$ rpki-client -vvf repo-rpki.idnic.net/repo/aba8cf65-d468-4309-9f30-9b9f26d9ce2d/0/8650DEF1B1C89D701C2BB99CA9079EEDBCCC046D.mft File: 8650DEF1B1C89D701C2BB99CA9079EEDBCCC046D.mft (raw, json) Hash identifier: JX9TYeyM+joJG+uoX4LhlJMqsf+YNPjFCTBkts0IpwE= Subject key identifier: 0C:EA:BE:A3:98:7D:96:55:34:B5:9D:A9:91:5F:B5:64:6C:86:06:1C Authority key identifier: 86:50:DE:F1:B1:C8:9D:70:1C:2B:B9:9C:A9:07:9E:ED:BC:CC:04:6D Certificate issuer: /CN=8650DEF1B1C89D701C2BB99CA9079EEDBCCC046D Certificate serial: 1740471D05F0D1B07DAB2E5D6A249850475A494D Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8650DEF1B1C89D701C2BB99CA9079EEDBCCC046D.cer Subject info access: rsync://repo-rpki.idnic.net/repo/aba8cf65-d468-4309-9f30-9b9f26d9ce2d/0/8650DEF1B1C89D701C2BB99CA9079EEDBCCC046D.mft Manifest number: 0124 Signing time: Wed 03 Sep 2025 17:01:07 +0000 Manifest this update: Wed 03 Sep 2025 16:56:07 +0000 Manifest next update: Sat 06 Sep 2025 19:07:07 +0000 Files and hashes: 1: 3137352e3131312e39382e302f32342d3234203d3e20313338313230.roa (hash: s8fg30WIA14JUIcMS3F2iWvbH1sPMTJyCo51fPayB6w=) 2: 3137352e3131312e39392e302f32342d3234203d3e20313338313230.roa (hash: YRDtjy6dGfctkwwFkOVZ0Lht6L/ZRO27ITtMgAgG90E=) 3: 8650DEF1B1C89D701C2BB99CA9079EEDBCCC046D.crl (hash: sULwMzk6lcZNIEjzmTXRQiXRex+/cND5OQvoQgLxGN4=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/aba8cf65-d468-4309-9f30-9b9f26d9ce2d/0/8650DEF1B1C89D701C2BB99CA9079EEDBCCC046D.crl rsync://repo-rpki.idnic.net/repo/aba8cf65-d468-4309-9f30-9b9f26d9ce2d/0/8650DEF1B1C89D701C2BB99CA9079EEDBCCC046D.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8650DEF1B1C89D701C2BB99CA9079EEDBCCC046D.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 06 Sep 2025 19:07:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 17:40:47:1d:05:f0:d1:b0:7d:ab:2e:5d:6a:24:98:50:47:5a:49:4d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8650DEF1B1C89D701C2BB99CA9079EEDBCCC046D Validity Not Before: Sep 3 16:56:07 2025 GMT Not After : Sep 6 19:07:07 2025 GMT Subject: CN=0CEABEA3987D965534B59DA9915FB5646C86061C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:32:58:19:e2:ce:55:17:ab:d0:74:09:7f:29: 47:8d:9f:50:49:12:ea:9e:9f:95:b0:05:d4:bf:71: 6a:1d:06:07:67:c1:42:f3:36:19:c8:88:e2:09:1a: 84:d1:d1:0f:c7:c2:f9:a6:cf:cc:bb:bb:66:d9:34: 64:f1:0d:7c:c5:80:ec:90:cc:f7:eb:a7:99:6c:e5: fb:03:56:82:b0:ca:08:52:31:ed:52:38:01:03:aa: ec:25:ea:c9:a3:5a:db:03:0e:9e:e2:bb:0f:60:ac: 5c:84:4b:6e:5c:27:1b:ca:40:af:68:13:fb:5f:ce: ef:2e:37:cf:70:9f:6f:7c:6c:22:33:cd:a9:98:a2: fc:d1:1b:88:91:c4:cc:39:53:42:4a:dc:9c:04:ad: 44:1a:af:8f:34:d6:28:4e:e6:e8:85:7d:71:bc:40: 14:3c:97:51:1e:ca:dc:a1:95:c2:2f:fb:91:00:dd: 6a:08:d9:67:f7:73:40:e3:c3:12:d0:05:1e:90:4f: 99:d0:96:ad:fd:5a:20:03:90:ec:a6:73:d9:69:f4: 23:b4:a8:83:74:fb:15:b4:94:a7:9c:61:89:e3:40: 61:a3:fb:06:29:58:7c:06:ec:43:df:54:95:04:03: 6a:86:05:b8:66:11:33:07:98:70:63:2a:69:eb:ab: 3b:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0C:EA:BE:A3:98:7D:96:55:34:B5:9D:A9:91:5F:B5:64:6C:86:06:1C X509v3 Authority Key Identifier: keyid:86:50:DE:F1:B1:C8:9D:70:1C:2B:B9:9C:A9:07:9E:ED:BC:CC:04:6D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/aba8cf65-d468-4309-9f30-9b9f26d9ce2d/0/8650DEF1B1C89D701C2BB99CA9079EEDBCCC046D.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8650DEF1B1C89D701C2BB99CA9079EEDBCCC046D.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/aba8cf65-d468-4309-9f30-9b9f26d9ce2d/0/8650DEF1B1C89D701C2BB99CA9079EEDBCCC046D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b1:4d:a6:0a:52:4c:72:f0:84:33:5b:fe:e9:85:1b:7a:1f:71: 95:35:bf:de:a1:86:7a:ba:29:66:c9:fd:bc:cf:a0:fc:80:f5: e2:19:08:aa:d3:07:10:6e:36:26:47:d9:49:be:f3:b5:c8:05: 3c:35:30:06:a9:1a:fd:c9:43:6d:6b:e4:a3:9c:4d:6b:f0:a9: c9:ba:e8:de:27:eb:5c:81:1b:38:ee:01:6b:b1:fb:98:92:20: f5:de:ba:6e:54:45:2a:81:ae:77:4e:aa:18:e6:ec:0d:a1:1d: f0:3c:0f:35:c1:73:c8:eb:2d:38:08:02:c7:4f:00:77:8f:da: c8:fc:66:a3:e9:f5:36:fd:b1:47:75:68:66:e4:fe:6f:94:3f: 4e:2c:ca:1b:1a:43:c5:15:a2:1f:1d:50:0d:ff:47:67:71:07: fb:66:db:47:9a:af:8e:a1:b4:6d:04:7f:04:33:13:7e:fd:47: 6d:3a:de:03:ba:e2:57:b1:e9:05:b1:71:62:62:a7:80:42:33: 12:76:25:37:72:e9:8b:9a:3d:41:c3:bc:50:05:38:22:69:c8: f1:58:3c:31:51:60:d0:68:68:f8:a5:53:b7:4c:8f:42:cd:b9: 5f:50:23:7d:b3:cb:30:9f:bf:45:c2:88:96:de:c1:e5:b2:af: 20:57:93:df -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUF0BHHQXw0bB9qy5daiSYUEdaSU0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODY1MERFRjFCMUM4OUQ3MDFDMkJCOTlDQTkwNzlFRURC Q0NDMDQ2RDAeFw0yNTA5MDMxNjU2MDdaFw0yNTA5MDYxOTA3MDdaMDMxMTAvBgNV BAMTKDBDRUFCRUEzOTg3RDk2NTUzNEI1OURBOTkxNUZCNTY0NkM4NjA2MUMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDWMlgZ4s5VF6vQdAl/KUeNn1BJ Euqen5WwBdS/cWodBgdnwULzNhnIiOIJGoTR0Q/Hwvmmz8y7u2bZNGTxDXzFgOyQ zPfrp5ls5fsDVoKwyghSMe1SOAEDquwl6smjWtsDDp7iuw9grFyES25cJxvKQK9o E/tfzu8uN89wn298bCIzzamYovzRG4iRxMw5U0JK3JwErUQar4801ihO5uiFfXG8 QBQ8l1EeytyhlcIv+5EA3WoI2Wf3c0DjwxLQBR6QT5nQlq39WiADkOymc9lp9CO0 qIN0+xW0lKecYYnjQGGj+wYpWHwG7EPfVJUEA2qGBbhmETMHmHBjKmnrqzvtAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUDOq+o5h9llU0tZ2pkV+1ZGyGBhwwHwYDVR0j BBgwFoAUhlDe8bHInXAcK7mcqQee7bzMBG0wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h YmE4Y2Y2NS1kNDY4LTQzMDktOWYzMC05YjlmMjZkOWNlMmQvMC84NjUwREVGMUIx Qzg5RDcwMUMyQkI5OUNBOTA3OUVFREJDQ0MwNDZELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvODY1MERFRjFCMUM4OUQ3MDFDMkJCOTlDQTkwNzlFRURCQ0ND MDQ2RC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYWJhOGNmNjUtZDQ2OC00MzA5LTlm MzAtOWI5ZjI2ZDljZTJkLzAvODY1MERFRjFCMUM4OUQ3MDFDMkJCOTlDQTkwNzlF RURCQ0NDMDQ2RC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALFNpgpSTHLwhDNb/umFG3ofcZU1v96hhnq6 KWbJ/bzPoPyA9eIZCKrTBxBuNiZH2Um+87XIBTw1MAapGv3JQ21r5KOcTWvwqcm6 6N4n61yBGzjuAWux+5iSIPXeum5URSqBrndOqhjm7A2hHfA8DzXBc8jrLTgIAsdP AHeP2sj8ZqPp9Tb9sUd1aGbk/m+UP04syhsaQ8UVoh8dUA3/R2dxB/tm20ear46h tG0EfwQzE379R2063gO64lex6QWxcWJip4BCMxJ2JTdy6YuaPUHDvFAFOCJpyPFY PDFRYNBoaPilU7dMj0LNuV9QI32zyzCfv0XCiJbeweWyryBXk98= -----END CERTIFICATE-----Generated at Fri Sep 5 10:13:42 2025 by rpki-client