$ rpki-client -vvf repo-rpki.idnic.net/repo/b8f9e87d-e509-47ba-be9d-89556f530ea8/0/8DA7BD2FB53F2491FB6F3C9319EF347499610E50.mft File: 8DA7BD2FB53F2491FB6F3C9319EF347499610E50.mft (raw, json) Hash identifier: LIY+3t1ukkH1Q6xWIO0GI0ddBsf7tghj0R0t7YybdUI= Subject key identifier: DF:CC:29:21:C0:8D:89:74:3B:94:B0:8B:AF:17:E3:F5:7D:96:CA:2C Authority key identifier: 8D:A7:BD:2F:B5:3F:24:91:FB:6F:3C:93:19:EF:34:74:99:61:0E:50 Certificate issuer: /CN=8DA7BD2FB53F2491FB6F3C9319EF347499610E50 Certificate serial: 1F149CC882F1D3149B6B822A4D21F8A423B9F045 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8DA7BD2FB53F2491FB6F3C9319EF347499610E50.cer Subject info access: rsync://repo-rpki.idnic.net/repo/b8f9e87d-e509-47ba-be9d-89556f530ea8/0/8DA7BD2FB53F2491FB6F3C9319EF347499610E50.mft Manifest number: 01C0 Signing time: Mon 21 Jul 2025 07:41:46 +0000 Manifest this update: Mon 21 Jul 2025 07:36:46 +0000 Manifest next update: Thu 24 Jul 2025 17:34:46 +0000 Files and hashes: 1: 3130332e3136372e37302e302f32342d3234203d3e20313431393735.roa (hash: nOmusyTjg1lvZ1iGKTLy/8UGF4jeQtTQYSW2SNX3cao=) 2: 3130332e3136372e37302e302f32332d3234203d3e20313431393735.roa (hash: IogGCBWgp3JrkSQOYf566gL9gQvFCS2GUVGyd4wX/SE=) 3: 8DA7BD2FB53F2491FB6F3C9319EF347499610E50.crl (hash: PuzZ0dXRsDPA1gsbEa7dB0lw5JrObPz7GAqFbIot7b4=) 4: 3130332e3136372e37312e302f32342d3234203d3e20313439313735.roa (hash: 9E8QVBoAroDUqMrtqFLZdvTypP1Njqyq9IYgh3B0/7s=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/b8f9e87d-e509-47ba-be9d-89556f530ea8/0/8DA7BD2FB53F2491FB6F3C9319EF347499610E50.crl rsync://repo-rpki.idnic.net/repo/b8f9e87d-e509-47ba-be9d-89556f530ea8/0/8DA7BD2FB53F2491FB6F3C9319EF347499610E50.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8DA7BD2FB53F2491FB6F3C9319EF347499610E50.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 24 Jul 2025 17:34:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1f:14:9c:c8:82:f1:d3:14:9b:6b:82:2a:4d:21:f8:a4:23:b9:f0:45 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8DA7BD2FB53F2491FB6F3C9319EF347499610E50 Validity Not Before: Jul 21 07:36:46 2025 GMT Not After : Jul 24 17:34:46 2025 GMT Subject: CN=DFCC2921C08D89743B94B08BAF17E3F57D96CA2C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:1b:9c:5a:9e:33:9f:51:21:ae:bc:30:e1:0c: fc:d5:2e:77:14:28:9e:17:c2:d3:04:0c:21:72:44: bf:02:6e:4b:ef:81:ad:47:a6:0f:18:e4:69:65:82: a7:12:82:57:55:f7:20:7a:60:c4:1f:f8:79:41:42: 71:26:cd:23:59:22:fd:a5:9c:9d:bd:d0:8b:3d:df: 2f:68:67:91:7d:eb:92:e7:a3:83:26:81:96:41:f4: 96:47:b8:a7:2d:7b:55:63:6e:7d:13:0f:9a:ba:db: f2:7a:39:22:e8:28:0b:29:86:32:d0:c2:73:4e:d9: b2:f2:db:27:fb:61:7a:ce:9b:ee:32:8a:f1:c8:03: 53:bf:04:c0:46:dd:3e:8b:cc:ff:85:2f:99:3b:b1: ab:90:06:81:57:cc:25:47:f0:1a:28:1c:1d:b2:e7: 0b:5b:8a:dc:d9:55:7f:d8:be:7e:0b:bd:5e:b3:b2: d0:81:26:0f:9e:63:3d:2c:c4:08:5e:87:7d:09:79: e6:2e:41:23:8b:84:43:2f:69:65:f0:53:1b:46:e1: fd:ce:4f:1b:f8:6e:35:88:dc:57:52:ff:8d:f0:c3: ce:b8:e6:4e:94:ec:3c:82:f9:ed:46:1a:d0:4c:45: b8:26:3f:6c:af:38:6f:eb:b5:53:d0:a3:82:2b:b3: 9b:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DF:CC:29:21:C0:8D:89:74:3B:94:B0:8B:AF:17:E3:F5:7D:96:CA:2C X509v3 Authority Key Identifier: keyid:8D:A7:BD:2F:B5:3F:24:91:FB:6F:3C:93:19:EF:34:74:99:61:0E:50 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/b8f9e87d-e509-47ba-be9d-89556f530ea8/0/8DA7BD2FB53F2491FB6F3C9319EF347499610E50.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8DA7BD2FB53F2491FB6F3C9319EF347499610E50.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/b8f9e87d-e509-47ba-be9d-89556f530ea8/0/8DA7BD2FB53F2491FB6F3C9319EF347499610E50.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 03:f6:0d:c2:44:60:34:81:02:35:8f:45:d5:7b:b7:cf:04:93: 35:e6:53:87:b4:65:e2:48:98:85:23:43:bc:c4:87:9a:f2:49: 4d:58:11:90:24:10:40:0f:98:c1:22:14:7a:9c:5f:31:8e:c7: 08:9f:dd:3c:e2:43:99:ef:23:c5:c5:cd:25:0f:08:6c:61:47: 51:2b:17:d9:29:5e:45:dc:c4:34:8a:62:44:4c:fa:76:f1:86: 64:8f:f9:a7:61:59:e6:51:16:ac:84:1e:78:19:b6:52:e4:f9: 82:b5:63:37:ad:47:27:2f:82:fe:eb:f9:d1:df:a2:4c:a7:e8: 28:cc:46:9b:5f:75:04:97:1e:bc:22:53:a8:b0:ad:7a:14:1a: fa:a5:8b:c7:7b:e2:b3:0f:ff:5f:44:dc:5c:57:84:a4:7a:48: 5c:fb:9e:bb:43:db:63:d6:36:ce:20:bf:e5:92:5b:4a:05:06: 08:aa:a8:42:ea:bd:63:b4:9e:fa:cc:54:07:20:08:b7:3d:c4: c1:02:f7:90:ef:8a:ae:1c:9d:44:68:08:d0:1b:cc:54:9c:52: 9d:22:99:88:ee:01:d8:55:51:e6:73:75:a0:ab:c1:53:c6:95: 15:06:c9:be:e1:eb:f2:b0:1b:cf:e3:b1:d3:98:1f:29:ba:bd: f0:52:99:34 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUHxScyILx0xSba4IqTSH4pCO58EUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOERBN0JEMkZCNTNGMjQ5MUZCNkYzQzkzMTlFRjM0NzQ5 OTYxMEU1MDAeFw0yNTA3MjEwNzM2NDZaFw0yNTA3MjQxNzM0NDZaMDMxMTAvBgNV BAMTKERGQ0MyOTIxQzA4RDg5NzQzQjk0QjA4QkFGMTdFM0Y1N0Q5NkNBMkMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDaG5xanjOfUSGuvDDhDPzVLncU KJ4XwtMEDCFyRL8Cbkvvga1Hpg8Y5GllgqcSgldV9yB6YMQf+HlBQnEmzSNZIv2l nJ290Is93y9oZ5F965Lno4MmgZZB9JZHuKcte1Vjbn0TD5q62/J6OSLoKAsphjLQ wnNO2bLy2yf7YXrOm+4yivHIA1O/BMBG3T6LzP+FL5k7sauQBoFXzCVH8BooHB2y 5wtbitzZVX/Yvn4LvV6zstCBJg+eYz0sxAheh30JeeYuQSOLhEMvaWXwUxtG4f3O Txv4bjWI3FdS/43ww8645k6U7DyC+e1GGtBMRbgmP2yvOG/rtVPQo4Irs5tPAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU38wpIcCNiXQ7lLCLrxfj9X2WyiwwHwYDVR0j BBgwFoAUjae9L7U/JJH7bzyTGe80dJlhDlAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i OGY5ZTg3ZC1lNTA5LTQ3YmEtYmU5ZC04OTU1NmY1MzBlYTgvMC84REE3QkQyRkI1 M0YyNDkxRkI2RjNDOTMxOUVGMzQ3NDk5NjEwRTUwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOERBN0JEMkZCNTNGMjQ5MUZCNkYzQzkzMTlFRjM0NzQ5OTYx MEU1MC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYjhmOWU4N2QtZTUwOS00N2JhLWJl OWQtODk1NTZmNTMwZWE4LzAvOERBN0JEMkZCNTNGMjQ5MUZCNkYzQzkzMTlFRjM0 NzQ5OTYxMEU1MC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAP2DcJEYDSBAjWPRdV7t88EkzXmU4e0ZeJI mIUjQ7zEh5rySU1YEZAkEEAPmMEiFHqcXzGOxwif3TziQ5nvI8XFzSUPCGxhR1Er F9kpXkXcxDSKYkRM+nbxhmSP+adhWeZRFqyEHngZtlLk+YK1YzetRycvgv7r+dHf okyn6CjMRptfdQSXHrwiU6iwrXoUGvqli8d74rMP/19E3FxXhKR6SFz7nrtD22PW Ns4gv+WSW0oFBgiqqELqvWO0nvrMVAcgCLc9xMEC95Dviq4cnURoCNAbzFScUp0i mYjuAdhVUeZzdaCrwVPGlRUGyb7h6/KwG8/jsdOYHym6vfBSmTQ= -----END CERTIFICATE-----Generated at Wed Jul 23 02:02:12 2025 by rpki-client