$ rpki-client -vvf repo-rpki.idnic.net/repo/ebefbf04-41be-48d7-ac00-8a3c498ca9ae/0/B8436ACB7CE8F8C2F57245FFE4E6BA2F52393F4D.mft File: B8436ACB7CE8F8C2F57245FFE4E6BA2F52393F4D.mft (raw, json) Hash identifier: rG3iCkylymSOlFUbBHqMOMRI08McTbTXUJ1JyBrXK7c= Subject key identifier: B8:42:A3:17:6C:AF:62:1E:5F:9C:3F:4F:A3:5C:6C:E0:00:DD:38:E5 Authority key identifier: B8:43:6A:CB:7C:E8:F8:C2:F5:72:45:FF:E4:E6:BA:2F:52:39:3F:4D Certificate issuer: /CN=B8436ACB7CE8F8C2F57245FFE4E6BA2F52393F4D Certificate serial: 26692D3C9F4D12503998D9EA188E109D43D18A6A Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B8436ACB7CE8F8C2F57245FFE4E6BA2F52393F4D.cer Subject info access: rsync://repo-rpki.idnic.net/repo/ebefbf04-41be-48d7-ac00-8a3c498ca9ae/0/B8436ACB7CE8F8C2F57245FFE4E6BA2F52393F4D.mft Manifest number: 0355 Signing time: Sun 20 Jul 2025 03:11:44 +0000 Manifest this update: Sun 20 Jul 2025 03:06:44 +0000 Manifest next update: Wed 23 Jul 2025 11:58:44 +0000 Files and hashes: 1: 3130332e3135342e32342e302f32332d3233203d3e20313430343738.roa (hash: s1nmEcWlMGfpOr6XkgkIDAhuvP77SQ9zj5c2Qr3sr/E=) 2: B8436ACB7CE8F8C2F57245FFE4E6BA2F52393F4D.crl (hash: WRljYOVzxVpUJYyyS8V2D2cypLT8+9LHylnNUVHGOxM=) 3: 3130332e3135342e32352e302f32342d3234203d3e20313430343738.roa (hash: YWVKY2G+Nvg6caG2vXoeK6bw0DFIbKqpsrtcWOftF08=) 4: 3130332e3135342e32342e302f32342d3234203d3e20313430343738.roa (hash: OPJ+0bfTR2bNFtVvMzF36s5tfMJLI0pXwTypT9BsLeE=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/ebefbf04-41be-48d7-ac00-8a3c498ca9ae/0/B8436ACB7CE8F8C2F57245FFE4E6BA2F52393F4D.crl rsync://repo-rpki.idnic.net/repo/ebefbf04-41be-48d7-ac00-8a3c498ca9ae/0/B8436ACB7CE8F8C2F57245FFE4E6BA2F52393F4D.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B8436ACB7CE8F8C2F57245FFE4E6BA2F52393F4D.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 23 Jul 2025 11:58:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 26:69:2d:3c:9f:4d:12:50:39:98:d9:ea:18:8e:10:9d:43:d1:8a:6a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B8436ACB7CE8F8C2F57245FFE4E6BA2F52393F4D Validity Not Before: Jul 20 03:06:44 2025 GMT Not After : Jul 23 11:58:44 2025 GMT Subject: CN=B842A3176CAF621E5F9C3F4FA35C6CE000DD38E5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:8b:ed:1a:89:bb:8f:13:7f:a9:3a:5c:38:ce: 02:4f:11:58:66:f3:a7:0f:ba:17:10:37:7c:eb:e0: 21:02:8b:6b:8d:f4:6f:d2:cc:a6:e3:87:bc:d9:e8: 74:5b:7b:26:86:f6:cf:9c:2a:5f:0d:e0:bc:87:3f: 16:31:35:13:d3:37:b4:49:e9:36:50:fd:ec:c8:1c: 9e:31:d4:4e:79:7e:93:78:78:26:9c:5b:fe:6a:b2: ed:ea:95:c3:4b:92:f5:97:b0:47:ea:c7:6b:cb:3c: 44:99:f5:b2:99:2a:48:99:a6:76:ae:5e:46:95:7b: 7a:d6:4f:26:b2:70:2b:a3:2d:4c:d3:ce:bb:09:9d: 23:5e:8f:48:32:ad:cb:99:e9:86:41:e8:c4:c9:9e: bf:5a:a5:3c:0f:bc:98:c4:d4:82:08:39:a4:0d:1a: d0:9d:87:3a:a3:30:80:02:9b:9d:ca:e6:36:56:b3: 6c:ee:9f:48:15:4e:b9:cc:88:25:c4:6a:04:0f:3f: 65:67:55:59:6d:5b:20:5d:22:88:39:64:70:85:8c: fc:68:8e:8a:75:6e:4c:1a:44:bd:46:8f:95:81:37: a3:f2:da:cd:00:88:9f:2e:1e:ed:26:4c:c6:63:70: 89:a1:56:59:45:1b:35:ec:32:42:e4:6d:5f:13:d4: 23:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:42:A3:17:6C:AF:62:1E:5F:9C:3F:4F:A3:5C:6C:E0:00:DD:38:E5 X509v3 Authority Key Identifier: keyid:B8:43:6A:CB:7C:E8:F8:C2:F5:72:45:FF:E4:E6:BA:2F:52:39:3F:4D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/ebefbf04-41be-48d7-ac00-8a3c498ca9ae/0/B8436ACB7CE8F8C2F57245FFE4E6BA2F52393F4D.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B8436ACB7CE8F8C2F57245FFE4E6BA2F52393F4D.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ebefbf04-41be-48d7-ac00-8a3c498ca9ae/0/B8436ACB7CE8F8C2F57245FFE4E6BA2F52393F4D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 09:4b:37:e7:5e:12:dc:1e:bf:fe:23:14:f3:e9:16:5d:4e:58: 09:5d:4b:1f:4d:bd:b7:bf:22:ba:fd:27:b1:05:cb:4c:40:96: a7:e8:91:e1:b4:9e:68:91:66:4f:b6:af:99:aa:bd:bd:71:fb: 92:eb:b1:6b:a9:8f:a9:eb:c6:32:b2:84:13:69:4a:17:9f:77: 71:8e:35:e6:ac:43:9a:62:b3:e2:92:1c:15:eb:c3:2b:f3:88: 30:68:a7:75:4a:71:f1:59:f7:76:85:b7:c2:a7:64:14:df:53: fe:0e:c6:3c:60:a5:55:9a:c1:e5:4a:56:a1:19:3c:f2:69:0d: 90:37:48:85:40:da:95:c7:41:2e:6e:e4:6e:8c:3d:ba:e1:d5: 77:06:0d:d0:bf:34:4b:85:e6:6b:3d:d3:15:8d:ff:05:8b:a6: f7:29:43:f9:9b:45:65:d9:83:0c:96:c8:a8:60:05:1f:50:a6: 84:02:c1:1a:eb:13:58:d4:ab:b1:c7:f8:8d:db:56:97:e4:69: 86:5f:b1:25:ea:41:8a:d5:3c:4a:45:fe:f9:76:9f:ca:4e:a3: c6:b3:a9:65:1a:5b:4a:69:a8:0b:13:36:21:0c:d3:1c:74:01: e9:ef:05:fc:14:7d:94:34:0a:bb:3e:10:2d:82:cf:1e:65:77: d6:3c:da:92 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUJmktPJ9NElA5mNnqGI4QnUPRimowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjg0MzZBQ0I3Q0U4RjhDMkY1NzI0NUZGRTRFNkJBMkY1 MjM5M0Y0RDAeFw0yNTA3MjAwMzA2NDRaFw0yNTA3MjMxMTU4NDRaMDMxMTAvBgNV BAMTKEI4NDJBMzE3NkNBRjYyMUU1RjlDM0Y0RkEzNUM2Q0UwMDBERDM4RTUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+i+0aibuPE3+pOlw4zgJPEVhm 86cPuhcQN3zr4CECi2uN9G/SzKbjh7zZ6HRbeyaG9s+cKl8N4LyHPxYxNRPTN7RJ 6TZQ/ezIHJ4x1E55fpN4eCacW/5qsu3qlcNLkvWXsEfqx2vLPESZ9bKZKkiZpnau XkaVe3rWTyaycCujLUzTzrsJnSNej0gyrcuZ6YZB6MTJnr9apTwPvJjE1IIIOaQN GtCdhzqjMIACm53K5jZWs2zun0gVTrnMiCXEagQPP2VnVVltWyBdIog5ZHCFjPxo jop1bkwaRL1Gj5WBN6Py2s0AiJ8uHu0mTMZjcImhVllFGzXsMkLkbV8T1CNbAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUuEKjF2yvYh5fnD9Po1xs4ADdOOUwHwYDVR0j BBgwFoAUuENqy3zo+ML1ckX/5Oa6L1I5P00wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l YmVmYmYwNC00MWJlLTQ4ZDctYWMwMC04YTNjNDk4Y2E5YWUvMC9CODQzNkFDQjdD RThGOEMyRjU3MjQ1RkZFNEU2QkEyRjUyMzkzRjRELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQjg0MzZBQ0I3Q0U4RjhDMkY1NzI0NUZGRTRFNkJBMkY1MjM5 M0Y0RC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZWJlZmJmMDQtNDFiZS00OGQ3LWFj MDAtOGEzYzQ5OGNhOWFlLzAvQjg0MzZBQ0I3Q0U4RjhDMkY1NzI0NUZGRTRFNkJB MkY1MjM5M0Y0RC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAlLN+deEtwev/4jFPPpFl1OWAldSx9Nvbe/ Irr9J7EFy0xAlqfokeG0nmiRZk+2r5mqvb1x+5LrsWupj6nrxjKyhBNpShefd3GO NeasQ5pis+KSHBXrwyvziDBop3VKcfFZ93aFt8KnZBTfU/4OxjxgpVWaweVKVqEZ PPJpDZA3SIVA2pXHQS5u5G6MPbrh1XcGDdC/NEuF5ms90xWN/wWLpvcpQ/mbRWXZ gwyWyKhgBR9QpoQCwRrrE1jUq7HH+I3bVpfkaYZfsSXqQYrVPEpF/vl2n8pOo8az qWUaW0ppqAsTNiEM0xx0AenvBfwUfZQ0Crs+EC2Czx5ld9Y82pI= -----END CERTIFICATE-----Generated at Mon Jul 21 10:31:55 2025 by rpki-client