$ rpki-client -vvf repo-rpki.idnic.net/repo/58b58aee-e8ee-4287-a2b8-616155c3eec2/0/8BE1F50A90938AE6D4E6D7A6A2A22F003B072ED8.mft File: 8BE1F50A90938AE6D4E6D7A6A2A22F003B072ED8.mft (raw, json) Hash identifier: kixK32a/jwup6WIIqa1Qb0O1GZ6XZc0Y/ZoM7U/NpAY= Subject key identifier: 4D:B2:A8:E6:9E:3D:DB:0F:F1:69:7E:60:EB:48:1C:14:01:EE:28:08 Authority key identifier: 8B:E1:F5:0A:90:93:8A:E6:D4:E6:D7:A6:A2:A2:2F:00:3B:07:2E:D8 Certificate issuer: /CN=8BE1F50A90938AE6D4E6D7A6A2A22F003B072ED8 Certificate serial: 4384B5EE9A4F730FCED5905C6D18AADE5F5B60E1 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8BE1F50A90938AE6D4E6D7A6A2A22F003B072ED8.cer Subject info access: rsync://repo-rpki.idnic.net/repo/58b58aee-e8ee-4287-a2b8-616155c3eec2/0/8BE1F50A90938AE6D4E6D7A6A2A22F003B072ED8.mft Manifest number: 02A8 Signing time: Wed 04 Jun 2025 19:01:44 +0000 Manifest this update: Wed 04 Jun 2025 18:56:44 +0000 Manifest next update: Sat 07 Jun 2025 22:13:44 +0000 Files and hashes: 1: 8BE1F50A90938AE6D4E6D7A6A2A22F003B072ED8.crl (hash: IQDD1ZAP73RB0NQ9FKFYsNbXUXn2oslVBImj4pA5IYc=) 2: 3130332e392e3134342e302f32322d3234203d3e20313331373133.roa (hash: nMzdVlm6ZGdAK1jozyzuffucbvzwRK+67XvaYs5SssY=) 3: 323430373a363338303a3a2f33322d3430203d3e20313331373133.roa (hash: n6EnpwYdLmSL8WaVyIXMn7tuvtOoZcAKI7Mz6TbpG8E=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/58b58aee-e8ee-4287-a2b8-616155c3eec2/0/8BE1F50A90938AE6D4E6D7A6A2A22F003B072ED8.crl rsync://repo-rpki.idnic.net/repo/58b58aee-e8ee-4287-a2b8-616155c3eec2/0/8BE1F50A90938AE6D4E6D7A6A2A22F003B072ED8.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8BE1F50A90938AE6D4E6D7A6A2A22F003B072ED8.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 22:13:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 43:84:b5:ee:9a:4f:73:0f:ce:d5:90:5c:6d:18:aa:de:5f:5b:60:e1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8BE1F50A90938AE6D4E6D7A6A2A22F003B072ED8 Validity Not Before: Jun 4 18:56:44 2025 GMT Not After : Jun 7 22:13:44 2025 GMT Subject: CN=4DB2A8E69E3DDB0FF1697E60EB481C1401EE2808 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:e7:e8:b0:b4:1f:62:e9:77:2b:13:41:14:19: 4c:93:45:82:59:1a:b9:f0:0e:6d:32:07:c3:25:40: 9f:32:75:f4:82:cb:c3:5a:2b:be:95:d2:72:5a:8e: c4:74:17:11:97:db:56:9c:a4:39:36:1f:74:1f:b6: 6c:68:12:a5:b9:68:92:74:10:c4:39:e6:1f:aa:81: 8c:bc:ef:59:e0:1f:5f:1e:af:5c:0a:7f:e0:19:6d: 63:7c:0e:28:bf:37:68:3f:81:ce:c4:e7:ed:6e:34: d9:10:f0:d4:ad:4c:e3:0a:db:43:04:13:d6:36:02: 71:7b:fb:86:db:1f:5b:7f:66:95:53:4f:7e:bd:db: a8:c9:61:c2:8c:68:2c:32:e1:62:88:b7:d2:0f:a0: c7:d3:6d:b5:69:92:f2:42:2e:f2:d0:73:75:bb:f5: 17:ab:9f:86:51:42:0c:57:9c:60:db:9d:fc:e8:57: 1f:4c:89:b5:e5:35:81:73:7d:a1:03:db:89:ec:be: b8:2a:24:fa:42:fa:30:ef:aa:9f:84:29:d9:b8:b4: 33:c6:a3:34:d5:d7:a5:f0:2a:83:1c:d7:0d:33:ce: eb:da:ad:ef:8e:9e:f7:82:ca:53:c5:3e:1b:51:80: f9:44:36:a9:9f:80:fa:8c:be:94:33:2f:29:6c:84: c3:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4D:B2:A8:E6:9E:3D:DB:0F:F1:69:7E:60:EB:48:1C:14:01:EE:28:08 X509v3 Authority Key Identifier: keyid:8B:E1:F5:0A:90:93:8A:E6:D4:E6:D7:A6:A2:A2:2F:00:3B:07:2E:D8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/58b58aee-e8ee-4287-a2b8-616155c3eec2/0/8BE1F50A90938AE6D4E6D7A6A2A22F003B072ED8.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8BE1F50A90938AE6D4E6D7A6A2A22F003B072ED8.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/58b58aee-e8ee-4287-a2b8-616155c3eec2/0/8BE1F50A90938AE6D4E6D7A6A2A22F003B072ED8.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 46:24:20:b3:e1:fe:2a:f8:de:d9:d4:3c:e5:49:6d:cf:02:8f: d4:c4:01:88:f1:0f:61:5b:14:1b:15:05:b7:94:0c:7e:08:06: 30:c1:1e:85:fd:98:02:bf:d8:81:f8:06:38:1e:59:f2:89:bc: 4d:29:57:12:b3:97:55:35:0d:53:6c:ab:8e:64:79:4b:12:be: 13:aa:a1:9b:9d:fb:89:07:2f:ae:af:a5:71:76:49:8b:3e:aa: b5:d2:cc:b6:88:8d:6c:81:46:67:8d:32:ac:03:17:88:42:df: 76:55:3f:01:ef:e9:30:85:f6:a0:af:4d:93:2b:72:32:c3:eb: d6:96:d0:6f:c2:23:45:bc:5b:d0:c1:c8:ae:8e:f2:52:1c:05: 88:3c:52:ef:ce:7a:1f:2c:5e:60:62:f4:4a:e8:6b:e3:74:f6: 98:53:a8:d5:52:3a:f5:9b:b5:b2:31:a9:63:84:63:04:4c:13: b5:d6:fe:78:55:a1:3f:2c:0d:2b:93:1c:83:17:28:5c:8a:73: 21:39:f9:2f:7e:55:76:a6:fc:f8:70:ad:fc:da:4c:7d:8c:cf: ed:30:6f:c9:2e:5a:51:d6:2d:96:ad:52:c4:1f:dd:d6:e6:9a: 98:6f:6b:ad:5c:97:a5:f5:a8:32:23:28:32:50:ce:a4:15:92: a6:4f:19:98 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUQ4S17ppPcw/O1ZBcbRiq3l9bYOEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEJFMUY1MEE5MDkzOEFFNkQ0RTZEN0E2QTJBMjJGMDAz QjA3MkVEODAeFw0yNTA2MDQxODU2NDRaFw0yNTA2MDcyMjEzNDRaMDMxMTAvBgNV BAMTKDREQjJBOEU2OUUzRERCMEZGMTY5N0U2MEVCNDgxQzE0MDFFRTI4MDgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC25+iwtB9i6XcrE0EUGUyTRYJZ GrnwDm0yB8MlQJ8ydfSCy8NaK76V0nJajsR0FxGX21acpDk2H3QftmxoEqW5aJJ0 EMQ55h+qgYy871ngH18er1wKf+AZbWN8Dii/N2g/gc7E5+1uNNkQ8NStTOMK20ME E9Y2AnF7+4bbH1t/ZpVTT36926jJYcKMaCwy4WKIt9IPoMfTbbVpkvJCLvLQc3W7 9Rern4ZRQgxXnGDbnfzoVx9MibXlNYFzfaED24nsvrgqJPpC+jDvqp+EKdm4tDPG ozTV16XwKoMc1w0zzuvare+OnveCylPFPhtRgPlENqmfgPqMvpQzLylshMOpAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUTbKo5p492w/xaX5g60gcFAHuKAgwHwYDVR0j BBgwFoAUi+H1CpCTiubU5temoqIvADsHLtgwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 OGI1OGFlZS1lOGVlLTQyODctYTJiOC02MTYxNTVjM2VlYzIvMC84QkUxRjUwQTkw OTM4QUU2RDRFNkQ3QTZBMkEyMkYwMDNCMDcyRUQ4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOEJFMUY1MEE5MDkzOEFFNkQ0RTZEN0E2QTJBMjJGMDAzQjA3 MkVEOC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNThiNThhZWUtZThlZS00Mjg3LWEy YjgtNjE2MTU1YzNlZWMyLzAvOEJFMUY1MEE5MDkzOEFFNkQ0RTZEN0E2QTJBMjJG MDAzQjA3MkVEOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEYkILPh/ir43tnUPOVJbc8Cj9TEAYjxD2Fb FBsVBbeUDH4IBjDBHoX9mAK/2IH4BjgeWfKJvE0pVxKzl1U1DVNsq45keUsSvhOq oZud+4kHL66vpXF2SYs+qrXSzLaIjWyBRmeNMqwDF4hC33ZVPwHv6TCF9qCvTZMr cjLD69aW0G/CI0W8W9DByK6O8lIcBYg8Uu/Oeh8sXmBi9Eroa+N09phTqNVSOvWb tbIxqWOEYwRME7XW/nhVoT8sDSuTHIMXKFyKcyE5+S9+VXam/PhwrfzaTH2Mz+0w b8kuWlHWLZatUsQf3dbmmphva61cl6X1qDIjKDJQzqQVkqZPGZg= -----END CERTIFICATE-----Generated at Fri Jun 6 16:32:32 2025 by rpki-client