$ rpki-client -vvf repo-rpki.idnic.net/repo/9c80467c-aeb2-4095-8f54-85b9090d3908/0/8EE9EEE46EA0F860385C880C00E2EE5A59D6EA9B.mft File: 8EE9EEE46EA0F860385C880C00E2EE5A59D6EA9B.mft (raw, json) Hash identifier: I0A00wAhIkOeyasEpCHZ/qgV24/ZuXdeZ+O1Fo3/s+8= Subject key identifier: AA:6E:00:AF:D5:EF:4F:89:03:BD:22:9E:CC:9B:5F:EE:1F:5D:2B:E7 Authority key identifier: 8E:E9:EE:E4:6E:A0:F8:60:38:5C:88:0C:00:E2:EE:5A:59:D6:EA:9B Certificate issuer: /CN=8EE9EEE46EA0F860385C880C00E2EE5A59D6EA9B Certificate serial: 1B8CB2D9D06AEFC9823244A8B090F15ABB43EB35 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8EE9EEE46EA0F860385C880C00E2EE5A59D6EA9B.cer Subject info access: rsync://repo-rpki.idnic.net/repo/9c80467c-aeb2-4095-8f54-85b9090d3908/0/8EE9EEE46EA0F860385C880C00E2EE5A59D6EA9B.mft Manifest number: 0191 Signing time: Sat 19 Jul 2025 04:10:38 +0000 Manifest this update: Sat 19 Jul 2025 04:05:38 +0000 Manifest next update: Tue 22 Jul 2025 11:10:38 +0000 Files and hashes: 1: 8EE9EEE46EA0F860385C880C00E2EE5A59D6EA9B.crl (hash: H92j+vQNvogsSThP7OiXmMcvfrrUD3/NaRQegl6/fzk=) 2: 3130332e3139372e3138382e302f32322d3234203d3e20313333383030.roa (hash: Q/xd/HC1bBeKjBCyWCDiCLVtwZ9rHYa7nKWTycy4dgg=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/9c80467c-aeb2-4095-8f54-85b9090d3908/0/8EE9EEE46EA0F860385C880C00E2EE5A59D6EA9B.crl rsync://repo-rpki.idnic.net/repo/9c80467c-aeb2-4095-8f54-85b9090d3908/0/8EE9EEE46EA0F860385C880C00E2EE5A59D6EA9B.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8EE9EEE46EA0F860385C880C00E2EE5A59D6EA9B.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 22 Jul 2025 11:10:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1b:8c:b2:d9:d0:6a:ef:c9:82:32:44:a8:b0:90:f1:5a:bb:43:eb:35 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8EE9EEE46EA0F860385C880C00E2EE5A59D6EA9B Validity Not Before: Jul 19 04:05:38 2025 GMT Not After : Jul 22 11:10:38 2025 GMT Subject: CN=AA6E00AFD5EF4F8903BD229ECC9B5FEE1F5D2BE7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:a5:1c:97:65:45:61:50:53:92:a2:80:2e:64: 94:b6:1a:0a:a0:66:33:b8:8c:30:d6:04:93:28:e4: 72:37:16:63:c6:65:bc:fb:15:8c:55:f4:c6:b2:35: 61:88:e3:7b:e9:23:81:0a:0b:02:53:de:19:31:1a: 30:62:82:b9:65:da:ed:8e:5f:5b:4d:a8:b1:86:87: 85:42:bb:e4:d1:d3:20:de:a7:f2:32:c9:f2:8c:8b: f2:18:d0:f5:1d:69:91:a8:48:ff:51:90:46:a7:4b: a5:c5:01:25:38:c5:80:6b:6f:49:d1:f8:74:97:48: 87:47:4a:cc:3b:c4:e5:a5:98:e3:e1:2a:ac:00:ba: 41:ca:f1:f3:af:0c:4c:64:77:e8:e9:71:a2:cc:a9: 14:7c:f8:28:c1:8c:b8:f0:4b:e6:46:70:12:f4:7c: 9b:a2:17:6c:9d:70:d7:4c:7c:ad:1a:19:8c:f6:70: 5b:6d:66:07:22:a8:af:25:98:7a:ae:62:c3:2f:17: 37:07:7c:4d:30:7f:9d:fc:67:f0:cd:eb:54:54:3d: 5b:9b:62:bb:df:00:c4:7e:ab:07:03:71:5a:a8:e7: da:73:2a:05:a9:f7:ef:92:23:4d:6c:c5:97:39:86: 82:01:fc:66:c1:eb:2e:09:94:a5:06:68:0a:46:15: c1:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AA:6E:00:AF:D5:EF:4F:89:03:BD:22:9E:CC:9B:5F:EE:1F:5D:2B:E7 X509v3 Authority Key Identifier: keyid:8E:E9:EE:E4:6E:A0:F8:60:38:5C:88:0C:00:E2:EE:5A:59:D6:EA:9B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/9c80467c-aeb2-4095-8f54-85b9090d3908/0/8EE9EEE46EA0F860385C880C00E2EE5A59D6EA9B.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8EE9EEE46EA0F860385C880C00E2EE5A59D6EA9B.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/9c80467c-aeb2-4095-8f54-85b9090d3908/0/8EE9EEE46EA0F860385C880C00E2EE5A59D6EA9B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1f:f2:d7:f5:c7:fc:4a:82:dd:19:b3:09:e8:36:14:92:ad:d8: c3:45:84:97:3f:93:de:d5:f7:25:7b:5d:a8:12:db:1c:d1:8d: 4e:a5:34:c3:6f:83:1b:87:29:8d:4a:ec:e0:55:62:40:36:75: 2d:12:90:24:4c:95:c3:57:89:ec:d9:68:97:ac:2e:64:72:7f: 0e:eb:d4:41:97:e9:bb:e8:cb:c7:69:b3:f0:79:22:63:4e:8a: 31:c2:6e:f8:57:75:11:0b:2d:a4:5b:e2:91:4c:ea:45:0b:18: 99:33:96:fe:e5:de:06:93:f3:69:e9:39:25:7e:4d:1a:5a:70: 60:3c:8c:ec:f9:2f:12:a2:24:f0:32:86:b5:69:74:4a:4f:c2: b4:6f:94:6a:0e:00:80:b0:dd:a7:63:32:d6:c6:9d:c3:8d:f6: c8:af:63:9b:95:91:7d:44:fa:4c:9e:68:aa:19:ba:e6:16:4f: 76:f4:7b:4d:f6:cf:d1:20:e6:24:02:60:e6:24:e0:ca:bc:c9: 87:1a:e6:61:8e:2a:cc:ed:16:df:b7:5a:ad:58:f5:9e:54:62: 69:bb:47:c1:b8:ff:34:41:42:3b:36:d4:5a:8b:f4:66:a6:8d: a5:f5:3b:cf:e0:84:cc:bf:c6:b3:cd:f0:f5:d2:2d:37:74:28: 24:89:62:d2 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUG4yy2dBq78mCMkSosJDxWrtD6zUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEVFOUVFRTQ2RUEwRjg2MDM4NUM4ODBDMDBFMkVFNUE1 OUQ2RUE5QjAeFw0yNTA3MTkwNDA1MzhaFw0yNTA3MjIxMTEwMzhaMDMxMTAvBgNV BAMTKEFBNkUwMEFGRDVFRjRGODkwM0JEMjI5RUNDOUI1RkVFMUY1RDJCRTcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDOpRyXZUVhUFOSooAuZJS2Ggqg ZjO4jDDWBJMo5HI3FmPGZbz7FYxV9MayNWGI43vpI4EKCwJT3hkxGjBigrll2u2O X1tNqLGGh4VCu+TR0yDep/IyyfKMi/IY0PUdaZGoSP9RkEanS6XFASU4xYBrb0nR +HSXSIdHSsw7xOWlmOPhKqwAukHK8fOvDExkd+jpcaLMqRR8+CjBjLjwS+ZGcBL0 fJuiF2ydcNdMfK0aGYz2cFttZgciqK8lmHquYsMvFzcHfE0wf538Z/DN61RUPVub YrvfAMR+qwcDcVqo59pzKgWp9++SI01sxZc5hoIB/GbB6y4JlKUGaApGFcErAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUqm4Ar9XvT4kDvSKezJtf7h9dK+cwHwYDVR0j BBgwFoAUjunu5G6g+GA4XIgMAOLuWlnW6pswDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 YzgwNDY3Yy1hZWIyLTQwOTUtOGY1NC04NWI5MDkwZDM5MDgvMC84RUU5RUVFNDZF QTBGODYwMzg1Qzg4MEMwMEUyRUU1QTU5RDZFQTlCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOEVFOUVFRTQ2RUEwRjg2MDM4NUM4ODBDMDBFMkVFNUE1OUQ2 RUE5Qi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOWM4MDQ2N2MtYWViMi00MDk1LThm NTQtODViOTA5MGQzOTA4LzAvOEVFOUVFRTQ2RUEwRjg2MDM4NUM4ODBDMDBFMkVF NUE1OUQ2RUE5Qi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAB/y1/XH/EqC3RmzCeg2FJKt2MNFhJc/k97V 9yV7XagS2xzRjU6lNMNvgxuHKY1K7OBVYkA2dS0SkCRMlcNXiezZaJesLmRyfw7r 1EGX6bvoy8dps/B5ImNOijHCbvhXdRELLaRb4pFM6kULGJkzlv7l3gaT82npOSV+ TRpacGA8jOz5LxKiJPAyhrVpdEpPwrRvlGoOAICw3adjMtbGncON9sivY5uVkX1E +kyeaKoZuuYWT3b0e032z9Eg5iQCYOYk4Mq8yYca5mGOKsztFt+3Wq1Y9Z5UYmm7 R8G4/zRBQjs21FqL9GamjaX1O8/ghMy/xrPN8PXSLTd0KCSJYtI= -----END CERTIFICATE-----Generated at Mon Jul 21 08:38:52 2025 by rpki-client