$ rpki-client -vvf repo-rpki.idnic.net/repo/d06347f4-ea26-4d4c-a568-1d863360e421/0/8BE4A701F2924B4BFB8A983A1B0BD5C8863BF3FD.mft File: 8BE4A701F2924B4BFB8A983A1B0BD5C8863BF3FD.mft (raw, json) Hash identifier: SaJVXwkUX6pECudpV/HdJ9gbEOXqGpD583+nKlPWSGY= Subject key identifier: 11:A7:81:E2:BA:B9:49:B8:04:E0:74:36:F1:7E:E8:A3:71:DF:13:D9 Authority key identifier: 8B:E4:A7:01:F2:92:4B:4B:FB:8A:98:3A:1B:0B:D5:C8:86:3B:F3:FD Certificate issuer: /CN=8BE4A701F2924B4BFB8A983A1B0BD5C8863BF3FD Certificate serial: 3758FC5AF8148C383732F648637D1605CD4DF176 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8BE4A701F2924B4BFB8A983A1B0BD5C8863BF3FD.cer Subject info access: rsync://repo-rpki.idnic.net/repo/d06347f4-ea26-4d4c-a568-1d863360e421/0/8BE4A701F2924B4BFB8A983A1B0BD5C8863BF3FD.mft Manifest number: 04F5 Signing time: Wed 06 Aug 2025 23:22:08 +0000 Manifest this update: Wed 06 Aug 2025 23:17:08 +0000 Manifest next update: Sun 10 Aug 2025 02:11:08 +0000 Files and hashes: 1: 3130332e3131352e3136342e302f32342d3234203d3e20313338313331.roa (hash: PfYYptDyBdUl4aWzZCjnvFHr6qQWRMjgNV762Lfvv/Q=) 2: 3130332e3132312e3132322e302f32342d3234203d3e20313338313331.roa (hash: 9ysblGZ5nRnpD9uRTt/CttmsXFnbP66QhYFS5MHljXI=) 3: 8BE4A701F2924B4BFB8A983A1B0BD5C8863BF3FD.crl (hash: SVLUaDZHNZJ7f7+ADPIXhr9s79U0t9L3J9ooSTq75nI=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/d06347f4-ea26-4d4c-a568-1d863360e421/0/8BE4A701F2924B4BFB8A983A1B0BD5C8863BF3FD.crl rsync://repo-rpki.idnic.net/repo/d06347f4-ea26-4d4c-a568-1d863360e421/0/8BE4A701F2924B4BFB8A983A1B0BD5C8863BF3FD.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8BE4A701F2924B4BFB8A983A1B0BD5C8863BF3FD.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 10 Aug 2025 02:11:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 37:58:fc:5a:f8:14:8c:38:37:32:f6:48:63:7d:16:05:cd:4d:f1:76 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8BE4A701F2924B4BFB8A983A1B0BD5C8863BF3FD Validity Not Before: Aug 6 23:17:08 2025 GMT Not After : Aug 10 02:11:08 2025 GMT Subject: CN=11A781E2BAB949B804E07436F17EE8A371DF13D9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:01:15:f0:2e:dd:b8:1a:fe:fc:fe:9f:26:91: c2:b9:eb:eb:16:17:35:9d:7e:25:f7:2f:4b:5e:f4: d6:a4:0e:73:00:fa:de:dc:08:94:43:f0:a1:ec:7b: 1c:08:17:be:18:03:97:d2:78:e5:96:10:20:3b:b5: cf:23:16:ad:c6:93:86:7d:48:21:da:63:00:5a:e4: 46:8a:24:4d:32:1b:35:83:33:ed:64:27:48:87:bd: 7a:d7:79:bd:5e:85:94:af:e2:3f:1c:db:0f:38:2e: f7:26:46:5a:d7:2e:20:42:c7:16:ba:d2:c3:f6:ab: d4:fa:b9:1e:1f:ac:82:1f:c8:cc:51:9f:0a:9a:e9: b4:c0:7b:0b:60:56:41:ee:fb:a1:6f:e4:43:10:33: b5:56:82:0e:e0:ba:ee:9d:3e:b7:47:82:2f:e7:04: 65:27:d3:25:ec:60:40:21:1e:dd:39:3e:12:56:25: 72:46:19:cc:3e:48:85:14:0b:bb:13:33:c6:6c:f2: 4c:ae:01:5b:f2:21:9b:47:2d:2b:6c:a7:94:4b:7c: b7:da:e0:7c:2f:85:59:be:e7:22:ee:7a:8f:f9:7d: 18:f0:98:94:de:ab:50:19:5b:fd:13:d3:8e:22:f5: 0f:13:55:83:9b:f4:b5:39:a3:b2:71:8c:13:33:0e: d8:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:A7:81:E2:BA:B9:49:B8:04:E0:74:36:F1:7E:E8:A3:71:DF:13:D9 X509v3 Authority Key Identifier: keyid:8B:E4:A7:01:F2:92:4B:4B:FB:8A:98:3A:1B:0B:D5:C8:86:3B:F3:FD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/d06347f4-ea26-4d4c-a568-1d863360e421/0/8BE4A701F2924B4BFB8A983A1B0BD5C8863BF3FD.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8BE4A701F2924B4BFB8A983A1B0BD5C8863BF3FD.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d06347f4-ea26-4d4c-a568-1d863360e421/0/8BE4A701F2924B4BFB8A983A1B0BD5C8863BF3FD.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9b:ff:c5:b4:ca:3b:18:96:59:07:17:7f:ac:95:92:87:3d:96: d0:7c:2c:38:65:89:5b:93:bc:dd:65:a5:d6:f8:5f:7f:68:74: a4:22:1a:12:3e:2e:11:37:36:73:a9:46:45:e6:38:74:26:9f: 09:b0:4c:2c:b6:42:e5:48:ce:1b:2a:50:22:c0:89:a6:00:14: 11:50:fa:0a:45:84:e8:34:b8:4d:23:13:00:6d:54:52:9d:c2: df:d7:80:cc:2e:32:7a:2d:75:6b:9c:47:3b:3f:9e:9f:eb:2b: df:3a:e6:83:f5:f9:6d:e4:91:22:49:b6:5b:cd:9f:40:aa:54: ae:d2:0c:5a:bc:96:b4:15:e5:19:e4:77:3e:db:02:b3:4c:bc: be:4a:0d:73:d4:2f:29:41:8e:e3:da:98:a8:6c:6c:62:e3:9e: cd:6c:68:f2:4d:a3:e1:5a:c4:08:90:67:83:5a:e7:64:f4:f7: fb:1c:83:9f:01:84:d7:2b:27:4a:a8:be:40:61:97:70:fa:49: dd:fb:e1:a6:36:7b:06:9a:c7:18:40:f1:8f:29:d2:9a:dc:fd: 4c:83:00:c7:ab:31:38:ea:0c:93:02:89:24:38:58:79:5d:21: 1b:20:05:6f:ad:10:3c:80:13:87:02:8c:7c:2f:ec:0c:ff:0f: b8:00:56:ba -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUN1j8WvgUjDg3MvZIY30WBc1N8XYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEJFNEE3MDFGMjkyNEI0QkZCOEE5ODNBMUIwQkQ1Qzg4 NjNCRjNGRDAeFw0yNTA4MDYyMzE3MDhaFw0yNTA4MTAwMjExMDhaMDMxMTAvBgNV BAMTKDExQTc4MUUyQkFCOTQ5QjgwNEUwNzQzNkYxN0VFOEEzNzFERjEzRDkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDIARXwLt24Gv78/p8mkcK56+sW FzWdfiX3L0te9NakDnMA+t7cCJRD8KHsexwIF74YA5fSeOWWECA7tc8jFq3Gk4Z9 SCHaYwBa5EaKJE0yGzWDM+1kJ0iHvXrXeb1ehZSv4j8c2w84LvcmRlrXLiBCxxa6 0sP2q9T6uR4frIIfyMxRnwqa6bTAewtgVkHu+6Fv5EMQM7VWgg7guu6dPrdHgi/n BGUn0yXsYEAhHt05PhJWJXJGGcw+SIUUC7sTM8Zs8kyuAVvyIZtHLStsp5RLfLfa 4HwvhVm+5yLueo/5fRjwmJTeq1AZW/0T044i9Q8TVYOb9LU5o7JxjBMzDti9AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUEaeB4rq5SbgE4HQ28X7oo3HfE9kwHwYDVR0j BBgwFoAUi+SnAfKSS0v7ipg6GwvVyIY78/0wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k MDYzNDdmNC1lYTI2LTRkNGMtYTU2OC0xZDg2MzM2MGU0MjEvMC84QkU0QTcwMUYy OTI0QjRCRkI4QTk4M0ExQjBCRDVDODg2M0JGM0ZELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOEJFNEE3MDFGMjkyNEI0QkZCOEE5ODNBMUIwQkQ1Qzg4NjNC RjNGRC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZDA2MzQ3ZjQtZWEyNi00ZDRjLWE1 NjgtMWQ4NjMzNjBlNDIxLzAvOEJFNEE3MDFGMjkyNEI0QkZCOEE5ODNBMUIwQkQ1 Qzg4NjNCRjNGRC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJv/xbTKOxiWWQcXf6yVkoc9ltB8LDhliVuT vN1lpdb4X39odKQiGhI+LhE3NnOpRkXmOHQmnwmwTCy2QuVIzhsqUCLAiaYAFBFQ +gpFhOg0uE0jEwBtVFKdwt/XgMwuMnotdWucRzs/np/rK9865oP1+W3kkSJJtlvN n0CqVK7SDFq8lrQV5Rnkdz7bArNMvL5KDXPULylBjuPamKhsbGLjns1saPJNo+Fa xAiQZ4Na52T09/scg58BhNcrJ0qovkBhl3D6Sd374aY2ewaaxxhA8Y8p0prc/UyD AMerMTjqDJMCiSQ4WHldIRsgBW+tEDyAE4cCjHwv7Az/D7gAVro= -----END CERTIFICATE-----Generated at Thu Aug 7 11:06:45 2025 by rpki-client