$ rpki-client -vvf repo-rpki.idnic.net/repo/758db87b-16cd-437a-a5b5-08cb35da97f0/0/8CBCE2EE006256C9A6207949314A7D1FCC415B5A.mft File: 8CBCE2EE006256C9A6207949314A7D1FCC415B5A.mft (raw, json) Hash identifier: 89ju5dOc0UIIXcVfvv9tKVK0IlrmxQaEZI3r3RpThO4= Subject key identifier: 3A:1A:9C:EA:C7:EA:4F:74:0C:E3:F3:7C:9F:79:5B:6D:6C:4A:7A:96 Authority key identifier: 8C:BC:E2:EE:00:62:56:C9:A6:20:79:49:31:4A:7D:1F:CC:41:5B:5A Certificate issuer: /CN=8CBCE2EE006256C9A6207949314A7D1FCC415B5A Certificate serial: 0E317307AB72A51C4B59E5B6B75ECFE547EC4D23 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8CBCE2EE006256C9A6207949314A7D1FCC415B5A.cer Subject info access: rsync://repo-rpki.idnic.net/repo/758db87b-16cd-437a-a5b5-08cb35da97f0/0/8CBCE2EE006256C9A6207949314A7D1FCC415B5A.mft Manifest number: 0204 Signing time: Tue 05 Aug 2025 05:01:30 +0000 Manifest this update: Tue 05 Aug 2025 04:56:30 +0000 Manifest next update: Fri 08 Aug 2025 15:01:30 +0000 Files and hashes: 1: 8CBCE2EE006256C9A6207949314A7D1FCC415B5A.crl (hash: PN90VtBPD37mOrdbbKNL6ZoZzjLHGv+fCuuODca771Q=) 2: 3130332e3138372e3131322e302f32332d3234203d3e20313439373230.roa (hash: tJd9lCwOT2E5aUEAYGLVk9Vox9W7mUTKc82A3hANFMo=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/758db87b-16cd-437a-a5b5-08cb35da97f0/0/8CBCE2EE006256C9A6207949314A7D1FCC415B5A.crl rsync://repo-rpki.idnic.net/repo/758db87b-16cd-437a-a5b5-08cb35da97f0/0/8CBCE2EE006256C9A6207949314A7D1FCC415B5A.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8CBCE2EE006256C9A6207949314A7D1FCC415B5A.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 08 Aug 2025 15:01:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0e:31:73:07:ab:72:a5:1c:4b:59:e5:b6:b7:5e:cf:e5:47:ec:4d:23 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8CBCE2EE006256C9A6207949314A7D1FCC415B5A Validity Not Before: Aug 5 04:56:30 2025 GMT Not After : Aug 8 15:01:30 2025 GMT Subject: CN=3A1A9CEAC7EA4F740CE3F37C9F795B6D6C4A7A96 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:2d:66:31:84:6c:ab:70:e5:63:4f:16:5f:41: 71:fd:53:4e:e0:4a:b0:7d:bf:72:c9:84:cf:15:62: 37:4b:12:41:47:bc:51:43:6c:39:d6:05:cc:8a:7a: 5d:1c:88:0b:df:85:67:50:09:18:97:f0:46:ab:7f: 7f:6e:3e:08:1f:2f:64:ec:a6:6a:9a:13:d0:5f:10: fe:08:4c:f5:92:c7:36:4c:99:c6:3e:ba:8d:d4:84: 2a:29:bb:30:40:ee:60:48:6a:9b:3f:8c:17:3f:d3: 29:92:ed:b7:44:48:36:5f:6c:49:0a:f6:1f:a3:01: dc:df:eb:25:fe:f1:25:68:b8:f1:6a:da:54:75:3a: 4a:16:87:e6:21:6b:98:a4:6c:6c:77:80:31:63:c2: d3:ac:91:93:2b:b2:95:38:43:c7:02:6b:cc:7a:91: 05:47:0b:6a:28:18:fb:8b:0d:5e:ca:d6:45:cc:79: 89:74:db:c9:3d:07:99:51:3a:c1:5d:d6:6b:cf:bf: e9:2f:75:ff:12:ce:ab:2d:00:93:0e:0e:16:d4:c9: 27:b8:22:7b:52:0f:b7:8c:13:f0:57:4e:0e:02:5d: a4:90:26:0d:d9:26:57:6f:8d:83:25:08:ad:84:6b: a6:52:b6:8e:97:94:36:ab:1d:0c:a0:c3:fd:b1:b4: 08:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:1A:9C:EA:C7:EA:4F:74:0C:E3:F3:7C:9F:79:5B:6D:6C:4A:7A:96 X509v3 Authority Key Identifier: keyid:8C:BC:E2:EE:00:62:56:C9:A6:20:79:49:31:4A:7D:1F:CC:41:5B:5A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/758db87b-16cd-437a-a5b5-08cb35da97f0/0/8CBCE2EE006256C9A6207949314A7D1FCC415B5A.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8CBCE2EE006256C9A6207949314A7D1FCC415B5A.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/758db87b-16cd-437a-a5b5-08cb35da97f0/0/8CBCE2EE006256C9A6207949314A7D1FCC415B5A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 03:35:fa:42:a5:5e:18:61:14:05:58:7a:11:ec:52:ca:11:a8: f9:35:63:65:fc:00:61:b3:a9:ee:3d:ed:88:8d:d2:c1:57:7c: f3:5b:5a:cb:45:f2:f5:58:b6:3a:41:ab:71:da:ad:b0:70:04: a4:f9:d4:9f:ea:90:8c:65:d5:ce:c0:86:75:cd:b3:bc:a8:b5: 76:a9:16:5e:b6:bd:df:92:0f:4f:88:98:11:ca:48:6d:42:f6: 10:57:a4:59:ad:9c:a6:af:81:6d:cb:70:45:4a:8d:bb:e0:0f: a7:ab:da:2a:4d:89:d5:4f:30:80:32:e0:61:75:cb:ac:12:4d: 51:c1:41:b0:63:67:ec:e9:c8:0f:d8:49:cc:13:2e:5e:6c:79: 1f:db:65:43:09:45:af:66:1b:f6:2c:88:0e:bc:8a:4e:42:26: 76:9d:f5:02:9d:90:e7:3f:d2:23:3c:5c:7a:c4:5c:cb:75:a9: 89:3f:3f:c9:b4:a4:ce:30:c4:11:5d:1c:28:c5:1b:e1:67:ce: 13:33:45:aa:3c:41:9f:0d:6e:0e:a1:e7:65:6d:50:6f:e7:1e: f1:04:9a:04:14:65:ec:4d:e1:99:57:1c:7f:7d:33:ac:12:3c: 9a:17:51:8e:2d:db:98:b7:27:fa:53:53:be:69:f2:5a:b9:79: 55:49:f3:59 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUDjFzB6typRxLWeW2t17P5UfsTSMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOENCQ0UyRUUwMDYyNTZDOUE2MjA3OTQ5MzE0QTdEMUZD QzQxNUI1QTAeFw0yNTA4MDUwNDU2MzBaFw0yNTA4MDgxNTAxMzBaMDMxMTAvBgNV BAMTKDNBMUE5Q0VBQzdFQTRGNzQwQ0UzRjM3QzlGNzk1QjZENkM0QTdBOTYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDGLWYxhGyrcOVjTxZfQXH9U07g SrB9v3LJhM8VYjdLEkFHvFFDbDnWBcyKel0ciAvfhWdQCRiX8Earf39uPggfL2Ts pmqaE9BfEP4ITPWSxzZMmcY+uo3UhCopuzBA7mBIaps/jBc/0ymS7bdESDZfbEkK 9h+jAdzf6yX+8SVouPFq2lR1OkoWh+Yha5ikbGx3gDFjwtOskZMrspU4Q8cCa8x6 kQVHC2ooGPuLDV7K1kXMeYl028k9B5lROsFd1mvPv+kvdf8SzqstAJMODhbUySe4 IntSD7eME/BXTg4CXaSQJg3ZJldvjYMlCK2Ea6ZSto6XlDarHQygw/2xtAi9AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUOhqc6sfqT3QM4/N8n3lbbWxKepYwHwYDVR0j BBgwFoAUjLzi7gBiVsmmIHlJMUp9H8xBW1owDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 NThkYjg3Yi0xNmNkLTQzN2EtYTViNS0wOGNiMzVkYTk3ZjAvMC84Q0JDRTJFRTAw NjI1NkM5QTYyMDc5NDkzMTRBN0QxRkNDNDE1QjVBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOENCQ0UyRUUwMDYyNTZDOUE2MjA3OTQ5MzE0QTdEMUZDQzQx NUI1QS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNzU4ZGI4N2ItMTZjZC00MzdhLWE1 YjUtMDhjYjM1ZGE5N2YwLzAvOENCQ0UyRUUwMDYyNTZDOUE2MjA3OTQ5MzE0QTdE MUZDQzQxNUI1QS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAM1+kKlXhhhFAVYehHsUsoRqPk1Y2X8AGGz qe497YiN0sFXfPNbWstF8vVYtjpBq3HarbBwBKT51J/qkIxl1c7AhnXNs7yotXap Fl62vd+SD0+ImBHKSG1C9hBXpFmtnKavgW3LcEVKjbvgD6er2ipNidVPMIAy4GF1 y6wSTVHBQbBjZ+zpyA/YScwTLl5seR/bZUMJRa9mG/YsiA68ik5CJnad9QKdkOc/ 0iM8XHrEXMt1qYk/P8m0pM4wxBFdHCjFG+FnzhMzRao8QZ8Nbg6h52VtUG/nHvEE mgQUZexN4ZlXHH99M6wSPJoXUY4t25i3J/pTU75p8lq5eVVJ81k= -----END CERTIFICATE-----Generated at Thu Aug 7 00:27:07 2025 by rpki-client