$ rpki-client -vvf repo-rpki.idnic.net/repo/99e3b1d8-bf19-46e3-b609-0d160988dac8/0/8B266458C7DEFCF6926DCDF453C84A1D42E8D989.mft File: 8B266458C7DEFCF6926DCDF453C84A1D42E8D989.mft (raw, json) Hash identifier: nqP8gpUd1IEoDviRmeG8oE65yHh5hL7FxOmEICqe/Jo= Subject key identifier: A9:CB:7D:02:12:DF:69:72:90:EB:8E:99:DD:F1:BC:E9:A5:1A:31:6E Authority key identifier: 8B:26:64:58:C7:DE:FC:F6:92:6D:CD:F4:53:C8:4A:1D:42:E8:D9:89 Certificate issuer: /CN=8B266458C7DEFCF6926DCDF453C84A1D42E8D989 Certificate serial: 0A32A84072D2122A7AACBE9BB0B654C909479D6A Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8B266458C7DEFCF6926DCDF453C84A1D42E8D989.cer Subject info access: rsync://repo-rpki.idnic.net/repo/99e3b1d8-bf19-46e3-b609-0d160988dac8/0/8B266458C7DEFCF6926DCDF453C84A1D42E8D989.mft Manifest number: 0504 Signing time: Sat 06 Sep 2025 19:01:20 +0000 Manifest this update: Sat 06 Sep 2025 18:56:20 +0000 Manifest next update: Tue 09 Sep 2025 22:08:20 +0000 Files and hashes: 1: 8B266458C7DEFCF6926DCDF453C84A1D42E8D989.crl (hash: gqIrbfGvoFgiL3+cVKVdI+Tmbf9ZCxrlRFvcG3vZW1Y=) 2: 3131392e3233352e3234382e302f32312d3234203d3e203435313436.roa (hash: Gj57tszoKsJPmI3zlTc36/bgp48+5kiHS2p+sUe73DE=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/99e3b1d8-bf19-46e3-b609-0d160988dac8/0/8B266458C7DEFCF6926DCDF453C84A1D42E8D989.crl rsync://repo-rpki.idnic.net/repo/99e3b1d8-bf19-46e3-b609-0d160988dac8/0/8B266458C7DEFCF6926DCDF453C84A1D42E8D989.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8B266458C7DEFCF6926DCDF453C84A1D42E8D989.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 09 Sep 2025 22:08:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0a:32:a8:40:72:d2:12:2a:7a:ac:be:9b:b0:b6:54:c9:09:47:9d:6a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8B266458C7DEFCF6926DCDF453C84A1D42E8D989 Validity Not Before: Sep 6 18:56:20 2025 GMT Not After : Sep 9 22:08:20 2025 GMT Subject: CN=A9CB7D0212DF697290EB8E99DDF1BCE9A51A316E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:c9:08:fc:c5:0d:f8:4c:88:cd:16:8c:37:85: 84:10:03:fc:de:45:c4:56:fe:ad:61:17:0b:d6:b1: 70:70:1f:b9:42:49:b5:bd:3b:6a:63:1d:15:e9:c3: 40:48:9c:4f:0f:86:88:a3:91:cf:36:57:e3:48:1f: 34:e4:79:83:e0:f2:72:eb:23:e8:fa:1f:d9:aa:42: 43:3e:5d:73:3e:d6:4d:e8:99:00:9f:08:1f:58:b0: b1:40:63:8e:d7:e7:7e:53:4d:b7:8f:b4:cc:98:fb: c6:4b:6b:33:79:e1:9e:0f:ab:7e:24:84:11:32:8d: b3:2c:7f:4a:84:ab:e2:e3:91:95:65:1a:b5:bd:6b: a3:9d:e8:52:e7:ea:01:74:93:25:fb:96:f1:9c:ef: ef:fc:b5:17:aa:c1:16:33:26:3f:e9:9d:9c:68:ed: bb:62:b3:fb:63:9d:6f:25:90:45:8a:13:c3:3b:ed: d4:6c:4f:59:3b:f8:fc:05:f3:a3:a9:4c:b9:3d:ef: 6d:ac:cd:c1:ce:9b:d5:6c:cd:76:cf:66:bc:75:3c: 5b:69:3f:2c:f5:d0:32:b8:04:6c:66:69:eb:97:78: d5:56:36:e6:cd:4b:2e:c8:f6:03:25:ff:17:8e:40: b4:6e:3a:59:9b:8d:4f:1d:a5:c0:1c:85:ab:9d:c7: dc:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:CB:7D:02:12:DF:69:72:90:EB:8E:99:DD:F1:BC:E9:A5:1A:31:6E X509v3 Authority Key Identifier: keyid:8B:26:64:58:C7:DE:FC:F6:92:6D:CD:F4:53:C8:4A:1D:42:E8:D9:89 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/99e3b1d8-bf19-46e3-b609-0d160988dac8/0/8B266458C7DEFCF6926DCDF453C84A1D42E8D989.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8B266458C7DEFCF6926DCDF453C84A1D42E8D989.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/99e3b1d8-bf19-46e3-b609-0d160988dac8/0/8B266458C7DEFCF6926DCDF453C84A1D42E8D989.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5e:a7:20:82:eb:db:bf:1f:f7:93:0a:ac:b1:d1:58:40:ab:61: 27:00:3c:0e:55:92:42:24:fc:e9:82:6b:ba:80:95:49:85:97: 1c:92:51:82:7e:46:8d:da:7d:64:f9:59:1b:45:17:f1:bf:32: 1c:15:b8:02:7f:f6:fa:dc:a6:de:56:fa:64:fe:6c:b6:22:09: 3c:b7:d2:0a:f8:73:2d:ff:60:d3:d4:02:df:75:ed:b4:46:eb: c0:b5:64:4f:6c:12:57:36:e1:a8:e5:ee:3e:22:18:fe:c2:84: 8f:88:67:10:d4:b0:e7:80:13:b3:75:2e:25:94:86:99:f0:32: a5:06:26:3d:90:67:98:f3:e8:d5:01:26:66:e2:a9:5b:c5:cb: 39:bc:b3:1e:10:15:73:9a:11:47:a6:f0:8e:01:1d:5a:2a:61: eb:8d:57:19:0f:3e:41:7c:d5:68:9a:50:72:54:44:94:a8:61: 20:98:8d:be:60:a9:e9:7a:2c:bf:ca:f8:1c:9e:44:b6:4f:e9: 6f:8a:72:a7:d7:36:5d:7f:ea:3f:9c:8d:72:b4:53:fd:6e:9b: 50:24:d7:8b:2f:48:c7:1b:d1:8d:d6:28:23:07:5a:a3:3f:ec: 78:05:78:bc:06:f2:1e:d2:6a:41:39:2d:e8:47:d1:80:a1:9b: 4a:47:17:97 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUCjKoQHLSEip6rL6bsLZUyQlHnWowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEIyNjY0NThDN0RFRkNGNjkyNkRDREY0NTNDODRBMUQ0 MkU4RDk4OTAeFw0yNTA5MDYxODU2MjBaFw0yNTA5MDkyMjA4MjBaMDMxMTAvBgNV BAMTKEE5Q0I3RDAyMTJERjY5NzI5MEVCOEU5OURERjFCQ0U5QTUxQTMxNkUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCpyQj8xQ34TIjNFow3hYQQA/ze RcRW/q1hFwvWsXBwH7lCSbW9O2pjHRXpw0BInE8Phoijkc82V+NIHzTkeYPg8nLr I+j6H9mqQkM+XXM+1k3omQCfCB9YsLFAY47X535TTbePtMyY+8ZLazN54Z4Pq34k hBEyjbMsf0qEq+LjkZVlGrW9a6Od6FLn6gF0kyX7lvGc7+/8tReqwRYzJj/pnZxo 7btis/tjnW8lkEWKE8M77dRsT1k7+PwF86OpTLk9722szcHOm9VszXbPZrx1PFtp Pyz10DK4BGxmaeuXeNVWNubNSy7I9gMl/xeOQLRuOlmbjU8dpcAchaudx9zXAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUqct9AhLfaXKQ646Z3fG86aUaMW4wHwYDVR0j BBgwFoAUiyZkWMfe/PaSbc30U8hKHULo2YkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 OWUzYjFkOC1iZjE5LTQ2ZTMtYjYwOS0wZDE2MDk4OGRhYzgvMC84QjI2NjQ1OEM3 REVGQ0Y2OTI2RENERjQ1M0M4NEExRDQyRThEOTg5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOEIyNjY0NThDN0RFRkNGNjkyNkRDREY0NTNDODRBMUQ0MkU4 RDk4OS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOTllM2IxZDgtYmYxOS00NmUzLWI2 MDktMGQxNjA5ODhkYWM4LzAvOEIyNjY0NThDN0RFRkNGNjkyNkRDREY0NTNDODRB MUQ0MkU4RDk4OS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAF6nIILr278f95MKrLHRWECrYScAPA5VkkIk /OmCa7qAlUmFlxySUYJ+Ro3afWT5WRtFF/G/MhwVuAJ/9vrcpt5W+mT+bLYiCTy3 0gr4cy3/YNPUAt917bRG68C1ZE9sElc24ajl7j4iGP7ChI+IZxDUsOeAE7N1LiWU hpnwMqUGJj2QZ5jz6NUBJmbiqVvFyzm8sx4QFXOaEUem8I4BHVoqYeuNVxkPPkF8 1WiaUHJURJSoYSCYjb5gqel6LL/K+ByeRLZP6W+KcqfXNl1/6j+cjXK0U/1um1Ak 14svSMcb0Y3WKCMHWqM/7HgFeLwG8h7SakE5LehH0YChm0pHF5c= -----END CERTIFICATE-----Generated at Sun Sep 7 15:29:10 2025 by rpki-client