$ rpki-client -vvf repo-rpki.idnic.net/repo/2b69822c-2e22-48be-8ba2-634f582c2ecb/0/8FB177AE83526D713C1240D5CEFAF73844F7F4E5.mft File: 8FB177AE83526D713C1240D5CEFAF73844F7F4E5.mft (raw, json) Hash identifier: XrxwTsOv7D2wjH82b02XwFkYWEIFNca1L03GIFrA444= Subject key identifier: 44:0D:15:5D:1E:45:31:FB:A5:0B:DD:C4:91:52:AE:33:0F:C8:A8:82 Authority key identifier: 8F:B1:77:AE:83:52:6D:71:3C:12:40:D5:CE:FA:F7:38:44:F7:F4:E5 Certificate issuer: /CN=8FB177AE83526D713C1240D5CEFAF73844F7F4E5 Certificate serial: 16888853C12242E01E9544746DCE9A3C7DE2B41F Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8FB177AE83526D713C1240D5CEFAF73844F7F4E5.cer Subject info access: rsync://repo-rpki.idnic.net/repo/2b69822c-2e22-48be-8ba2-634f582c2ecb/0/8FB177AE83526D713C1240D5CEFAF73844F7F4E5.mft Manifest number: 04FB Signing time: Fri 08 Aug 2025 04:32:14 +0000 Manifest this update: Fri 08 Aug 2025 04:27:14 +0000 Manifest next update: Mon 11 Aug 2025 15:40:14 +0000 Files and hashes: 1: 3230322e3135302e3132382e302f31392d3234203d3e203233393439.roa (hash: IcMuwwFWI9N+s2xXptufPfoLzyxZbJESlpNOp3hNLjk=) 2: 3130332e32342e3134382e302f32322d3234203d3e203233393439.roa (hash: ZdZBTzxEvF0Eo40CSK2hJ56qvhPrglPp9cbPLo54JU8=) 3: 8FB177AE83526D713C1240D5CEFAF73844F7F4E5.crl (hash: NTnJywXzJCpAC9tfAUp6UQAwTWZPqq/TnhfyKL8QYa0=) 4: 34332e3232392e32302e302f32322d3234203d3e203233393439.roa (hash: eFCW4mBhrgv32rd+aPVfExuT3QEaHahKTCkeKrhzQUs=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/2b69822c-2e22-48be-8ba2-634f582c2ecb/0/8FB177AE83526D713C1240D5CEFAF73844F7F4E5.crl rsync://repo-rpki.idnic.net/repo/2b69822c-2e22-48be-8ba2-634f582c2ecb/0/8FB177AE83526D713C1240D5CEFAF73844F7F4E5.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8FB177AE83526D713C1240D5CEFAF73844F7F4E5.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 11 Aug 2025 15:40:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 16:88:88:53:c1:22:42:e0:1e:95:44:74:6d:ce:9a:3c:7d:e2:b4:1f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8FB177AE83526D713C1240D5CEFAF73844F7F4E5 Validity Not Before: Aug 8 04:27:14 2025 GMT Not After : Aug 11 15:40:14 2025 GMT Subject: CN=440D155D1E4531FBA50BDDC49152AE330FC8A882 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:ee:1c:0e:68:4d:98:cf:d5:28:9a:11:13:f6: fa:ee:41:e0:a2:01:a8:22:28:2f:c4:cf:c3:3d:14: 1b:f3:da:c2:d1:01:e0:7a:a3:a9:4a:03:ba:e5:ea: 7c:2e:5d:69:84:43:87:b4:44:b5:f6:45:fe:2f:f7: a9:1c:a8:d4:2d:ca:44:e9:82:ef:7a:09:f2:04:1c: b2:6b:7a:f7:f2:64:fe:f7:ea:40:73:78:ea:1a:13: 7e:0b:8a:34:f9:9b:5e:38:b1:4d:02:77:cb:ce:19: 2d:5d:1e:ce:12:c4:30:76:b9:33:3e:db:d6:50:cc: 4c:ac:53:80:7b:89:57:5d:d8:8a:c0:c9:7e:d0:fe: 63:62:2f:d9:2a:88:03:01:c6:c6:f7:3b:62:59:0c: 79:56:b9:30:9a:e8:2b:e5:6f:43:a6:95:45:db:3a: 80:b9:ea:fb:0e:66:7a:78:18:e9:d8:ce:67:37:1d: 62:cb:e3:19:4d:1a:35:89:0b:1c:e7:22:20:7e:9e: 77:fe:c8:bd:61:b2:57:8e:de:07:77:26:ec:eb:0d: fe:1c:ca:59:1b:63:63:9d:17:b1:be:04:29:46:de: 69:0d:b7:51:39:48:84:4a:93:b1:f3:ab:45:ec:ee: d6:c1:2e:1c:a3:fc:a1:64:6b:32:01:84:c1:0b:34: 1a:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 44:0D:15:5D:1E:45:31:FB:A5:0B:DD:C4:91:52:AE:33:0F:C8:A8:82 X509v3 Authority Key Identifier: keyid:8F:B1:77:AE:83:52:6D:71:3C:12:40:D5:CE:FA:F7:38:44:F7:F4:E5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/2b69822c-2e22-48be-8ba2-634f582c2ecb/0/8FB177AE83526D713C1240D5CEFAF73844F7F4E5.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8FB177AE83526D713C1240D5CEFAF73844F7F4E5.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/2b69822c-2e22-48be-8ba2-634f582c2ecb/0/8FB177AE83526D713C1240D5CEFAF73844F7F4E5.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption df:a4:32:d9:2b:c1:c3:ab:29:54:4f:b3:39:43:15:62:82:cf: f8:55:e2:14:cb:e4:f0:10:ae:d4:0c:44:40:62:bb:ac:f1:5a: 9f:8e:23:bf:4d:eb:17:15:24:ed:44:92:46:40:d5:90:ea:50: c3:a1:c0:5b:bf:4a:4d:92:3c:d1:bd:26:b8:aa:e6:1b:43:94: 5e:3d:11:40:46:8c:2c:0b:37:1b:29:42:86:c5:9e:b4:4c:d5: 38:b2:9d:4d:9c:c9:2c:cb:e6:59:da:61:21:6d:87:12:bc:db: 47:98:ff:4a:fe:dc:c2:36:a6:40:0f:f0:d1:39:b2:d2:de:94: 4d:4e:d7:f1:80:a3:f5:47:cc:c4:f8:fd:a8:2e:78:06:cf:a0: e2:47:15:ef:2a:3d:f8:81:a2:c8:42:af:27:7a:93:47:f6:36: 5f:47:91:99:57:d1:97:10:ff:22:d1:ad:2b:cd:d9:cb:d0:e0: 5c:92:a5:aa:48:d5:b4:11:80:54:fd:89:95:d9:7f:3b:b9:6e: 46:59:39:f3:dc:0a:34:b3:06:5a:e2:88:20:94:05:74:13:5a: d9:ad:ab:86:fd:c1:b2:77:92:9c:ba:56:84:55:00:8d:31:1c: cc:02:8d:43:a8:7a:91:a8:4f:e6:89:0e:84:3b:dd:29:5a:28: e7:03:3d:42 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUFoiIU8EiQuAelUR0bc6aPH3itB8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEZCMTc3QUU4MzUyNkQ3MTNDMTI0MEQ1Q0VGQUY3Mzg0 NEY3RjRFNTAeFw0yNTA4MDgwNDI3MTRaFw0yNTA4MTExNTQwMTRaMDMxMTAvBgNV BAMTKDQ0MEQxNTVEMUU0NTMxRkJBNTBCRERDNDkxNTJBRTMzMEZDOEE4ODIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDM7hwOaE2Yz9UomhET9vruQeCi AagiKC/Ez8M9FBvz2sLRAeB6o6lKA7rl6nwuXWmEQ4e0RLX2Rf4v96kcqNQtykTp gu96CfIEHLJrevfyZP736kBzeOoaE34LijT5m144sU0Cd8vOGS1dHs4SxDB2uTM+ 29ZQzEysU4B7iVdd2IrAyX7Q/mNiL9kqiAMBxsb3O2JZDHlWuTCa6Cvlb0OmlUXb OoC56vsOZnp4GOnYzmc3HWLL4xlNGjWJCxznIiB+nnf+yL1hsleO3gd3JuzrDf4c ylkbY2OdF7G+BClG3mkNt1E5SIRKk7Hzq0Xs7tbBLhyj/KFkazIBhMELNBoPAgMB AAGjggI8MIICODAdBgNVHQ4EFgQURA0VXR5FMfulC93EkVKuMw/IqIIwHwYDVR0j BBgwFoAUj7F3roNSbXE8EkDVzvr3OET39OUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y YjY5ODIyYy0yZTIyLTQ4YmUtOGJhMi02MzRmNTgyYzJlY2IvMC84RkIxNzdBRTgz NTI2RDcxM0MxMjQwRDVDRUZBRjczODQ0RjdGNEU1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOEZCMTc3QUU4MzUyNkQ3MTNDMTI0MEQ1Q0VGQUY3Mzg0NEY3 RjRFNS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMmI2OTgyMmMtMmUyMi00OGJlLThi YTItNjM0ZjU4MmMyZWNiLzAvOEZCMTc3QUU4MzUyNkQ3MTNDMTI0MEQ1Q0VGQUY3 Mzg0NEY3RjRFNS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAN+kMtkrwcOrKVRPszlDFWKCz/hV4hTL5PAQ rtQMREBiu6zxWp+OI79N6xcVJO1EkkZA1ZDqUMOhwFu/Sk2SPNG9Jriq5htDlF49 EUBGjCwLNxspQobFnrRM1TiynU2cySzL5lnaYSFthxK820eY/0r+3MI2pkAP8NE5 stLelE1O1/GAo/VHzMT4/agueAbPoOJHFe8qPfiBoshCryd6k0f2Nl9HkZlX0ZcQ /yLRrSvN2cvQ4FySpapI1bQRgFT9iZXZfzu5bkZZOfPcCjSzBlriiCCUBXQTWtmt q4b9wbJ3kpy6VoRVAI0xHMwCjUOoepGoT+aJDoQ73SlaKOcDPUI= -----END CERTIFICATE-----Generated at Sat Aug 9 20:41:25 2025 by rpki-client