$ rpki-client -vvf repo-rpki.idnic.net/repo/fbb5fa4a-bea6-464f-b409-11d9a3761a6c/1/8D4158039A86C34D5D36A83DDC40C959EDA21342.mft File: 8D4158039A86C34D5D36A83DDC40C959EDA21342.mft (raw, json) Hash identifier: y89IOkXz/pQr5M88CuVbVQBvnXsCKQ3sld/DOHWV9i0= Subject key identifier: 60:00:9F:FA:68:8C:E2:83:0C:10:06:E3:32:60:BF:2F:4E:83:2E:24 Authority key identifier: 8D:41:58:03:9A:86:C3:4D:5D:36:A8:3D:DC:40:C9:59:ED:A2:13:42 Certificate issuer: /CN=8D4158039A86C34D5D36A83DDC40C959EDA21342 Certificate serial: 06BBDEDDB83126548D6979F20A1CCE6B4A7B7B40 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8D4158039A86C34D5D36A83DDC40C959EDA21342.cer Subject info access: rsync://repo-rpki.idnic.net/repo/fbb5fa4a-bea6-464f-b409-11d9a3761a6c/1/8D4158039A86C34D5D36A83DDC40C959EDA21342.mft Manifest number: B2 Signing time: Wed 06 Aug 2025 12:21:06 +0000 Manifest this update: Wed 06 Aug 2025 12:16:06 +0000 Manifest next update: Sat 09 Aug 2025 17:07:06 +0000 Files and hashes: 1: 8D4158039A86C34D5D36A83DDC40C959EDA21342.crl (hash: QrH5WzcCvCGVPnXdA28FVwdEDDgSI2YLuVBOZFRYQW8=) 2: 323030313a6466333a643363303a3a2f34382d3438203d3e20313532373930.roa (hash: XrGI552jWV7sNKcYT4/cR05JGNQdxhyBqphUE36lIJ0=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/fbb5fa4a-bea6-464f-b409-11d9a3761a6c/1/8D4158039A86C34D5D36A83DDC40C959EDA21342.crl rsync://repo-rpki.idnic.net/repo/fbb5fa4a-bea6-464f-b409-11d9a3761a6c/1/8D4158039A86C34D5D36A83DDC40C959EDA21342.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8D4158039A86C34D5D36A83DDC40C959EDA21342.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 09 Aug 2025 17:07:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 06:bb:de:dd:b8:31:26:54:8d:69:79:f2:0a:1c:ce:6b:4a:7b:7b:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8D4158039A86C34D5D36A83DDC40C959EDA21342 Validity Not Before: Aug 6 12:16:06 2025 GMT Not After : Aug 9 17:07:06 2025 GMT Subject: CN=60009FFA688CE2830C1006E33260BF2F4E832E24 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:b1:b8:43:41:7b:c1:0c:2a:97:b2:95:24:4e: 91:b1:3f:c6:da:8b:6d:a8:1f:f2:8f:0a:be:6a:b9: 8d:0e:a8:c6:08:31:3e:85:dd:a9:d6:9a:b7:ca:ac: a9:4b:2d:3c:58:25:00:1e:d6:72:f4:39:5f:47:3c: 83:d2:41:95:9a:e6:c9:ec:78:c6:02:41:5a:b3:d2: c8:2a:2b:71:c7:65:80:1a:8a:2a:1a:80:1b:25:f7: a3:5a:a5:bf:8e:a2:1f:f0:e2:5c:b7:a5:5c:00:6b: a8:19:f8:60:6d:b5:c6:a4:66:ce:c4:9c:c0:51:c9: 9c:8d:f5:95:df:af:b9:7c:22:72:0a:42:00:f9:a0: d3:1e:7a:e9:6b:25:49:18:c1:da:a7:79:a8:a8:8c: 53:2f:ed:6c:46:50:df:06:76:7d:16:ce:99:bc:fe: 76:2d:73:c8:d9:28:24:c8:b2:19:00:10:e7:a5:ee: fd:ec:fd:1a:e6:94:01:68:d1:83:e6:3e:c9:ed:4e: 20:a4:db:ce:2f:bc:67:d3:88:b8:2b:ad:1b:1d:4a: 0c:59:98:e0:a8:e8:72:25:88:b1:35:21:e0:42:a0: 54:f7:7f:95:56:20:e8:50:8a:98:0a:23:6a:69:a4: d8:b2:fa:c7:f4:04:0d:7c:df:9c:13:88:4c:a8:df: 3e:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 60:00:9F:FA:68:8C:E2:83:0C:10:06:E3:32:60:BF:2F:4E:83:2E:24 X509v3 Authority Key Identifier: keyid:8D:41:58:03:9A:86:C3:4D:5D:36:A8:3D:DC:40:C9:59:ED:A2:13:42 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/fbb5fa4a-bea6-464f-b409-11d9a3761a6c/1/8D4158039A86C34D5D36A83DDC40C959EDA21342.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8D4158039A86C34D5D36A83DDC40C959EDA21342.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/fbb5fa4a-bea6-464f-b409-11d9a3761a6c/1/8D4158039A86C34D5D36A83DDC40C959EDA21342.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption d3:19:53:e5:9e:20:7a:b5:05:17:3f:2c:7b:d1:d0:d2:76:3f: c1:56:86:4a:01:a2:ae:c1:5b:e9:17:af:25:11:86:b5:13:ed: 1d:f3:0e:ab:cc:8d:58:6f:cb:4c:30:a2:b6:58:43:b1:ab:6d: 11:3f:87:d0:51:25:ea:78:fe:f6:5b:a6:3b:72:26:df:94:60: 42:59:16:a2:98:51:db:be:f1:6d:8e:87:11:f1:fd:8d:fc:f6: 47:32:c1:ae:d0:ed:ec:39:19:55:c4:48:7d:1e:a3:97:f1:0c: b9:18:7a:a7:53:b1:3e:f1:ea:88:22:f4:03:67:48:12:d3:d8: 64:c6:55:87:45:37:08:2f:c0:fb:d5:eb:ad:0c:73:8c:d1:d6: 3b:9e:4f:41:1f:8b:36:0c:63:d6:cf:97:8c:48:b4:70:58:85: fb:64:f1:18:f8:1a:43:f6:f5:08:76:d6:11:18:e9:a3:8c:a8: 25:44:cd:94:2c:90:ed:be:1d:a1:5e:19:27:91:ca:f5:f2:b2: c1:13:17:16:c7:6a:4f:df:72:d3:b4:4e:0d:8c:1e:aa:a4:e6: 89:1f:28:64:23:59:b5:ad:55:cd:4a:12:10:6b:d9:7f:b8:b5: b3:10:21:73:bd:1d:1b:2a:c7:45:db:b9:92:d3:4d:13:aa:45: a4:81:4c:50 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUBrve3bgxJlSNaXnyChzOa0p7e0AwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEQ0MTU4MDM5QTg2QzM0RDVEMzZBODNEREM0MEM5NTlF REEyMTM0MjAeFw0yNTA4MDYxMjE2MDZaFw0yNTA4MDkxNzA3MDZaMDMxMTAvBgNV BAMTKDYwMDA5RkZBNjg4Q0UyODMwQzEwMDZFMzMyNjBCRjJGNEU4MzJFMjQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDKsbhDQXvBDCqXspUkTpGxP8ba i22oH/KPCr5quY0OqMYIMT6F3anWmrfKrKlLLTxYJQAe1nL0OV9HPIPSQZWa5sns eMYCQVqz0sgqK3HHZYAaiioagBsl96Napb+Ooh/w4ly3pVwAa6gZ+GBttcakZs7E nMBRyZyN9ZXfr7l8InIKQgD5oNMeeulrJUkYwdqneaiojFMv7WxGUN8Gdn0Wzpm8 /nYtc8jZKCTIshkAEOel7v3s/RrmlAFo0YPmPsntTiCk284vvGfTiLgrrRsdSgxZ mOCo6HIliLE1IeBCoFT3f5VWIOhQipgKI2pppNiy+sf0BA1835wTiEyo3z6HAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUYACf+miM4oMMEAbjMmC/L06DLiQwHwYDVR0j BBgwFoAUjUFYA5qGw01dNqg93EDJWe2iE0IwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m YmI1ZmE0YS1iZWE2LTQ2NGYtYjQwOS0xMWQ5YTM3NjFhNmMvMS84RDQxNTgwMzlB ODZDMzRENUQzNkE4M0REQzQwQzk1OUVEQTIxMzQyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOEQ0MTU4MDM5QTg2QzM0RDVEMzZBODNEREM0MEM5NTlFREEy MTM0Mi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZmJiNWZhNGEtYmVhNi00NjRmLWI0 MDktMTFkOWEzNzYxYTZjLzEvOEQ0MTU4MDM5QTg2QzM0RDVEMzZBODNEREM0MEM5 NTlFREEyMTM0Mi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBANMZU+WeIHq1BRc/LHvR0NJ2P8FWhkoBoq7B W+kXryURhrUT7R3zDqvMjVhvy0wworZYQ7GrbRE/h9BRJep4/vZbpjtyJt+UYEJZ FqKYUdu+8W2OhxHx/Y389kcywa7Q7ew5GVXESH0eo5fxDLkYeqdTsT7x6ogi9ANn SBLT2GTGVYdFNwgvwPvV660Mc4zR1jueT0EfizYMY9bPl4xItHBYhftk8Rj4GkP2 9Qh21hEY6aOMqCVEzZQskO2+HaFeGSeRyvXyssETFxbHak/fctO0Tg2MHqqk5okf KGQjWbWtVc1KEhBr2X+4tbMQIXO9HRsqx0XbuZLTTROqRaSBTFA= -----END CERTIFICATE-----Generated at Thu Aug 7 01:02:10 2025 by rpki-client