$ rpki-client -vvf repo-rpki.idnic.net/repo/a0ba85a0-3534-49a4-a826-13a735f94369/0/8C210840D9E28A465D4F0B9F3A1D7C31CC6680C0.mft File: 8C210840D9E28A465D4F0B9F3A1D7C31CC6680C0.mft (raw, json) Hash identifier: ZbeWBeyGE4SEYszDDtoOgN6IFCCKifv6OAcBF+BgNE4= Subject key identifier: 18:FC:42:E2:94:32:04:3C:63:3D:1B:FC:24:A3:97:D7:5E:DC:27:AA Authority key identifier: 8C:21:08:40:D9:E2:8A:46:5D:4F:0B:9F:3A:1D:7C:31:CC:66:80:C0 Certificate issuer: /CN=8C210840D9E28A465D4F0B9F3A1D7C31CC6680C0 Certificate serial: 7D222CF3C1058624AD8AE25AE6FEB9CFF8D390F3 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/8C210840D9E28A465D4F0B9F3A1D7C31CC6680C0.cer Subject info access: rsync://repo-rpki.idnic.net/repo/a0ba85a0-3534-49a4-a826-13a735f94369/0/8C210840D9E28A465D4F0B9F3A1D7C31CC6680C0.mft Manifest number: B3 Signing time: Tue 05 Aug 2025 13:20:41 +0000 Manifest this update: Tue 05 Aug 2025 13:15:41 +0000 Manifest next update: Fri 08 Aug 2025 14:01:41 +0000 Files and hashes: 1: 3136302e32322e3139342e302f32332d3234203d3e20313532383236.roa (hash: 8CRgA1ByY654Nlat1fHrKnqGH93mDlUGlMXfJsCa4ik=) 2: 8C210840D9E28A465D4F0B9F3A1D7C31CC6680C0.crl (hash: ap7BMc+zMs0PxE1KZQSH6xCxA6bJVw2q2Cs5vlVGbQw=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/a0ba85a0-3534-49a4-a826-13a735f94369/0/8C210840D9E28A465D4F0B9F3A1D7C31CC6680C0.crl rsync://repo-rpki.idnic.net/repo/a0ba85a0-3534-49a4-a826-13a735f94369/0/8C210840D9E28A465D4F0B9F3A1D7C31CC6680C0.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/8C210840D9E28A465D4F0B9F3A1D7C31CC6680C0.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 08 Aug 2025 09:26:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7d:22:2c:f3:c1:05:86:24:ad:8a:e2:5a:e6:fe:b9:cf:f8:d3:90:f3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8C210840D9E28A465D4F0B9F3A1D7C31CC6680C0 Validity Not Before: Aug 5 13:15:41 2025 GMT Not After : Aug 8 14:01:41 2025 GMT Subject: CN=18FC42E29432043C633D1BFC24A397D75EDC27AA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:23:49:e2:6b:87:61:97:0f:93:e8:13:a8:79: 36:7c:44:25:b6:2d:07:91:32:48:ff:2d:83:bc:c6: 46:3f:13:e8:5d:8e:a0:fe:18:e3:93:0f:3d:71:31: 8a:3a:02:1f:65:2d:f0:f8:84:4e:05:b6:c0:0e:e3: e8:de:a8:78:ac:e4:c2:7d:1e:8d:f7:ec:36:41:69: b1:d7:05:4b:95:71:58:d5:d2:14:79:a5:b6:b3:9a: d7:af:bc:e4:a8:c5:91:0d:f9:39:23:56:c8:e7:43: df:47:3c:64:65:dd:62:d8:bf:1a:80:2a:63:88:71: d1:b6:13:e7:65:da:15:fc:5f:fb:d9:b5:46:88:24: 4b:8d:8f:2c:75:e4:ab:35:f6:d9:87:83:de:f7:da: 3b:74:48:30:a3:36:73:3e:3b:cc:7a:6d:08:ad:e6: f8:5a:11:34:ea:45:80:1f:ac:aa:fd:22:cb:67:68: df:11:01:cf:cb:f9:9c:41:9d:7e:5d:3f:f2:58:4f: e1:e7:95:1e:86:f1:50:77:78:26:01:6c:b6:a4:b9: f6:45:ac:ae:35:f1:e7:c9:ca:a2:c0:ff:9a:2c:d4: 39:1e:7d:c9:67:d2:ea:7a:42:82:b5:0d:9f:df:0a: f4:12:d7:3c:1b:81:19:d6:df:2c:78:fd:29:70:cb: 98:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 18:FC:42:E2:94:32:04:3C:63:3D:1B:FC:24:A3:97:D7:5E:DC:27:AA X509v3 Authority Key Identifier: keyid:8C:21:08:40:D9:E2:8A:46:5D:4F:0B:9F:3A:1D:7C:31:CC:66:80:C0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/a0ba85a0-3534-49a4-a826-13a735f94369/0/8C210840D9E28A465D4F0B9F3A1D7C31CC6680C0.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/8C210840D9E28A465D4F0B9F3A1D7C31CC6680C0.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a0ba85a0-3534-49a4-a826-13a735f94369/0/8C210840D9E28A465D4F0B9F3A1D7C31CC6680C0.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7d:cd:99:57:6f:e3:16:61:e3:1e:b4:37:c4:19:13:eb:b5:7b: 37:22:35:78:16:d7:39:79:c7:51:42:3b:60:91:e6:38:17:58: d5:dc:dd:42:66:73:51:89:8b:58:1d:0e:e0:5f:07:fb:f2:6d: 21:f5:31:29:47:13:dc:79:75:14:3a:a8:83:6d:c6:ce:7f:14: 13:7e:13:8e:92:54:e8:40:2f:6e:e9:32:ee:20:ee:0f:4f:0a: 4e:4d:c1:39:d7:e0:d5:41:79:10:20:e8:5d:0d:3b:1a:d0:54: 94:11:bf:cf:ba:4b:88:ba:77:32:ec:05:2e:8a:b2:44:b2:56: a6:dd:76:5c:33:ad:f9:93:db:d7:a0:6b:ad:60:ec:99:c6:ec: 80:11:06:dc:ef:73:3b:fd:60:dc:a1:7e:10:11:bb:b0:58:95: c6:25:3a:57:ef:13:40:eb:e4:57:c4:78:16:48:c8:96:87:ae: 93:42:30:57:64:bb:42:8a:45:b4:67:e2:5f:20:12:76:8e:71: bc:08:c2:33:50:4f:94:51:7b:8f:4e:f2:3a:31:bb:ce:08:14: 8f:6a:60:52:8a:60:21:3f:2f:8d:c8:9b:0d:45:a6:4e:6f:02: 3c:49:9b:46:6c:f2:43:53:25:e6:9b:27:05:b7:42:57:41:1a: 50:36:83:de -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUfSIs88EFhiStiuJa5v65z/jTkPMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEMyMTA4NDBEOUUyOEE0NjVENEYwQjlGM0ExRDdDMzFD QzY2ODBDMDAeFw0yNTA4MDUxMzE1NDFaFw0yNTA4MDgxNDAxNDFaMDMxMTAvBgNV BAMTKDE4RkM0MkUyOTQzMjA0M0M2MzNEMUJGQzI0QTM5N0Q3NUVEQzI3QUEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCqI0nia4dhlw+T6BOoeTZ8RCW2 LQeRMkj/LYO8xkY/E+hdjqD+GOOTDz1xMYo6Ah9lLfD4hE4FtsAO4+jeqHis5MJ9 Ho337DZBabHXBUuVcVjV0hR5pbazmtevvOSoxZEN+TkjVsjnQ99HPGRl3WLYvxqA KmOIcdG2E+dl2hX8X/vZtUaIJEuNjyx15Ks19tmHg9732jt0SDCjNnM+O8x6bQit 5vhaETTqRYAfrKr9IstnaN8RAc/L+ZxBnX5dP/JYT+HnlR6G8VB3eCYBbLakufZF rK418efJyqLA/5os1Dkefcln0up6QoK1DZ/fCvQS1zwbgRnW3yx4/Slwy5idAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUGPxC4pQyBDxjPRv8JKOX117cJ6owHwYDVR0j BBgwFoAUjCEIQNniikZdTwufOh18McxmgMAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h MGJhODVhMC0zNTM0LTQ5YTQtYTgyNi0xM2E3MzVmOTQzNjkvMC84QzIxMDg0MEQ5 RTI4QTQ2NUQ0RjBCOUYzQTFEN0MzMUNDNjY4MEMwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvOEMyMTA4NDBEOUUyOEE0NjVENEYwQjlGM0ExRDdDMzFDQzY2 ODBDMC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYTBiYTg1YTAtMzUzNC00OWE0LWE4 MjYtMTNhNzM1Zjk0MzY5LzAvOEMyMTA4NDBEOUUyOEE0NjVENEYwQjlGM0ExRDdD MzFDQzY2ODBDMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAH3NmVdv4xZh4x60N8QZE+u1ezciNXgW1zl5 x1FCO2CR5jgXWNXc3UJmc1GJi1gdDuBfB/vybSH1MSlHE9x5dRQ6qINtxs5/FBN+ E46SVOhAL27pMu4g7g9PCk5NwTnX4NVBeRAg6F0NOxrQVJQRv8+6S4i6dzLsBS6K skSyVqbddlwzrfmT29ega61g7JnG7IARBtzvczv9YNyhfhARu7BYlcYlOlfvE0Dr 5FfEeBZIyJaHrpNCMFdku0KKRbRn4l8gEnaOcbwIwjNQT5RRe49O8joxu84IFI9q YFKKYCE/L43Imw1Fpk5vAjxJm0Zs8kNTJeabJwW3QldBGlA2g94= -----END CERTIFICATE-----Generated at Wed Aug 6 08:00:18 2025 by rpki-client