$ rpki-client -vvf repo-rpki.idnic.net/repo/fba48e4e-fc95-4acf-beac-d93a0f694421/0/8659BE8500DEBB314448F1412FA1E264025A4148.mft File: 8659BE8500DEBB314448F1412FA1E264025A4148.mft (raw, json) Hash identifier: rVyOv9wtZ24HvxlcQu1zUDHZLeCM4cTjs2ZrP2LqAmE= Subject key identifier: 9F:20:61:6C:4C:98:D3:E5:27:63:F3:87:79:39:D5:5A:4C:BD:DE:64 Authority key identifier: 86:59:BE:85:00:DE:BB:31:44:48:F1:41:2F:A1:E2:64:02:5A:41:48 Certificate issuer: /CN=8659BE8500DEBB314448F1412FA1E264025A4148 Certificate serial: 5C0F4F9CB5E883827C4C680920269C1FBA8E3B32 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8659BE8500DEBB314448F1412FA1E264025A4148.cer Subject info access: rsync://repo-rpki.idnic.net/repo/fba48e4e-fc95-4acf-beac-d93a0f694421/0/8659BE8500DEBB314448F1412FA1E264025A4148.mft Manifest number: 01D0 Signing time: Fri 05 Sep 2025 00:01:00 +0000 Manifest this update: Thu 04 Sep 2025 23:56:00 +0000 Manifest next update: Mon 08 Sep 2025 10:53:00 +0000 Files and hashes: 1: 3130332e3136342e3139332e302f32342d3234203d3e20313431393339.roa (hash: o1EC2V3xudD67YQ4ezVJUlO4R22GwhC3UT5xp118BUc=) 2: 3130332e3136342e3139322e302f32342d3234203d3e20313431393339.roa (hash: V8FXW6i5FhDhWnneEy9JcwyRx6grWMlQZ/xTqZlJefU=) 3: 3130332e3136342e3139322e302f32332d3234203d3e20313431393339.roa (hash: DGmbIbAAoCUymOY6DDh+0S4rcPuhCP+BlaH232+y3TY=) 4: 8659BE8500DEBB314448F1412FA1E264025A4148.crl (hash: OJppScGULU5+aHz8TkUaTDw+oox6uTpHvQFpdkfmFeU=) 5: 323030313a6466313a316263303a3a2f34382d3438203d3e20313431393339.roa (hash: E8NUcaKWe3ABHFVxNWSSIkp1m8C7YtMxKMRA2hg1NmI=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/fba48e4e-fc95-4acf-beac-d93a0f694421/0/8659BE8500DEBB314448F1412FA1E264025A4148.crl rsync://repo-rpki.idnic.net/repo/fba48e4e-fc95-4acf-beac-d93a0f694421/0/8659BE8500DEBB314448F1412FA1E264025A4148.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8659BE8500DEBB314448F1412FA1E264025A4148.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 08 Sep 2025 10:53:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5c:0f:4f:9c:b5:e8:83:82:7c:4c:68:09:20:26:9c:1f:ba:8e:3b:32 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8659BE8500DEBB314448F1412FA1E264025A4148 Validity Not Before: Sep 4 23:56:00 2025 GMT Not After : Sep 8 10:53:00 2025 GMT Subject: CN=9F20616C4C98D3E52763F3877939D55A4CBDDE64 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:27:93:03:60:96:e8:51:34:bb:e5:93:df:05: 2a:48:52:f8:72:22:fd:26:2f:84:d3:33:a9:2f:72: 8c:de:9f:4a:46:cb:fb:72:6c:25:61:95:96:37:b3: 50:58:40:71:d5:f4:f9:0b:30:fa:e7:c0:04:de:d1: 93:12:52:bc:3a:1f:2d:70:3c:76:2f:81:31:2b:f4: 79:a8:fe:2b:c2:f8:3d:1d:6e:a0:d7:1a:24:bc:d1: 5c:7c:02:3c:ea:67:a8:46:89:a6:f1:01:ff:0e:c5: 04:40:2a:c4:f7:af:2a:98:a7:6e:19:6a:8d:26:5a: 90:88:2b:58:3a:52:70:72:14:78:ae:ae:a1:0e:85: 33:b8:df:fc:b5:0f:dd:4a:02:2e:b3:b2:58:30:0c: ff:17:91:67:eb:e9:00:7b:5c:b8:cd:48:5b:8c:8a: 93:18:8f:68:31:62:e8:2e:60:db:e0:77:c3:b0:7d: ee:8c:72:0e:d0:59:3c:09:18:ad:3e:3d:cc:bb:64: 11:7f:fd:fd:fd:14:f5:b9:6d:27:9e:17:79:a8:11: 80:ab:0e:8f:d3:39:ec:fb:9a:c4:59:d7:14:35:5d: ec:fe:73:5f:79:6f:c1:93:eb:4e:8a:8f:15:02:ef: 68:51:e2:fb:26:2b:5a:f0:11:8d:38:da:f4:0b:76: 4a:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9F:20:61:6C:4C:98:D3:E5:27:63:F3:87:79:39:D5:5A:4C:BD:DE:64 X509v3 Authority Key Identifier: keyid:86:59:BE:85:00:DE:BB:31:44:48:F1:41:2F:A1:E2:64:02:5A:41:48 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/fba48e4e-fc95-4acf-beac-d93a0f694421/0/8659BE8500DEBB314448F1412FA1E264025A4148.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8659BE8500DEBB314448F1412FA1E264025A4148.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/fba48e4e-fc95-4acf-beac-d93a0f694421/0/8659BE8500DEBB314448F1412FA1E264025A4148.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 48:49:a6:88:bb:a6:1a:a1:c0:ae:84:23:fa:37:de:f0:fc:a6: 1b:52:f4:25:ce:c4:eb:93:69:ad:80:e2:1c:32:af:bf:d6:dd: b9:14:09:d5:c0:d7:4c:fd:53:c5:a1:86:61:43:25:da:9b:df: 72:e0:64:29:c5:4e:41:29:ca:4b:ad:20:0f:07:a9:29:f0:79: 7c:39:70:ef:2e:39:2c:7b:1c:43:3e:d2:ed:9a:74:3a:d9:dc: 4a:e8:01:97:0f:02:40:41:3c:ab:b3:f7:97:26:76:59:a2:20: 34:4b:f5:df:ca:ac:dd:04:ba:34:09:c6:20:1e:3c:f6:f0:27: 00:23:92:01:0b:ae:c3:df:e2:be:6f:c8:82:9e:6a:1a:93:e5: c4:4d:02:96:ef:ad:f6:a1:6f:08:56:d9:1b:a4:77:44:21:17: 65:40:6c:18:12:94:86:5e:7b:d5:d6:e2:f3:d8:2d:15:fd:3a: ab:30:9d:57:5e:33:44:7b:4a:01:16:10:df:4b:a1:6d:17:02: 29:b7:6c:60:82:ae:17:d0:5f:ed:4e:02:af:f7:35:21:2f:7a: 5f:9d:c3:6f:ed:89:cf:c7:15:14:38:0a:a5:8a:e6:29:42:3c: e8:91:88:6f:a7:08:76:9a:a0:fa:c7:0e:2c:2f:62:8a:37:bb: 81:bb:0d:b8 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUXA9PnLXog4J8TGgJICacH7qOOzIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODY1OUJFODUwMERFQkIzMTQ0NDhGMTQxMkZBMUUyNjQw MjVBNDE0ODAeFw0yNTA5MDQyMzU2MDBaFw0yNTA5MDgxMDUzMDBaMDMxMTAvBgNV BAMTKDlGMjA2MTZDNEM5OEQzRTUyNzYzRjM4Nzc5MzlENTVBNENCRERFNjQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCrJ5MDYJboUTS75ZPfBSpIUvhy Iv0mL4TTM6kvcozen0pGy/tybCVhlZY3s1BYQHHV9PkLMPrnwATe0ZMSUrw6Hy1w PHYvgTEr9Hmo/ivC+D0dbqDXGiS80Vx8AjzqZ6hGiabxAf8OxQRAKsT3ryqYp24Z ao0mWpCIK1g6UnByFHiurqEOhTO43/y1D91KAi6zslgwDP8XkWfr6QB7XLjNSFuM ipMYj2gxYuguYNvgd8Owfe6Mcg7QWTwJGK0+Pcy7ZBF//f39FPW5bSeeF3moEYCr Do/TOez7msRZ1xQ1Xez+c195b8GT606KjxUC72hR4vsmK1rwEY042vQLdkqFAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUnyBhbEyY0+UnY/OHeTnVWky93mQwHwYDVR0j BBgwFoAUhlm+hQDeuzFESPFBL6HiZAJaQUgwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m YmE0OGU0ZS1mYzk1LTRhY2YtYmVhYy1kOTNhMGY2OTQ0MjEvMC84NjU5QkU4NTAw REVCQjMxNDQ0OEYxNDEyRkExRTI2NDAyNUE0MTQ4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvODY1OUJFODUwMERFQkIzMTQ0NDhGMTQxMkZBMUUyNjQwMjVB NDE0OC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZmJhNDhlNGUtZmM5NS00YWNmLWJl YWMtZDkzYTBmNjk0NDIxLzAvODY1OUJFODUwMERFQkIzMTQ0NDhGMTQxMkZBMUUy NjQwMjVBNDE0OC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEhJpoi7phqhwK6EI/o33vD8phtS9CXOxOuT aa2A4hwyr7/W3bkUCdXA10z9U8WhhmFDJdqb33LgZCnFTkEpykutIA8HqSnweXw5 cO8uOSx7HEM+0u2adDrZ3EroAZcPAkBBPKuz95cmdlmiIDRL9d/KrN0EujQJxiAe PPbwJwAjkgELrsPf4r5vyIKeahqT5cRNApbvrfahbwhW2Rukd0QhF2VAbBgSlIZe e9XW4vPYLRX9OqswnVdeM0R7SgEWEN9LoW0XAim3bGCCrhfQX+1OAq/3NSEvel+d w2/tic/HFRQ4CqWK5ilCPOiRiG+nCHaaoPrHDiwvYoo3u4G7Dbg= -----END CERTIFICATE-----Generated at Fri Sep 5 10:36:19 2025 by rpki-client