$ rpki-client -vvf repo-rpki.idnic.net/repo/5e6c2a91-6afc-4767-bbc1-750613264585/0/8BF02D8172D4CA8A00A9EE2EB8CC099F0727F1CB.mft File: 8BF02D8172D4CA8A00A9EE2EB8CC099F0727F1CB.mft (raw, json) Hash identifier: eoSdQi5bR0H5kchki66n6rRTB+jnxgcWQ0MauUUzQEw= Subject key identifier: 0F:38:49:2A:D4:E4:6F:C6:55:2E:9D:C4:D0:0B:AC:C8:74:95:32:23 Authority key identifier: 8B:F0:2D:81:72:D4:CA:8A:00:A9:EE:2E:B8:CC:09:9F:07:27:F1:CB Certificate issuer: /CN=8BF02D8172D4CA8A00A9EE2EB8CC099F0727F1CB Certificate serial: 5A099269DAFFE4ACB7436C8AD32F16C9C2B37BAD Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8BF02D8172D4CA8A00A9EE2EB8CC099F0727F1CB.cer Subject info access: rsync://repo-rpki.idnic.net/repo/5e6c2a91-6afc-4767-bbc1-750613264585/0/8BF02D8172D4CA8A00A9EE2EB8CC099F0727F1CB.mft Manifest number: 01ED Signing time: Mon 21 Jul 2025 15:21:43 +0000 Manifest this update: Mon 21 Jul 2025 15:16:43 +0000 Manifest next update: Thu 24 Jul 2025 21:13:43 +0000 Files and hashes: 1: 8BF02D8172D4CA8A00A9EE2EB8CC099F0727F1CB.crl (hash: NZIsVzpwYpDwQMTL/e+K8IouE20fPpjq0AY2cef1qLc=) 2: 3130332e3133352e342e302f32322d3234203d3e203338333230.roa (hash: 8BpU0pm5UxOt5Z/5pCKxKlre5ZOR7m9ogADS2QXiNkA=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/5e6c2a91-6afc-4767-bbc1-750613264585/0/8BF02D8172D4CA8A00A9EE2EB8CC099F0727F1CB.crl rsync://repo-rpki.idnic.net/repo/5e6c2a91-6afc-4767-bbc1-750613264585/0/8BF02D8172D4CA8A00A9EE2EB8CC099F0727F1CB.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8BF02D8172D4CA8A00A9EE2EB8CC099F0727F1CB.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 24 Jul 2025 21:13:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5a:09:92:69:da:ff:e4:ac:b7:43:6c:8a:d3:2f:16:c9:c2:b3:7b:ad Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8BF02D8172D4CA8A00A9EE2EB8CC099F0727F1CB Validity Not Before: Jul 21 15:16:43 2025 GMT Not After : Jul 24 21:13:43 2025 GMT Subject: CN=0F38492AD4E46FC6552E9DC4D00BACC874953223 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:19:77:f1:66:4d:02:ab:85:1f:a5:3f:1a:ae: 73:76:95:5d:cf:9a:6c:bd:1d:98:06:8e:42:08:73: db:f8:e7:ec:47:91:73:06:06:e4:a7:94:d1:bf:11: d4:09:52:fa:d1:f0:d2:40:b5:63:ed:8f:7a:3d:e0: 74:84:c8:46:a3:56:22:e0:f9:c9:4b:62:fc:13:b2: 7f:6e:b9:9e:9c:87:5d:97:3e:cb:cc:95:4e:f0:72: 1b:d9:9a:96:a1:54:84:35:fb:54:df:84:86:45:40: 6f:c5:58:8b:e6:24:3a:cd:62:79:33:93:ed:e2:d7: bb:01:f0:64:da:45:14:a7:23:f8:ea:29:67:74:4c: 1d:1c:40:ed:e6:97:08:63:33:13:24:d7:88:51:b5: 9c:7a:31:38:f7:e1:f4:2f:47:df:ce:29:3b:90:b8: c1:b4:5c:a7:f8:e5:a8:91:ba:31:a4:d5:26:ff:ee: 0c:6d:ce:08:20:65:26:65:fc:54:26:af:fe:31:5e: 40:97:8c:0a:8d:3f:0c:f3:61:10:95:3d:6c:b6:f0: 92:13:c3:a9:25:f7:4d:aa:f1:50:7c:40:b2:ed:d5: ea:21:36:52:f9:0a:d7:ae:90:17:b0:be:52:a7:3b: 52:18:fd:a2:b9:ae:c6:1b:98:c8:63:02:ef:1d:da: 95:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0F:38:49:2A:D4:E4:6F:C6:55:2E:9D:C4:D0:0B:AC:C8:74:95:32:23 X509v3 Authority Key Identifier: keyid:8B:F0:2D:81:72:D4:CA:8A:00:A9:EE:2E:B8:CC:09:9F:07:27:F1:CB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/5e6c2a91-6afc-4767-bbc1-750613264585/0/8BF02D8172D4CA8A00A9EE2EB8CC099F0727F1CB.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8BF02D8172D4CA8A00A9EE2EB8CC099F0727F1CB.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/5e6c2a91-6afc-4767-bbc1-750613264585/0/8BF02D8172D4CA8A00A9EE2EB8CC099F0727F1CB.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 39:9d:23:51:48:04:57:e1:a9:48:5c:a4:7c:b0:6e:84:75:73: 09:02:ee:53:0c:0e:b0:f0:e8:bd:b0:19:9e:cb:31:1c:4b:5b: 9c:9b:e3:f9:65:aa:81:6d:ac:49:1c:e4:ae:4b:18:cd:05:3a: 98:21:f6:01:a8:cc:12:b7:85:41:a2:38:ec:25:f5:fa:da:ad: cc:a4:d8:1f:e4:9f:de:51:1d:d2:71:4d:3c:50:c3:fd:eb:c1: eb:18:f8:cc:99:ae:4b:3f:3a:48:8d:56:05:a7:a6:b9:fd:32: 7e:64:c8:85:37:6e:54:73:e3:c8:eb:63:ab:24:0a:a5:33:fb: 2d:a8:d9:5e:46:15:57:61:32:15:80:06:78:47:36:4d:d7:c6: 55:23:66:1e:a1:f4:38:64:1d:a8:a8:b7:37:26:2d:7d:31:0b: 25:3f:34:65:b2:39:a8:bb:d3:2c:e8:af:ff:70:2e:72:75:d6: 66:d4:e8:d8:10:69:5c:b3:17:75:fc:6f:a4:d5:d0:3d:9a:5a: 50:39:c4:eb:63:72:3d:ff:34:1f:15:f8:e1:c9:36:0b:84:d2: e4:08:bf:5f:00:22:c7:50:75:22:6a:68:52:b8:5b:f3:d1:06: 46:a9:95:28:f3:3b:8e:fe:a3:b9:ed:ea:55:56:2e:90:93:c1: 67:a2:a9:ec -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUWgmSadr/5Ky3Q2yK0y8WycKze60wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEJGMDJEODE3MkQ0Q0E4QTAwQTlFRTJFQjhDQzA5OUYw NzI3RjFDQjAeFw0yNTA3MjExNTE2NDNaFw0yNTA3MjQyMTEzNDNaMDMxMTAvBgNV BAMTKDBGMzg0OTJBRDRFNDZGQzY1NTJFOURDNEQwMEJBQ0M4NzQ5NTMyMjMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCtGXfxZk0Cq4UfpT8arnN2lV3P mmy9HZgGjkIIc9v45+xHkXMGBuSnlNG/EdQJUvrR8NJAtWPtj3o94HSEyEajViLg +clLYvwTsn9uuZ6ch12XPsvMlU7wchvZmpahVIQ1+1TfhIZFQG/FWIvmJDrNYnkz k+3i17sB8GTaRRSnI/jqKWd0TB0cQO3mlwhjMxMk14hRtZx6MTj34fQvR9/OKTuQ uMG0XKf45aiRujGk1Sb/7gxtzgggZSZl/FQmr/4xXkCXjAqNPwzzYRCVPWy28JIT w6kl902q8VB8QLLt1eohNlL5CteukBewvlKnO1IY/aK5rsYbmMhjAu8d2pXlAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUDzhJKtTkb8ZVLp3E0AusyHSVMiMwHwYDVR0j BBgwFoAUi/AtgXLUyooAqe4uuMwJnwcn8cswDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 ZTZjMmE5MS02YWZjLTQ3NjctYmJjMS03NTA2MTMyNjQ1ODUvMC84QkYwMkQ4MTcy RDRDQThBMDBBOUVFMkVCOENDMDk5RjA3MjdGMUNCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOEJGMDJEODE3MkQ0Q0E4QTAwQTlFRTJFQjhDQzA5OUYwNzI3 RjFDQi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNWU2YzJhOTEtNmFmYy00NzY3LWJi YzEtNzUwNjEzMjY0NTg1LzAvOEJGMDJEODE3MkQ0Q0E4QTAwQTlFRTJFQjhDQzA5 OUYwNzI3RjFDQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADmdI1FIBFfhqUhcpHywboR1cwkC7lMMDrDw 6L2wGZ7LMRxLW5yb4/llqoFtrEkc5K5LGM0FOpgh9gGozBK3hUGiOOwl9frarcyk 2B/kn95RHdJxTTxQw/3rwesY+MyZrks/OkiNVgWnprn9Mn5kyIU3blRz48jrY6sk CqUz+y2o2V5GFVdhMhWABnhHNk3XxlUjZh6h9DhkHaiotzcmLX0xCyU/NGWyOai7 0yzor/9wLnJ11mbU6NgQaVyzF3X8b6TV0D2aWlA5xOtjcj3/NB8V+OHJNguE0uQI v18AIsdQdSJqaFK4W/PRBkaplSjzO47+o7nt6lVWLpCTwWeiqew= -----END CERTIFICATE-----Generated at Wed Jul 23 02:15:50 2025 by rpki-client