$ rpki-client -vvf repo-rpki.idnic.net/repo/aef837b3-dfd2-42cc-9b79-74b6bafd4e2d/0/8711D05D82BAFB7BEAB275E079A72DDD554064EA.mft File: 8711D05D82BAFB7BEAB275E079A72DDD554064EA.mft (raw, json) Hash identifier: ZCYlkVz+un3GyEeZoWaXjt1P7IDcP7FNYzzpx77FfVc= Subject key identifier: B1:FE:48:E7:F2:6E:7A:B6:39:6B:A4:72:A4:BC:BD:4B:59:CB:57:68 Authority key identifier: 87:11:D0:5D:82:BA:FB:7B:EA:B2:75:E0:79:A7:2D:DD:55:40:64:EA Certificate issuer: /CN=8711D05D82BAFB7BEAB275E079A72DDD554064EA Certificate serial: 7E5271D1A1FD8EA387521A6C49F70BCCACB59183 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8711D05D82BAFB7BEAB275E079A72DDD554064EA.cer Subject info access: rsync://repo-rpki.idnic.net/repo/aef837b3-dfd2-42cc-9b79-74b6bafd4e2d/0/8711D05D82BAFB7BEAB275E079A72DDD554064EA.mft Manifest number: 01C4 Signing time: Wed 06 Aug 2025 00:32:02 +0000 Manifest this update: Wed 06 Aug 2025 00:27:02 +0000 Manifest next update: Sat 09 Aug 2025 05:06:02 +0000 Files and hashes: 1: 3130332e31372e3137392e302f32342d3234203d3e20313530323236.roa (hash: zZiAzMvnjGpr4Mq+/OGXUdFHQPaHJLr/tCxwWuWhySI=) 2: 8711D05D82BAFB7BEAB275E079A72DDD554064EA.crl (hash: tD/g4hkciEzVxewznr+4wkn7aRKeiLIjH+IxK/vfo4M=) 3: 3130332e31372e3137382e302f32342d3234203d3e20313530323236.roa (hash: 6sZc5cLjn8BGU3ndbP5aYFbkGJW/EMEDKLHgtlwJygA=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/aef837b3-dfd2-42cc-9b79-74b6bafd4e2d/0/8711D05D82BAFB7BEAB275E079A72DDD554064EA.crl rsync://repo-rpki.idnic.net/repo/aef837b3-dfd2-42cc-9b79-74b6bafd4e2d/0/8711D05D82BAFB7BEAB275E079A72DDD554064EA.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8711D05D82BAFB7BEAB275E079A72DDD554064EA.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 09 Aug 2025 05:06:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7e:52:71:d1:a1:fd:8e:a3:87:52:1a:6c:49:f7:0b:cc:ac:b5:91:83 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8711D05D82BAFB7BEAB275E079A72DDD554064EA Validity Not Before: Aug 6 00:27:02 2025 GMT Not After : Aug 9 05:06:02 2025 GMT Subject: CN=B1FE48E7F26E7AB6396BA472A4BCBD4B59CB5768 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:f1:3d:b6:79:f8:29:f8:3b:e5:e8:7a:1f:4b: c9:8c:28:a6:2c:18:84:41:7b:0b:f3:5c:af:ba:4b: 86:1a:76:d7:d5:67:de:8e:a4:d7:4a:3a:64:d5:73: 14:e7:b7:8d:b7:7c:e2:5a:aa:a9:c7:98:ba:e6:0b: ea:55:86:61:af:e0:77:94:10:85:8b:c1:ff:1c:bf: 9d:e2:d1:8d:b4:bf:5d:f3:57:dc:21:66:ba:60:56: a1:0a:65:16:cc:df:f9:5e:04:0b:f6:28:e0:09:fc: 53:e4:62:68:1e:ef:bf:3c:89:cd:29:14:59:6f:6e: d7:de:e4:cc:21:f8:34:4c:8a:ee:f7:43:c2:69:08: 86:27:35:47:a2:2e:90:9b:9c:f9:5d:d7:0d:60:8f: c4:31:7f:d6:fc:50:c3:e6:74:7e:2f:d1:34:0e:f6: 7b:72:29:94:18:8d:e8:f0:df:70:e5:95:fa:fc:e5: da:ec:8a:31:c5:ff:e6:b4:f7:3c:92:ee:4d:08:16: 64:f9:21:ec:b6:09:1e:f5:b2:0c:9c:5b:01:a3:a5: 92:e5:b8:92:c3:a4:42:55:5f:91:b7:c0:93:a3:60: 9a:54:e4:b1:7b:1a:91:8a:8f:5b:59:01:54:5d:e6: d5:8c:c3:12:9e:02:6a:d9:c5:65:c3:8b:60:7a:d5: 07:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B1:FE:48:E7:F2:6E:7A:B6:39:6B:A4:72:A4:BC:BD:4B:59:CB:57:68 X509v3 Authority Key Identifier: keyid:87:11:D0:5D:82:BA:FB:7B:EA:B2:75:E0:79:A7:2D:DD:55:40:64:EA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/aef837b3-dfd2-42cc-9b79-74b6bafd4e2d/0/8711D05D82BAFB7BEAB275E079A72DDD554064EA.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8711D05D82BAFB7BEAB275E079A72DDD554064EA.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/aef837b3-dfd2-42cc-9b79-74b6bafd4e2d/0/8711D05D82BAFB7BEAB275E079A72DDD554064EA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption d4:f9:89:4e:bd:92:41:8e:17:2d:05:7e:e0:bf:2a:d9:12:f6: 17:3c:dc:68:6b:96:d3:ff:54:57:32:b6:a4:43:43:0c:a8:e2: 15:e1:f0:61:f8:0a:85:ef:7e:1a:a5:73:35:da:da:7b:ba:ea: e1:bc:90:bd:90:f8:ba:32:87:ca:85:ab:76:8c:40:b5:eb:3a: a6:25:2b:ad:55:da:4b:5b:90:91:52:01:23:40:0d:4d:b6:7c: ef:c5:07:8d:cc:31:3d:37:92:1d:7f:5e:e6:c7:fc:ac:dd:85: 39:22:b8:0d:f7:1d:7a:d3:77:1a:43:a7:8c:a5:0a:65:a8:c5: b7:cf:81:04:7b:0b:4a:fb:9e:ba:e1:0f:ec:1f:40:93:75:15: 70:e0:39:1a:5b:6c:5d:ff:4f:e8:05:9f:9f:e3:13:f2:23:2f: 29:74:d6:22:c8:a9:bc:40:ed:19:e8:fa:49:d7:e0:88:48:67: 1d:71:17:11:07:8c:7a:57:63:f8:8f:2d:4b:f0:a5:9d:88:e3: af:e6:01:fc:ad:5f:53:04:e7:f9:5d:cc:90:b7:e0:3a:58:89: b0:34:65:03:9e:cd:47:70:c7:44:46:73:58:d1:08:f2:1a:f5: d1:f9:4a:bb:73:b7:ca:47:db:ed:ef:74:28:5f:34:5d:11:6c: ad:5a:e7:d1 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUflJx0aH9jqOHUhpsSfcLzKy1kYMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODcxMUQwNUQ4MkJBRkI3QkVBQjI3NUUwNzlBNzJEREQ1 NTQwNjRFQTAeFw0yNTA4MDYwMDI3MDJaFw0yNTA4MDkwNTA2MDJaMDMxMTAvBgNV BAMTKEIxRkU0OEU3RjI2RTdBQjYzOTZCQTQ3MkE0QkNCRDRCNTlDQjU3NjgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCv8T22efgp+Dvl6HofS8mMKKYs GIRBewvzXK+6S4YadtfVZ96OpNdKOmTVcxTnt423fOJaqqnHmLrmC+pVhmGv4HeU EIWLwf8cv53i0Y20v13zV9whZrpgVqEKZRbM3/leBAv2KOAJ/FPkYmge7788ic0p FFlvbtfe5Mwh+DRMiu73Q8JpCIYnNUeiLpCbnPld1w1gj8Qxf9b8UMPmdH4v0TQO 9ntyKZQYjejw33Dllfr85drsijHF/+a09zyS7k0IFmT5Iey2CR71sgycWwGjpZLl uJLDpEJVX5G3wJOjYJpU5LF7GpGKj1tZAVRd5tWMwxKeAmrZxWXDi2B61Qc5AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUsf5I5/JuerY5a6RypLy9S1nLV2gwHwYDVR0j BBgwFoAUhxHQXYK6+3vqsnXgeact3VVAZOowDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h ZWY4MzdiMy1kZmQyLTQyY2MtOWI3OS03NGI2YmFmZDRlMmQvMC84NzExRDA1RDgy QkFGQjdCRUFCMjc1RTA3OUE3MkRERDU1NDA2NEVBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvODcxMUQwNUQ4MkJBRkI3QkVBQjI3NUUwNzlBNzJEREQ1NTQw NjRFQS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYWVmODM3YjMtZGZkMi00MmNjLTli NzktNzRiNmJhZmQ0ZTJkLzAvODcxMUQwNUQ4MkJBRkI3QkVBQjI3NUUwNzlBNzJE REQ1NTQwNjRFQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBANT5iU69kkGOFy0FfuC/KtkS9hc83GhrltP/ VFcytqRDQwyo4hXh8GH4CoXvfhqlczXa2nu66uG8kL2Q+Loyh8qFq3aMQLXrOqYl K61V2ktbkJFSASNADU22fO/FB43MMT03kh1/XubH/KzdhTkiuA33HXrTdxpDp4yl CmWoxbfPgQR7C0r7nrrhD+wfQJN1FXDgORpbbF3/T+gFn5/jE/IjLyl01iLIqbxA 7Rno+knX4IhIZx1xFxEHjHpXY/iPLUvwpZ2I46/mAfytX1ME5/ldzJC34DpYibA0 ZQOezUdwx0RGc1jRCPIa9dH5Srtzt8pH2+3vdChfNF0RbK1a59E= -----END CERTIFICATE-----Generated at Thu Aug 7 03:16:41 2025 by rpki-client