$ rpki-client -vvf repo-rpki.idnic.net/repo/fa674668-0613-4a64-9323-547636b7d8b0/0/B8B47DE574D44D4CC9A3E4E2E1F7AC9CB0AEA0B5.mft File: B8B47DE574D44D4CC9A3E4E2E1F7AC9CB0AEA0B5.mft (raw, json) Hash identifier: Qz79kPBLJdM0s4GrYqXOk5U5UrKyWT39FxotdIiUeW8= Subject key identifier: 07:93:C8:C7:37:3D:36:0D:A3:F2:68:65:6C:CA:C2:4A:D6:1B:64:78 Authority key identifier: B8:B4:7D:E5:74:D4:4D:4C:C9:A3:E4:E2:E1:F7:AC:9C:B0:AE:A0:B5 Certificate issuer: /CN=B8B47DE574D44D4CC9A3E4E2E1F7AC9CB0AEA0B5 Certificate serial: 43B1C5E8AA348326253FF1231EDFFF58645B49CA Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B8B47DE574D44D4CC9A3E4E2E1F7AC9CB0AEA0B5.cer Subject info access: rsync://repo-rpki.idnic.net/repo/fa674668-0613-4a64-9323-547636b7d8b0/0/B8B47DE574D44D4CC9A3E4E2E1F7AC9CB0AEA0B5.mft Manifest number: 018E Signing time: Tue 02 Sep 2025 01:32:11 +0000 Manifest this update: Tue 02 Sep 2025 01:27:11 +0000 Manifest next update: Fri 05 Sep 2025 05:05:11 +0000 Files and hashes: 1: B8B47DE574D44D4CC9A3E4E2E1F7AC9CB0AEA0B5.crl (hash: Amz4kpUGejgIq5w80IeDOwWThtUgDZdbaLI26fQ3Z9k=) 2: 3130332e3131372e35362e302f32332d3234203d3e20313336303532.roa (hash: BAM070FvjGLMXJWAH9pbtiKqBzEQlvrgCYvemvA5CUw=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/fa674668-0613-4a64-9323-547636b7d8b0/0/B8B47DE574D44D4CC9A3E4E2E1F7AC9CB0AEA0B5.crl rsync://repo-rpki.idnic.net/repo/fa674668-0613-4a64-9323-547636b7d8b0/0/B8B47DE574D44D4CC9A3E4E2E1F7AC9CB0AEA0B5.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B8B47DE574D44D4CC9A3E4E2E1F7AC9CB0AEA0B5.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 05 Sep 2025 05:05:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 43:b1:c5:e8:aa:34:83:26:25:3f:f1:23:1e:df:ff:58:64:5b:49:ca Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B8B47DE574D44D4CC9A3E4E2E1F7AC9CB0AEA0B5 Validity Not Before: Sep 2 01:27:11 2025 GMT Not After : Sep 5 05:05:11 2025 GMT Subject: CN=0793C8C7373D360DA3F268656CCAC24AD61B6478 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:72:69:37:eb:11:74:66:f3:51:f1:58:52:ca: bd:7d:a0:4c:6f:97:ad:ae:7d:56:52:00:ba:b6:43: 8c:2b:99:41:65:16:3a:9a:5d:22:88:d7:ea:71:37: 68:f6:08:c6:81:dc:ad:96:79:5a:2d:e4:88:1a:93: 7d:75:0a:35:84:90:58:f0:a9:74:02:60:c7:24:e6: 39:70:b4:3f:c1:55:5a:4b:39:fc:8d:5c:01:c3:1a: ce:6a:12:8a:e2:bb:88:6e:78:9e:99:35:e7:0f:34: 57:cc:34:a0:2a:c0:02:72:3c:98:95:df:31:f1:37: f3:f6:96:92:31:4f:e4:5e:5f:1a:55:1a:62:9b:52: dd:51:a0:74:3f:ec:4c:03:68:1a:e5:ec:c9:59:b4: ef:80:5d:17:a6:22:50:79:16:2f:60:18:75:dc:73: 2d:54:95:48:68:6a:26:b4:ee:a3:fe:4b:cd:ea:73: a4:50:d7:cd:02:93:f2:bc:fb:6c:72:da:f8:1a:51: 3f:29:19:37:cd:12:dc:4a:b8:97:39:ad:cc:74:ab: 81:44:69:ca:87:bd:0a:d1:78:7d:10:3c:99:bc:8e: 13:21:8a:fe:ec:73:17:26:41:4c:ab:e0:82:0b:d6: 38:b0:aa:ca:2e:ca:9e:0c:04:b1:d7:bb:34:ff:99: 7b:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 07:93:C8:C7:37:3D:36:0D:A3:F2:68:65:6C:CA:C2:4A:D6:1B:64:78 X509v3 Authority Key Identifier: keyid:B8:B4:7D:E5:74:D4:4D:4C:C9:A3:E4:E2:E1:F7:AC:9C:B0:AE:A0:B5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/fa674668-0613-4a64-9323-547636b7d8b0/0/B8B47DE574D44D4CC9A3E4E2E1F7AC9CB0AEA0B5.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B8B47DE574D44D4CC9A3E4E2E1F7AC9CB0AEA0B5.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/fa674668-0613-4a64-9323-547636b7d8b0/0/B8B47DE574D44D4CC9A3E4E2E1F7AC9CB0AEA0B5.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5b:80:a9:4c:0e:35:f2:ac:c5:f2:e7:2d:59:8c:14:3d:84:46: 89:a2:3e:ff:f8:e3:1c:5b:f0:ec:24:2d:32:4b:ae:95:0a:01: 29:bd:9e:05:20:77:cf:1e:64:58:05:84:91:72:27:31:02:93: 79:01:08:80:ea:81:38:60:54:62:2c:b8:a3:13:3b:12:bb:be: 16:b0:7b:df:63:dd:b2:6a:f3:aa:dd:d1:b6:d6:36:63:18:c8: b3:2e:b4:4b:3e:3a:bc:b9:94:5d:72:6c:fd:87:d9:89:4d:3e: e8:7a:f2:59:cc:98:f8:ae:07:6d:b2:66:fd:4a:9a:36:60:72: ee:cf:59:b2:4a:66:e5:66:fe:8d:30:8f:88:02:90:74:e0:88: 11:d0:c7:bd:52:78:8b:50:81:ee:ba:3d:60:94:e8:fb:c2:2c: e1:d7:4a:84:b3:33:24:31:be:6d:ea:9c:2a:e9:8a:14:6a:e2: 6c:ff:59:6d:a8:a4:4b:5b:ff:46:2c:04:cd:5a:e3:fe:51:5f: 1e:cb:4a:b5:6a:19:f3:d8:24:c6:b3:8a:e4:78:dd:ff:ab:e9: 90:29:46:ef:93:2c:2c:ee:1b:49:2f:99:b8:90:e4:7f:36:19: 61:2f:df:10:85:97:35:49:f3:d7:7d:79:8c:f0:ca:c7:cd:1c: 90:ec:e7:70 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUQ7HF6Ko0gyYlP/EjHt//WGRbScowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjhCNDdERTU3NEQ0NEQ0Q0M5QTNFNEUyRTFGN0FDOUNC MEFFQTBCNTAeFw0yNTA5MDIwMTI3MTFaFw0yNTA5MDUwNTA1MTFaMDMxMTAvBgNV BAMTKDA3OTNDOEM3MzczRDM2MERBM0YyNjg2NTZDQ0FDMjRBRDYxQjY0NzgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDGcmk36xF0ZvNR8VhSyr19oExv l62ufVZSALq2Q4wrmUFlFjqaXSKI1+pxN2j2CMaB3K2WeVot5Igak311CjWEkFjw qXQCYMck5jlwtD/BVVpLOfyNXAHDGs5qEoriu4hueJ6ZNecPNFfMNKAqwAJyPJiV 3zHxN/P2lpIxT+ReXxpVGmKbUt1RoHQ/7EwDaBrl7MlZtO+AXRemIlB5Fi9gGHXc cy1UlUhoaia07qP+S83qc6RQ180Ck/K8+2xy2vgaUT8pGTfNEtxKuJc5rcx0q4FE acqHvQrReH0QPJm8jhMhiv7scxcmQUyr4IIL1jiwqsouyp4MBLHXuzT/mXt3AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUB5PIxzc9Ng2j8mhlbMrCStYbZHgwHwYDVR0j BBgwFoAUuLR95XTUTUzJo+Ti4fesnLCuoLUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m YTY3NDY2OC0wNjEzLTRhNjQtOTMyMy01NDc2MzZiN2Q4YjAvMC9COEI0N0RFNTc0 RDQ0RDRDQzlBM0U0RTJFMUY3QUM5Q0IwQUVBMEI1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQjhCNDdERTU3NEQ0NEQ0Q0M5QTNFNEUyRTFGN0FDOUNCMEFF QTBCNS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZmE2NzQ2NjgtMDYxMy00YTY0LTkz MjMtNTQ3NjM2YjdkOGIwLzAvQjhCNDdERTU3NEQ0NEQ0Q0M5QTNFNEUyRTFGN0FD OUNCMEFFQTBCNS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFuAqUwONfKsxfLnLVmMFD2ERomiPv/44xxb 8OwkLTJLrpUKASm9ngUgd88eZFgFhJFyJzECk3kBCIDqgThgVGIsuKMTOxK7vhaw e99j3bJq86rd0bbWNmMYyLMutEs+Ory5lF1ybP2H2YlNPuh68lnMmPiuB22yZv1K mjZgcu7PWbJKZuVm/o0wj4gCkHTgiBHQx71SeItQge66PWCU6PvCLOHXSoSzMyQx vm3qnCrpihRq4mz/WW2opEtb/0YsBM1a4/5RXx7LSrVqGfPYJMaziuR43f+r6ZAp Ru+TLCzuG0kvmbiQ5H82GWEv3xCFlzVJ89d9eYzwysfNHJDs53A= -----END CERTIFICATE-----Generated at Wed Sep 3 10:13:19 2025 by rpki-client