$ rpki-client -vvf repo-rpki.idnic.net/repo/b7b87f6d-29a7-4b4c-81c7-5b4cbdb2cb6a/0/8603B0F726A05AB356D10DB170BD8E27963AFE1A.mft File: 8603B0F726A05AB356D10DB170BD8E27963AFE1A.mft (raw, json) Hash identifier: JX/3831sZ/UWWlf4KatcAz4qoI2N66mny3vaqWHlXMw= Subject key identifier: 30:F3:96:AB:82:29:40:19:49:27:30:D9:EF:E6:B3:A4:45:29:0E:DF Authority key identifier: 86:03:B0:F7:26:A0:5A:B3:56:D1:0D:B1:70:BD:8E:27:96:3A:FE:1A Certificate issuer: /CN=8603B0F726A05AB356D10DB170BD8E27963AFE1A Certificate serial: 1678EB115B0157C44EE7627E1A4E5F6BF1E9E96E Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8603B0F726A05AB356D10DB170BD8E27963AFE1A.cer Subject info access: rsync://repo-rpki.idnic.net/repo/b7b87f6d-29a7-4b4c-81c7-5b4cbdb2cb6a/0/8603B0F726A05AB356D10DB170BD8E27963AFE1A.mft Manifest number: 03EC Signing time: Thu 21 Aug 2025 12:41:58 +0000 Manifest this update: Thu 21 Aug 2025 12:36:58 +0000 Manifest next update: Sun 24 Aug 2025 15:23:58 +0000 Files and hashes: 1: 323430353a633763303a3a2f33322d3332203d3e20313339393738.roa (hash: piwF7+ON2R793sJiaX+4aFfo5D7cOZdp7goWhivyjxE=) 2: 3130332e3134382e31392e302f32342d3234203d3e20313339393738.roa (hash: bezCvX8XgFSa6OMSK27HUjxxwyFifSYbogKsMqbTNHQ=) 3: 8603B0F726A05AB356D10DB170BD8E27963AFE1A.crl (hash: U4vrUQoUkI7qbBuFAtryo/ozH9S8mlUrHDjI8XDM+ao=) 4: 3130332e3134382e31382e302f32342d3234203d3e20313339393738.roa (hash: U5t1gz5Lu8bYdTDoG7TIErUjYPNGo4xQEu5agXugT3k=) 5: 3130332e3134382e31382e302f32332d3233203d3e20313339393738.roa (hash: 4K0py4cnYyh8vI10iLQo1yG8FCXY4pSX4oMXyg6m2pw=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/b7b87f6d-29a7-4b4c-81c7-5b4cbdb2cb6a/0/8603B0F726A05AB356D10DB170BD8E27963AFE1A.crl rsync://repo-rpki.idnic.net/repo/b7b87f6d-29a7-4b4c-81c7-5b4cbdb2cb6a/0/8603B0F726A05AB356D10DB170BD8E27963AFE1A.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8603B0F726A05AB356D10DB170BD8E27963AFE1A.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 24 Aug 2025 15:23:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 16:78:eb:11:5b:01:57:c4:4e:e7:62:7e:1a:4e:5f:6b:f1:e9:e9:6e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8603B0F726A05AB356D10DB170BD8E27963AFE1A Validity Not Before: Aug 21 12:36:58 2025 GMT Not After : Aug 24 15:23:58 2025 GMT Subject: CN=30F396AB82294019492730D9EFE6B3A445290EDF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:8d:f7:54:10:9f:21:e8:f7:76:84:15:08:86: 8b:c0:dd:a6:b0:0f:d2:11:fb:03:1c:46:93:14:9d: 46:4a:76:1b:c6:78:ee:68:cc:95:ca:2e:fc:31:9b: 28:eb:e4:16:fb:cd:33:b2:0e:d5:3b:8e:eb:d2:91: c2:7d:d5:04:90:46:ca:71:20:1b:f4:69:4b:4c:0c: 88:1e:c5:c4:04:f7:81:92:cd:e0:09:1a:74:27:f0: ad:49:71:d8:48:61:45:20:29:e8:34:8d:b0:98:2e: ea:7a:07:2b:b6:e7:4c:b0:59:9d:7b:dc:93:ca:a0: c2:b0:b2:86:4e:da:20:e2:e0:da:fc:62:2f:7d:b5: dd:2c:1d:21:4d:1c:40:32:34:65:20:42:ac:09:4c: 05:da:7e:28:aa:29:02:b7:e3:05:14:44:c1:c6:88: 3f:0e:85:42:93:07:c5:a3:f6:19:df:8c:85:c4:9f: 57:f3:80:51:8e:b2:cc:e0:8b:f3:f1:01:3b:2f:8f: a9:de:52:f2:b5:6e:54:bb:cd:e4:05:f6:2a:22:c4: 21:11:44:6f:3e:15:12:2d:05:e4:24:25:7e:4c:67: 30:d2:26:6a:4a:71:ea:c1:60:0e:80:18:c7:33:dd: 27:84:31:e4:07:23:5d:6e:52:ff:e9:00:06:e0:e5: 7e:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 30:F3:96:AB:82:29:40:19:49:27:30:D9:EF:E6:B3:A4:45:29:0E:DF X509v3 Authority Key Identifier: keyid:86:03:B0:F7:26:A0:5A:B3:56:D1:0D:B1:70:BD:8E:27:96:3A:FE:1A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/b7b87f6d-29a7-4b4c-81c7-5b4cbdb2cb6a/0/8603B0F726A05AB356D10DB170BD8E27963AFE1A.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8603B0F726A05AB356D10DB170BD8E27963AFE1A.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/b7b87f6d-29a7-4b4c-81c7-5b4cbdb2cb6a/0/8603B0F726A05AB356D10DB170BD8E27963AFE1A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4b:fc:c3:fe:66:2d:95:f9:e0:97:aa:6e:3b:5a:18:21:46:f8: 18:28:72:ae:03:66:2a:d1:00:21:0c:f3:44:41:cd:6b:f4:54: 24:f6:b5:09:25:28:42:08:4b:3b:92:eb:04:81:bf:4a:b2:45: e0:35:39:6d:c5:2c:25:e0:a8:35:e5:b4:04:6a:1c:59:8e:ae: 1d:1a:d3:62:c1:01:d8:c7:56:ac:ad:73:96:6f:2c:ae:af:4f: 5a:c8:84:07:10:b9:e1:c2:d8:cd:f3:84:04:32:4b:a6:8f:e7: 23:6a:09:18:90:e1:01:85:89:ec:f2:54:ac:69:ae:41:1d:b5: aa:7c:84:b5:56:0e:1f:02:07:95:ab:77:87:65:84:98:3a:1c: fd:eb:fd:d8:3b:a3:de:da:6e:1a:82:c8:93:a3:8a:2c:95:25: c1:19:1a:67:5d:10:1a:80:47:23:23:d3:bb:f0:d2:c5:c2:c9: 6f:22:87:8b:db:80:7b:9b:51:c6:13:ca:f5:fc:f7:00:99:c6: f5:13:9b:b8:76:4f:18:14:e1:64:96:6f:0c:c1:36:eb:b2:6f: 1e:37:d3:a4:c2:49:bd:0c:40:3b:23:de:f4:cc:6d:bf:b9:b7: e0:bf:96:12:f0:bb:44:23:c1:95:8a:0d:ef:f2:19:9b:f2:8d: 63:7d:e0:ca -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUFnjrEVsBV8RO52J+Gk5fa/Hp6W4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODYwM0IwRjcyNkEwNUFCMzU2RDEwREIxNzBCRDhFMjc5 NjNBRkUxQTAeFw0yNTA4MjExMjM2NThaFw0yNTA4MjQxNTIzNThaMDMxMTAvBgNV BAMTKDMwRjM5NkFCODIyOTQwMTk0OTI3MzBEOUVGRTZCM0E0NDUyOTBFREYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDgjfdUEJ8h6Pd2hBUIhovA3aaw D9IR+wMcRpMUnUZKdhvGeO5ozJXKLvwxmyjr5Bb7zTOyDtU7juvSkcJ91QSQRspx IBv0aUtMDIgexcQE94GSzeAJGnQn8K1JcdhIYUUgKeg0jbCYLup6Byu250ywWZ17 3JPKoMKwsoZO2iDi4Nr8Yi99td0sHSFNHEAyNGUgQqwJTAXafiiqKQK34wUURMHG iD8OhUKTB8Wj9hnfjIXEn1fzgFGOsszgi/PxATsvj6neUvK1blS7zeQF9ioixCER RG8+FRItBeQkJX5MZzDSJmpKcerBYA6AGMcz3SeEMeQHI11uUv/pAAbg5X5RAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUMPOWq4IpQBlJJzDZ7+azpEUpDt8wHwYDVR0j BBgwFoAUhgOw9yagWrNW0Q2xcL2OJ5Y6/howDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i N2I4N2Y2ZC0yOWE3LTRiNGMtODFjNy01YjRjYmRiMmNiNmEvMC84NjAzQjBGNzI2 QTA1QUIzNTZEMTBEQjE3MEJEOEUyNzk2M0FGRTFBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvODYwM0IwRjcyNkEwNUFCMzU2RDEwREIxNzBCRDhFMjc5NjNB RkUxQS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYjdiODdmNmQtMjlhNy00YjRjLTgx YzctNWI0Y2JkYjJjYjZhLzAvODYwM0IwRjcyNkEwNUFCMzU2RDEwREIxNzBCRDhF Mjc5NjNBRkUxQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEv8w/5mLZX54JeqbjtaGCFG+Bgocq4DZirR ACEM80RBzWv0VCT2tQklKEIISzuS6wSBv0qyReA1OW3FLCXgqDXltARqHFmOrh0a 02LBAdjHVqytc5ZvLK6vT1rIhAcQueHC2M3zhAQyS6aP5yNqCRiQ4QGFiezyVKxp rkEdtap8hLVWDh8CB5Wrd4dlhJg6HP3r/dg7o97abhqCyJOjiiyVJcEZGmddEBqA RyMj07vw0sXCyW8ih4vbgHubUcYTyvX89wCZxvUTm7h2TxgU4WSWbwzBNuuybx43 06TCSb0MQDsj3vTMbb+5t+C/lhLwu0QjwZWKDe/yGZvyjWN94Mo= -----END CERTIFICATE-----Generated at Sat Aug 23 15:32:17 2025 by rpki-client