$ rpki-client -vvf repo-rpki.idnic.net/repo/a679824f-4e08-4970-bba6-27b4726ca580/0/8B7B648E54ABC4F43564B6B7D8EC6CA25EB6C65C.mft File: 8B7B648E54ABC4F43564B6B7D8EC6CA25EB6C65C.mft (raw, json) Hash identifier: Qr1A+1wlqGXNhj2fV1A8i3N5DKKuemKYPbb/1jemV2M= Subject key identifier: 0D:62:2D:ED:DB:2C:AF:FB:BD:27:F8:7E:3D:B7:52:F7:B4:61:18:16 Authority key identifier: 8B:7B:64:8E:54:AB:C4:F4:35:64:B6:B7:D8:EC:6C:A2:5E:B6:C6:5C Certificate issuer: /CN=8B7B648E54ABC4F43564B6B7D8EC6CA25EB6C65C Certificate serial: 1A77FA0DA346A1362653B65406042CF31E1AE273 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8B7B648E54ABC4F43564B6B7D8EC6CA25EB6C65C.cer Subject info access: rsync://repo-rpki.idnic.net/repo/a679824f-4e08-4970-bba6-27b4726ca580/0/8B7B648E54ABC4F43564B6B7D8EC6CA25EB6C65C.mft Manifest number: 01F3 Signing time: Sun 29 Jun 2025 09:20:45 +0000 Manifest this update: Sun 29 Jun 2025 09:15:45 +0000 Manifest next update: Wed 02 Jul 2025 18:05:45 +0000 Files and hashes: 1: 3130332e3138362e36302e302f32332d3234203d3e20313439363932.roa (hash: D3mhXulAOJ2gHffXQf0w0aMiyDfxmDOfLqbB+xIObN4=) 2: 8B7B648E54ABC4F43564B6B7D8EC6CA25EB6C65C.crl (hash: G53IPJObNHDfsGNhKdWrtuxaakUC+7c3qZ33cvsgn4k=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/a679824f-4e08-4970-bba6-27b4726ca580/0/8B7B648E54ABC4F43564B6B7D8EC6CA25EB6C65C.crl rsync://repo-rpki.idnic.net/repo/a679824f-4e08-4970-bba6-27b4726ca580/0/8B7B648E54ABC4F43564B6B7D8EC6CA25EB6C65C.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8B7B648E54ABC4F43564B6B7D8EC6CA25EB6C65C.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 02 Jul 2025 07:23:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1a:77:fa:0d:a3:46:a1:36:26:53:b6:54:06:04:2c:f3:1e:1a:e2:73 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8B7B648E54ABC4F43564B6B7D8EC6CA25EB6C65C Validity Not Before: Jun 29 09:15:45 2025 GMT Not After : Jul 2 18:05:45 2025 GMT Subject: CN=0D622DEDDB2CAFFBBD27F87E3DB752F7B4611816 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:ee:af:fe:27:ef:96:9b:87:0f:bf:b2:9e:07: 13:94:83:ce:fa:ef:6c:71:7c:45:1c:3a:3c:05:cb: 23:f4:67:f3:03:a8:80:76:e4:25:d6:a1:11:d7:7b: 14:7b:37:52:50:36:d2:3e:99:fd:27:71:c9:85:63: 86:d2:b9:8b:2c:80:9f:60:f8:04:24:53:c1:c7:9e: f7:16:ad:da:49:3a:ec:29:9f:e2:0e:54:e1:ed:63: 81:32:6c:c4:e4:d2:5a:5e:d3:01:67:d9:22:a5:58: 2a:ed:48:fc:e3:a6:a9:a9:60:82:97:92:e6:f5:3d: 25:5c:34:3e:6c:6c:93:cb:31:85:e9:a0:6d:d8:89: bd:8a:da:0a:eb:d2:3b:4b:bd:1d:9b:e2:c2:fd:75: 42:06:31:81:bb:d5:d9:cc:bb:b2:46:b8:13:21:9d: f7:09:9b:04:3b:63:d6:56:ad:b3:2d:b4:73:81:75: db:95:e6:a2:f4:7c:5c:92:41:05:87:64:e6:26:64: 4b:8e:92:66:d0:83:82:6c:3c:ee:9b:eb:b7:67:3b: 01:0a:8c:18:24:51:19:77:47:2c:2e:03:fb:15:33: 2b:51:85:8f:40:aa:8d:ad:5a:c5:20:fb:00:e8:2d: 8a:65:61:22:f1:1b:07:2b:52:13:fd:33:c3:4f:db: f3:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0D:62:2D:ED:DB:2C:AF:FB:BD:27:F8:7E:3D:B7:52:F7:B4:61:18:16 X509v3 Authority Key Identifier: keyid:8B:7B:64:8E:54:AB:C4:F4:35:64:B6:B7:D8:EC:6C:A2:5E:B6:C6:5C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/a679824f-4e08-4970-bba6-27b4726ca580/0/8B7B648E54ABC4F43564B6B7D8EC6CA25EB6C65C.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8B7B648E54ABC4F43564B6B7D8EC6CA25EB6C65C.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a679824f-4e08-4970-bba6-27b4726ca580/0/8B7B648E54ABC4F43564B6B7D8EC6CA25EB6C65C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3f:f6:ca:fe:60:fb:81:c9:70:b0:b8:06:06:8d:21:38:01:cf: b3:06:a4:15:b2:91:a0:85:ac:01:3a:18:2e:ae:ce:d9:88:48: 6b:9a:56:76:ad:99:3a:66:f2:28:d2:d9:80:1d:db:1b:89:ad: af:09:68:b7:be:e3:da:99:8f:07:78:60:ce:fe:a1:2c:e4:e4: 44:6c:7c:1e:21:78:7c:28:1b:0c:15:1c:93:4f:62:a7:03:17: 31:10:93:c0:e9:19:9a:2d:c3:21:e5:05:5a:75:27:25:94:ce: 0f:fa:7b:01:83:09:fd:83:d2:0f:d0:dc:c4:1b:8e:c0:e8:1e: bc:ae:6f:e1:35:d0:1f:3d:7a:cc:11:86:59:00:ca:4e:d4:aa: dd:59:d3:3e:34:ae:77:87:7a:fd:f9:f8:e8:35:c2:12:91:d2: 17:4e:13:80:a3:66:6f:27:80:75:ec:35:04:fc:83:68:71:ca: f9:6b:15:30:10:58:18:83:f9:98:3e:7c:46:e9:fa:58:53:69: 53:96:8f:4f:33:90:5b:6b:ea:12:90:69:0d:12:f2:12:94:51: 6c:a8:e4:57:3c:b4:b9:79:cc:df:16:7b:f3:64:b6:42:ca:65: 00:64:01:78:07:b9:4b:f9:eb:ed:36:02:79:35:7e:6a:da:fe: 55:7c:eb:b8 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUGnf6DaNGoTYmU7ZUBgQs8x4a4nMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEI3QjY0OEU1NEFCQzRGNDM1NjRCNkI3RDhFQzZDQTI1 RUI2QzY1QzAeFw0yNTA2MjkwOTE1NDVaFw0yNTA3MDIxODA1NDVaMDMxMTAvBgNV BAMTKDBENjIyREVEREIyQ0FGRkJCRDI3Rjg3RTNEQjc1MkY3QjQ2MTE4MTYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDK7q/+J++Wm4cPv7KeBxOUg876 72xxfEUcOjwFyyP0Z/MDqIB25CXWoRHXexR7N1JQNtI+mf0nccmFY4bSuYssgJ9g +AQkU8HHnvcWrdpJOuwpn+IOVOHtY4EybMTk0lpe0wFn2SKlWCrtSPzjpqmpYIKX kub1PSVcND5sbJPLMYXpoG3Yib2K2grr0jtLvR2b4sL9dUIGMYG71dnMu7JGuBMh nfcJmwQ7Y9ZWrbMttHOBdduV5qL0fFySQQWHZOYmZEuOkmbQg4JsPO6b67dnOwEK jBgkURl3RywuA/sVMytRhY9Aqo2tWsUg+wDoLYplYSLxGwcrUhP9M8NP2/OhAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUDWIt7dssr/u9J/h+PbdS97RhGBYwHwYDVR0j BBgwFoAUi3tkjlSrxPQ1ZLa32Oxsol62xlwwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h Njc5ODI0Zi00ZTA4LTQ5NzAtYmJhNi0yN2I0NzI2Y2E1ODAvMC84QjdCNjQ4RTU0 QUJDNEY0MzU2NEI2QjdEOEVDNkNBMjVFQjZDNjVDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOEI3QjY0OEU1NEFCQzRGNDM1NjRCNkI3RDhFQzZDQTI1RUI2 QzY1Qy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYTY3OTgyNGYtNGUwOC00OTcwLWJi YTYtMjdiNDcyNmNhNTgwLzAvOEI3QjY0OEU1NEFCQzRGNDM1NjRCNkI3RDhFQzZD QTI1RUI2QzY1Qy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAD/2yv5g+4HJcLC4BgaNITgBz7MGpBWykaCF rAE6GC6uztmISGuaVnatmTpm8ijS2YAd2xuJra8JaLe+49qZjwd4YM7+oSzk5ERs fB4heHwoGwwVHJNPYqcDFzEQk8DpGZotwyHlBVp1JyWUzg/6ewGDCf2D0g/Q3MQb jsDoHryub+E10B89eswRhlkAyk7Uqt1Z0z40rneHev35+Og1whKR0hdOE4CjZm8n gHXsNQT8g2hxyvlrFTAQWBiD+Zg+fEbp+lhTaVOWj08zkFtr6hKQaQ0S8hKUUWyo 5Fc8tLl5zN8We/NktkLKZQBkAXgHuUv56+02Ank1fmra/lV867g= -----END CERTIFICATE-----Generated at Sun Jun 29 18:13:02 2025 by rpki-client