$ rpki-client -vvf repo-rpki.idnic.net/repo/c2b0bdd5-6e30-4a10-b993-77d48251f3a1/0/8B237B2BC0581B556DD5B4B0847F9C83408BA93D.mft File: 8B237B2BC0581B556DD5B4B0847F9C83408BA93D.mft (raw, json) Hash identifier: e1bsq74zrN9uz3v0wP2TUdtIWYRHR5iVoEkJsyAJeNI= Subject key identifier: 04:3B:4A:51:88:24:3F:D0:6E:17:A0:08:58:E9:DB:88:F3:C2:4C:ED Authority key identifier: 8B:23:7B:2B:C0:58:1B:55:6D:D5:B4:B0:84:7F:9C:83:40:8B:A9:3D Certificate issuer: /CN=8B237B2BC0581B556DD5B4B0847F9C83408BA93D Certificate serial: 458EAA30AC5889B1A65711132D423F42E1C1BA8B Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8B237B2BC0581B556DD5B4B0847F9C83408BA93D.cer Subject info access: rsync://repo-rpki.idnic.net/repo/c2b0bdd5-6e30-4a10-b993-77d48251f3a1/0/8B237B2BC0581B556DD5B4B0847F9C83408BA93D.mft Manifest number: 01F2 Signing time: Wed 06 Aug 2025 23:40:00 +0000 Manifest this update: Wed 06 Aug 2025 23:35:00 +0000 Manifest next update: Sun 10 Aug 2025 06:49:00 +0000 Files and hashes: 1: 3130332e3139302e3131342e302f32342d3234203d3e203435333035.roa (hash: KgdQImSFXI48JOCLFSTKKPItTv1rC7N1MfwzWNtz7zI=) 2: 3130332e3139302e3131352e302f32342d3234203d3e203435333035.roa (hash: dEnaKQdLZdizpCqpcJnXth7f6FKcdGy1/gEWNghJ+nU=) 3: 3130332e3139302e3131342e302f32332d3233203d3e203435333035.roa (hash: ULVDgV6Ym293ne4NjwFyx9fV7GwDIsvmtft/evHC1jQ=) 4: 8B237B2BC0581B556DD5B4B0847F9C83408BA93D.crl (hash: +Kzk2MXW27B2eilkZYOGXP85ZJhgHTGczFHOCI2KGkE=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/c2b0bdd5-6e30-4a10-b993-77d48251f3a1/0/8B237B2BC0581B556DD5B4B0847F9C83408BA93D.crl rsync://repo-rpki.idnic.net/repo/c2b0bdd5-6e30-4a10-b993-77d48251f3a1/0/8B237B2BC0581B556DD5B4B0847F9C83408BA93D.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8B237B2BC0581B556DD5B4B0847F9C83408BA93D.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 10 Aug 2025 06:49:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 45:8e:aa:30:ac:58:89:b1:a6:57:11:13:2d:42:3f:42:e1:c1:ba:8b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8B237B2BC0581B556DD5B4B0847F9C83408BA93D Validity Not Before: Aug 6 23:35:00 2025 GMT Not After : Aug 10 06:49:00 2025 GMT Subject: CN=043B4A5188243FD06E17A00858E9DB88F3C24CED Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:9e:a3:d4:86:6a:51:61:9d:37:66:f8:5e:d3: 4f:8b:6c:1a:d8:b7:5a:5a:93:a7:07:64:ab:67:a0: 9b:0e:77:0d:32:19:01:ed:36:ee:cd:68:3c:9b:f8: 3c:bb:4b:35:7c:d4:0e:80:1a:3d:af:80:c6:21:fd: 42:ac:69:29:d0:4d:22:58:6c:de:62:d9:05:11:bb: 56:02:0c:fb:27:8a:c4:f7:0b:f6:ee:33:38:f9:6c: 22:b7:f5:01:a5:d8:fa:79:1b:59:37:e0:2e:6f:da: 85:e9:9b:06:04:35:b7:7d:92:43:61:15:82:fa:d3: dc:94:a0:ee:fd:d1:4c:bb:3b:86:ee:e4:45:8f:3a: ec:2a:22:8a:61:5c:a8:96:0a:9a:12:57:94:76:44: 80:1c:64:a6:23:dc:dd:cd:3d:76:78:5f:9f:1b:f1: 80:ec:e7:2a:c2:4c:0b:c6:5e:05:b1:80:e6:d5:c5: a2:12:9d:9c:2b:ae:61:38:18:7c:2d:6b:94:c1:8b: 79:40:a0:05:64:ce:2c:97:b2:04:3a:55:38:23:25: c3:ed:a7:24:63:b4:76:af:2a:ba:50:18:95:80:94: 53:42:6a:56:2d:10:05:38:f8:32:f7:e9:8c:d4:5c: 46:5b:e5:a0:5e:40:5a:98:f3:44:51:39:65:d9:8d: f7:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 04:3B:4A:51:88:24:3F:D0:6E:17:A0:08:58:E9:DB:88:F3:C2:4C:ED X509v3 Authority Key Identifier: keyid:8B:23:7B:2B:C0:58:1B:55:6D:D5:B4:B0:84:7F:9C:83:40:8B:A9:3D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/c2b0bdd5-6e30-4a10-b993-77d48251f3a1/0/8B237B2BC0581B556DD5B4B0847F9C83408BA93D.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8B237B2BC0581B556DD5B4B0847F9C83408BA93D.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c2b0bdd5-6e30-4a10-b993-77d48251f3a1/0/8B237B2BC0581B556DD5B4B0847F9C83408BA93D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5c:4a:ab:61:57:8c:30:15:02:7d:9a:6c:3b:8b:33:6b:fa:8e: f8:b0:f7:48:1f:1b:03:5a:4b:b9:3e:f2:4f:d5:97:ef:3e:fc: d4:b8:98:e4:61:8d:00:2b:dd:75:0d:07:15:d6:40:81:8c:b6: ed:a0:fb:f5:37:fe:0b:d4:71:62:df:77:6e:00:20:75:70:68: 3d:f6:a8:fe:d5:a5:4a:ce:f6:50:82:c4:1b:da:da:24:f6:c3: 76:6f:8d:8c:d8:1d:f1:39:bb:2c:f9:ff:09:64:79:9a:dd:27: ed:ad:2f:a1:f6:89:1e:f0:21:85:60:d2:a5:c8:a1:9c:2d:df: f5:27:71:75:dc:f7:ea:fa:e5:6d:a8:7b:e1:86:81:a5:92:85: 04:0e:c3:63:39:d4:a1:25:a0:ca:2c:3a:83:00:d3:97:25:13: af:2d:3d:de:ab:23:ab:e6:c7:26:03:0f:95:18:77:11:80:39: 21:53:33:99:bf:8a:c6:86:94:bb:c6:12:4a:61:e0:5b:79:cb: 12:19:dc:40:65:3a:0c:33:f6:1e:23:cc:f6:ad:23:2f:5f:01: 06:d0:3b:01:dd:3e:0c:e8:a2:57:d4:f9:8c:0c:10:cb:aa:09: db:f9:d6:07:ae:0c:b7:77:25:d7:d0:1d:b6:0b:db:96:8f:f2: d6:28:bc:50 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIURY6qMKxYibGmVxETLUI/QuHBuoswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEIyMzdCMkJDMDU4MUI1NTZERDVCNEIwODQ3RjlDODM0 MDhCQTkzRDAeFw0yNTA4MDYyMzM1MDBaFw0yNTA4MTAwNjQ5MDBaMDMxMTAvBgNV BAMTKDA0M0I0QTUxODgyNDNGRDA2RTE3QTAwODU4RTlEQjg4RjNDMjRDRUQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDQnqPUhmpRYZ03Zvhe00+LbBrY t1pak6cHZKtnoJsOdw0yGQHtNu7NaDyb+Dy7SzV81A6AGj2vgMYh/UKsaSnQTSJY bN5i2QURu1YCDPsnisT3C/buMzj5bCK39QGl2Pp5G1k34C5v2oXpmwYENbd9kkNh FYL609yUoO790Uy7O4bu5EWPOuwqIophXKiWCpoSV5R2RIAcZKYj3N3NPXZ4X58b 8YDs5yrCTAvGXgWxgObVxaISnZwrrmE4GHwta5TBi3lAoAVkziyXsgQ6VTgjJcPt pyRjtHavKrpQGJWAlFNCalYtEAU4+DL36YzUXEZb5aBeQFqY80RROWXZjfe1AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUBDtKUYgkP9BuF6AIWOnbiPPCTO0wHwYDVR0j BBgwFoAUiyN7K8BYG1Vt1bSwhH+cg0CLqT0wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j MmIwYmRkNS02ZTMwLTRhMTAtYjk5My03N2Q0ODI1MWYzYTEvMC84QjIzN0IyQkMw NTgxQjU1NkRENUI0QjA4NDdGOUM4MzQwOEJBOTNELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOEIyMzdCMkJDMDU4MUI1NTZERDVCNEIwODQ3RjlDODM0MDhC QTkzRC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYzJiMGJkZDUtNmUzMC00YTEwLWI5 OTMtNzdkNDgyNTFmM2ExLzAvOEIyMzdCMkJDMDU4MUI1NTZERDVCNEIwODQ3RjlD ODM0MDhCQTkzRC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFxKq2FXjDAVAn2abDuLM2v6jviw90gfGwNa S7k+8k/Vl+8+/NS4mORhjQAr3XUNBxXWQIGMtu2g+/U3/gvUcWLfd24AIHVwaD32 qP7VpUrO9lCCxBva2iT2w3ZvjYzYHfE5uyz5/wlkeZrdJ+2tL6H2iR7wIYVg0qXI oZwt3/UncXXc9+r65W2oe+GGgaWShQQOw2M51KEloMosOoMA05clE68tPd6rI6vm xyYDD5UYdxGAOSFTM5m/isaGlLvGEkph4Ft5yxIZ3EBlOgwz9h4jzPatIy9fAQbQ OwHdPgzoolfU+YwMEMuqCdv51geuDLd3JdfQHbYL25aP8tYovFA= -----END CERTIFICATE-----Generated at Thu Aug 7 23:58:09 2025 by rpki-client