$ rpki-client -vvf repo-rpki.idnic.net/repo/aba8cf65-d468-4309-9f30-9b9f26d9ce2d/0/8650DEF1B1C89D701C2BB99CA9079EEDBCCC046D.mft File: 8650DEF1B1C89D701C2BB99CA9079EEDBCCC046D.mft (raw, json) Hash identifier: PmInOyGC6yHlhPOO2sLldDoQwzLv+h1jlwdDRxwZ0kM= Subject key identifier: 6C:D4:25:90:E4:0E:F8:53:CA:6C:5A:14:8A:11:60:D4:02:ED:00:04 Authority key identifier: 86:50:DE:F1:B1:C8:9D:70:1C:2B:B9:9C:A9:07:9E:ED:BC:CC:04:6D Certificate issuer: /CN=8650DEF1B1C89D701C2BB99CA9079EEDBCCC046D Certificate serial: 44E3AB1F276B1177FAA75B0A0CE76AEFC42139E5 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8650DEF1B1C89D701C2BB99CA9079EEDBCCC046D.cer Subject info access: rsync://repo-rpki.idnic.net/repo/aba8cf65-d468-4309-9f30-9b9f26d9ce2d/0/8650DEF1B1C89D701C2BB99CA9079EEDBCCC046D.mft Manifest number: 011E Signing time: Thu 21 Aug 2025 01:21:09 +0000 Manifest this update: Thu 21 Aug 2025 01:16:09 +0000 Manifest next update: Sun 24 Aug 2025 09:36:09 +0000 Files and hashes: 1: 3137352e3131312e39392e302f32342d3234203d3e20313338313230.roa (hash: YRDtjy6dGfctkwwFkOVZ0Lht6L/ZRO27ITtMgAgG90E=) 2: 3137352e3131312e39382e302f32342d3234203d3e20313338313230.roa (hash: s8fg30WIA14JUIcMS3F2iWvbH1sPMTJyCo51fPayB6w=) 3: 8650DEF1B1C89D701C2BB99CA9079EEDBCCC046D.crl (hash: GRVV9lugMgqSlNTZbyDQyOX5H3sEIaDKuBDvbi47oXU=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/aba8cf65-d468-4309-9f30-9b9f26d9ce2d/0/8650DEF1B1C89D701C2BB99CA9079EEDBCCC046D.crl rsync://repo-rpki.idnic.net/repo/aba8cf65-d468-4309-9f30-9b9f26d9ce2d/0/8650DEF1B1C89D701C2BB99CA9079EEDBCCC046D.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8650DEF1B1C89D701C2BB99CA9079EEDBCCC046D.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 24 Aug 2025 09:36:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 44:e3:ab:1f:27:6b:11:77:fa:a7:5b:0a:0c:e7:6a:ef:c4:21:39:e5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8650DEF1B1C89D701C2BB99CA9079EEDBCCC046D Validity Not Before: Aug 21 01:16:09 2025 GMT Not After : Aug 24 09:36:09 2025 GMT Subject: CN=6CD42590E40EF853CA6C5A148A1160D402ED0004 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:b3:c1:0a:05:55:a7:82:18:54:2f:35:3f:54: 5c:70:bd:44:a9:f9:1e:2c:2d:80:bf:dd:95:6e:e7: a2:2b:86:5f:7a:6c:e8:11:ee:c0:52:86:b5:c8:4c: 45:eb:1e:2c:a1:4b:a8:d0:5e:b8:1e:ef:d6:07:d8: 57:21:3a:d7:c5:cd:eb:a5:6b:f3:e9:17:d9:32:e6: f5:3a:72:90:89:f7:d4:65:88:0e:b1:a6:29:07:69: 82:3d:33:9d:e3:5d:6b:ed:e5:cd:fa:01:23:02:87: b0:5c:25:cc:8c:7f:c4:cb:a8:dd:88:ad:56:85:61: ed:ed:92:9f:bc:34:96:3e:88:b4:ac:ce:98:f1:64: 59:2e:a4:f0:7d:c9:66:09:68:ce:ca:bc:2b:bf:98: 95:ba:4c:ba:39:b5:6d:e5:d8:4a:75:b9:b3:e7:0b: 06:e7:41:df:95:7c:4e:51:13:df:c4:0b:27:90:99: 91:97:2e:8f:b7:a5:88:b2:dc:f0:ea:ca:1b:c8:45: 5d:94:28:c0:cb:4f:67:9a:8c:08:0f:9c:d1:cd:ae: fc:12:50:b6:da:34:44:10:a2:73:e6:9d:1b:20:59: 81:f4:cd:ed:71:37:0a:47:f2:b6:14:b0:90:81:dd: 68:20:f7:d5:be:4d:c3:fa:08:25:06:e1:85:d1:f3: f2:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6C:D4:25:90:E4:0E:F8:53:CA:6C:5A:14:8A:11:60:D4:02:ED:00:04 X509v3 Authority Key Identifier: keyid:86:50:DE:F1:B1:C8:9D:70:1C:2B:B9:9C:A9:07:9E:ED:BC:CC:04:6D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/aba8cf65-d468-4309-9f30-9b9f26d9ce2d/0/8650DEF1B1C89D701C2BB99CA9079EEDBCCC046D.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8650DEF1B1C89D701C2BB99CA9079EEDBCCC046D.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/aba8cf65-d468-4309-9f30-9b9f26d9ce2d/0/8650DEF1B1C89D701C2BB99CA9079EEDBCCC046D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5a:05:1d:cd:f9:72:84:94:bf:b0:91:5b:c9:e7:f7:47:85:68: ef:bd:65:8c:4f:d8:bb:c3:2b:cd:94:f3:6b:03:22:b3:cf:17: 05:c7:bf:2c:eb:29:c1:b2:2e:d1:67:d7:a1:f0:07:b1:f4:98: 48:fc:1e:5d:1a:59:51:81:c2:2c:fe:98:1b:8b:de:a5:0b:3a: 3a:56:b5:c4:d1:56:f0:ea:d4:02:54:20:85:a1:04:ee:d9:48: 75:b5:04:ba:b3:72:5d:90:0b:d8:31:1c:1e:d1:15:aa:3d:ff: f7:91:d0:d5:f0:2e:bc:26:16:2b:ce:68:d7:15:7a:ce:72:97: 7b:0b:7e:d6:6a:0e:00:81:54:af:63:23:aa:76:75:2c:7d:48: bc:a1:49:df:5d:8b:ec:f7:df:2c:c9:39:60:6e:ac:5b:6f:ba: 31:76:68:a0:9f:1d:0f:d0:46:55:1c:16:be:75:73:c4:c0:1c: 6a:ce:43:b1:f0:ef:db:56:5a:87:b1:a1:46:aa:18:b7:24:de: c9:65:38:b4:f7:03:b3:8e:87:8c:54:fd:8d:51:20:87:54:06: c8:0c:f8:2b:8b:f6:29:cb:2b:59:e3:6b:27:d2:8c:6d:ba:86: c5:d7:f1:a6:00:92:15:47:71:7b:37:c6:49:d5:1e:d9:d9:b2: 0a:f6:3c:5f -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUROOrHydrEXf6p1sKDOdq78QhOeUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODY1MERFRjFCMUM4OUQ3MDFDMkJCOTlDQTkwNzlFRURC Q0NDMDQ2RDAeFw0yNTA4MjEwMTE2MDlaFw0yNTA4MjQwOTM2MDlaMDMxMTAvBgNV BAMTKDZDRDQyNTkwRTQwRUY4NTNDQTZDNUExNDhBMTE2MEQ0MDJFRDAwMDQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCns8EKBVWnghhULzU/VFxwvUSp +R4sLYC/3ZVu56Irhl96bOgR7sBShrXITEXrHiyhS6jQXrge79YH2FchOtfFzeul a/PpF9ky5vU6cpCJ99RliA6xpikHaYI9M53jXWvt5c36ASMCh7BcJcyMf8TLqN2I rVaFYe3tkp+8NJY+iLSszpjxZFkupPB9yWYJaM7KvCu/mJW6TLo5tW3l2Ep1ubPn CwbnQd+VfE5RE9/ECyeQmZGXLo+3pYiy3PDqyhvIRV2UKMDLT2eajAgPnNHNrvwS ULbaNEQQonPmnRsgWYH0ze1xNwpH8rYUsJCB3Wgg99W+TcP6CCUG4YXR8/LhAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUbNQlkOQO+FPKbFoUihFg1ALtAAQwHwYDVR0j BBgwFoAUhlDe8bHInXAcK7mcqQee7bzMBG0wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h YmE4Y2Y2NS1kNDY4LTQzMDktOWYzMC05YjlmMjZkOWNlMmQvMC84NjUwREVGMUIx Qzg5RDcwMUMyQkI5OUNBOTA3OUVFREJDQ0MwNDZELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvODY1MERFRjFCMUM4OUQ3MDFDMkJCOTlDQTkwNzlFRURCQ0ND MDQ2RC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYWJhOGNmNjUtZDQ2OC00MzA5LTlm MzAtOWI5ZjI2ZDljZTJkLzAvODY1MERFRjFCMUM4OUQ3MDFDMkJCOTlDQTkwNzlF RURCQ0NDMDQ2RC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFoFHc35coSUv7CRW8nn90eFaO+9ZYxP2LvD K82U82sDIrPPFwXHvyzrKcGyLtFn16HwB7H0mEj8Hl0aWVGBwiz+mBuL3qULOjpW tcTRVvDq1AJUIIWhBO7ZSHW1BLqzcl2QC9gxHB7RFao9//eR0NXwLrwmFivOaNcV es5yl3sLftZqDgCBVK9jI6p2dSx9SLyhSd9di+z33yzJOWBurFtvujF2aKCfHQ/Q RlUcFr51c8TAHGrOQ7Hw79tWWoexoUaqGLck3sllOLT3A7OOh4xU/Y1RIIdUBsgM +CuL9inLK1njayfSjG26hsXX8aYAkhVHcXs3xknVHtnZsgr2PF8= -----END CERTIFICATE-----Generated at Sat Aug 23 10:36:15 2025 by rpki-client