$ rpki-client -vvf repo-rpki.idnic.net/repo/b94c1e95-a738-4e47-8e5c-7af681b36b00/0/8DBECF314BD3C829923A3A97BFC62113A61F8EE1.mft File: 8DBECF314BD3C829923A3A97BFC62113A61F8EE1.mft (raw, json) Hash identifier: X/FEpIcEfQR9Y5o6gj/BIx+R1p4mm+/fE4F4cFYDEhc= Subject key identifier: C3:63:7D:B9:D8:3B:53:FD:58:7A:C6:5C:11:0E:95:33:59:5F:56:7B Authority key identifier: 8D:BE:CF:31:4B:D3:C8:29:92:3A:3A:97:BF:C6:21:13:A6:1F:8E:E1 Certificate issuer: /CN=8DBECF314BD3C829923A3A97BFC62113A61F8EE1 Certificate serial: 226BDB619A54FB5B1C067FFF9BF21E7790BBDE4F Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8DBECF314BD3C829923A3A97BFC62113A61F8EE1.cer Subject info access: rsync://repo-rpki.idnic.net/repo/b94c1e95-a738-4e47-8e5c-7af681b36b00/0/8DBECF314BD3C829923A3A97BFC62113A61F8EE1.mft Manifest number: 01EB Signing time: Mon 21 Jul 2025 04:01:08 +0000 Manifest this update: Mon 21 Jul 2025 03:56:08 +0000 Manifest next update: Thu 24 Jul 2025 07:33:08 +0000 Files and hashes: 1: 3130332e3138362e39302e302f32332d3233203d3e20313439373037.roa (hash: IxE4f1xQzeKQZjsPZmdFbJyZKv94xhwmFh4/4Aw/W0I=) 2: 8DBECF314BD3C829923A3A97BFC62113A61F8EE1.crl (hash: e/EmE+lLgW/x/3Fs47WvI+DIjBrOItqlN6lP2KMq20k=) 3: 3130332e3138362e39302e302f32342d3234203d3e20313439373037.roa (hash: 656gLN35OIXcG6Vik35XhI6XoKD7dIobeeOabAVD0UQ=) 4: 3130332e3138362e39312e302f32342d3234203d3e20313439373037.roa (hash: v7WXEnDaWLgLHCCs0/IjJD0cW6T6d8CeSIJNddKA634=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/b94c1e95-a738-4e47-8e5c-7af681b36b00/0/8DBECF314BD3C829923A3A97BFC62113A61F8EE1.crl rsync://repo-rpki.idnic.net/repo/b94c1e95-a738-4e47-8e5c-7af681b36b00/0/8DBECF314BD3C829923A3A97BFC62113A61F8EE1.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8DBECF314BD3C829923A3A97BFC62113A61F8EE1.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 24 Jul 2025 07:33:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 22:6b:db:61:9a:54:fb:5b:1c:06:7f:ff:9b:f2:1e:77:90:bb:de:4f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8DBECF314BD3C829923A3A97BFC62113A61F8EE1 Validity Not Before: Jul 21 03:56:08 2025 GMT Not After : Jul 24 07:33:08 2025 GMT Subject: CN=C3637DB9D83B53FD587AC65C110E9533595F567B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:0b:3a:d2:1a:3e:13:c8:11:77:26:38:f1:67: 1d:93:dd:c9:3a:e2:f4:04:a0:d0:31:d2:4f:e5:ab: c4:01:84:6b:0d:7a:08:a5:b3:ec:88:b9:78:03:a1: 0a:b8:4a:aa:c8:fb:8f:e7:b6:22:c3:4a:85:4e:8b: 46:fd:d0:9b:fa:8f:c2:91:96:ff:fa:08:ce:d3:4d: fa:96:ae:91:73:44:97:33:1b:09:b0:01:4b:ae:49: fb:58:e6:13:04:1c:60:b4:10:21:fe:be:72:44:81: 7a:6d:13:4b:13:d3:50:a8:35:6f:a5:72:98:2b:f8: b1:09:cf:8e:0f:50:6b:82:7a:60:d8:97:d3:5b:06: 7d:80:05:71:f5:0e:37:61:f3:9c:1f:01:d8:7f:51: cc:4d:8f:79:c1:66:28:50:2e:45:51:12:96:74:fd: c1:f8:ee:63:92:17:33:5d:80:c6:50:b3:bc:bc:e4: c9:a2:09:2c:15:ac:f5:ff:c8:9e:3d:b6:a9:e5:dc: 7f:77:3a:f6:70:0e:2b:47:16:04:db:d8:d0:95:8f: 07:1a:44:63:4d:d0:01:28:a6:07:64:c3:fd:17:4c: ee:c0:bc:4b:ab:53:f0:c0:54:c6:47:0d:67:12:d6: 51:6f:32:b7:80:5f:95:e2:67:ae:19:18:ff:13:87: 1b:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C3:63:7D:B9:D8:3B:53:FD:58:7A:C6:5C:11:0E:95:33:59:5F:56:7B X509v3 Authority Key Identifier: keyid:8D:BE:CF:31:4B:D3:C8:29:92:3A:3A:97:BF:C6:21:13:A6:1F:8E:E1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/b94c1e95-a738-4e47-8e5c-7af681b36b00/0/8DBECF314BD3C829923A3A97BFC62113A61F8EE1.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8DBECF314BD3C829923A3A97BFC62113A61F8EE1.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/b94c1e95-a738-4e47-8e5c-7af681b36b00/0/8DBECF314BD3C829923A3A97BFC62113A61F8EE1.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 58:53:99:08:60:9c:bb:f1:b7:7a:91:d3:09:fe:33:a6:0a:ef: 86:a6:31:82:3a:23:b7:84:cc:51:d3:13:89:3c:b6:49:b4:d6: 39:83:ad:ad:99:d3:63:80:34:84:e3:18:de:da:b6:83:a8:80: 19:c3:f0:f0:99:98:15:72:f5:37:70:c7:3c:b9:97:83:57:8e: f6:b6:ee:36:63:5e:db:af:1c:e7:26:7b:02:e8:06:c5:55:3b: 86:03:85:d9:d5:e9:64:7a:af:8b:73:2f:58:23:85:44:88:fb: 43:f9:db:00:db:1c:18:e6:9b:20:b1:51:db:46:de:c1:a4:5f: 33:24:28:c0:c4:c4:85:9f:f1:77:73:fe:fd:6d:da:75:21:f9: 20:98:2d:78:66:c6:4d:70:e6:ef:05:7b:d2:c1:ab:cd:30:e0: 74:2d:3d:2a:85:d0:3d:d5:4e:e0:53:cf:49:22:c6:20:ce:8d: be:e2:51:07:d1:90:5f:3a:de:46:fb:2e:c4:30:8e:82:4e:13: c1:96:3d:96:09:97:14:37:73:3a:bf:31:3a:b5:05:ce:94:eb: f2:74:80:ea:e0:00:b4:a6:4a:9b:a9:15:2f:61:cd:e0:65:fd: 8c:30:32:c4:d8:f9:1a:ad:37:1a:42:28:53:1d:2f:ec:da:fe: 37:f2:dd:91 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUImvbYZpU+1scBn//m/Ied5C73k8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOERCRUNGMzE0QkQzQzgyOTkyM0EzQTk3QkZDNjIxMTNB NjFGOEVFMTAeFw0yNTA3MjEwMzU2MDhaFw0yNTA3MjQwNzMzMDhaMDMxMTAvBgNV BAMTKEMzNjM3REI5RDgzQjUzRkQ1ODdBQzY1QzExMEU5NTMzNTk1RjU2N0IwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDnCzrSGj4TyBF3JjjxZx2T3ck6 4vQEoNAx0k/lq8QBhGsNegils+yIuXgDoQq4SqrI+4/ntiLDSoVOi0b90Jv6j8KR lv/6CM7TTfqWrpFzRJczGwmwAUuuSftY5hMEHGC0ECH+vnJEgXptE0sT01CoNW+l cpgr+LEJz44PUGuCemDYl9NbBn2ABXH1Djdh85wfAdh/UcxNj3nBZihQLkVREpZ0 /cH47mOSFzNdgMZQs7y85MmiCSwVrPX/yJ49tqnl3H93OvZwDitHFgTb2NCVjwca RGNN0AEopgdkw/0XTO7AvEurU/DAVMZHDWcS1lFvMreAX5XiZ64ZGP8ThxuLAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUw2N9udg7U/1YesZcEQ6VM1lfVnswHwYDVR0j BBgwFoAUjb7PMUvTyCmSOjqXv8YhE6YfjuEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i OTRjMWU5NS1hNzM4LTRlNDctOGU1Yy03YWY2ODFiMzZiMDAvMC84REJFQ0YzMTRC RDNDODI5OTIzQTNBOTdCRkM2MjExM0E2MUY4RUUxLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOERCRUNGMzE0QkQzQzgyOTkyM0EzQTk3QkZDNjIxMTNBNjFG OEVFMS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYjk0YzFlOTUtYTczOC00ZTQ3LThl NWMtN2FmNjgxYjM2YjAwLzAvOERCRUNGMzE0QkQzQzgyOTkyM0EzQTk3QkZDNjIx MTNBNjFGOEVFMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFhTmQhgnLvxt3qR0wn+M6YK74amMYI6I7eE zFHTE4k8tkm01jmDra2Z02OANITjGN7atoOogBnD8PCZmBVy9Tdwxzy5l4NXjva2 7jZjXtuvHOcmewLoBsVVO4YDhdnV6WR6r4tzL1gjhUSI+0P52wDbHBjmmyCxUdtG 3sGkXzMkKMDExIWf8Xdz/v1t2nUh+SCYLXhmxk1w5u8Fe9LBq80w4HQtPSqF0D3V TuBTz0kixiDOjb7iUQfRkF863kb7LsQwjoJOE8GWPZYJlxQ3czq/MTq1Bc6U6/J0 gOrgALSmSpupFS9hzeBl/YwwMsTY+RqtNxpCKFMdL+za/jfy3ZE= -----END CERTIFICATE-----Generated at Mon Jul 21 23:17:25 2025 by rpki-client