$ rpki-client -vvf repo-rpki.idnic.net/repo/ecdae0a5-b4f6-4e08-8beb-63ebe0853df3/0/B8A9E45E7E2DEA6624140C03DE025D16B91CB9DC.mft File: B8A9E45E7E2DEA6624140C03DE025D16B91CB9DC.mft (raw, json) Hash identifier: bKQA07dh7BtH7JyUpK7kUpMJ5E3AYfjDvzorypHF3gk= Subject key identifier: A8:36:E9:35:96:04:03:E5:35:7A:08:8D:7C:85:FD:54:51:15:F7:1F Authority key identifier: B8:A9:E4:5E:7E:2D:EA:66:24:14:0C:03:DE:02:5D:16:B9:1C:B9:DC Certificate issuer: /CN=B8A9E45E7E2DEA6624140C03DE025D16B91CB9DC Certificate serial: 66B97BB7D08C464A3C9A32BF1C473D7358498B87 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B8A9E45E7E2DEA6624140C03DE025D16B91CB9DC.cer Subject info access: rsync://repo-rpki.idnic.net/repo/ecdae0a5-b4f6-4e08-8beb-63ebe0853df3/0/B8A9E45E7E2DEA6624140C03DE025D16B91CB9DC.mft Manifest number: 0152 Signing time: Wed 23 Jul 2025 05:22:07 +0000 Manifest this update: Wed 23 Jul 2025 05:17:07 +0000 Manifest next update: Sat 26 Jul 2025 06:14:07 +0000 Files and hashes: 1: B8A9E45E7E2DEA6624140C03DE025D16B91CB9DC.crl (hash: wZafmorkSsXKCWc6/+8YQxHF3aP9vTnQEyErhP+WFZQ=) 2: 3130332e34302e39322e302f32332d3233203d3e203633353034.roa (hash: SFyP6dQXcZeCfICHfcQqBzkquUF0rSVZjhOo/oTB3lM=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/ecdae0a5-b4f6-4e08-8beb-63ebe0853df3/0/B8A9E45E7E2DEA6624140C03DE025D16B91CB9DC.crl rsync://repo-rpki.idnic.net/repo/ecdae0a5-b4f6-4e08-8beb-63ebe0853df3/0/B8A9E45E7E2DEA6624140C03DE025D16B91CB9DC.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B8A9E45E7E2DEA6624140C03DE025D16B91CB9DC.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Jul 2025 06:14:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 66:b9:7b:b7:d0:8c:46:4a:3c:9a:32:bf:1c:47:3d:73:58:49:8b:87 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B8A9E45E7E2DEA6624140C03DE025D16B91CB9DC Validity Not Before: Jul 23 05:17:07 2025 GMT Not After : Jul 26 06:14:07 2025 GMT Subject: CN=A836E935960403E5357A088D7C85FD545115F71F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:9a:23:71:4e:bf:ce:34:3a:ef:e1:d3:05:d1: cd:07:0b:46:35:1f:fb:9a:08:3e:cc:9d:f5:0f:62: 06:ae:cb:dc:79:83:39:7a:58:c5:7c:97:06:33:2d: 9f:21:43:b0:79:cf:4b:7b:6e:0e:86:a7:20:c4:0a: 17:61:d3:87:80:66:25:78:55:79:67:c8:d7:e5:06: e2:ed:d7:7f:75:20:04:ce:80:a5:51:f0:3d:92:5e: 36:05:cc:3e:36:f2:05:3e:b6:2d:ba:be:f8:90:0a: 23:5f:e1:bb:c3:f6:7b:38:f9:f0:55:ef:91:47:3e: 8c:0d:1d:8f:32:42:7a:da:b4:05:22:09:5e:c8:ea: 70:02:0c:b0:b6:fb:79:5f:82:f3:47:98:43:32:c2: b2:5c:4e:a8:51:84:55:60:8e:4b:0c:1a:b1:c7:fc: b1:88:8e:b7:aa:5f:55:f1:68:a8:92:dd:c0:b2:98: 1a:e3:8e:cd:6f:4f:10:61:43:62:5d:dd:51:d9:84: 69:50:0d:e1:b1:c9:10:63:a5:dd:86:dc:7e:b9:ff: 56:52:08:79:5c:58:48:7a:07:44:5d:0c:6a:68:16: f1:1b:6a:a1:3c:8a:42:f1:2f:19:28:d1:1c:a9:63: 06:e1:58:be:0c:f5:30:6a:d2:db:6a:0b:ba:65:c4: 0c:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A8:36:E9:35:96:04:03:E5:35:7A:08:8D:7C:85:FD:54:51:15:F7:1F X509v3 Authority Key Identifier: keyid:B8:A9:E4:5E:7E:2D:EA:66:24:14:0C:03:DE:02:5D:16:B9:1C:B9:DC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/ecdae0a5-b4f6-4e08-8beb-63ebe0853df3/0/B8A9E45E7E2DEA6624140C03DE025D16B91CB9DC.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B8A9E45E7E2DEA6624140C03DE025D16B91CB9DC.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ecdae0a5-b4f6-4e08-8beb-63ebe0853df3/0/B8A9E45E7E2DEA6624140C03DE025D16B91CB9DC.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 98:df:f4:90:57:20:82:bc:a8:51:1e:17:fc:a9:9b:c8:19:84: a1:bb:59:91:af:74:af:a9:f8:b1:a2:af:b1:8d:90:25:9e:b4: 1e:a5:67:2d:e8:bb:83:30:98:ba:26:7c:6f:af:b8:73:60:90: 82:c3:ae:2d:86:8e:9e:5c:8a:ed:d0:9b:9e:05:9b:7e:d2:5b: f7:f8:32:be:7a:65:fa:ea:81:3a:ca:94:78:1f:f8:7b:cc:d1: 58:5a:51:5d:75:e0:e4:a9:c8:7d:95:ca:58:f6:5c:21:94:fb: ee:5a:ab:ad:4e:4f:9a:31:72:29:86:ee:b1:df:b1:87:9a:e8: 6b:49:51:ed:44:66:c7:48:67:4e:95:18:10:f8:0c:3c:8b:f5: 7f:40:51:d8:f5:c9:54:16:b8:34:73:24:62:ec:03:5c:31:6f: 1e:b1:b1:eb:d0:64:f2:61:6f:74:a3:07:45:22:8e:84:cb:50: a9:49:0d:12:73:00:7e:ca:cb:8d:af:ff:c7:36:06:3d:db:47: 09:1c:a6:c6:87:00:eb:30:7e:8a:28:79:11:6a:84:00:58:f1: 0e:ed:46:70:4d:fb:ea:f0:d3:0c:d8:c2:d1:76:34:95:28:3d: 8d:4d:43:98:d4:51:b3:7f:40:08:f4:e7:de:e2:6f:df:7f:71: b5:60:cd:c7 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUZrl7t9CMRko8mjK/HEc9c1hJi4cwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjhBOUU0NUU3RTJERUE2NjI0MTQwQzAzREUwMjVEMTZC OTFDQjlEQzAeFw0yNTA3MjMwNTE3MDdaFw0yNTA3MjYwNjE0MDdaMDMxMTAvBgNV BAMTKEE4MzZFOTM1OTYwNDAzRTUzNTdBMDg4RDdDODVGRDU0NTExNUY3MUYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDDmiNxTr/ONDrv4dMF0c0HC0Y1 H/uaCD7MnfUPYgauy9x5gzl6WMV8lwYzLZ8hQ7B5z0t7bg6GpyDEChdh04eAZiV4 VXlnyNflBuLt1391IATOgKVR8D2SXjYFzD428gU+ti26vviQCiNf4bvD9ns4+fBV 75FHPowNHY8yQnratAUiCV7I6nACDLC2+3lfgvNHmEMywrJcTqhRhFVgjksMGrHH /LGIjreqX1XxaKiS3cCymBrjjs1vTxBhQ2Jd3VHZhGlQDeGxyRBjpd2G3H65/1ZS CHlcWEh6B0RdDGpoFvEbaqE8ikLxLxko0RypYwbhWL4M9TBq0ttqC7plxAzJAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUqDbpNZYEA+U1egiNfIX9VFEV9x8wHwYDVR0j BBgwFoAUuKnkXn4t6mYkFAwD3gJdFrkcudwwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l Y2RhZTBhNS1iNGY2LTRlMDgtOGJlYi02M2ViZTA4NTNkZjMvMC9COEE5RTQ1RTdF MkRFQTY2MjQxNDBDMDNERTAyNUQxNkI5MUNCOURDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQjhBOUU0NUU3RTJERUE2NjI0MTQwQzAzREUwMjVEMTZCOTFD QjlEQy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZWNkYWUwYTUtYjRmNi00ZTA4LThi ZWItNjNlYmUwODUzZGYzLzAvQjhBOUU0NUU3RTJERUE2NjI0MTQwQzAzREUwMjVE MTZCOTFDQjlEQy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJjf9JBXIIK8qFEeF/ypm8gZhKG7WZGvdK+p +LGir7GNkCWetB6lZy3ou4MwmLomfG+vuHNgkILDri2Gjp5ciu3Qm54Fm37SW/f4 Mr56ZfrqgTrKlHgf+HvM0VhaUV114OSpyH2Vylj2XCGU++5aq61OT5oxcimG7rHf sYea6GtJUe1EZsdIZ06VGBD4DDyL9X9AUdj1yVQWuDRzJGLsA1wxbx6xsevQZPJh b3SjB0UijoTLUKlJDRJzAH7Ky42v/8c2Bj3bRwkcpsaHAOswfoooeRFqhABY8Q7t RnBN++rw0wzYwtF2NJUoPY1NQ5jUUbN/QAj0597ib99/cbVgzcc= -----END CERTIFICATE-----Generated at Fri Jul 25 06:25:03 2025 by rpki-client