$ rpki-client -vvf repo-rpki.idnic.net/repo/aba8cf65-d468-4309-9f30-9b9f26d9ce2d/0/8650DEF1B1C89D701C2BB99CA9079EEDBCCC046D.mft File: 8650DEF1B1C89D701C2BB99CA9079EEDBCCC046D.mft (raw, json) Hash identifier: 7FUtliSYHhKf7YacglWWS7Xmt4tE+lFvdPsz3aQueyg= Subject key identifier: A1:C6:D6:5B:23:94:01:2B:23:50:80:AE:04:C1:6A:9E:05:C1:A0:EF Authority key identifier: 86:50:DE:F1:B1:C8:9D:70:1C:2B:B9:9C:A9:07:9E:ED:BC:CC:04:6D Certificate issuer: /CN=8650DEF1B1C89D701C2BB99CA9079EEDBCCC046D Certificate serial: 4FC9373A22A0D084125F9F74A4A8282034186910 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8650DEF1B1C89D701C2BB99CA9079EEDBCCC046D.cer Subject info access: rsync://repo-rpki.idnic.net/repo/aba8cf65-d468-4309-9f30-9b9f26d9ce2d/0/8650DEF1B1C89D701C2BB99CA9079EEDBCCC046D.mft Manifest number: 010F Signing time: Fri 18 Jul 2025 20:31:11 +0000 Manifest this update: Fri 18 Jul 2025 20:26:11 +0000 Manifest next update: Tue 22 Jul 2025 04:51:11 +0000 Files and hashes: 1: 3137352e3131312e39382e302f32342d3234203d3e20313338313230.roa (hash: s8fg30WIA14JUIcMS3F2iWvbH1sPMTJyCo51fPayB6w=) 2: 8650DEF1B1C89D701C2BB99CA9079EEDBCCC046D.crl (hash: qkiAzaH34+XtHvUev1/h6EITVLshiVI/sAf/Gt700o0=) 3: 3137352e3131312e39392e302f32342d3234203d3e20313338313230.roa (hash: YRDtjy6dGfctkwwFkOVZ0Lht6L/ZRO27ITtMgAgG90E=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/aba8cf65-d468-4309-9f30-9b9f26d9ce2d/0/8650DEF1B1C89D701C2BB99CA9079EEDBCCC046D.crl rsync://repo-rpki.idnic.net/repo/aba8cf65-d468-4309-9f30-9b9f26d9ce2d/0/8650DEF1B1C89D701C2BB99CA9079EEDBCCC046D.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8650DEF1B1C89D701C2BB99CA9079EEDBCCC046D.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 22 Jul 2025 04:51:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4f:c9:37:3a:22:a0:d0:84:12:5f:9f:74:a4:a8:28:20:34:18:69:10 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8650DEF1B1C89D701C2BB99CA9079EEDBCCC046D Validity Not Before: Jul 18 20:26:11 2025 GMT Not After : Jul 22 04:51:11 2025 GMT Subject: CN=A1C6D65B2394012B235080AE04C16A9E05C1A0EF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:42:e4:11:56:55:b3:73:7d:08:e2:e9:e5:a8: e6:85:9d:a4:01:9a:a9:80:f3:88:c7:c3:80:92:f5: 4e:67:70:90:2d:4b:de:21:ab:ad:81:02:59:ea:57: 17:67:c0:eb:7b:61:36:8f:8c:1d:98:c5:47:07:ee: f7:cd:ec:ab:cd:4c:bd:f8:66:dd:02:64:15:d3:4f: f8:24:4b:de:0c:a4:c3:e8:5e:16:4d:6b:1c:68:b2: 51:01:14:cd:62:cd:8f:b3:6b:e5:a6:6d:a2:ee:df: e9:1c:77:10:cc:1f:e3:67:42:d2:ef:e5:dc:99:a2: 73:94:8f:6c:03:82:c2:3f:ca:85:fc:eb:30:31:65: ab:73:a2:73:f4:2c:58:a1:fe:bf:71:b4:82:52:66: 38:4e:72:99:fe:93:32:88:12:7f:ed:87:e3:3c:87: f3:c0:3b:74:23:d1:29:9f:02:55:6f:9d:31:9f:69: 55:00:6c:8a:db:78:7a:ce:2b:3c:7a:97:db:3a:58: 2e:b3:0a:bd:c9:ea:29:4e:4e:dc:20:a7:82:26:65: 0a:ac:8e:fd:93:b0:ff:cb:ee:24:af:1f:cd:27:7b: 2b:35:7a:01:8f:3f:6a:05:d1:50:5b:f3:5c:5d:b3: 70:36:03:2a:85:77:b7:18:14:19:b4:0c:94:d0:c2: f8:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A1:C6:D6:5B:23:94:01:2B:23:50:80:AE:04:C1:6A:9E:05:C1:A0:EF X509v3 Authority Key Identifier: keyid:86:50:DE:F1:B1:C8:9D:70:1C:2B:B9:9C:A9:07:9E:ED:BC:CC:04:6D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/aba8cf65-d468-4309-9f30-9b9f26d9ce2d/0/8650DEF1B1C89D701C2BB99CA9079EEDBCCC046D.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8650DEF1B1C89D701C2BB99CA9079EEDBCCC046D.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/aba8cf65-d468-4309-9f30-9b9f26d9ce2d/0/8650DEF1B1C89D701C2BB99CA9079EEDBCCC046D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 23:2f:67:e5:9e:33:a9:9b:de:55:d1:ad:9e:86:f8:a8:c8:ea: 2b:64:3a:f5:19:59:2e:cc:f2:22:80:0a:10:f2:38:e1:2a:a0: 95:92:b6:d6:0a:4f:21:21:18:5f:14:c4:7b:0a:0a:a7:48:3e: 8d:ae:17:10:a8:0a:e7:5e:91:0f:43:26:72:d4:4e:20:08:86: 9d:2e:b8:ab:e6:24:23:80:45:a9:46:eb:2f:9a:f7:57:6a:1f: c5:9b:3b:9c:13:00:7b:20:8d:42:b7:ff:f1:6c:d0:12:e6:d1: 7b:49:e2:63:9e:7e:6e:ad:9b:5f:85:d4:72:02:35:c8:d7:5a: d1:e8:a0:c5:ca:23:71:f7:da:df:ec:c6:97:df:e1:db:f7:c9: 47:d9:fa:33:19:1b:b1:9f:5b:f4:69:59:6a:0d:b5:20:40:4a: cb:07:e1:e1:e7:8d:c0:f3:77:e9:bd:61:de:ad:83:4f:b6:87: 4a:2d:b6:6a:61:67:10:82:fc:55:e3:52:e5:3b:b9:76:de:d5: 59:c4:f8:60:f7:b1:c6:8e:59:96:c2:59:0a:a4:5d:31:55:f8: 8f:28:ae:41:1c:23:a7:90:f3:5d:8f:91:67:4c:f5:78:96:95: 9c:11:64:e6:02:77:75:72:2f:ba:cb:62:1a:61:85:ca:90:2f: a8:0e:0f:6f -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUT8k3OiKg0IQSX590pKgoIDQYaRAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODY1MERFRjFCMUM4OUQ3MDFDMkJCOTlDQTkwNzlFRURC Q0NDMDQ2RDAeFw0yNTA3MTgyMDI2MTFaFw0yNTA3MjIwNDUxMTFaMDMxMTAvBgNV BAMTKEExQzZENjVCMjM5NDAxMkIyMzUwODBBRTA0QzE2QTlFMDVDMUEwRUYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCxQuQRVlWzc30I4unlqOaFnaQB mqmA84jHw4CS9U5ncJAtS94hq62BAlnqVxdnwOt7YTaPjB2YxUcH7vfN7KvNTL34 Zt0CZBXTT/gkS94MpMPoXhZNaxxoslEBFM1izY+za+WmbaLu3+kcdxDMH+NnQtLv 5dyZonOUj2wDgsI/yoX86zAxZatzonP0LFih/r9xtIJSZjhOcpn+kzKIEn/th+M8 h/PAO3Qj0SmfAlVvnTGfaVUAbIrbeHrOKzx6l9s6WC6zCr3J6ilOTtwgp4ImZQqs jv2TsP/L7iSvH80neys1egGPP2oF0VBb81xds3A2AyqFd7cYFBm0DJTQwvhvAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUocbWWyOUASsjUICuBMFqngXBoO8wHwYDVR0j BBgwFoAUhlDe8bHInXAcK7mcqQee7bzMBG0wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h YmE4Y2Y2NS1kNDY4LTQzMDktOWYzMC05YjlmMjZkOWNlMmQvMC84NjUwREVGMUIx Qzg5RDcwMUMyQkI5OUNBOTA3OUVFREJDQ0MwNDZELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvODY1MERFRjFCMUM4OUQ3MDFDMkJCOTlDQTkwNzlFRURCQ0ND MDQ2RC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYWJhOGNmNjUtZDQ2OC00MzA5LTlm MzAtOWI5ZjI2ZDljZTJkLzAvODY1MERFRjFCMUM4OUQ3MDFDMkJCOTlDQTkwNzlF RURCQ0NDMDQ2RC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACMvZ+WeM6mb3lXRrZ6G+KjI6itkOvUZWS7M 8iKAChDyOOEqoJWSttYKTyEhGF8UxHsKCqdIPo2uFxCoCudekQ9DJnLUTiAIhp0u uKvmJCOARalG6y+a91dqH8WbO5wTAHsgjUK3//Fs0BLm0XtJ4mOefm6tm1+F1HIC NcjXWtHooMXKI3H32t/sxpff4dv3yUfZ+jMZG7GfW/RpWWoNtSBASssH4eHnjcDz d+m9Yd6tg0+2h0ottmphZxCC/FXjUuU7uXbe1VnE+GD3scaOWZbCWQqkXTFV+I8o rkEcI6eQ812PkWdM9XiWlZwRZOYCd3VyL7rLYhphhcqQL6gOD28= -----END CERTIFICATE-----Generated at Mon Jul 21 02:07:31 2025 by rpki-client