$ rpki-client -vvf repo-rpki.idnic.net/repo/58b58aee-e8ee-4287-a2b8-616155c3eec2/0/8BE1F50A90938AE6D4E6D7A6A2A22F003B072ED8.mft File: 8BE1F50A90938AE6D4E6D7A6A2A22F003B072ED8.mft (raw, json) Hash identifier: ZwSZkDqGWnsJmckHB6rAKE6v2lHkndmfftq1DKKZuGc= Subject key identifier: 3C:BF:BA:6D:66:46:F0:77:36:17:9C:B0:58:F7:E7:C4:EA:04:04:4D Authority key identifier: 8B:E1:F5:0A:90:93:8A:E6:D4:E6:D7:A6:A2:A2:2F:00:3B:07:2E:D8 Certificate issuer: /CN=8BE1F50A90938AE6D4E6D7A6A2A22F003B072ED8 Certificate serial: 404CD4EB734ECDC1647FB715AC8DD1FFA58E83B5 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8BE1F50A90938AE6D4E6D7A6A2A22F003B072ED8.cer Subject info access: rsync://repo-rpki.idnic.net/repo/58b58aee-e8ee-4287-a2b8-616155c3eec2/0/8BE1F50A90938AE6D4E6D7A6A2A22F003B072ED8.mft Manifest number: 02BD Signing time: Mon 21 Jul 2025 22:21:38 +0000 Manifest this update: Mon 21 Jul 2025 22:16:38 +0000 Manifest next update: Fri 25 Jul 2025 07:30:38 +0000 Files and hashes: 1: 8BE1F50A90938AE6D4E6D7A6A2A22F003B072ED8.crl (hash: ZZxbk1aGqC9Au3wepVg6NZ2cW+9S5gYnWFCgb0nFf2k=) 2: 3130332e392e3134342e302f32322d3234203d3e20313331373133.roa (hash: nMzdVlm6ZGdAK1jozyzuffucbvzwRK+67XvaYs5SssY=) 3: 323430373a363338303a3a2f33322d3430203d3e20313331373133.roa (hash: n6EnpwYdLmSL8WaVyIXMn7tuvtOoZcAKI7Mz6TbpG8E=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/58b58aee-e8ee-4287-a2b8-616155c3eec2/0/8BE1F50A90938AE6D4E6D7A6A2A22F003B072ED8.crl rsync://repo-rpki.idnic.net/repo/58b58aee-e8ee-4287-a2b8-616155c3eec2/0/8BE1F50A90938AE6D4E6D7A6A2A22F003B072ED8.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8BE1F50A90938AE6D4E6D7A6A2A22F003B072ED8.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Jul 2025 07:30:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 40:4c:d4:eb:73:4e:cd:c1:64:7f:b7:15:ac:8d:d1:ff:a5:8e:83:b5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8BE1F50A90938AE6D4E6D7A6A2A22F003B072ED8 Validity Not Before: Jul 21 22:16:38 2025 GMT Not After : Jul 25 07:30:38 2025 GMT Subject: CN=3CBFBA6D6646F07736179CB058F7E7C4EA04044D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:eb:f1:a6:92:da:da:77:da:51:76:0b:b6:5a: ed:f6:18:b8:a0:72:3e:42:fb:76:70:24:a1:fd:5b: 59:b9:49:6e:30:4e:e6:10:83:c2:2d:fb:f7:55:b0: da:85:43:f4:60:b1:d1:21:a9:3d:ae:d9:de:c3:c4: 31:a9:27:8f:f7:ae:4d:7e:26:19:d2:3e:0f:8b:f6: 70:4c:83:cf:59:3b:86:02:d8:91:1d:0c:80:d7:b8: 00:e8:d9:a6:b2:9f:e8:f1:eb:61:03:e7:c5:b0:2e: 91:aa:6c:02:d4:c1:69:7f:2a:6f:c8:aa:18:bc:f8: af:72:3e:2f:93:7f:21:f5:df:ec:6c:06:c4:f4:29: 84:40:e8:69:fb:bf:b2:36:c0:30:a8:96:75:d5:9e: 7d:19:b1:0d:67:fd:c9:cc:73:ad:09:ed:8f:47:64: 71:ca:8d:94:dd:fa:78:98:c6:99:c5:54:d5:fe:1e: bc:ed:a8:36:22:32:63:63:a7:8f:bb:a8:74:0b:2a: 9f:4e:0a:f1:77:33:90:31:13:18:7d:1a:06:58:be: cd:b4:06:29:a2:89:5d:1c:cd:8f:6c:58:6d:c8:ca: 0d:2a:58:58:68:3c:d5:bc:32:76:ed:67:82:cc:54: ac:42:aa:58:1c:02:00:f2:9e:81:97:e3:9c:c0:4f: 93:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:BF:BA:6D:66:46:F0:77:36:17:9C:B0:58:F7:E7:C4:EA:04:04:4D X509v3 Authority Key Identifier: keyid:8B:E1:F5:0A:90:93:8A:E6:D4:E6:D7:A6:A2:A2:2F:00:3B:07:2E:D8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/58b58aee-e8ee-4287-a2b8-616155c3eec2/0/8BE1F50A90938AE6D4E6D7A6A2A22F003B072ED8.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8BE1F50A90938AE6D4E6D7A6A2A22F003B072ED8.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/58b58aee-e8ee-4287-a2b8-616155c3eec2/0/8BE1F50A90938AE6D4E6D7A6A2A22F003B072ED8.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 43:12:9f:2f:f5:a8:d4:94:c4:ca:b4:eb:ef:f2:35:a5:28:d3: 67:98:25:81:af:c1:67:42:d3:73:86:09:08:82:0d:e6:db:80: f4:ac:ef:2d:12:42:4e:17:80:61:c4:53:95:bc:af:89:db:5e: eb:54:04:a2:cf:93:66:8a:a3:c2:54:f2:5c:de:1b:03:1a:b3: eb:da:d1:0c:13:18:95:e5:c4:0d:9e:2d:a1:e4:64:b7:7c:31: 34:db:6e:27:72:2d:4b:c1:6b:47:e3:fc:71:1d:f4:a7:31:d6: 82:9d:de:9f:95:17:63:34:cc:cc:ba:c3:fd:8b:cc:d0:2b:2a: 40:3d:a6:7c:7c:f2:55:05:6d:f2:80:18:29:12:b1:20:b0:01: 7a:3c:c6:48:02:ff:62:4a:04:69:09:1a:4e:01:ff:3c:7a:80: 0b:40:91:65:de:45:41:dc:ba:99:9a:21:b2:4d:0a:0b:f0:d4: 07:95:fa:8c:a6:e6:48:87:2b:8a:fa:ac:ca:76:e6:15:25:5f: 60:68:49:73:78:02:22:d5:b8:9b:25:2e:a7:0a:36:5c:b3:3f: e9:09:c2:6e:7e:cc:b7:89:a8:3b:72:93:1b:15:3f:a0:1b:54: 38:4c:c1:57:fc:61:1b:0c:25:d7:9e:5a:62:a4:e5:41:de:ff: 07:50:0c:e4 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUQEzU63NOzcFkf7cVrI3R/6WOg7UwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEJFMUY1MEE5MDkzOEFFNkQ0RTZEN0E2QTJBMjJGMDAz QjA3MkVEODAeFw0yNTA3MjEyMjE2MzhaFw0yNTA3MjUwNzMwMzhaMDMxMTAvBgNV BAMTKDNDQkZCQTZENjY0NkYwNzczNjE3OUNCMDU4RjdFN0M0RUEwNDA0NEQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC76/Gmktrad9pRdgu2Wu32GLig cj5C+3ZwJKH9W1m5SW4wTuYQg8It+/dVsNqFQ/RgsdEhqT2u2d7DxDGpJ4/3rk1+ JhnSPg+L9nBMg89ZO4YC2JEdDIDXuADo2aayn+jx62ED58WwLpGqbALUwWl/Km/I qhi8+K9yPi+TfyH13+xsBsT0KYRA6Gn7v7I2wDColnXVnn0ZsQ1n/cnMc60J7Y9H ZHHKjZTd+niYxpnFVNX+HrztqDYiMmNjp4+7qHQLKp9OCvF3M5AxExh9GgZYvs20 BimiiV0czY9sWG3Iyg0qWFhoPNW8MnbtZ4LMVKxCqlgcAgDynoGX45zAT5PxAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUPL+6bWZG8Hc2F5ywWPfnxOoEBE0wHwYDVR0j BBgwFoAUi+H1CpCTiubU5temoqIvADsHLtgwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 OGI1OGFlZS1lOGVlLTQyODctYTJiOC02MTYxNTVjM2VlYzIvMC84QkUxRjUwQTkw OTM4QUU2RDRFNkQ3QTZBMkEyMkYwMDNCMDcyRUQ4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOEJFMUY1MEE5MDkzOEFFNkQ0RTZEN0E2QTJBMjJGMDAzQjA3 MkVEOC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNThiNThhZWUtZThlZS00Mjg3LWEy YjgtNjE2MTU1YzNlZWMyLzAvOEJFMUY1MEE5MDkzOEFFNkQ0RTZEN0E2QTJBMjJG MDAzQjA3MkVEOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEMSny/1qNSUxMq06+/yNaUo02eYJYGvwWdC 03OGCQiCDebbgPSs7y0SQk4XgGHEU5W8r4nbXutUBKLPk2aKo8JU8lzeGwMas+va 0QwTGJXlxA2eLaHkZLd8MTTbbidyLUvBa0fj/HEd9Kcx1oKd3p+VF2M0zMy6w/2L zNArKkA9pnx88lUFbfKAGCkSsSCwAXo8xkgC/2JKBGkJGk4B/zx6gAtAkWXeRUHc upmaIbJNCgvw1AeV+oym5kiHK4r6rMp25hUlX2BoSXN4AiLVuJslLqcKNlyzP+kJ wm5+zLeJqDtykxsVP6AbVDhMwVf8YRsMJdeeWmKk5UHe/wdQDOQ= -----END CERTIFICATE-----Generated at Wed Jul 23 01:59:51 2025 by rpki-client