$ rpki-client -vvf repo-rpki.idnic.net/repo/a679824f-4e08-4970-bba6-27b4726ca580/0/8B7B648E54ABC4F43564B6B7D8EC6CA25EB6C65C.mft File: 8B7B648E54ABC4F43564B6B7D8EC6CA25EB6C65C.mft (raw, json) Hash identifier: eh1KP/jhP3MXzCSmPdxmFqL2H0YnRcjzFkrpLV82Ycw= Subject key identifier: F5:41:A2:77:A5:7A:6B:83:5F:FF:06:C9:F0:10:78:B2:03:75:EF:A7 Authority key identifier: 8B:7B:64:8E:54:AB:C4:F4:35:64:B6:B7:D8:EC:6C:A2:5E:B6:C6:5C Certificate issuer: /CN=8B7B648E54ABC4F43564B6B7D8EC6CA25EB6C65C Certificate serial: 05EE4F5EAE88D909AC3DFB2B4F602FAE38DB03FA Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8B7B648E54ABC4F43564B6B7D8EC6CA25EB6C65C.cer Subject info access: rsync://repo-rpki.idnic.net/repo/a679824f-4e08-4970-bba6-27b4726ca580/0/8B7B648E54ABC4F43564B6B7D8EC6CA25EB6C65C.mft Manifest number: 0212 Signing time: Sat 06 Sep 2025 05:10:47 +0000 Manifest this update: Sat 06 Sep 2025 05:05:47 +0000 Manifest next update: Tue 09 Sep 2025 13:22:47 +0000 Files and hashes: 1: 3130332e3138362e36302e302f32332d3234203d3e20313439363932.roa (hash: D3mhXulAOJ2gHffXQf0w0aMiyDfxmDOfLqbB+xIObN4=) 2: 8B7B648E54ABC4F43564B6B7D8EC6CA25EB6C65C.crl (hash: Bk0eO46lOqeEl2q22K/r9iBbpVRNeAXDRflC/xj6Bwo=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/a679824f-4e08-4970-bba6-27b4726ca580/0/8B7B648E54ABC4F43564B6B7D8EC6CA25EB6C65C.crl rsync://repo-rpki.idnic.net/repo/a679824f-4e08-4970-bba6-27b4726ca580/0/8B7B648E54ABC4F43564B6B7D8EC6CA25EB6C65C.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8B7B648E54ABC4F43564B6B7D8EC6CA25EB6C65C.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 09 Sep 2025 13:22:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 05:ee:4f:5e:ae:88:d9:09:ac:3d:fb:2b:4f:60:2f:ae:38:db:03:fa Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8B7B648E54ABC4F43564B6B7D8EC6CA25EB6C65C Validity Not Before: Sep 6 05:05:47 2025 GMT Not After : Sep 9 13:22:47 2025 GMT Subject: CN=F541A277A57A6B835FFF06C9F01078B20375EFA7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ee:78:75:8e:1a:65:22:90:cf:16:01:de:68:b4: c0:dd:f0:3d:6f:43:d4:93:aa:01:7b:c6:38:e0:53: 03:3a:e1:6f:0e:9b:93:05:f7:25:2b:8a:33:71:be: 77:ce:da:a6:4c:6e:a6:bd:33:c4:74:90:7b:95:e8: a4:20:ac:49:95:40:6b:9e:64:f4:4b:89:1c:45:0a: e3:a0:8b:5a:d6:66:37:0e:72:86:b7:c7:61:f3:0f: a0:63:b2:bf:39:53:5f:2a:a3:af:93:fa:0d:f0:a5: 9d:4c:89:7a:68:83:2a:25:f3:f2:41:34:27:88:20: 78:60:6b:78:43:e4:e8:bb:15:20:f0:66:59:e8:6d: 34:2d:06:c3:58:d0:1d:ca:6d:69:29:68:9d:61:2e: 5d:24:c7:e5:bc:1a:e6:d5:35:c6:2c:d0:6f:ec:3f: fc:5f:a8:af:8b:d8:18:47:eb:1d:49:42:c7:04:ac: 12:76:bf:44:0e:73:73:33:d1:d5:ed:3e:73:eb:e2: 87:fc:fa:d7:82:82:28:26:9d:87:1e:b4:7a:50:e3: b2:ef:61:0a:78:ad:eb:36:c5:19:2a:b9:71:07:d3: 72:a3:b1:ea:e2:ce:5d:49:23:93:26:11:d0:6f:04: eb:de:5c:2a:e8:e5:58:f3:d0:5c:8a:81:bb:18:6e: 5d:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F5:41:A2:77:A5:7A:6B:83:5F:FF:06:C9:F0:10:78:B2:03:75:EF:A7 X509v3 Authority Key Identifier: keyid:8B:7B:64:8E:54:AB:C4:F4:35:64:B6:B7:D8:EC:6C:A2:5E:B6:C6:5C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/a679824f-4e08-4970-bba6-27b4726ca580/0/8B7B648E54ABC4F43564B6B7D8EC6CA25EB6C65C.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8B7B648E54ABC4F43564B6B7D8EC6CA25EB6C65C.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a679824f-4e08-4970-bba6-27b4726ca580/0/8B7B648E54ABC4F43564B6B7D8EC6CA25EB6C65C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 36:fc:31:08:04:90:41:37:47:ac:a7:8b:63:ea:79:49:e8:28: 69:2f:fc:e8:41:ab:08:90:5f:aa:f3:c1:43:c2:f7:55:6f:b1: bd:bf:be:c5:ed:59:86:1f:bc:bd:b1:16:e8:ba:92:df:e5:ee: d3:49:02:00:55:8c:55:b8:03:6d:3a:fe:cf:d1:c1:12:ef:f9: fd:a7:e8:0c:54:fd:59:9e:f0:1b:c6:03:aa:88:d3:9d:30:d8: b7:22:c4:fc:69:4f:e1:72:7e:e9:6c:3b:9b:f7:48:d6:00:af: 9e:9c:8a:7f:ff:e4:ea:39:45:75:c5:42:e6:3e:a8:c8:b0:cd: 16:70:ef:b7:42:63:16:73:8d:70:16:ac:3f:59:36:d8:5b:43: 01:64:e5:3b:cd:72:d3:43:ef:6e:22:a8:82:8b:cb:a3:aa:cc: 5e:7c:9a:84:11:1e:68:e0:6b:65:92:af:7f:f7:6a:34:62:3c: de:8b:66:e0:3b:34:f8:c0:fb:0a:cf:a3:fc:25:03:69:d9:c2: e5:d8:47:75:83:53:66:f7:6b:8f:c2:1f:2d:18:4c:2f:32:c1: 35:f7:e9:7d:99:36:4d:a1:92:0f:21:93:fd:5d:f6:87:d7:17: 10:99:1a:2f:7e:38:fa:48:32:82:c2:00:ef:de:5c:16:d4:74: 8d:9f:80:c4 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUBe5PXq6I2QmsPfsrT2AvrjjbA/owDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEI3QjY0OEU1NEFCQzRGNDM1NjRCNkI3RDhFQzZDQTI1 RUI2QzY1QzAeFw0yNTA5MDYwNTA1NDdaFw0yNTA5MDkxMzIyNDdaMDMxMTAvBgNV BAMTKEY1NDFBMjc3QTU3QTZCODM1RkZGMDZDOUYwMTA3OEIyMDM3NUVGQTcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDueHWOGmUikM8WAd5otMDd8D1v Q9STqgF7xjjgUwM64W8Om5MF9yUrijNxvnfO2qZMbqa9M8R0kHuV6KQgrEmVQGue ZPRLiRxFCuOgi1rWZjcOcoa3x2HzD6Bjsr85U18qo6+T+g3wpZ1MiXpogyol8/JB NCeIIHhga3hD5Oi7FSDwZlnobTQtBsNY0B3KbWkpaJ1hLl0kx+W8GubVNcYs0G/s P/xfqK+L2BhH6x1JQscErBJ2v0QOc3Mz0dXtPnPr4of8+teCgigmnYcetHpQ47Lv YQp4res2xRkquXEH03Kjserizl1JI5MmEdBvBOveXCro5Vjz0FyKgbsYbl3VAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU9UGid6V6a4Nf/wbJ8BB4sgN176cwHwYDVR0j BBgwFoAUi3tkjlSrxPQ1ZLa32Oxsol62xlwwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h Njc5ODI0Zi00ZTA4LTQ5NzAtYmJhNi0yN2I0NzI2Y2E1ODAvMC84QjdCNjQ4RTU0 QUJDNEY0MzU2NEI2QjdEOEVDNkNBMjVFQjZDNjVDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOEI3QjY0OEU1NEFCQzRGNDM1NjRCNkI3RDhFQzZDQTI1RUI2 QzY1Qy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYTY3OTgyNGYtNGUwOC00OTcwLWJi YTYtMjdiNDcyNmNhNTgwLzAvOEI3QjY0OEU1NEFCQzRGNDM1NjRCNkI3RDhFQzZD QTI1RUI2QzY1Qy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADb8MQgEkEE3R6yni2PqeUnoKGkv/OhBqwiQ X6rzwUPC91Vvsb2/vsXtWYYfvL2xFui6kt/l7tNJAgBVjFW4A206/s/RwRLv+f2n 6AxU/Vme8BvGA6qI050w2LcixPxpT+FyfulsO5v3SNYAr56cin//5Oo5RXXFQuY+ qMiwzRZw77dCYxZzjXAWrD9ZNthbQwFk5TvNctND724iqIKLy6OqzF58moQRHmjg a2WSr3/3ajRiPN6LZuA7NPjA+wrPo/wlA2nZwuXYR3WDU2b3a4/CHy0YTC8ywTX3 6X2ZNk2hkg8hk/1d9ofXFxCZGi9+OPpIMoLCAO/eXBbUdI2fgMQ= -----END CERTIFICATE-----Generated at Sun Sep 7 15:34:16 2025 by rpki-client