$ rpki-client -vvf repo-rpki.idnic.net/repo/d06347f4-ea26-4d4c-a568-1d863360e421/0/8BE4A701F2924B4BFB8A983A1B0BD5C8863BF3FD.mft File: 8BE4A701F2924B4BFB8A983A1B0BD5C8863BF3FD.mft (raw, json) Hash identifier: EI4cFJ1ih2RFAd61oNwhHBorZ9Y63aPqMv1zanT5R8w= Subject key identifier: 7A:0B:81:60:60:70:0D:1F:DB:98:3D:4D:C2:FD:8D:25:87:96:4D:E1 Authority key identifier: 8B:E4:A7:01:F2:92:4B:4B:FB:8A:98:3A:1B:0B:D5:C8:86:3B:F3:FD Certificate issuer: /CN=8BE4A701F2924B4BFB8A983A1B0BD5C8863BF3FD Certificate serial: 6619B60F9042122FE764A55966CF911CCF9A4A24 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8BE4A701F2924B4BFB8A983A1B0BD5C8863BF3FD.cer Subject info access: rsync://repo-rpki.idnic.net/repo/d06347f4-ea26-4d4c-a568-1d863360e421/0/8BE4A701F2924B4BFB8A983A1B0BD5C8863BF3FD.mft Manifest number: 0502 Signing time: Fri 05 Sep 2025 17:42:06 +0000 Manifest this update: Fri 05 Sep 2025 17:37:06 +0000 Manifest next update: Tue 09 Sep 2025 03:06:06 +0000 Files and hashes: 1: 3130332e3131352e3136342e302f32342d3234203d3e20313338313331.roa (hash: PfYYptDyBdUl4aWzZCjnvFHr6qQWRMjgNV762Lfvv/Q=) 2: 8BE4A701F2924B4BFB8A983A1B0BD5C8863BF3FD.crl (hash: 17c10FpKnDp1dSrbHn2Aqhq0zCZuMyW8Ut82ELJlWLE=) 3: 3130332e3132312e3132322e302f32342d3234203d3e20313338313331.roa (hash: 9ysblGZ5nRnpD9uRTt/CttmsXFnbP66QhYFS5MHljXI=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/d06347f4-ea26-4d4c-a568-1d863360e421/0/8BE4A701F2924B4BFB8A983A1B0BD5C8863BF3FD.crl rsync://repo-rpki.idnic.net/repo/d06347f4-ea26-4d4c-a568-1d863360e421/0/8BE4A701F2924B4BFB8A983A1B0BD5C8863BF3FD.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8BE4A701F2924B4BFB8A983A1B0BD5C8863BF3FD.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 09 Sep 2025 03:06:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 66:19:b6:0f:90:42:12:2f:e7:64:a5:59:66:cf:91:1c:cf:9a:4a:24 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8BE4A701F2924B4BFB8A983A1B0BD5C8863BF3FD Validity Not Before: Sep 5 17:37:06 2025 GMT Not After : Sep 9 03:06:06 2025 GMT Subject: CN=7A0B816060700D1FDB983D4DC2FD8D2587964DE1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:c3:4d:30:c4:2c:3f:24:3d:9c:9e:00:44:1d: 54:20:ae:78:d8:28:45:99:de:2b:ad:a9:44:f5:e6: 52:dc:39:8c:4d:67:c5:9f:b1:9f:f0:0c:0c:dd:0b: 83:4d:7a:71:85:a3:cb:00:b4:fb:2f:ba:9a:9d:60: 4c:ab:4a:3d:08:bf:72:25:d8:90:f9:46:ca:50:7d: fc:d4:45:73:9b:5d:3e:58:ea:04:de:fe:c3:77:ca: 9e:00:8f:92:e8:e7:d2:30:a0:b3:4e:0c:f4:f9:c2: e2:c2:ba:1e:7f:4b:16:7f:e9:32:3c:f1:ea:7f:65: 78:28:78:ec:ce:aa:99:7e:9a:0b:41:7e:6e:95:aa: e4:53:f7:cc:61:0c:aa:67:79:3f:d8:37:57:fe:5a: 6e:99:09:f1:1f:be:12:74:0e:c4:2f:f8:fb:2b:1f: 30:1a:20:3f:8d:ed:66:2d:87:ce:ab:97:6a:c0:53: 08:46:33:df:e5:2c:8e:6a:08:6b:6d:8b:e8:0c:a1: 7c:e3:6d:54:a0:7f:cf:1d:80:3f:42:54:c6:1e:19: fd:b2:e0:f5:78:cd:d3:37:d8:70:f7:c7:e4:23:95: 43:4b:3e:d2:d0:30:5e:b5:ca:1c:af:53:8c:9a:16: a2:df:a3:dd:d2:32:e4:6b:f5:b5:d8:6a:8b:d6:26: 04:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7A:0B:81:60:60:70:0D:1F:DB:98:3D:4D:C2:FD:8D:25:87:96:4D:E1 X509v3 Authority Key Identifier: keyid:8B:E4:A7:01:F2:92:4B:4B:FB:8A:98:3A:1B:0B:D5:C8:86:3B:F3:FD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/d06347f4-ea26-4d4c-a568-1d863360e421/0/8BE4A701F2924B4BFB8A983A1B0BD5C8863BF3FD.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8BE4A701F2924B4BFB8A983A1B0BD5C8863BF3FD.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d06347f4-ea26-4d4c-a568-1d863360e421/0/8BE4A701F2924B4BFB8A983A1B0BD5C8863BF3FD.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 68:1c:48:a6:1e:a9:89:1b:e9:4e:73:65:bc:6a:07:1b:f8:e0: b2:4c:4e:1d:c0:19:7e:82:64:fd:9a:ab:21:87:55:4f:6d:8c: 7d:72:b9:44:76:e4:4c:97:19:d8:25:02:e0:8b:55:40:2b:de: d6:68:2a:1b:f5:b0:fc:30:06:65:3c:ae:56:80:8e:56:56:ea: 52:e2:ad:85:7b:bf:52:00:6c:40:82:7b:ae:e7:18:2b:56:3b: 22:04:c3:c6:d4:48:99:29:43:a7:b5:2a:d2:9b:77:18:59:6d: 9d:59:88:8f:b5:45:62:f2:75:4a:b2:8c:20:9f:80:87:ad:1c: 89:79:ec:4f:ed:63:52:94:a1:21:37:68:92:6c:d3:bc:c5:db: 89:ad:43:d3:d6:3a:d4:0b:7f:26:e8:24:6a:5c:79:19:e9:18: 96:05:6b:3b:d6:10:8d:cb:ae:1c:23:a2:f6:a9:83:0f:4f:b3: 22:e5:1d:61:3a:a8:ef:02:03:ef:98:9a:e9:45:4c:49:f5:b4: 1a:4f:6b:5c:55:3e:80:19:dc:9f:1b:8e:14:7e:d7:4c:1a:4b: a7:ae:9b:91:4c:dd:d3:64:73:e5:f6:c8:55:00:82:31:1e:1e: 73:0d:a2:0d:ee:0e:de:60:fa:0f:25:4e:70:a7:41:fe:cf:45: 0a:80:00:cb -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUZhm2D5BCEi/nZKVZZs+RHM+aSiQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEJFNEE3MDFGMjkyNEI0QkZCOEE5ODNBMUIwQkQ1Qzg4 NjNCRjNGRDAeFw0yNTA5MDUxNzM3MDZaFw0yNTA5MDkwMzA2MDZaMDMxMTAvBgNV BAMTKDdBMEI4MTYwNjA3MDBEMUZEQjk4M0Q0REMyRkQ4RDI1ODc5NjRERTEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDJw00wxCw/JD2cngBEHVQgrnjY KEWZ3iutqUT15lLcOYxNZ8WfsZ/wDAzdC4NNenGFo8sAtPsvupqdYEyrSj0Iv3Il 2JD5RspQffzURXObXT5Y6gTe/sN3yp4Aj5Lo59IwoLNODPT5wuLCuh5/SxZ/6TI8 8ep/ZXgoeOzOqpl+mgtBfm6VquRT98xhDKpneT/YN1f+Wm6ZCfEfvhJ0DsQv+Psr HzAaID+N7WYth86rl2rAUwhGM9/lLI5qCGtti+gMoXzjbVSgf88dgD9CVMYeGf2y 4PV4zdM32HD3x+QjlUNLPtLQMF61yhyvU4yaFqLfo93SMuRr9bXYaovWJgSvAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUeguBYGBwDR/bmD1Nwv2NJYeWTeEwHwYDVR0j BBgwFoAUi+SnAfKSS0v7ipg6GwvVyIY78/0wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k MDYzNDdmNC1lYTI2LTRkNGMtYTU2OC0xZDg2MzM2MGU0MjEvMC84QkU0QTcwMUYy OTI0QjRCRkI4QTk4M0ExQjBCRDVDODg2M0JGM0ZELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOEJFNEE3MDFGMjkyNEI0QkZCOEE5ODNBMUIwQkQ1Qzg4NjNC RjNGRC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZDA2MzQ3ZjQtZWEyNi00ZDRjLWE1 NjgtMWQ4NjMzNjBlNDIxLzAvOEJFNEE3MDFGMjkyNEI0QkZCOEE5ODNBMUIwQkQ1 Qzg4NjNCRjNGRC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGgcSKYeqYkb6U5zZbxqBxv44LJMTh3AGX6C ZP2aqyGHVU9tjH1yuUR25EyXGdglAuCLVUAr3tZoKhv1sPwwBmU8rlaAjlZW6lLi rYV7v1IAbECCe67nGCtWOyIEw8bUSJkpQ6e1KtKbdxhZbZ1ZiI+1RWLydUqyjCCf gIetHIl57E/tY1KUoSE3aJJs07zF24mtQ9PWOtQLfyboJGpceRnpGJYFazvWEI3L rhwjovapgw9PsyLlHWE6qO8CA++YmulFTEn1tBpPa1xVPoAZ3J8bjhR+10waS6eu m5FM3dNkc+X2yFUAgjEeHnMNog3uDt5g+g8lTnCnQf7PRQqAAMs= -----END CERTIFICATE-----Generated at Sun Sep 7 15:37:43 2025 by rpki-client