$ rpki-client -vvf repo-rpki.idnic.net/repo/2b69822c-2e22-48be-8ba2-634f582c2ecb/0/8FB177AE83526D713C1240D5CEFAF73844F7F4E5.mft File: 8FB177AE83526D713C1240D5CEFAF73844F7F4E5.mft (raw, json) Hash identifier: mYev+EUZ7U9vbS9apeFk4x4/8VPwcX1mHCECNIHE32Y= Subject key identifier: B8:9E:11:68:8D:13:F3:08:E9:95:2C:61:CB:FC:A1:AF:C2:15:52:2F Authority key identifier: 8F:B1:77:AE:83:52:6D:71:3C:12:40:D5:CE:FA:F7:38:44:F7:F4:E5 Certificate issuer: /CN=8FB177AE83526D713C1240D5CEFAF73844F7F4E5 Certificate serial: 17F35BF8404BE6C1C55C3E34EB3E63671AF07E49 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8FB177AE83526D713C1240D5CEFAF73844F7F4E5.cer Subject info access: rsync://repo-rpki.idnic.net/repo/2b69822c-2e22-48be-8ba2-634f582c2ecb/0/8FB177AE83526D713C1240D5CEFAF73844F7F4E5.mft Manifest number: 0508 Signing time: Thu 04 Sep 2025 22:52:09 +0000 Manifest this update: Thu 04 Sep 2025 22:47:09 +0000 Manifest next update: Mon 08 Sep 2025 08:40:09 +0000 Files and hashes: 1: 8FB177AE83526D713C1240D5CEFAF73844F7F4E5.crl (hash: LOPEOEC4mVUGBP7MpBNELYUJNzGG5F9XyL25n4AtSyM=) 2: 34332e3232392e32302e302f32322d3234203d3e203233393439.roa (hash: eFCW4mBhrgv32rd+aPVfExuT3QEaHahKTCkeKrhzQUs=) 3: 3130332e32342e3134382e302f32322d3234203d3e203233393439.roa (hash: ZdZBTzxEvF0Eo40CSK2hJ56qvhPrglPp9cbPLo54JU8=) 4: 323430313a653438303a3a2f33322d3438203d3e203233393439.roa (hash: q0Z2WqXpQvlzVZIU6Q59ptVgRkR649YYCAjkMQ1tqcE=) 5: 3230322e3135302e3132382e302f31392d3234203d3e203233393439.roa (hash: IcMuwwFWI9N+s2xXptufPfoLzyxZbJESlpNOp3hNLjk=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/2b69822c-2e22-48be-8ba2-634f582c2ecb/0/8FB177AE83526D713C1240D5CEFAF73844F7F4E5.crl rsync://repo-rpki.idnic.net/repo/2b69822c-2e22-48be-8ba2-634f582c2ecb/0/8FB177AE83526D713C1240D5CEFAF73844F7F4E5.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8FB177AE83526D713C1240D5CEFAF73844F7F4E5.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 08 Sep 2025 08:40:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 17:f3:5b:f8:40:4b:e6:c1:c5:5c:3e:34:eb:3e:63:67:1a:f0:7e:49 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8FB177AE83526D713C1240D5CEFAF73844F7F4E5 Validity Not Before: Sep 4 22:47:09 2025 GMT Not After : Sep 8 08:40:09 2025 GMT Subject: CN=B89E11688D13F308E9952C61CBFCA1AFC215522F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:d5:b9:20:b3:e0:16:20:d1:d5:45:38:56:35: a7:7e:08:39:31:48:58:97:e7:35:e8:13:0f:5d:b5: 2d:9f:2f:3e:37:1a:11:e7:f0:79:f9:64:ce:48:f5: 64:9a:2d:09:9b:53:69:1c:f9:36:9b:0b:d4:9f:3d: 58:22:ab:4f:0e:f3:de:f5:2c:f1:1f:3f:9c:78:c2: f0:89:0d:d9:da:92:b6:c8:7b:ae:ca:4c:27:6a:3c: 86:ce:ea:ca:f4:55:fb:4e:f2:b7:67:0b:52:48:35: a1:d1:3d:f5:22:a3:7b:d7:f6:76:1e:ca:2e:5f:0d: da:b1:05:05:66:85:59:85:55:ab:cd:34:24:92:f6: e5:c5:6f:8d:ea:af:40:17:73:f6:ce:21:98:87:cb: ce:75:91:46:a4:4f:84:d6:33:a0:be:e4:0b:cb:c5: 2b:0b:b7:57:59:39:87:b1:5e:60:64:67:2f:ed:1e: be:66:bc:7f:00:53:00:1f:f1:25:0d:77:16:8d:ae: c5:0a:3c:64:31:53:46:54:2c:bb:04:98:84:da:47: 36:71:3d:62:07:86:f3:ea:64:5d:7f:15:b7:2c:d0: 04:a7:15:a8:73:9c:90:13:14:b3:e5:d6:70:02:c6: b1:6a:3b:4a:29:38:1c:96:c6:3d:1f:9c:2f:fb:da: b2:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:9E:11:68:8D:13:F3:08:E9:95:2C:61:CB:FC:A1:AF:C2:15:52:2F X509v3 Authority Key Identifier: keyid:8F:B1:77:AE:83:52:6D:71:3C:12:40:D5:CE:FA:F7:38:44:F7:F4:E5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/2b69822c-2e22-48be-8ba2-634f582c2ecb/0/8FB177AE83526D713C1240D5CEFAF73844F7F4E5.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8FB177AE83526D713C1240D5CEFAF73844F7F4E5.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/2b69822c-2e22-48be-8ba2-634f582c2ecb/0/8FB177AE83526D713C1240D5CEFAF73844F7F4E5.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption e7:e0:1d:26:34:61:ba:3e:81:01:29:90:bd:36:60:86:c8:5a: 5c:90:a5:bc:a0:4b:37:52:84:42:1a:b0:51:1d:22:5b:eb:f9: 40:94:ec:59:71:dd:21:4a:ac:e1:55:75:89:cd:9f:73:0b:63: 36:a4:cf:ff:41:f1:77:19:10:d6:ce:e0:fc:58:31:d1:86:d0: cd:ec:65:da:83:c8:b9:4e:f5:5a:ae:50:90:e5:9e:23:cc:d7: 4c:24:e7:1d:3d:1d:68:1b:3f:78:fd:16:2c:12:3f:83:7e:f6: 23:9c:cf:18:6c:97:11:28:05:8c:4e:36:9a:e2:8d:ea:b1:0a: c1:54:dc:de:63:7a:a5:c9:6b:30:ef:fc:c0:a6:eb:ea:9a:6d: 87:86:68:bc:23:e5:63:3b:5a:97:42:1a:ce:59:7d:ce:80:af: c9:47:da:b0:c0:c8:a7:60:04:d5:90:e7:37:d7:32:a2:1b:69: f8:d7:c8:1d:6d:61:ec:91:2a:46:2f:b6:42:22:6a:54:04:86: 4b:89:91:32:86:8c:90:26:99:70:d7:71:59:c6:0c:42:c4:50: 96:be:a7:4f:49:02:d4:0c:43:a9:86:02:4d:48:5f:d3:5b:20: 87:7a:a6:e6:a9:66:2e:48:31:b9:84:7a:a6:46:9e:bb:ee:75: b4:53:b7:36 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUF/Nb+EBL5sHFXD406z5jZxrwfkkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEZCMTc3QUU4MzUyNkQ3MTNDMTI0MEQ1Q0VGQUY3Mzg0 NEY3RjRFNTAeFw0yNTA5MDQyMjQ3MDlaFw0yNTA5MDgwODQwMDlaMDMxMTAvBgNV BAMTKEI4OUUxMTY4OEQxM0YzMDhFOTk1MkM2MUNCRkNBMUFGQzIxNTUyMkYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC51bkgs+AWINHVRThWNad+CDkx SFiX5zXoEw9dtS2fLz43GhHn8Hn5ZM5I9WSaLQmbU2kc+TabC9SfPVgiq08O8971 LPEfP5x4wvCJDdnakrbIe67KTCdqPIbO6sr0VftO8rdnC1JINaHRPfUio3vX9nYe yi5fDdqxBQVmhVmFVavNNCSS9uXFb43qr0AXc/bOIZiHy851kUakT4TWM6C+5AvL xSsLt1dZOYexXmBkZy/tHr5mvH8AUwAf8SUNdxaNrsUKPGQxU0ZULLsEmITaRzZx PWIHhvPqZF1/Fbcs0ASnFahznJATFLPl1nACxrFqO0opOByWxj0fnC/72rJ7AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUuJ4RaI0T8wjplSxhy/yhr8IVUi8wHwYDVR0j BBgwFoAUj7F3roNSbXE8EkDVzvr3OET39OUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y YjY5ODIyYy0yZTIyLTQ4YmUtOGJhMi02MzRmNTgyYzJlY2IvMC84RkIxNzdBRTgz NTI2RDcxM0MxMjQwRDVDRUZBRjczODQ0RjdGNEU1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOEZCMTc3QUU4MzUyNkQ3MTNDMTI0MEQ1Q0VGQUY3Mzg0NEY3 RjRFNS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMmI2OTgyMmMtMmUyMi00OGJlLThi YTItNjM0ZjU4MmMyZWNiLzAvOEZCMTc3QUU4MzUyNkQ3MTNDMTI0MEQ1Q0VGQUY3 Mzg0NEY3RjRFNS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAOfgHSY0Ybo+gQEpkL02YIbIWlyQpbygSzdS hEIasFEdIlvr+UCU7Flx3SFKrOFVdYnNn3MLYzakz/9B8XcZENbO4PxYMdGG0M3s ZdqDyLlO9VquUJDlniPM10wk5x09HWgbP3j9FiwSP4N+9iOczxhslxEoBYxONpri jeqxCsFU3N5jeqXJazDv/MCm6+qabYeGaLwj5WM7WpdCGs5Zfc6Ar8lH2rDAyKdg BNWQ5zfXMqIbafjXyB1tYeyRKkYvtkIialQEhkuJkTKGjJAmmXDXcVnGDELEUJa+ p09JAtQMQ6mGAk1IX9NbIId6puapZi5IMbmEeqZGnrvudbRTtzY= -----END CERTIFICATE-----Generated at Fri Sep 5 10:34:33 2025 by rpki-client