$ rpki-client -vvf repo-rpki.idnic.net/repo/fa674668-0613-4a64-9323-547636b7d8b0/0/B8B47DE574D44D4CC9A3E4E2E1F7AC9CB0AEA0B5.mft File: B8B47DE574D44D4CC9A3E4E2E1F7AC9CB0AEA0B5.mft (raw, json) Hash identifier: rU6u0OsM7nQVCD8OO4VscX1p1cpascLk0qoss5D3FSM= Subject key identifier: E8:AF:B9:A2:04:91:77:E9:B5:63:8C:98:F3:47:5A:BF:6F:B7:05:46 Authority key identifier: B8:B4:7D:E5:74:D4:4D:4C:C9:A3:E4:E2:E1:F7:AC:9C:B0:AE:A0:B5 Certificate issuer: /CN=B8B47DE574D44D4CC9A3E4E2E1F7AC9CB0AEA0B5 Certificate serial: 6E4932EB45C36F48EA0076EDEC30AD31CF4D1A7C Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B8B47DE574D44D4CC9A3E4E2E1F7AC9CB0AEA0B5.cer Subject info access: rsync://repo-rpki.idnic.net/repo/fa674668-0613-4a64-9323-547636b7d8b0/0/B8B47DE574D44D4CC9A3E4E2E1F7AC9CB0AEA0B5.mft Manifest number: 0182 Signing time: Wed 06 Aug 2025 05:22:13 +0000 Manifest this update: Wed 06 Aug 2025 05:17:13 +0000 Manifest next update: Sat 09 Aug 2025 15:13:13 +0000 Files and hashes: 1: 3130332e3131372e35362e302f32332d3234203d3e20313336303532.roa (hash: BAM070FvjGLMXJWAH9pbtiKqBzEQlvrgCYvemvA5CUw=) 2: B8B47DE574D44D4CC9A3E4E2E1F7AC9CB0AEA0B5.crl (hash: x1UYKTTFLx317a/rLOcA12KF6QwdN23QnhetG9jyt3U=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/fa674668-0613-4a64-9323-547636b7d8b0/0/B8B47DE574D44D4CC9A3E4E2E1F7AC9CB0AEA0B5.crl rsync://repo-rpki.idnic.net/repo/fa674668-0613-4a64-9323-547636b7d8b0/0/B8B47DE574D44D4CC9A3E4E2E1F7AC9CB0AEA0B5.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B8B47DE574D44D4CC9A3E4E2E1F7AC9CB0AEA0B5.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 09 Aug 2025 15:13:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6e:49:32:eb:45:c3:6f:48:ea:00:76:ed:ec:30:ad:31:cf:4d:1a:7c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B8B47DE574D44D4CC9A3E4E2E1F7AC9CB0AEA0B5 Validity Not Before: Aug 6 05:17:13 2025 GMT Not After : Aug 9 15:13:13 2025 GMT Subject: CN=E8AFB9A2049177E9B5638C98F3475ABF6FB70546 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:d5:3a:ec:12:95:c6:7a:71:6f:b0:4e:9c:05: aa:f5:19:a7:a5:0e:80:9e:f9:2b:ad:6a:9b:56:36: 10:e2:60:cc:4b:0f:3f:21:82:8d:90:9f:16:f8:c6: be:4c:81:b7:a7:00:1c:4a:d8:b3:a8:3b:f4:d6:70: 71:b3:a5:8b:a9:83:98:83:31:8e:85:0f:b7:ab:92: f9:6f:41:4f:36:8c:8f:eb:35:9b:8b:63:2c:d6:6e: 61:42:1f:d5:0e:88:f4:13:8a:fc:48:49:ba:b3:34: 5e:a0:6a:87:0c:3b:88:61:b0:70:b3:28:bf:0a:29: e9:77:20:a8:c9:93:9d:a4:d2:62:49:1c:46:1d:48: 48:e2:37:95:21:cc:60:a9:66:9c:77:26:dc:23:0b: 72:ce:8c:56:5c:54:03:b4:da:c4:10:00:fe:ed:cb: 7b:d3:f4:f2:60:68:99:9d:5a:c1:78:1b:c8:58:e6: 73:4f:98:6e:11:c8:d2:de:35:d1:df:1d:3d:42:da: 2c:63:92:43:96:34:c1:7f:bf:ed:94:c9:a2:40:53: 09:c6:aa:7d:d3:ed:e4:ba:57:41:e6:61:dc:02:5b: 57:a5:41:97:ef:25:f5:d5:90:e2:a3:ce:b1:69:4d: 02:9c:39:c1:d1:e7:0f:fd:c3:8c:9e:2f:31:ce:23: dc:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E8:AF:B9:A2:04:91:77:E9:B5:63:8C:98:F3:47:5A:BF:6F:B7:05:46 X509v3 Authority Key Identifier: keyid:B8:B4:7D:E5:74:D4:4D:4C:C9:A3:E4:E2:E1:F7:AC:9C:B0:AE:A0:B5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/fa674668-0613-4a64-9323-547636b7d8b0/0/B8B47DE574D44D4CC9A3E4E2E1F7AC9CB0AEA0B5.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B8B47DE574D44D4CC9A3E4E2E1F7AC9CB0AEA0B5.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/fa674668-0613-4a64-9323-547636b7d8b0/0/B8B47DE574D44D4CC9A3E4E2E1F7AC9CB0AEA0B5.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a5:28:0e:5d:77:9e:e8:7b:9f:27:30:1a:54:8b:69:14:8a:18: 8e:b6:4c:2e:d5:81:3a:32:dc:ab:d4:fd:fe:2c:93:2d:60:b3: c2:db:fe:16:fe:e4:75:9b:c9:ef:70:f2:f9:05:6a:0b:31:39: 24:de:62:a1:c8:19:b5:a6:d8:04:32:e0:f9:40:14:bd:a6:92: 20:3c:8c:5f:38:63:11:66:ba:33:10:87:1b:da:49:0c:3b:64: 8a:be:1c:a1:bf:ef:11:1c:c4:62:9d:99:7f:8b:62:e1:97:4f: 97:df:ff:9f:43:01:25:7e:f0:cb:c1:a5:94:0a:9e:66:9c:f7: 04:ce:21:71:ef:29:a9:dd:c2:0d:ad:5c:e7:5f:d6:2b:a9:af: 7c:d7:6b:e0:7d:ea:42:a0:c7:24:0a:55:c2:2e:11:48:fa:84: 0e:3e:81:09:7f:8c:28:5a:78:d5:de:87:7b:d4:44:a6:e2:77: c0:2d:25:cf:46:aa:43:9a:f0:7b:34:6c:21:29:da:1c:92:cd: 74:79:43:ca:4c:25:b5:e9:c3:32:5f:c6:b6:b9:cf:d3:22:37: e2:34:be:ec:34:28:7a:53:ac:7e:4c:cc:2d:79:3d:13:2c:be: f0:4c:be:1f:62:5e:3a:34:55:11:4a:33:bb:50:9f:0e:3f:fe: 59:5d:6e:67 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUbkky60XDb0jqAHbt7DCtMc9NGnwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjhCNDdERTU3NEQ0NEQ0Q0M5QTNFNEUyRTFGN0FDOUNC MEFFQTBCNTAeFw0yNTA4MDYwNTE3MTNaFw0yNTA4MDkxNTEzMTNaMDMxMTAvBgNV BAMTKEU4QUZCOUEyMDQ5MTc3RTlCNTYzOEM5OEYzNDc1QUJGNkZCNzA1NDYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+1TrsEpXGenFvsE6cBar1Gael DoCe+SutaptWNhDiYMxLDz8hgo2Qnxb4xr5MgbenABxK2LOoO/TWcHGzpYupg5iD MY6FD7erkvlvQU82jI/rNZuLYyzWbmFCH9UOiPQTivxISbqzNF6gaocMO4hhsHCz KL8KKel3IKjJk52k0mJJHEYdSEjiN5UhzGCpZpx3JtwjC3LOjFZcVAO02sQQAP7t y3vT9PJgaJmdWsF4G8hY5nNPmG4RyNLeNdHfHT1C2ixjkkOWNMF/v+2UyaJAUwnG qn3T7eS6V0HmYdwCW1elQZfvJfXVkOKjzrFpTQKcOcHR5w/9w4yeLzHOI9zrAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU6K+5ogSRd+m1Y4yY80dav2+3BUYwHwYDVR0j BBgwFoAUuLR95XTUTUzJo+Ti4fesnLCuoLUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m YTY3NDY2OC0wNjEzLTRhNjQtOTMyMy01NDc2MzZiN2Q4YjAvMC9COEI0N0RFNTc0 RDQ0RDRDQzlBM0U0RTJFMUY3QUM5Q0IwQUVBMEI1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQjhCNDdERTU3NEQ0NEQ0Q0M5QTNFNEUyRTFGN0FDOUNCMEFF QTBCNS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZmE2NzQ2NjgtMDYxMy00YTY0LTkz MjMtNTQ3NjM2YjdkOGIwLzAvQjhCNDdERTU3NEQ0NEQ0Q0M5QTNFNEUyRTFGN0FD OUNCMEFFQTBCNS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKUoDl13nuh7nycwGlSLaRSKGI62TC7VgToy 3KvU/f4sky1gs8Lb/hb+5HWbye9w8vkFagsxOSTeYqHIGbWm2AQy4PlAFL2mkiA8 jF84YxFmujMQhxvaSQw7ZIq+HKG/7xEcxGKdmX+LYuGXT5ff/59DASV+8MvBpZQK nmac9wTOIXHvKandwg2tXOdf1iupr3zXa+B96kKgxyQKVcIuEUj6hA4+gQl/jCha eNXeh3vURKbid8AtJc9GqkOa8Hs0bCEp2hySzXR5Q8pMJbXpwzJfxra5z9MiN+I0 vuw0KHpTrH5MzC15PRMsvvBMvh9iXjo0VRFKM7tQnw4//lldbmc= -----END CERTIFICATE-----Generated at Thu Aug 7 11:26:18 2025 by rpki-client