$ rpki-client -vvf repo-rpki.idnic.net/repo/7d6529db-9330-4e97-adf1-b0ddf1a6e599/0/8B19ACE0A7391492B18BE27AC01D2A602872BFC0.mft File: 8B19ACE0A7391492B18BE27AC01D2A602872BFC0.mft (raw, json) Hash identifier: vFQCZsjhb+looswI/fyvyWGHAiD4RlwyI3ajqO0DQvE= Subject key identifier: 03:CF:DA:5D:82:F8:67:E7:BF:B4:DE:38:89:DC:87:91:C2:53:1A:A6 Authority key identifier: 8B:19:AC:E0:A7:39:14:92:B1:8B:E2:7A:C0:1D:2A:60:28:72:BF:C0 Certificate issuer: /CN=8B19ACE0A7391492B18BE27AC01D2A602872BFC0 Certificate serial: 5CB450E01AB2C08E57459CA4B32B4F86149C8563 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8B19ACE0A7391492B18BE27AC01D2A602872BFC0.cer Subject info access: rsync://repo-rpki.idnic.net/repo/7d6529db-9330-4e97-adf1-b0ddf1a6e599/0/8B19ACE0A7391492B18BE27AC01D2A602872BFC0.mft Manifest number: 017D Signing time: Sun 10 Aug 2025 08:00:04 +0000 Manifest this update: Sun 10 Aug 2025 07:55:04 +0000 Manifest next update: Wed 13 Aug 2025 09:28:04 +0000 Files and hashes: 1: 3130332e3132322e382e302f32342d3234203d3e20313530393635.roa (hash: OBSu5NWIqhavEgs//Z/O6dTCa3LFoSwUa21LGk85Vss=) 2: 8B19ACE0A7391492B18BE27AC01D2A602872BFC0.crl (hash: qc2P6YOhRNJU9eWZgEAXFg+mIlJPnFRpMx4FyjCOY9Q=) 3: 3130332e3132322e392e302f32342d3234203d3e20313530393635.roa (hash: QeU0/vEBTo6jIDTAqgbH9ossdE4o8/cj7giBqcJ2VYs=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/7d6529db-9330-4e97-adf1-b0ddf1a6e599/0/8B19ACE0A7391492B18BE27AC01D2A602872BFC0.crl rsync://repo-rpki.idnic.net/repo/7d6529db-9330-4e97-adf1-b0ddf1a6e599/0/8B19ACE0A7391492B18BE27AC01D2A602872BFC0.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8B19ACE0A7391492B18BE27AC01D2A602872BFC0.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 Aug 2025 09:28:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5c:b4:50:e0:1a:b2:c0:8e:57:45:9c:a4:b3:2b:4f:86:14:9c:85:63 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8B19ACE0A7391492B18BE27AC01D2A602872BFC0 Validity Not Before: Aug 10 07:55:04 2025 GMT Not After : Aug 13 09:28:04 2025 GMT Subject: CN=03CFDA5D82F867E7BFB4DE3889DC8791C2531AA6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:88:d4:fc:c3:11:d0:ab:07:85:7a:9c:f9:46: b4:cc:ac:95:91:6e:72:a0:d9:55:ac:46:bd:b5:8d: c2:3a:31:fc:73:84:4b:e2:b0:fb:12:04:a7:51:b1: a4:6c:57:94:3b:9c:d0:b7:f3:fa:72:d0:86:6b:2b: 1a:05:a0:d7:12:3c:ec:74:38:31:44:a3:85:8f:32: 4c:8e:29:54:e4:a7:c5:07:92:cc:09:f4:47:ae:c1: 57:30:63:54:a1:92:60:8c:73:18:cc:80:b5:60:f6: 68:f4:dc:24:14:f5:f1:66:02:b4:f4:97:0d:53:5f: 75:24:04:0a:a3:b2:1a:b3:15:2d:9d:15:85:04:a3: 67:5e:53:14:e4:e3:6d:ec:bc:f6:41:64:5a:47:b7: fb:93:8f:97:48:70:f7:44:4b:82:c3:52:a0:df:dc: 36:b3:6f:0e:14:23:6a:8d:de:f9:44:7c:22:53:14: cf:6e:49:ec:77:6f:b2:26:c8:63:65:37:a0:6c:64: 05:b4:83:96:4d:ac:76:04:37:ba:b1:0a:5a:85:23: 22:5f:1e:2b:c4:66:ee:33:bf:04:bd:d6:ab:91:61: 69:35:a9:b0:1e:40:91:01:b2:ae:68:73:d6:41:26: 43:0e:15:6f:6a:ff:e8:8a:07:3a:40:18:79:af:67: f5:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 03:CF:DA:5D:82:F8:67:E7:BF:B4:DE:38:89:DC:87:91:C2:53:1A:A6 X509v3 Authority Key Identifier: keyid:8B:19:AC:E0:A7:39:14:92:B1:8B:E2:7A:C0:1D:2A:60:28:72:BF:C0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/7d6529db-9330-4e97-adf1-b0ddf1a6e599/0/8B19ACE0A7391492B18BE27AC01D2A602872BFC0.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8B19ACE0A7391492B18BE27AC01D2A602872BFC0.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/7d6529db-9330-4e97-adf1-b0ddf1a6e599/0/8B19ACE0A7391492B18BE27AC01D2A602872BFC0.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0e:f0:ef:c4:e4:82:09:b9:91:d3:32:4e:4b:28:ec:bf:bb:f1: 0c:7e:8c:d9:82:fd:b1:c5:37:04:2e:0b:b7:9c:1d:c7:3d:08: b3:21:f4:0c:50:50:4e:d5:c5:8d:8a:73:5e:05:b7:c5:b2:49: ec:9c:aa:1e:b8:8a:08:fa:52:09:a2:db:a4:b0:67:69:e1:97: b6:12:bc:68:be:99:9b:0b:3f:55:99:1a:11:df:63:2b:e7:0e: 4e:99:ad:af:8d:bf:ba:c4:9f:44:dd:84:08:af:9b:26:61:8b: 71:33:a3:d3:9f:ae:b5:7f:8f:3c:b8:53:fb:ff:cc:22:43:44: 24:3f:cf:b8:35:e6:99:09:54:0d:16:b0:b3:47:70:f4:ed:8a: fc:8d:dc:51:4d:63:e5:db:dc:59:b3:ef:b4:3e:23:2e:96:16: 9c:5d:fe:b2:3d:68:48:65:51:0b:2a:1c:d6:c3:f0:8e:98:8e: 28:1a:a9:55:43:69:84:49:4a:63:21:8d:0a:ce:fa:a9:48:66: 89:06:43:1d:a2:6d:e1:84:c8:39:41:a1:1f:cf:2f:8a:05:31: 6e:0d:3e:18:b6:4a:bb:ca:90:4f:ec:f1:09:22:98:f2:f1:9d: 6e:d0:13:5b:08:e9:34:ed:73:cd:eb:fe:b8:ae:ed:89:44:7b: c6:37:ef:81 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUXLRQ4BqywI5XRZyksytPhhSchWMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEIxOUFDRTBBNzM5MTQ5MkIxOEJFMjdBQzAxRDJBNjAy ODcyQkZDMDAeFw0yNTA4MTAwNzU1MDRaFw0yNTA4MTMwOTI4MDRaMDMxMTAvBgNV BAMTKDAzQ0ZEQTVEODJGODY3RTdCRkI0REUzODg5REM4NzkxQzI1MzFBQTYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDLiNT8wxHQqweFepz5RrTMrJWR bnKg2VWsRr21jcI6MfxzhEvisPsSBKdRsaRsV5Q7nNC38/py0IZrKxoFoNcSPOx0 ODFEo4WPMkyOKVTkp8UHkswJ9EeuwVcwY1ShkmCMcxjMgLVg9mj03CQU9fFmArT0 lw1TX3UkBAqjshqzFS2dFYUEo2deUxTk423svPZBZFpHt/uTj5dIcPdES4LDUqDf 3Dazbw4UI2qN3vlEfCJTFM9uSex3b7ImyGNlN6BsZAW0g5ZNrHYEN7qxClqFIyJf HivEZu4zvwS91quRYWk1qbAeQJEBsq5oc9ZBJkMOFW9q/+iKBzpAGHmvZ/V1AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUA8/aXYL4Z+e/tN44idyHkcJTGqYwHwYDVR0j BBgwFoAUixms4Kc5FJKxi+J6wB0qYChyv8AwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 ZDY1MjlkYi05MzMwLTRlOTctYWRmMS1iMGRkZjFhNmU1OTkvMC84QjE5QUNFMEE3 MzkxNDkyQjE4QkUyN0FDMDFEMkE2MDI4NzJCRkMwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOEIxOUFDRTBBNzM5MTQ5MkIxOEJFMjdBQzAxRDJBNjAyODcy QkZDMC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vN2Q2NTI5ZGItOTMzMC00ZTk3LWFk ZjEtYjBkZGYxYTZlNTk5LzAvOEIxOUFDRTBBNzM5MTQ5MkIxOEJFMjdBQzAxRDJB NjAyODcyQkZDMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAA7w78Tkggm5kdMyTkso7L+78Qx+jNmC/bHF NwQuC7ecHcc9CLMh9AxQUE7VxY2Kc14Ft8WySeycqh64igj6Ugmi26SwZ2nhl7YS vGi+mZsLP1WZGhHfYyvnDk6Zra+Nv7rEn0TdhAivmyZhi3Ezo9OfrrV/jzy4U/v/ zCJDRCQ/z7g15pkJVA0WsLNHcPTtivyN3FFNY+Xb3Fmz77Q+Iy6WFpxd/rI9aEhl UQsqHNbD8I6YjigaqVVDaYRJSmMhjQrO+qlIZokGQx2ibeGEyDlBoR/PL4oFMW4N Phi2SrvKkE/s8QkimPLxnW7QE1sI6TTtc83r/riu7YlEe8Y374E= -----END CERTIFICATE-----Generated at Sun Aug 10 18:11:34 2025 by rpki-client