$ rpki-client -vvf repo-rpki.idnic.net/repo/b94c1e95-a738-4e47-8e5c-7af681b36b00/0/8DBECF314BD3C829923A3A97BFC62113A61F8EE1.mft File: 8DBECF314BD3C829923A3A97BFC62113A61F8EE1.mft (raw, json) Hash identifier: 2gUFF0812XsVQyUJ7N55Ub/IfGG0ES8hj0sB3HQ9dq8= Subject key identifier: AC:96:9B:48:56:BA:D2:58:B9:9D:45:99:C6:5C:FB:D7:25:1F:1A:F8 Authority key identifier: 8D:BE:CF:31:4B:D3:C8:29:92:3A:3A:97:BF:C6:21:13:A6:1F:8E:E1 Certificate issuer: /CN=8DBECF314BD3C829923A3A97BFC62113A61F8EE1 Certificate serial: 66A217588CC066FE0D24321532F96DCCBEE13655 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8DBECF314BD3C829923A3A97BFC62113A61F8EE1.cer Subject info access: rsync://repo-rpki.idnic.net/repo/b94c1e95-a738-4e47-8e5c-7af681b36b00/0/8DBECF314BD3C829923A3A97BFC62113A61F8EE1.mft Manifest number: 01F2 Signing time: Wed 06 Aug 2025 06:32:09 +0000 Manifest this update: Wed 06 Aug 2025 06:27:09 +0000 Manifest next update: Sat 09 Aug 2025 08:36:09 +0000 Files and hashes: 1: 3130332e3138362e39302e302f32342d3234203d3e20313439373037.roa (hash: 656gLN35OIXcG6Vik35XhI6XoKD7dIobeeOabAVD0UQ=) 2: 3130332e3138362e39302e302f32332d3233203d3e20313439373037.roa (hash: IxE4f1xQzeKQZjsPZmdFbJyZKv94xhwmFh4/4Aw/W0I=) 3: 8DBECF314BD3C829923A3A97BFC62113A61F8EE1.crl (hash: iva4+QGjGbCAOz9oZE7EEumNnD9o/F3mTwPezlLs558=) 4: 3130332e3138362e39312e302f32342d3234203d3e20313439373037.roa (hash: v7WXEnDaWLgLHCCs0/IjJD0cW6T6d8CeSIJNddKA634=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/b94c1e95-a738-4e47-8e5c-7af681b36b00/0/8DBECF314BD3C829923A3A97BFC62113A61F8EE1.crl rsync://repo-rpki.idnic.net/repo/b94c1e95-a738-4e47-8e5c-7af681b36b00/0/8DBECF314BD3C829923A3A97BFC62113A61F8EE1.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8DBECF314BD3C829923A3A97BFC62113A61F8EE1.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 09 Aug 2025 08:36:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 66:a2:17:58:8c:c0:66:fe:0d:24:32:15:32:f9:6d:cc:be:e1:36:55 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8DBECF314BD3C829923A3A97BFC62113A61F8EE1 Validity Not Before: Aug 6 06:27:09 2025 GMT Not After : Aug 9 08:36:09 2025 GMT Subject: CN=AC969B4856BAD258B99D4599C65CFBD7251F1AF8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:d3:7f:c1:55:52:1a:24:03:c2:f3:50:29:c3: 41:3c:d8:70:50:71:eb:f9:79:8c:f3:c3:5a:bb:c7: cf:3d:18:a7:01:ce:90:61:e4:24:39:19:59:b9:f1: 4e:90:69:a4:dd:9b:b3:02:cf:2c:8f:0c:f6:ff:ca: b9:f4:a2:10:c5:bd:aa:f5:0e:50:c6:15:3c:5a:86: d7:11:70:ec:11:06:9a:23:b4:54:70:a6:07:f0:ae: 27:10:4b:77:2f:f5:e5:21:b1:2f:a6:9c:ac:77:97: 09:f6:bb:a4:6c:87:4a:88:bd:62:ad:b9:5a:af:f7: 99:b0:9c:9d:42:01:6d:76:b7:aa:5f:42:a3:27:cf: 83:ed:ea:a3:1c:a6:12:1e:a0:9a:b3:e0:31:14:c4: 90:4d:de:19:ad:7e:c6:30:16:d5:93:6c:1a:2a:cc: fe:73:3d:1a:99:69:30:45:5a:b4:b3:5c:37:87:ac: a1:06:e1:d4:c4:62:20:68:9c:b4:35:d4:4d:27:fc: b7:26:fe:35:2c:6f:48:41:05:af:2c:fc:7c:d3:f5: 5d:26:08:9b:5e:d1:e8:77:da:f8:e6:05:d2:2e:b9: 3b:3a:c1:dd:d0:a5:b9:dd:44:c5:b7:ef:ff:ff:e6: 09:45:5b:90:63:57:ed:2e:6a:0f:aa:66:b5:3e:ed: 0e:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AC:96:9B:48:56:BA:D2:58:B9:9D:45:99:C6:5C:FB:D7:25:1F:1A:F8 X509v3 Authority Key Identifier: keyid:8D:BE:CF:31:4B:D3:C8:29:92:3A:3A:97:BF:C6:21:13:A6:1F:8E:E1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/b94c1e95-a738-4e47-8e5c-7af681b36b00/0/8DBECF314BD3C829923A3A97BFC62113A61F8EE1.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8DBECF314BD3C829923A3A97BFC62113A61F8EE1.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/b94c1e95-a738-4e47-8e5c-7af681b36b00/0/8DBECF314BD3C829923A3A97BFC62113A61F8EE1.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5c:a5:20:0b:e0:7e:92:fb:c9:36:a4:cf:94:bc:ce:77:05:7a: 55:92:9f:48:f6:5c:10:81:2b:e5:85:4f:d0:e6:08:62:ef:19: f5:99:f1:79:5c:5d:80:db:ec:4a:80:59:f1:18:d5:f0:a4:64: 6b:41:0d:84:c1:f5:a3:38:a5:9f:68:58:1f:19:23:79:e6:98: 57:07:35:80:27:69:20:bc:7e:e3:1b:d1:7f:62:d2:55:6c:91: 9c:23:0e:db:f4:4a:0c:04:c8:f6:34:f9:a1:76:1a:c0:d3:c7: 87:e8:82:74:06:94:b2:02:c5:ab:a8:c3:03:11:bf:d1:b6:61: 7a:1e:32:49:14:3d:44:0d:37:4d:95:df:6f:06:87:28:ee:86: 9b:0e:b8:d2:65:43:00:9c:5f:8d:f8:a0:e4:a9:fe:78:b7:da: c3:ab:cc:d0:80:22:97:03:cc:d6:ea:f0:a0:8e:8b:db:90:1a: 89:44:64:ef:b7:3e:d9:89:a1:e5:c7:e2:02:01:97:fa:2e:9c: e2:a7:e4:22:52:6b:99:1d:ed:79:bd:36:13:5f:28:f2:4b:49: d2:ac:f0:8f:71:5e:10:89:45:69:0f:6c:cb:02:59:3c:cb:e1: 5d:9a:dd:86:73:23:16:b2:cf:e8:b1:c4:83:c6:47:39:11:5e: ba:22:7f:34 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUZqIXWIzAZv4NJDIVMvltzL7hNlUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOERCRUNGMzE0QkQzQzgyOTkyM0EzQTk3QkZDNjIxMTNB NjFGOEVFMTAeFw0yNTA4MDYwNjI3MDlaFw0yNTA4MDkwODM2MDlaMDMxMTAvBgNV BAMTKEFDOTY5QjQ4NTZCQUQyNThCOTlENDU5OUM2NUNGQkQ3MjUxRjFBRjgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDc03/BVVIaJAPC81Apw0E82HBQ cev5eYzzw1q7x889GKcBzpBh5CQ5GVm58U6QaaTdm7MCzyyPDPb/yrn0ohDFvar1 DlDGFTxahtcRcOwRBpojtFRwpgfwricQS3cv9eUhsS+mnKx3lwn2u6Rsh0qIvWKt uVqv95mwnJ1CAW12t6pfQqMnz4Pt6qMcphIeoJqz4DEUxJBN3hmtfsYwFtWTbBoq zP5zPRqZaTBFWrSzXDeHrKEG4dTEYiBonLQ11E0n/Lcm/jUsb0hBBa8s/HzT9V0m CJte0eh32vjmBdIuuTs6wd3QpbndRMW37///5glFW5BjV+0uag+qZrU+7Q7xAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUrJabSFa60li5nUWZxlz71yUfGvgwHwYDVR0j BBgwFoAUjb7PMUvTyCmSOjqXv8YhE6YfjuEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i OTRjMWU5NS1hNzM4LTRlNDctOGU1Yy03YWY2ODFiMzZiMDAvMC84REJFQ0YzMTRC RDNDODI5OTIzQTNBOTdCRkM2MjExM0E2MUY4RUUxLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOERCRUNGMzE0QkQzQzgyOTkyM0EzQTk3QkZDNjIxMTNBNjFG OEVFMS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYjk0YzFlOTUtYTczOC00ZTQ3LThl NWMtN2FmNjgxYjM2YjAwLzAvOERCRUNGMzE0QkQzQzgyOTkyM0EzQTk3QkZDNjIx MTNBNjFGOEVFMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFylIAvgfpL7yTakz5S8zncFelWSn0j2XBCB K+WFT9DmCGLvGfWZ8XlcXYDb7EqAWfEY1fCkZGtBDYTB9aM4pZ9oWB8ZI3nmmFcH NYAnaSC8fuMb0X9i0lVskZwjDtv0SgwEyPY0+aF2GsDTx4fognQGlLICxauowwMR v9G2YXoeMkkUPUQNN02V328GhyjuhpsOuNJlQwCcX434oOSp/ni32sOrzNCAIpcD zNbq8KCOi9uQGolEZO+3PtmJoeXH4gIBl/ounOKn5CJSa5kd7Xm9NhNfKPJLSdKs 8I9xXhCJRWkPbMsCWTzL4V2a3YZzIxayz+ixxIPGRzkRXroifzQ= -----END CERTIFICATE-----Generated at Thu Aug 7 00:26:39 2025 by rpki-client