$ rpki-client -vvf repo-rpki.idnic.net/repo/8919b80d-4693-4095-a9e3-412e12828ff2/0/8DC2ED0870A005152606E2E6BEB6B6C78A522AF4.mft File: 8DC2ED0870A005152606E2E6BEB6B6C78A522AF4.mft (raw, json) Hash identifier: kkEs+owZgpVtjqqkfTpltu/JQzpyftZPB8AKHznKl2I= Subject key identifier: F2:73:0B:91:E9:5C:3B:DF:D6:88:AC:8C:8B:EE:90:C1:99:10:A2:98 Authority key identifier: 8D:C2:ED:08:70:A0:05:15:26:06:E2:E6:BE:B6:B6:C7:8A:52:2A:F4 Certificate issuer: /CN=8DC2ED0870A005152606E2E6BEB6B6C78A522AF4 Certificate serial: 347D828700B4FFEF5B649376FC5DB650152FCA56 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8DC2ED0870A005152606E2E6BEB6B6C78A522AF4.cer Subject info access: rsync://repo-rpki.idnic.net/repo/8919b80d-4693-4095-a9e3-412e12828ff2/0/8DC2ED0870A005152606E2E6BEB6B6C78A522AF4.mft Manifest number: 02B9 Signing time: Sun 20 Jul 2025 16:00:54 +0000 Manifest this update: Sun 20 Jul 2025 15:55:54 +0000 Manifest next update: Thu 24 Jul 2025 00:37:54 +0000 Files and hashes: 1: 8DC2ED0870A005152606E2E6BEB6B6C78A522AF4.crl (hash: iVi4676q1ihFNqFOjeAms71gVe4W5ve1xbgXsiUlfq8=) 2: 3130332e3137322e33302e302f32342d3234203d3e20313437303737.roa (hash: Ln5Z8ccUeGrlnQ20DfbZRqINCn2+komW7fJKFCt/jbE=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/8919b80d-4693-4095-a9e3-412e12828ff2/0/8DC2ED0870A005152606E2E6BEB6B6C78A522AF4.crl rsync://repo-rpki.idnic.net/repo/8919b80d-4693-4095-a9e3-412e12828ff2/0/8DC2ED0870A005152606E2E6BEB6B6C78A522AF4.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8DC2ED0870A005152606E2E6BEB6B6C78A522AF4.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 24 Jul 2025 00:37:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 34:7d:82:87:00:b4:ff:ef:5b:64:93:76:fc:5d:b6:50:15:2f:ca:56 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8DC2ED0870A005152606E2E6BEB6B6C78A522AF4 Validity Not Before: Jul 20 15:55:54 2025 GMT Not After : Jul 24 00:37:54 2025 GMT Subject: CN=F2730B91E95C3BDFD688AC8C8BEE90C19910A298 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:c5:93:46:b2:02:06:b9:fc:5c:06:38:61:f0: c3:08:54:ee:c7:d1:80:d7:73:30:bb:65:8b:15:53: 16:94:48:65:97:00:6f:f2:ea:a1:41:b1:99:29:c4: f3:86:22:99:ee:49:07:a3:fc:f5:3c:3a:25:9f:63: 5c:57:46:db:5b:c0:0c:28:5e:2b:09:6c:f6:07:e0: 3d:55:4d:94:32:3a:09:2e:06:f7:2f:b4:29:58:12: 9f:e5:43:65:87:75:78:68:5b:47:eb:6b:3e:7d:cb: 7b:27:9b:c9:c1:f0:6d:94:e6:5e:cb:38:ab:ea:ba: 23:19:4e:fb:5f:18:65:64:ae:8a:2d:db:58:14:be: 09:c7:90:68:9d:ac:6c:3c:c2:61:10:b0:05:ec:05: 40:c9:85:96:c8:c7:7f:27:fe:54:91:e3:96:0b:a1: 5f:5a:23:57:88:48:62:4a:9e:71:3f:a5:a2:22:a7: 05:df:c1:be:c7:63:36:60:c3:e7:02:a9:ec:7b:55: 7a:44:92:06:13:69:a6:cb:b3:63:3a:cf:ec:ec:fb: 54:73:f2:3b:13:44:06:9f:2a:91:07:32:36:bd:34: 04:36:aa:fd:0d:dd:ab:67:b6:48:e9:2f:8c:c5:4a: 43:fa:be:b6:ba:eb:37:3f:ea:11:f4:4d:28:d3:e4: 38:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F2:73:0B:91:E9:5C:3B:DF:D6:88:AC:8C:8B:EE:90:C1:99:10:A2:98 X509v3 Authority Key Identifier: keyid:8D:C2:ED:08:70:A0:05:15:26:06:E2:E6:BE:B6:B6:C7:8A:52:2A:F4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/8919b80d-4693-4095-a9e3-412e12828ff2/0/8DC2ED0870A005152606E2E6BEB6B6C78A522AF4.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8DC2ED0870A005152606E2E6BEB6B6C78A522AF4.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/8919b80d-4693-4095-a9e3-412e12828ff2/0/8DC2ED0870A005152606E2E6BEB6B6C78A522AF4.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 77:36:73:dc:aa:ea:4e:ab:93:14:1c:b0:8c:7c:ea:b2:ae:cf: eb:f3:85:86:ff:9b:18:d8:63:15:2b:b2:d2:15:d2:1a:7a:11: 4c:74:cd:8b:c3:4e:07:9c:13:27:a3:a6:36:c8:43:29:14:d0: 1b:ad:3b:96:70:f3:67:2c:70:9d:9d:06:4e:e6:9a:2d:15:4e: 25:6d:2f:74:54:95:f0:58:52:be:7b:e1:0a:52:52:25:25:ce: b1:9b:52:14:fe:a1:63:15:b6:96:c0:d7:05:f3:e2:00:b5:c4: 08:90:3d:ef:06:95:7f:2f:cd:0f:b0:69:57:49:87:5a:d5:7f: 26:f5:b3:45:56:1e:65:50:4d:b4:bb:ff:eb:76:79:22:7c:a3: fe:0e:e8:ca:84:7c:81:e2:1e:89:83:9e:bd:e2:e0:ab:e3:fc: 1e:f0:1d:c4:16:5d:25:50:1f:80:12:ad:6e:c5:99:3c:8c:37: 5d:ec:10:96:56:10:a5:bd:ce:9e:15:cb:03:95:b3:46:04:f7: 5f:2c:a2:e6:75:a5:75:9f:4c:9e:1d:96:18:9f:9d:7b:c1:56: d2:c2:9d:a6:02:d9:c4:e7:79:1b:00:bd:e8:7c:85:82:92:f1: a3:87:6d:84:7f:a5:0b:83:d7:8e:59:e4:55:28:55:ed:73:12: bb:6b:4e:9f -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUNH2ChwC0/+9bZJN2/F22UBUvylYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOERDMkVEMDg3MEEwMDUxNTI2MDZFMkU2QkVCNkI2Qzc4 QTUyMkFGNDAeFw0yNTA3MjAxNTU1NTRaFw0yNTA3MjQwMDM3NTRaMDMxMTAvBgNV BAMTKEYyNzMwQjkxRTk1QzNCREZENjg4QUM4QzhCRUU5MEMxOTkxMEEyOTgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDHxZNGsgIGufxcBjhh8MMIVO7H 0YDXczC7ZYsVUxaUSGWXAG/y6qFBsZkpxPOGIpnuSQej/PU8OiWfY1xXRttbwAwo XisJbPYH4D1VTZQyOgkuBvcvtClYEp/lQ2WHdXhoW0fraz59y3snm8nB8G2U5l7L OKvquiMZTvtfGGVkroot21gUvgnHkGidrGw8wmEQsAXsBUDJhZbIx38n/lSR45YL oV9aI1eISGJKnnE/paIipwXfwb7HYzZgw+cCqex7VXpEkgYTaabLs2M6z+zs+1Rz 8jsTRAafKpEHMja9NAQ2qv0N3atntkjpL4zFSkP6vra66zc/6hH0TSjT5DgDAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU8nMLkelcO9/WiKyMi+6QwZkQopgwHwYDVR0j BBgwFoAUjcLtCHCgBRUmBuLmvra2x4pSKvQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 OTE5YjgwZC00NjkzLTQwOTUtYTllMy00MTJlMTI4MjhmZjIvMC84REMyRUQwODcw QTAwNTE1MjYwNkUyRTZCRUI2QjZDNzhBNTIyQUY0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOERDMkVEMDg3MEEwMDUxNTI2MDZFMkU2QkVCNkI2Qzc4QTUy MkFGNC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vODkxOWI4MGQtNDY5My00MDk1LWE5 ZTMtNDEyZTEyODI4ZmYyLzAvOERDMkVEMDg3MEEwMDUxNTI2MDZFMkU2QkVCNkI2 Qzc4QTUyMkFGNC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHc2c9yq6k6rkxQcsIx86rKuz+vzhYb/mxjY YxUrstIV0hp6EUx0zYvDTgecEyejpjbIQykU0ButO5Zw82cscJ2dBk7mmi0VTiVt L3RUlfBYUr574QpSUiUlzrGbUhT+oWMVtpbA1wXz4gC1xAiQPe8GlX8vzQ+waVdJ h1rVfyb1s0VWHmVQTbS7/+t2eSJ8o/4O6MqEfIHiHomDnr3i4Kvj/B7wHcQWXSVQ H4ASrW7FmTyMN13sEJZWEKW9zp4VywOVs0YE918souZ1pXWfTJ4dlhifnXvBVtLC naYC2cTneRsAveh8hYKS8aOHbYR/pQuD145Z5FUoVe1zErtrTp8= -----END CERTIFICATE-----Generated at Tue Jul 22 06:26:20 2025 by rpki-client