$ rpki-client -vvf repo-rpki.idnic.net/repo/7f4b53d8-b2ff-4973-b1ac-6f85faeadbe5/0/B8D444C5B3184A4F8C8F199A432242C44E19EACB.mft File: B8D444C5B3184A4F8C8F199A432242C44E19EACB.mft (raw, json) Hash identifier: 76U6azh71w+AFeXZzOULmFdsviDJZ/QTIZWzv3iyNLE= Subject key identifier: 00:3B:79:1B:7D:FE:92:A1:C3:4A:D9:46:A3:0A:BD:CB:48:DD:F7:2F Authority key identifier: B8:D4:44:C5:B3:18:4A:4F:8C:8F:19:9A:43:22:42:C4:4E:19:EA:CB Certificate issuer: /CN=B8D444C5B3184A4F8C8F199A432242C44E19EACB Certificate serial: 0A9D810BE965D57D8D0DE73D33CB24EEDFC4EDE5 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/B8D444C5B3184A4F8C8F199A432242C44E19EACB.cer Subject info access: rsync://repo-rpki.idnic.net/repo/7f4b53d8-b2ff-4973-b1ac-6f85faeadbe5/0/B8D444C5B3184A4F8C8F199A432242C44E19EACB.mft Manifest number: B8 Signing time: Sat 23 Aug 2025 14:51:55 +0000 Manifest this update: Sat 23 Aug 2025 14:46:55 +0000 Manifest next update: Tue 26 Aug 2025 23:56:55 +0000 Files and hashes: 1: 3136302e32352e33362e302f32332d3234203d3e20313532383332.roa (hash: 9wCzZBokUdgA6nDZL9CPWVnRmT/IcfmN/N7BSRO44UA=) 2: B8D444C5B3184A4F8C8F199A432242C44E19EACB.crl (hash: TIIgCFC13Cdw5YRELUnvG1uzWBIeVWzeHfwcnTzXde0=) 3: 3136302e32352e33372e302f32342d3234203d3e20313532383332.roa (hash: 2EK7G4yp/ra7lqC0aFCR3YZxswSuxrQQ2ZJJKEPHMZg=) 4: 3136302e32352e33362e302f32342d3234203d3e20313532383332.roa (hash: 1SJ9LA44FkXb29+CiOLplkV9zxTaWTCw2H5Ki5oako8=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/7f4b53d8-b2ff-4973-b1ac-6f85faeadbe5/0/B8D444C5B3184A4F8C8F199A432242C44E19EACB.crl rsync://repo-rpki.idnic.net/repo/7f4b53d8-b2ff-4973-b1ac-6f85faeadbe5/0/B8D444C5B3184A4F8C8F199A432242C44E19EACB.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/B8D444C5B3184A4F8C8F199A432242C44E19EACB.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 26 Aug 2025 10:24:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0a:9d:81:0b:e9:65:d5:7d:8d:0d:e7:3d:33:cb:24:ee:df:c4:ed:e5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B8D444C5B3184A4F8C8F199A432242C44E19EACB Validity Not Before: Aug 23 14:46:55 2025 GMT Not After : Aug 26 23:56:55 2025 GMT Subject: CN=003B791B7DFE92A1C34AD946A30ABDCB48DDF72F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:b5:4e:1e:0d:d5:03:eb:91:7a:98:4a:83:3b: 41:8c:cc:ea:77:38:c1:1f:7f:47:b3:63:19:75:82: 4f:e6:47:53:a3:18:ad:57:51:a8:54:20:ef:dc:f5: 65:07:57:11:77:da:79:9d:01:ac:f7:ab:ed:bf:8d: 30:26:09:0a:72:d8:0f:ba:17:bf:12:bf:52:37:f0: 6e:2b:29:9a:38:95:44:06:01:2c:2f:a8:4e:97:5d: 62:4d:5d:5b:07:24:eb:fc:12:78:ea:8a:49:51:3f: 97:d9:c9:2d:f8:83:25:e0:97:1d:3f:77:d2:f5:a7: 7f:1c:00:98:a5:cf:34:d9:01:9f:3d:49:aa:9a:a8: 7b:51:3b:90:c5:01:3c:3e:6d:bf:36:8b:51:2c:64: 78:25:47:14:2a:65:bf:f8:62:ce:30:f7:ba:68:2f: a1:b3:d2:55:08:82:db:8b:05:b4:40:07:53:42:c8: 1a:cd:88:31:d3:82:a1:8b:e4:1e:aa:ba:34:3e:60: 21:1b:36:f4:77:49:d9:85:df:96:27:4d:c3:14:3f: bd:0f:12:eb:eb:bf:a8:a6:c9:80:b8:bc:8b:8f:04: 37:05:75:87:c0:d0:7a:97:4d:74:db:2c:c8:7c:85: 1f:77:55:4d:81:cb:58:26:6c:a6:4f:c3:e4:af:a9: 69:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:3B:79:1B:7D:FE:92:A1:C3:4A:D9:46:A3:0A:BD:CB:48:DD:F7:2F X509v3 Authority Key Identifier: keyid:B8:D4:44:C5:B3:18:4A:4F:8C:8F:19:9A:43:22:42:C4:4E:19:EA:CB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/7f4b53d8-b2ff-4973-b1ac-6f85faeadbe5/0/B8D444C5B3184A4F8C8F199A432242C44E19EACB.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/B8D444C5B3184A4F8C8F199A432242C44E19EACB.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/7f4b53d8-b2ff-4973-b1ac-6f85faeadbe5/0/B8D444C5B3184A4F8C8F199A432242C44E19EACB.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption d0:fe:ad:c1:f3:91:5d:a9:70:c2:59:21:0f:f3:08:29:ec:ca: e8:94:f7:22:9e:44:e3:2f:e4:54:9a:58:f9:4d:30:2d:f4:85: 50:7c:42:1c:1e:63:e5:10:29:ef:f1:24:d8:90:a9:35:52:85: 47:f2:60:67:27:54:10:8e:d6:bf:34:65:1e:84:53:d6:05:24: 10:f0:6c:59:5b:98:bd:bb:14:e3:ec:0e:0b:f9:12:00:ac:bf: f1:7d:84:ff:b8:f2:45:67:61:0e:a3:e6:c2:b4:b3:f5:e7:67: 79:81:e2:6a:50:0c:24:a3:70:c3:23:c1:40:2d:1f:fb:43:03: 29:95:96:64:96:98:ea:e2:e6:80:d3:70:1a:eb:77:87:0c:68: 6f:23:bd:89:12:08:73:87:90:9b:ec:9f:bf:3a:92:2e:b1:50: 1b:e3:e6:60:bc:f7:b6:2c:82:8a:91:ba:7c:94:37:4d:40:0d: ba:fc:42:50:4c:d5:a5:9c:00:f2:09:25:6b:23:58:d5:43:98: 0a:cb:e1:39:e3:98:a6:ee:86:7f:60:5f:a4:6e:e2:e6:9b:7e: c2:fb:a7:a4:fe:90:59:6f:32:62:67:9f:74:cf:68:8a:5d:42: 82:a9:e4:c1:bf:3a:19:b6:a5:16:f1:8b:88:df:9e:0b:2f:9b: 3c:ff:42:fd -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUCp2BC+ll1X2NDec9M8sk7t/E7eUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjhENDQ0QzVCMzE4NEE0RjhDOEYxOTlBNDMyMjQyQzQ0 RTE5RUFDQjAeFw0yNTA4MjMxNDQ2NTVaFw0yNTA4MjYyMzU2NTVaMDMxMTAvBgNV BAMTKDAwM0I3OTFCN0RGRTkyQTFDMzRBRDk0NkEzMEFCRENCNDhEREY3MkYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCgtU4eDdUD65F6mEqDO0GMzOp3 OMEff0ezYxl1gk/mR1OjGK1XUahUIO/c9WUHVxF32nmdAaz3q+2/jTAmCQpy2A+6 F78Sv1I38G4rKZo4lUQGASwvqE6XXWJNXVsHJOv8EnjqiklRP5fZyS34gyXglx0/ d9L1p38cAJilzzTZAZ89SaqaqHtRO5DFATw+bb82i1EsZHglRxQqZb/4Ys4w97po L6Gz0lUIgtuLBbRAB1NCyBrNiDHTgqGL5B6qujQ+YCEbNvR3SdmF35YnTcMUP70P Euvrv6imyYC4vIuPBDcFdYfA0HqXTXTbLMh8hR93VU2By1gmbKZPw+SvqWnHAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUADt5G33+kqHDStlGowq9y0jd9y8wHwYDVR0j BBgwFoAUuNRExbMYSk+MjxmaQyJCxE4Z6sswDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 ZjRiNTNkOC1iMmZmLTQ5NzMtYjFhYy02Zjg1ZmFlYWRiZTUvMC9COEQ0NDRDNUIz MTg0QTRGOEM4RjE5OUE0MzIyNDJDNDRFMTlFQUNCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvQjhENDQ0QzVCMzE4NEE0RjhDOEYxOTlBNDMyMjQyQzQ0RTE5 RUFDQi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vN2Y0YjUzZDgtYjJmZi00OTczLWIx YWMtNmY4NWZhZWFkYmU1LzAvQjhENDQ0QzVCMzE4NEE0RjhDOEYxOTlBNDMyMjQy QzQ0RTE5RUFDQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAND+rcHzkV2pcMJZIQ/zCCnsyuiU9yKeROMv 5FSaWPlNMC30hVB8QhweY+UQKe/xJNiQqTVShUfyYGcnVBCO1r80ZR6EU9YFJBDw bFlbmL27FOPsDgv5EgCsv/F9hP+48kVnYQ6j5sK0s/XnZ3mB4mpQDCSjcMMjwUAt H/tDAymVlmSWmOri5oDTcBrrd4cMaG8jvYkSCHOHkJvsn786ki6xUBvj5mC897Ys goqRunyUN01ADbr8QlBM1aWcAPIJJWsjWNVDmArL4TnjmKbuhn9gX6Ru4uabfsL7 p6T+kFlvMmJnn3TPaIpdQoKp5MG/Ohm2pRbxi4jfngsvmzz/Qv0= -----END CERTIFICATE-----Generated at Sat Aug 23 18:44:33 2025 by rpki-client