$ rpki-client -vvf repo-rpki.idnic.net/repo/ebefbf04-41be-48d7-ac00-8a3c498ca9ae/0/B8436ACB7CE8F8C2F57245FFE4E6BA2F52393F4D.mft File: B8436ACB7CE8F8C2F57245FFE4E6BA2F52393F4D.mft (raw, json) Hash identifier: O+AnwAKwOqQ5kC+RT85TkSSAsQoj7auHIy2nWgu6T8I= Subject key identifier: 7F:16:F7:61:F8:21:3F:21:3A:F6:84:76:3D:08:E2:07:C1:71:8F:FE Authority key identifier: B8:43:6A:CB:7C:E8:F8:C2:F5:72:45:FF:E4:E6:BA:2F:52:39:3F:4D Certificate issuer: /CN=B8436ACB7CE8F8C2F57245FFE4E6BA2F52393F4D Certificate serial: 0B17188E9EADDF1CE298EF0F1C609F3544DC9039 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B8436ACB7CE8F8C2F57245FFE4E6BA2F52393F4D.cer Subject info access: rsync://repo-rpki.idnic.net/repo/ebefbf04-41be-48d7-ac00-8a3c498ca9ae/0/B8436ACB7CE8F8C2F57245FFE4E6BA2F52393F4D.mft Manifest number: 036B Signing time: Sun 07 Sep 2025 12:41:45 +0000 Manifest this update: Sun 07 Sep 2025 12:36:45 +0000 Manifest next update: Wed 10 Sep 2025 22:46:45 +0000 Files and hashes: 1: 3130332e3135342e32352e302f32342d3234203d3e20313430343738.roa (hash: YWVKY2G+Nvg6caG2vXoeK6bw0DFIbKqpsrtcWOftF08=) 2: B8436ACB7CE8F8C2F57245FFE4E6BA2F52393F4D.crl (hash: qDFvjX+IhJrlFPakuNZ+gpxDCdawMHhb79jsZOyN+ZQ=) 3: 3130332e3135342e32342e302f32332d3233203d3e20313430343738.roa (hash: s1nmEcWlMGfpOr6XkgkIDAhuvP77SQ9zj5c2Qr3sr/E=) 4: 3130332e3135342e32342e302f32342d3234203d3e20313430343738.roa (hash: OPJ+0bfTR2bNFtVvMzF36s5tfMJLI0pXwTypT9BsLeE=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/ebefbf04-41be-48d7-ac00-8a3c498ca9ae/0/B8436ACB7CE8F8C2F57245FFE4E6BA2F52393F4D.crl rsync://repo-rpki.idnic.net/repo/ebefbf04-41be-48d7-ac00-8a3c498ca9ae/0/B8436ACB7CE8F8C2F57245FFE4E6BA2F52393F4D.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B8436ACB7CE8F8C2F57245FFE4E6BA2F52393F4D.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 10 Sep 2025 10:23:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0b:17:18:8e:9e:ad:df:1c:e2:98:ef:0f:1c:60:9f:35:44:dc:90:39 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B8436ACB7CE8F8C2F57245FFE4E6BA2F52393F4D Validity Not Before: Sep 7 12:36:45 2025 GMT Not After : Sep 10 22:46:45 2025 GMT Subject: CN=7F16F761F8213F213AF684763D08E207C1718FFE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:a5:c4:96:c4:93:00:f2:12:39:d3:4c:85:aa: d0:88:38:31:56:17:8c:e2:2c:25:1f:21:76:00:6e: c3:e4:4e:7c:8a:2f:a7:c5:1b:db:25:d8:85:d8:6c: b7:c2:43:c4:40:bc:48:dc:2b:3b:3f:a3:8a:14:93: 36:72:57:e7:dc:40:a0:a2:56:3f:79:23:32:a5:ac: cd:78:2b:44:6f:78:8b:13:60:bf:d1:c0:a0:f2:46: fb:37:a5:25:9f:dd:a1:77:b2:da:d7:6f:9f:b2:93: f9:5e:b8:3a:3f:6b:50:eb:e0:35:a9:ff:9a:e0:a3: 77:f0:10:33:1b:66:74:19:6b:e0:6c:6f:15:0e:94: b6:5a:d2:8f:61:a7:b9:49:e1:0f:90:12:95:24:c0: 1c:bb:05:64:0c:1a:40:c8:7e:75:07:8e:c9:ab:41: 94:5a:bf:21:63:cf:e0:5c:8d:e2:0a:70:56:d5:d8: 07:fe:0a:91:ba:b0:92:33:97:36:b3:e0:ca:82:d6: 4c:54:2b:93:9a:e9:41:52:b6:87:92:f6:1b:e3:2b: 11:68:5c:eb:a5:f6:73:d4:1e:1a:ae:09:6d:46:0a: 12:7d:c7:10:d0:d4:c0:fc:f8:bb:6a:92:db:f7:3f: 0c:a0:96:4f:81:6b:60:6e:18:53:e5:a9:2a:ef:52: c7:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7F:16:F7:61:F8:21:3F:21:3A:F6:84:76:3D:08:E2:07:C1:71:8F:FE X509v3 Authority Key Identifier: keyid:B8:43:6A:CB:7C:E8:F8:C2:F5:72:45:FF:E4:E6:BA:2F:52:39:3F:4D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/ebefbf04-41be-48d7-ac00-8a3c498ca9ae/0/B8436ACB7CE8F8C2F57245FFE4E6BA2F52393F4D.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B8436ACB7CE8F8C2F57245FFE4E6BA2F52393F4D.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ebefbf04-41be-48d7-ac00-8a3c498ca9ae/0/B8436ACB7CE8F8C2F57245FFE4E6BA2F52393F4D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 49:3b:10:cd:71:1d:6b:c0:89:99:65:db:d1:b3:f5:01:f1:d3: 38:a8:23:a4:ef:1e:8d:b7:ca:1e:e3:fb:39:1f:51:aa:d0:77: df:c7:84:96:f1:23:fc:1c:16:53:07:c6:db:20:4f:ab:ef:9d: e1:10:b6:31:52:aa:4e:2a:e4:31:22:c5:3b:ee:31:78:7e:4c: 3e:f1:31:b2:4b:24:01:00:05:20:d3:44:c6:95:05:04:07:67: 84:bc:a3:21:8f:fa:58:bd:11:83:6b:29:98:bb:6b:f9:63:b0: 62:a7:2d:1a:5a:f1:66:90:0a:ec:cc:55:30:15:0f:27:5f:74: 62:67:1d:f2:83:07:be:2f:2a:3f:ea:f8:10:05:1d:ed:1f:37: 35:c5:24:1c:5a:06:e5:0e:78:cb:a0:b5:92:58:4f:d8:88:79: 4d:ec:c8:c2:be:59:1a:ca:a7:e8:8d:f9:da:f4:71:9a:e1:fc: 9a:c3:3c:40:d8:52:78:b0:b8:c2:2f:4c:cc:fd:37:cf:b1:e2: c2:bc:05:f7:c4:65:a5:49:c5:85:7b:2c:e7:fa:bf:be:85:91: 6e:38:00:2e:0e:39:34:36:75:12:41:63:40:f0:d1:65:e0:b4: ac:67:eb:51:d5:af:62:bb:1f:14:c8:91:9b:9e:42:5c:1b:e7: 65:e1:8e:a7 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUCxcYjp6t3xzimO8PHGCfNUTckDkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjg0MzZBQ0I3Q0U4RjhDMkY1NzI0NUZGRTRFNkJBMkY1 MjM5M0Y0RDAeFw0yNTA5MDcxMjM2NDVaFw0yNTA5MTAyMjQ2NDVaMDMxMTAvBgNV BAMTKDdGMTZGNzYxRjgyMTNGMjEzQUY2ODQ3NjNEMDhFMjA3QzE3MThGRkUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCopcSWxJMA8hI500yFqtCIODFW F4ziLCUfIXYAbsPkTnyKL6fFG9sl2IXYbLfCQ8RAvEjcKzs/o4oUkzZyV+fcQKCi Vj95IzKlrM14K0RveIsTYL/RwKDyRvs3pSWf3aF3strXb5+yk/leuDo/a1Dr4DWp /5rgo3fwEDMbZnQZa+BsbxUOlLZa0o9hp7lJ4Q+QEpUkwBy7BWQMGkDIfnUHjsmr QZRavyFjz+BcjeIKcFbV2Af+CpG6sJIzlzaz4MqC1kxUK5Oa6UFStoeS9hvjKxFo XOul9nPUHhquCW1GChJ9xxDQ1MD8+Ltqktv3Pwyglk+Ba2BuGFPlqSrvUsfbAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUfxb3YfghPyE69oR2PQjiB8Fxj/4wHwYDVR0j BBgwFoAUuENqy3zo+ML1ckX/5Oa6L1I5P00wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l YmVmYmYwNC00MWJlLTQ4ZDctYWMwMC04YTNjNDk4Y2E5YWUvMC9CODQzNkFDQjdD RThGOEMyRjU3MjQ1RkZFNEU2QkEyRjUyMzkzRjRELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQjg0MzZBQ0I3Q0U4RjhDMkY1NzI0NUZGRTRFNkJBMkY1MjM5 M0Y0RC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZWJlZmJmMDQtNDFiZS00OGQ3LWFj MDAtOGEzYzQ5OGNhOWFlLzAvQjg0MzZBQ0I3Q0U4RjhDMkY1NzI0NUZGRTRFNkJB MkY1MjM5M0Y0RC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEk7EM1xHWvAiZll29Gz9QHx0zioI6TvHo23 yh7j+zkfUarQd9/HhJbxI/wcFlMHxtsgT6vvneEQtjFSqk4q5DEixTvuMXh+TD7x MbJLJAEABSDTRMaVBQQHZ4S8oyGP+li9EYNrKZi7a/ljsGKnLRpa8WaQCuzMVTAV DydfdGJnHfKDB74vKj/q+BAFHe0fNzXFJBxaBuUOeMugtZJYT9iIeU3syMK+WRrK p+iN+dr0cZrh/JrDPEDYUniwuMIvTMz9N8+x4sK8BffEZaVJxYV7LOf6v76FkW44 AC4OOTQ2dRJBY0Dw0WXgtKxn61HVr2K7HxTIkZueQlwb52Xhjqc= -----END CERTIFICATE-----Generated at Sun Sep 7 13:45:22 2025 by rpki-client