$ rpki-client -vvf repo-rpki.idnic.net/repo/7f4b53d8-b2ff-4973-b1ac-6f85faeadbe5/0/B8D444C5B3184A4F8C8F199A432242C44E19EACB.mft File: B8D444C5B3184A4F8C8F199A432242C44E19EACB.mft (raw, json) Hash identifier: 6cKSoSSqkkOO8g2GESawBzaLn/ix/WxPAwpCpz9oUjk= Subject key identifier: 8F:02:BD:E4:EE:51:14:7A:2A:04:7B:C0:AD:4A:05:50:1A:65:3E:06 Authority key identifier: B8:D4:44:C5:B3:18:4A:4F:8C:8F:19:9A:43:22:42:C4:4E:19:EA:CB Certificate issuer: /CN=B8D444C5B3184A4F8C8F199A432242C44E19EACB Certificate serial: 6F1C5DFFCF45F833CD3519572E698763C4493E82 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/B8D444C5B3184A4F8C8F199A432242C44E19EACB.cer Subject info access: rsync://repo-rpki.idnic.net/repo/7f4b53d8-b2ff-4973-b1ac-6f85faeadbe5/0/B8D444C5B3184A4F8C8F199A432242C44E19EACB.mft Manifest number: B1 Signing time: Thu 07 Aug 2025 16:41:58 +0000 Manifest this update: Thu 07 Aug 2025 16:36:58 +0000 Manifest next update: Sun 10 Aug 2025 20:18:58 +0000 Files and hashes: 1: 3136302e32352e33372e302f32342d3234203d3e20313532383332.roa (hash: 2EK7G4yp/ra7lqC0aFCR3YZxswSuxrQQ2ZJJKEPHMZg=) 2: 3136302e32352e33362e302f32342d3234203d3e20313532383332.roa (hash: 1SJ9LA44FkXb29+CiOLplkV9zxTaWTCw2H5Ki5oako8=) 3: B8D444C5B3184A4F8C8F199A432242C44E19EACB.crl (hash: 1uBvwiYSHzVB4DdI7VAE2Lpw0WXOsApr97QFIxowiMU=) 4: 3136302e32352e33362e302f32332d3234203d3e20313532383332.roa (hash: 9wCzZBokUdgA6nDZL9CPWVnRmT/IcfmN/N7BSRO44UA=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/7f4b53d8-b2ff-4973-b1ac-6f85faeadbe5/0/B8D444C5B3184A4F8C8F199A432242C44E19EACB.crl rsync://repo-rpki.idnic.net/repo/7f4b53d8-b2ff-4973-b1ac-6f85faeadbe5/0/B8D444C5B3184A4F8C8F199A432242C44E19EACB.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/B8D444C5B3184A4F8C8F199A432242C44E19EACB.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 10 Aug 2025 08:19:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6f:1c:5d:ff:cf:45:f8:33:cd:35:19:57:2e:69:87:63:c4:49:3e:82 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B8D444C5B3184A4F8C8F199A432242C44E19EACB Validity Not Before: Aug 7 16:36:58 2025 GMT Not After : Aug 10 20:18:58 2025 GMT Subject: CN=8F02BDE4EE51147A2A047BC0AD4A05501A653E06 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:94:30:a0:97:fb:11:10:da:73:bc:f6:b4:c8: 35:2f:18:11:b5:a1:b6:86:69:89:ec:02:6b:0b:dd: 80:94:0f:b8:4a:8e:28:2d:28:00:08:04:9b:3a:9a: 28:b6:3c:4a:a8:b4:27:64:21:7d:a0:c8:5c:cf:b7: 1b:60:0e:57:79:4f:ff:78:d4:03:39:ae:57:2e:19: d4:a9:45:d0:d8:0f:6f:83:3c:05:42:eb:79:65:35: fe:18:c1:35:37:4e:a5:4d:07:e4:45:21:6d:33:df: 89:29:13:5d:b0:c5:5b:66:89:94:46:2d:4d:6b:27: 78:80:3a:7f:9a:3d:48:a9:a2:23:88:0f:13:61:5c: f6:c9:ba:e4:49:66:cd:59:ef:a2:13:7e:52:4a:9f: 41:e7:bb:f9:1d:dd:fb:51:ea:8e:26:2e:16:ab:1a: e3:fa:72:91:4c:23:1e:90:ab:10:c3:27:d9:de:4a: 34:eb:ee:a2:9a:7e:32:ef:8d:20:1d:93:ec:31:4b: 6e:2d:9e:55:e8:e3:9b:ba:46:27:c7:a1:e4:95:a1: f3:ba:39:54:05:92:dc:58:53:dc:d7:7c:da:0f:46: 36:4d:04:a4:87:eb:1b:c2:08:3b:45:36:35:7f:33: 3b:d4:f5:51:54:d8:1d:e2:a2:8e:d2:f8:3e:5f:73: 4e:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8F:02:BD:E4:EE:51:14:7A:2A:04:7B:C0:AD:4A:05:50:1A:65:3E:06 X509v3 Authority Key Identifier: keyid:B8:D4:44:C5:B3:18:4A:4F:8C:8F:19:9A:43:22:42:C4:4E:19:EA:CB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/7f4b53d8-b2ff-4973-b1ac-6f85faeadbe5/0/B8D444C5B3184A4F8C8F199A432242C44E19EACB.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/B8D444C5B3184A4F8C8F199A432242C44E19EACB.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/7f4b53d8-b2ff-4973-b1ac-6f85faeadbe5/0/B8D444C5B3184A4F8C8F199A432242C44E19EACB.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2d:8c:28:e3:cb:08:be:fd:b5:d1:90:0f:72:73:41:5d:61:28: 53:09:a2:f5:7d:69:e5:2e:a5:f2:d1:d1:fe:b1:db:e9:3a:22: 6e:6d:00:f4:b8:49:a6:5f:06:b8:5c:2b:90:e2:ea:e1:a6:63: 0a:62:b7:08:ad:33:f1:c7:c0:07:12:18:cc:e1:a5:23:5d:1c: 76:06:84:94:03:40:34:aa:44:8d:ee:b1:b9:c6:5b:0f:90:29: 47:b6:f5:d3:cf:93:b0:2b:d1:b8:12:5d:44:48:19:26:5a:8b: 4d:9c:8e:bf:9c:da:04:18:e3:05:dc:6a:83:76:de:d0:e6:c3: e5:29:ee:70:b8:87:6f:d8:ce:70:48:34:d2:dd:7b:83:4f:7b: f5:82:d8:18:af:07:4c:5d:e9:33:88:bf:58:04:ce:3e:57:3f: bb:66:9f:c3:e5:7c:7d:ea:f3:bd:0e:a9:48:54:0d:50:eb:70: 6a:05:e9:af:d1:cc:2c:3d:f0:f1:0e:78:fe:1e:c7:f6:b9:8c: dd:52:04:36:fb:37:43:f7:bf:70:a8:1e:80:90:90:65:37:03: c3:1e:3b:b5:7e:51:e1:d7:b8:9b:e5:cf:ab:ba:ac:3b:cf:e9: af:5c:61:bf:92:63:6b:19:07:31:8f:f3:39:64:54:27:b9:e3: 78:1e:28:18 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUbxxd/89F+DPNNRlXLmmHY8RJPoIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjhENDQ0QzVCMzE4NEE0RjhDOEYxOTlBNDMyMjQyQzQ0 RTE5RUFDQjAeFw0yNTA4MDcxNjM2NThaFw0yNTA4MTAyMDE4NThaMDMxMTAvBgNV BAMTKDhGMDJCREU0RUU1MTE0N0EyQTA0N0JDMEFENEEwNTUwMUE2NTNFMDYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC9lDCgl/sRENpzvPa0yDUvGBG1 obaGaYnsAmsL3YCUD7hKjigtKAAIBJs6mii2PEqotCdkIX2gyFzPtxtgDld5T/94 1AM5rlcuGdSpRdDYD2+DPAVC63llNf4YwTU3TqVNB+RFIW0z34kpE12wxVtmiZRG LU1rJ3iAOn+aPUipoiOIDxNhXPbJuuRJZs1Z76ITflJKn0Hnu/kd3ftR6o4mLhar GuP6cpFMIx6QqxDDJ9neSjTr7qKafjLvjSAdk+wxS24tnlXo45u6RifHoeSVofO6 OVQFktxYU9zXfNoPRjZNBKSH6xvCCDtFNjV/MzvU9VFU2B3ioo7S+D5fc04jAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUjwK95O5RFHoqBHvArUoFUBplPgYwHwYDVR0j BBgwFoAUuNRExbMYSk+MjxmaQyJCxE4Z6sswDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 ZjRiNTNkOC1iMmZmLTQ5NzMtYjFhYy02Zjg1ZmFlYWRiZTUvMC9COEQ0NDRDNUIz MTg0QTRGOEM4RjE5OUE0MzIyNDJDNDRFMTlFQUNCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvQjhENDQ0QzVCMzE4NEE0RjhDOEYxOTlBNDMyMjQyQzQ0RTE5 RUFDQi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vN2Y0YjUzZDgtYjJmZi00OTczLWIx YWMtNmY4NWZhZWFkYmU1LzAvQjhENDQ0QzVCMzE4NEE0RjhDOEYxOTlBNDMyMjQy QzQ0RTE5RUFDQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAC2MKOPLCL79tdGQD3JzQV1hKFMJovV9aeUu pfLR0f6x2+k6Im5tAPS4SaZfBrhcK5Di6uGmYwpitwitM/HHwAcSGMzhpSNdHHYG hJQDQDSqRI3usbnGWw+QKUe29dPPk7Ar0bgSXURIGSZai02cjr+c2gQY4wXcaoN2 3tDmw+Up7nC4h2/YznBINNLde4NPe/WC2BivB0xd6TOIv1gEzj5XP7tmn8PlfH3q 870OqUhUDVDrcGoF6a/RzCw98PEOeP4ex/a5jN1SBDb7N0P3v3CoHoCQkGU3A8Me O7V+UeHXuJvlz6u6rDvP6a9cYb+SY2sZBzGP8zlkVCe543geKBg= -----END CERTIFICATE-----Generated at Thu Aug 7 23:57:49 2025 by rpki-client