$ rpki-client -vvf repo-rpki.idnic.net/repo/a679824f-4e08-4970-bba6-27b4726ca580/0/8B7B648E54ABC4F43564B6B7D8EC6CA25EB6C65C.mft File: 8B7B648E54ABC4F43564B6B7D8EC6CA25EB6C65C.mft (raw, json) Hash identifier: FiF2X4vL1A9V3M2FQpCadoYOIGubgV664BXUt9MgZdY= Subject key identifier: 64:68:FA:A8:DA:0E:2C:59:10:1B:5F:E6:82:D1:B2:FA:E6:D2:48:F5 Authority key identifier: 8B:7B:64:8E:54:AB:C4:F4:35:64:B6:B7:D8:EC:6C:A2:5E:B6:C6:5C Certificate issuer: /CN=8B7B648E54ABC4F43564B6B7D8EC6CA25EB6C65C Certificate serial: 0B48898723E73CA58C73BB9C705816D0041C37D2 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8B7B648E54ABC4F43564B6B7D8EC6CA25EB6C65C.cer Subject info access: rsync://repo-rpki.idnic.net/repo/a679824f-4e08-4970-bba6-27b4726ca580/0/8B7B648E54ABC4F43564B6B7D8EC6CA25EB6C65C.mft Manifest number: 0204 Signing time: Tue 05 Aug 2025 20:00:49 +0000 Manifest this update: Tue 05 Aug 2025 19:55:49 +0000 Manifest next update: Sat 09 Aug 2025 05:08:49 +0000 Files and hashes: 1: 8B7B648E54ABC4F43564B6B7D8EC6CA25EB6C65C.crl (hash: 2uq3pQshAo53jjd528F4hu6/s04jZ3TTMO42KCepAUs=) 2: 3130332e3138362e36302e302f32332d3234203d3e20313439363932.roa (hash: D3mhXulAOJ2gHffXQf0w0aMiyDfxmDOfLqbB+xIObN4=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/a679824f-4e08-4970-bba6-27b4726ca580/0/8B7B648E54ABC4F43564B6B7D8EC6CA25EB6C65C.crl rsync://repo-rpki.idnic.net/repo/a679824f-4e08-4970-bba6-27b4726ca580/0/8B7B648E54ABC4F43564B6B7D8EC6CA25EB6C65C.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8B7B648E54ABC4F43564B6B7D8EC6CA25EB6C65C.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 09 Aug 2025 05:08:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0b:48:89:87:23:e7:3c:a5:8c:73:bb:9c:70:58:16:d0:04:1c:37:d2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8B7B648E54ABC4F43564B6B7D8EC6CA25EB6C65C Validity Not Before: Aug 5 19:55:49 2025 GMT Not After : Aug 9 05:08:49 2025 GMT Subject: CN=6468FAA8DA0E2C59101B5FE682D1B2FAE6D248F5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:0c:bd:91:a8:62:f4:9a:ef:45:b2:b2:bb:32: ea:f2:c9:2a:96:06:3e:4e:ad:f0:7c:9b:7e:35:3f: ba:9e:40:7a:e1:3e:fb:c9:b9:22:ff:18:18:29:b3: 39:f3:61:9b:3a:08:45:d1:a5:ed:81:d0:6e:49:66: 34:50:4c:d7:01:9f:68:f2:bd:6b:b1:6f:d2:a0:f8: 3f:86:fb:68:13:24:cd:08:cd:0f:a6:42:ba:4c:95: c5:e8:f7:64:f7:0b:64:b9:85:38:be:ed:31:f8:19: 6b:e7:72:75:e7:4a:80:74:89:78:76:03:79:be:8f: 62:98:d3:d9:76:2a:22:e6:f7:87:af:bc:04:90:78: 66:a5:67:ee:7d:52:12:62:ba:19:2d:28:f0:de:03: 94:0a:64:95:8c:ed:5b:e1:8a:14:c5:9a:08:3a:82: f8:e3:f6:d9:e0:84:84:8b:e6:1c:62:73:2e:66:12: de:2e:6f:b5:eb:fb:04:7a:fa:29:3c:40:f8:aa:6b: f0:75:5e:a2:ca:e2:67:42:b6:85:f5:a1:b3:f7:30: 21:77:19:d3:7e:57:52:9f:c2:f8:42:e3:ff:46:00: 35:ca:e9:0d:7f:73:80:4e:83:03:b7:30:df:e6:5d: ec:b7:63:d5:83:4c:04:0c:6c:94:4d:36:28:39:46: 0e:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 64:68:FA:A8:DA:0E:2C:59:10:1B:5F:E6:82:D1:B2:FA:E6:D2:48:F5 X509v3 Authority Key Identifier: keyid:8B:7B:64:8E:54:AB:C4:F4:35:64:B6:B7:D8:EC:6C:A2:5E:B6:C6:5C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/a679824f-4e08-4970-bba6-27b4726ca580/0/8B7B648E54ABC4F43564B6B7D8EC6CA25EB6C65C.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8B7B648E54ABC4F43564B6B7D8EC6CA25EB6C65C.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a679824f-4e08-4970-bba6-27b4726ca580/0/8B7B648E54ABC4F43564B6B7D8EC6CA25EB6C65C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 26:50:e1:5e:6b:b1:11:2b:d0:6b:7d:01:0e:2d:42:09:3e:93: 6f:a5:40:31:b7:00:3e:da:24:ff:3d:89:03:0c:ba:0b:e2:45: ac:5c:24:45:ea:23:9b:3a:fc:2f:7a:16:96:43:46:9e:f3:35: 08:c3:35:a3:62:63:74:fc:ed:eb:5a:6f:ae:1d:2a:af:70:4c: 08:5f:66:28:8d:b0:03:0a:82:0c:d8:68:9e:6b:d0:2d:c2:b6: e1:6a:11:e1:86:ae:75:51:04:51:c9:93:2a:b9:ce:61:d0:52: 13:c4:0b:1f:3e:fd:0e:07:e5:fc:6e:0f:ea:a8:f3:c7:87:2c: a2:25:9c:92:2a:b8:bc:6d:8d:71:12:34:36:32:2a:3f:4e:3c: 84:3c:08:d1:b0:68:4a:16:bf:80:d6:b0:98:e3:b3:56:78:bd: d4:aa:d1:98:50:5e:fc:4e:cb:50:ec:b1:2e:0f:84:5c:c0:f0: c8:20:04:dc:0f:ee:e3:fe:41:1c:d1:b3:83:de:54:36:ec:7d: 05:01:dd:45:b0:f8:e5:0e:33:a1:87:34:d2:6c:d4:d6:4e:5d: 2f:81:d1:c5:00:4e:fa:ee:19:87:e6:82:18:72:90:27:ea:a1: 72:32:a5:85:06:e3:c6:b9:34:af:1a:c3:32:a9:33:dd:ee:27: f8:e0:3f:ae -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUC0iJhyPnPKWMc7uccFgW0AQcN9IwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEI3QjY0OEU1NEFCQzRGNDM1NjRCNkI3RDhFQzZDQTI1 RUI2QzY1QzAeFw0yNTA4MDUxOTU1NDlaFw0yNTA4MDkwNTA4NDlaMDMxMTAvBgNV BAMTKDY0NjhGQUE4REEwRTJDNTkxMDFCNUZFNjgyRDFCMkZBRTZEMjQ4RjUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDXDL2RqGL0mu9FsrK7MuryySqW Bj5OrfB8m341P7qeQHrhPvvJuSL/GBgpsznzYZs6CEXRpe2B0G5JZjRQTNcBn2jy vWuxb9Kg+D+G+2gTJM0IzQ+mQrpMlcXo92T3C2S5hTi+7TH4GWvncnXnSoB0iXh2 A3m+j2KY09l2KiLm94evvASQeGalZ+59UhJiuhktKPDeA5QKZJWM7VvhihTFmgg6 gvjj9tnghISL5hxicy5mEt4ub7Xr+wR6+ik8QPiqa/B1XqLK4mdCtoX1obP3MCF3 GdN+V1KfwvhC4/9GADXK6Q1/c4BOgwO3MN/mXey3Y9WDTAQMbJRNNig5Rg5zAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUZGj6qNoOLFkQG1/mgtGy+ubSSPUwHwYDVR0j BBgwFoAUi3tkjlSrxPQ1ZLa32Oxsol62xlwwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h Njc5ODI0Zi00ZTA4LTQ5NzAtYmJhNi0yN2I0NzI2Y2E1ODAvMC84QjdCNjQ4RTU0 QUJDNEY0MzU2NEI2QjdEOEVDNkNBMjVFQjZDNjVDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOEI3QjY0OEU1NEFCQzRGNDM1NjRCNkI3RDhFQzZDQTI1RUI2 QzY1Qy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYTY3OTgyNGYtNGUwOC00OTcwLWJi YTYtMjdiNDcyNmNhNTgwLzAvOEI3QjY0OEU1NEFCQzRGNDM1NjRCNkI3RDhFQzZD QTI1RUI2QzY1Qy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACZQ4V5rsREr0Gt9AQ4tQgk+k2+lQDG3AD7a JP89iQMMugviRaxcJEXqI5s6/C96FpZDRp7zNQjDNaNiY3T87etab64dKq9wTAhf ZiiNsAMKggzYaJ5r0C3CtuFqEeGGrnVRBFHJkyq5zmHQUhPECx8+/Q4H5fxuD+qo 88eHLKIlnJIquLxtjXESNDYyKj9OPIQ8CNGwaEoWv4DWsJjjs1Z4vdSq0ZhQXvxO y1DssS4PhFzA8MggBNwP7uP+QRzRs4PeVDbsfQUB3UWw+OUOM6GHNNJs1NZOXS+B 0cUATvruGYfmghhykCfqoXIypYUG48a5NK8awzKpM93uJ/jgP64= -----END CERTIFICATE-----Generated at Thu Aug 7 00:26:55 2025 by rpki-client