$ rpki-client -vvf repo-rpki.idnic.net/repo/a82db9d3-d6eb-4d6b-9a24-feeb21aa8f53/0/8BE281D2F4ED4091746FDA568A4296F1171589E8.mft File: 8BE281D2F4ED4091746FDA568A4296F1171589E8.mft (raw, json) Hash identifier: 8OBmOzrLK/myjAc7U3e9BulQFvMLNikuoPrVp0gI1/4= Subject key identifier: 26:79:43:11:D8:80:6A:96:48:27:74:F5:59:A7:92:F6:67:5B:0F:58 Authority key identifier: 8B:E2:81:D2:F4:ED:40:91:74:6F:DA:56:8A:42:96:F1:17:15:89:E8 Certificate issuer: /CN=8BE281D2F4ED4091746FDA568A4296F1171589E8 Certificate serial: 43E64C85C526037B20F1A5754E1E29ABD1001426 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8BE281D2F4ED4091746FDA568A4296F1171589E8.cer Subject info access: rsync://repo-rpki.idnic.net/repo/a82db9d3-d6eb-4d6b-9a24-feeb21aa8f53/0/8BE281D2F4ED4091746FDA568A4296F1171589E8.mft Manifest number: 04FA Signing time: Sun 10 Aug 2025 05:00:37 +0000 Manifest this update: Sun 10 Aug 2025 04:55:37 +0000 Manifest next update: Wed 13 Aug 2025 08:02:37 +0000 Files and hashes: 1: 3130332e3133342e38372e302f32342d3234203d3e203538333639.roa (hash: JnMoHtL2uw/1X+XpxI+WJ5aRYCDoJDTU7TkrgplgZrw=) 2: 8BE281D2F4ED4091746FDA568A4296F1171589E8.crl (hash: 9LDYQ9fGiT/ny1Z/huh346dm8tffVEUdx8VjeUwj9r8=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/a82db9d3-d6eb-4d6b-9a24-feeb21aa8f53/0/8BE281D2F4ED4091746FDA568A4296F1171589E8.crl rsync://repo-rpki.idnic.net/repo/a82db9d3-d6eb-4d6b-9a24-feeb21aa8f53/0/8BE281D2F4ED4091746FDA568A4296F1171589E8.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8BE281D2F4ED4091746FDA568A4296F1171589E8.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 Aug 2025 06:25:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 43:e6:4c:85:c5:26:03:7b:20:f1:a5:75:4e:1e:29:ab:d1:00:14:26 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8BE281D2F4ED4091746FDA568A4296F1171589E8 Validity Not Before: Aug 10 04:55:37 2025 GMT Not After : Aug 13 08:02:37 2025 GMT Subject: CN=26794311D8806A96482774F559A792F6675B0F58 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:5b:6e:ff:a8:11:e7:40:8f:5f:45:dc:be:d1: 86:be:61:bf:c6:28:dc:88:da:ce:c7:bc:ba:27:32: db:7d:a6:e0:2b:a4:0d:b2:63:6c:d3:aa:d4:73:11: f0:64:e0:c1:6d:99:ee:0c:02:a6:ca:74:1b:24:0d: 02:b9:4a:9d:35:94:27:75:2c:d5:2c:77:fa:61:b4: c2:25:3e:ec:82:5a:5c:9c:da:e0:4f:0a:de:cc:45: 90:1a:0d:4e:1f:d2:5a:76:86:61:bb:f0:af:00:73: b5:6e:1a:7e:27:2f:27:d5:72:62:34:28:5c:cd:b1: cb:31:4a:74:a6:92:5e:65:e3:7d:17:dc:ef:ed:e6: 66:c0:7a:e4:8c:f8:5c:7d:4c:90:07:01:6b:04:2b: 8b:f3:e1:b4:18:da:0a:3f:ee:3f:48:fb:0e:1e:6d: d1:90:ed:7d:d0:ed:39:81:41:f7:20:16:0c:88:34: ef:94:a9:fa:8f:a2:9a:51:97:31:e3:8d:92:f9:7a: db:65:7f:89:3f:bd:87:54:5e:24:9e:99:54:d0:7e: 6e:33:97:ef:b2:98:63:55:91:ba:48:ee:c5:86:1c: 2d:16:86:25:9f:aa:94:db:7d:c3:e1:04:bb:7d:d0: 1a:13:5c:cc:f9:dd:c3:b9:99:1a:e3:e3:ca:33:e5: aa:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 26:79:43:11:D8:80:6A:96:48:27:74:F5:59:A7:92:F6:67:5B:0F:58 X509v3 Authority Key Identifier: keyid:8B:E2:81:D2:F4:ED:40:91:74:6F:DA:56:8A:42:96:F1:17:15:89:E8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/a82db9d3-d6eb-4d6b-9a24-feeb21aa8f53/0/8BE281D2F4ED4091746FDA568A4296F1171589E8.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8BE281D2F4ED4091746FDA568A4296F1171589E8.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a82db9d3-d6eb-4d6b-9a24-feeb21aa8f53/0/8BE281D2F4ED4091746FDA568A4296F1171589E8.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 71:a4:62:02:b4:b5:d5:f3:f8:1b:7a:df:bd:12:cf:18:49:31: f4:c3:2e:9b:d8:1b:43:b5:09:82:dc:86:3c:e8:15:9e:77:84: d8:a9:a8:75:49:c6:4d:13:8e:11:8e:78:b3:10:ed:c6:15:44: 94:b9:cf:44:c4:b8:fc:4f:dc:3e:62:9e:fb:85:a5:f8:7d:e0: e1:09:eb:94:bb:59:77:57:c7:bc:a0:57:5f:fa:71:34:f7:9b: 97:76:07:b4:be:fe:30:72:4b:d1:05:8c:72:59:5e:aa:0d:9b: 62:e6:be:34:b9:55:8f:9f:d6:d9:c6:98:ee:94:12:ec:8a:b5: 00:d1:2d:b9:22:59:71:0b:6a:fc:dc:0d:b8:6d:14:17:b7:16: 0d:1b:b2:9a:ae:4e:78:51:2a:bd:58:58:57:ca:c4:c2:ee:3e: ad:fa:f5:8e:36:30:ce:29:9e:09:7b:a5:c7:a2:ba:83:1a:95: 9a:48:05:b2:23:5a:78:73:e1:81:21:15:8b:c9:74:25:fc:7e: ab:6e:50:3f:79:b1:e0:b8:d1:59:17:5c:d8:0a:c2:b6:1d:1b: 29:b2:07:65:6c:d1:f2:78:8b:8b:15:d1:58:4f:70:ca:61:3d: b2:2a:60:ef:cb:0c:4a:61:58:e2:ac:51:38:cc:09:8b:8a:81: eb:07:01:1e -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUQ+ZMhcUmA3sg8aV1Th4pq9EAFCYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEJFMjgxRDJGNEVENDA5MTc0NkZEQTU2OEE0Mjk2RjEx NzE1ODlFODAeFw0yNTA4MTAwNDU1MzdaFw0yNTA4MTMwODAyMzdaMDMxMTAvBgNV BAMTKDI2Nzk0MzExRDg4MDZBOTY0ODI3NzRGNTU5QTc5MkY2Njc1QjBGNTgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDOW27/qBHnQI9fRdy+0Ya+Yb/G KNyI2s7HvLonMtt9puArpA2yY2zTqtRzEfBk4MFtme4MAqbKdBskDQK5Sp01lCd1 LNUsd/phtMIlPuyCWlyc2uBPCt7MRZAaDU4f0lp2hmG78K8Ac7VuGn4nLyfVcmI0 KFzNscsxSnSmkl5l430X3O/t5mbAeuSM+Fx9TJAHAWsEK4vz4bQY2go/7j9I+w4e bdGQ7X3Q7TmBQfcgFgyINO+UqfqPoppRlzHjjZL5ettlf4k/vYdUXiSemVTQfm4z l++ymGNVkbpI7sWGHC0WhiWfqpTbfcPhBLt90BoTXMz53cO5mRrj48oz5ao/AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUJnlDEdiAapZIJ3T1WaeS9mdbD1gwHwYDVR0j BBgwFoAUi+KB0vTtQJF0b9pWikKW8RcViegwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h ODJkYjlkMy1kNmViLTRkNmItOWEyNC1mZWViMjFhYThmNTMvMC84QkUyODFEMkY0 RUQ0MDkxNzQ2RkRBNTY4QTQyOTZGMTE3MTU4OUU4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOEJFMjgxRDJGNEVENDA5MTc0NkZEQTU2OEE0Mjk2RjExNzE1 ODlFOC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYTgyZGI5ZDMtZDZlYi00ZDZiLTlh MjQtZmVlYjIxYWE4ZjUzLzAvOEJFMjgxRDJGNEVENDA5MTc0NkZEQTU2OEE0Mjk2 RjExNzE1ODlFOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHGkYgK0tdXz+Bt6370SzxhJMfTDLpvYG0O1 CYLchjzoFZ53hNipqHVJxk0TjhGOeLMQ7cYVRJS5z0TEuPxP3D5invuFpfh94OEJ 65S7WXdXx7ygV1/6cTT3m5d2B7S+/jByS9EFjHJZXqoNm2LmvjS5VY+f1tnGmO6U EuyKtQDRLbkiWXELavzcDbhtFBe3Fg0bspquTnhRKr1YWFfKxMLuPq369Y42MM4p ngl7pceiuoMalZpIBbIjWnhz4YEhFYvJdCX8fqtuUD95seC40VkXXNgKwrYdGymy B2Vs0fJ4i4sV0VhPcMphPbIqYO/LDEphWOKsUTjMCYuKgesHAR4= -----END CERTIFICATE-----Generated at Sun Aug 10 13:43:23 2025 by rpki-client