$ rpki-client -vvf repo-rpki.idnic.net/repo/a82db9d3-d6eb-4d6b-9a24-feeb21aa8f53/0/8BE281D2F4ED4091746FDA568A4296F1171589E8.mft File: 8BE281D2F4ED4091746FDA568A4296F1171589E8.mft (raw, json) Hash identifier: 5rAEkdQfak2Tk3+8bpJNWjL5RZiP0Gus/9MLqqTsJuM= Subject key identifier: FE:66:0C:4D:DD:4B:87:BA:A6:97:5E:BE:8B:C6:1D:09:46:07:50:FD Authority key identifier: 8B:E2:81:D2:F4:ED:40:91:74:6F:DA:56:8A:42:96:F1:17:15:89:E8 Certificate issuer: /CN=8BE281D2F4ED4091746FDA568A4296F1171589E8 Certificate serial: 2D804525511542951CDF6A9176DFBE16BA67EDAB Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8BE281D2F4ED4091746FDA568A4296F1171589E8.cer Subject info access: rsync://repo-rpki.idnic.net/repo/a82db9d3-d6eb-4d6b-9a24-feeb21aa8f53/0/8BE281D2F4ED4091746FDA568A4296F1171589E8.mft Manifest number: 0500 Signing time: Sat 23 Aug 2025 03:30:38 +0000 Manifest this update: Sat 23 Aug 2025 03:25:38 +0000 Manifest next update: Tue 26 Aug 2025 03:31:38 +0000 Files and hashes: 1: 3130332e3133342e38372e302f32342d3234203d3e203538333639.roa (hash: JnMoHtL2uw/1X+XpxI+WJ5aRYCDoJDTU7TkrgplgZrw=) 2: 8BE281D2F4ED4091746FDA568A4296F1171589E8.crl (hash: KY0hvfbaaq+mbfWTjqbx7rzKikF6usW3b5xad7+lSQo=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/a82db9d3-d6eb-4d6b-9a24-feeb21aa8f53/0/8BE281D2F4ED4091746FDA568A4296F1171589E8.crl rsync://repo-rpki.idnic.net/repo/a82db9d3-d6eb-4d6b-9a24-feeb21aa8f53/0/8BE281D2F4ED4091746FDA568A4296F1171589E8.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8BE281D2F4ED4091746FDA568A4296F1171589E8.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 26 Aug 2025 03:31:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2d:80:45:25:51:15:42:95:1c:df:6a:91:76:df:be:16:ba:67:ed:ab Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8BE281D2F4ED4091746FDA568A4296F1171589E8 Validity Not Before: Aug 23 03:25:38 2025 GMT Not After : Aug 26 03:31:38 2025 GMT Subject: CN=FE660C4DDD4B87BAA6975EBE8BC61D09460750FD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:68:d3:2f:85:f6:5f:07:60:b1:64:65:17:8f: c6:3e:ba:1a:1a:8d:c9:1a:a4:e4:a9:38:e8:37:0b: 3b:05:fe:cb:f5:b3:9a:a7:7a:78:be:dc:87:b1:90: 11:c9:9d:8f:38:fa:7e:c5:e6:45:84:40:39:b1:cb: 18:b1:bf:15:ea:ff:86:1b:b0:bc:eb:5b:54:f1:3f: 9f:3c:96:d0:fc:59:6c:1a:2e:fa:da:36:38:3d:62: 46:fc:80:fc:42:90:00:71:08:53:4a:f4:5d:48:b3: a2:57:fc:e9:70:b3:c6:a4:b6:39:5c:e9:16:d8:9c: 7c:46:55:ad:b3:b3:98:46:a0:71:c3:75:4b:47:51: cf:a0:be:f6:ee:a6:5c:a0:ac:12:06:0b:19:50:c6: 4c:7a:42:7c:8e:74:87:c9:14:f9:f9:fe:fd:44:29: a7:68:5e:02:12:6f:19:11:31:f4:b4:a4:43:30:ff: d5:b0:7f:60:02:d6:21:1d:99:3e:3b:8c:44:fa:ed: 81:e6:08:66:86:79:f1:b5:21:c2:c9:1c:59:cb:27: 0f:8d:70:2d:2c:77:1a:39:92:a5:b6:f6:84:fb:69: b4:f1:9e:6c:fc:c4:a0:33:38:70:30:49:45:85:6a: df:6e:44:32:53:29:14:34:01:af:5a:c9:01:b8:62: fd:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FE:66:0C:4D:DD:4B:87:BA:A6:97:5E:BE:8B:C6:1D:09:46:07:50:FD X509v3 Authority Key Identifier: keyid:8B:E2:81:D2:F4:ED:40:91:74:6F:DA:56:8A:42:96:F1:17:15:89:E8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/a82db9d3-d6eb-4d6b-9a24-feeb21aa8f53/0/8BE281D2F4ED4091746FDA568A4296F1171589E8.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8BE281D2F4ED4091746FDA568A4296F1171589E8.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a82db9d3-d6eb-4d6b-9a24-feeb21aa8f53/0/8BE281D2F4ED4091746FDA568A4296F1171589E8.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 61:06:90:2a:4f:48:b7:7d:b4:cc:37:5f:3a:51:13:9f:57:0a: 0c:79:fd:06:59:25:54:45:0a:93:84:cb:4a:a2:8d:c2:18:41: ad:a8:3f:17:88:b5:84:88:70:a9:91:d8:df:a8:dd:ed:cc:14: 03:45:61:03:49:ae:ee:6e:ad:2f:c9:75:bd:0d:55:42:f1:46: ee:dd:78:fb:62:87:f8:94:9c:e1:8e:a8:ba:b4:51:79:93:8d: 8b:c4:3e:54:e4:4e:6e:02:e0:5e:9a:3d:e8:f4:62:d1:22:26: 85:d3:b5:bc:f9:f1:c6:31:82:7e:0f:4e:f7:f7:16:16:f7:d9: b3:73:e4:17:ff:77:ef:67:d0:9a:04:90:16:9a:1e:9c:bb:bc: 7b:63:1e:d9:ef:9a:94:c2:03:fc:ae:e4:47:7e:d3:5c:fd:98: 10:7a:74:df:ce:fb:e3:a9:cc:2c:39:56:34:5b:ab:05:6f:a4: a0:c6:3a:9b:cb:a9:16:42:d1:09:19:c8:37:2a:c2:55:3c:74: 01:4e:5a:2a:0f:49:66:b4:9b:2a:02:99:66:92:07:e1:a2:21: eb:a2:d8:2f:18:bd:55:fe:a8:06:81:8c:4a:51:5c:5b:a4:48: 50:14:e4:05:54:6a:de:c0:8b:86:5a:d1:89:1c:29:82:ef:0d: c3:13:d2:0e -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIULYBFJVEVQpUc32qRdt++Frpn7aswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEJFMjgxRDJGNEVENDA5MTc0NkZEQTU2OEE0Mjk2RjEx NzE1ODlFODAeFw0yNTA4MjMwMzI1MzhaFw0yNTA4MjYwMzMxMzhaMDMxMTAvBgNV BAMTKEZFNjYwQzREREQ0Qjg3QkFBNjk3NUVCRThCQzYxRDA5NDYwNzUwRkQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCvaNMvhfZfB2CxZGUXj8Y+uhoa jckapOSpOOg3CzsF/sv1s5qneni+3IexkBHJnY84+n7F5kWEQDmxyxixvxXq/4Yb sLzrW1TxP588ltD8WWwaLvraNjg9Ykb8gPxCkABxCFNK9F1Is6JX/Olws8aktjlc 6RbYnHxGVa2zs5hGoHHDdUtHUc+gvvbuplygrBIGCxlQxkx6QnyOdIfJFPn5/v1E KadoXgISbxkRMfS0pEMw/9Wwf2AC1iEdmT47jET67YHmCGaGefG1IcLJHFnLJw+N cC0sdxo5kqW29oT7abTxnmz8xKAzOHAwSUWFat9uRDJTKRQ0Aa9ayQG4Yv25AgMB AAGjggI8MIICODAdBgNVHQ4EFgQU/mYMTd1Lh7qml16+i8YdCUYHUP0wHwYDVR0j BBgwFoAUi+KB0vTtQJF0b9pWikKW8RcViegwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h ODJkYjlkMy1kNmViLTRkNmItOWEyNC1mZWViMjFhYThmNTMvMC84QkUyODFEMkY0 RUQ0MDkxNzQ2RkRBNTY4QTQyOTZGMTE3MTU4OUU4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOEJFMjgxRDJGNEVENDA5MTc0NkZEQTU2OEE0Mjk2RjExNzE1 ODlFOC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYTgyZGI5ZDMtZDZlYi00ZDZiLTlh MjQtZmVlYjIxYWE4ZjUzLzAvOEJFMjgxRDJGNEVENDA5MTc0NkZEQTU2OEE0Mjk2 RjExNzE1ODlFOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGEGkCpPSLd9tMw3XzpRE59XCgx5/QZZJVRF CpOEy0qijcIYQa2oPxeItYSIcKmR2N+o3e3MFANFYQNJru5urS/Jdb0NVULxRu7d ePtih/iUnOGOqLq0UXmTjYvEPlTkTm4C4F6aPej0YtEiJoXTtbz58cYxgn4PTvf3 Fhb32bNz5Bf/d+9n0JoEkBaaHpy7vHtjHtnvmpTCA/yu5Ed+01z9mBB6dN/O++Op zCw5VjRbqwVvpKDGOpvLqRZC0QkZyDcqwlU8dAFOWioPSWa0myoCmWaSB+GiIeui 2C8YvVX+qAaBjEpRXFukSFAU5AVUat7Ai4Za0YkcKYLvDcMT0g4= -----END CERTIFICATE-----Generated at Sat Aug 23 10:36:04 2025 by rpki-client