$ rpki-client -vvf repo-rpki.idnic.net/repo/785bff41-2420-42b1-9b83-d41c18043d65/0/8ACB520B0E2DE66CE528B80DA6A5ED66E4B5CF2E.mft File: 8ACB520B0E2DE66CE528B80DA6A5ED66E4B5CF2E.mft (raw, json) Hash identifier: 6lEe+/BjyfrJ2JtU/wOXf9OMGJ2D+SUXPGNGHVMwx8k= Subject key identifier: 11:65:E0:67:AF:B6:EA:E1:3A:7C:64:02:E7:43:10:8C:C6:4F:AE:6E Authority key identifier: 8A:CB:52:0B:0E:2D:E6:6C:E5:28:B8:0D:A6:A5:ED:66:E4:B5:CF:2E Certificate issuer: /CN=8ACB520B0E2DE66CE528B80DA6A5ED66E4B5CF2E Certificate serial: 48F402594BED790E391302D79FDF6E4E09156EE5 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8ACB520B0E2DE66CE528B80DA6A5ED66E4B5CF2E.cer Subject info access: rsync://repo-rpki.idnic.net/repo/785bff41-2420-42b1-9b83-d41c18043d65/0/8ACB520B0E2DE66CE528B80DA6A5ED66E4B5CF2E.mft Manifest number: 0183 Signing time: Tue 05 Aug 2025 23:51:25 +0000 Manifest this update: Tue 05 Aug 2025 23:46:25 +0000 Manifest next update: Sat 09 Aug 2025 11:42:25 +0000 Files and hashes: 1: 3130332e3137392e3235322e302f32332d3233203d3e20313439333530.roa (hash: SOLno68sPPJ1WEP8d6UDWvS0+ZdY5j1GxBVKsZxB5cY=) 2: 8ACB520B0E2DE66CE528B80DA6A5ED66E4B5CF2E.crl (hash: 0AtzhXl7FPIE2I+t7uROuVMebevEHkNWXnpztBRGlmc=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/785bff41-2420-42b1-9b83-d41c18043d65/0/8ACB520B0E2DE66CE528B80DA6A5ED66E4B5CF2E.crl rsync://repo-rpki.idnic.net/repo/785bff41-2420-42b1-9b83-d41c18043d65/0/8ACB520B0E2DE66CE528B80DA6A5ED66E4B5CF2E.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8ACB520B0E2DE66CE528B80DA6A5ED66E4B5CF2E.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 09 Aug 2025 11:42:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 48:f4:02:59:4b:ed:79:0e:39:13:02:d7:9f:df:6e:4e:09:15:6e:e5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8ACB520B0E2DE66CE528B80DA6A5ED66E4B5CF2E Validity Not Before: Aug 5 23:46:25 2025 GMT Not After : Aug 9 11:42:25 2025 GMT Subject: CN=1165E067AFB6EAE13A7C6402E743108CC64FAE6E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:fb:1a:5a:86:fa:f6:29:5b:7b:2c:73:04:99: c7:02:f2:76:9e:ed:c2:18:a5:cc:3e:72:64:b2:15: 4c:10:44:a0:ef:eb:ba:86:4f:ae:5f:6a:8e:30:90: 36:69:89:fa:15:e3:d4:9c:54:ed:28:df:e9:a6:93: 9a:0c:49:2e:dc:6c:2d:5b:37:8b:4a:a7:d8:d3:a2: ff:e4:c7:44:25:c3:00:70:ac:ff:49:01:95:2a:93: bf:32:e8:97:b1:40:7b:c4:39:ca:01:06:3e:6a:b0: e1:60:be:0b:cb:b3:f6:c6:36:63:6f:69:74:a1:4b: 8a:4e:a8:30:09:5a:13:5f:dd:d7:d0:59:57:fd:46: 84:fb:0d:39:60:6a:66:d3:a7:a0:b4:61:8c:62:20: 24:93:3e:25:df:ff:5d:cf:16:a2:7a:df:75:02:3e: 2b:c7:35:c8:90:c5:c5:b6:cf:88:5e:fd:e7:70:17: 83:1c:a2:6e:3a:9b:f2:39:55:55:21:4f:bc:e1:bb: e2:9d:fc:f2:ac:5a:c2:31:43:41:79:63:b9:3a:b8: 7f:6e:4f:33:48:ec:09:01:0d:28:d2:dc:c4:86:c3: 2b:a8:a1:72:4a:59:e0:7e:d2:a6:da:d8:2b:52:c3: 20:c6:aa:b2:69:5f:b7:13:ea:98:50:74:9a:c7:5c: 4d:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:65:E0:67:AF:B6:EA:E1:3A:7C:64:02:E7:43:10:8C:C6:4F:AE:6E X509v3 Authority Key Identifier: keyid:8A:CB:52:0B:0E:2D:E6:6C:E5:28:B8:0D:A6:A5:ED:66:E4:B5:CF:2E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/785bff41-2420-42b1-9b83-d41c18043d65/0/8ACB520B0E2DE66CE528B80DA6A5ED66E4B5CF2E.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8ACB520B0E2DE66CE528B80DA6A5ED66E4B5CF2E.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/785bff41-2420-42b1-9b83-d41c18043d65/0/8ACB520B0E2DE66CE528B80DA6A5ED66E4B5CF2E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4f:91:b3:a6:74:c3:da:c2:a3:fd:9b:61:c7:c6:9d:50:57:87: 47:c7:6f:13:03:03:59:5a:0e:a2:39:ae:93:33:b0:df:b5:f3: bf:3f:58:62:15:5a:bc:43:04:d2:f0:27:d8:9a:a2:11:28:27: ba:59:cf:8b:f4:15:0b:4b:51:b9:4e:83:b4:51:8a:7a:6a:48: ab:d5:6d:62:02:2f:14:1e:7b:47:13:15:b8:2b:cb:e6:a1:55: 63:57:08:8b:9a:cb:c9:57:c3:ef:74:33:ed:cf:51:83:04:ba: b1:04:fa:0c:51:c2:02:57:4f:ea:d8:46:be:a5:b8:82:b1:5d: 58:b4:24:0e:d9:c9:d9:bd:2b:db:f9:a9:96:36:17:bd:bb:3b: a7:15:5b:28:3e:ad:7d:b5:36:7d:d3:d1:18:4e:63:b5:53:b7: d0:3c:7e:ad:53:d1:65:81:7e:e3:7e:3d:05:83:ff:2e:63:07: de:be:06:eb:a4:48:7b:a4:9b:b2:16:81:c0:d7:e9:b4:dc:a3: c1:02:d9:b6:11:06:e6:ab:95:fa:30:f1:ad:63:28:bc:dd:55: 06:6b:9e:4c:eb:a0:35:68:fb:da:8e:88:e1:a2:69:e7:48:ac: 4a:b0:6c:f2:87:5a:c2:fb:dc:0f:41:4b:3d:da:e6:c7:87:3c: 43:e9:79:8b -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUSPQCWUvteQ45EwLXn99uTgkVbuUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEFDQjUyMEIwRTJERTY2Q0U1MjhCODBEQTZBNUVENjZF NEI1Q0YyRTAeFw0yNTA4MDUyMzQ2MjVaFw0yNTA4MDkxMTQyMjVaMDMxMTAvBgNV BAMTKDExNjVFMDY3QUZCNkVBRTEzQTdDNjQwMkU3NDMxMDhDQzY0RkFFNkUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDB+xpahvr2KVt7LHMEmccC8nae 7cIYpcw+cmSyFUwQRKDv67qGT65fao4wkDZpifoV49ScVO0o3+mmk5oMSS7cbC1b N4tKp9jTov/kx0QlwwBwrP9JAZUqk78y6JexQHvEOcoBBj5qsOFgvgvLs/bGNmNv aXShS4pOqDAJWhNf3dfQWVf9RoT7DTlgambTp6C0YYxiICSTPiXf/13PFqJ633UC PivHNciQxcW2z4he/edwF4Mcom46m/I5VVUhT7zhu+Kd/PKsWsIxQ0F5Y7k6uH9u TzNI7AkBDSjS3MSGwyuooXJKWeB+0qba2CtSwyDGqrJpX7cT6phQdJrHXE27AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUEWXgZ6+26uE6fGQC50MQjMZPrm4wHwYDVR0j BBgwFoAUistSCw4t5mzlKLgNpqXtZuS1zy4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 ODViZmY0MS0yNDIwLTQyYjEtOWI4My1kNDFjMTgwNDNkNjUvMC84QUNCNTIwQjBF MkRFNjZDRTUyOEI4MERBNkE1RUQ2NkU0QjVDRjJFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOEFDQjUyMEIwRTJERTY2Q0U1MjhCODBEQTZBNUVENjZFNEI1 Q0YyRS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNzg1YmZmNDEtMjQyMC00MmIxLTli ODMtZDQxYzE4MDQzZDY1LzAvOEFDQjUyMEIwRTJERTY2Q0U1MjhCODBEQTZBNUVE NjZFNEI1Q0YyRS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAE+Rs6Z0w9rCo/2bYcfGnVBXh0fHbxMDA1la DqI5rpMzsN+1878/WGIVWrxDBNLwJ9iaohEoJ7pZz4v0FQtLUblOg7RRinpqSKvV bWICLxQee0cTFbgry+ahVWNXCIuay8lXw+90M+3PUYMEurEE+gxRwgJXT+rYRr6l uIKxXVi0JA7Zydm9K9v5qZY2F727O6cVWyg+rX21Nn3T0RhOY7VTt9A8fq1T0WWB fuN+PQWD/y5jB96+BuukSHukm7IWgcDX6bTco8EC2bYRBuarlfow8a1jKLzdVQZr nkzroDVo+9qOiOGiaedIrEqwbPKHWsL73A9BSz3a5seHPEPpeYs= -----END CERTIFICATE-----Generated at Thu Aug 7 12:58:45 2025 by rpki-client