$ rpki-client -vvf repo-rpki.idnic.net/repo/de6a57c5-df73-43f5-865d-6bd248c22fba/0/8B0DE141ACB811E0FE65085CF2339EE4C7EE05A2.mft File: 8B0DE141ACB811E0FE65085CF2339EE4C7EE05A2.mft (raw, json) Hash identifier: cJrxUfpq+ASGqItG0a0wHk3x5NgZ9IbvStrTWXb76lE= Subject key identifier: 8E:E9:52:DF:CE:03:30:52:3B:AB:79:AE:EF:38:51:6B:0E:1A:E7:A1 Authority key identifier: 8B:0D:E1:41:AC:B8:11:E0:FE:65:08:5C:F2:33:9E:E4:C7:EE:05:A2 Certificate issuer: /CN=8B0DE141ACB811E0FE65085CF2339EE4C7EE05A2 Certificate serial: 37958ED0A6D6A2A6A3A44668ED6943ECA940B4FE Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8B0DE141ACB811E0FE65085CF2339EE4C7EE05A2.cer Subject info access: rsync://repo-rpki.idnic.net/repo/de6a57c5-df73-43f5-865d-6bd248c22fba/0/8B0DE141ACB811E0FE65085CF2339EE4C7EE05A2.mft Manifest number: 01FE Signing time: Thu 21 Aug 2025 10:52:06 +0000 Manifest this update: Thu 21 Aug 2025 10:47:06 +0000 Manifest next update: Sun 24 Aug 2025 21:46:06 +0000 Files and hashes: 1: 3130332e3138342e35362e302f32342d3234203d3e20313439363637.roa (hash: wL4jyeE9OG3mCA6Twfdl1VaSzPxamD0EwTijKmcLq7s=) 2: 8B0DE141ACB811E0FE65085CF2339EE4C7EE05A2.crl (hash: fZkFaklY6F+CtctCCclKNGvVH/MSEfAVmCSG0qPPJjM=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/de6a57c5-df73-43f5-865d-6bd248c22fba/0/8B0DE141ACB811E0FE65085CF2339EE4C7EE05A2.crl rsync://repo-rpki.idnic.net/repo/de6a57c5-df73-43f5-865d-6bd248c22fba/0/8B0DE141ACB811E0FE65085CF2339EE4C7EE05A2.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8B0DE141ACB811E0FE65085CF2339EE4C7EE05A2.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 24 Aug 2025 21:46:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 37:95:8e:d0:a6:d6:a2:a6:a3:a4:46:68:ed:69:43:ec:a9:40:b4:fe Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8B0DE141ACB811E0FE65085CF2339EE4C7EE05A2 Validity Not Before: Aug 21 10:47:06 2025 GMT Not After : Aug 24 21:46:06 2025 GMT Subject: CN=8EE952DFCE0330523BAB79AEEF38516B0E1AE7A1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:03:27:a1:44:57:54:60:3b:eb:b3:db:ea:dd: 69:e8:49:cc:d3:05:06:e9:98:f1:12:40:38:78:b4: 46:09:77:bd:f7:76:4c:06:84:5c:38:24:fa:ea:64: b7:d2:43:71:fb:11:43:dd:84:53:68:59:33:9d:d1: fe:3c:d6:62:56:b1:5f:82:a1:f7:ad:c5:fc:b5:ad: fe:9f:80:40:68:b5:7f:d2:b5:16:b0:20:a9:13:ed: c3:a9:c3:fc:90:b4:23:5f:b7:3a:83:0c:40:16:d6: e4:0f:b0:15:31:67:fe:7e:63:c5:2f:96:92:d8:a4: d7:43:40:47:fb:c7:3e:d5:d8:fe:57:87:36:21:ca: 3e:cc:a2:2f:1b:c3:5b:53:a7:58:63:4e:ba:0f:c7: ac:ef:e0:39:22:e0:b2:c2:bd:75:50:24:7d:11:b3: f7:f8:fb:82:e0:29:4e:69:5f:0c:67:6b:a8:2c:3a: 75:18:a5:0c:f8:40:ff:77:df:e1:81:4a:71:55:91: ae:b8:38:57:4b:6f:a6:e4:9c:d6:25:1c:83:4c:80: 6d:08:ba:d7:06:64:08:d6:e3:50:b0:ec:2e:46:62: 0c:72:6e:83:32:b1:07:65:e7:65:d5:9d:ba:cb:37: b8:d0:ea:f5:3c:84:7e:06:50:29:25:43:14:19:dc: 5c:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:E9:52:DF:CE:03:30:52:3B:AB:79:AE:EF:38:51:6B:0E:1A:E7:A1 X509v3 Authority Key Identifier: keyid:8B:0D:E1:41:AC:B8:11:E0:FE:65:08:5C:F2:33:9E:E4:C7:EE:05:A2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/de6a57c5-df73-43f5-865d-6bd248c22fba/0/8B0DE141ACB811E0FE65085CF2339EE4C7EE05A2.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8B0DE141ACB811E0FE65085CF2339EE4C7EE05A2.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/de6a57c5-df73-43f5-865d-6bd248c22fba/0/8B0DE141ACB811E0FE65085CF2339EE4C7EE05A2.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 30:4f:09:b9:78:23:bb:86:4a:df:29:dc:af:b8:08:ea:bb:6d: 2c:69:eb:bf:23:d8:e1:f1:01:f5:22:ee:35:82:b2:df:9e:20: 8b:17:b8:31:ec:4e:65:aa:07:17:78:99:33:0b:7e:ed:73:20: f0:a4:1d:d8:30:27:a4:41:4a:63:6c:74:f1:5d:16:7e:ab:61: 4e:e6:08:40:1d:9e:7d:4d:d4:f9:32:ee:f1:86:93:6f:e0:9d: 3e:6e:98:cc:10:5a:e7:9e:64:cf:e7:70:a1:3c:16:98:1b:ed: d6:ba:93:e8:df:46:b2:d7:18:55:a0:a2:2c:b2:44:1b:9b:f5: 21:2d:d3:0e:f0:b9:98:2d:d8:5f:82:f8:f6:54:62:32:8e:d9: 31:08:8b:27:1e:0d:86:4f:4a:07:67:7c:e9:d7:d2:cc:3f:8c: 5c:00:7f:27:ca:87:03:c9:5b:b5:02:ba:fa:12:55:b8:d2:56: 3e:c0:0d:9c:57:13:79:4b:9f:53:be:5e:49:64:f4:1a:cc:16: b1:b0:aa:ca:08:c8:06:ee:f9:b4:64:97:20:dc:e9:6a:f2:ff: 02:8e:d0:4c:18:91:18:97:17:4a:a0:5b:45:0f:93:e6:ea:07: 55:77:46:a2:08:ee:6c:eb:0a:e9:43:34:93:ab:69:78:0e:d7: e0:c9:ad:e1 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUN5WO0KbWoqajpEZo7WlD7KlAtP4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEIwREUxNDFBQ0I4MTFFMEZFNjUwODVDRjIzMzlFRTRD N0VFMDVBMjAeFw0yNTA4MjExMDQ3MDZaFw0yNTA4MjQyMTQ2MDZaMDMxMTAvBgNV BAMTKDhFRTk1MkRGQ0UwMzMwNTIzQkFCNzlBRUVGMzg1MTZCMEUxQUU3QTEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC3AyehRFdUYDvrs9vq3WnoSczT BQbpmPESQDh4tEYJd733dkwGhFw4JPrqZLfSQ3H7EUPdhFNoWTOd0f481mJWsV+C ofetxfy1rf6fgEBotX/StRawIKkT7cOpw/yQtCNftzqDDEAW1uQPsBUxZ/5+Y8Uv lpLYpNdDQEf7xz7V2P5XhzYhyj7Moi8bw1tTp1hjTroPx6zv4Dki4LLCvXVQJH0R s/f4+4LgKU5pXwxna6gsOnUYpQz4QP933+GBSnFVka64OFdLb6bknNYlHINMgG0I utcGZAjW41Cw7C5GYgxyboMysQdl52XVnbrLN7jQ6vU8hH4GUCklQxQZ3FzHAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUjulS384DMFI7q3mu7zhRaw4a56EwHwYDVR0j BBgwFoAUiw3hQay4EeD+ZQhc8jOe5MfuBaIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k ZTZhNTdjNS1kZjczLTQzZjUtODY1ZC02YmQyNDhjMjJmYmEvMC84QjBERTE0MUFD QjgxMUUwRkU2NTA4NUNGMjMzOUVFNEM3RUUwNUEyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOEIwREUxNDFBQ0I4MTFFMEZFNjUwODVDRjIzMzlFRTRDN0VF MDVBMi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZGU2YTU3YzUtZGY3My00M2Y1LTg2 NWQtNmJkMjQ4YzIyZmJhLzAvOEIwREUxNDFBQ0I4MTFFMEZFNjUwODVDRjIzMzlF RTRDN0VFMDVBMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADBPCbl4I7uGSt8p3K+4COq7bSxp678j2OHx AfUi7jWCst+eIIsXuDHsTmWqBxd4mTMLfu1zIPCkHdgwJ6RBSmNsdPFdFn6rYU7m CEAdnn1N1Pky7vGGk2/gnT5umMwQWueeZM/ncKE8Fpgb7da6k+jfRrLXGFWgoiyy RBub9SEt0w7wuZgt2F+C+PZUYjKO2TEIiyceDYZPSgdnfOnX0sw/jFwAfyfKhwPJ W7UCuvoSVbjSVj7ADZxXE3lLn1O+Xklk9BrMFrGwqsoIyAbu+bRklyDc6Wry/wKO 0EwYkRiXF0qgW0UPk+bqB1V3RqII7mzrCulDNJOraXgO1+DJreE= -----END CERTIFICATE-----Generated at Sat Aug 23 12:06:35 2025 by rpki-client