$ rpki-client -vvf repo-rpki.idnic.net/repo/ecdae0a5-b4f6-4e08-8beb-63ebe0853df3/0/B8A9E45E7E2DEA6624140C03DE025D16B91CB9DC.mft File: B8A9E45E7E2DEA6624140C03DE025D16B91CB9DC.mft (raw, json) Hash identifier: XqVtGBL/fitnOxQAHbJpO1bg9R4odcr4OqQhNOew+yg= Subject key identifier: A6:A4:72:DF:C6:65:DC:4E:CA:35:B5:42:9A:81:3A:AA:32:7E:E3:46 Authority key identifier: B8:A9:E4:5E:7E:2D:EA:66:24:14:0C:03:DE:02:5D:16:B9:1C:B9:DC Certificate issuer: /CN=B8A9E45E7E2DEA6624140C03DE025D16B91CB9DC Certificate serial: 7D76E2C8DCC92E6918337994A57C2CE12C49D170 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B8A9E45E7E2DEA6624140C03DE025D16B91CB9DC.cer Subject info access: rsync://repo-rpki.idnic.net/repo/ecdae0a5-b4f6-4e08-8beb-63ebe0853df3/0/B8A9E45E7E2DEA6624140C03DE025D16B91CB9DC.mft Manifest number: 0159 Signing time: Thu 07 Aug 2025 09:52:13 +0000 Manifest this update: Thu 07 Aug 2025 09:47:13 +0000 Manifest next update: Sun 10 Aug 2025 19:25:13 +0000 Files and hashes: 1: B8A9E45E7E2DEA6624140C03DE025D16B91CB9DC.crl (hash: T5SlQY4pxOX4ga+pEVOqbgB11xWOSI+XNIyCM2nhleo=) 2: 3130332e34302e39322e302f32332d3233203d3e203633353034.roa (hash: SFyP6dQXcZeCfICHfcQqBzkquUF0rSVZjhOo/oTB3lM=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/ecdae0a5-b4f6-4e08-8beb-63ebe0853df3/0/B8A9E45E7E2DEA6624140C03DE025D16B91CB9DC.crl rsync://repo-rpki.idnic.net/repo/ecdae0a5-b4f6-4e08-8beb-63ebe0853df3/0/B8A9E45E7E2DEA6624140C03DE025D16B91CB9DC.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B8A9E45E7E2DEA6624140C03DE025D16B91CB9DC.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 10 Aug 2025 19:25:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7d:76:e2:c8:dc:c9:2e:69:18:33:79:94:a5:7c:2c:e1:2c:49:d1:70 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B8A9E45E7E2DEA6624140C03DE025D16B91CB9DC Validity Not Before: Aug 7 09:47:13 2025 GMT Not After : Aug 10 19:25:13 2025 GMT Subject: CN=A6A472DFC665DC4ECA35B5429A813AAA327EE346 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:12:b5:11:cb:76:42:01:b7:18:e0:ea:64:fd: 03:17:0b:2b:9e:9c:02:d5:8d:ff:d4:05:81:00:89: 21:cd:d6:be:26:b4:4d:21:cd:20:ee:00:bf:33:e5: 64:6d:63:49:fe:09:e9:9a:27:6a:5b:a6:a4:e9:64: 40:16:da:23:cd:43:3b:2c:9d:88:e8:df:5d:95:ed: 2f:49:86:31:92:e0:69:01:f5:40:a4:45:a9:7d:0a: f6:68:b8:f1:30:f7:1a:8c:45:da:4d:e8:06:f5:35: e7:aa:de:56:5e:9f:6b:4b:26:3c:3c:74:4f:41:4c: af:08:05:49:eb:cb:cb:fd:2e:39:0b:f9:28:3a:82: 02:79:c8:d5:7e:bf:76:b5:49:23:01:a5:88:d4:c1: 57:56:05:f2:32:30:72:a4:39:e5:7d:3c:f3:98:df: 74:56:12:fe:3d:0c:cc:e7:5f:bf:ee:24:f4:bb:c7: 2e:59:b4:7e:51:f2:b4:10:96:f3:a3:c6:23:2b:6a: 5e:44:23:05:32:1a:7b:40:10:5b:74:d9:db:13:4c: 0b:48:77:d3:15:2a:a2:d4:30:fa:cf:fd:78:14:a9: 14:4e:b5:8b:79:75:0a:2e:bd:f4:89:43:96:72:79: aa:8d:60:8e:c4:0e:19:1c:01:4f:e9:3a:c7:94:9a: ae:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A6:A4:72:DF:C6:65:DC:4E:CA:35:B5:42:9A:81:3A:AA:32:7E:E3:46 X509v3 Authority Key Identifier: keyid:B8:A9:E4:5E:7E:2D:EA:66:24:14:0C:03:DE:02:5D:16:B9:1C:B9:DC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/ecdae0a5-b4f6-4e08-8beb-63ebe0853df3/0/B8A9E45E7E2DEA6624140C03DE025D16B91CB9DC.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B8A9E45E7E2DEA6624140C03DE025D16B91CB9DC.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ecdae0a5-b4f6-4e08-8beb-63ebe0853df3/0/B8A9E45E7E2DEA6624140C03DE025D16B91CB9DC.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5c:b3:5a:74:29:ea:b2:32:86:3f:6b:c2:1e:a0:27:c2:15:3d: 7b:8f:67:0f:ae:e4:0b:53:5b:83:ad:34:2b:ad:4d:fe:34:e8: aa:27:a1:80:2b:e3:d8:4b:fc:4f:97:23:74:12:7c:03:98:55: d3:2e:d3:b4:64:be:3a:80:bd:3b:e7:63:b5:c8:04:d8:93:45: 8e:da:5e:0f:8f:58:78:5c:e3:8a:cc:54:7c:77:84:3c:36:0b: 3f:e0:16:bb:8a:91:d2:6d:b8:7c:87:5f:f7:d6:ed:ce:0a:01: a5:76:7a:26:41:4f:0d:e3:f9:50:69:a1:f9:37:44:63:c8:41: d0:9d:37:92:cc:48:84:d2:28:e8:b3:32:f5:cd:5b:fd:24:79: 3a:50:c4:2f:29:34:f5:9e:b8:e8:57:1f:3e:cb:30:d8:a2:4d: 0e:df:11:78:11:a0:8a:63:4f:52:e4:31:91:6a:56:9b:8b:d4: aa:e8:14:34:f7:0b:13:08:19:75:9f:46:e8:53:d5:79:09:71: a2:b2:3e:7c:2d:b5:dd:57:69:dd:80:11:98:f9:e3:1f:c0:ba: ef:2e:6f:25:bd:c0:e6:4f:eb:f7:9f:a1:fc:c7:30:87:d2:04: e9:1e:bd:8e:0c:a4:3b:ba:ae:ea:fd:7d:f9:20:57:1f:01:6c: 1b:2d:ff:57 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUfXbiyNzJLmkYM3mUpXws4SxJ0XAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjhBOUU0NUU3RTJERUE2NjI0MTQwQzAzREUwMjVEMTZC OTFDQjlEQzAeFw0yNTA4MDcwOTQ3MTNaFw0yNTA4MTAxOTI1MTNaMDMxMTAvBgNV BAMTKEE2QTQ3MkRGQzY2NURDNEVDQTM1QjU0MjlBODEzQUFBMzI3RUUzNDYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCbErURy3ZCAbcY4Opk/QMXCyue nALVjf/UBYEAiSHN1r4mtE0hzSDuAL8z5WRtY0n+CemaJ2pbpqTpZEAW2iPNQzss nYjo312V7S9JhjGS4GkB9UCkRal9CvZouPEw9xqMRdpN6Ab1Neeq3lZen2tLJjw8 dE9BTK8IBUnry8v9LjkL+Sg6ggJ5yNV+v3a1SSMBpYjUwVdWBfIyMHKkOeV9PPOY 33RWEv49DMznX7/uJPS7xy5ZtH5R8rQQlvOjxiMral5EIwUyGntAEFt02dsTTAtI d9MVKqLUMPrP/XgUqRROtYt5dQouvfSJQ5ZyeaqNYI7EDhkcAU/pOseUmq5XAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUpqRy38Zl3E7KNbVCmoE6qjJ+40YwHwYDVR0j BBgwFoAUuKnkXn4t6mYkFAwD3gJdFrkcudwwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l Y2RhZTBhNS1iNGY2LTRlMDgtOGJlYi02M2ViZTA4NTNkZjMvMC9COEE5RTQ1RTdF MkRFQTY2MjQxNDBDMDNERTAyNUQxNkI5MUNCOURDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQjhBOUU0NUU3RTJERUE2NjI0MTQwQzAzREUwMjVEMTZCOTFD QjlEQy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZWNkYWUwYTUtYjRmNi00ZTA4LThi ZWItNjNlYmUwODUzZGYzLzAvQjhBOUU0NUU3RTJERUE2NjI0MTQwQzAzREUwMjVE MTZCOTFDQjlEQy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFyzWnQp6rIyhj9rwh6gJ8IVPXuPZw+u5AtT W4OtNCutTf406KonoYAr49hL/E+XI3QSfAOYVdMu07RkvjqAvTvnY7XIBNiTRY7a Xg+PWHhc44rMVHx3hDw2Cz/gFruKkdJtuHyHX/fW7c4KAaV2eiZBTw3j+VBpofk3 RGPIQdCdN5LMSITSKOizMvXNW/0keTpQxC8pNPWeuOhXHz7LMNiiTQ7fEXgRoIpj T1LkMZFqVpuL1KroFDT3CxMIGXWfRuhT1XkJcaKyPnwttd1Xad2AEZj54x/Auu8u byW9wOZP6/efofzHMIfSBOkevY4MpDu6rur9ffkgVx8BbBst/1c= -----END CERTIFICATE-----Generated at Sat Aug 9 01:23:53 2025 by rpki-client