$ rpki-client -vvf repo-rpki.idnic.net/repo/7d6529db-9330-4e97-adf1-b0ddf1a6e599/0/8B19ACE0A7391492B18BE27AC01D2A602872BFC0.mft File: 8B19ACE0A7391492B18BE27AC01D2A602872BFC0.mft (raw, json) Hash identifier: CE44D1GxwfHv2J6U1yJB6CryqYW8DEDJ+5ZxSv1+n6s= Subject key identifier: AC:E9:5A:69:03:96:95:2A:3B:7B:37:E7:1C:02:65:D6:A3:A6:34:CD Authority key identifier: 8B:19:AC:E0:A7:39:14:92:B1:8B:E2:7A:C0:1D:2A:60:28:72:BF:C0 Certificate issuer: /CN=8B19ACE0A7391492B18BE27AC01D2A602872BFC0 Certificate serial: 1293C0DD5EA3FE240E850CE5B1A1A47F999E4C55 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8B19ACE0A7391492B18BE27AC01D2A602872BFC0.cer Subject info access: rsync://repo-rpki.idnic.net/repo/7d6529db-9330-4e97-adf1-b0ddf1a6e599/0/8B19ACE0A7391492B18BE27AC01D2A602872BFC0.mft Manifest number: 016C Signing time: Fri 04 Jul 2025 06:00:04 +0000 Manifest this update: Fri 04 Jul 2025 05:55:04 +0000 Manifest next update: Mon 07 Jul 2025 08:38:04 +0000 Files and hashes: 1: 3130332e3132322e382e302f32342d3234203d3e20313530393635.roa (hash: OBSu5NWIqhavEgs//Z/O6dTCa3LFoSwUa21LGk85Vss=) 2: 3130332e3132322e392e302f32342d3234203d3e20313530393635.roa (hash: QeU0/vEBTo6jIDTAqgbH9ossdE4o8/cj7giBqcJ2VYs=) 3: 8B19ACE0A7391492B18BE27AC01D2A602872BFC0.crl (hash: OP/oQ5/mF+pi3pIjxxomjymqp54R85e2+N2Wg97DlHE=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/7d6529db-9330-4e97-adf1-b0ddf1a6e599/0/8B19ACE0A7391492B18BE27AC01D2A602872BFC0.crl rsync://repo-rpki.idnic.net/repo/7d6529db-9330-4e97-adf1-b0ddf1a6e599/0/8B19ACE0A7391492B18BE27AC01D2A602872BFC0.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8B19ACE0A7391492B18BE27AC01D2A602872BFC0.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 07 Jul 2025 08:38:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 12:93:c0:dd:5e:a3:fe:24:0e:85:0c:e5:b1:a1:a4:7f:99:9e:4c:55 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8B19ACE0A7391492B18BE27AC01D2A602872BFC0 Validity Not Before: Jul 4 05:55:04 2025 GMT Not After : Jul 7 08:38:04 2025 GMT Subject: CN=ACE95A690396952A3B7B37E71C0265D6A3A634CD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:b6:07:f7:cc:e0:94:6e:56:bf:ce:fa:12:54: f4:05:af:99:09:2f:7a:8f:15:e3:2d:af:9f:89:d1: ad:af:59:a5:64:65:d7:3f:7f:fa:e4:ae:f0:94:55: 54:d2:79:b7:30:35:98:c6:e5:ed:36:96:6d:a3:de: 4c:32:4e:b7:ae:4a:1e:95:1a:5d:bc:ad:06:37:95: ce:e9:1e:b6:a3:35:24:5d:6b:bc:58:3e:0d:81:3a: da:84:ee:e0:86:37:5c:d7:d4:fb:c7:61:6f:c6:91: 69:1a:29:87:30:3f:84:41:18:1b:15:27:80:a5:b5: 33:75:6d:e4:7b:af:36:95:19:1f:db:33:66:2f:2a: b7:fc:9c:89:98:e8:10:f5:c5:f8:5c:91:64:df:8b: e6:cd:0f:da:e6:48:73:8a:d4:6a:8f:25:94:7d:bf: c3:25:2e:c7:b1:50:84:e7:a3:cb:ea:93:7e:03:34: 48:d9:09:e1:56:46:c8:c7:3d:0b:d2:94:10:50:7a: a8:33:45:07:ff:3f:13:1f:d3:f8:bd:7f:e5:d7:cf: a3:5e:5f:82:61:20:a8:f7:3d:e0:f8:4d:26:7e:53: ca:61:7d:66:9c:33:62:b7:e0:82:5c:4f:c3:c5:8d: 02:ab:81:43:ac:e5:b3:f7:cf:00:61:2d:e3:b9:88: 98:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AC:E9:5A:69:03:96:95:2A:3B:7B:37:E7:1C:02:65:D6:A3:A6:34:CD X509v3 Authority Key Identifier: keyid:8B:19:AC:E0:A7:39:14:92:B1:8B:E2:7A:C0:1D:2A:60:28:72:BF:C0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/7d6529db-9330-4e97-adf1-b0ddf1a6e599/0/8B19ACE0A7391492B18BE27AC01D2A602872BFC0.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8B19ACE0A7391492B18BE27AC01D2A602872BFC0.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/7d6529db-9330-4e97-adf1-b0ddf1a6e599/0/8B19ACE0A7391492B18BE27AC01D2A602872BFC0.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 99:3d:9d:15:d3:ba:b0:9b:5b:87:64:4d:9e:56:57:f4:98:46: 9f:63:fb:8c:9d:54:8a:cd:df:12:30:52:db:a8:2e:0a:c1:4f: 72:4d:6e:73:e2:62:f1:31:4a:3e:b1:21:9b:6c:5a:9d:2e:3b: 34:63:9d:01:72:83:4e:b6:cf:9a:a2:42:7e:79:82:46:e4:f8: 8a:9a:b1:c6:39:cd:41:6f:74:94:d7:0f:eb:15:d5:cc:04:44: 8b:53:b0:5f:fc:20:c7:e1:84:65:18:fd:73:56:e2:2c:da:26: 6f:88:65:81:ec:d8:3a:cb:9b:a5:e8:20:1f:63:f7:f5:4b:15: 9d:30:12:93:9f:b6:3f:fa:26:02:0a:b5:da:a1:47:8e:db:f0: a7:b9:9d:0d:b7:c4:79:5d:96:21:9e:41:16:84:47:bb:33:b9: cd:93:2f:69:16:c2:38:b9:30:12:6f:7b:ec:7a:c6:e1:16:9f: cc:88:b9:d0:cb:44:f3:13:44:37:9f:5d:14:34:de:81:a7:3b: ac:70:ff:39:7d:ad:94:0d:e4:ba:a7:9d:2e:4a:c2:1c:79:79: 25:4f:a3:15:f5:fe:21:4a:ec:1a:fe:ed:3a:52:de:93:d1:da: 46:bb:04:64:9e:f2:d7:a2:8c:51:98:80:34:72:af:4f:6e:c9: 5f:db:ea:53 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUEpPA3V6j/iQOhQzlsaGkf5meTFUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEIxOUFDRTBBNzM5MTQ5MkIxOEJFMjdBQzAxRDJBNjAy ODcyQkZDMDAeFw0yNTA3MDQwNTU1MDRaFw0yNTA3MDcwODM4MDRaMDMxMTAvBgNV BAMTKEFDRTk1QTY5MDM5Njk1MkEzQjdCMzdFNzFDMDI2NUQ2QTNBNjM0Q0QwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDbtgf3zOCUbla/zvoSVPQFr5kJ L3qPFeMtr5+J0a2vWaVkZdc/f/rkrvCUVVTSebcwNZjG5e02lm2j3kwyTreuSh6V Gl28rQY3lc7pHrajNSRda7xYPg2BOtqE7uCGN1zX1PvHYW/GkWkaKYcwP4RBGBsV J4CltTN1beR7rzaVGR/bM2YvKrf8nImY6BD1xfhckWTfi+bND9rmSHOK1GqPJZR9 v8MlLsexUITno8vqk34DNEjZCeFWRsjHPQvSlBBQeqgzRQf/PxMf0/i9f+XXz6Ne X4JhIKj3PeD4TSZ+U8phfWacM2K34IJcT8PFjQKrgUOs5bP3zwBhLeO5iJhFAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUrOlaaQOWlSo7ezfnHAJl1qOmNM0wHwYDVR0j BBgwFoAUixms4Kc5FJKxi+J6wB0qYChyv8AwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 ZDY1MjlkYi05MzMwLTRlOTctYWRmMS1iMGRkZjFhNmU1OTkvMC84QjE5QUNFMEE3 MzkxNDkyQjE4QkUyN0FDMDFEMkE2MDI4NzJCRkMwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOEIxOUFDRTBBNzM5MTQ5MkIxOEJFMjdBQzAxRDJBNjAyODcy QkZDMC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vN2Q2NTI5ZGItOTMzMC00ZTk3LWFk ZjEtYjBkZGYxYTZlNTk5LzAvOEIxOUFDRTBBNzM5MTQ5MkIxOEJFMjdBQzAxRDJB NjAyODcyQkZDMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJk9nRXTurCbW4dkTZ5WV/SYRp9j+4ydVIrN 3xIwUtuoLgrBT3JNbnPiYvExSj6xIZtsWp0uOzRjnQFyg062z5qiQn55gkbk+Iqa scY5zUFvdJTXD+sV1cwERItTsF/8IMfhhGUY/XNW4izaJm+IZYHs2DrLm6XoIB9j 9/VLFZ0wEpOftj/6JgIKtdqhR47b8Ke5nQ23xHldliGeQRaER7szuc2TL2kWwji5 MBJve+x6xuEWn8yIudDLRPMTRDefXRQ03oGnO6xw/zl9rZQN5LqnnS5Kwhx5eSVP oxX1/iFK7Br+7TpS3pPR2ka7BGSe8teijFGYgDRyr09uyV/b6lM= -----END CERTIFICATE-----Generated at Fri Jul 4 09:53:00 2025 by rpki-client