$ rpki-client -vvf repo-rpki.idnic.net/repo/9497d828-984a-43f1-9b6e-a01ba21bb518/0/B8E467F9AD3F6AB1EEF3A9099A390231708C790A.mft File: B8E467F9AD3F6AB1EEF3A9099A390231708C790A.mft (raw, json) Hash identifier: jUqkgOSNxkw/UHqnH/JwxgACcijgYvHNZ4uCjkSTLzE= Subject key identifier: BA:01:02:48:7F:01:EA:2C:10:ED:8C:93:1F:7F:08:BC:C4:04:E7:CD Authority key identifier: B8:E4:67:F9:AD:3F:6A:B1:EE:F3:A9:09:9A:39:02:31:70:8C:79:0A Certificate issuer: /CN=B8E467F9AD3F6AB1EEF3A9099A390231708C790A Certificate serial: 52A4A6298BE6C81979CCA95353E0E1BE81C3D517 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B8E467F9AD3F6AB1EEF3A9099A390231708C790A.cer Subject info access: rsync://repo-rpki.idnic.net/repo/9497d828-984a-43f1-9b6e-a01ba21bb518/0/B8E467F9AD3F6AB1EEF3A9099A390231708C790A.mft Manifest number: 01F2 Signing time: Thu 21 Aug 2025 20:10:42 +0000 Manifest this update: Thu 21 Aug 2025 20:05:42 +0000 Manifest next update: Mon 25 Aug 2025 03:30:42 +0000 Files and hashes: 1: B8E467F9AD3F6AB1EEF3A9099A390231708C790A.crl (hash: zuqx1eyBvnr20HfF4r4T0Wv+alvevZ2Bn6xbd/pq8hw=) 2: 3130332e352e3134392e302f32342d3234203d3e20313439393338.roa (hash: aIp2Ip0KA7a4+VvE23OSDrVGb4sJGrWUPloeyjyWxtA=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/9497d828-984a-43f1-9b6e-a01ba21bb518/0/B8E467F9AD3F6AB1EEF3A9099A390231708C790A.crl rsync://repo-rpki.idnic.net/repo/9497d828-984a-43f1-9b6e-a01ba21bb518/0/B8E467F9AD3F6AB1EEF3A9099A390231708C790A.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B8E467F9AD3F6AB1EEF3A9099A390231708C790A.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 25 Aug 2025 03:30:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 52:a4:a6:29:8b:e6:c8:19:79:cc:a9:53:53:e0:e1:be:81:c3:d5:17 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B8E467F9AD3F6AB1EEF3A9099A390231708C790A Validity Not Before: Aug 21 20:05:42 2025 GMT Not After : Aug 25 03:30:42 2025 GMT Subject: CN=BA0102487F01EA2C10ED8C931F7F08BCC404E7CD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:3d:b4:77:51:89:31:3e:2c:bf:89:3f:cf:da: 1d:f1:e1:ed:34:77:e4:c7:93:fd:53:6c:33:a4:53: cf:db:c0:1b:3b:13:51:9e:1c:ca:dc:42:4c:0d:98: a7:b6:13:0f:a5:85:e3:bf:89:d4:52:78:c9:7b:02: 62:e6:df:60:16:05:31:6a:c7:77:26:80:9c:86:0a: 41:6f:40:b5:c9:a9:f7:fe:31:da:29:90:27:09:2e: 34:e7:13:2d:ef:c7:50:d8:49:8b:96:12:9e:4a:38: 05:e6:cd:60:e4:39:ba:be:3d:7a:74:3f:e0:2b:da: 59:8b:d8:79:a0:b8:84:4d:84:ea:1a:c9:94:ea:4c: 1e:e7:3f:d9:5a:a7:de:a7:32:58:a5:86:b7:cc:d9: 34:7b:96:46:8b:b6:ef:79:da:cf:bd:57:30:86:2c: a0:aa:49:16:7d:62:71:79:07:ad:79:33:9a:6f:73: 05:59:e2:ee:47:db:86:8a:bf:88:2c:22:40:94:1d: 57:4c:6b:4e:d5:be:a0:1c:53:d9:25:44:62:b1:2f: c1:1d:68:8e:90:0c:49:24:5c:0e:4f:c8:7e:f1:34: ba:75:50:20:36:0b:fe:f9:a7:ed:75:10:f5:67:4d: ef:7f:97:84:56:4d:b3:b8:37:64:24:90:09:c0:0d: df:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BA:01:02:48:7F:01:EA:2C:10:ED:8C:93:1F:7F:08:BC:C4:04:E7:CD X509v3 Authority Key Identifier: keyid:B8:E4:67:F9:AD:3F:6A:B1:EE:F3:A9:09:9A:39:02:31:70:8C:79:0A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/9497d828-984a-43f1-9b6e-a01ba21bb518/0/B8E467F9AD3F6AB1EEF3A9099A390231708C790A.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B8E467F9AD3F6AB1EEF3A9099A390231708C790A.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/9497d828-984a-43f1-9b6e-a01ba21bb518/0/B8E467F9AD3F6AB1EEF3A9099A390231708C790A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 89:69:c1:66:28:ee:9d:6f:30:a2:12:0a:8e:3d:8e:a3:06:55: 1b:62:85:bf:24:f5:4e:22:83:bb:11:de:dc:b3:10:fe:c1:c6: 8a:9c:d9:28:04:e6:a6:64:1d:9c:b0:de:7f:18:e2:98:24:7b: ae:00:e9:4a:3d:63:b5:ff:77:4a:ee:b4:ad:9f:4e:9e:6b:3d: af:2b:13:57:37:a0:5e:b1:4a:48:9c:c3:d1:cc:67:e9:0a:a0: 28:9c:25:36:72:84:fd:98:c1:38:53:76:74:7d:2d:10:bb:40: cd:bd:d2:fd:f7:42:18:78:f8:23:f1:bc:f4:7f:e2:b1:34:0b: af:e1:17:d7:93:6d:72:72:d0:4d:a0:79:72:eb:31:b3:47:f4: 36:3e:d2:d7:e5:87:0a:57:6d:af:43:52:32:01:d6:a5:fc:1f: 8c:13:ce:ed:d7:92:19:5c:12:46:b6:1d:57:c0:50:ad:54:e5: 2e:c9:7d:c2:a1:52:db:55:31:64:9a:9b:c6:cc:76:3b:bd:78: 29:0c:fd:38:d1:c4:7e:c5:2b:af:9a:a7:82:87:1b:cf:db:24: e8:11:12:94:67:a0:91:df:8e:a8:00:9c:5b:56:ce:26:ab:39: a7:55:32:ff:9f:e4:8f:a8:82:f2:ff:fe:85:9e:c8:1d:26:2c: b6:b2:0f:e2 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUUqSmKYvmyBl5zKlTU+DhvoHD1RcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjhFNDY3RjlBRDNGNkFCMUVFRjNBOTA5OUEzOTAyMzE3 MDhDNzkwQTAeFw0yNTA4MjEyMDA1NDJaFw0yNTA4MjUwMzMwNDJaMDMxMTAvBgNV BAMTKEJBMDEwMjQ4N0YwMUVBMkMxMEVEOEM5MzFGN0YwOEJDQzQwNEU3Q0QwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDgPbR3UYkxPiy/iT/P2h3x4e00 d+THk/1TbDOkU8/bwBs7E1GeHMrcQkwNmKe2Ew+lheO/idRSeMl7AmLm32AWBTFq x3cmgJyGCkFvQLXJqff+MdopkCcJLjTnEy3vx1DYSYuWEp5KOAXmzWDkObq+PXp0 P+Ar2lmL2HmguIRNhOoayZTqTB7nP9lap96nMlilhrfM2TR7lkaLtu952s+9VzCG LKCqSRZ9YnF5B615M5pvcwVZ4u5H24aKv4gsIkCUHVdMa07VvqAcU9klRGKxL8Ed aI6QDEkkXA5PyH7xNLp1UCA2C/75p+11EPVnTe9/l4RWTbO4N2QkkAnADd83AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUugECSH8B6iwQ7YyTH38IvMQE580wHwYDVR0j BBgwFoAUuORn+a0/arHu86kJmjkCMXCMeQowDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 NDk3ZDgyOC05ODRhLTQzZjEtOWI2ZS1hMDFiYTIxYmI1MTgvMC9COEU0NjdGOUFE M0Y2QUIxRUVGM0E5MDk5QTM5MDIzMTcwOEM3OTBBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQjhFNDY3RjlBRDNGNkFCMUVFRjNBOTA5OUEzOTAyMzE3MDhD NzkwQS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOTQ5N2Q4MjgtOTg0YS00M2YxLTli NmUtYTAxYmEyMWJiNTE4LzAvQjhFNDY3RjlBRDNGNkFCMUVFRjNBOTA5OUEzOTAy MzE3MDhDNzkwQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIlpwWYo7p1vMKISCo49jqMGVRtihb8k9U4i g7sR3tyzEP7Bxoqc2SgE5qZkHZyw3n8Y4pgke64A6Uo9Y7X/d0rutK2fTp5rPa8r E1c3oF6xSkicw9HMZ+kKoCicJTZyhP2YwThTdnR9LRC7QM290v33Qhh4+CPxvPR/ 4rE0C6/hF9eTbXJy0E2geXLrMbNH9DY+0tflhwpXba9DUjIB1qX8H4wTzu3Xkhlc Eka2HVfAUK1U5S7JfcKhUttVMWSam8bMdju9eCkM/TjRxH7FK6+ap4KHG8/bJOgR EpRnoJHfjqgAnFtWziarOadVMv+f5I+ogvL//oWeyB0mLLayD+I= -----END CERTIFICATE-----Generated at Sat Aug 23 16:00:35 2025 by rpki-client