$ rpki-client -vvf repo-rpki.idnic.net/repo/58b58aee-e8ee-4287-a2b8-616155c3eec2/0/8BE1F50A90938AE6D4E6D7A6A2A22F003B072ED8.mft File: 8BE1F50A90938AE6D4E6D7A6A2A22F003B072ED8.mft (raw, json) Hash identifier: KZR1S20SgxFch48glnoJacuxZeHNU10fIda6VL1VB38= Subject key identifier: 33:95:1E:23:9B:E1:3A:41:94:69:98:7A:D4:DC:45:DA:5D:81:33:12 Authority key identifier: 8B:E1:F5:0A:90:93:8A:E6:D4:E6:D7:A6:A2:A2:2F:00:3B:07:2E:D8 Certificate issuer: /CN=8BE1F50A90938AE6D4E6D7A6A2A22F003B072ED8 Certificate serial: 1848F0DF72B21CA818C9434DD86ACA13B20C7FC1 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8BE1F50A90938AE6D4E6D7A6A2A22F003B072ED8.cer Subject info access: rsync://repo-rpki.idnic.net/repo/58b58aee-e8ee-4287-a2b8-616155c3eec2/0/8BE1F50A90938AE6D4E6D7A6A2A22F003B072ED8.mft Manifest number: 02B4 Signing time: Mon 30 Jun 2025 23:21:35 +0000 Manifest this update: Mon 30 Jun 2025 23:16:35 +0000 Manifest next update: Fri 04 Jul 2025 02:13:35 +0000 Files and hashes: 1: 3130332e392e3134342e302f32322d3234203d3e20313331373133.roa (hash: nMzdVlm6ZGdAK1jozyzuffucbvzwRK+67XvaYs5SssY=) 2: 8BE1F50A90938AE6D4E6D7A6A2A22F003B072ED8.crl (hash: /kAOqmRq0pCp1YitsXhPmUfRMG4YPVDPb5JtEizDMnk=) 3: 323430373a363338303a3a2f33322d3430203d3e20313331373133.roa (hash: n6EnpwYdLmSL8WaVyIXMn7tuvtOoZcAKI7Mz6TbpG8E=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/58b58aee-e8ee-4287-a2b8-616155c3eec2/0/8BE1F50A90938AE6D4E6D7A6A2A22F003B072ED8.crl rsync://repo-rpki.idnic.net/repo/58b58aee-e8ee-4287-a2b8-616155c3eec2/0/8BE1F50A90938AE6D4E6D7A6A2A22F003B072ED8.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8BE1F50A90938AE6D4E6D7A6A2A22F003B072ED8.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 04 Jul 2025 02:13:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 18:48:f0:df:72:b2:1c:a8:18:c9:43:4d:d8:6a:ca:13:b2:0c:7f:c1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8BE1F50A90938AE6D4E6D7A6A2A22F003B072ED8 Validity Not Before: Jun 30 23:16:35 2025 GMT Not After : Jul 4 02:13:35 2025 GMT Subject: CN=33951E239BE13A419469987AD4DC45DA5D813312 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:b1:68:a0:b6:3d:0e:ff:f4:8a:aa:60:38:6e: 15:d0:82:79:c3:03:22:d0:1a:a4:bb:cc:ac:62:9f: 90:9c:d7:6c:20:3c:48:0e:3f:fe:60:21:68:24:c2: 6e:aa:69:d3:5f:8e:71:89:96:e0:65:2c:0d:43:e2: bd:8e:df:bd:29:73:80:a3:ba:20:33:ee:6f:cc:b1: 52:78:85:5d:a3:25:70:b2:6d:87:9c:6c:a2:62:15: 91:71:f8:94:8f:82:3c:e6:32:1e:b8:a4:93:19:80: d2:ab:34:6d:6f:45:1f:10:0c:1a:88:c9:32:3b:83: d7:d3:df:67:72:ab:57:ce:0e:35:73:15:29:da:95: 74:49:f8:5d:b5:f3:42:dc:c4:0e:82:c6:0c:8c:d4: 20:1c:22:3c:2a:98:da:e4:39:d9:75:c0:99:14:a3: ff:89:ba:f7:16:86:56:ed:72:c8:a2:bc:4f:86:75: 1a:16:fc:66:b6:ba:14:b6:ac:f2:f6:cc:fa:ff:5c: 58:4d:5b:31:e0:7c:31:54:c6:f9:ad:da:6e:58:32: 27:e1:cf:39:0e:c1:30:f0:fe:aa:ef:4d:e0:7a:1a: 0f:14:78:6a:b7:bc:66:15:e8:29:1f:8f:9d:c5:c1: 1a:8a:44:4b:6e:f0:eb:10:1b:0c:ec:5f:11:a3:f2: 31:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:95:1E:23:9B:E1:3A:41:94:69:98:7A:D4:DC:45:DA:5D:81:33:12 X509v3 Authority Key Identifier: keyid:8B:E1:F5:0A:90:93:8A:E6:D4:E6:D7:A6:A2:A2:2F:00:3B:07:2E:D8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/58b58aee-e8ee-4287-a2b8-616155c3eec2/0/8BE1F50A90938AE6D4E6D7A6A2A22F003B072ED8.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8BE1F50A90938AE6D4E6D7A6A2A22F003B072ED8.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/58b58aee-e8ee-4287-a2b8-616155c3eec2/0/8BE1F50A90938AE6D4E6D7A6A2A22F003B072ED8.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7f:23:07:47:d6:ed:9d:92:ae:28:2a:6e:e6:d7:79:5a:ed:af: 8d:d8:45:fa:11:ad:c8:f2:f2:0d:56:8b:8f:18:2f:e9:06:d4: 06:47:86:cc:c4:af:4d:b1:23:b5:fe:06:4e:db:6b:44:21:87: 38:72:9d:f7:d9:7d:f3:0a:5c:8b:2e:27:89:4a:2e:ee:f5:1f: 5c:bf:43:c9:ed:ac:22:8e:19:58:a1:e4:4f:63:e5:28:ab:be: 12:32:43:9c:92:88:91:64:d6:e8:4d:f3:34:42:4d:9a:d9:09: eb:4e:b6:19:67:67:cb:96:5f:8b:3e:75:df:23:75:61:47:e5: e9:85:6e:06:27:bf:cc:5f:d1:62:a2:0a:4d:13:ac:d0:fc:70: c5:22:c9:09:f7:fe:70:12:20:7f:48:74:52:94:62:d2:02:a0: be:f2:5b:0c:7a:3b:c2:63:07:29:32:03:8e:f9:51:78:f9:6b: 58:ba:6c:16:f2:3a:84:f5:0b:ae:51:28:0a:06:53:c9:1b:e2: 91:e8:58:1c:4a:4b:c9:5d:33:41:2d:c8:e4:0d:c2:42:98:13: 6b:eb:73:b7:ff:b7:9b:c5:db:93:4c:6e:c8:3b:a7:1f:62:a4: 6f:4f:fe:12:12:9c:e8:62:dd:73:2c:31:0b:69:b8:ee:e5:f8: 74:2d:f2:20 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUGEjw33KyHKgYyUNN2GrKE7IMf8EwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEJFMUY1MEE5MDkzOEFFNkQ0RTZEN0E2QTJBMjJGMDAz QjA3MkVEODAeFw0yNTA2MzAyMzE2MzVaFw0yNTA3MDQwMjEzMzVaMDMxMTAvBgNV BAMTKDMzOTUxRTIzOUJFMTNBNDE5NDY5OTg3QUQ0REM0NURBNUQ4MTMzMTIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDgsWigtj0O//SKqmA4bhXQgnnD AyLQGqS7zKxin5Cc12wgPEgOP/5gIWgkwm6qadNfjnGJluBlLA1D4r2O370pc4Cj uiAz7m/MsVJ4hV2jJXCybYecbKJiFZFx+JSPgjzmMh64pJMZgNKrNG1vRR8QDBqI yTI7g9fT32dyq1fODjVzFSnalXRJ+F2180LcxA6CxgyM1CAcIjwqmNrkOdl1wJkU o/+JuvcWhlbtcsiivE+GdRoW/Ga2uhS2rPL2zPr/XFhNWzHgfDFUxvmt2m5YMifh zzkOwTDw/qrvTeB6Gg8UeGq3vGYV6Ckfj53FwRqKREtu8OsQGwzsXxGj8jGXAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUM5UeI5vhOkGUaZh61NxF2l2BMxIwHwYDVR0j BBgwFoAUi+H1CpCTiubU5temoqIvADsHLtgwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 OGI1OGFlZS1lOGVlLTQyODctYTJiOC02MTYxNTVjM2VlYzIvMC84QkUxRjUwQTkw OTM4QUU2RDRFNkQ3QTZBMkEyMkYwMDNCMDcyRUQ4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOEJFMUY1MEE5MDkzOEFFNkQ0RTZEN0E2QTJBMjJGMDAzQjA3 MkVEOC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNThiNThhZWUtZThlZS00Mjg3LWEy YjgtNjE2MTU1YzNlZWMyLzAvOEJFMUY1MEE5MDkzOEFFNkQ0RTZEN0E2QTJBMjJG MDAzQjA3MkVEOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAH8jB0fW7Z2SrigqbubXeVrtr43YRfoRrcjy 8g1Wi48YL+kG1AZHhszEr02xI7X+Bk7ba0QhhzhynffZffMKXIsuJ4lKLu71H1y/ Q8ntrCKOGVih5E9j5SirvhIyQ5ySiJFk1uhN8zRCTZrZCetOthlnZ8uWX4s+dd8j dWFH5emFbgYnv8xf0WKiCk0TrND8cMUiyQn3/nASIH9IdFKUYtICoL7yWwx6O8Jj BykyA475UXj5a1i6bBbyOoT1C65RKAoGU8kb4pHoWBxKS8ldM0EtyOQNwkKYE2vr c7f/t5vF25NMbsg7px9ipG9P/hISnOhi3XMsMQtpuO7l+HQt8iA= -----END CERTIFICATE-----Generated at Tue Jul 1 05:10:11 2025 by rpki-client