$ rpki-client -vvf repo-rpki.idnic.net/repo/58b58aee-e8ee-4287-a2b8-616155c3eec2/0/8BE1F50A90938AE6D4E6D7A6A2A22F003B072ED8.mft File: 8BE1F50A90938AE6D4E6D7A6A2A22F003B072ED8.mft (raw, json) Hash identifier: Sp5gXp3xuF8vtOmxRSyY8hn3Nm3wzzAF0tRo7X10AWM= Subject key identifier: 03:A9:57:84:D4:CF:85:14:78:07:EB:BC:98:08:BA:94:58:85:7E:A1 Authority key identifier: 8B:E1:F5:0A:90:93:8A:E6:D4:E6:D7:A6:A2:A2:2F:00:3B:07:2E:D8 Certificate issuer: /CN=8BE1F50A90938AE6D4E6D7A6A2A22F003B072ED8 Certificate serial: 262D5E514F05157C1ACD33F887538727B405E593 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8BE1F50A90938AE6D4E6D7A6A2A22F003B072ED8.cer Subject info access: rsync://repo-rpki.idnic.net/repo/58b58aee-e8ee-4287-a2b8-616155c3eec2/0/8BE1F50A90938AE6D4E6D7A6A2A22F003B072ED8.mft Manifest number: 02CC Signing time: Sat 23 Aug 2025 04:31:34 +0000 Manifest this update: Sat 23 Aug 2025 04:26:34 +0000 Manifest next update: Tue 26 Aug 2025 08:47:34 +0000 Files and hashes: 1: 8BE1F50A90938AE6D4E6D7A6A2A22F003B072ED8.crl (hash: NPdZKHF+pYKFrxBhVAeDn9vPUwXTx5hD9OOxn+bis4c=) 2: 323430373a363338303a3a2f33322d3430203d3e20313331373133.roa (hash: d3EczDOEKFnJZSi/mXbv6kWPY6oK1SqyadhZuQpb4/8=) 3: 3130332e392e3134342e302f32322d3234203d3e20313331373133.roa (hash: DgLKkC/jF8zKIVNdNQyUD9vzgLj84NQLEk3DQtPjHPw=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/58b58aee-e8ee-4287-a2b8-616155c3eec2/0/8BE1F50A90938AE6D4E6D7A6A2A22F003B072ED8.crl rsync://repo-rpki.idnic.net/repo/58b58aee-e8ee-4287-a2b8-616155c3eec2/0/8BE1F50A90938AE6D4E6D7A6A2A22F003B072ED8.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8BE1F50A90938AE6D4E6D7A6A2A22F003B072ED8.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 26 Aug 2025 08:47:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 26:2d:5e:51:4f:05:15:7c:1a:cd:33:f8:87:53:87:27:b4:05:e5:93 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8BE1F50A90938AE6D4E6D7A6A2A22F003B072ED8 Validity Not Before: Aug 23 04:26:34 2025 GMT Not After : Aug 26 08:47:34 2025 GMT Subject: CN=03A95784D4CF85147807EBBC9808BA9458857EA1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:66:f6:ed:30:1e:e1:de:d8:85:63:8b:76:65: d7:34:cd:d6:f0:13:dc:7d:cd:fe:8b:16:20:00:2b: 7d:8b:6d:85:af:32:f8:4d:d8:df:3a:ea:78:2f:90: 69:11:52:a4:9d:68:72:58:dd:ec:d1:64:d8:5b:4b: 53:01:44:71:ec:0e:64:e6:03:a9:c0:8d:d1:f3:54: 8d:42:cd:ed:37:61:ff:34:3b:b2:56:9b:d4:bd:65: 5d:d4:e8:ef:3c:10:ff:16:bb:2a:2e:aa:d8:e7:fa: 0f:20:cc:af:51:1d:4f:2f:b7:50:55:d8:94:0f:9e: 8f:22:75:8a:7c:8c:06:44:fa:96:0f:b1:a4:bc:51: 26:17:92:f0:9d:73:bf:6d:7a:b3:88:4a:52:3f:f8: 28:6a:86:08:05:c9:ac:bc:b6:8b:29:8a:14:8b:d3: 69:24:58:8f:c4:9b:ec:b0:fe:8a:20:06:f9:99:a8: a4:46:dd:0f:e4:f0:fd:4b:d5:a3:12:60:12:1d:a9: 00:7d:9f:07:c5:df:73:9f:cf:50:96:e6:89:53:ef: 72:ea:fc:13:5e:ca:c3:ef:c9:21:0f:f0:bd:6e:dc: 22:9a:9e:19:e8:eb:c5:fe:29:0f:93:a8:15:6e:81: c3:6d:72:7e:5c:8d:5f:46:e2:f0:29:d1:e3:08:1a: a8:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 03:A9:57:84:D4:CF:85:14:78:07:EB:BC:98:08:BA:94:58:85:7E:A1 X509v3 Authority Key Identifier: keyid:8B:E1:F5:0A:90:93:8A:E6:D4:E6:D7:A6:A2:A2:2F:00:3B:07:2E:D8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/58b58aee-e8ee-4287-a2b8-616155c3eec2/0/8BE1F50A90938AE6D4E6D7A6A2A22F003B072ED8.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8BE1F50A90938AE6D4E6D7A6A2A22F003B072ED8.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/58b58aee-e8ee-4287-a2b8-616155c3eec2/0/8BE1F50A90938AE6D4E6D7A6A2A22F003B072ED8.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 92:5f:d8:3f:f0:29:5a:e4:8a:79:b2:ee:2b:21:4a:19:69:f7: 29:53:9a:c5:69:ac:99:98:9b:63:37:7b:29:60:21:35:42:76: 53:ff:4c:8e:b2:6a:d0:f5:de:5c:27:09:8f:27:be:7a:74:6f: f0:c7:85:f7:22:8c:44:25:2a:fa:62:5f:18:0a:d8:da:4d:bc: a3:64:3d:90:6c:88:68:f1:1f:22:0b:38:39:5f:b6:72:45:a9: f7:bd:de:bc:b1:ac:80:0f:8f:d5:82:fd:22:d8:73:9e:56:4d: 07:21:60:dc:f7:61:a9:ee:32:70:ac:0c:41:1f:58:2e:77:f3: e1:2e:4b:0a:16:2c:9c:16:7e:23:52:f0:99:08:71:67:cf:9b: 46:94:f7:31:68:2a:47:6f:c4:14:18:f6:c8:c5:39:6c:4b:d8: da:83:6a:84:37:9a:13:cb:df:2c:c4:88:94:98:a0:52:eb:be: 40:9a:00:94:5f:33:12:fd:6d:9d:22:de:3b:9e:93:fc:fd:1f: 6e:1d:09:c5:28:ea:ef:56:50:e9:32:fa:eb:a2:49:e8:bb:fa: 42:8b:c1:56:36:4b:bc:09:ec:37:86:89:2c:24:f2:3e:e0:f9: a7:3c:18:6d:b5:36:cc:b8:7b:68:1d:b0:63:ca:1e:f9:3f:61: a0:e3:64:9f -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUJi1eUU8FFXwazTP4h1OHJ7QF5ZMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEJFMUY1MEE5MDkzOEFFNkQ0RTZEN0E2QTJBMjJGMDAz QjA3MkVEODAeFw0yNTA4MjMwNDI2MzRaFw0yNTA4MjYwODQ3MzRaMDMxMTAvBgNV BAMTKDAzQTk1Nzg0RDRDRjg1MTQ3ODA3RUJCQzk4MDhCQTk0NTg4NTdFQTEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCvZvbtMB7h3tiFY4t2Zdc0zdbw E9x9zf6LFiAAK32LbYWvMvhN2N866ngvkGkRUqSdaHJY3ezRZNhbS1MBRHHsDmTm A6nAjdHzVI1Cze03Yf80O7JWm9S9ZV3U6O88EP8Wuyouqtjn+g8gzK9RHU8vt1BV 2JQPno8idYp8jAZE+pYPsaS8USYXkvCdc79terOISlI/+ChqhggFyay8tospihSL 02kkWI/Em+yw/oogBvmZqKRG3Q/k8P1L1aMSYBIdqQB9nwfF33Ofz1CW5olT73Lq /BNeysPvySEP8L1u3CKanhno68X+KQ+TqBVugcNtcn5cjV9G4vAp0eMIGqgNAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUA6lXhNTPhRR4B+u8mAi6lFiFfqEwHwYDVR0j BBgwFoAUi+H1CpCTiubU5temoqIvADsHLtgwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 OGI1OGFlZS1lOGVlLTQyODctYTJiOC02MTYxNTVjM2VlYzIvMC84QkUxRjUwQTkw OTM4QUU2RDRFNkQ3QTZBMkEyMkYwMDNCMDcyRUQ4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOEJFMUY1MEE5MDkzOEFFNkQ0RTZEN0E2QTJBMjJGMDAzQjA3 MkVEOC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNThiNThhZWUtZThlZS00Mjg3LWEy YjgtNjE2MTU1YzNlZWMyLzAvOEJFMUY1MEE5MDkzOEFFNkQ0RTZEN0E2QTJBMjJG MDAzQjA3MkVEOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJJf2D/wKVrkinmy7ishShlp9ylTmsVprJmY m2M3eylgITVCdlP/TI6yatD13lwnCY8nvnp0b/DHhfcijEQlKvpiXxgK2NpNvKNk PZBsiGjxHyILODlftnJFqfe93ryxrIAPj9WC/SLYc55WTQchYNz3YanuMnCsDEEf WC538+EuSwoWLJwWfiNS8JkIcWfPm0aU9zFoKkdvxBQY9sjFOWxL2NqDaoQ3mhPL 3yzEiJSYoFLrvkCaAJRfMxL9bZ0i3juek/z9H24dCcUo6u9WUOky+uuiSei7+kKL wVY2S7wJ7DeGiSwk8j7g+ac8GG21Nsy4e2gdsGPKHvk/YaDjZJ8= -----END CERTIFICATE-----Generated at Sat Aug 23 12:15:10 2025 by rpki-client