$ rpki-client -vvf repo-rpki.idnic.net/repo/99e3b1d8-bf19-46e3-b609-0d160988dac8/0/8B266458C7DEFCF6926DCDF453C84A1D42E8D989.mft File: 8B266458C7DEFCF6926DCDF453C84A1D42E8D989.mft (raw, json) Hash identifier: LoRFy/hgcP+7yY+VzUWBW8CuaH0uarBe0acLRpWeUMA= Subject key identifier: BA:E3:9A:2F:BE:18:00:35:4E:5A:A1:9C:5A:E1:69:8B:2B:D4:77:4A Authority key identifier: 8B:26:64:58:C7:DE:FC:F6:92:6D:CD:F4:53:C8:4A:1D:42:E8:D9:89 Certificate issuer: /CN=8B266458C7DEFCF6926DCDF453C84A1D42E8D989 Certificate serial: 3F47283E597A59E256FB40B3479E9F73CB3AC23A Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8B266458C7DEFCF6926DCDF453C84A1D42E8D989.cer Subject info access: rsync://repo-rpki.idnic.net/repo/99e3b1d8-bf19-46e3-b609-0d160988dac8/0/8B266458C7DEFCF6926DCDF453C84A1D42E8D989.mft Manifest number: 04FD Signing time: Fri 22 Aug 2025 08:41:19 +0000 Manifest this update: Fri 22 Aug 2025 08:36:19 +0000 Manifest next update: Mon 25 Aug 2025 11:30:19 +0000 Files and hashes: 1: 3131392e3233352e3234382e302f32312d3234203d3e203435313436.roa (hash: Gj57tszoKsJPmI3zlTc36/bgp48+5kiHS2p+sUe73DE=) 2: 8B266458C7DEFCF6926DCDF453C84A1D42E8D989.crl (hash: KnV2nlRh+0ymjYxdqgZxMsTImYMX844SbyxxefDNs0g=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/99e3b1d8-bf19-46e3-b609-0d160988dac8/0/8B266458C7DEFCF6926DCDF453C84A1D42E8D989.crl rsync://repo-rpki.idnic.net/repo/99e3b1d8-bf19-46e3-b609-0d160988dac8/0/8B266458C7DEFCF6926DCDF453C84A1D42E8D989.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8B266458C7DEFCF6926DCDF453C84A1D42E8D989.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 25 Aug 2025 11:30:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3f:47:28:3e:59:7a:59:e2:56:fb:40:b3:47:9e:9f:73:cb:3a:c2:3a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8B266458C7DEFCF6926DCDF453C84A1D42E8D989 Validity Not Before: Aug 22 08:36:19 2025 GMT Not After : Aug 25 11:30:19 2025 GMT Subject: CN=BAE39A2FBE1800354E5AA19C5AE1698B2BD4774A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:7c:90:71:35:61:e3:04:ef:fa:7c:3d:22:96: 71:98:8b:a3:23:36:7c:66:66:e9:5a:60:dd:33:a3: 46:d4:b3:71:eb:d6:2a:27:40:77:c2:f3:46:c7:37: 69:0f:9d:98:69:f4:71:00:7e:10:58:35:e8:37:69: 0b:aa:38:5b:a3:41:74:c6:5e:fe:4d:63:88:54:6a: c0:d2:b4:d1:af:75:85:79:ab:07:d7:77:1a:10:ec: 2f:e0:db:28:81:ee:8a:21:a7:45:b3:af:ba:f0:53: bf:1f:52:5a:62:f9:de:52:fb:d2:0a:d7:4c:0e:98: c1:60:67:ef:17:8e:ef:42:fa:c5:ff:f3:e9:45:b4: cf:35:59:9f:ee:1f:6b:75:51:99:ce:7e:08:df:3f: d2:18:6a:9f:cf:5a:be:01:69:c5:01:35:4e:db:8f: d8:04:84:a3:18:11:7c:c2:00:d7:70:50:b3:5b:e2: 95:c5:1d:c2:1c:eb:11:7f:7c:77:72:0e:44:31:4a: a1:1a:95:ec:a8:6f:de:63:6c:c1:bf:05:c9:d4:34: e3:64:57:ff:c0:57:e5:13:e5:70:ae:f5:8d:2b:50: 61:73:fa:a9:41:09:86:d5:8b:a2:7a:cf:ba:b4:9c: af:7d:d4:51:65:be:61:38:70:85:80:d0:74:06:02: 55:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BA:E3:9A:2F:BE:18:00:35:4E:5A:A1:9C:5A:E1:69:8B:2B:D4:77:4A X509v3 Authority Key Identifier: keyid:8B:26:64:58:C7:DE:FC:F6:92:6D:CD:F4:53:C8:4A:1D:42:E8:D9:89 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/99e3b1d8-bf19-46e3-b609-0d160988dac8/0/8B266458C7DEFCF6926DCDF453C84A1D42E8D989.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8B266458C7DEFCF6926DCDF453C84A1D42E8D989.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/99e3b1d8-bf19-46e3-b609-0d160988dac8/0/8B266458C7DEFCF6926DCDF453C84A1D42E8D989.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 65:2e:e0:f9:7e:35:ca:e5:16:64:09:eb:7e:25:8e:81:a4:da: 7b:b8:7d:9a:13:5a:3b:43:c8:6a:27:ca:c6:a5:8d:4b:59:34: 1c:63:20:95:64:b5:2a:fd:3e:cb:00:ef:5d:41:86:1e:02:ae: 2a:6e:20:04:f8:c8:bd:91:2b:66:d3:ba:76:a4:18:85:36:7a: 47:63:c7:f2:a9:5b:00:3e:f3:a0:25:2a:74:48:8a:84:92:8f: 59:d9:fd:3d:2e:ad:db:34:e0:b1:18:7c:22:9a:ba:52:78:88: 17:0f:4b:16:80:bb:15:19:1b:01:62:3e:2f:65:5a:09:b2:f7: f3:38:af:a2:35:4b:f6:8d:8d:e7:58:56:af:75:71:68:73:b6: 08:e7:2f:4f:53:fa:ac:18:f2:cc:30:e7:c4:cd:af:9b:4b:ec: 52:a2:d1:d0:88:4d:70:b3:c7:89:e6:94:80:4b:b3:06:75:e4: 94:c7:b4:d1:6d:77:54:91:75:80:ec:ad:cc:04:2b:85:a1:68: a2:f2:e8:43:6f:74:d2:87:bd:d1:8e:b0:f7:aa:69:8d:95:42: 8f:05:3d:88:61:29:b2:de:f9:b1:5a:2c:69:40:5a:d5:7a:5e: b1:c4:30:a2:f4:be:e8:fe:ae:20:b5:0c:73:cb:4a:48:ba:21: 63:d1:56:8b -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUP0coPll6WeJW+0CzR56fc8s6wjowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEIyNjY0NThDN0RFRkNGNjkyNkRDREY0NTNDODRBMUQ0 MkU4RDk4OTAeFw0yNTA4MjIwODM2MTlaFw0yNTA4MjUxMTMwMTlaMDMxMTAvBgNV BAMTKEJBRTM5QTJGQkUxODAwMzU0RTVBQTE5QzVBRTE2OThCMkJENDc3NEEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCYfJBxNWHjBO/6fD0ilnGYi6Mj NnxmZulaYN0zo0bUs3Hr1ionQHfC80bHN2kPnZhp9HEAfhBYNeg3aQuqOFujQXTG Xv5NY4hUasDStNGvdYV5qwfXdxoQ7C/g2yiB7oohp0Wzr7rwU78fUlpi+d5S+9IK 10wOmMFgZ+8Xju9C+sX/8+lFtM81WZ/uH2t1UZnOfgjfP9IYap/PWr4BacUBNU7b j9gEhKMYEXzCANdwULNb4pXFHcIc6xF/fHdyDkQxSqEaleyob95jbMG/BcnUNONk V//AV+UT5XCu9Y0rUGFz+qlBCYbVi6J6z7q0nK991FFlvmE4cIWA0HQGAlU1AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUuuOaL74YADVOWqGcWuFpiyvUd0owHwYDVR0j BBgwFoAUiyZkWMfe/PaSbc30U8hKHULo2YkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 OWUzYjFkOC1iZjE5LTQ2ZTMtYjYwOS0wZDE2MDk4OGRhYzgvMC84QjI2NjQ1OEM3 REVGQ0Y2OTI2RENERjQ1M0M4NEExRDQyRThEOTg5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOEIyNjY0NThDN0RFRkNGNjkyNkRDREY0NTNDODRBMUQ0MkU4 RDk4OS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOTllM2IxZDgtYmYxOS00NmUzLWI2 MDktMGQxNjA5ODhkYWM4LzAvOEIyNjY0NThDN0RFRkNGNjkyNkRDREY0NTNDODRB MUQ0MkU4RDk4OS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGUu4Pl+NcrlFmQJ634ljoGk2nu4fZoTWjtD yGonysaljUtZNBxjIJVktSr9PssA711Bhh4CripuIAT4yL2RK2bTunakGIU2ekdj x/KpWwA+86AlKnRIioSSj1nZ/T0urds04LEYfCKaulJ4iBcPSxaAuxUZGwFiPi9l Wgmy9/M4r6I1S/aNjedYVq91cWhztgjnL09T+qwY8sww58TNr5tL7FKi0dCITXCz x4nmlIBLswZ15JTHtNFtd1SRdYDsrcwEK4WhaKLy6ENvdNKHvdGOsPeqaY2VQo8F PYhhKbLe+bFaLGlAWtV6XrHEMKL0vuj+riC1DHPLSki6IWPRVos= -----END CERTIFICATE-----Generated at Sat Aug 23 13:01:31 2025 by rpki-client