$ rpki-client -vvf repo-rpki.idnic.net/repo/b7b87f6d-29a7-4b4c-81c7-5b4cbdb2cb6a/0/8603B0F726A05AB356D10DB170BD8E27963AFE1A.mft File: 8603B0F726A05AB356D10DB170BD8E27963AFE1A.mft (raw, json) Hash identifier: h5n+SSXnJQKPmMbwhq2G4Uvaajis5fwW7tX2rkivbfk= Subject key identifier: D9:48:AA:3D:39:15:4E:76:CE:B3:1A:7D:C5:3E:32:13:33:51:55:FF Authority key identifier: 86:03:B0:F7:26:A0:5A:B3:56:D1:0D:B1:70:BD:8E:27:96:3A:FE:1A Certificate issuer: /CN=8603B0F726A05AB356D10DB170BD8E27963AFE1A Certificate serial: 406687706EB6ABF3161B197503E1D189B12B4430 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8603B0F726A05AB356D10DB170BD8E27963AFE1A.cer Subject info access: rsync://repo-rpki.idnic.net/repo/b7b87f6d-29a7-4b4c-81c7-5b4cbdb2cb6a/0/8603B0F726A05AB356D10DB170BD8E27963AFE1A.mft Manifest number: 03E7 Signing time: Sun 10 Aug 2025 09:01:58 +0000 Manifest this update: Sun 10 Aug 2025 08:56:58 +0000 Manifest next update: Wed 13 Aug 2025 16:14:58 +0000 Files and hashes: 1: 8603B0F726A05AB356D10DB170BD8E27963AFE1A.crl (hash: JaXWvcczAoN3Uflq9tj+njBUpfCj15sZa/w+vxWKf60=) 2: 323430353a633763303a3a2f33322d3332203d3e20313339393738.roa (hash: piwF7+ON2R793sJiaX+4aFfo5D7cOZdp7goWhivyjxE=) 3: 3130332e3134382e31392e302f32342d3234203d3e20313339393738.roa (hash: bezCvX8XgFSa6OMSK27HUjxxwyFifSYbogKsMqbTNHQ=) 4: 3130332e3134382e31382e302f32332d3233203d3e20313339393738.roa (hash: 4K0py4cnYyh8vI10iLQo1yG8FCXY4pSX4oMXyg6m2pw=) 5: 3130332e3134382e31382e302f32342d3234203d3e20313339393738.roa (hash: U5t1gz5Lu8bYdTDoG7TIErUjYPNGo4xQEu5agXugT3k=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/b7b87f6d-29a7-4b4c-81c7-5b4cbdb2cb6a/0/8603B0F726A05AB356D10DB170BD8E27963AFE1A.crl rsync://repo-rpki.idnic.net/repo/b7b87f6d-29a7-4b4c-81c7-5b4cbdb2cb6a/0/8603B0F726A05AB356D10DB170BD8E27963AFE1A.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8603B0F726A05AB356D10DB170BD8E27963AFE1A.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 Aug 2025 16:14:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 40:66:87:70:6e:b6:ab:f3:16:1b:19:75:03:e1:d1:89:b1:2b:44:30 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8603B0F726A05AB356D10DB170BD8E27963AFE1A Validity Not Before: Aug 10 08:56:58 2025 GMT Not After : Aug 13 16:14:58 2025 GMT Subject: CN=D948AA3D39154E76CEB31A7DC53E3213335155FF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:4d:bd:da:89:4b:c9:81:60:22:89:e4:04:5a: a1:16:2b:36:a8:3d:46:c7:14:87:ab:af:65:4d:df: b9:c0:97:31:d7:e0:39:c8:7a:d7:5a:5f:f4:0e:80: 83:c1:7b:92:e4:5c:93:11:fe:62:38:43:37:72:ed: 0f:6a:49:e3:4d:e0:e8:3b:d2:bd:a1:b9:39:0f:8c: 99:37:a4:f6:be:44:86:d0:a3:88:53:d3:6b:bd:99: 21:d8:90:ca:4c:ef:dd:73:ad:02:32:97:85:65:57: 09:72:ce:9f:8b:2e:93:75:6c:01:fa:99:df:9e:cc: 6e:a1:2f:5a:7a:e4:6c:95:05:cd:c9:6d:a7:f7:74: b0:13:58:d0:47:ce:5c:6e:bf:5a:a6:7c:6f:2c:e9: 41:8f:19:af:fc:74:83:2a:1a:b3:49:2d:cb:c3:4a: 46:b8:c3:c7:bd:2b:14:c5:07:2a:2e:66:46:d2:fe: 59:9a:dd:7e:85:49:94:7d:8b:1f:8a:96:c2:9d:10: 3d:de:61:90:7a:7f:72:bb:96:a3:78:db:70:b8:e1: 92:63:47:aa:e3:6f:dd:58:5d:e8:a5:4c:ea:55:b7: bd:b0:25:f6:8b:91:f1:f2:95:1d:b1:53:54:1e:f8: 69:d2:88:6e:1e:e1:55:20:0d:d0:c6:70:f2:4d:20: 76:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:48:AA:3D:39:15:4E:76:CE:B3:1A:7D:C5:3E:32:13:33:51:55:FF X509v3 Authority Key Identifier: keyid:86:03:B0:F7:26:A0:5A:B3:56:D1:0D:B1:70:BD:8E:27:96:3A:FE:1A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/b7b87f6d-29a7-4b4c-81c7-5b4cbdb2cb6a/0/8603B0F726A05AB356D10DB170BD8E27963AFE1A.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8603B0F726A05AB356D10DB170BD8E27963AFE1A.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/b7b87f6d-29a7-4b4c-81c7-5b4cbdb2cb6a/0/8603B0F726A05AB356D10DB170BD8E27963AFE1A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 76:dc:b7:e6:0f:fe:8b:3f:64:d5:37:45:5f:72:af:f3:11:94: d8:8e:94:bd:85:14:0a:02:1a:38:a4:b9:38:e8:b0:44:ae:29: 00:d3:d1:6b:da:04:ba:dc:63:9c:f2:7b:dc:07:1f:6f:7f:0a: e2:66:43:3e:a1:ec:87:3e:7a:d7:e3:37:78:4c:f1:51:1f:46: fa:bf:23:6f:70:91:7c:97:35:6c:a3:06:c2:32:0f:ac:81:d6: 20:e7:da:8c:cc:71:53:8f:d8:cc:49:77:82:17:75:8e:51:b4: 79:38:7f:80:40:1a:d3:b5:dd:b2:64:d6:7a:c4:48:15:29:0b: 5c:4b:34:be:e0:f9:fb:22:d4:89:e5:1f:28:fa:98:50:0a:0a: c8:bf:2b:52:8c:9f:dc:45:38:ac:19:76:9d:fe:cc:4b:e3:4e: e5:b5:23:0f:7b:7a:2b:70:b0:b3:d9:88:01:b9:54:a2:ec:69: 9e:e0:e7:90:be:8e:43:cd:ee:e0:f9:0e:57:58:e6:6d:03:f6: 57:a7:f9:51:f8:4c:67:dd:96:30:07:bc:1a:fc:56:8d:14:fb: 72:6d:d1:76:70:ef:fa:62:91:b1:70:e3:b3:a6:bd:be:9a:04: 9e:c0:e9:74:ab:f5:98:09:57:30:0f:33:ac:b8:34:62:f0:fe: a7:7e:64:22 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUQGaHcG62q/MWGxl1A+HRibErRDAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODYwM0IwRjcyNkEwNUFCMzU2RDEwREIxNzBCRDhFMjc5 NjNBRkUxQTAeFw0yNTA4MTAwODU2NThaFw0yNTA4MTMxNjE0NThaMDMxMTAvBgNV BAMTKEQ5NDhBQTNEMzkxNTRFNzZDRUIzMUE3REM1M0UzMjEzMzM1MTU1RkYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDiTb3aiUvJgWAiieQEWqEWKzao PUbHFIerr2VN37nAlzHX4DnIetdaX/QOgIPBe5LkXJMR/mI4Qzdy7Q9qSeNN4Og7 0r2huTkPjJk3pPa+RIbQo4hT02u9mSHYkMpM791zrQIyl4VlVwlyzp+LLpN1bAH6 md+ezG6hL1p65GyVBc3Jbaf3dLATWNBHzlxuv1qmfG8s6UGPGa/8dIMqGrNJLcvD Ska4w8e9KxTFByouZkbS/lma3X6FSZR9ix+KlsKdED3eYZB6f3K7lqN423C44ZJj R6rjb91YXeilTOpVt72wJfaLkfHylR2xU1Qe+GnSiG4e4VUgDdDGcPJNIHahAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU2UiqPTkVTnbOsxp9xT4yEzNRVf8wHwYDVR0j BBgwFoAUhgOw9yagWrNW0Q2xcL2OJ5Y6/howDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i N2I4N2Y2ZC0yOWE3LTRiNGMtODFjNy01YjRjYmRiMmNiNmEvMC84NjAzQjBGNzI2 QTA1QUIzNTZEMTBEQjE3MEJEOEUyNzk2M0FGRTFBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvODYwM0IwRjcyNkEwNUFCMzU2RDEwREIxNzBCRDhFMjc5NjNB RkUxQS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYjdiODdmNmQtMjlhNy00YjRjLTgx YzctNWI0Y2JkYjJjYjZhLzAvODYwM0IwRjcyNkEwNUFCMzU2RDEwREIxNzBCRDhF Mjc5NjNBRkUxQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHbct+YP/os/ZNU3RV9yr/MRlNiOlL2FFAoC GjikuTjosESuKQDT0WvaBLrcY5zye9wHH29/CuJmQz6h7Ic+etfjN3hM8VEfRvq/ I29wkXyXNWyjBsIyD6yB1iDn2ozMcVOP2MxJd4IXdY5RtHk4f4BAGtO13bJk1nrE SBUpC1xLNL7g+fsi1InlHyj6mFAKCsi/K1KMn9xFOKwZdp3+zEvjTuW1Iw97eitw sLPZiAG5VKLsaZ7g55C+jkPN7uD5DldY5m0D9len+VH4TGfdljAHvBr8Vo0U+3Jt 0XZw7/pikbFw47Omvb6aBJ7A6XSr9ZgJVzAPM6y4NGLw/qd+ZCI= -----END CERTIFICATE-----Generated at Sun Aug 10 18:12:22 2025 by rpki-client