$ rpki-client -vvf repo-rpki.idnic.net/repo/09a88897-c387-4735-acd8-1d1c53cde264/0/8B7E0099F26BEEE90826C9B0E424575BDE128403.mft File: 8B7E0099F26BEEE90826C9B0E424575BDE128403.mft (raw, json) Hash identifier: xHrHk/IRHXsId8rglz6o4ORAHCrq04OjvUDCYtZe8C0= Subject key identifier: C2:EA:4E:19:FE:5A:BD:52:59:F5:8E:66:7B:46:18:0F:50:58:2A:55 Authority key identifier: 8B:7E:00:99:F2:6B:EE:E9:08:26:C9:B0:E4:24:57:5B:DE:12:84:03 Certificate issuer: /CN=8B7E0099F26BEEE90826C9B0E424575BDE128403 Certificate serial: 04F607FE5F7541F3ADBFEF56038A5467C2085927 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8B7E0099F26BEEE90826C9B0E424575BDE128403.cer Subject info access: rsync://repo-rpki.idnic.net/repo/09a88897-c387-4735-acd8-1d1c53cde264/0/8B7E0099F26BEEE90826C9B0E424575BDE128403.mft Manifest number: 026E Signing time: Sun 29 Jun 2025 07:22:02 +0000 Manifest this update: Sun 29 Jun 2025 07:17:02 +0000 Manifest next update: Wed 02 Jul 2025 08:24:02 +0000 Files and hashes: 1: 3130332e3137392e38362e302f32332d3234203d3e20313430333839.roa (hash: rY4tz9/kQego7cZpv2afdmhIw5rIucEsOqMDCxyUCMk=) 2: 8B7E0099F26BEEE90826C9B0E424575BDE128403.crl (hash: 7rDzlZ88MhQDYCiYrLkAWI2C3fYr6TQAbYDUdfvkfrE=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/09a88897-c387-4735-acd8-1d1c53cde264/0/8B7E0099F26BEEE90826C9B0E424575BDE128403.crl rsync://repo-rpki.idnic.net/repo/09a88897-c387-4735-acd8-1d1c53cde264/0/8B7E0099F26BEEE90826C9B0E424575BDE128403.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8B7E0099F26BEEE90826C9B0E424575BDE128403.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 02 Jul 2025 08:24:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 04:f6:07:fe:5f:75:41:f3:ad:bf:ef:56:03:8a:54:67:c2:08:59:27 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8B7E0099F26BEEE90826C9B0E424575BDE128403 Validity Not Before: Jun 29 07:17:02 2025 GMT Not After : Jul 2 08:24:02 2025 GMT Subject: CN=C2EA4E19FE5ABD5259F58E667B46180F50582A55 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:10:70:ce:ed:07:e8:2e:f8:d5:2d:d9:3e:a2: df:53:fa:cf:a1:63:e0:0e:bf:54:70:cd:02:4c:e5: fe:c2:52:da:85:9f:05:d2:46:9f:d5:a7:f8:50:c2: ea:bc:13:5b:86:1f:86:e0:a0:d3:2d:73:1d:27:4d: 10:7d:8d:13:a5:a3:62:85:d0:2b:97:35:27:55:12: 1b:ee:ed:33:a1:6e:5e:a7:d6:ce:e4:85:f2:5e:cf: e9:95:4b:33:e1:5b:ca:a6:8a:d6:50:48:e5:48:14: 24:f9:86:7e:90:cf:1d:06:e1:99:13:6c:27:fc:32: 11:18:be:cd:4a:24:34:51:87:b5:44:41:a3:b2:9d: fa:c4:ce:0b:9b:8c:12:bc:66:8a:0c:8a:dc:7d:27: 02:b1:9d:02:27:f7:62:d8:d3:24:83:62:98:d5:1b: 52:25:e7:d0:79:cf:51:b0:a5:90:ed:1b:21:e5:27: eb:88:91:fe:87:fe:a6:0c:ec:72:3b:7b:7d:18:03: df:c1:ca:bd:fe:18:4f:c2:4e:12:e8:32:c2:de:3c: 3f:e1:4b:b3:4e:73:01:10:c2:45:73:e5:4a:56:61: 39:c7:fc:c5:ae:0d:49:96:2f:da:bc:df:eb:f6:28: 4c:e7:bd:6a:82:df:b5:be:08:67:ef:c0:c7:7b:dd: 22:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C2:EA:4E:19:FE:5A:BD:52:59:F5:8E:66:7B:46:18:0F:50:58:2A:55 X509v3 Authority Key Identifier: keyid:8B:7E:00:99:F2:6B:EE:E9:08:26:C9:B0:E4:24:57:5B:DE:12:84:03 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/09a88897-c387-4735-acd8-1d1c53cde264/0/8B7E0099F26BEEE90826C9B0E424575BDE128403.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8B7E0099F26BEEE90826C9B0E424575BDE128403.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/09a88897-c387-4735-acd8-1d1c53cde264/0/8B7E0099F26BEEE90826C9B0E424575BDE128403.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 22:73:cb:aa:25:8e:14:30:ba:85:cf:ec:96:9d:c5:1c:b7:e2: 46:d2:5a:0a:8e:c7:2e:63:a4:d6:db:5a:40:f6:b9:2f:6c:5f: bf:fb:23:db:74:80:49:2c:a2:4c:b0:51:1f:11:e9:8a:98:2e: d6:c8:bb:43:d3:a2:a9:1a:fa:a2:67:ea:a3:22:57:0b:9b:66: a3:59:80:30:77:4c:40:4d:8b:d0:59:fa:d4:62:2c:f8:44:a2: 0f:4d:25:cd:fa:fc:95:9d:62:50:83:fa:b0:a2:f0:54:bc:58: 51:d0:62:38:56:97:91:7d:99:75:64:f5:68:86:19:37:ff:11: 53:97:68:d4:ef:74:39:e0:d3:41:36:ba:8d:fe:16:a0:3c:ef: 55:e0:d6:eb:33:76:77:b7:77:a0:1a:d7:18:16:eb:43:2f:65: 0d:6d:fc:bd:3c:45:49:f1:4a:c7:06:29:ee:8f:61:02:f2:94: ba:4b:1a:11:65:d6:0d:38:04:15:5b:b0:ec:26:40:61:d1:33: 29:6a:d9:d6:9e:ad:c8:a8:65:37:ce:58:21:8e:e3:28:64:a9: 76:63:5d:4f:4d:8b:56:3a:74:de:14:ad:f6:da:5b:bf:68:aa: 46:41:53:6e:9f:63:f5:a1:df:a4:b8:7b:04:02:f2:23:a9:e2: a3:4c:7a:70 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUBPYH/l91QfOtv+9WA4pUZ8IIWScwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEI3RTAwOTlGMjZCRUVFOTA4MjZDOUIwRTQyNDU3NUJE RTEyODQwMzAeFw0yNTA2MjkwNzE3MDJaFw0yNTA3MDIwODI0MDJaMDMxMTAvBgNV BAMTKEMyRUE0RTE5RkU1QUJENTI1OUY1OEU2NjdCNDYxODBGNTA1ODJBNTUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCmEHDO7QfoLvjVLdk+ot9T+s+h Y+AOv1RwzQJM5f7CUtqFnwXSRp/Vp/hQwuq8E1uGH4bgoNMtcx0nTRB9jROlo2KF 0CuXNSdVEhvu7TOhbl6n1s7khfJez+mVSzPhW8qmitZQSOVIFCT5hn6Qzx0G4ZkT bCf8MhEYvs1KJDRRh7VEQaOynfrEzgubjBK8ZooMitx9JwKxnQIn92LY0ySDYpjV G1Il59B5z1GwpZDtGyHlJ+uIkf6H/qYM7HI7e30YA9/Byr3+GE/CThLoMsLePD/h S7NOcwEQwkVz5UpWYTnH/MWuDUmWL9q83+v2KEznvWqC37W+CGfvwMd73SIvAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUwupOGf5avVJZ9Y5me0YYD1BYKlUwHwYDVR0j BBgwFoAUi34AmfJr7ukIJsmw5CRXW94ShAMwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w OWE4ODg5Ny1jMzg3LTQ3MzUtYWNkOC0xZDFjNTNjZGUyNjQvMC84QjdFMDA5OUYy NkJFRUU5MDgyNkM5QjBFNDI0NTc1QkRFMTI4NDAzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOEI3RTAwOTlGMjZCRUVFOTA4MjZDOUIwRTQyNDU3NUJERTEy ODQwMy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMDlhODg4OTctYzM4Ny00NzM1LWFj ZDgtMWQxYzUzY2RlMjY0LzAvOEI3RTAwOTlGMjZCRUVFOTA4MjZDOUIwRTQyNDU3 NUJERTEyODQwMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACJzy6oljhQwuoXP7JadxRy34kbSWgqOxy5j pNbbWkD2uS9sX7/7I9t0gEksokywUR8R6YqYLtbIu0PToqka+qJn6qMiVwubZqNZ gDB3TEBNi9BZ+tRiLPhEog9NJc36/JWdYlCD+rCi8FS8WFHQYjhWl5F9mXVk9WiG GTf/EVOXaNTvdDng00E2uo3+FqA871Xg1uszdne3d6Aa1xgW60MvZQ1t/L08RUnx SscGKe6PYQLylLpLGhFl1g04BBVbsOwmQGHRMylq2daercioZTfOWCGO4yhkqXZj XU9Ni1Y6dN4UrfbaW79oqkZBU26fY/Wh36S4ewQC8iOp4qNMenA= -----END CERTIFICATE-----Generated at Mon Jun 30 07:15:37 2025 by rpki-client