$ rpki-client -vvf repo-rpki.idnic.net/repo/7d6529db-9330-4e97-adf1-b0ddf1a6e599/0/8B19ACE0A7391492B18BE27AC01D2A602872BFC0.mft File: 8B19ACE0A7391492B18BE27AC01D2A602872BFC0.mft (raw, json) Hash identifier: WqeWpo7CIS2c9Elt3TV4XyIzZ9x8rOBt+zOoawqYib0= Subject key identifier: 86:62:2C:EB:75:83:0E:01:71:39:4E:70:C4:CE:BD:4D:8E:1B:73:40 Authority key identifier: 8B:19:AC:E0:A7:39:14:92:B1:8B:E2:7A:C0:1D:2A:60:28:72:BF:C0 Certificate issuer: /CN=8B19ACE0A7391492B18BE27AC01D2A602872BFC0 Certificate serial: 62F2D6282CB5A406BB6E6219B490771229989F4F Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8B19ACE0A7391492B18BE27AC01D2A602872BFC0.cer Subject info access: rsync://repo-rpki.idnic.net/repo/7d6529db-9330-4e97-adf1-b0ddf1a6e599/0/8B19ACE0A7391492B18BE27AC01D2A602872BFC0.mft Manifest number: 0173 Signing time: Sat 19 Jul 2025 12:40:04 +0000 Manifest this update: Sat 19 Jul 2025 12:35:04 +0000 Manifest next update: Tue 22 Jul 2025 22:13:04 +0000 Files and hashes: 1: 8B19ACE0A7391492B18BE27AC01D2A602872BFC0.crl (hash: naypSMJR4I2JihgwG+BLQTrNTVu6W9mg+yBuDozOkwM=) 2: 3130332e3132322e382e302f32342d3234203d3e20313530393635.roa (hash: OBSu5NWIqhavEgs//Z/O6dTCa3LFoSwUa21LGk85Vss=) 3: 3130332e3132322e392e302f32342d3234203d3e20313530393635.roa (hash: QeU0/vEBTo6jIDTAqgbH9ossdE4o8/cj7giBqcJ2VYs=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/7d6529db-9330-4e97-adf1-b0ddf1a6e599/0/8B19ACE0A7391492B18BE27AC01D2A602872BFC0.crl rsync://repo-rpki.idnic.net/repo/7d6529db-9330-4e97-adf1-b0ddf1a6e599/0/8B19ACE0A7391492B18BE27AC01D2A602872BFC0.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8B19ACE0A7391492B18BE27AC01D2A602872BFC0.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 22 Jul 2025 22:13:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 62:f2:d6:28:2c:b5:a4:06:bb:6e:62:19:b4:90:77:12:29:98:9f:4f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8B19ACE0A7391492B18BE27AC01D2A602872BFC0 Validity Not Before: Jul 19 12:35:04 2025 GMT Not After : Jul 22 22:13:04 2025 GMT Subject: CN=86622CEB75830E0171394E70C4CEBD4D8E1B7340 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:aa:23:4e:32:78:f7:66:87:81:88:da:7b:2f: 0b:94:89:d8:fe:30:e8:e5:f8:dc:d2:b5:73:4c:dd: 49:11:c6:45:87:ac:3d:01:0b:0f:02:0c:91:f8:36: 01:17:3e:71:49:ce:87:ba:58:03:30:d5:e2:c3:e4: 7c:8a:9c:68:44:9c:14:2b:40:60:e3:e4:2e:6d:6a: a0:0f:3a:87:9d:d0:b0:38:31:96:72:58:f7:90:e0: c2:b5:a0:37:f3:9e:fd:e1:9b:bd:eb:98:86:00:f8: 8f:88:bb:bf:4f:e2:3f:3a:a5:e0:3b:a7:00:e0:ff: 78:ee:d6:5b:91:fa:16:35:5d:84:a4:d8:54:d7:a2: ff:3d:54:b4:a9:28:64:28:08:78:4a:dc:d2:ba:16: be:93:cb:91:a0:65:c3:67:6a:00:b4:07:59:76:4d: fa:02:6e:0f:75:1d:f1:43:5e:4c:38:80:7f:61:8e: 1e:d6:01:94:66:c0:2d:fc:0a:55:f8:c5:71:4e:46: 7a:c5:65:d3:fd:af:35:85:97:7d:59:fd:cc:90:1d: 04:11:12:e0:20:fe:c2:22:74:0e:59:ad:69:e3:c9: 57:f6:69:61:f9:c0:d1:9f:bd:37:6c:e9:7f:b0:44: 22:7c:7f:a7:3e:84:28:5e:9e:d0:2e:14:89:12:0f: e7:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:62:2C:EB:75:83:0E:01:71:39:4E:70:C4:CE:BD:4D:8E:1B:73:40 X509v3 Authority Key Identifier: keyid:8B:19:AC:E0:A7:39:14:92:B1:8B:E2:7A:C0:1D:2A:60:28:72:BF:C0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/7d6529db-9330-4e97-adf1-b0ddf1a6e599/0/8B19ACE0A7391492B18BE27AC01D2A602872BFC0.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8B19ACE0A7391492B18BE27AC01D2A602872BFC0.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/7d6529db-9330-4e97-adf1-b0ddf1a6e599/0/8B19ACE0A7391492B18BE27AC01D2A602872BFC0.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 05:ff:7f:6d:31:53:9e:33:9a:c8:85:42:0d:df:a2:09:54:6a: ee:77:6d:ac:d9:ca:db:36:14:9b:df:a4:0e:66:67:1b:78:a5: 6d:49:74:d4:e5:26:30:db:86:eb:ab:17:11:b0:c2:a9:f8:c6: d5:99:7e:f3:b5:92:6d:b3:75:bc:0c:ed:02:39:23:2d:87:2d: 1b:3a:f4:4b:6f:a2:87:20:74:61:2b:55:8b:e2:a5:ac:d5:3b: 62:f9:dd:d4:83:f8:5b:c8:9f:e9:44:fc:7f:b3:6f:01:0d:60: 22:52:c0:ab:e1:6c:70:45:ce:08:50:d6:bb:72:1f:eb:ad:b3: b6:0b:08:95:7d:0f:8f:df:c6:d0:ee:17:54:a5:46:be:27:a2: d0:3d:80:4f:96:12:00:4e:4e:3d:fa:5b:a7:f6:ff:bd:73:3d: ea:02:2b:48:78:79:47:6c:03:c8:3f:d0:68:8a:1f:0f:48:c4: 8b:73:93:73:f8:00:42:97:b4:55:bd:cd:d8:11:92:21:0f:17: 2b:15:5e:16:ac:27:65:e9:ff:f8:a0:c5:ef:63:7d:92:7c:62: 31:f3:2c:7a:3c:2e:e9:9a:c4:55:70:69:65:3c:ef:5d:4a:44: ea:91:e3:dd:f4:f6:49:b4:f2:b8:c4:11:b3:3f:08:b7:1e:6b: 29:c8:3c:d1 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUYvLWKCy1pAa7bmIZtJB3EimYn08wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEIxOUFDRTBBNzM5MTQ5MkIxOEJFMjdBQzAxRDJBNjAy ODcyQkZDMDAeFw0yNTA3MTkxMjM1MDRaFw0yNTA3MjIyMjEzMDRaMDMxMTAvBgNV BAMTKDg2NjIyQ0VCNzU4MzBFMDE3MTM5NEU3MEM0Q0VCRDREOEUxQjczNDAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/qiNOMnj3ZoeBiNp7LwuUidj+ MOjl+NzStXNM3UkRxkWHrD0BCw8CDJH4NgEXPnFJzoe6WAMw1eLD5HyKnGhEnBQr QGDj5C5taqAPOoed0LA4MZZyWPeQ4MK1oDfznv3hm73rmIYA+I+Iu79P4j86peA7 pwDg/3ju1luR+hY1XYSk2FTXov89VLSpKGQoCHhK3NK6Fr6Ty5GgZcNnagC0B1l2 TfoCbg91HfFDXkw4gH9hjh7WAZRmwC38ClX4xXFORnrFZdP9rzWFl31Z/cyQHQQR EuAg/sIidA5ZrWnjyVf2aWH5wNGfvTds6X+wRCJ8f6c+hChentAuFIkSD+edAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUhmIs63WDDgFxOU5wxM69TY4bc0AwHwYDVR0j BBgwFoAUixms4Kc5FJKxi+J6wB0qYChyv8AwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 ZDY1MjlkYi05MzMwLTRlOTctYWRmMS1iMGRkZjFhNmU1OTkvMC84QjE5QUNFMEE3 MzkxNDkyQjE4QkUyN0FDMDFEMkE2MDI4NzJCRkMwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOEIxOUFDRTBBNzM5MTQ5MkIxOEJFMjdBQzAxRDJBNjAyODcy QkZDMC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vN2Q2NTI5ZGItOTMzMC00ZTk3LWFk ZjEtYjBkZGYxYTZlNTk5LzAvOEIxOUFDRTBBNzM5MTQ5MkIxOEJFMjdBQzAxRDJB NjAyODcyQkZDMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAX/f20xU54zmsiFQg3foglUau53bazZyts2 FJvfpA5mZxt4pW1JdNTlJjDbhuurFxGwwqn4xtWZfvO1km2zdbwM7QI5Iy2HLRs6 9EtvoocgdGErVYvipazVO2L53dSD+FvIn+lE/H+zbwENYCJSwKvhbHBFzghQ1rty H+uts7YLCJV9D4/fxtDuF1SlRr4notA9gE+WEgBOTj36W6f2/71zPeoCK0h4eUds A8g/0GiKHw9IxItzk3P4AEKXtFW9zdgRkiEPFysVXhasJ2Xp//igxe9jfZJ8YjHz LHo8LumaxFVwaWU8711KROqR49309km08rjEEbM/CLceaynIPNE= -----END CERTIFICATE-----Generated at Mon Jul 21 08:55:14 2025 by rpki-client