$ rpki-client -vvf repo-rpki.idnic.net/repo/506cd155-b53f-4146-a17c-7f1375eca24a/0/A8ACDEBC6EB4FF09A48B38FEB17CC145AA5E9F36.mft File: A8ACDEBC6EB4FF09A48B38FEB17CC145AA5E9F36.mft (raw, json) Hash identifier: WxecZchH6dWSSS8UL/wE/fcaJ7HS2ZAybYfuhGzYY9o= Subject key identifier: 8E:83:AC:8E:63:2D:3D:4B:83:F8:47:B5:5C:E8:E8:A9:5E:50:E8:4C Authority key identifier: A8:AC:DE:BC:6E:B4:FF:09:A4:8B:38:FE:B1:7C:C1:45:AA:5E:9F:36 Certificate issuer: /CN=A8ACDEBC6EB4FF09A48B38FEB17CC145AA5E9F36 Certificate serial: 44174F615A432F9B62CC4561296375F872F6B13E Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A8ACDEBC6EB4FF09A48B38FEB17CC145AA5E9F36.cer Subject info access: rsync://repo-rpki.idnic.net/repo/506cd155-b53f-4146-a17c-7f1375eca24a/0/A8ACDEBC6EB4FF09A48B38FEB17CC145AA5E9F36.mft Manifest number: 04F1 Signing time: Sat 19 Jul 2025 21:30:02 +0000 Manifest this update: Sat 19 Jul 2025 21:25:02 +0000 Manifest next update: Tue 22 Jul 2025 21:37:02 +0000 Files and hashes: 1: A8ACDEBC6EB4FF09A48B38FEB17CC145AA5E9F36.crl (hash: CF/LTMy/f5g0daE5aX45oQXYgTeT9zLJLg1Wgm3gUuw=) 2: 3130332e37392e39362e302f32342d3234203d3e203634333038.roa (hash: wGapFjIoWrukGBmT8iRgZP0dNhbzHUcz+UdRp6Wb0WM=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/506cd155-b53f-4146-a17c-7f1375eca24a/0/A8ACDEBC6EB4FF09A48B38FEB17CC145AA5E9F36.crl rsync://repo-rpki.idnic.net/repo/506cd155-b53f-4146-a17c-7f1375eca24a/0/A8ACDEBC6EB4FF09A48B38FEB17CC145AA5E9F36.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A8ACDEBC6EB4FF09A48B38FEB17CC145AA5E9F36.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 22 Jul 2025 21:37:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 44:17:4f:61:5a:43:2f:9b:62:cc:45:61:29:63:75:f8:72:f6:b1:3e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A8ACDEBC6EB4FF09A48B38FEB17CC145AA5E9F36 Validity Not Before: Jul 19 21:25:02 2025 GMT Not After : Jul 22 21:37:02 2025 GMT Subject: CN=8E83AC8E632D3D4B83F847B55CE8E8A95E50E84C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:ed:67:e9:b9:10:35:90:66:6d:cd:ab:f2:70: f4:ca:f7:bc:39:86:cb:55:6e:22:68:b1:04:d9:1a: 65:85:bb:df:e1:17:21:be:55:c9:97:5d:fd:14:1c: 06:43:f8:9e:20:1f:2b:3d:b2:bc:9f:d7:6d:64:b1: b0:65:f7:c5:55:63:a1:c5:09:11:db:4f:cb:a0:05: aa:22:81:73:c6:84:41:44:70:9c:dd:b0:1d:fd:db: 87:ec:ff:ca:9d:51:9f:69:bf:d3:4f:eb:28:82:e1: f7:c0:f3:19:23:8b:a7:99:d4:fb:ec:e0:6b:3b:6c: 99:8c:3f:66:50:c2:ab:0f:fd:7f:8d:58:22:9e:93: 67:db:07:b5:dd:ac:72:dd:8c:2b:f6:28:d0:4b:b1: e0:35:2d:a8:01:b3:34:f7:7c:6a:a1:92:2d:16:83: 69:87:9f:de:c3:52:31:78:28:ce:1c:0e:b2:16:a1: 3e:8e:63:21:85:22:1e:e1:74:d5:02:c1:c3:ec:44: 2e:3d:83:c7:3c:9c:f7:b6:0e:82:3b:04:7d:60:f6: e5:e7:c2:de:b0:cf:c4:f4:59:98:60:c2:28:62:56: 91:bc:61:08:01:65:32:76:8d:b3:8a:46:ef:c7:d2: f9:f2:6b:a2:ea:d1:08:cd:de:6c:7e:08:db:7a:20: 40:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:83:AC:8E:63:2D:3D:4B:83:F8:47:B5:5C:E8:E8:A9:5E:50:E8:4C X509v3 Authority Key Identifier: keyid:A8:AC:DE:BC:6E:B4:FF:09:A4:8B:38:FE:B1:7C:C1:45:AA:5E:9F:36 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/506cd155-b53f-4146-a17c-7f1375eca24a/0/A8ACDEBC6EB4FF09A48B38FEB17CC145AA5E9F36.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A8ACDEBC6EB4FF09A48B38FEB17CC145AA5E9F36.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/506cd155-b53f-4146-a17c-7f1375eca24a/0/A8ACDEBC6EB4FF09A48B38FEB17CC145AA5E9F36.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2e:5e:de:fe:bd:d0:9a:72:84:0e:99:64:df:dd:b3:61:a1:38: d5:e3:51:ca:5d:12:7f:ad:ba:16:78:38:b0:f0:3c:a8:66:ec: 83:97:aa:cd:e5:b3:9d:f4:4a:16:79:ee:95:a1:04:e7:60:66: f8:a2:d0:99:ab:59:88:a3:6b:a0:b6:ae:7d:41:a6:50:98:b8: bd:d5:ff:0b:0e:99:be:4f:77:3d:d9:d0:bd:2b:d1:d1:10:b1: 50:46:85:1d:69:ca:d1:49:f2:38:dd:0e:85:f4:d9:67:6d:29: 13:b5:b6:c0:00:2c:83:c1:87:d4:16:40:01:27:a3:c7:83:29: fd:61:59:0c:58:5a:d1:61:57:ee:3d:09:a2:3a:a7:e1:1e:9a: 64:dc:42:c0:d8:39:8a:44:d9:3c:1d:3c:59:dd:4e:81:c0:75: 40:89:de:aa:ec:83:5d:96:db:b5:b9:c8:98:fc:fd:18:5a:5b: 29:48:84:dd:99:ef:3e:48:00:81:7c:35:17:d0:9d:f4:6f:3d: a5:78:fe:34:86:d0:91:a0:65:96:65:62:fc:86:dc:d6:8c:3a: 59:77:7d:34:40:62:17:4a:f0:e8:db:86:8c:5e:20:97:fd:65: 44:95:53:30:f8:03:81:d3:19:5d:e2:18:19:50:16:12:0d:4b: f0:05:49:b4 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIURBdPYVpDL5tizEVhKWN1+HL2sT4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQThBQ0RFQkM2RUI0RkYwOUE0OEIzOEZFQjE3Q0MxNDVB QTVFOUYzNjAeFw0yNTA3MTkyMTI1MDJaFw0yNTA3MjIyMTM3MDJaMDMxMTAvBgNV BAMTKDhFODNBQzhFNjMyRDNENEI4M0Y4NDdCNTVDRThFOEE5NUU1MEU4NEMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCe7WfpuRA1kGZtzavycPTK97w5 hstVbiJosQTZGmWFu9/hFyG+VcmXXf0UHAZD+J4gHys9sryf121ksbBl98VVY6HF CRHbT8ugBaoigXPGhEFEcJzdsB3924fs/8qdUZ9pv9NP6yiC4ffA8xkji6eZ1Pvs 4Gs7bJmMP2ZQwqsP/X+NWCKek2fbB7XdrHLdjCv2KNBLseA1LagBszT3fGqhki0W g2mHn97DUjF4KM4cDrIWoT6OYyGFIh7hdNUCwcPsRC49g8c8nPe2DoI7BH1g9uXn wt6wz8T0WZhgwihiVpG8YQgBZTJ2jbOKRu/H0vnya6Lq0QjN3mx+CNt6IEA/AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUjoOsjmMtPUuD+Ee1XOjoqV5Q6EwwHwYDVR0j BBgwFoAUqKzevG60/wmkizj+sXzBRapenzYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 MDZjZDE1NS1iNTNmLTQxNDYtYTE3Yy03ZjEzNzVlY2EyNGEvMC9BOEFDREVCQzZF QjRGRjA5QTQ4QjM4RkVCMTdDQzE0NUFBNUU5RjM2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQThBQ0RFQkM2RUI0RkYwOUE0OEIzOEZFQjE3Q0MxNDVBQTVF OUYzNi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNTA2Y2QxNTUtYjUzZi00MTQ2LWEx N2MtN2YxMzc1ZWNhMjRhLzAvQThBQ0RFQkM2RUI0RkYwOUE0OEIzOEZFQjE3Q0Mx NDVBQTVFOUYzNi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAC5e3v690JpyhA6ZZN/ds2GhONXjUcpdEn+t uhZ4OLDwPKhm7IOXqs3ls530ShZ57pWhBOdgZvii0JmrWYija6C2rn1BplCYuL3V /wsOmb5Pdz3Z0L0r0dEQsVBGhR1pytFJ8jjdDoX02WdtKRO1tsAALIPBh9QWQAEn o8eDKf1hWQxYWtFhV+49CaI6p+EemmTcQsDYOYpE2TwdPFndToHAdUCJ3qrsg12W 27W5yJj8/RhaWylIhN2Z7z5IAIF8NRfQnfRvPaV4/jSG0JGgZZZlYvyG3NaMOll3 fTRAYhdK8OjbhoxeIJf9ZUSVUzD4A4HTGV3iGBlQFhINS/AFSbQ= -----END CERTIFICATE-----Generated at Mon Jul 21 08:59:30 2025 by rpki-client