$ rpki-client -vvf repo-rpki.idnic.net/repo/12307390-6ef3-4476-a6aa-d0c5783e1f37/0/8A05EBF58BEC96D946EE85F0F0F85701A0A72799.mft File: 8A05EBF58BEC96D946EE85F0F0F85701A0A72799.mft (raw, json) Hash identifier: u2n3wGk6XOFlYHkxyYLG5h14iBq7vDZUyYzxZCKdi5U= Subject key identifier: D7:0A:AE:07:F1:BD:F6:EE:15:25:5C:D9:3A:C0:C0:8B:9D:D5:13:D1 Authority key identifier: 8A:05:EB:F5:8B:EC:96:D9:46:EE:85:F0:F0:F8:57:01:A0:A7:27:99 Certificate issuer: /CN=8A05EBF58BEC96D946EE85F0F0F85701A0A72799 Certificate serial: 23B2EA3A51508B306344AB3B8A1A024AE08874C4 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8A05EBF58BEC96D946EE85F0F0F85701A0A72799.cer Subject info access: rsync://repo-rpki.idnic.net/repo/12307390-6ef3-4476-a6aa-d0c5783e1f37/0/8A05EBF58BEC96D946EE85F0F0F85701A0A72799.mft Manifest number: 04F2 Signing time: Tue 22 Jul 2025 10:21:04 +0000 Manifest this update: Tue 22 Jul 2025 10:16:04 +0000 Manifest next update: Fri 25 Jul 2025 18:59:04 +0000 Files and hashes: 1: 3130332e3133392e34372e302f32342d3234203d3e203137393935.roa (hash: hRDdGequ+GhEEqBrX8O9Zq6WRslymD5ehiejKAFbvr0=) 2: 8A05EBF58BEC96D946EE85F0F0F85701A0A72799.crl (hash: ie1a0a+3DUSl5r8g0NMnfHVNIwAUMZRJlB7hXbQoGoQ=) 3: 3130332e3133392e34362e302f32342d3234203d3e203137393935.roa (hash: hthNpAwJxjCDLni6mv2Gc1l+BPz0lcv9dxQLklW+A64=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/12307390-6ef3-4476-a6aa-d0c5783e1f37/0/8A05EBF58BEC96D946EE85F0F0F85701A0A72799.crl rsync://repo-rpki.idnic.net/repo/12307390-6ef3-4476-a6aa-d0c5783e1f37/0/8A05EBF58BEC96D946EE85F0F0F85701A0A72799.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8A05EBF58BEC96D946EE85F0F0F85701A0A72799.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Jul 2025 18:59:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 23:b2:ea:3a:51:50:8b:30:63:44:ab:3b:8a:1a:02:4a:e0:88:74:c4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8A05EBF58BEC96D946EE85F0F0F85701A0A72799 Validity Not Before: Jul 22 10:16:04 2025 GMT Not After : Jul 25 18:59:04 2025 GMT Subject: CN=D70AAE07F1BDF6EE15255CD93AC0C08B9DD513D1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:02:98:7c:f7:96:6a:52:ef:22:5b:0e:e3:2a: f4:b9:5e:97:3d:8d:ce:d6:e8:35:3d:47:26:ae:f7: 62:89:0d:95:c1:65:b7:97:46:f0:86:09:29:8f:2a: b9:64:86:46:fe:e1:b0:76:54:37:1c:63:46:77:e5: 72:68:10:dd:0d:ed:2e:a5:b0:bc:bc:fe:3c:10:8e: 46:f9:d6:54:c8:27:aa:66:24:28:6d:33:00:20:b4: 1d:22:ba:18:35:15:d1:b9:ff:a7:66:d1:cb:55:93: 58:a2:30:21:eb:2d:a7:59:25:a0:35:13:76:8f:f4: cb:88:42:3a:ab:20:da:48:f1:77:81:bc:dd:94:84: 46:f9:72:ca:64:26:d0:75:2d:69:21:d1:a4:70:e8: 74:ad:4d:80:a7:93:76:72:c5:82:ff:d1:aa:ff:7d: 14:f3:d8:f2:48:2b:9a:ec:64:fb:ad:6d:eb:c2:16: 00:ed:18:cd:0a:4d:b7:78:c1:e1:1b:ca:ee:5b:30: 0b:87:d1:45:1a:d8:ba:58:0b:b3:60:83:75:8f:39: 92:cf:84:c1:ce:2a:87:96:3d:02:e0:90:3d:9c:03: 0b:9e:9d:fc:df:53:0d:5a:a0:11:c1:cc:54:00:87: 44:c4:d8:f5:41:fb:97:05:51:4b:77:e9:91:42:17: e4:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D7:0A:AE:07:F1:BD:F6:EE:15:25:5C:D9:3A:C0:C0:8B:9D:D5:13:D1 X509v3 Authority Key Identifier: keyid:8A:05:EB:F5:8B:EC:96:D9:46:EE:85:F0:F0:F8:57:01:A0:A7:27:99 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/12307390-6ef3-4476-a6aa-d0c5783e1f37/0/8A05EBF58BEC96D946EE85F0F0F85701A0A72799.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8A05EBF58BEC96D946EE85F0F0F85701A0A72799.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/12307390-6ef3-4476-a6aa-d0c5783e1f37/0/8A05EBF58BEC96D946EE85F0F0F85701A0A72799.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 33:19:e1:f8:ea:e4:29:09:0f:c0:b5:bf:86:7f:9e:91:b9:bd: 77:4c:65:1e:8d:5e:87:bc:e2:dd:d4:65:22:1c:73:bc:a9:2f: 13:45:f7:d5:41:8a:d4:57:a1:f6:11:4c:9c:5d:81:d1:04:75: 63:db:9d:5c:7d:00:87:2d:20:67:81:81:1e:61:e6:87:72:8f: cd:cc:82:75:f0:1f:82:31:92:33:3c:13:f1:93:6f:32:b8:55: d6:f0:c8:d8:e9:f8:f4:96:93:c1:83:cf:74:e2:0f:a2:d6:c3: 7a:9d:30:65:1d:50:09:0b:1c:7a:84:c8:fa:93:4f:e7:a2:c4: 09:f7:33:21:a6:a9:67:dd:c0:1e:88:96:c6:d6:96:07:62:30: bb:a0:f2:dd:e7:3e:f0:37:33:e7:f7:88:20:0d:7f:09:9d:d3: 37:0c:98:1e:02:6b:4e:28:5d:6f:0c:e5:02:ea:f3:c1:e2:e6: fd:74:ba:be:23:bf:e1:cf:cd:3d:a7:ef:26:58:ba:5e:97:a8: 49:d1:37:b6:e6:ad:3a:e1:c9:71:61:61:78:8b:02:d2:d4:be: a6:31:f9:07:94:14:2b:01:b2:d2:39:92:bf:33:6f:06:1b:f4: 6b:b8:c6:71:42:dc:a0:56:1d:84:c1:7a:d2:c9:a6:a2:f8:3a: 39:52:b0:ef -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUI7LqOlFQizBjRKs7ihoCSuCIdMQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEEwNUVCRjU4QkVDOTZEOTQ2RUU4NUYwRjBGODU3MDFB MEE3Mjc5OTAeFw0yNTA3MjIxMDE2MDRaFw0yNTA3MjUxODU5MDRaMDMxMTAvBgNV BAMTKEQ3MEFBRTA3RjFCREY2RUUxNTI1NUNEOTNBQzBDMDhCOURENTEzRDEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCiAph895ZqUu8iWw7jKvS5Xpc9 jc7W6DU9Ryau92KJDZXBZbeXRvCGCSmPKrlkhkb+4bB2VDccY0Z35XJoEN0N7S6l sLy8/jwQjkb51lTIJ6pmJChtMwAgtB0iuhg1FdG5/6dm0ctVk1iiMCHrLadZJaA1 E3aP9MuIQjqrINpI8XeBvN2UhEb5cspkJtB1LWkh0aRw6HStTYCnk3ZyxYL/0ar/ fRTz2PJIK5rsZPutbevCFgDtGM0KTbd4weEbyu5bMAuH0UUa2LpYC7Ngg3WPOZLP hMHOKoeWPQLgkD2cAwuenfzfUw1aoBHBzFQAh0TE2PVB+5cFUUt36ZFCF+QDAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU1wquB/G99u4VJVzZOsDAi53VE9EwHwYDVR0j BBgwFoAUigXr9YvsltlG7oXw8PhXAaCnJ5kwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x MjMwNzM5MC02ZWYzLTQ0NzYtYTZhYS1kMGM1NzgzZTFmMzcvMC84QTA1RUJGNThC RUM5NkQ5NDZFRTg1RjBGMEY4NTcwMUEwQTcyNzk5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOEEwNUVCRjU4QkVDOTZEOTQ2RUU4NUYwRjBGODU3MDFBMEE3 Mjc5OS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMTIzMDczOTAtNmVmMy00NDc2LWE2 YWEtZDBjNTc4M2UxZjM3LzAvOEEwNUVCRjU4QkVDOTZEOTQ2RUU4NUYwRjBGODU3 MDFBMEE3Mjc5OS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADMZ4fjq5CkJD8C1v4Z/npG5vXdMZR6NXoe8 4t3UZSIcc7ypLxNF99VBitRXofYRTJxdgdEEdWPbnVx9AIctIGeBgR5h5odyj83M gnXwH4IxkjM8E/GTbzK4VdbwyNjp+PSWk8GDz3TiD6LWw3qdMGUdUAkLHHqEyPqT T+eixAn3MyGmqWfdwB6IlsbWlgdiMLug8t3nPvA3M+f3iCANfwmd0zcMmB4Ca04o XW8M5QLq88Hi5v10ur4jv+HPzT2n7yZYul6XqEnRN7bmrTrhyXFhYXiLAtLUvqYx +QeUFCsBstI5kr8zbwYb9Gu4xnFC3KBWHYTBetLJpqL4OjlSsO8= -----END CERTIFICATE-----Generated at Thu Jul 24 12:06:50 2025 by rpki-client