$ rpki-client -vvf repo-rpki.idnic.net/repo/d06347f4-ea26-4d4c-a568-1d863360e421/0/8BE4A701F2924B4BFB8A983A1B0BD5C8863BF3FD.mft File: 8BE4A701F2924B4BFB8A983A1B0BD5C8863BF3FD.mft (raw, json) Hash identifier: OncbzRsrp0B59CAlijNVhmS8ONGMkAnRC2MOqyhCzjk= Subject key identifier: 2D:C6:03:A7:82:2C:7D:54:BC:BB:00:FA:CB:9A:44:7A:D0:31:C4:2D Authority key identifier: 8B:E4:A7:01:F2:92:4B:4B:FB:8A:98:3A:1B:0B:D5:C8:86:3B:F3:FD Certificate issuer: /CN=8BE4A701F2924B4BFB8A983A1B0BD5C8863BF3FD Certificate serial: 65BBCD0D931A10CC5EDF40054E526A2365B54AA1 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8BE4A701F2924B4BFB8A983A1B0BD5C8863BF3FD.cer Subject info access: rsync://repo-rpki.idnic.net/repo/d06347f4-ea26-4d4c-a568-1d863360e421/0/8BE4A701F2924B4BFB8A983A1B0BD5C8863BF3FD.mft Manifest number: 04ED Signing time: Sat 19 Jul 2025 16:22:05 +0000 Manifest this update: Sat 19 Jul 2025 16:17:05 +0000 Manifest next update: Tue 22 Jul 2025 22:40:05 +0000 Files and hashes: 1: 8BE4A701F2924B4BFB8A983A1B0BD5C8863BF3FD.crl (hash: hTLjF17nJWlkkZfJTnZJKvmDUyCaSxOnCUA5iRjsdbk=) 2: 3130332e3131352e3136342e302f32342d3234203d3e20313338313331.roa (hash: PfYYptDyBdUl4aWzZCjnvFHr6qQWRMjgNV762Lfvv/Q=) 3: 3130332e3132312e3132322e302f32342d3234203d3e20313338313331.roa (hash: 9ysblGZ5nRnpD9uRTt/CttmsXFnbP66QhYFS5MHljXI=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/d06347f4-ea26-4d4c-a568-1d863360e421/0/8BE4A701F2924B4BFB8A983A1B0BD5C8863BF3FD.crl rsync://repo-rpki.idnic.net/repo/d06347f4-ea26-4d4c-a568-1d863360e421/0/8BE4A701F2924B4BFB8A983A1B0BD5C8863BF3FD.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8BE4A701F2924B4BFB8A983A1B0BD5C8863BF3FD.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 22 Jul 2025 22:40:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 65:bb:cd:0d:93:1a:10:cc:5e:df:40:05:4e:52:6a:23:65:b5:4a:a1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8BE4A701F2924B4BFB8A983A1B0BD5C8863BF3FD Validity Not Before: Jul 19 16:17:05 2025 GMT Not After : Jul 22 22:40:05 2025 GMT Subject: CN=2DC603A7822C7D54BCBB00FACB9A447AD031C42D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:ec:d1:de:78:cc:1b:30:7a:86:9f:de:af:72: 68:bf:a8:f4:47:06:e7:36:68:b6:c5:28:be:6f:58: 6d:f7:cf:29:e3:aa:48:e6:97:af:05:0c:ee:3b:4a: 11:29:6e:75:d5:53:5f:67:31:bf:25:d7:78:5d:1f: 31:5b:9b:71:c4:70:fc:23:0e:63:51:d4:cf:71:9e: 70:6f:01:70:ba:d1:7f:ed:27:82:82:54:5e:3d:7a: 19:53:e7:20:f1:69:ac:1d:eb:eb:e5:d3:9a:9d:3a: b5:a5:bc:45:4b:2c:66:30:e9:bf:3a:8c:cb:84:91: 31:35:d7:67:fc:c6:dc:93:69:b7:13:0b:37:38:bc: d8:e6:44:d3:b0:0d:1e:d9:86:06:56:59:0e:15:0f: d4:29:0d:94:b8:f5:b6:6a:d4:16:68:42:88:0a:18: 3d:d2:78:5d:81:a5:80:6f:99:eb:a9:01:3a:f0:15: 2c:40:fb:a8:bd:db:cc:0b:b6:b1:b4:5a:a6:ba:ea: ed:7a:af:0e:d9:fb:80:f9:43:af:08:f3:7c:ab:3f: 27:14:9b:ab:b6:06:d7:78:99:84:2f:eb:e8:6e:9d: 69:f8:94:7a:47:f1:eb:93:1b:0f:55:53:4d:3b:10: 38:43:d4:2e:20:66:6d:78:b7:1c:1e:7f:1a:f3:3a: fd:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:C6:03:A7:82:2C:7D:54:BC:BB:00:FA:CB:9A:44:7A:D0:31:C4:2D X509v3 Authority Key Identifier: keyid:8B:E4:A7:01:F2:92:4B:4B:FB:8A:98:3A:1B:0B:D5:C8:86:3B:F3:FD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/d06347f4-ea26-4d4c-a568-1d863360e421/0/8BE4A701F2924B4BFB8A983A1B0BD5C8863BF3FD.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8BE4A701F2924B4BFB8A983A1B0BD5C8863BF3FD.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d06347f4-ea26-4d4c-a568-1d863360e421/0/8BE4A701F2924B4BFB8A983A1B0BD5C8863BF3FD.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a2:5a:f5:fa:56:a3:f5:ac:df:48:95:34:c6:62:34:b0:8b:cf: f8:64:c6:3f:58:3e:3d:d8:cf:dd:df:15:0a:17:2e:40:a2:b0: d3:0a:cf:bf:35:75:89:83:fc:7e:a6:c9:31:0c:89:c4:f0:1a: a3:e3:62:94:a8:c5:37:71:38:07:7b:ba:7b:5e:09:33:e3:5b: f0:45:8e:b5:42:54:d6:59:ac:8a:39:ec:ec:b5:70:e8:28:03: c9:cb:dd:9e:cb:59:cb:f9:9e:02:3f:94:9c:ff:74:2d:a1:1f: 03:dd:0a:74:9c:79:eb:70:c1:3e:2c:5d:61:f8:65:72:c6:9f: 4d:de:7f:70:b3:b1:2c:d3:6a:d0:35:00:06:da:d0:61:90:1e: 3d:20:d1:ae:a9:b8:75:86:ff:eb:06:13:fa:ac:a7:22:99:68: cc:fd:03:2a:14:2d:0b:23:cc:66:de:7e:c9:3b:32:3a:a7:bf: e5:8e:f8:0e:bd:dc:60:3c:95:dd:3c:c4:5e:86:58:ee:bd:2b: bc:6a:b9:59:b7:24:5a:60:f9:05:95:c6:3c:80:a4:4e:61:3f: 62:c8:55:a8:bd:92:a3:f9:f3:8f:ce:40:e1:31:71:d1:51:a3: 34:12:68:a8:a5:01:2d:e5:94:48:65:d2:f3:c9:7f:c8:56:bc: 6f:a2:ba:6c -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUZbvNDZMaEMxe30AFTlJqI2W1SqEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEJFNEE3MDFGMjkyNEI0QkZCOEE5ODNBMUIwQkQ1Qzg4 NjNCRjNGRDAeFw0yNTA3MTkxNjE3MDVaFw0yNTA3MjIyMjQwMDVaMDMxMTAvBgNV BAMTKDJEQzYwM0E3ODIyQzdENTRCQ0JCMDBGQUNCOUE0NDdBRDAzMUM0MkQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDS7NHeeMwbMHqGn96vcmi/qPRH Buc2aLbFKL5vWG33zynjqkjml68FDO47ShEpbnXVU19nMb8l13hdHzFbm3HEcPwj DmNR1M9xnnBvAXC60X/tJ4KCVF49ehlT5yDxaawd6+vl05qdOrWlvEVLLGYw6b86 jMuEkTE112f8xtyTabcTCzc4vNjmRNOwDR7ZhgZWWQ4VD9QpDZS49bZq1BZoQogK GD3SeF2BpYBvmeupATrwFSxA+6i928wLtrG0Wqa66u16rw7Z+4D5Q68I83yrPycU m6u2Btd4mYQv6+hunWn4lHpH8euTGw9VU007EDhD1C4gZm14txwefxrzOv3PAgMB AAGjggI8MIICODAdBgNVHQ4EFgQULcYDp4IsfVS8uwD6y5pEetAxxC0wHwYDVR0j BBgwFoAUi+SnAfKSS0v7ipg6GwvVyIY78/0wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k MDYzNDdmNC1lYTI2LTRkNGMtYTU2OC0xZDg2MzM2MGU0MjEvMC84QkU0QTcwMUYy OTI0QjRCRkI4QTk4M0ExQjBCRDVDODg2M0JGM0ZELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOEJFNEE3MDFGMjkyNEI0QkZCOEE5ODNBMUIwQkQ1Qzg4NjNC RjNGRC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZDA2MzQ3ZjQtZWEyNi00ZDRjLWE1 NjgtMWQ4NjMzNjBlNDIxLzAvOEJFNEE3MDFGMjkyNEI0QkZCOEE5ODNBMUIwQkQ1 Qzg4NjNCRjNGRC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKJa9fpWo/Ws30iVNMZiNLCLz/hkxj9YPj3Y z93fFQoXLkCisNMKz781dYmD/H6myTEMicTwGqPjYpSoxTdxOAd7unteCTPjW/BF jrVCVNZZrIo57Oy1cOgoA8nL3Z7LWcv5ngI/lJz/dC2hHwPdCnSceetwwT4sXWH4 ZXLGn03ef3CzsSzTatA1AAba0GGQHj0g0a6puHWG/+sGE/qspyKZaMz9AyoULQsj zGbefsk7Mjqnv+WO+A693GA8ld08xF6GWO69K7xquVm3JFpg+QWVxjyApE5hP2LI Vai9kqP584/OQOExcdFRozQSaKilAS3llEhl0vPJf8hWvG+iumw= -----END CERTIFICATE-----Generated at Mon Jul 21 18:04:47 2025 by rpki-client