$ rpki-client -vvf repo-rpki.idnic.net/repo/e5b1e57e-a0f1-467f-a46f-55a3157b0d65/0/B8C2A2B1B21164AF8EAEE387C7D9A5D94D4F8308.mft File: B8C2A2B1B21164AF8EAEE387C7D9A5D94D4F8308.mft (raw, json) Hash identifier: 84m/L7K693UxqDOveLGmZ1DHeR5fX/vHHMRbWLTlB6s= Subject key identifier: 94:F2:EC:D4:BF:CC:32:40:8A:EF:57:2F:D6:A9:F0:CA:60:6E:FA:68 Authority key identifier: B8:C2:A2:B1:B2:11:64:AF:8E:AE:E3:87:C7:D9:A5:D9:4D:4F:83:08 Certificate issuer: /CN=B8C2A2B1B21164AF8EAEE387C7D9A5D94D4F8308 Certificate serial: 23282AAA5825471DA6DE8F247BF68DB38B1502AC Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B8C2A2B1B21164AF8EAEE387C7D9A5D94D4F8308.cer Subject info access: rsync://repo-rpki.idnic.net/repo/e5b1e57e-a0f1-467f-a46f-55a3157b0d65/0/B8C2A2B1B21164AF8EAEE387C7D9A5D94D4F8308.mft Manifest number: 01A4 Signing time: Fri 22 Aug 2025 23:41:07 +0000 Manifest this update: Fri 22 Aug 2025 23:36:07 +0000 Manifest next update: Tue 26 Aug 2025 02:01:07 +0000 Files and hashes: 1: 3230322e3135392e35302e302f32332d3234203d3e203435373239.roa (hash: 7LPe2lEj9jSSghBzwzWvEJHD1rdTalK2jKZeyt7h7R0=) 2: 3230322e3135392e39362e302f31392d3234203d3e2039333430.roa (hash: 4CYpX855PsKjE7pRqG0I65N8tDE2yevHm2JcGXCxF84=) 3: 3131372e35342e302e302f31362d3234203d3e2039333430.roa (hash: UieSxZjEvKIMrWcJdH2TDXUustdkDqF4w0J/hh4yLRA=) 4: B8C2A2B1B21164AF8EAEE387C7D9A5D94D4F8308.crl (hash: I5Gem79OdXIKGWHp4AVmtOA5kOQC3DDQeY/zN+pA4rQ=) 5: 3230322e3135392e302e302f31382d3234203d3e2039333430.roa (hash: Juur4GxLWpPp32FXP5B1lQD8F+2wWzZU/lQ5cSimSag=) 6: 3230322e3135332e3232342e302f31392d3234203d3e2039333430.roa (hash: vY8tbOcXriyCtT6FUxDmURMpeDa3xL/alWeAEYVK8DM=) 7: 3230322e35332e3232342e302f31392d3234203d3e2039333430.roa (hash: cxySA+7GoKy0ZBQ953Jz7wXFE+7U1S6vU/NAFozpO4w=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/e5b1e57e-a0f1-467f-a46f-55a3157b0d65/0/B8C2A2B1B21164AF8EAEE387C7D9A5D94D4F8308.crl rsync://repo-rpki.idnic.net/repo/e5b1e57e-a0f1-467f-a46f-55a3157b0d65/0/B8C2A2B1B21164AF8EAEE387C7D9A5D94D4F8308.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B8C2A2B1B21164AF8EAEE387C7D9A5D94D4F8308.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 26 Aug 2025 02:01:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 23:28:2a:aa:58:25:47:1d:a6:de:8f:24:7b:f6:8d:b3:8b:15:02:ac Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B8C2A2B1B21164AF8EAEE387C7D9A5D94D4F8308 Validity Not Before: Aug 22 23:36:07 2025 GMT Not After : Aug 26 02:01:07 2025 GMT Subject: CN=94F2ECD4BFCC32408AEF572FD6A9F0CA606EFA68 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:79:5b:06:24:93:ae:f0:c7:2d:07:23:72:4b: 77:53:64:eb:f4:46:c5:e0:66:a5:21:35:5c:62:49: 59:eb:2e:39:de:d3:06:89:d1:d5:bb:c2:48:c8:d2: 59:92:c9:aa:cd:27:b2:39:e1:70:de:91:1d:bf:cb: 48:51:6c:67:f4:be:c3:0e:13:30:e8:7e:e6:fa:91: 93:d9:62:0a:59:21:6e:87:ed:12:2b:54:ff:37:94: 77:f0:3d:e2:03:a9:54:56:3b:b2:c0:2a:a0:24:78: 7b:c7:e1:c7:b1:a1:37:61:d9:ef:62:2a:81:aa:85: 13:9f:38:4f:f3:6c:a9:47:b1:46:16:58:99:eb:bd: eb:9e:6a:93:1d:6b:6d:26:6e:9a:f1:a7:af:e5:f3: e2:10:6e:d4:09:1c:8b:fe:8f:ca:96:8d:b1:65:d2: b2:30:0a:f1:70:46:b1:fc:7a:9e:8a:e6:3c:d5:db: f1:79:73:0c:b3:de:71:b0:e4:1a:af:f2:47:ef:78: 53:40:66:12:d6:21:fc:a7:a7:48:0a:c9:3c:46:11: 1f:ee:41:a0:3a:38:d4:c0:b2:57:c3:30:0b:a7:4b: 03:3a:dd:5a:84:8d:52:e0:b5:e2:71:14:46:96:b3: 64:64:4e:49:72:c8:a5:24:02:c6:10:65:f3:40:57: dc:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 94:F2:EC:D4:BF:CC:32:40:8A:EF:57:2F:D6:A9:F0:CA:60:6E:FA:68 X509v3 Authority Key Identifier: keyid:B8:C2:A2:B1:B2:11:64:AF:8E:AE:E3:87:C7:D9:A5:D9:4D:4F:83:08 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/e5b1e57e-a0f1-467f-a46f-55a3157b0d65/0/B8C2A2B1B21164AF8EAEE387C7D9A5D94D4F8308.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B8C2A2B1B21164AF8EAEE387C7D9A5D94D4F8308.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e5b1e57e-a0f1-467f-a46f-55a3157b0d65/0/B8C2A2B1B21164AF8EAEE387C7D9A5D94D4F8308.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 39:0a:ca:d3:de:5f:83:74:b5:4a:53:c8:d1:d7:0a:cc:c4:20: 60:ba:6e:5c:93:d8:a4:d5:6b:d3:08:55:f3:e7:ad:c8:5a:5d: f9:89:da:b2:5a:54:3a:5e:74:9a:99:35:7b:54:3b:29:ec:a7: db:84:03:1c:9a:45:0d:ed:e5:29:df:ec:09:1f:1e:17:9f:32: 7b:98:fb:d2:18:d3:33:f2:0e:fd:f9:ae:2b:51:5b:7b:ea:bd: 03:3b:c4:18:54:37:97:5b:3e:fd:79:92:36:50:f1:dc:69:6f: fe:a1:2e:36:ca:30:5e:9e:96:89:7e:2b:30:b4:8e:d1:c0:2e: a9:fc:06:a8:28:fa:cd:6f:69:ca:ac:74:f3:2c:7e:ad:ff:01: d6:38:99:1d:2a:78:10:3e:1b:62:1c:97:34:80:b3:eb:49:dc: 07:13:5c:e6:4d:38:d7:d4:b0:00:5c:bd:ac:ea:c5:be:40:85: 81:5b:ee:dc:ea:0c:7a:e4:73:a5:51:55:d9:10:50:af:c4:10: b4:9f:dc:ab:ff:da:76:0a:25:d4:68:b0:be:74:2b:b0:5d:ae: 67:ef:5c:1c:a8:31:d9:11:b3:e7:9a:b8:96:44:6d:63:2a:5c: 14:54:74:4f:bd:89:02:8a:01:2f:37:38:49:53:45:5c:18:51: 78:c3:80:01 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUIygqqlglRx2m3o8ke/aNs4sVAqwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjhDMkEyQjFCMjExNjRBRjhFQUVFMzg3QzdEOUE1RDk0 RDRGODMwODAeFw0yNTA4MjIyMzM2MDdaFw0yNTA4MjYwMjAxMDdaMDMxMTAvBgNV BAMTKDk0RjJFQ0Q0QkZDQzMyNDA4QUVGNTcyRkQ2QTlGMENBNjA2RUZBNjgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDbeVsGJJOu8MctByNyS3dTZOv0 RsXgZqUhNVxiSVnrLjne0waJ0dW7wkjI0lmSyarNJ7I54XDekR2/y0hRbGf0vsMO EzDofub6kZPZYgpZIW6H7RIrVP83lHfwPeIDqVRWO7LAKqAkeHvH4cexoTdh2e9i KoGqhROfOE/zbKlHsUYWWJnrveueapMda20mbprxp6/l8+IQbtQJHIv+j8qWjbFl 0rIwCvFwRrH8ep6K5jzV2/F5cwyz3nGw5Bqv8kfveFNAZhLWIfynp0gKyTxGER/u QaA6ONTAslfDMAunSwM63VqEjVLgteJxFEaWs2RkTklyyKUkAsYQZfNAV9z1AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUlPLs1L/MMkCK71cv1qnwymBu+mgwHwYDVR0j BBgwFoAUuMKisbIRZK+OruOHx9ml2U1PgwgwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l NWIxZTU3ZS1hMGYxLTQ2N2YtYTQ2Zi01NWEzMTU3YjBkNjUvMC9COEMyQTJCMUIy MTE2NEFGOEVBRUUzODdDN0Q5QTVEOTRENEY4MzA4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQjhDMkEyQjFCMjExNjRBRjhFQUVFMzg3QzdEOUE1RDk0RDRG ODMwOC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZTViMWU1N2UtYTBmMS00NjdmLWE0 NmYtNTVhMzE1N2IwZDY1LzAvQjhDMkEyQjFCMjExNjRBRjhFQUVFMzg3QzdEOUE1 RDk0RDRGODMwOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADkKytPeX4N0tUpTyNHXCszEIGC6blyT2KTV a9MIVfPnrchaXfmJ2rJaVDpedJqZNXtUOynsp9uEAxyaRQ3t5Snf7AkfHhefMnuY +9IY0zPyDv35ritRW3vqvQM7xBhUN5dbPv15kjZQ8dxpb/6hLjbKMF6elol+KzC0 jtHALqn8Bqgo+s1vacqsdPMsfq3/AdY4mR0qeBA+G2IclzSAs+tJ3AcTXOZNONfU sABcvazqxb5AhYFb7tzqDHrkc6VRVdkQUK/EELSf3Kv/2nYKJdRosL50K7Bdrmfv XByoMdkRs+eauJZEbWMqXBRUdE+9iQKKAS83OElTRVwYUXjDgAE= -----END CERTIFICATE-----Generated at Sat Aug 23 10:06:26 2025 by rpki-client