$ rpki-client -vvf repo-rpki.idnic.net/repo/fbb5fa4a-bea6-464f-b409-11d9a3761a6c/1/8D4158039A86C34D5D36A83DDC40C959EDA21342.mft File: 8D4158039A86C34D5D36A83DDC40C959EDA21342.mft (raw, json) Hash identifier: eJP7QlqksTZwbLj0yqFNoaLIB0iNsldeqGiPe9LJtD8= Subject key identifier: 50:F6:A6:25:1C:32:BC:25:5F:E8:4C:B5:E5:3A:A9:4D:05:BE:C5:8B Authority key identifier: 8D:41:58:03:9A:86:C3:4D:5D:36:A8:3D:DC:40:C9:59:ED:A2:13:42 Certificate issuer: /CN=8D4158039A86C34D5D36A83DDC40C959EDA21342 Certificate serial: 049B40DAE6531CC2F8B174B897B0F771F028C547 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8D4158039A86C34D5D36A83DDC40C959EDA21342.cer Subject info access: rsync://repo-rpki.idnic.net/repo/fbb5fa4a-bea6-464f-b409-11d9a3761a6c/1/8D4158039A86C34D5D36A83DDC40C959EDA21342.mft Manifest number: BF Signing time: Thu 04 Sep 2025 07:51:07 +0000 Manifest this update: Thu 04 Sep 2025 07:46:07 +0000 Manifest next update: Sun 07 Sep 2025 13:01:07 +0000 Files and hashes: 1: 8D4158039A86C34D5D36A83DDC40C959EDA21342.crl (hash: itPvzJanV1KKbwRBKC1OltuC5FKdSHXP3yPczFufAkg=) 2: 323030313a6466333a643363303a3a2f34382d3438203d3e20313532373930.roa (hash: XrGI552jWV7sNKcYT4/cR05JGNQdxhyBqphUE36lIJ0=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/fbb5fa4a-bea6-464f-b409-11d9a3761a6c/1/8D4158039A86C34D5D36A83DDC40C959EDA21342.crl rsync://repo-rpki.idnic.net/repo/fbb5fa4a-bea6-464f-b409-11d9a3761a6c/1/8D4158039A86C34D5D36A83DDC40C959EDA21342.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8D4158039A86C34D5D36A83DDC40C959EDA21342.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 07 Sep 2025 13:01:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 04:9b:40:da:e6:53:1c:c2:f8:b1:74:b8:97:b0:f7:71:f0:28:c5:47 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8D4158039A86C34D5D36A83DDC40C959EDA21342 Validity Not Before: Sep 4 07:46:07 2025 GMT Not After : Sep 7 13:01:07 2025 GMT Subject: CN=50F6A6251C32BC255FE84CB5E53AA94D05BEC58B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:e0:ea:19:ce:85:25:69:22:f4:22:f9:f9:7c: b3:57:41:85:55:52:40:d9:ee:2d:66:ca:bf:52:29: af:44:b3:ca:cf:e9:3d:89:8b:8a:08:8f:97:35:4f: 93:55:7d:42:ca:72:cb:ba:26:4b:80:74:a8:7d:29: b3:a0:4a:91:f4:6c:3d:93:6f:d9:4e:95:86:29:02: f2:e9:b5:5c:f7:64:dd:f1:8d:de:f6:2c:16:d7:dd: 14:41:33:67:6e:90:06:1f:bf:7a:d3:2f:42:fb:94: fa:65:d6:55:4c:5c:54:df:9e:32:01:8e:c1:35:34: 04:8c:50:33:b7:3b:07:36:4f:48:c4:c5:11:1d:c8: 7a:be:dc:cd:8f:95:49:7e:d6:27:7c:fc:9b:aa:ac: 3a:56:4b:d7:73:79:b1:9f:f7:a7:9f:49:b0:9e:50: dd:74:f4:b1:9a:1f:88:bc:7c:8f:f7:05:dd:ca:c9: 66:10:99:79:4c:1f:98:ca:3d:79:f7:1d:b4:cd:01: 8e:a4:b1:ee:58:ec:4c:7c:46:38:87:da:d1:ad:c9: ba:c6:e4:81:0a:ff:d0:25:ea:42:71:fb:7d:ed:e8: f1:8a:6e:b6:51:c1:62:0c:32:a9:18:fe:a1:7e:87: 7d:2c:3e:07:2f:a6:55:aa:4a:d9:a8:02:52:5f:69: 3d:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 50:F6:A6:25:1C:32:BC:25:5F:E8:4C:B5:E5:3A:A9:4D:05:BE:C5:8B X509v3 Authority Key Identifier: keyid:8D:41:58:03:9A:86:C3:4D:5D:36:A8:3D:DC:40:C9:59:ED:A2:13:42 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/fbb5fa4a-bea6-464f-b409-11d9a3761a6c/1/8D4158039A86C34D5D36A83DDC40C959EDA21342.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8D4158039A86C34D5D36A83DDC40C959EDA21342.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/fbb5fa4a-bea6-464f-b409-11d9a3761a6c/1/8D4158039A86C34D5D36A83DDC40C959EDA21342.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption df:f1:cd:96:38:d6:ff:b3:15:e8:43:64:bb:6f:ba:5e:4c:e1: c5:a5:74:30:ee:47:e5:ed:ec:4d:b7:7f:9c:58:fa:0b:af:3e: b2:ea:66:ae:14:55:53:c5:83:fe:e4:77:00:23:0d:35:ee:b0: 5f:4e:20:97:5a:a3:67:98:91:e7:5e:0d:ee:22:db:4e:ee:e7: d7:1f:c1:a5:bf:38:74:a3:8c:62:78:8c:37:b9:62:3d:d6:08: 61:3d:42:f4:c1:00:36:d8:0c:2a:d0:d8:89:4d:8b:a2:83:82: 77:bd:5e:5b:2f:7f:a2:0d:61:2c:ea:fe:19:65:c0:8d:6b:61: 18:6b:fd:59:dc:3c:25:15:67:ed:26:1f:f3:f7:80:53:5c:fa: 6c:72:5c:99:cd:27:a8:27:bc:85:93:a8:7d:79:92:92:28:b0: af:03:91:1d:a8:4f:8d:51:be:1c:3c:dd:74:58:e0:b1:49:5f: fc:5d:87:7e:91:7d:84:32:4e:b1:ab:e5:67:80:91:21:33:7a: cb:b7:9d:49:35:d3:cb:ce:a8:8b:35:e6:2c:b9:20:ff:b9:44: ad:10:90:8f:24:c4:77:b2:b9:94:d6:ad:9f:01:f1:98:8e:11: be:8e:1a:3b:c8:c7:bd:ec:b2:16:ab:c4:15:94:b3:54:06:94: 75:b7:ac:1c -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUBJtA2uZTHML4sXS4l7D3cfAoxUcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEQ0MTU4MDM5QTg2QzM0RDVEMzZBODNEREM0MEM5NTlF REEyMTM0MjAeFw0yNTA5MDQwNzQ2MDdaFw0yNTA5MDcxMzAxMDdaMDMxMTAvBgNV BAMTKDUwRjZBNjI1MUMzMkJDMjU1RkU4NENCNUU1M0FBOTREMDVCRUM1OEIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCz4OoZzoUlaSL0Ivn5fLNXQYVV UkDZ7i1myr9SKa9Es8rP6T2Ji4oIj5c1T5NVfULKcsu6JkuAdKh9KbOgSpH0bD2T b9lOlYYpAvLptVz3ZN3xjd72LBbX3RRBM2dukAYfv3rTL0L7lPpl1lVMXFTfnjIB jsE1NASMUDO3Owc2T0jExREdyHq+3M2PlUl+1id8/JuqrDpWS9dzebGf96efSbCe UN109LGaH4i8fI/3Bd3KyWYQmXlMH5jKPXn3HbTNAY6kse5Y7Ex8RjiH2tGtybrG 5IEK/9Al6kJx+33t6PGKbrZRwWIMMqkY/qF+h30sPgcvplWqStmoAlJfaT21AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUUPamJRwyvCVf6Ey15TqpTQW+xYswHwYDVR0j BBgwFoAUjUFYA5qGw01dNqg93EDJWe2iE0IwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m YmI1ZmE0YS1iZWE2LTQ2NGYtYjQwOS0xMWQ5YTM3NjFhNmMvMS84RDQxNTgwMzlB ODZDMzRENUQzNkE4M0REQzQwQzk1OUVEQTIxMzQyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOEQ0MTU4MDM5QTg2QzM0RDVEMzZBODNEREM0MEM5NTlFREEy MTM0Mi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZmJiNWZhNGEtYmVhNi00NjRmLWI0 MDktMTFkOWEzNzYxYTZjLzEvOEQ0MTU4MDM5QTg2QzM0RDVEMzZBODNEREM0MEM5 NTlFREEyMTM0Mi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAN/xzZY41v+zFehDZLtvul5M4cWldDDuR+Xt 7E23f5xY+guvPrLqZq4UVVPFg/7kdwAjDTXusF9OIJdao2eYkedeDe4i207u59cf waW/OHSjjGJ4jDe5Yj3WCGE9QvTBADbYDCrQ2IlNi6KDgne9Xlsvf6INYSzq/hll wI1rYRhr/VncPCUVZ+0mH/P3gFNc+mxyXJnNJ6gnvIWTqH15kpIosK8DkR2oT41R vhw83XRY4LFJX/xdh36RfYQyTrGr5WeAkSEzesu3nUk108vOqIs15iy5IP+5RK0Q kI8kxHeyuZTWrZ8B8ZiOEb6OGjvIx73ssharxBWUs1QGlHW3rBw= -----END CERTIFICATE-----Generated at Fri Sep 5 09:55:53 2025 by rpki-client