$ rpki-client -vvf repo-rpki.idnic.net/repo/8d5bbd81-0332-4202-9c92-eb1746a8cd9d/0/8B0DC79B66A96FA7FA3180C20B06A5C43C9CFEA1.mft File: 8B0DC79B66A96FA7FA3180C20B06A5C43C9CFEA1.mft (raw, json) Hash identifier: cuPM39itc1lj8liB7YIE1Pj9l4Txy0PzUxk9hv8nMPU= Subject key identifier: B3:E0:70:B5:74:24:6B:BD:48:8C:6D:B5:DB:50:EA:AF:9C:38:B4:65 Authority key identifier: 8B:0D:C7:9B:66:A9:6F:A7:FA:31:80:C2:0B:06:A5:C4:3C:9C:FE:A1 Certificate issuer: /CN=8B0DC79B66A96FA7FA3180C20B06A5C43C9CFEA1 Certificate serial: 6FD755C2779B56431E6E46BE106D100C1429B351 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8B0DC79B66A96FA7FA3180C20B06A5C43C9CFEA1.cer Subject info access: rsync://repo-rpki.idnic.net/repo/8d5bbd81-0332-4202-9c92-eb1746a8cd9d/0/8B0DC79B66A96FA7FA3180C20B06A5C43C9CFEA1.mft Manifest number: 02FD Signing time: Sun 20 Jul 2025 15:52:14 +0000 Manifest this update: Sun 20 Jul 2025 15:47:14 +0000 Manifest next update: Wed 23 Jul 2025 20:01:14 +0000 Files and hashes: 1: 3130332e3131382e332e302f32342d3234203d3e20313337333732.roa (hash: CnYInR0edgXU+mYMJQGAiAKWjbNlk8PVPSzC/8WPG5g=) 2: 8B0DC79B66A96FA7FA3180C20B06A5C43C9CFEA1.crl (hash: 4lm8EhO6hehhugLhKk4FlQoJWwb69z42sI+b/nzJ3AA=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/8d5bbd81-0332-4202-9c92-eb1746a8cd9d/0/8B0DC79B66A96FA7FA3180C20B06A5C43C9CFEA1.crl rsync://repo-rpki.idnic.net/repo/8d5bbd81-0332-4202-9c92-eb1746a8cd9d/0/8B0DC79B66A96FA7FA3180C20B06A5C43C9CFEA1.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8B0DC79B66A96FA7FA3180C20B06A5C43C9CFEA1.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 23 Jul 2025 20:01:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6f:d7:55:c2:77:9b:56:43:1e:6e:46:be:10:6d:10:0c:14:29:b3:51 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8B0DC79B66A96FA7FA3180C20B06A5C43C9CFEA1 Validity Not Before: Jul 20 15:47:14 2025 GMT Not After : Jul 23 20:01:14 2025 GMT Subject: CN=B3E070B574246BBD488C6DB5DB50EAAF9C38B465 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f3:69:ba:f4:73:81:fc:12:5f:aa:c6:c7:b7:f8: 96:d7:b9:4c:5d:e3:5c:84:93:10:78:28:0f:9c:66: e9:2f:32:aa:d2:ff:11:15:61:7d:ca:6c:86:44:95: 3f:71:f4:f5:61:c5:30:51:88:ef:1a:45:be:83:0c: 02:4b:e3:18:af:7e:7e:ef:f5:04:70:b6:21:3c:e6: 86:22:bc:f8:b8:1e:c3:79:f4:e1:2b:d2:c1:35:27: 51:ee:26:87:30:4c:cc:18:e0:5b:ef:a1:5b:5e:1c: 9c:f4:38:f5:9c:cc:52:f2:af:d9:23:33:fa:14:5d: 6f:84:e1:fb:92:75:81:1b:ec:4a:90:87:cd:40:46: 04:e9:13:4f:88:0c:ec:23:34:c6:4e:be:34:74:13: c5:11:92:cb:da:4b:c1:e1:5e:f3:44:11:34:27:63: 62:93:db:03:86:9e:c9:6b:46:96:93:62:f6:63:ca: 7b:ca:52:3f:de:92:d6:7b:c8:35:d6:a9:3e:54:ad: b0:fc:58:be:25:f2:b5:96:c0:08:d5:0f:96:a8:69: 8d:e9:f0:9d:eb:08:6b:9a:58:00:cd:15:96:4b:22: 39:dd:5c:66:0c:05:74:c5:71:34:ea:86:74:21:6a: 60:9d:b2:ce:cf:42:d4:40:40:52:c4:2c:d2:8d:42: ec:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B3:E0:70:B5:74:24:6B:BD:48:8C:6D:B5:DB:50:EA:AF:9C:38:B4:65 X509v3 Authority Key Identifier: keyid:8B:0D:C7:9B:66:A9:6F:A7:FA:31:80:C2:0B:06:A5:C4:3C:9C:FE:A1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/8d5bbd81-0332-4202-9c92-eb1746a8cd9d/0/8B0DC79B66A96FA7FA3180C20B06A5C43C9CFEA1.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8B0DC79B66A96FA7FA3180C20B06A5C43C9CFEA1.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/8d5bbd81-0332-4202-9c92-eb1746a8cd9d/0/8B0DC79B66A96FA7FA3180C20B06A5C43C9CFEA1.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2c:ef:cd:19:67:fe:bf:cb:97:89:2b:9a:c7:b1:39:e8:d4:8c: 4d:20:57:5c:ef:8c:c6:1b:82:05:c0:47:cb:ce:5b:86:73:da: 60:0e:c0:ad:43:36:91:b0:de:cc:35:61:c4:88:f4:79:47:07: 69:e3:58:27:56:09:56:cb:68:f9:c5:8a:b3:36:c6:af:51:01: 17:0f:50:e5:22:7e:b6:a0:aa:24:dc:54:81:9e:aa:11:6e:29: 90:2a:f7:6e:6b:0e:cd:78:ef:7b:9e:a8:d9:0b:fa:1b:44:d3: 39:61:ba:09:cd:8f:a2:a9:82:00:cd:90:52:95:29:10:62:68: b8:0b:c2:ac:8b:6d:e0:b6:74:38:a9:8e:3b:95:0e:d7:fd:ce: 8e:85:95:73:60:f7:ff:b8:93:78:ad:b8:91:23:4c:0b:ae:11: d3:bd:de:60:c4:b7:e3:6a:3a:44:22:76:ab:11:d8:83:5c:fa: be:8f:e9:e5:f3:21:21:cc:23:c5:37:c5:b5:23:ab:d5:bb:ab: 73:00:e4:17:c7:8b:8d:a5:a4:97:b2:87:b4:ad:6a:76:2f:e3: 80:7e:c5:03:1d:6f:f3:68:ba:b8:43:ad:13:83:f6:11:4e:c9: af:35:c4:86:b9:47:72:5c:15:1a:17:de:32:cd:6f:70:47:a0: 51:62:aa:f5 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUb9dVwnebVkMebka+EG0QDBQps1EwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEIwREM3OUI2NkE5NkZBN0ZBMzE4MEMyMEIwNkE1QzQz QzlDRkVBMTAeFw0yNTA3MjAxNTQ3MTRaFw0yNTA3MjMyMDAxMTRaMDMxMTAvBgNV BAMTKEIzRTA3MEI1NzQyNDZCQkQ0ODhDNkRCNURCNTBFQUFGOUMzOEI0NjUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDzabr0c4H8El+qxse3+JbXuUxd 41yEkxB4KA+cZukvMqrS/xEVYX3KbIZElT9x9PVhxTBRiO8aRb6DDAJL4xivfn7v 9QRwtiE85oYivPi4HsN59OEr0sE1J1HuJocwTMwY4FvvoVteHJz0OPWczFLyr9kj M/oUXW+E4fuSdYEb7EqQh81ARgTpE0+IDOwjNMZOvjR0E8URksvaS8HhXvNEETQn Y2KT2wOGnslrRpaTYvZjynvKUj/ektZ7yDXWqT5UrbD8WL4l8rWWwAjVD5aoaY3p 8J3rCGuaWADNFZZLIjndXGYMBXTFcTTqhnQhamCdss7PQtRAQFLELNKNQuwpAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUs+BwtXQka71IjG2121Dqr5w4tGUwHwYDVR0j BBgwFoAUiw3Hm2apb6f6MYDCCwalxDyc/qEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 ZDViYmQ4MS0wMzMyLTQyMDItOWM5Mi1lYjE3NDZhOGNkOWQvMC84QjBEQzc5QjY2 QTk2RkE3RkEzMTgwQzIwQjA2QTVDNDNDOUNGRUExLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOEIwREM3OUI2NkE5NkZBN0ZBMzE4MEMyMEIwNkE1QzQzQzlD RkVBMS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOGQ1YmJkODEtMDMzMi00MjAyLTlj OTItZWIxNzQ2YThjZDlkLzAvOEIwREM3OUI2NkE5NkZBN0ZBMzE4MEMyMEIwNkE1 QzQzQzlDRkVBMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACzvzRln/r/Ll4krmsexOejUjE0gV1zvjMYb ggXAR8vOW4Zz2mAOwK1DNpGw3sw1YcSI9HlHB2njWCdWCVbLaPnFirM2xq9RARcP UOUifragqiTcVIGeqhFuKZAq925rDs1473ueqNkL+htE0zlhugnNj6KpggDNkFKV KRBiaLgLwqyLbeC2dDipjjuVDtf9zo6FlXNg9/+4k3ituJEjTAuuEdO93mDEt+Nq OkQidqsR2INc+r6P6eXzISHMI8U3xbUjq9W7q3MA5BfHi42lpJeyh7StanYv44B+ xQMdb/NourhDrROD9hFOya81xIa5R3JcFRoX3jLNb3BHoFFiqvU= -----END CERTIFICATE-----Generated at Tue Jul 22 04:50:26 2025 by rpki-client