$ rpki-client -vvf repo-rpki.idnic.net/repo/9497d828-984a-43f1-9b6e-a01ba21bb518/0/B8E467F9AD3F6AB1EEF3A9099A390231708C790A.mft File: B8E467F9AD3F6AB1EEF3A9099A390231708C790A.mft (raw, json) Hash identifier: ZJQUtoypBCMkW35sZtVvImr35adZnnTplCOLq+c7lQ4= Subject key identifier: 05:33:37:44:EE:E3:B0:23:53:56:DD:4E:EF:FA:2F:FD:9A:65:4D:98 Authority key identifier: B8:E4:67:F9:AD:3F:6A:B1:EE:F3:A9:09:9A:39:02:31:70:8C:79:0A Certificate issuer: /CN=B8E467F9AD3F6AB1EEF3A9099A390231708C790A Certificate serial: 7B07746A4D593EA6237FE4B1DFBE285D6E7A9C13 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B8E467F9AD3F6AB1EEF3A9099A390231708C790A.cer Subject info access: rsync://repo-rpki.idnic.net/repo/9497d828-984a-43f1-9b6e-a01ba21bb518/0/B8E467F9AD3F6AB1EEF3A9099A390231708C790A.mft Manifest number: 01DD Signing time: Sat 05 Jul 2025 17:40:35 +0000 Manifest this update: Sat 05 Jul 2025 17:35:35 +0000 Manifest next update: Wed 09 Jul 2025 02:03:35 +0000 Files and hashes: 1: B8E467F9AD3F6AB1EEF3A9099A390231708C790A.crl (hash: ynZchBPelLYO1W1xVZVdr+jMAizOhk+gCmnQyJAkESM=) 2: 3130332e352e3134392e302f32342d3234203d3e20313439393338.roa (hash: aIp2Ip0KA7a4+VvE23OSDrVGb4sJGrWUPloeyjyWxtA=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/9497d828-984a-43f1-9b6e-a01ba21bb518/0/B8E467F9AD3F6AB1EEF3A9099A390231708C790A.crl rsync://repo-rpki.idnic.net/repo/9497d828-984a-43f1-9b6e-a01ba21bb518/0/B8E467F9AD3F6AB1EEF3A9099A390231708C790A.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B8E467F9AD3F6AB1EEF3A9099A390231708C790A.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 08 Jul 2025 21:44:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7b:07:74:6a:4d:59:3e:a6:23:7f:e4:b1:df:be:28:5d:6e:7a:9c:13 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B8E467F9AD3F6AB1EEF3A9099A390231708C790A Validity Not Before: Jul 5 17:35:35 2025 GMT Not After : Jul 9 02:03:35 2025 GMT Subject: CN=05333744EEE3B0235356DD4EEFFA2FFD9A654D98 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:4c:1b:01:e6:38:5a:e2:36:62:a4:34:dd:2c: 86:ee:6a:68:f9:a7:ef:35:93:1d:55:84:bd:9e:7d: 7f:f1:22:5b:35:d0:c3:ab:98:e6:5c:03:f7:68:0e: 81:53:a6:1a:ac:ec:53:c3:49:ea:12:70:22:5b:3e: a9:86:d4:79:78:f3:74:88:18:e4:02:8f:82:08:e9: e6:c6:60:18:b6:20:98:d1:e5:01:c4:ae:9f:66:37: d2:5a:5d:d4:4a:c1:d2:34:70:93:4b:9b:20:1e:d5: 39:56:be:09:0e:ec:7e:a9:19:48:d9:c9:12:b2:03: 98:8a:1c:28:5e:65:60:3d:59:d5:fb:09:02:18:d9: af:fb:2a:18:4e:b6:ff:65:fa:a2:cf:65:b3:47:8b: 69:d7:98:ad:8b:03:df:90:60:67:54:36:16:33:5c: 69:3b:c7:c4:f5:ab:8a:c1:cd:08:07:74:35:ab:d4: a4:c7:96:27:c9:2a:b8:e5:0e:d7:5d:09:19:16:ae: 0d:7a:b3:c2:be:3f:c6:66:94:81:57:b8:85:1a:1a: ba:2a:d1:41:cc:27:71:5f:70:2c:76:b7:50:5c:aa: a1:8f:c5:11:07:16:ab:41:3d:ab:a4:f8:c4:e3:6a: 7d:60:71:ef:06:d9:53:14:fc:46:a2:98:75:fb:4a: 1b:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 05:33:37:44:EE:E3:B0:23:53:56:DD:4E:EF:FA:2F:FD:9A:65:4D:98 X509v3 Authority Key Identifier: keyid:B8:E4:67:F9:AD:3F:6A:B1:EE:F3:A9:09:9A:39:02:31:70:8C:79:0A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/9497d828-984a-43f1-9b6e-a01ba21bb518/0/B8E467F9AD3F6AB1EEF3A9099A390231708C790A.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B8E467F9AD3F6AB1EEF3A9099A390231708C790A.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/9497d828-984a-43f1-9b6e-a01ba21bb518/0/B8E467F9AD3F6AB1EEF3A9099A390231708C790A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5a:2c:22:79:00:65:7e:09:3c:c7:86:b4:85:23:9f:d7:17:0e: 72:f2:7e:3c:81:7c:36:f3:bd:46:4f:21:a2:cc:4b:e5:e1:fe: dc:63:85:fa:eb:83:a0:14:b7:a9:6a:82:a5:59:60:e7:33:04: 14:6e:07:48:e7:ad:d2:6a:a7:33:48:47:79:81:5b:5d:80:43: 62:75:8a:5f:5c:62:ac:ca:2d:0e:52:58:3a:1d:92:12:fa:65: 9b:ff:17:e9:ff:83:05:6b:a1:85:8b:e4:82:44:16:3c:61:07: 05:e2:97:44:cf:af:4d:03:a2:b7:b7:73:c6:cc:d9:bf:10:46: 69:71:6e:91:83:31:0d:76:e9:6c:03:88:63:9d:cd:c7:9c:27: c9:a9:3b:83:10:82:9a:ec:9a:04:b7:22:81:11:6c:54:74:fe: f8:f3:17:b1:e5:db:28:dc:c5:b2:de:28:fe:d8:5d:bd:16:a7: c6:a9:23:9f:e4:ab:0c:d6:58:f8:6c:77:46:99:d1:9c:fc:03: 7f:35:af:c4:fd:39:d1:aa:4c:a5:2c:f5:4c:b5:1b:0c:9e:e8: 74:5c:2b:75:59:46:4e:a6:49:40:6f:f7:6f:4e:21:20:dc:a5: c5:98:35:99:35:65:a5:4d:20:49:cf:be:26:ef:12:08:43:6b: dc:48:8d:1e -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUewd0ak1ZPqYjf+Sx374oXW56nBMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjhFNDY3RjlBRDNGNkFCMUVFRjNBOTA5OUEzOTAyMzE3 MDhDNzkwQTAeFw0yNTA3MDUxNzM1MzVaFw0yNTA3MDkwMjAzMzVaMDMxMTAvBgNV BAMTKDA1MzMzNzQ0RUVFM0IwMjM1MzU2REQ0RUVGRkEyRkZEOUE2NTREOTgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDpTBsB5jha4jZipDTdLIbuamj5 p+81kx1VhL2efX/xIls10MOrmOZcA/doDoFTphqs7FPDSeoScCJbPqmG1Hl483SI GOQCj4II6ebGYBi2IJjR5QHErp9mN9JaXdRKwdI0cJNLmyAe1TlWvgkO7H6pGUjZ yRKyA5iKHCheZWA9WdX7CQIY2a/7KhhOtv9l+qLPZbNHi2nXmK2LA9+QYGdUNhYz XGk7x8T1q4rBzQgHdDWr1KTHlifJKrjlDtddCRkWrg16s8K+P8ZmlIFXuIUaGroq 0UHMJ3FfcCx2t1BcqqGPxREHFqtBPauk+MTjan1gce8G2VMU/EaimHX7ShtDAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUBTM3RO7jsCNTVt1O7/ov/ZplTZgwHwYDVR0j BBgwFoAUuORn+a0/arHu86kJmjkCMXCMeQowDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 NDk3ZDgyOC05ODRhLTQzZjEtOWI2ZS1hMDFiYTIxYmI1MTgvMC9COEU0NjdGOUFE M0Y2QUIxRUVGM0E5MDk5QTM5MDIzMTcwOEM3OTBBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQjhFNDY3RjlBRDNGNkFCMUVFRjNBOTA5OUEzOTAyMzE3MDhD NzkwQS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOTQ5N2Q4MjgtOTg0YS00M2YxLTli NmUtYTAxYmEyMWJiNTE4LzAvQjhFNDY3RjlBRDNGNkFCMUVFRjNBOTA5OUEzOTAy MzE3MDhDNzkwQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFosInkAZX4JPMeGtIUjn9cXDnLyfjyBfDbz vUZPIaLMS+Xh/txjhfrrg6AUt6lqgqVZYOczBBRuB0jnrdJqpzNIR3mBW12AQ2J1 il9cYqzKLQ5SWDodkhL6ZZv/F+n/gwVroYWL5IJEFjxhBwXil0TPr00Dore3c8bM 2b8QRmlxbpGDMQ126WwDiGOdzcecJ8mpO4MQgprsmgS3IoERbFR0/vjzF7Hl2yjc xbLeKP7YXb0Wp8apI5/kqwzWWPhsd0aZ0Zz8A381r8T9OdGqTKUs9Uy1Gwye6HRc K3VZRk6mSUBv929OISDcpcWYNZk1ZaVNIEnPvibvEghDa9xIjR4= -----END CERTIFICATE-----Generated at Sat Jul 5 20:52:24 2025 by rpki-client