$ rpki-client -vvf repo-rpki.idnic.net/repo/a679824f-4e08-4970-bba6-27b4726ca580/0/8B7B648E54ABC4F43564B6B7D8EC6CA25EB6C65C.mft File: 8B7B648E54ABC4F43564B6B7D8EC6CA25EB6C65C.mft (raw, json) Hash identifier: OIhgsH+l0OZd25CBttVI0QxgSYzMHNE5eF4znttPOik= Subject key identifier: A3:E2:ED:A6:FD:67:29:5D:4F:64:A0:73:A7:95:26:C2:A5:B0:A6:F3 Authority key identifier: 8B:7B:64:8E:54:AB:C4:F4:35:64:B6:B7:D8:EC:6C:A2:5E:B6:C6:5C Certificate issuer: /CN=8B7B648E54ABC4F43564B6B7D8EC6CA25EB6C65C Certificate serial: 1949E46407413955F706838825992697B5539DB0 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8B7B648E54ABC4F43564B6B7D8EC6CA25EB6C65C.cer Subject info access: rsync://repo-rpki.idnic.net/repo/a679824f-4e08-4970-bba6-27b4726ca580/0/8B7B648E54ABC4F43564B6B7D8EC6CA25EB6C65C.mft Manifest number: 020B Signing time: Thu 21 Aug 2025 17:30:46 +0000 Manifest this update: Thu 21 Aug 2025 17:25:46 +0000 Manifest next update: Sun 24 Aug 2025 17:37:46 +0000 Files and hashes: 1: 8B7B648E54ABC4F43564B6B7D8EC6CA25EB6C65C.crl (hash: OiypQT8GyJWexd+ymtg+zA6Aslw03Nl1TSEw08wK5w4=) 2: 3130332e3138362e36302e302f32332d3234203d3e20313439363932.roa (hash: D3mhXulAOJ2gHffXQf0w0aMiyDfxmDOfLqbB+xIObN4=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/a679824f-4e08-4970-bba6-27b4726ca580/0/8B7B648E54ABC4F43564B6B7D8EC6CA25EB6C65C.crl rsync://repo-rpki.idnic.net/repo/a679824f-4e08-4970-bba6-27b4726ca580/0/8B7B648E54ABC4F43564B6B7D8EC6CA25EB6C65C.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8B7B648E54ABC4F43564B6B7D8EC6CA25EB6C65C.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 24 Aug 2025 17:37:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 19:49:e4:64:07:41:39:55:f7:06:83:88:25:99:26:97:b5:53:9d:b0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8B7B648E54ABC4F43564B6B7D8EC6CA25EB6C65C Validity Not Before: Aug 21 17:25:46 2025 GMT Not After : Aug 24 17:37:46 2025 GMT Subject: CN=A3E2EDA6FD67295D4F64A073A79526C2A5B0A6F3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:a3:da:20:ef:8c:fb:0f:10:00:67:6c:79:ad: 7c:32:2f:79:d9:7c:db:2e:6b:75:a4:8c:f1:ed:3d: 99:7e:10:e6:90:47:71:72:64:77:50:fe:c0:9a:76: 9f:28:40:2b:61:1d:9b:00:11:7e:1c:54:00:bf:6e: 23:6a:02:9f:98:43:e6:ac:61:d4:32:cd:21:c8:72: f4:0a:78:be:64:0e:26:32:71:c8:bf:81:1d:13:1e: 1b:b2:95:af:40:94:a7:06:70:0b:dc:49:fe:6d:78: 4a:8e:7b:9f:a4:0f:d7:fd:10:29:dd:88:98:98:00: 60:a4:4c:39:6a:1d:58:fa:88:19:6f:d7:ec:75:59: f9:ec:18:9f:af:70:48:f9:04:79:7b:f6:5a:74:c3: 14:92:46:47:79:94:29:82:9d:0e:b9:12:26:48:18: 0e:a2:05:cb:ad:ca:ac:6f:b7:30:b5:5c:03:cf:07: 1e:bc:e7:72:ad:ef:f0:53:82:3f:74:86:50:5a:d4: a3:55:2a:b9:9e:72:49:b4:d9:da:1a:c4:9b:8c:46: 50:e0:a7:5c:10:e5:72:05:77:2b:c2:1f:82:df:2c: 85:11:0d:6b:90:b3:aa:07:7e:3f:fd:cb:d7:4d:d1: cd:30:d9:b3:26:6f:4c:fd:79:31:59:31:54:b4:50: 0d:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:E2:ED:A6:FD:67:29:5D:4F:64:A0:73:A7:95:26:C2:A5:B0:A6:F3 X509v3 Authority Key Identifier: keyid:8B:7B:64:8E:54:AB:C4:F4:35:64:B6:B7:D8:EC:6C:A2:5E:B6:C6:5C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/a679824f-4e08-4970-bba6-27b4726ca580/0/8B7B648E54ABC4F43564B6B7D8EC6CA25EB6C65C.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8B7B648E54ABC4F43564B6B7D8EC6CA25EB6C65C.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a679824f-4e08-4970-bba6-27b4726ca580/0/8B7B648E54ABC4F43564B6B7D8EC6CA25EB6C65C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9c:e8:26:7d:07:e8:a2:6c:20:ce:85:a8:53:b0:07:08:6f:bd: a3:ec:64:f0:7b:2b:07:01:3d:43:f0:23:ad:4b:11:e1:6d:cc: 6d:c6:28:8d:aa:7a:2c:69:15:63:b2:02:89:66:3a:b9:37:5b: 7f:64:19:64:6a:05:de:85:4e:b1:69:06:33:33:00:0e:b0:73: e4:ec:52:21:8a:d9:4d:15:b5:6e:e4:8e:a5:58:63:b4:74:3a: 23:6d:88:e6:ba:47:13:eb:6c:25:20:a6:4f:95:10:cb:1b:ce: 9b:44:59:e0:ab:0f:2f:83:aa:5a:6a:5a:1a:b4:27:53:25:2f: 01:00:36:54:bd:cf:38:e0:44:38:79:80:25:37:01:23:75:b5: 29:62:af:db:fc:93:20:df:3a:cf:7a:f9:ea:1d:fd:36:21:e1: d0:e5:26:94:3f:f9:46:3a:fa:68:ed:0e:13:50:d5:c4:64:f4: 94:b4:16:0f:72:b5:e3:3f:16:d0:44:6f:55:6a:a8:2d:92:88: dc:87:98:8c:6b:ad:ff:0c:99:a9:b5:6e:84:0a:a1:7d:bb:28: b3:65:1e:cb:64:cf:de:0e:56:7d:b1:86:cd:75:c8:71:e5:bd: 32:24:45:ad:57:50:9d:59:33:07:0a:ee:f8:f3:2f:2e:0f:5e: ec:f4:eb:25 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUGUnkZAdBOVX3BoOIJZkml7VTnbAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEI3QjY0OEU1NEFCQzRGNDM1NjRCNkI3RDhFQzZDQTI1 RUI2QzY1QzAeFw0yNTA4MjExNzI1NDZaFw0yNTA4MjQxNzM3NDZaMDMxMTAvBgNV BAMTKEEzRTJFREE2RkQ2NzI5NUQ0RjY0QTA3M0E3OTUyNkMyQTVCMEE2RjMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC2o9og74z7DxAAZ2x5rXwyL3nZ fNsua3WkjPHtPZl+EOaQR3FyZHdQ/sCadp8oQCthHZsAEX4cVAC/biNqAp+YQ+as YdQyzSHIcvQKeL5kDiYycci/gR0THhuyla9AlKcGcAvcSf5teEqOe5+kD9f9ECnd iJiYAGCkTDlqHVj6iBlv1+x1WfnsGJ+vcEj5BHl79lp0wxSSRkd5lCmCnQ65EiZI GA6iBcutyqxvtzC1XAPPBx6853Kt7/BTgj90hlBa1KNVKrmeckm02doaxJuMRlDg p1wQ5XIFdyvCH4LfLIURDWuQs6oHfj/9y9dN0c0w2bMmb0z9eTFZMVS0UA0BAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUo+Ltpv1nKV1PZKBzp5UmwqWwpvMwHwYDVR0j BBgwFoAUi3tkjlSrxPQ1ZLa32Oxsol62xlwwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h Njc5ODI0Zi00ZTA4LTQ5NzAtYmJhNi0yN2I0NzI2Y2E1ODAvMC84QjdCNjQ4RTU0 QUJDNEY0MzU2NEI2QjdEOEVDNkNBMjVFQjZDNjVDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOEI3QjY0OEU1NEFCQzRGNDM1NjRCNkI3RDhFQzZDQTI1RUI2 QzY1Qy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYTY3OTgyNGYtNGUwOC00OTcwLWJi YTYtMjdiNDcyNmNhNTgwLzAvOEI3QjY0OEU1NEFCQzRGNDM1NjRCNkI3RDhFQzZD QTI1RUI2QzY1Qy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJzoJn0H6KJsIM6FqFOwBwhvvaPsZPB7KwcB PUPwI61LEeFtzG3GKI2qeixpFWOyAolmOrk3W39kGWRqBd6FTrFpBjMzAA6wc+Ts UiGK2U0VtW7kjqVYY7R0OiNtiOa6RxPrbCUgpk+VEMsbzptEWeCrDy+DqlpqWhq0 J1MlLwEANlS9zzjgRDh5gCU3ASN1tSlir9v8kyDfOs96+eod/TYh4dDlJpQ/+UY6 +mjtDhNQ1cRk9JS0Fg9yteM/FtBEb1VqqC2SiNyHmIxrrf8Mmam1boQKoX27KLNl Hstkz94OVn2xhs11yHHlvTIkRa1XUJ1ZMwcK7vjzLy4PXuz06yU= -----END CERTIFICATE-----Generated at Sat Aug 23 10:07:54 2025 by rpki-client