$ rpki-client -vvf repo-rpki.idnic.net/repo/99e3b1d8-bf19-46e3-b609-0d160988dac8/0/8B266458C7DEFCF6926DCDF453C84A1D42E8D989.mft File: 8B266458C7DEFCF6926DCDF453C84A1D42E8D989.mft (raw, json) Hash identifier: GNHYE172TE6yPygRcZxdgJoPSwTLG0+DWhshhZfUaaQ= Subject key identifier: A3:A1:EA:7E:A6:45:AC:7B:87:AA:65:A5:D3:2B:B1:31:80:D0:CF:3D Authority key identifier: 8B:26:64:58:C7:DE:FC:F6:92:6D:CD:F4:53:C8:4A:1D:42:E8:D9:89 Certificate issuer: /CN=8B266458C7DEFCF6926DCDF453C84A1D42E8D989 Certificate serial: 038FB75D5094CF9E6594E2C9395F8212F3F2EAE3 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8B266458C7DEFCF6926DCDF453C84A1D42E8D989.cer Subject info access: rsync://repo-rpki.idnic.net/repo/99e3b1d8-bf19-46e3-b609-0d160988dac8/0/8B266458C7DEFCF6926DCDF453C84A1D42E8D989.mft Manifest number: 04EE Signing time: Sat 19 Jul 2025 01:51:17 +0000 Manifest this update: Sat 19 Jul 2025 01:46:17 +0000 Manifest next update: Tue 22 Jul 2025 12:37:17 +0000 Files and hashes: 1: 8B266458C7DEFCF6926DCDF453C84A1D42E8D989.crl (hash: FoOTPy8xBkyLB9hiO9CzRQSqbr+z/AV48GppT5jrTk0=) 2: 3131392e3233352e3234382e302f32312d3234203d3e203435313436.roa (hash: Gj57tszoKsJPmI3zlTc36/bgp48+5kiHS2p+sUe73DE=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/99e3b1d8-bf19-46e3-b609-0d160988dac8/0/8B266458C7DEFCF6926DCDF453C84A1D42E8D989.crl rsync://repo-rpki.idnic.net/repo/99e3b1d8-bf19-46e3-b609-0d160988dac8/0/8B266458C7DEFCF6926DCDF453C84A1D42E8D989.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8B266458C7DEFCF6926DCDF453C84A1D42E8D989.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 22 Jul 2025 12:37:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 03:8f:b7:5d:50:94:cf:9e:65:94:e2:c9:39:5f:82:12:f3:f2:ea:e3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8B266458C7DEFCF6926DCDF453C84A1D42E8D989 Validity Not Before: Jul 19 01:46:17 2025 GMT Not After : Jul 22 12:37:17 2025 GMT Subject: CN=A3A1EA7EA645AC7B87AA65A5D32BB13180D0CF3D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:8e:7a:ac:a8:e5:05:fe:07:1d:8e:39:11:89: e7:ee:3c:60:48:20:56:e7:2b:e5:11:68:2d:33:f6: d8:ee:0a:a7:a4:77:d6:05:ca:b1:1f:7e:2e:37:e9: 03:75:26:1a:71:91:b6:ba:44:bd:05:16:3c:cb:bd: ac:06:64:65:14:d9:81:b0:0b:ae:54:51:24:fc:b2: dd:1f:f9:e7:e8:28:93:c6:c6:f0:79:7d:53:fc:9f: eb:f1:4a:62:d9:cf:42:07:2a:e4:a8:17:32:82:1d: d3:fa:16:0e:ad:5e:df:34:eb:77:d2:be:0a:65:05: 22:b8:b2:e1:e6:c4:fa:a0:c4:fa:a7:fe:4a:f4:6f: 95:a8:96:d7:1d:74:0a:18:3b:88:08:4a:f1:4f:7e: 8d:52:dc:b1:b9:b1:bf:2d:66:e0:91:52:59:dc:6b: 48:6c:75:2e:df:03:cd:05:55:f7:1c:f7:d1:79:ea: 0a:11:dd:15:a4:ee:b0:ac:49:7b:92:ba:8a:12:ab: c4:ed:54:f0:0a:f0:2e:22:90:a9:84:a3:9c:8c:af: 98:e4:b9:de:d5:87:89:43:69:57:a8:75:c4:19:e5: 57:0d:27:73:7c:a5:8a:5f:77:98:02:a1:c0:19:27: dd:65:dc:f5:48:b2:8c:98:be:37:5d:3d:22:39:70: 85:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:A1:EA:7E:A6:45:AC:7B:87:AA:65:A5:D3:2B:B1:31:80:D0:CF:3D X509v3 Authority Key Identifier: keyid:8B:26:64:58:C7:DE:FC:F6:92:6D:CD:F4:53:C8:4A:1D:42:E8:D9:89 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/99e3b1d8-bf19-46e3-b609-0d160988dac8/0/8B266458C7DEFCF6926DCDF453C84A1D42E8D989.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8B266458C7DEFCF6926DCDF453C84A1D42E8D989.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/99e3b1d8-bf19-46e3-b609-0d160988dac8/0/8B266458C7DEFCF6926DCDF453C84A1D42E8D989.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3b:80:21:2f:fa:36:43:f4:c4:a6:2a:b0:37:03:a9:ca:e5:3c: cd:b0:57:4e:11:5d:4f:dc:81:15:38:50:37:ab:d6:34:9d:e7: e4:75:d3:49:f7:a9:88:db:ea:9c:31:bc:fa:fa:40:19:62:15: ee:52:06:ba:9e:f3:ee:d9:0c:0a:32:75:60:02:fb:11:ae:6e: 11:2c:b2:27:64:39:f4:76:be:62:5a:bb:da:c1:3b:2a:f5:f3: db:2a:72:74:60:0c:b0:cd:b5:b5:70:9a:ca:96:84:07:ec:47: bc:e7:b1:a2:2b:70:18:e2:7a:14:7e:a9:bc:7d:ed:77:e7:13: 58:bb:f0:dd:a0:f6:a9:b9:16:f4:0b:59:96:87:81:cd:02:81: 4a:98:e1:34:10:1c:c2:de:bb:9e:80:93:d4:63:f9:65:60:45: 2e:d6:14:b6:28:e4:98:36:cc:0e:8f:a8:7f:26:af:3d:a3:77: bd:f6:7b:07:f2:54:62:92:15:68:3d:5c:56:a5:ff:c9:3c:a5: 25:6a:52:a8:a6:6b:94:90:d1:c1:4b:e2:c4:5e:b8:70:b3:7d: 16:00:13:37:fb:49:79:01:5c:65:bf:da:33:10:f2:dc:04:9d: 64:08:d9:6e:26:e5:cb:9e:66:fc:6c:71:0b:3d:79:48:6c:d0: df:b4:83:bf -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUA4+3XVCUz55llOLJOV+CEvPy6uMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEIyNjY0NThDN0RFRkNGNjkyNkRDREY0NTNDODRBMUQ0 MkU4RDk4OTAeFw0yNTA3MTkwMTQ2MTdaFw0yNTA3MjIxMjM3MTdaMDMxMTAvBgNV BAMTKEEzQTFFQTdFQTY0NUFDN0I4N0FBNjVBNUQzMkJCMTMxODBEMENGM0QwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDLjnqsqOUF/gcdjjkRiefuPGBI IFbnK+URaC0z9tjuCqekd9YFyrEffi436QN1Jhpxkba6RL0FFjzLvawGZGUU2YGw C65UUST8st0f+efoKJPGxvB5fVP8n+vxSmLZz0IHKuSoFzKCHdP6Fg6tXt8063fS vgplBSK4suHmxPqgxPqn/kr0b5WoltcddAoYO4gISvFPfo1S3LG5sb8tZuCRUlnc a0hsdS7fA80FVfcc99F56goR3RWk7rCsSXuSuooSq8TtVPAK8C4ikKmEo5yMr5jk ud7Vh4lDaVeodcQZ5VcNJ3N8pYpfd5gCocAZJ91l3PVIsoyYvjddPSI5cIXrAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUo6HqfqZFrHuHqmWl0yuxMYDQzz0wHwYDVR0j BBgwFoAUiyZkWMfe/PaSbc30U8hKHULo2YkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 OWUzYjFkOC1iZjE5LTQ2ZTMtYjYwOS0wZDE2MDk4OGRhYzgvMC84QjI2NjQ1OEM3 REVGQ0Y2OTI2RENERjQ1M0M4NEExRDQyRThEOTg5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOEIyNjY0NThDN0RFRkNGNjkyNkRDREY0NTNDODRBMUQ0MkU4 RDk4OS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOTllM2IxZDgtYmYxOS00NmUzLWI2 MDktMGQxNjA5ODhkYWM4LzAvOEIyNjY0NThDN0RFRkNGNjkyNkRDREY0NTNDODRB MUQ0MkU4RDk4OS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADuAIS/6NkP0xKYqsDcDqcrlPM2wV04RXU/c gRU4UDer1jSd5+R100n3qYjb6pwxvPr6QBliFe5SBrqe8+7ZDAoydWAC+xGubhEs sidkOfR2vmJau9rBOyr189sqcnRgDLDNtbVwmsqWhAfsR7znsaIrcBjiehR+qbx9 7XfnE1i78N2g9qm5FvQLWZaHgc0CgUqY4TQQHMLeu56Ak9Rj+WVgRS7WFLYo5Jg2 zA6PqH8mrz2jd732ewfyVGKSFWg9XFal/8k8pSVqUqima5SQ0cFL4sReuHCzfRYA Ezf7SXkBXGW/2jMQ8twEnWQI2W4m5cueZvxscQs9eUhs0N+0g78= -----END CERTIFICATE-----Generated at Mon Jul 21 02:05:50 2025 by rpki-client