$ rpki-client -vvf repo-rpki.idnic.net/repo/a82db9d3-d6eb-4d6b-9a24-feeb21aa8f53/0/8BE281D2F4ED4091746FDA568A4296F1171589E8.mft File: 8BE281D2F4ED4091746FDA568A4296F1171589E8.mft (raw, json) Hash identifier: B3jnaZJOXy+BxEZ2ktmZBsycKM01yVeC4ALZh77+DLE= Subject key identifier: 23:DC:B9:EC:C7:6F:DE:EC:2A:7B:E0:A2:4A:EA:30:DE:A3:DD:61:79 Authority key identifier: 8B:E2:81:D2:F4:ED:40:91:74:6F:DA:56:8A:42:96:F1:17:15:89:E8 Certificate issuer: /CN=8BE281D2F4ED4091746FDA568A4296F1171589E8 Certificate serial: 174CBD6B0AD19FA615840E1C6C7F93CC2F1CBAA0 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8BE281D2F4ED4091746FDA568A4296F1171589E8.cer Subject info access: rsync://repo-rpki.idnic.net/repo/a82db9d3-d6eb-4d6b-9a24-feeb21aa8f53/0/8BE281D2F4ED4091746FDA568A4296F1171589E8.mft Manifest number: 04F1 Signing time: Mon 21 Jul 2025 11:00:36 +0000 Manifest this update: Mon 21 Jul 2025 10:55:36 +0000 Manifest next update: Thu 24 Jul 2025 11:11:36 +0000 Files and hashes: 1: 3130332e3133342e38372e302f32342d3234203d3e203538333639.roa (hash: JnMoHtL2uw/1X+XpxI+WJ5aRYCDoJDTU7TkrgplgZrw=) 2: 8BE281D2F4ED4091746FDA568A4296F1171589E8.crl (hash: dgzg9Su3tC1LOfE45aE0qvBiDxRtuVdHxaiVaOqCecg=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/a82db9d3-d6eb-4d6b-9a24-feeb21aa8f53/0/8BE281D2F4ED4091746FDA568A4296F1171589E8.crl rsync://repo-rpki.idnic.net/repo/a82db9d3-d6eb-4d6b-9a24-feeb21aa8f53/0/8BE281D2F4ED4091746FDA568A4296F1171589E8.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8BE281D2F4ED4091746FDA568A4296F1171589E8.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 24 Jul 2025 11:11:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 17:4c:bd:6b:0a:d1:9f:a6:15:84:0e:1c:6c:7f:93:cc:2f:1c:ba:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8BE281D2F4ED4091746FDA568A4296F1171589E8 Validity Not Before: Jul 21 10:55:36 2025 GMT Not After : Jul 24 11:11:36 2025 GMT Subject: CN=23DCB9ECC76FDEEC2A7BE0A24AEA30DEA3DD6179 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:be:38:4a:96:75:67:de:ef:8d:49:25:fb:99: b8:5c:cc:ef:48:32:9d:df:2a:05:9a:30:ef:af:d0: 3a:b6:8f:b7:d4:e3:89:35:59:72:66:ff:fc:06:38: c4:69:28:d0:7b:fb:72:d2:fa:d7:74:c7:bc:eb:79: ca:8d:5f:b6:6c:fe:54:f9:c1:9c:96:05:c5:47:27: dc:71:02:ee:96:6e:99:d2:c4:88:89:df:d3:b6:cf: 4d:b0:22:69:66:ef:2d:69:41:13:a0:76:92:2b:36: 6e:96:8c:a4:63:56:af:94:b2:09:ff:2b:e4:48:6f: 76:bd:03:86:7d:b5:8d:52:f7:56:bb:f5:09:12:25: 38:29:fc:3a:c3:fb:3f:39:05:48:36:93:8c:d8:72: e3:44:06:a7:fa:ed:1f:c6:4b:da:27:15:0e:cb:04: c8:93:f8:43:b7:4d:25:9e:0c:03:68:55:f4:1a:77: 95:d5:b2:e3:26:2d:0b:c5:e1:ca:4d:fb:bf:c6:57: 99:10:68:d0:56:1f:d2:20:ea:9d:0b:26:8c:20:f7: f3:2b:c6:3a:f6:7d:04:df:be:83:16:de:c5:a2:ac: 1e:6e:1f:30:33:2a:70:e4:d1:63:05:5d:74:0f:aa: 68:de:3c:89:b9:79:79:91:54:a1:c1:f2:9b:79:46: 50:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:DC:B9:EC:C7:6F:DE:EC:2A:7B:E0:A2:4A:EA:30:DE:A3:DD:61:79 X509v3 Authority Key Identifier: keyid:8B:E2:81:D2:F4:ED:40:91:74:6F:DA:56:8A:42:96:F1:17:15:89:E8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/a82db9d3-d6eb-4d6b-9a24-feeb21aa8f53/0/8BE281D2F4ED4091746FDA568A4296F1171589E8.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8BE281D2F4ED4091746FDA568A4296F1171589E8.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a82db9d3-d6eb-4d6b-9a24-feeb21aa8f53/0/8BE281D2F4ED4091746FDA568A4296F1171589E8.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6a:8f:07:f8:5f:83:06:0b:dd:a5:87:63:c4:21:46:3a:8d:57: 54:85:d9:70:16:04:a3:1e:da:1c:28:0e:81:49:ad:a0:32:02: 54:2d:77:a7:e8:ab:69:9f:38:cb:11:38:71:6c:90:dd:20:e8: 03:42:4b:32:fd:f7:dc:59:2b:cc:fa:0b:6c:99:c7:3f:96:da: 5f:6f:01:90:da:b4:c2:7d:5a:34:f1:90:0b:fa:09:95:70:b0: e3:38:78:93:81:ab:8a:81:70:49:56:ae:3f:47:b5:6d:0a:35: 88:b2:9f:72:3b:8c:f3:08:bd:ab:8d:c2:4c:56:8f:fa:dc:08: 7a:81:e6:1a:fd:ba:45:8f:d2:35:76:b6:a6:02:ef:9d:e2:71: 5c:db:6e:9b:13:8c:ea:68:d2:80:6a:e3:0a:6b:0b:53:16:37: 70:45:11:8c:60:fe:8e:19:75:4f:0e:db:03:a1:4e:98:1c:b6: ab:3f:3c:56:f7:22:79:e4:65:44:44:bd:bc:4e:0f:08:02:7b: 08:9f:5a:93:73:1b:90:cd:4e:35:e8:12:a7:14:fd:47:8f:04: 0d:9c:52:9b:45:28:8f:6c:f3:c4:e7:b5:ee:b3:4c:22:21:e3: 24:89:e5:1e:5b:8f:8c:fc:e6:35:d0:1c:62:36:69:78:cc:3b: b3:77:e4:c6 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUF0y9awrRn6YVhA4cbH+TzC8cuqAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEJFMjgxRDJGNEVENDA5MTc0NkZEQTU2OEE0Mjk2RjEx NzE1ODlFODAeFw0yNTA3MjExMDU1MzZaFw0yNTA3MjQxMTExMzZaMDMxMTAvBgNV BAMTKDIzRENCOUVDQzc2RkRFRUMyQTdCRTBBMjRBRUEzMERFQTNERDYxNzkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDIvjhKlnVn3u+NSSX7mbhczO9I Mp3fKgWaMO+v0Dq2j7fU44k1WXJm//wGOMRpKNB7+3LS+td0x7zrecqNX7Zs/lT5 wZyWBcVHJ9xxAu6WbpnSxIiJ39O2z02wImlm7y1pQROgdpIrNm6WjKRjVq+Usgn/ K+RIb3a9A4Z9tY1S91a79QkSJTgp/DrD+z85BUg2k4zYcuNEBqf67R/GS9onFQ7L BMiT+EO3TSWeDANoVfQad5XVsuMmLQvF4cpN+7/GV5kQaNBWH9Ig6p0LJowg9/Mr xjr2fQTfvoMW3sWirB5uHzAzKnDk0WMFXXQPqmjePIm5eXmRVKHB8pt5RlCZAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUI9y57Mdv3uwqe+CiSuow3qPdYXkwHwYDVR0j BBgwFoAUi+KB0vTtQJF0b9pWikKW8RcViegwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h ODJkYjlkMy1kNmViLTRkNmItOWEyNC1mZWViMjFhYThmNTMvMC84QkUyODFEMkY0 RUQ0MDkxNzQ2RkRBNTY4QTQyOTZGMTE3MTU4OUU4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOEJFMjgxRDJGNEVENDA5MTc0NkZEQTU2OEE0Mjk2RjExNzE1 ODlFOC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYTgyZGI5ZDMtZDZlYi00ZDZiLTlh MjQtZmVlYjIxYWE4ZjUzLzAvOEJFMjgxRDJGNEVENDA5MTc0NkZEQTU2OEE0Mjk2 RjExNzE1ODlFOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGqPB/hfgwYL3aWHY8QhRjqNV1SF2XAWBKMe 2hwoDoFJraAyAlQtd6foq2mfOMsROHFskN0g6ANCSzL999xZK8z6C2yZxz+W2l9v AZDatMJ9WjTxkAv6CZVwsOM4eJOBq4qBcElWrj9HtW0KNYiyn3I7jPMIvauNwkxW j/rcCHqB5hr9ukWP0jV2tqYC753icVzbbpsTjOpo0oBq4wprC1MWN3BFEYxg/o4Z dU8O2wOhTpgctqs/PFb3InnkZUREvbxODwgCewifWpNzG5DNTjXoEqcU/UePBA2c UptFKI9s88Tnte6zTCIh4ySJ5R5bj4z85jXQHGI2aXjMO7N35MY= -----END CERTIFICATE-----Generated at Wed Jul 23 02:01:48 2025 by rpki-client