$ rpki-client -vvf repo-rpki.idnic.net/repo/7f4b53d8-b2ff-4973-b1ac-6f85faeadbe5/0/B8D444C5B3184A4F8C8F199A432242C44E19EACB.mft File: B8D444C5B3184A4F8C8F199A432242C44E19EACB.mft (raw, json) Hash identifier: Ll3d2U4kpuzWZfWQg5HPFZK9K4ztc6A7Fz0s6cm6Brw= Subject key identifier: C8:6A:D0:30:C8:AE:82:F2:9C:1E:A2:82:09:BD:EB:23:46:B8:B8:5F Authority key identifier: B8:D4:44:C5:B3:18:4A:4F:8C:8F:19:9A:43:22:42:C4:4E:19:EA:CB Certificate issuer: /CN=B8D444C5B3184A4F8C8F199A432242C44E19EACB Certificate serial: 5EF795BDF023D335E383A2675E799EF28C6675E2 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/B8D444C5B3184A4F8C8F199A432242C44E19EACB.cer Subject info access: rsync://repo-rpki.idnic.net/repo/7f4b53d8-b2ff-4973-b1ac-6f85faeadbe5/0/B8D444C5B3184A4F8C8F199A432242C44E19EACB.mft Manifest number: BB Signing time: Sat 30 Aug 2025 06:41:58 +0000 Manifest this update: Sat 30 Aug 2025 06:36:58 +0000 Manifest next update: Tue 02 Sep 2025 09:34:58 +0000 Files and hashes: 1: 3136302e32352e33362e302f32332d3234203d3e20313532383332.roa (hash: 9wCzZBokUdgA6nDZL9CPWVnRmT/IcfmN/N7BSRO44UA=) 2: B8D444C5B3184A4F8C8F199A432242C44E19EACB.crl (hash: AhoMBL87jgUJ2sXK+svGeHoCIJ1WFrKkHCxE3WXAVa4=) 3: 3136302e32352e33362e302f32342d3234203d3e20313532383332.roa (hash: 1SJ9LA44FkXb29+CiOLplkV9zxTaWTCw2H5Ki5oako8=) 4: 3136302e32352e33372e302f32342d3234203d3e20313532383332.roa (hash: 2EK7G4yp/ra7lqC0aFCR3YZxswSuxrQQ2ZJJKEPHMZg=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/7f4b53d8-b2ff-4973-b1ac-6f85faeadbe5/0/B8D444C5B3184A4F8C8F199A432242C44E19EACB.crl rsync://repo-rpki.idnic.net/repo/7f4b53d8-b2ff-4973-b1ac-6f85faeadbe5/0/B8D444C5B3184A4F8C8F199A432242C44E19EACB.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/B8D444C5B3184A4F8C8F199A432242C44E19EACB.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 02 Sep 2025 02:27:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5e:f7:95:bd:f0:23:d3:35:e3:83:a2:67:5e:79:9e:f2:8c:66:75:e2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B8D444C5B3184A4F8C8F199A432242C44E19EACB Validity Not Before: Aug 30 06:36:58 2025 GMT Not After : Sep 2 09:34:58 2025 GMT Subject: CN=C86AD030C8AE82F29C1EA28209BDEB2346B8B85F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:eb:70:44:4b:e4:13:81:32:ae:c8:f0:23:1e:ab: 81:4c:2b:ce:3a:00:57:9c:70:65:82:91:23:bb:a7: 65:ac:6e:a5:db:63:6f:d5:51:5d:33:c8:0e:a6:fb: 9d:16:0d:59:91:6c:14:5c:35:d5:d1:9d:b1:ff:2a: 47:22:01:6c:10:f7:47:ef:dd:d0:66:b8:9e:db:f8: f1:26:aa:b6:39:71:61:6f:d7:1e:12:87:e0:79:7a: a9:7a:67:f4:c3:78:22:1b:f1:4d:05:0d:2d:4a:de: 32:88:62:41:7d:d4:78:82:d2:8a:fb:e2:50:e6:b9: 91:87:18:f0:45:f2:f2:64:f8:1c:a7:71:5c:51:a7: e9:05:3f:ce:a2:2d:dd:a5:c9:5e:2d:c9:45:06:f7: 17:df:1f:7b:29:ed:48:48:a2:26:19:1a:b6:85:df: 3e:60:44:5a:6e:ba:97:dd:2c:f3:2f:fd:e4:29:ec: 81:a5:02:94:ca:9a:98:12:4a:a8:86:a6:c8:bb:f4: 02:cc:3d:28:b4:0e:34:35:4a:8c:86:2c:29:10:a4: 5d:05:aa:3b:44:32:26:55:64:df:7f:cd:fc:e7:7f: 71:5e:3a:85:9d:47:39:d7:df:26:c7:7b:b7:8d:61: 19:65:76:e0:c9:02:a3:b4:3a:11:99:1c:78:4b:d9: 04:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C8:6A:D0:30:C8:AE:82:F2:9C:1E:A2:82:09:BD:EB:23:46:B8:B8:5F X509v3 Authority Key Identifier: keyid:B8:D4:44:C5:B3:18:4A:4F:8C:8F:19:9A:43:22:42:C4:4E:19:EA:CB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/7f4b53d8-b2ff-4973-b1ac-6f85faeadbe5/0/B8D444C5B3184A4F8C8F199A432242C44E19EACB.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/B8D444C5B3184A4F8C8F199A432242C44E19EACB.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/7f4b53d8-b2ff-4973-b1ac-6f85faeadbe5/0/B8D444C5B3184A4F8C8F199A432242C44E19EACB.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6f:5f:07:d1:94:c9:d1:2a:36:ae:2a:55:c3:b1:7b:c3:6c:c6: d5:ca:3a:b4:b8:39:b5:03:9f:4a:a6:a3:c4:03:e1:09:31:57: 2f:1d:85:96:4e:78:5f:c4:2e:23:a3:ec:56:c9:eb:00:de:72: c9:57:3a:3e:b2:40:c6:51:ad:86:5d:22:5f:78:1c:b6:96:e1: 70:ca:05:d4:8d:26:53:6e:c6:9e:7a:4d:3e:ae:73:62:28:6f: 08:11:1e:52:93:82:24:99:41:7b:4b:d0:62:85:9d:08:22:12: 4b:5d:7b:ed:06:5d:48:7d:e1:fd:63:84:2a:3c:1a:4b:23:a7: cd:f8:55:63:51:99:d9:00:81:56:9f:ad:8b:f5:a9:d1:99:65: 4e:ec:61:99:b3:4b:35:53:87:4b:d6:d5:ef:21:0f:51:ae:d0: 30:62:11:2e:b2:61:fb:3c:8f:f6:7a:34:45:46:e3:b0:6d:96: 89:47:fa:6c:4c:3a:28:65:e4:f7:bf:9b:13:c6:fe:a2:ad:1f: 57:aa:4a:d2:90:b5:0a:c3:7d:b3:78:e8:78:18:71:08:15:39: ff:be:b3:7f:44:fb:81:cf:15:bd:c7:d3:e9:a4:0a:37:31:0a: 51:48:07:14:7b:8b:1c:f7:38:2d:dc:ce:cc:4d:dc:ca:1d:1a: 11:23:5a:48 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUXveVvfAj0zXjg6JnXnme8oxmdeIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjhENDQ0QzVCMzE4NEE0RjhDOEYxOTlBNDMyMjQyQzQ0 RTE5RUFDQjAeFw0yNTA4MzAwNjM2NThaFw0yNTA5MDIwOTM0NThaMDMxMTAvBgNV BAMTKEM4NkFEMDMwQzhBRTgyRjI5QzFFQTI4MjA5QkRFQjIzNDZCOEI4NUYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDrcERL5BOBMq7I8CMeq4FMK846 AFeccGWCkSO7p2WsbqXbY2/VUV0zyA6m+50WDVmRbBRcNdXRnbH/KkciAWwQ90fv 3dBmuJ7b+PEmqrY5cWFv1x4Sh+B5eql6Z/TDeCIb8U0FDS1K3jKIYkF91HiC0or7 4lDmuZGHGPBF8vJk+ByncVxRp+kFP86iLd2lyV4tyUUG9xffH3sp7UhIoiYZGraF 3z5gRFpuupfdLPMv/eQp7IGlApTKmpgSSqiGpsi79ALMPSi0DjQ1SoyGLCkQpF0F qjtEMiZVZN9/zfznf3FeOoWdRznX3ybHe7eNYRllduDJAqO0OhGZHHhL2QQ1AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUyGrQMMiugvKcHqKCCb3rI0a4uF8wHwYDVR0j BBgwFoAUuNRExbMYSk+MjxmaQyJCxE4Z6sswDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 ZjRiNTNkOC1iMmZmLTQ5NzMtYjFhYy02Zjg1ZmFlYWRiZTUvMC9COEQ0NDRDNUIz MTg0QTRGOEM4RjE5OUE0MzIyNDJDNDRFMTlFQUNCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvQjhENDQ0QzVCMzE4NEE0RjhDOEYxOTlBNDMyMjQyQzQ0RTE5 RUFDQi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vN2Y0YjUzZDgtYjJmZi00OTczLWIx YWMtNmY4NWZhZWFkYmU1LzAvQjhENDQ0QzVCMzE4NEE0RjhDOEYxOTlBNDMyMjQy QzQ0RTE5RUFDQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAG9fB9GUydEqNq4qVcOxe8NsxtXKOrS4ObUD n0qmo8QD4QkxVy8dhZZOeF/ELiOj7FbJ6wDecslXOj6yQMZRrYZdIl94HLaW4XDK BdSNJlNuxp56TT6uc2IobwgRHlKTgiSZQXtL0GKFnQgiEktde+0GXUh94f1jhCo8 Gksjp834VWNRmdkAgVafrYv1qdGZZU7sYZmzSzVTh0vW1e8hD1Gu0DBiES6yYfs8 j/Z6NEVG47BtlolH+mxMOihl5Pe/mxPG/qKtH1eqStKQtQrDfbN46HgYcQgVOf++ s39E+4HPFb3H0+mkCjcxClFIBxR7ixz3OC3czsxN3ModGhEjWkg= -----END CERTIFICATE-----Generated at Sun Aug 31 13:49:38 2025 by rpki-client