$ rpki-client -vvf repo-rpki.idnic.net/repo/b94c1e95-a738-4e47-8e5c-7af681b36b00/0/8DBECF314BD3C829923A3A97BFC62113A61F8EE1.mft File: 8DBECF314BD3C829923A3A97BFC62113A61F8EE1.mft (raw, json) Hash identifier: ofaerFgQQmtJflFh3LweITU5MUtJmf+qhtnmosHrDEE= Subject key identifier: E0:3D:8B:E8:B9:2D:8E:FA:05:5F:D3:9F:4F:B5:88:A0:A0:39:7F:11 Authority key identifier: 8D:BE:CF:31:4B:D3:C8:29:92:3A:3A:97:BF:C6:21:13:A6:1F:8E:E1 Certificate issuer: /CN=8DBECF314BD3C829923A3A97BFC62113A61F8EE1 Certificate serial: 6F4D0C1D029D73DABA823B0F03FD1325C0D58297 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8DBECF314BD3C829923A3A97BFC62113A61F8EE1.cer Subject info access: rsync://repo-rpki.idnic.net/repo/b94c1e95-a738-4e47-8e5c-7af681b36b00/0/8DBECF314BD3C829923A3A97BFC62113A61F8EE1.mft Manifest number: 0200 Signing time: Fri 05 Sep 2025 21:41:09 +0000 Manifest this update: Fri 05 Sep 2025 21:36:09 +0000 Manifest next update: Mon 08 Sep 2025 23:53:09 +0000 Files and hashes: 1: 8DBECF314BD3C829923A3A97BFC62113A61F8EE1.crl (hash: rIfi7LKLsJLDP35TY+cp6e7fsaKnpoDhtHqsm9rUWz4=) 2: 3130332e3138362e39302e302f32332d3233203d3e20313439373037.roa (hash: IxE4f1xQzeKQZjsPZmdFbJyZKv94xhwmFh4/4Aw/W0I=) 3: 3130332e3138362e39312e302f32342d3234203d3e20313439373037.roa (hash: v7WXEnDaWLgLHCCs0/IjJD0cW6T6d8CeSIJNddKA634=) 4: 3130332e3138362e39302e302f32342d3234203d3e20313439373037.roa (hash: 656gLN35OIXcG6Vik35XhI6XoKD7dIobeeOabAVD0UQ=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/b94c1e95-a738-4e47-8e5c-7af681b36b00/0/8DBECF314BD3C829923A3A97BFC62113A61F8EE1.crl rsync://repo-rpki.idnic.net/repo/b94c1e95-a738-4e47-8e5c-7af681b36b00/0/8DBECF314BD3C829923A3A97BFC62113A61F8EE1.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8DBECF314BD3C829923A3A97BFC62113A61F8EE1.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 08 Sep 2025 23:53:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6f:4d:0c:1d:02:9d:73:da:ba:82:3b:0f:03:fd:13:25:c0:d5:82:97 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8DBECF314BD3C829923A3A97BFC62113A61F8EE1 Validity Not Before: Sep 5 21:36:09 2025 GMT Not After : Sep 8 23:53:09 2025 GMT Subject: CN=E03D8BE8B92D8EFA055FD39F4FB588A0A0397F11 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:c1:c9:9b:29:a6:fa:a4:a4:53:9e:87:8f:77: f0:94:f3:22:63:77:43:da:64:3b:49:fe:3d:9b:10: a6:17:30:ac:3f:d6:16:cf:59:86:a8:d6:97:9d:61: 97:7f:66:ed:30:1e:97:40:c5:46:25:0b:bc:ce:55: 69:9a:ea:06:61:0d:64:a8:6e:34:06:ca:61:46:fe: e1:53:06:03:48:d2:3a:2f:43:6a:a3:db:dc:c5:70: 73:d4:b9:21:ef:bf:83:95:d6:aa:b3:4f:17:64:a0: e9:52:6d:b8:6b:ab:3b:25:88:1e:7d:80:28:32:19: 1e:02:5c:6e:b9:f7:58:f4:f3:70:78:98:cc:98:7f: 9e:5f:81:05:8a:1a:0d:2b:12:4d:41:20:39:97:a8: 09:d0:36:14:1f:e2:d0:cd:85:83:12:04:74:4f:56: 5b:bb:c1:0b:88:ad:96:65:f5:b8:5b:75:26:24:aa: a8:b4:99:3a:e3:c1:56:96:fc:02:9b:71:3c:22:e3: 40:d8:b8:28:94:4d:3f:fe:72:a8:5a:b2:2e:41:f1: 03:e5:cd:ae:9d:dc:1b:b6:2f:f0:73:95:10:9e:3d: e8:82:03:39:84:5a:83:62:7b:4b:db:fb:97:02:f3: 12:6e:79:c6:fb:bf:ac:a4:a5:75:ba:33:86:21:a8: 3b:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E0:3D:8B:E8:B9:2D:8E:FA:05:5F:D3:9F:4F:B5:88:A0:A0:39:7F:11 X509v3 Authority Key Identifier: keyid:8D:BE:CF:31:4B:D3:C8:29:92:3A:3A:97:BF:C6:21:13:A6:1F:8E:E1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/b94c1e95-a738-4e47-8e5c-7af681b36b00/0/8DBECF314BD3C829923A3A97BFC62113A61F8EE1.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8DBECF314BD3C829923A3A97BFC62113A61F8EE1.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/b94c1e95-a738-4e47-8e5c-7af681b36b00/0/8DBECF314BD3C829923A3A97BFC62113A61F8EE1.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 42:98:fb:77:a7:ae:48:69:49:3f:87:35:7a:ee:11:37:e8:fe: 53:a9:6b:27:0f:38:78:39:bf:47:fc:3d:5d:3c:f3:d3:7d:29: 80:a2:71:d1:89:55:83:6d:94:c0:5b:44:c7:48:bb:3b:3e:7b: 39:4e:37:be:24:44:28:db:8e:3d:ad:01:e5:3a:78:2f:1c:b9: 35:4e:33:c0:f9:49:76:50:f0:f5:38:a1:7d:3b:10:f0:0b:c2: c1:b1:1a:37:d8:2b:ce:de:71:63:ed:07:12:6d:ff:1e:ea:0c: 5b:56:97:e2:9e:c4:2d:23:0d:53:99:61:8b:95:c7:22:4e:bf: 83:22:ff:ce:3c:18:ea:59:59:4d:04:1d:e3:0f:87:d6:f6:84: 23:b7:62:00:ce:d6:8f:5c:b0:e5:55:ab:c6:eb:e5:c8:5f:cb: eb:28:ad:af:1d:4a:8a:26:02:52:d4:34:e1:38:e6:5f:a6:28: 81:8c:7a:ef:c7:b6:5f:99:24:d8:a3:40:cb:c6:78:90:31:63: ad:a6:f4:a0:4d:6b:dc:88:0b:0e:26:6d:c5:6e:d4:d6:5b:3f: 92:33:1d:3c:33:d1:8d:35:2a:78:98:44:bc:0c:40:a2:e4:5f: 58:3d:c1:46:f2:d3:66:42:0b:d5:14:5e:a8:7d:ae:70:b7:18: 5e:1b:d2:d9 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUb00MHQKdc9q6gjsPA/0TJcDVgpcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOERCRUNGMzE0QkQzQzgyOTkyM0EzQTk3QkZDNjIxMTNB NjFGOEVFMTAeFw0yNTA5MDUyMTM2MDlaFw0yNTA5MDgyMzUzMDlaMDMxMTAvBgNV BAMTKEUwM0Q4QkU4QjkyRDhFRkEwNTVGRDM5RjRGQjU4OEEwQTAzOTdGMTEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCywcmbKab6pKRTnoePd/CU8yJj d0PaZDtJ/j2bEKYXMKw/1hbPWYao1pedYZd/Zu0wHpdAxUYlC7zOVWma6gZhDWSo bjQGymFG/uFTBgNI0jovQ2qj29zFcHPUuSHvv4OV1qqzTxdkoOlSbbhrqzsliB59 gCgyGR4CXG6591j083B4mMyYf55fgQWKGg0rEk1BIDmXqAnQNhQf4tDNhYMSBHRP Vlu7wQuIrZZl9bhbdSYkqqi0mTrjwVaW/AKbcTwi40DYuCiUTT/+cqhasi5B8QPl za6d3Bu2L/BzlRCePeiCAzmEWoNie0vb+5cC8xJuecb7v6ykpXW6M4YhqDu9AgMB AAGjggI8MIICODAdBgNVHQ4EFgQU4D2L6LktjvoFX9OfT7WIoKA5fxEwHwYDVR0j BBgwFoAUjb7PMUvTyCmSOjqXv8YhE6YfjuEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i OTRjMWU5NS1hNzM4LTRlNDctOGU1Yy03YWY2ODFiMzZiMDAvMC84REJFQ0YzMTRC RDNDODI5OTIzQTNBOTdCRkM2MjExM0E2MUY4RUUxLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOERCRUNGMzE0QkQzQzgyOTkyM0EzQTk3QkZDNjIxMTNBNjFG OEVFMS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYjk0YzFlOTUtYTczOC00ZTQ3LThl NWMtN2FmNjgxYjM2YjAwLzAvOERCRUNGMzE0QkQzQzgyOTkyM0EzQTk3QkZDNjIx MTNBNjFGOEVFMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEKY+3enrkhpST+HNXruETfo/lOpaycPOHg5 v0f8PV0889N9KYCicdGJVYNtlMBbRMdIuzs+ezlON74kRCjbjj2tAeU6eC8cuTVO M8D5SXZQ8PU4oX07EPALwsGxGjfYK87ecWPtBxJt/x7qDFtWl+KexC0jDVOZYYuV xyJOv4Mi/848GOpZWU0EHeMPh9b2hCO3YgDO1o9csOVVq8br5chfy+sora8dSoom AlLUNOE45l+mKIGMeu/Htl+ZJNijQMvGeJAxY62m9KBNa9yICw4mbcVu1NZbP5Iz HTwz0Y01KniYRLwMQKLkX1g9wUby02ZCC9UUXqh9rnC3GF4b0tk= -----END CERTIFICATE-----Generated at Sun Sep 7 13:57:27 2025 by rpki-client