$ rpki-client -vvf repo-rpki.idnic.net/repo/fba48e4e-fc95-4acf-beac-d93a0f694421/0/8659BE8500DEBB314448F1412FA1E264025A4148.mft File: 8659BE8500DEBB314448F1412FA1E264025A4148.mft (raw, json) Hash identifier: 9udXypyRlH95BZlN1y2xihv0K9y5WawZADR2IpplHj0= Subject key identifier: 8D:D9:69:FA:32:F8:92:FC:92:5C:8E:03:1C:8B:A3:BB:E5:1A:8A:0A Authority key identifier: 86:59:BE:85:00:DE:BB:31:44:48:F1:41:2F:A1:E2:64:02:5A:41:48 Certificate issuer: /CN=8659BE8500DEBB314448F1412FA1E264025A4148 Certificate serial: 1E2401A1F125FD843B2E9D94E48649088595E92A Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8659BE8500DEBB314448F1412FA1E264025A4148.cer Subject info access: rsync://repo-rpki.idnic.net/repo/fba48e4e-fc95-4acf-beac-d93a0f694421/0/8659BE8500DEBB314448F1412FA1E264025A4148.mft Manifest number: 01B9 Signing time: Sat 19 Jul 2025 17:50:58 +0000 Manifest this update: Sat 19 Jul 2025 17:45:58 +0000 Manifest next update: Wed 23 Jul 2025 02:39:58 +0000 Files and hashes: 1: 323030313a6466313a316263303a3a2f34382d3438203d3e20313431393339.roa (hash: 7sEaXq5J0k7o+6aixvbPc/tcT7LYiqm7IslpQ0Vezhk=) 2: 3130332e3136342e3139322e302f32332d3234203d3e20313431393339.roa (hash: cJnOaGwkWse+gaN5dpuLlcDR+J9MkVOMmGejBDI/J0U=) 3: 8659BE8500DEBB314448F1412FA1E264025A4148.crl (hash: mC2YPROrPIz/VwG74JtM1LS0Ol3DwTCHIuZJQQC0lC0=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/fba48e4e-fc95-4acf-beac-d93a0f694421/0/8659BE8500DEBB314448F1412FA1E264025A4148.crl rsync://repo-rpki.idnic.net/repo/fba48e4e-fc95-4acf-beac-d93a0f694421/0/8659BE8500DEBB314448F1412FA1E264025A4148.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8659BE8500DEBB314448F1412FA1E264025A4148.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 23 Jul 2025 02:39:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1e:24:01:a1:f1:25:fd:84:3b:2e:9d:94:e4:86:49:08:85:95:e9:2a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8659BE8500DEBB314448F1412FA1E264025A4148 Validity Not Before: Jul 19 17:45:58 2025 GMT Not After : Jul 23 02:39:58 2025 GMT Subject: CN=8DD969FA32F892FC925C8E031C8BA3BBE51A8A0A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:2c:c7:cc:08:1e:37:1f:0c:0d:bf:b8:e9:0f: c3:15:b7:83:b5:fb:f1:55:b8:11:cc:34:35:69:5f: aa:9f:c6:50:e3:4d:cc:15:cb:c7:02:2f:1c:0b:9a: 64:c2:a5:00:8a:72:7c:38:32:4c:ea:e8:a2:d2:f0: 73:5d:ce:55:bd:24:e0:7f:f0:6a:b5:80:6b:eb:42: 76:1c:b4:b8:70:c0:87:65:6d:26:98:de:08:1c:88: 58:49:ed:96:73:2d:3c:e2:9f:ee:2a:5f:3d:97:fc: 00:7c:0e:3b:c0:06:89:6f:43:b4:84:d1:72:34:df: bc:0c:68:f3:c6:82:ee:19:f4:f3:a2:5e:cf:d7:5f: 6b:49:95:bb:a0:ba:9f:90:d2:e3:13:e1:6c:12:7d: 73:4b:5a:29:d5:45:fa:01:fe:ba:6b:83:9b:8a:38: ae:0b:b7:47:9f:ee:46:a2:74:49:2e:5e:59:4f:31: c1:4e:0b:b9:3e:74:5e:db:f9:ac:05:6a:f5:cd:25: 9d:12:b9:ca:37:08:fa:63:a7:16:27:54:16:3c:9a: 9b:52:ab:3d:a1:dd:a4:95:fe:18:18:e8:1f:f0:9c: 01:05:eb:7c:1f:a5:32:b1:69:25:ed:ce:26:8c:ba: 84:43:f6:b9:42:73:df:42:49:c9:c1:1a:46:96:61: 64:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8D:D9:69:FA:32:F8:92:FC:92:5C:8E:03:1C:8B:A3:BB:E5:1A:8A:0A X509v3 Authority Key Identifier: keyid:86:59:BE:85:00:DE:BB:31:44:48:F1:41:2F:A1:E2:64:02:5A:41:48 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/fba48e4e-fc95-4acf-beac-d93a0f694421/0/8659BE8500DEBB314448F1412FA1E264025A4148.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8659BE8500DEBB314448F1412FA1E264025A4148.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/fba48e4e-fc95-4acf-beac-d93a0f694421/0/8659BE8500DEBB314448F1412FA1E264025A4148.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b3:06:7d:bc:67:59:2f:01:77:14:b6:1c:48:17:72:d6:72:70: 5d:bc:ea:02:29:9d:7f:09:6d:18:5f:2e:8f:3c:5f:a3:1c:9e: cc:53:fe:08:c1:77:e3:58:b4:be:59:03:7e:0d:32:08:a7:5b: 67:61:07:5b:5b:ac:7c:5d:79:fd:3c:c9:4f:04:51:51:b7:81: f7:47:12:a2:e3:15:2c:bc:23:11:4e:d9:4f:de:78:00:ed:a8: 70:4a:d7:a0:fd:22:88:e2:1a:1c:d5:52:04:5a:20:3c:0c:69: a4:87:e5:17:79:da:bf:4d:d6:ad:5a:ed:44:c7:60:f7:1c:92: 82:5e:5b:80:4f:84:8e:2c:22:59:a8:f8:bd:b0:31:e9:ba:1c: 0a:00:b1:b1:57:27:e3:3d:ac:9a:3c:94:20:60:fa:d5:05:94: 81:98:64:33:e3:aa:f4:91:a5:68:fa:e0:3c:56:f2:8b:60:6a: 42:d8:77:a6:a1:be:85:07:f6:72:7a:39:4a:81:42:0d:1a:e4: 67:22:9d:85:72:68:66:41:31:53:7f:f9:50:e3:9f:9e:39:42: 10:f1:9c:25:ed:db:4f:bd:e4:1d:fd:83:c6:b4:53:40:3e:66: 76:98:76:99:2f:46:9e:a3:cb:b2:7c:14:3d:8f:60:4a:71:8f: d5:d9:b4:a9 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUHiQBofEl/YQ7Lp2U5IZJCIWV6SowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODY1OUJFODUwMERFQkIzMTQ0NDhGMTQxMkZBMUUyNjQw MjVBNDE0ODAeFw0yNTA3MTkxNzQ1NThaFw0yNTA3MjMwMjM5NThaMDMxMTAvBgNV BAMTKDhERDk2OUZBMzJGODkyRkM5MjVDOEUwMzFDOEJBM0JCRTUxQThBMEEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDPLMfMCB43HwwNv7jpD8MVt4O1 +/FVuBHMNDVpX6qfxlDjTcwVy8cCLxwLmmTCpQCKcnw4Mkzq6KLS8HNdzlW9JOB/ 8Gq1gGvrQnYctLhwwIdlbSaY3ggciFhJ7ZZzLTzin+4qXz2X/AB8DjvABolvQ7SE 0XI037wMaPPGgu4Z9POiXs/XX2tJlbugup+Q0uMT4WwSfXNLWinVRfoB/rprg5uK OK4Lt0ef7kaidEkuXllPMcFOC7k+dF7b+awFavXNJZ0Suco3CPpjpxYnVBY8mptS qz2h3aSV/hgY6B/wnAEF63wfpTKxaSXtziaMuoRD9rlCc99CScnBGkaWYWRBAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUjdlp+jL4kvySXI4DHIuju+UaigowHwYDVR0j BBgwFoAUhlm+hQDeuzFESPFBL6HiZAJaQUgwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m YmE0OGU0ZS1mYzk1LTRhY2YtYmVhYy1kOTNhMGY2OTQ0MjEvMC84NjU5QkU4NTAw REVCQjMxNDQ0OEYxNDEyRkExRTI2NDAyNUE0MTQ4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvODY1OUJFODUwMERFQkIzMTQ0NDhGMTQxMkZBMUUyNjQwMjVB NDE0OC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZmJhNDhlNGUtZmM5NS00YWNmLWJl YWMtZDkzYTBmNjk0NDIxLzAvODY1OUJFODUwMERFQkIzMTQ0NDhGMTQxMkZBMUUy NjQwMjVBNDE0OC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALMGfbxnWS8BdxS2HEgXctZycF286gIpnX8J bRhfLo88X6McnsxT/gjBd+NYtL5ZA34NMginW2dhB1tbrHxdef08yU8EUVG3gfdH EqLjFSy8IxFO2U/eeADtqHBK16D9IojiGhzVUgRaIDwMaaSH5Rd52r9N1q1a7UTH YPcckoJeW4BPhI4sIlmo+L2wMem6HAoAsbFXJ+M9rJo8lCBg+tUFlIGYZDPjqvSR pWj64DxW8otgakLYd6ahvoUH9nJ6OUqBQg0a5GcinYVyaGZBMVN/+VDjn545QhDx nCXt20+95B39g8a0U0A+ZnaYdpkvRp6jy7J8FD2PYEpxj9XZtKk= -----END CERTIFICATE-----Generated at Mon Jul 21 07:36:52 2025 by rpki-client