$ rpki-client -vvf repo-rpki.idnic.net/repo/5e6c2a91-6afc-4767-bbc1-750613264585/0/8BF02D8172D4CA8A00A9EE2EB8CC099F0727F1CB.mft File: 8BF02D8172D4CA8A00A9EE2EB8CC099F0727F1CB.mft (raw, json) Hash identifier: Eh94/HSEQyFrjqC7GdWtejvc298QkTPJYPBxWMYvqSM= Subject key identifier: 01:59:1B:74:59:12:47:0A:25:6A:37:F9:D0:64:01:2A:0B:F4:91:4D Authority key identifier: 8B:F0:2D:81:72:D4:CA:8A:00:A9:EE:2E:B8:CC:09:9F:07:27:F1:CB Certificate issuer: /CN=8BF02D8172D4CA8A00A9EE2EB8CC099F0727F1CB Certificate serial: 79F878AE09A4340139313B61379FA61E27C6DF99 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8BF02D8172D4CA8A00A9EE2EB8CC099F0727F1CB.cer Subject info access: rsync://repo-rpki.idnic.net/repo/5e6c2a91-6afc-4767-bbc1-750613264585/0/8BF02D8172D4CA8A00A9EE2EB8CC099F0727F1CB.mft Manifest number: 01FB Signing time: Thu 21 Aug 2025 19:51:57 +0000 Manifest this update: Thu 21 Aug 2025 19:46:57 +0000 Manifest next update: Mon 25 Aug 2025 01:38:57 +0000 Files and hashes: 1: 8BF02D8172D4CA8A00A9EE2EB8CC099F0727F1CB.crl (hash: dEpThBtYXnuCjYTib+R7hAo799D/n5+96Hv8wOyoT3Q=) 2: 3130332e3133352e342e302f32322d3234203d3e203338333230.roa (hash: 8BpU0pm5UxOt5Z/5pCKxKlre5ZOR7m9ogADS2QXiNkA=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/5e6c2a91-6afc-4767-bbc1-750613264585/0/8BF02D8172D4CA8A00A9EE2EB8CC099F0727F1CB.crl rsync://repo-rpki.idnic.net/repo/5e6c2a91-6afc-4767-bbc1-750613264585/0/8BF02D8172D4CA8A00A9EE2EB8CC099F0727F1CB.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8BF02D8172D4CA8A00A9EE2EB8CC099F0727F1CB.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 25 Aug 2025 01:38:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 79:f8:78:ae:09:a4:34:01:39:31:3b:61:37:9f:a6:1e:27:c6:df:99 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8BF02D8172D4CA8A00A9EE2EB8CC099F0727F1CB Validity Not Before: Aug 21 19:46:57 2025 GMT Not After : Aug 25 01:38:57 2025 GMT Subject: CN=01591B745912470A256A37F9D064012A0BF4914D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:99:3b:54:d3:11:d8:fb:8c:da:01:24:50:ef: ed:ec:af:d7:73:34:12:89:a2:25:2b:f3:cc:2a:e8: 03:47:5d:71:bd:ea:0c:c9:9d:67:97:e7:b9:92:9a: 0f:75:74:4d:53:92:57:1c:b6:f4:30:2e:2f:3d:ca: 91:c9:28:36:fd:0e:3f:1f:5d:3f:6f:80:f9:47:62: ab:eb:0c:c4:88:25:8e:ef:c7:05:dc:bd:e8:ef:e7: 98:11:28:ae:f2:d6:56:a3:a9:ce:00:17:44:ae:7f: 01:91:d2:da:98:13:96:3f:f7:48:5b:81:aa:e9:32: f9:f2:c2:9c:bb:3c:ed:44:4d:9d:48:b6:61:bc:6c: c9:3d:5c:45:8d:7b:7c:16:92:c6:29:84:73:fd:99: e0:45:de:6f:ef:b7:50:6d:78:48:97:ce:f6:7a:e4: ef:50:97:a8:f4:2c:5b:08:34:e4:ac:c5:dd:9c:7b: a4:5c:00:e8:fa:78:f8:f8:e1:5b:97:c6:e7:c6:17: 96:b7:2c:d1:77:a9:0f:b8:a3:72:7f:4b:07:0e:42: c7:e6:a4:f9:b3:73:2e:69:8c:bb:5e:cc:e5:e1:b9: 94:67:cc:9c:44:02:f2:70:33:04:19:1a:f8:3e:ce: 4f:9c:5c:a1:1b:e9:33:34:ab:d5:be:35:7d:30:ff: 72:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 01:59:1B:74:59:12:47:0A:25:6A:37:F9:D0:64:01:2A:0B:F4:91:4D X509v3 Authority Key Identifier: keyid:8B:F0:2D:81:72:D4:CA:8A:00:A9:EE:2E:B8:CC:09:9F:07:27:F1:CB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/5e6c2a91-6afc-4767-bbc1-750613264585/0/8BF02D8172D4CA8A00A9EE2EB8CC099F0727F1CB.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8BF02D8172D4CA8A00A9EE2EB8CC099F0727F1CB.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/5e6c2a91-6afc-4767-bbc1-750613264585/0/8BF02D8172D4CA8A00A9EE2EB8CC099F0727F1CB.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1c:5e:2b:b1:ee:51:c4:7d:b0:ec:c9:92:28:94:0b:f2:07:da: 90:fe:c8:a3:e4:24:d3:0a:97:4c:79:20:7c:76:b7:b5:7b:15: cf:68:ee:a3:4f:2f:4e:9f:b9:f1:0e:f1:a7:fd:dd:7f:67:90: 6f:0a:2d:52:15:5d:1f:d8:6f:65:b6:1c:be:d5:ce:37:54:a6: 03:b2:33:39:63:a5:d9:7d:3f:85:87:4e:cd:ec:42:6b:59:64: a1:aa:58:f7:64:3c:d5:81:92:b3:b5:bb:fb:ef:d9:bc:19:07: b3:20:7b:b5:38:e1:c4:ea:f1:df:33:8c:9a:0a:25:c2:eb:70: 71:15:77:f2:8d:6b:5e:7e:ba:19:5e:ef:de:7c:49:a5:47:11: 91:cf:5a:1c:2b:1b:20:6b:83:62:29:0e:94:09:7d:15:f9:d8: e7:a1:7d:7b:b9:bc:44:c5:08:14:64:da:de:25:95:ca:9a:9a: f0:b8:f4:8b:4d:4e:29:c2:3e:bc:19:78:da:ec:40:f3:1e:80: 6b:3f:f8:8c:8e:0e:d2:9d:27:40:51:2d:f0:79:98:7b:c3:5e: de:5b:3c:83:13:53:3e:f2:75:0e:0c:14:cc:c6:33:ac:45:28: 8f:50:41:e8:27:12:0b:cd:a9:11:1d:e7:6d:d9:3d:f7:0e:6a: 21:c2:3c:11 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUefh4rgmkNAE5MTthN5+mHifG35kwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEJGMDJEODE3MkQ0Q0E4QTAwQTlFRTJFQjhDQzA5OUYw NzI3RjFDQjAeFw0yNTA4MjExOTQ2NTdaFw0yNTA4MjUwMTM4NTdaMDMxMTAvBgNV BAMTKDAxNTkxQjc0NTkxMjQ3MEEyNTZBMzdGOUQwNjQwMTJBMEJGNDkxNEQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDJmTtU0xHY+4zaASRQ7+3sr9dz NBKJoiUr88wq6ANHXXG96gzJnWeX57mSmg91dE1TklcctvQwLi89ypHJKDb9Dj8f XT9vgPlHYqvrDMSIJY7vxwXcvejv55gRKK7y1lajqc4AF0SufwGR0tqYE5Y/90hb garpMvnywpy7PO1ETZ1ItmG8bMk9XEWNe3wWksYphHP9meBF3m/vt1BteEiXzvZ6 5O9Ql6j0LFsINOSsxd2ce6RcAOj6ePj44VuXxufGF5a3LNF3qQ+4o3J/SwcOQsfm pPmzcy5pjLtezOXhuZRnzJxEAvJwMwQZGvg+zk+cXKEb6TM0q9W+NX0w/3L5AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUAVkbdFkSRwolajf50GQBKgv0kU0wHwYDVR0j BBgwFoAUi/AtgXLUyooAqe4uuMwJnwcn8cswDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 ZTZjMmE5MS02YWZjLTQ3NjctYmJjMS03NTA2MTMyNjQ1ODUvMC84QkYwMkQ4MTcy RDRDQThBMDBBOUVFMkVCOENDMDk5RjA3MjdGMUNCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOEJGMDJEODE3MkQ0Q0E4QTAwQTlFRTJFQjhDQzA5OUYwNzI3 RjFDQi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNWU2YzJhOTEtNmFmYy00NzY3LWJi YzEtNzUwNjEzMjY0NTg1LzAvOEJGMDJEODE3MkQ0Q0E4QTAwQTlFRTJFQjhDQzA5 OUYwNzI3RjFDQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABxeK7HuUcR9sOzJkiiUC/IH2pD+yKPkJNMK l0x5IHx2t7V7Fc9o7qNPL06fufEO8af93X9nkG8KLVIVXR/Yb2W2HL7VzjdUpgOy Mzljpdl9P4WHTs3sQmtZZKGqWPdkPNWBkrO1u/vv2bwZB7Mge7U44cTq8d8zjJoK JcLrcHEVd/KNa15+uhle7958SaVHEZHPWhwrGyBrg2IpDpQJfRX52OehfXu5vETF CBRk2t4llcqamvC49ItNTinCPrwZeNrsQPMegGs/+IyODtKdJ0BRLfB5mHvDXt5b PIMTUz7ydQ4MFMzGM6xFKI9QQegnEgvNqREd523ZPfcOaiHCPBE= -----END CERTIFICATE-----Generated at Sat Aug 23 14:12:15 2025 by rpki-client