$ rpki-client -vvf repo-rpki.idnic.net/repo/d06347f4-ea26-4d4c-a568-1d863360e421/0/8BE4A701F2924B4BFB8A983A1B0BD5C8863BF3FD.mft File: 8BE4A701F2924B4BFB8A983A1B0BD5C8863BF3FD.mft (raw, json) Hash identifier: 3ISoTaCTfkzPpWS2qJZGsJcos1CovY5a9fmHZm/TgtU= Subject key identifier: C4:B7:A0:93:B6:B9:B1:C8:52:FD:44:B0:97:D7:9C:F0:2B:FC:84:AD Authority key identifier: 8B:E4:A7:01:F2:92:4B:4B:FB:8A:98:3A:1B:0B:D5:C8:86:3B:F3:FD Certificate issuer: /CN=8BE4A701F2924B4BFB8A983A1B0BD5C8863BF3FD Certificate serial: 1B908C9207062DAAC9FF2A2C8F8C79CEC288F186 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8BE4A701F2924B4BFB8A983A1B0BD5C8863BF3FD.cer Subject info access: rsync://repo-rpki.idnic.net/repo/d06347f4-ea26-4d4c-a568-1d863360e421/0/8BE4A701F2924B4BFB8A983A1B0BD5C8863BF3FD.mft Manifest number: 04E4 Signing time: Sun 29 Jun 2025 05:12:06 +0000 Manifest this update: Sun 29 Jun 2025 05:07:06 +0000 Manifest next update: Wed 02 Jul 2025 13:26:06 +0000 Files and hashes: 1: 3130332e3131352e3136342e302f32342d3234203d3e20313338313331.roa (hash: PfYYptDyBdUl4aWzZCjnvFHr6qQWRMjgNV762Lfvv/Q=) 2: 8BE4A701F2924B4BFB8A983A1B0BD5C8863BF3FD.crl (hash: OGEvY3dVCknP/R4OfkLkrJh5TrnGcWo60SLVopq356E=) 3: 3130332e3132312e3132322e302f32342d3234203d3e20313338313331.roa (hash: 9ysblGZ5nRnpD9uRTt/CttmsXFnbP66QhYFS5MHljXI=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/d06347f4-ea26-4d4c-a568-1d863360e421/0/8BE4A701F2924B4BFB8A983A1B0BD5C8863BF3FD.crl rsync://repo-rpki.idnic.net/repo/d06347f4-ea26-4d4c-a568-1d863360e421/0/8BE4A701F2924B4BFB8A983A1B0BD5C8863BF3FD.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8BE4A701F2924B4BFB8A983A1B0BD5C8863BF3FD.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 02 Jul 2025 13:26:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1b:90:8c:92:07:06:2d:aa:c9:ff:2a:2c:8f:8c:79:ce:c2:88:f1:86 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8BE4A701F2924B4BFB8A983A1B0BD5C8863BF3FD Validity Not Before: Jun 29 05:07:06 2025 GMT Not After : Jul 2 13:26:06 2025 GMT Subject: CN=C4B7A093B6B9B1C852FD44B097D79CF02BFC84AD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:7f:f7:93:9a:8a:29:07:70:46:c2:8e:5e:a3: 6d:cd:dc:a1:98:23:c5:c6:8b:89:a0:16:a5:77:18: 88:87:2c:06:74:f3:c3:c9:6c:66:a6:80:08:83:b3: 09:2d:47:cc:27:5d:30:4c:ab:6d:2b:a5:51:e6:33: 02:ed:2c:28:71:98:b1:05:22:30:ee:01:5e:55:97: cf:8f:fa:78:ed:ac:61:b9:a9:ac:c1:3a:96:66:5b: bb:66:8d:26:ab:61:36:71:64:cf:35:4e:f4:4d:a1: ce:59:1b:a1:05:c1:eb:0f:2a:37:89:6d:9e:eb:9a: 54:6e:01:9b:60:3e:ad:8c:4c:3a:ed:62:b4:a5:83: 2a:83:dd:20:ed:b4:ed:77:df:ca:28:d7:d9:f9:80: a8:2b:a1:9b:7b:53:e9:de:6e:08:a2:08:fa:49:38: dd:90:c4:d0:f9:c6:15:c2:7d:cf:b3:0c:65:27:86: d7:72:a0:2e:8b:90:d2:b9:da:e1:b1:5d:61:7c:c3: f5:93:8c:59:be:d8:af:17:00:d1:8e:e3:19:53:25: a6:6f:29:2c:27:3c:f9:cb:7e:8f:d7:84:30:3b:3d: f1:25:09:3b:a9:62:ba:2e:f9:71:95:d9:bd:13:f5: 03:0c:ec:73:eb:f8:14:69:d0:d2:18:2a:04:fd:cb: 89:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:B7:A0:93:B6:B9:B1:C8:52:FD:44:B0:97:D7:9C:F0:2B:FC:84:AD X509v3 Authority Key Identifier: keyid:8B:E4:A7:01:F2:92:4B:4B:FB:8A:98:3A:1B:0B:D5:C8:86:3B:F3:FD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/d06347f4-ea26-4d4c-a568-1d863360e421/0/8BE4A701F2924B4BFB8A983A1B0BD5C8863BF3FD.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8BE4A701F2924B4BFB8A983A1B0BD5C8863BF3FD.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d06347f4-ea26-4d4c-a568-1d863360e421/0/8BE4A701F2924B4BFB8A983A1B0BD5C8863BF3FD.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a8:7f:8f:13:09:83:b4:1e:08:82:79:5c:93:02:2b:f9:88:80: 66:c4:61:62:f6:81:b1:bb:ea:b4:be:37:e9:40:e8:b3:b5:ee: 92:19:6a:70:2b:4b:93:8b:be:2b:ad:05:3f:da:8c:4a:bb:6d: 2e:8d:f0:7d:c7:c1:bf:46:2c:9d:57:ac:50:95:41:28:47:29: 41:1a:6d:16:bb:db:0b:5a:99:a6:35:a6:48:18:82:cb:87:b8: 97:c5:ca:a7:59:94:04:7e:63:85:df:5c:d2:04:75:ff:15:c6: a4:2a:0c:10:98:7f:bd:a3:fb:4e:a9:10:a7:e8:33:fb:53:56: 2f:e3:f7:d1:eb:f9:fe:a6:dd:c2:12:4e:ac:8d:e9:ab:c7:f2: 4f:53:fa:9d:a8:ad:64:7f:66:3e:3a:27:5e:b6:4b:1a:c3:03: 98:d0:84:1a:1b:96:2a:e3:ce:d2:cd:e9:76:72:42:0f:1e:ff: 98:82:78:54:48:19:a3:ef:e2:cb:c1:cb:e0:6f:a1:37:06:33: a9:d6:1c:5a:b5:1e:5d:9c:7d:73:07:9f:5d:6c:16:53:45:00: 13:c7:a5:65:0e:f3:1d:95:88:2e:f8:8c:f9:6e:22:e2:07:b6: 8c:e7:3e:1a:f0:ed:17:99:c6:9d:f1:0b:62:43:51:03:1e:ee: fa:c2:d9:8e -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUG5CMkgcGLarJ/yosj4x5zsKI8YYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEJFNEE3MDFGMjkyNEI0QkZCOEE5ODNBMUIwQkQ1Qzg4 NjNCRjNGRDAeFw0yNTA2MjkwNTA3MDZaFw0yNTA3MDIxMzI2MDZaMDMxMTAvBgNV BAMTKEM0QjdBMDkzQjZCOUIxQzg1MkZENDRCMDk3RDc5Q0YwMkJGQzg0QUQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDEf/eTmoopB3BGwo5eo23N3KGY I8XGi4mgFqV3GIiHLAZ088PJbGamgAiDswktR8wnXTBMq20rpVHmMwLtLChxmLEF IjDuAV5Vl8+P+njtrGG5qazBOpZmW7tmjSarYTZxZM81TvRNoc5ZG6EFwesPKjeJ bZ7rmlRuAZtgPq2MTDrtYrSlgyqD3SDttO1338oo19n5gKgroZt7U+nebgiiCPpJ ON2QxND5xhXCfc+zDGUnhtdyoC6LkNK52uGxXWF8w/WTjFm+2K8XANGO4xlTJaZv KSwnPPnLfo/XhDA7PfElCTupYrou+XGV2b0T9QMM7HPr+BRp0NIYKgT9y4kHAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUxLegk7a5schS/USwl9ec8Cv8hK0wHwYDVR0j BBgwFoAUi+SnAfKSS0v7ipg6GwvVyIY78/0wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k MDYzNDdmNC1lYTI2LTRkNGMtYTU2OC0xZDg2MzM2MGU0MjEvMC84QkU0QTcwMUYy OTI0QjRCRkI4QTk4M0ExQjBCRDVDODg2M0JGM0ZELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOEJFNEE3MDFGMjkyNEI0QkZCOEE5ODNBMUIwQkQ1Qzg4NjNC RjNGRC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZDA2MzQ3ZjQtZWEyNi00ZDRjLWE1 NjgtMWQ4NjMzNjBlNDIxLzAvOEJFNEE3MDFGMjkyNEI0QkZCOEE5ODNBMUIwQkQ1 Qzg4NjNCRjNGRC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKh/jxMJg7QeCIJ5XJMCK/mIgGbEYWL2gbG7 6rS+N+lA6LO17pIZanArS5OLviutBT/ajEq7bS6N8H3Hwb9GLJ1XrFCVQShHKUEa bRa72wtamaY1pkgYgsuHuJfFyqdZlAR+Y4XfXNIEdf8VxqQqDBCYf72j+06pEKfo M/tTVi/j99Hr+f6m3cISTqyN6avH8k9T+p2orWR/Zj46J162SxrDA5jQhBoblirj ztLN6XZyQg8e/5iCeFRIGaPv4svBy+BvoTcGM6nWHFq1Hl2cfXMHn11sFlNFABPH pWUO8x2ViC74jPluIuIHtoznPhrw7ReZxp3xC2JDUQMe7vrC2Y4= -----END CERTIFICATE-----Generated at Mon Jun 30 07:21:54 2025 by rpki-client