$ rpki-client -vvf repo-rpki.idnic.net/repo/de6a57c5-df73-43f5-865d-6bd248c22fba/0/8B0DE141ACB811E0FE65085CF2339EE4C7EE05A2.mft File: 8B0DE141ACB811E0FE65085CF2339EE4C7EE05A2.mft (raw, json) Hash identifier: zZWAY4ER8QIHwys/sW1TPvaD3P65O2XxPC7NVQaOlsM= Subject key identifier: A8:9A:39:FA:76:BD:AF:7E:3D:F3:D2:C7:C4:98:2B:AF:F5:3C:07:49 Authority key identifier: 8B:0D:E1:41:AC:B8:11:E0:FE:65:08:5C:F2:33:9E:E4:C7:EE:05:A2 Certificate issuer: /CN=8B0DE141ACB811E0FE65085CF2339EE4C7EE05A2 Certificate serial: 27E9B6728B08A975D89037699C5395122AAEC3ED Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8B0DE141ACB811E0FE65085CF2339EE4C7EE05A2.cer Subject info access: rsync://repo-rpki.idnic.net/repo/de6a57c5-df73-43f5-865d-6bd248c22fba/0/8B0DE141ACB811E0FE65085CF2339EE4C7EE05A2.mft Manifest number: 0205 Signing time: Sat 06 Sep 2025 14:22:03 +0000 Manifest this update: Sat 06 Sep 2025 14:17:03 +0000 Manifest next update: Tue 09 Sep 2025 15:20:03 +0000 Files and hashes: 1: 8B0DE141ACB811E0FE65085CF2339EE4C7EE05A2.crl (hash: 7LP/t11Plse6RR/88MbDafB92UoLWNB8MuWBjhweJKY=) 2: 3130332e3138342e35362e302f32342d3234203d3e20313439363637.roa (hash: wL4jyeE9OG3mCA6Twfdl1VaSzPxamD0EwTijKmcLq7s=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/de6a57c5-df73-43f5-865d-6bd248c22fba/0/8B0DE141ACB811E0FE65085CF2339EE4C7EE05A2.crl rsync://repo-rpki.idnic.net/repo/de6a57c5-df73-43f5-865d-6bd248c22fba/0/8B0DE141ACB811E0FE65085CF2339EE4C7EE05A2.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8B0DE141ACB811E0FE65085CF2339EE4C7EE05A2.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 09 Sep 2025 15:20:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 27:e9:b6:72:8b:08:a9:75:d8:90:37:69:9c:53:95:12:2a:ae:c3:ed Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8B0DE141ACB811E0FE65085CF2339EE4C7EE05A2 Validity Not Before: Sep 6 14:17:03 2025 GMT Not After : Sep 9 15:20:03 2025 GMT Subject: CN=A89A39FA76BDAF7E3DF3D2C7C4982BAFF53C0749 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:eb:2e:70:c4:f1:6f:42:bf:2d:f4:a1:38:b2: 7b:7d:17:77:2b:da:20:91:36:42:60:eb:a8:3d:58: 88:1d:37:ed:40:9b:c1:f1:9b:b9:85:24:31:99:37: 58:81:c7:4d:9b:4f:04:9d:d1:d7:b7:5f:48:cc:17: 1a:55:b9:32:ee:f9:79:a6:13:85:e9:9b:ad:21:d5: 28:56:96:5b:65:ad:b9:04:17:c3:d2:59:df:60:07: 6c:d1:1f:93:78:20:eb:1e:3a:dc:18:a4:46:a1:40: a1:c3:b5:c1:19:9b:87:d8:ec:0f:08:4a:00:3d:8f: 5c:8b:00:72:8d:80:20:fa:b4:be:10:07:10:66:05: 55:5b:51:a6:6e:93:cd:d9:bd:1d:49:7e:60:26:ed: 63:1f:50:a9:04:38:2f:7b:48:b1:53:64:16:81:2d: 00:ce:28:1c:be:ab:24:b7:89:c8:cf:bb:ca:e8:2e: 92:e6:89:0b:3f:26:09:75:97:b3:c9:a1:b9:b3:ab: c2:7c:02:e3:16:43:d8:02:77:0b:ff:3e:9e:90:92: 16:af:b9:e9:d1:b4:03:27:6e:b1:fb:d8:9d:9e:7d: 09:2b:71:30:df:94:77:c6:2a:93:39:e6:07:b6:71: 66:3b:54:40:39:a3:ec:f9:e1:58:60:88:d4:7a:ba: 27:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A8:9A:39:FA:76:BD:AF:7E:3D:F3:D2:C7:C4:98:2B:AF:F5:3C:07:49 X509v3 Authority Key Identifier: keyid:8B:0D:E1:41:AC:B8:11:E0:FE:65:08:5C:F2:33:9E:E4:C7:EE:05:A2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/de6a57c5-df73-43f5-865d-6bd248c22fba/0/8B0DE141ACB811E0FE65085CF2339EE4C7EE05A2.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8B0DE141ACB811E0FE65085CF2339EE4C7EE05A2.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/de6a57c5-df73-43f5-865d-6bd248c22fba/0/8B0DE141ACB811E0FE65085CF2339EE4C7EE05A2.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b8:70:cc:a1:df:06:69:e1:73:89:48:15:49:e6:52:73:ce:fa: c2:f4:b0:44:d4:d2:30:b0:6f:21:88:e7:a0:5f:aa:ae:9c:a9: b2:d7:f5:89:ca:af:e7:86:8f:9a:4b:f8:0e:20:cd:9d:b1:b3: 1e:c5:b2:74:93:6e:32:6d:77:cc:ca:c4:72:f9:4e:1b:01:be: 6b:5a:8a:7b:ac:1b:d4:96:3d:05:a6:1c:7d:3f:d1:df:8e:55: 44:af:85:4d:21:4e:76:03:58:b0:d5:62:40:e8:63:14:6e:ee: 00:9d:6a:fb:53:4e:30:b2:fe:52:35:35:16:2a:bb:46:eb:30: 23:8a:e0:aa:dd:56:43:bd:b1:7a:7f:8b:d6:b1:41:26:ff:4e: 47:3c:26:75:67:6c:46:fb:f0:61:9a:ca:79:ae:c7:ba:4a:c2: 98:fb:49:be:cd:12:d1:ed:d4:a3:1e:19:8a:b5:b2:3c:fe:31: 58:a8:19:5f:46:bf:38:0f:ff:6d:c0:b6:2f:bd:77:56:85:e0: aa:bb:5d:d7:4a:2f:6a:13:db:f5:1d:85:44:74:82:c0:84:b2: 92:f1:08:ad:a0:5a:c8:04:16:ad:02:73:04:e6:92:e1:4c:f6: c9:de:3f:23:7c:b3:1e:b4:bf:ba:f8:48:ac:f7:d9:b5:82:bf: 69:cd:d1:ca -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUJ+m2cosIqXXYkDdpnFOVEiquw+0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEIwREUxNDFBQ0I4MTFFMEZFNjUwODVDRjIzMzlFRTRD N0VFMDVBMjAeFw0yNTA5MDYxNDE3MDNaFw0yNTA5MDkxNTIwMDNaMDMxMTAvBgNV BAMTKEE4OUEzOUZBNzZCREFGN0UzREYzRDJDN0M0OTgyQkFGRjUzQzA3NDkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDf6y5wxPFvQr8t9KE4snt9F3cr 2iCRNkJg66g9WIgdN+1Am8Hxm7mFJDGZN1iBx02bTwSd0de3X0jMFxpVuTLu+Xmm E4Xpm60h1ShWlltlrbkEF8PSWd9gB2zRH5N4IOseOtwYpEahQKHDtcEZm4fY7A8I SgA9j1yLAHKNgCD6tL4QBxBmBVVbUaZuk83ZvR1JfmAm7WMfUKkEOC97SLFTZBaB LQDOKBy+qyS3icjPu8roLpLmiQs/Jgl1l7PJobmzq8J8AuMWQ9gCdwv/Pp6Qkhav uenRtAMnbrH72J2efQkrcTDflHfGKpM55ge2cWY7VEA5o+z54VhgiNR6uicPAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUqJo5+na9r34989LHxJgrr/U8B0kwHwYDVR0j BBgwFoAUiw3hQay4EeD+ZQhc8jOe5MfuBaIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k ZTZhNTdjNS1kZjczLTQzZjUtODY1ZC02YmQyNDhjMjJmYmEvMC84QjBERTE0MUFD QjgxMUUwRkU2NTA4NUNGMjMzOUVFNEM3RUUwNUEyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOEIwREUxNDFBQ0I4MTFFMEZFNjUwODVDRjIzMzlFRTRDN0VF MDVBMi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZGU2YTU3YzUtZGY3My00M2Y1LTg2 NWQtNmJkMjQ4YzIyZmJhLzAvOEIwREUxNDFBQ0I4MTFFMEZFNjUwODVDRjIzMzlF RTRDN0VFMDVBMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALhwzKHfBmnhc4lIFUnmUnPO+sL0sETU0jCw byGI56Bfqq6cqbLX9YnKr+eGj5pL+A4gzZ2xsx7FsnSTbjJtd8zKxHL5ThsBvmta inusG9SWPQWmHH0/0d+OVUSvhU0hTnYDWLDVYkDoYxRu7gCdavtTTjCy/lI1NRYq u0brMCOK4KrdVkO9sXp/i9axQSb/Tkc8JnVnbEb78GGaynmux7pKwpj7Sb7NEtHt 1KMeGYq1sjz+MVioGV9GvzgP/23Ati+9d1aF4Kq7XddKL2oT2/UdhUR0gsCEspLx CK2gWsgEFq0CcwTmkuFM9snePyN8sx60v7r4SKz32bWCv2nN0co= -----END CERTIFICATE-----Generated at Sun Sep 7 14:05:19 2025 by rpki-client