$ rpki-client -vvf repo-rpki.idnic.net/repo/99e3b1d8-bf19-46e3-b609-0d160988dac8/0/8B266458C7DEFCF6926DCDF453C84A1D42E8D989.mft File: 8B266458C7DEFCF6926DCDF453C84A1D42E8D989.mft (raw, json) Hash identifier: OWsqQJrOLEMxJIt3cJCcAm40zZi0g2y4ruMuMQ/5OsY= Subject key identifier: E9:FB:EE:CE:14:5F:3F:85:54:EB:77:CA:BD:33:B5:4C:46:A1:48:75 Authority key identifier: 8B:26:64:58:C7:DE:FC:F6:92:6D:CD:F4:53:C8:4A:1D:42:E8:D9:89 Certificate issuer: /CN=8B266458C7DEFCF6926DCDF453C84A1D42E8D989 Certificate serial: 6DECF8115BE11C35FF3DC1CB3057F754D713DA97 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8B266458C7DEFCF6926DCDF453C84A1D42E8D989.cer Subject info access: rsync://repo-rpki.idnic.net/repo/99e3b1d8-bf19-46e3-b609-0d160988dac8/0/8B266458C7DEFCF6926DCDF453C84A1D42E8D989.mft Manifest number: 04E5 Signing time: Sat 28 Jun 2025 19:51:23 +0000 Manifest this update: Sat 28 Jun 2025 19:46:23 +0000 Manifest next update: Wed 02 Jul 2025 04:01:23 +0000 Files and hashes: 1: 8B266458C7DEFCF6926DCDF453C84A1D42E8D989.crl (hash: hwb9ZkXCsDwDX8fTniAJ09RyLxlfO0534RMfpd4dLaw=) 2: 3131392e3233352e3234382e302f32312d3234203d3e203435313436.roa (hash: Gj57tszoKsJPmI3zlTc36/bgp48+5kiHS2p+sUe73DE=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/99e3b1d8-bf19-46e3-b609-0d160988dac8/0/8B266458C7DEFCF6926DCDF453C84A1D42E8D989.crl rsync://repo-rpki.idnic.net/repo/99e3b1d8-bf19-46e3-b609-0d160988dac8/0/8B266458C7DEFCF6926DCDF453C84A1D42E8D989.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8B266458C7DEFCF6926DCDF453C84A1D42E8D989.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 02 Jul 2025 04:01:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6d:ec:f8:11:5b:e1:1c:35:ff:3d:c1:cb:30:57:f7:54:d7:13:da:97 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8B266458C7DEFCF6926DCDF453C84A1D42E8D989 Validity Not Before: Jun 28 19:46:23 2025 GMT Not After : Jul 2 04:01:23 2025 GMT Subject: CN=E9FBEECE145F3F8554EB77CABD33B54C46A14875 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:31:bc:86:f8:48:a7:0d:5f:53:47:db:b5:01: 69:90:ef:be:51:e1:56:44:2d:ee:ea:aa:9f:02:40: 41:f6:47:7b:d6:cb:eb:a1:1e:b2:56:ba:92:cf:d6: 3e:4a:71:cc:f8:df:8e:a5:fe:ba:2d:78:18:68:9e: 74:4e:19:b0:61:d9:f8:dd:9e:74:1c:93:7e:2b:71: 66:3e:ae:e1:92:06:2d:3e:ae:08:e3:99:8f:84:7d: f8:f4:ae:70:6c:9f:d7:c1:76:db:d0:7e:a8:e5:cf: 56:9f:09:7c:ae:93:a2:2d:21:d3:a8:64:9c:1c:76: 2c:ed:4d:85:a4:68:d9:5b:b7:c6:f4:ad:08:47:bc: f4:9f:82:db:17:00:54:84:fd:2d:f1:b0:c5:93:c1: ef:e9:67:32:e2:de:f2:65:6c:cf:b8:38:3d:99:2a: 41:4a:ea:ff:27:b5:59:ef:af:0b:36:a1:6b:3d:09: 5a:cb:0d:7d:2b:5e:33:12:aa:9b:98:89:95:97:91: ba:0c:45:94:83:04:be:db:f3:56:37:33:2e:d6:ca: e4:cd:56:2a:68:5f:34:6b:27:70:6a:cb:43:72:f7: 3d:ab:8b:14:b1:7b:bf:b2:23:90:0c:06:85:74:a4: 8d:27:11:dd:41:fa:94:85:bc:fa:af:18:61:69:6e: 18:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E9:FB:EE:CE:14:5F:3F:85:54:EB:77:CA:BD:33:B5:4C:46:A1:48:75 X509v3 Authority Key Identifier: keyid:8B:26:64:58:C7:DE:FC:F6:92:6D:CD:F4:53:C8:4A:1D:42:E8:D9:89 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/99e3b1d8-bf19-46e3-b609-0d160988dac8/0/8B266458C7DEFCF6926DCDF453C84A1D42E8D989.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8B266458C7DEFCF6926DCDF453C84A1D42E8D989.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/99e3b1d8-bf19-46e3-b609-0d160988dac8/0/8B266458C7DEFCF6926DCDF453C84A1D42E8D989.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6a:a3:0f:33:ec:75:dd:46:62:50:93:6c:78:bd:01:af:42:b3: a8:3a:87:3f:66:f6:6f:38:ff:12:99:70:08:6f:a6:21:7b:76: 36:27:bc:b1:e3:63:e4:be:42:a3:62:9c:f8:a9:59:70:54:24: f9:e3:4f:eb:db:d2:74:bc:7b:90:f1:ab:93:3a:0a:47:90:41: 17:ba:39:00:f9:9d:33:89:3f:30:03:3f:78:f0:b1:0a:46:fe: e1:7d:20:24:62:00:4f:7f:d8:fc:99:a6:77:60:c5:17:e7:d6: b1:67:5a:74:ad:6a:95:ac:db:75:37:af:b6:0d:02:ed:df:3e: 1f:30:c3:62:8b:70:50:6b:de:8d:74:4c:b1:a9:07:1a:96:b6: 2b:2e:07:b2:67:0d:50:bb:ac:62:d2:43:3e:92:62:a3:17:04: c0:5e:45:e3:fb:15:a2:0e:c5:bf:85:39:e4:e7:85:9c:57:69: da:8c:a2:27:d7:0b:bb:61:d5:ab:5c:3c:19:ea:57:5a:bb:c2: f9:f5:51:3f:23:2e:9a:60:b5:9e:1f:79:19:06:34:e8:b4:30: f6:b9:eb:3f:72:d3:23:84:b0:4a:28:76:e6:d1:c7:0e:80:b6: 41:ae:2a:e3:e4:ed:5f:32:af:b9:52:c8:89:77:fc:33:8f:8d: fb:51:60:e5 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUbez4EVvhHDX/PcHLMFf3VNcT2pcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEIyNjY0NThDN0RFRkNGNjkyNkRDREY0NTNDODRBMUQ0 MkU4RDk4OTAeFw0yNTA2MjgxOTQ2MjNaFw0yNTA3MDIwNDAxMjNaMDMxMTAvBgNV BAMTKEU5RkJFRUNFMTQ1RjNGODU1NEVCNzdDQUJEMzNCNTRDNDZBMTQ4NzUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDWMbyG+EinDV9TR9u1AWmQ775R 4VZELe7qqp8CQEH2R3vWy+uhHrJWupLP1j5Kccz4346l/roteBhonnROGbBh2fjd nnQck34rcWY+ruGSBi0+rgjjmY+Effj0rnBsn9fBdtvQfqjlz1afCXyuk6ItIdOo ZJwcdiztTYWkaNlbt8b0rQhHvPSfgtsXAFSE/S3xsMWTwe/pZzLi3vJlbM+4OD2Z KkFK6v8ntVnvrws2oWs9CVrLDX0rXjMSqpuYiZWXkboMRZSDBL7b81Y3My7WyuTN VipoXzRrJ3Bqy0Ny9z2rixSxe7+yI5AMBoV0pI0nEd1B+pSFvPqvGGFpbhiPAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU6fvuzhRfP4VU63fKvTO1TEahSHUwHwYDVR0j BBgwFoAUiyZkWMfe/PaSbc30U8hKHULo2YkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 OWUzYjFkOC1iZjE5LTQ2ZTMtYjYwOS0wZDE2MDk4OGRhYzgvMC84QjI2NjQ1OEM3 REVGQ0Y2OTI2RENERjQ1M0M4NEExRDQyRThEOTg5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOEIyNjY0NThDN0RFRkNGNjkyNkRDREY0NTNDODRBMUQ0MkU4 RDk4OS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOTllM2IxZDgtYmYxOS00NmUzLWI2 MDktMGQxNjA5ODhkYWM4LzAvOEIyNjY0NThDN0RFRkNGNjkyNkRDREY0NTNDODRB MUQ0MkU4RDk4OS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGqjDzPsdd1GYlCTbHi9Aa9Cs6g6hz9m9m84 /xKZcAhvpiF7djYnvLHjY+S+QqNinPipWXBUJPnjT+vb0nS8e5Dxq5M6CkeQQRe6 OQD5nTOJPzADP3jwsQpG/uF9ICRiAE9/2PyZpndgxRfn1rFnWnStapWs23U3r7YN Au3fPh8ww2KLcFBr3o10TLGpBxqWtisuB7JnDVC7rGLSQz6SYqMXBMBeReP7FaIO xb+FOeTnhZxXadqMoifXC7th1atcPBnqV1q7wvn1UT8jLppgtZ4feRkGNOi0MPa5 6z9y0yOEsEoodubRxw6AtkGuKuPk7V8yr7lSyIl3/DOPjftRYOU= -----END CERTIFICATE-----Generated at Mon Jun 30 13:29:04 2025 by rpki-client