$ rpki-client -vvf repo-rpki.idnic.net/repo/de6a57c5-df73-43f5-865d-6bd248c22fba/0/8B0DE141ACB811E0FE65085CF2339EE4C7EE05A2.mft File: 8B0DE141ACB811E0FE65085CF2339EE4C7EE05A2.mft (raw, json) Hash identifier: CzPQnAJhSGp2KVu+aOt8wztekUfB3rIv4mxGlQIcrZY= Subject key identifier: ED:74:69:4F:76:E4:2D:AC:37:9F:14:C5:30:2D:74:3C:C8:05:57:2B Authority key identifier: 8B:0D:E1:41:AC:B8:11:E0:FE:65:08:5C:F2:33:9E:E4:C7:EE:05:A2 Certificate issuer: /CN=8B0DE141ACB811E0FE65085CF2339EE4C7EE05A2 Certificate serial: 3816540034A4EEB2D9790138919F7164F7144005 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8B0DE141ACB811E0FE65085CF2339EE4C7EE05A2.cer Subject info access: rsync://repo-rpki.idnic.net/repo/de6a57c5-df73-43f5-865d-6bd248c22fba/0/8B0DE141ACB811E0FE65085CF2339EE4C7EE05A2.mft Manifest number: 01EF Signing time: Sat 19 Jul 2025 02:12:00 +0000 Manifest this update: Sat 19 Jul 2025 02:07:00 +0000 Manifest next update: Tue 22 Jul 2025 08:07:00 +0000 Files and hashes: 1: 8B0DE141ACB811E0FE65085CF2339EE4C7EE05A2.crl (hash: w/fvDwAME4Kzztr8HBzvop2peGdqd5PjFE8Es0JfcYA=) 2: 3130332e3138342e35362e302f32342d3234203d3e20313439363637.roa (hash: wL4jyeE9OG3mCA6Twfdl1VaSzPxamD0EwTijKmcLq7s=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/de6a57c5-df73-43f5-865d-6bd248c22fba/0/8B0DE141ACB811E0FE65085CF2339EE4C7EE05A2.crl rsync://repo-rpki.idnic.net/repo/de6a57c5-df73-43f5-865d-6bd248c22fba/0/8B0DE141ACB811E0FE65085CF2339EE4C7EE05A2.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8B0DE141ACB811E0FE65085CF2339EE4C7EE05A2.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 22 Jul 2025 08:07:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 38:16:54:00:34:a4:ee:b2:d9:79:01:38:91:9f:71:64:f7:14:40:05 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8B0DE141ACB811E0FE65085CF2339EE4C7EE05A2 Validity Not Before: Jul 19 02:07:00 2025 GMT Not After : Jul 22 08:07:00 2025 GMT Subject: CN=ED74694F76E42DAC379F14C5302D743CC805572B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:fa:67:65:db:6e:77:8d:9d:f2:ee:6b:40:54: ae:1f:dd:11:58:e6:73:40:9d:00:1b:6a:3f:79:ec: bd:87:ed:5e:73:54:0f:8d:f2:2b:4d:11:80:97:c5: 38:1a:fe:7a:01:7e:03:c5:51:ec:36:13:42:88:f9: 67:09:65:fc:c4:8d:c1:ad:9b:82:54:f5:6b:62:22: bc:6a:e7:4d:23:1c:72:bf:e6:81:26:f4:88:94:28: 6a:47:7b:a5:30:5f:01:63:a0:36:d0:6b:fe:50:2c: df:16:b3:2d:1e:57:11:da:40:2a:f5:3b:be:4d:6e: 53:83:30:62:2f:5c:c6:82:fc:d2:cf:55:f9:03:68: ce:0a:39:cb:b8:a0:ef:7c:4c:29:fa:ee:6e:a9:54: 08:0e:ec:1f:c7:65:0b:e7:3a:1f:f0:37:62:cc:6c: ee:fa:f3:4a:31:ac:31:ac:c4:f3:b9:06:6b:2f:03: 4c:cb:bf:f5:b0:25:b1:ad:ca:e5:f7:73:57:6f:57: 83:04:28:33:42:b7:a9:2e:04:e5:ef:bd:40:02:fb: e4:78:cf:2b:eb:62:00:46:96:08:72:e9:ad:c9:80: c1:3b:e5:b2:d2:6a:57:ee:19:5b:1f:b0:82:1f:92: 69:82:df:3e:62:ed:c4:09:30:ca:80:2f:67:90:e9: e2:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: ED:74:69:4F:76:E4:2D:AC:37:9F:14:C5:30:2D:74:3C:C8:05:57:2B X509v3 Authority Key Identifier: keyid:8B:0D:E1:41:AC:B8:11:E0:FE:65:08:5C:F2:33:9E:E4:C7:EE:05:A2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/de6a57c5-df73-43f5-865d-6bd248c22fba/0/8B0DE141ACB811E0FE65085CF2339EE4C7EE05A2.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8B0DE141ACB811E0FE65085CF2339EE4C7EE05A2.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/de6a57c5-df73-43f5-865d-6bd248c22fba/0/8B0DE141ACB811E0FE65085CF2339EE4C7EE05A2.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 56:57:61:6e:91:80:fa:f3:61:c8:87:e5:d8:5b:cd:03:80:78: 1a:4c:df:9f:cc:a6:be:b8:66:ee:e9:1e:55:07:10:e9:24:e7: 3e:82:2a:f1:12:e5:b6:e9:9d:b7:0e:08:59:45:a0:59:f6:60: d7:33:83:fa:c4:cf:57:8e:46:b9:3a:b0:a8:31:84:7f:14:46: d6:28:b9:cc:cc:03:3f:54:e2:d3:53:2f:db:bf:25:36:be:f6: 23:b0:29:3c:70:81:72:68:01:f6:a3:76:35:2b:4c:f2:9d:3c: 32:21:cf:5e:e8:59:9e:6c:9f:d4:bc:cb:ee:b1:56:bc:36:88: b1:da:34:a2:a2:b5:61:c0:ca:4e:b5:14:a9:d0:7c:b0:f9:e1: 5d:03:22:ff:62:d4:0f:f1:45:db:c4:de:e8:89:ba:26:73:e8: 04:3a:df:a8:01:10:6e:d8:a4:06:cc:47:41:7e:af:81:01:96: 1c:03:b4:9e:2f:2f:2e:36:e4:2f:39:d4:40:ef:1c:24:8c:70: 6a:53:64:01:08:91:7b:71:0f:5d:11:57:44:dc:ed:78:a7:1a: 4a:d4:c3:4a:34:1f:5f:18:df:cb:31:6d:bb:e6:54:dc:bc:38: 65:3e:c8:a0:80:94:1b:6c:83:c8:fe:4e:21:02:38:aa:c7:7a: d9:2c:63:a0 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUOBZUADSk7rLZeQE4kZ9xZPcUQAUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEIwREUxNDFBQ0I4MTFFMEZFNjUwODVDRjIzMzlFRTRD N0VFMDVBMjAeFw0yNTA3MTkwMjA3MDBaFw0yNTA3MjIwODA3MDBaMDMxMTAvBgNV BAMTKEVENzQ2OTRGNzZFNDJEQUMzNzlGMTRDNTMwMkQ3NDNDQzgwNTU3MkIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC2+mdl2253jZ3y7mtAVK4f3RFY 5nNAnQAbaj957L2H7V5zVA+N8itNEYCXxTga/noBfgPFUew2E0KI+WcJZfzEjcGt m4JU9WtiIrxq500jHHK/5oEm9IiUKGpHe6UwXwFjoDbQa/5QLN8Wsy0eVxHaQCr1 O75NblODMGIvXMaC/NLPVfkDaM4KOcu4oO98TCn67m6pVAgO7B/HZQvnOh/wN2LM bO7680oxrDGsxPO5BmsvA0zLv/WwJbGtyuX3c1dvV4MEKDNCt6kuBOXvvUAC++R4 zyvrYgBGlghy6a3JgME75bLSalfuGVsfsIIfkmmC3z5i7cQJMMqAL2eQ6eJ5AgMB AAGjggI8MIICODAdBgNVHQ4EFgQU7XRpT3bkLaw3nxTFMC10PMgFVyswHwYDVR0j BBgwFoAUiw3hQay4EeD+ZQhc8jOe5MfuBaIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k ZTZhNTdjNS1kZjczLTQzZjUtODY1ZC02YmQyNDhjMjJmYmEvMC84QjBERTE0MUFD QjgxMUUwRkU2NTA4NUNGMjMzOUVFNEM3RUUwNUEyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOEIwREUxNDFBQ0I4MTFFMEZFNjUwODVDRjIzMzlFRTRDN0VF MDVBMi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZGU2YTU3YzUtZGY3My00M2Y1LTg2 NWQtNmJkMjQ4YzIyZmJhLzAvOEIwREUxNDFBQ0I4MTFFMEZFNjUwODVDRjIzMzlF RTRDN0VFMDVBMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFZXYW6RgPrzYciH5dhbzQOAeBpM35/Mpr64 Zu7pHlUHEOkk5z6CKvES5bbpnbcOCFlFoFn2YNczg/rEz1eORrk6sKgxhH8URtYo uczMAz9U4tNTL9u/JTa+9iOwKTxwgXJoAfajdjUrTPKdPDIhz17oWZ5sn9S8y+6x Vrw2iLHaNKKitWHAyk61FKnQfLD54V0DIv9i1A/xRdvE3uiJuiZz6AQ636gBEG7Y pAbMR0F+r4EBlhwDtJ4vLy425C851EDvHCSMcGpTZAEIkXtxD10RV0Tc7XinGkrU w0o0H18Y38sxbbvmVNy8OGU+yKCAlBtsg8j+TiECOKrHetksY6A= -----END CERTIFICATE-----Generated at Sun Jul 20 21:56:34 2025 by rpki-client