTE3OTcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/icmR74JQz3AatOmut4ehi0uk vRjTZ19n6W2y3atXVkymDQtSACGw5h7hUpGoGAbaXv4vKIKIpO2e2xa8g9Y2o2kw G7J/baaonDnml8M0nzZlBPy2zrMatWY1A2IkFjIwAxitmM4f317dqu0rrZ/v5NkX 1kwpGe5DHCI7Xlca46BbrqRNYPDNCf8NxjpBlZdNB8DfAOj4y4PKG/NUYqaXrXHk k/ure848+Tlpn5jUznWR5r4yYZ494TYtijbe7cAo7qR1eOqHJ7aSs45Ckfa5NDcn GRU7sdyS7+iE7kjk9bUiR44c0bDCLY0+YtSxAkI+UmsVqmHMekwNRUDxTIwBAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUWya3R3Xezaa03w0WUwC1yODVF5cwHwYDVR0j BBgwFoAUju4FhLIkqVkVUS6nD+ASpK8TTHowDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w YTc1ZDM3MS0xOGM3LTQ4ZGYtOGY2MS0xZDQwNGI2NDY0MTMvMC84RUVFMDU4NEIy MjRBOTU5MTU1MTJFQTcwRkUwMTJBNEFGMTM0QzdBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOEVFRTA1ODRCMjI0QTk1OTE1NTEyRUE3MEZFMDEyQTRBRjEz NEM3QS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMGE3NWQzNzEtMThjNy00OGRmLThm NjEtMWQ0MDRiNjQ2NDEzLzAvOEVFRTA1ODRCMjI0QTk1OTE1NTEyRUE3MEZFMDEy QTRBRjEzNEM3QS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADJI+yikr/B21Fho3KPGzyExrPSzXvHiqNsj UxfZkuwdadE9dMq3agaQPqC4y9jfzyNkgWNz+Qze2PQyFqqoO9BwyVNuzl7RqIcQ N2bMbC0mqQ43ff9/3H9RVN/K5AzhNRC/g6VVpDQyTDBD9KFVKz8rTO64AKglwLJJ y5wg0Bn90EtdbwvNk49i7A2C0QQTPo00d+9sr5B6enjXv5W4j4Jc0H8rIjSwxKKq 5uH78MReZ+WJAiV5cpE82rm8kldEL+uRtG80Wq5ZjrXKbcBRhiW8ivy9FCmOL0Yx VMoaY/TXB06/mSxlUzEmwCWO3+xtymLNfAlHj4eNocdWvwMZ+t4= -----END CERTIFICATE-----Generated at Mon Jul 21 08:58:11 2025 by rpki-client