$ rpki-client -vvf repo-rpki.idnic.net/repo/33dc034f-3823-48af-953d-aaa873b0fb6a/0/8B30167CDA20FE7EDCFC647AC86B14BB27E430C8.mft File: 8B30167CDA20FE7EDCFC647AC86B14BB27E430C8.mft (raw, json) Hash identifier: qGG3Px4YvenrUhvszHDSKg4q503l7T19CYt5Mc70KCY= Subject key identifier: 1A:52:44:C5:9A:C5:C4:9B:B6:C6:7F:EC:A6:B2:A4:D2:95:B5:A1:07 Authority key identifier: 8B:30:16:7C:DA:20:FE:7E:DC:FC:64:7A:C8:6B:14:BB:27:E4:30:C8 Certificate issuer: /CN=8B30167CDA20FE7EDCFC647AC86B14BB27E430C8 Certificate serial: 0F985CF1CABAD188E269AD8ACC1086038140F755 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/8B30167CDA20FE7EDCFC647AC86B14BB27E430C8.cer Subject info access: rsync://repo-rpki.idnic.net/repo/33dc034f-3823-48af-953d-aaa873b0fb6a/0/8B30167CDA20FE7EDCFC647AC86B14BB27E430C8.mft Manifest number: 68 Signing time: Tue 22 Jul 2025 02:10:59 +0000 Manifest this update: Tue 22 Jul 2025 02:05:59 +0000 Manifest next update: Fri 25 Jul 2025 08:03:59 +0000 Files and hashes: 1: 8B30167CDA20FE7EDCFC647AC86B14BB27E430C8.crl (hash: qvxtX73AlvEqR4HNaLNNRPdRTsNVwypGKn37lBs8GQY=) 2: 3136302e3139312e3233352e302f32342d3234203d3e20313533313439.roa (hash: Y4GKLuZ6/D/gb3+zgd/F1pZuG94pp+jZOGf3U0vPYhA=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/33dc034f-3823-48af-953d-aaa873b0fb6a/0/8B30167CDA20FE7EDCFC647AC86B14BB27E430C8.crl rsync://repo-rpki.idnic.net/repo/33dc034f-3823-48af-953d-aaa873b0fb6a/0/8B30167CDA20FE7EDCFC647AC86B14BB27E430C8.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/8B30167CDA20FE7EDCFC647AC86B14BB27E430C8.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Jul 2025 08:03:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0f:98:5c:f1:ca:ba:d1:88:e2:69:ad:8a:cc:10:86:03:81:40:f7:55 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8B30167CDA20FE7EDCFC647AC86B14BB27E430C8 Validity Not Before: Jul 22 02:05:59 2025 GMT Not After : Jul 25 08:03:59 2025 GMT Subject: CN=1A5244C59AC5C49BB6C67FECA6B2A4D295B5A107 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:7c:7f:8d:23:a5:92:e3:a4:8d:b8:6a:7b:4a: 1c:d4:3f:3d:bd:89:ca:49:8c:48:e2:be:c7:41:a3: 65:34:ad:b4:32:42:df:e8:9c:a4:8e:c7:a5:e8:e2: 90:df:be:0f:d1:12:72:c2:00:f6:d7:e2:45:bd:42: e9:36:8c:6b:67:8a:47:6d:a2:6c:ad:e0:59:6c:d1: bc:67:2f:76:db:18:bb:87:d3:22:46:0d:2c:63:d2: bb:3c:47:58:1f:65:78:34:8a:c0:54:e6:50:8a:6b: df:31:03:13:6a:67:4e:28:8b:e8:85:dd:d9:de:27: c2:7c:45:4e:03:32:b0:15:29:04:59:bc:de:c3:2a: d9:88:e0:d1:12:50:4f:ee:82:8c:34:f1:0d:05:54: a7:ad:f5:84:95:47:9e:79:03:c9:5c:65:65:46:54: 90:dc:29:5f:a5:62:e2:e6:d4:1d:f8:71:cc:a6:a5: 64:49:a4:9d:85:11:11:75:e6:c1:2c:92:e7:1e:ea: 6d:c1:62:03:12:44:f5:9a:d4:a0:19:82:cb:9f:05: e9:fe:da:74:57:bf:67:bb:71:77:32:6c:35:bc:54: 1f:2d:eb:ca:e1:d3:81:6c:ef:94:68:1a:9b:eb:b0: dc:2e:a1:3e:70:87:e8:c9:b4:2b:60:d0:c7:d1:f4: 17:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:52:44:C5:9A:C5:C4:9B:B6:C6:7F:EC:A6:B2:A4:D2:95:B5:A1:07 X509v3 Authority Key Identifier: keyid:8B:30:16:7C:DA:20:FE:7E:DC:FC:64:7A:C8:6B:14:BB:27:E4:30:C8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/33dc034f-3823-48af-953d-aaa873b0fb6a/0/8B30167CDA20FE7EDCFC647AC86B14BB27E430C8.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/8B30167CDA20FE7EDCFC647AC86B14BB27E430C8.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/33dc034f-3823-48af-953d-aaa873b0fb6a/0/8B30167CDA20FE7EDCFC647AC86B14BB27E430C8.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6c:e2:e2:67:da:54:2d:38:55:37:bc:16:1a:a4:34:6f:4e:aa: 86:89:56:54:5b:c8:40:3d:88:1a:ff:7b:8f:fe:89:9d:98:e7: 65:57:b7:91:ea:f9:e0:f8:24:b1:c2:f5:d3:ce:69:bf:a3:70: d2:ae:67:1c:fa:dd:5d:bd:2b:d0:43:0d:c9:36:14:64:9a:6d: fa:ae:10:ff:eb:87:fb:48:c9:15:70:1e:e0:10:59:2f:55:c7: 39:a7:20:6d:ba:56:f7:f8:d5:67:33:b8:4a:05:e2:1d:a8:3b: 39:cb:c9:21:43:ad:8d:4d:69:f5:7d:e9:88:62:38:f8:05:27: e1:3a:75:96:e0:1f:4d:7f:c4:f9:1c:46:b5:03:53:29:73:a7: 0e:eb:6a:a8:14:86:07:c1:c3:c8:df:1b:f7:31:81:7f:85:6f: 63:e9:88:99:be:dd:20:a4:9e:58:09:07:8c:85:79:13:b1:89: 9f:8e:8e:2c:59:45:47:6f:ac:73:ab:88:1f:77:35:a5:21:39: 8e:69:9c:08:b4:19:7b:bc:e0:ba:8d:ed:dd:f9:7e:12:b2:7c: 17:63:98:d2:c2:72:4d:be:e1:c2:40:0a:79:9d:38:1d:68:ee: da:08:23:2c:82:7c:e3:f5:cc:3c:51:01:1f:7d:23:eb:39:c7: 7b:87:c3:c1 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUD5hc8cq60Yjiaa2KzBCGA4FA91UwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEIzMDE2N0NEQTIwRkU3RURDRkM2NDdBQzg2QjE0QkIy N0U0MzBDODAeFw0yNTA3MjIwMjA1NTlaFw0yNTA3MjUwODAzNTlaMDMxMTAvBgNV BAMTKDFBNTI0NEM1OUFDNUM0OUJCNkM2N0ZFQ0E2QjJBNEQyOTVCNUExMDcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCtfH+NI6WS46SNuGp7ShzUPz29 icpJjEjivsdBo2U0rbQyQt/onKSOx6Xo4pDfvg/REnLCAPbX4kW9Quk2jGtnikdt omyt4Fls0bxnL3bbGLuH0yJGDSxj0rs8R1gfZXg0isBU5lCKa98xAxNqZ04oi+iF 3dneJ8J8RU4DMrAVKQRZvN7DKtmI4NESUE/ugow08Q0FVKet9YSVR555A8lcZWVG VJDcKV+lYuLm1B34ccympWRJpJ2FERF15sEskuce6m3BYgMSRPWa1KAZgsufBen+ 2nRXv2e7cXcybDW8VB8t68rh04Fs75RoGpvrsNwuoT5wh+jJtCtg0MfR9BfxAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUGlJExZrFxJu2xn/sprKk0pW1oQcwHwYDVR0j BBgwFoAUizAWfNog/n7c/GR6yGsUuyfkMMgwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z M2RjMDM0Zi0zODIzLTQ4YWYtOTUzZC1hYWE4NzNiMGZiNmEvMC84QjMwMTY3Q0RB MjBGRTdFRENGQzY0N0FDODZCMTRCQjI3RTQzMEM4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvOEIzMDE2N0NEQTIwRkU3RURDRkM2NDdBQzg2QjE0QkIyN0U0 MzBDOC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMzNkYzAzNGYtMzgyMy00OGFmLTk1 M2QtYWFhODczYjBmYjZhLzAvOEIzMDE2N0NEQTIwRkU3RURDRkM2NDdBQzg2QjE0 QkIyN0U0MzBDOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGzi4mfaVC04VTe8FhqkNG9OqoaJVlRbyEA9 iBr/e4/+iZ2Y52VXt5Hq+eD4JLHC9dPOab+jcNKuZxz63V29K9BDDck2FGSabfqu EP/rh/tIyRVwHuAQWS9VxzmnIG26Vvf41WczuEoF4h2oOznLySFDrY1NafV96Yhi OPgFJ+E6dZbgH01/xPkcRrUDUylzpw7raqgUhgfBw8jfG/cxgX+Fb2PpiJm+3SCk nlgJB4yFeROxiZ+OjixZRUdvrHOriB93NaUhOY5pnAi0GXu84LqN7d35fhKyfBdj mNLCck2+4cJACnmdOB1o7toIIyyCfOP1zDxRAR99I+s5x3uHw8E= -----END CERTIFICATE-----Generated at Thu Jul 24 08:17:26 2025 by rpki-client