$ rpki-client -vvf repo-rpki.idnic.net/repo/a679824f-4e08-4970-bba6-27b4726ca580/0/8B7B648E54ABC4F43564B6B7D8EC6CA25EB6C65C.mft File: 8B7B648E54ABC4F43564B6B7D8EC6CA25EB6C65C.mft (raw, json) Hash identifier: JM0lAbLePHSm798sOYvhiFQJ5Ligye37569K3vmX3qs= Subject key identifier: 14:3B:86:B4:1C:1E:48:66:B7:08:79:57:B5:44:22:E7:46:48:E5:2E Authority key identifier: 8B:7B:64:8E:54:AB:C4:F4:35:64:B6:B7:D8:EC:6C:A2:5E:B6:C6:5C Certificate issuer: /CN=8B7B648E54ABC4F43564B6B7D8EC6CA25EB6C65C Certificate serial: 22E4793F8E2B1F51AB7F158FFF4B06D927FFC439 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8B7B648E54ABC4F43564B6B7D8EC6CA25EB6C65C.cer Subject info access: rsync://repo-rpki.idnic.net/repo/a679824f-4e08-4970-bba6-27b4726ca580/0/8B7B648E54ABC4F43564B6B7D8EC6CA25EB6C65C.mft Manifest number: 01FD Signing time: Mon 21 Jul 2025 07:50:45 +0000 Manifest this update: Mon 21 Jul 2025 07:45:45 +0000 Manifest next update: Thu 24 Jul 2025 10:41:45 +0000 Files and hashes: 1: 8B7B648E54ABC4F43564B6B7D8EC6CA25EB6C65C.crl (hash: +AcdKxVA9OoNqCu7xYg/03NFGIcuqEK+0zL8jGhErjM=) 2: 3130332e3138362e36302e302f32332d3234203d3e20313439363932.roa (hash: D3mhXulAOJ2gHffXQf0w0aMiyDfxmDOfLqbB+xIObN4=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/a679824f-4e08-4970-bba6-27b4726ca580/0/8B7B648E54ABC4F43564B6B7D8EC6CA25EB6C65C.crl rsync://repo-rpki.idnic.net/repo/a679824f-4e08-4970-bba6-27b4726ca580/0/8B7B648E54ABC4F43564B6B7D8EC6CA25EB6C65C.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8B7B648E54ABC4F43564B6B7D8EC6CA25EB6C65C.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 24 Jul 2025 10:41:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 22:e4:79:3f:8e:2b:1f:51:ab:7f:15:8f:ff:4b:06:d9:27:ff:c4:39 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8B7B648E54ABC4F43564B6B7D8EC6CA25EB6C65C Validity Not Before: Jul 21 07:45:45 2025 GMT Not After : Jul 24 10:41:45 2025 GMT Subject: CN=143B86B41C1E4866B7087957B54422E74648E52E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:52:4f:c4:86:f5:64:05:4f:47:1e:4e:9f:06: a8:ff:c8:be:ce:7c:7e:81:56:b0:7a:a4:16:4c:f9: ef:0c:7f:eb:8e:08:ec:87:8e:b1:01:6b:0d:fd:8e: 4f:dc:03:67:cb:5f:61:3f:be:4c:d4:ef:0a:e1:fc: 49:5a:30:37:7b:bf:84:24:e6:9d:0c:dd:39:2c:48: b3:42:99:9a:7f:fa:e0:a0:b7:51:c2:b8:92:f9:6b: b0:f6:4b:14:99:e3:15:35:91:e3:86:ef:39:84:d3: 67:b7:29:72:57:bf:6d:20:b3:76:36:0c:0f:3d:12: 2c:0c:11:bb:1e:a6:ee:1b:35:62:3b:3e:0e:e8:bb: 4f:f4:02:69:27:53:ae:c1:d6:db:19:78:86:66:f8: 60:79:9a:4c:f2:b9:b7:36:1e:11:9c:3b:08:05:16: c8:9b:51:ae:4d:5b:e1:b6:23:c3:51:34:d9:e0:46: 37:f0:e2:cf:42:03:ff:6d:26:30:9c:a7:99:67:be: e6:6a:3c:fe:8c:2c:ad:64:12:d8:05:75:2e:e3:06: 40:44:2d:0a:ad:9d:ea:1e:9e:15:0f:4b:61:22:ba: 43:e0:81:70:86:a3:04:b3:7c:b7:7d:68:37:ee:48: 66:5f:41:f4:ab:40:d2:5a:c9:01:24:50:8a:c9:20: 2f:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:3B:86:B4:1C:1E:48:66:B7:08:79:57:B5:44:22:E7:46:48:E5:2E X509v3 Authority Key Identifier: keyid:8B:7B:64:8E:54:AB:C4:F4:35:64:B6:B7:D8:EC:6C:A2:5E:B6:C6:5C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/a679824f-4e08-4970-bba6-27b4726ca580/0/8B7B648E54ABC4F43564B6B7D8EC6CA25EB6C65C.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8B7B648E54ABC4F43564B6B7D8EC6CA25EB6C65C.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a679824f-4e08-4970-bba6-27b4726ca580/0/8B7B648E54ABC4F43564B6B7D8EC6CA25EB6C65C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 97:c3:3e:9b:2f:ef:8d:72:d1:13:94:bb:a6:f0:24:c7:2d:eb: dd:b7:3f:07:d7:15:eb:60:40:73:b3:f0:99:60:85:09:06:8b: e9:8d:b1:74:b8:a4:d4:5e:a0:23:5c:e7:91:69:7d:7d:e2:01: 23:90:49:65:da:bf:d0:ac:08:af:5f:5d:d6:37:db:37:71:97: 02:71:81:d0:25:00:4c:f1:97:8e:fd:f5:02:89:a6:68:f0:99: 77:00:01:d0:54:63:ab:cc:e4:68:18:87:9c:6f:95:30:dd:a2: 80:c8:30:05:ef:ec:57:3f:57:64:75:4e:69:15:7b:75:dd:ab: 91:29:21:09:fd:30:f1:c3:9e:11:e9:ab:db:77:63:e4:a4:61: ad:bc:93:2e:d0:7e:0a:ce:64:1e:ff:1a:e4:b8:c6:5d:31:04: 71:2f:ca:84:ce:34:1d:f1:29:88:16:b7:5d:53:a4:8e:5f:e1: 5e:4e:14:c0:9a:d8:49:64:0d:20:50:82:b4:bb:5a:e7:e0:de: 32:12:48:a1:30:a2:8c:d0:70:6a:1f:37:e6:df:15:84:56:79: 07:39:b6:04:59:3a:91:cb:9e:8c:cb:1a:d1:4f:cd:db:2b:d7: 12:7f:f2:3b:9e:70:28:71:ec:2c:61:09:b4:fc:90:7f:ca:0b: 06:bc:77:a0 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUIuR5P44rH1GrfxWP/0sG2Sf/xDkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEI3QjY0OEU1NEFCQzRGNDM1NjRCNkI3RDhFQzZDQTI1 RUI2QzY1QzAeFw0yNTA3MjEwNzQ1NDVaFw0yNTA3MjQxMDQxNDVaMDMxMTAvBgNV BAMTKDE0M0I4NkI0MUMxRTQ4NjZCNzA4Nzk1N0I1NDQyMkU3NDY0OEU1MkUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCXUk/EhvVkBU9HHk6fBqj/yL7O fH6BVrB6pBZM+e8Mf+uOCOyHjrEBaw39jk/cA2fLX2E/vkzU7wrh/ElaMDd7v4Qk 5p0M3TksSLNCmZp/+uCgt1HCuJL5a7D2SxSZ4xU1keOG7zmE02e3KXJXv20gs3Y2 DA89EiwMEbsepu4bNWI7Pg7ou0/0AmknU67B1tsZeIZm+GB5mkzyubc2HhGcOwgF FsibUa5NW+G2I8NRNNngRjfw4s9CA/9tJjCcp5lnvuZqPP6MLK1kEtgFdS7jBkBE LQqtneoenhUPS2EiukPggXCGowSzfLd9aDfuSGZfQfSrQNJayQEkUIrJIC+dAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUFDuGtBweSGa3CHlXtUQi50ZI5S4wHwYDVR0j BBgwFoAUi3tkjlSrxPQ1ZLa32Oxsol62xlwwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h Njc5ODI0Zi00ZTA4LTQ5NzAtYmJhNi0yN2I0NzI2Y2E1ODAvMC84QjdCNjQ4RTU0 QUJDNEY0MzU2NEI2QjdEOEVDNkNBMjVFQjZDNjVDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOEI3QjY0OEU1NEFCQzRGNDM1NjRCNkI3RDhFQzZDQTI1RUI2 QzY1Qy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYTY3OTgyNGYtNGUwOC00OTcwLWJi YTYtMjdiNDcyNmNhNTgwLzAvOEI3QjY0OEU1NEFCQzRGNDM1NjRCNkI3RDhFQzZD QTI1RUI2QzY1Qy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJfDPpsv741y0ROUu6bwJMct6923PwfXFetg QHOz8JlghQkGi+mNsXS4pNReoCNc55FpfX3iASOQSWXav9CsCK9fXdY32zdxlwJx gdAlAEzxl4799QKJpmjwmXcAAdBUY6vM5GgYh5xvlTDdooDIMAXv7Fc/V2R1TmkV e3Xdq5EpIQn9MPHDnhHpq9t3Y+SkYa28ky7QfgrOZB7/GuS4xl0xBHEvyoTONB3x KYgWt11TpI5f4V5OFMCa2ElkDSBQgrS7Wufg3jISSKEwoozQcGofN+bfFYRWeQc5 tgRZOpHLnozLGtFPzdsr1xJ/8juecChx7CxhCbT8kH/KCwa8d6A= -----END CERTIFICATE-----Generated at Mon Jul 21 10:31:52 2025 by rpki-client