$ rpki-client -vvf repo-rpki.idnic.net/repo/785bff41-2420-42b1-9b83-d41c18043d65/0/8ACB520B0E2DE66CE528B80DA6A5ED66E4B5CF2E.mft File: 8ACB520B0E2DE66CE528B80DA6A5ED66E4B5CF2E.mft (raw, json) Hash identifier: J2+COJFKZYFBR9JtbT3x3XIS+nRuBwjIKGYddr8n1tQ= Subject key identifier: 75:EE:B9:AB:61:85:83:C2:5F:D6:24:9A:FB:FC:DD:70:5D:B8:8B:B7 Authority key identifier: 8A:CB:52:0B:0E:2D:E6:6C:E5:28:B8:0D:A6:A5:ED:66:E4:B5:CF:2E Certificate issuer: /CN=8ACB520B0E2DE66CE528B80DA6A5ED66E4B5CF2E Certificate serial: 55C52D02B383D2E692533B2945A31FB123528CAF Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8ACB520B0E2DE66CE528B80DA6A5ED66E4B5CF2E.cer Subject info access: rsync://repo-rpki.idnic.net/repo/785bff41-2420-42b1-9b83-d41c18043d65/0/8ACB520B0E2DE66CE528B80DA6A5ED66E4B5CF2E.mft Manifest number: 017C Signing time: Mon 21 Jul 2025 07:31:22 +0000 Manifest this update: Mon 21 Jul 2025 07:26:22 +0000 Manifest next update: Thu 24 Jul 2025 08:19:22 +0000 Files and hashes: 1: 3130332e3137392e3235322e302f32332d3233203d3e20313439333530.roa (hash: SOLno68sPPJ1WEP8d6UDWvS0+ZdY5j1GxBVKsZxB5cY=) 2: 8ACB520B0E2DE66CE528B80DA6A5ED66E4B5CF2E.crl (hash: kLz9xJGmZ3j17NrDbpo+Q7AVwdSQ7BJI0mIJP8wnyEA=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/785bff41-2420-42b1-9b83-d41c18043d65/0/8ACB520B0E2DE66CE528B80DA6A5ED66E4B5CF2E.crl rsync://repo-rpki.idnic.net/repo/785bff41-2420-42b1-9b83-d41c18043d65/0/8ACB520B0E2DE66CE528B80DA6A5ED66E4B5CF2E.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8ACB520B0E2DE66CE528B80DA6A5ED66E4B5CF2E.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 24 Jul 2025 08:19:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 55:c5:2d:02:b3:83:d2:e6:92:53:3b:29:45:a3:1f:b1:23:52:8c:af Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8ACB520B0E2DE66CE528B80DA6A5ED66E4B5CF2E Validity Not Before: Jul 21 07:26:22 2025 GMT Not After : Jul 24 08:19:22 2025 GMT Subject: CN=75EEB9AB618583C25FD6249AFBFCDD705DB88BB7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:01:39:fe:f4:e7:25:22:62:1c:b0:99:5a:df: 6c:fe:17:0f:9d:cd:43:2d:e2:26:6e:9d:1e:fd:11: f4:b9:f1:b5:97:56:bd:50:0b:e7:47:38:5e:3d:8e: 17:6d:24:ee:ac:a5:9b:61:50:7f:7f:04:00:75:e9: 81:74:a4:9f:2d:8b:7b:5b:8d:74:4b:da:d1:27:86: 61:21:bc:37:f5:74:6f:69:52:7c:1d:f1:17:15:bd: f6:85:82:23:df:00:aa:a9:f2:a1:91:da:d6:6b:9c: ee:da:b3:86:d0:0b:5a:a5:b4:01:23:6c:13:4b:79: 7f:c6:cb:5d:76:29:03:0a:80:03:b2:6a:3c:a7:4f: e9:ca:b2:ab:59:11:22:ac:77:36:6b:51:5e:f1:92: 59:aa:16:73:e4:12:4b:43:b2:4e:ad:c0:82:1c:28: 76:b4:5d:26:f1:2c:84:b5:b7:fc:1d:c7:c7:48:2e: 7c:4a:7b:69:7c:24:34:23:6e:e1:aa:be:ea:b5:3a: 26:58:24:29:f4:8e:67:07:46:65:8a:6d:80:67:7b: 8f:b2:fd:2e:4d:0b:8d:a6:bb:89:57:97:6b:de:ce: 2a:60:bf:68:95:33:39:74:9e:bb:21:e0:d2:df:33: 5d:1b:8b:0e:26:b5:e6:06:ce:03:45:9f:7c:42:b4: 50:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 75:EE:B9:AB:61:85:83:C2:5F:D6:24:9A:FB:FC:DD:70:5D:B8:8B:B7 X509v3 Authority Key Identifier: keyid:8A:CB:52:0B:0E:2D:E6:6C:E5:28:B8:0D:A6:A5:ED:66:E4:B5:CF:2E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/785bff41-2420-42b1-9b83-d41c18043d65/0/8ACB520B0E2DE66CE528B80DA6A5ED66E4B5CF2E.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8ACB520B0E2DE66CE528B80DA6A5ED66E4B5CF2E.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/785bff41-2420-42b1-9b83-d41c18043d65/0/8ACB520B0E2DE66CE528B80DA6A5ED66E4B5CF2E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 42:a7:08:d7:9e:3a:b3:44:4f:d9:55:67:90:2d:d7:71:9a:97: 26:13:da:9b:ef:9d:b5:af:ec:0d:90:c7:08:a0:3c:d6:6a:9a: f7:74:c0:58:7c:b7:a2:f3:3b:10:a0:a6:56:ed:12:ce:de:09: 6c:ac:ab:dc:45:8d:32:49:39:3f:b2:f4:f0:c7:9c:f9:f3:09: 3f:bc:58:4e:46:77:76:76:6b:9f:43:59:f4:22:22:d1:7b:0c: e2:3c:85:0a:66:5f:61:41:02:ef:37:5b:33:35:05:e2:79:3a: 7d:80:d2:8c:37:f3:55:89:e3:6d:2b:bc:9c:d9:1c:6d:93:a3: 28:06:79:99:2c:52:e5:8a:4b:dc:c7:45:98:69:98:6e:f8:ca: 7e:2c:9f:57:fb:34:6e:b5:5b:48:43:f6:ab:a0:49:9f:82:ab: f5:58:7d:4d:96:1a:86:ef:8f:22:1e:5e:81:49:7d:39:62:05: dd:36:2d:4e:e3:44:07:55:75:e5:83:12:c8:f8:ca:58:3d:1f: 05:6e:cc:aa:b1:94:f9:b2:96:a9:9a:bd:4d:b3:a1:81:7c:68: e1:a4:cd:aa:fe:82:ad:7d:7b:5a:15:62:3e:67:c3:8a:61:4b: 5f:f9:03:6b:00:85:14:db:30:58:32:b4:38:bb:80:be:25:96: 50:f3:16:f3 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUVcUtArOD0uaSUzspRaMfsSNSjK8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEFDQjUyMEIwRTJERTY2Q0U1MjhCODBEQTZBNUVENjZF NEI1Q0YyRTAeFw0yNTA3MjEwNzI2MjJaFw0yNTA3MjQwODE5MjJaMDMxMTAvBgNV BAMTKDc1RUVCOUFCNjE4NTgzQzI1RkQ2MjQ5QUZCRkNERDcwNURCODhCQjcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDIATn+9OclImIcsJla32z+Fw+d zUMt4iZunR79EfS58bWXVr1QC+dHOF49jhdtJO6spZthUH9/BAB16YF0pJ8ti3tb jXRL2tEnhmEhvDf1dG9pUnwd8RcVvfaFgiPfAKqp8qGR2tZrnO7as4bQC1qltAEj bBNLeX/Gy112KQMKgAOyajynT+nKsqtZESKsdzZrUV7xklmqFnPkEktDsk6twIIc KHa0XSbxLIS1t/wdx8dILnxKe2l8JDQjbuGqvuq1OiZYJCn0jmcHRmWKbYBne4+y /S5NC42mu4lXl2vezipgv2iVMzl0nrsh4NLfM10biw4mteYGzgNFn3xCtFBVAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUde65q2GFg8Jf1iSa+/zdcF24i7cwHwYDVR0j BBgwFoAUistSCw4t5mzlKLgNpqXtZuS1zy4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 ODViZmY0MS0yNDIwLTQyYjEtOWI4My1kNDFjMTgwNDNkNjUvMC84QUNCNTIwQjBF MkRFNjZDRTUyOEI4MERBNkE1RUQ2NkU0QjVDRjJFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOEFDQjUyMEIwRTJERTY2Q0U1MjhCODBEQTZBNUVENjZFNEI1 Q0YyRS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNzg1YmZmNDEtMjQyMC00MmIxLTli ODMtZDQxYzE4MDQzZDY1LzAvOEFDQjUyMEIwRTJERTY2Q0U1MjhCODBEQTZBNUVE NjZFNEI1Q0YyRS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEKnCNeeOrNET9lVZ5At13GalyYT2pvvnbWv 7A2QxwigPNZqmvd0wFh8t6LzOxCgplbtEs7eCWysq9xFjTJJOT+y9PDHnPnzCT+8 WE5Gd3Z2a59DWfQiItF7DOI8hQpmX2FBAu83WzM1BeJ5On2A0ow381WJ420rvJzZ HG2ToygGeZksUuWKS9zHRZhpmG74yn4sn1f7NG61W0hD9qugSZ+Cq/VYfU2WGobv jyIeXoFJfTliBd02LU7jRAdVdeWDEsj4ylg9HwVuzKqxlPmylqmavU2zoYF8aOGk zar+gq19e1oVYj5nw4phS1/5A2sAhRTbMFgytDi7gL4lllDzFvM= -----END CERTIFICATE-----Generated at Tue Jul 22 04:31:28 2025 by rpki-client