$ rpki-client -vvf repo-rpki.idnic.net/repo/ebefbf04-41be-48d7-ac00-8a3c498ca9ae/0/B8436ACB7CE8F8C2F57245FFE4E6BA2F52393F4D.mft File: B8436ACB7CE8F8C2F57245FFE4E6BA2F52393F4D.mft (raw, json) Hash identifier: ySyB+2tXOdvyF1U/vY9CwKkVQm9BSDLYrveK9KhZDOQ= Subject key identifier: D1:A3:54:CB:0F:34:22:05:DD:97:9A:E4:1E:3C:39:83:BD:12:8D:8C Authority key identifier: B8:43:6A:CB:7C:E8:F8:C2:F5:72:45:FF:E4:E6:BA:2F:52:39:3F:4D Certificate issuer: /CN=B8436ACB7CE8F8C2F57245FFE4E6BA2F52393F4D Certificate serial: 6CB450716CF739F4C799BC1787F84FAA433D3832 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B8436ACB7CE8F8C2F57245FFE4E6BA2F52393F4D.cer Subject info access: rsync://repo-rpki.idnic.net/repo/ebefbf04-41be-48d7-ac00-8a3c498ca9ae/0/B8436ACB7CE8F8C2F57245FFE4E6BA2F52393F4D.mft Manifest number: 0364 Signing time: Fri 22 Aug 2025 18:41:44 +0000 Manifest this update: Fri 22 Aug 2025 18:36:44 +0000 Manifest next update: Mon 25 Aug 2025 20:55:44 +0000 Files and hashes: 1: 3130332e3135342e32352e302f32342d3234203d3e20313430343738.roa (hash: YWVKY2G+Nvg6caG2vXoeK6bw0DFIbKqpsrtcWOftF08=) 2: 3130332e3135342e32342e302f32342d3234203d3e20313430343738.roa (hash: OPJ+0bfTR2bNFtVvMzF36s5tfMJLI0pXwTypT9BsLeE=) 3: 3130332e3135342e32342e302f32332d3233203d3e20313430343738.roa (hash: s1nmEcWlMGfpOr6XkgkIDAhuvP77SQ9zj5c2Qr3sr/E=) 4: B8436ACB7CE8F8C2F57245FFE4E6BA2F52393F4D.crl (hash: 7ZXBIZf2fpa6x2GYvC8WV/qZjrZEsZlqaPgo2++x/7k=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/ebefbf04-41be-48d7-ac00-8a3c498ca9ae/0/B8436ACB7CE8F8C2F57245FFE4E6BA2F52393F4D.crl rsync://repo-rpki.idnic.net/repo/ebefbf04-41be-48d7-ac00-8a3c498ca9ae/0/B8436ACB7CE8F8C2F57245FFE4E6BA2F52393F4D.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B8436ACB7CE8F8C2F57245FFE4E6BA2F52393F4D.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 25 Aug 2025 20:55:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6c:b4:50:71:6c:f7:39:f4:c7:99:bc:17:87:f8:4f:aa:43:3d:38:32 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B8436ACB7CE8F8C2F57245FFE4E6BA2F52393F4D Validity Not Before: Aug 22 18:36:44 2025 GMT Not After : Aug 25 20:55:44 2025 GMT Subject: CN=D1A354CB0F342205DD979AE41E3C3983BD128D8C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:16:9c:ba:f0:5d:65:f5:f6:52:06:c5:3c:89: 6e:66:75:49:f9:60:8a:3a:0e:cb:44:31:1a:98:6c: be:53:ef:25:9d:2d:dd:eb:c9:c6:86:ce:02:94:a5: 49:c8:68:42:fb:21:a0:4c:1e:93:ef:a0:05:d3:76: c6:00:a7:dc:71:3f:6f:da:ee:35:c8:b0:64:30:28: a6:fa:5c:34:2b:2b:9c:02:8e:d9:fa:13:d1:d3:0c: 0e:74:11:ef:7b:a2:fc:5f:5e:27:1f:71:a3:b5:15: 02:0f:40:16:7e:33:b5:5c:cf:47:4d:a4:f2:d6:be: 1a:84:c0:59:c4:fe:88:2d:9f:6d:1e:c1:41:6c:44: 3a:7b:7e:88:0d:4a:da:33:66:d4:e8:39:da:64:f4: 4c:c0:2c:0e:99:75:40:76:f3:6e:3f:74:f0:1f:b0: 5c:d8:a1:f3:22:1e:c7:79:e4:57:fd:62:00:37:da: 5b:62:ba:ee:1a:68:ed:b6:d4:91:08:66:9d:de:e0: 36:25:a3:97:45:19:09:5d:96:67:4d:8c:c6:b1:97: d5:7a:81:81:92:c9:18:7c:03:c5:80:7f:8a:4b:d7: 48:a8:ae:36:b3:9c:6d:6d:e1:70:9e:af:80:29:1c: 15:4a:a4:59:df:e9:83:e9:6a:39:98:81:d7:3c:9d: 14:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D1:A3:54:CB:0F:34:22:05:DD:97:9A:E4:1E:3C:39:83:BD:12:8D:8C X509v3 Authority Key Identifier: keyid:B8:43:6A:CB:7C:E8:F8:C2:F5:72:45:FF:E4:E6:BA:2F:52:39:3F:4D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/ebefbf04-41be-48d7-ac00-8a3c498ca9ae/0/B8436ACB7CE8F8C2F57245FFE4E6BA2F52393F4D.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B8436ACB7CE8F8C2F57245FFE4E6BA2F52393F4D.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ebefbf04-41be-48d7-ac00-8a3c498ca9ae/0/B8436ACB7CE8F8C2F57245FFE4E6BA2F52393F4D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 33:c0:42:51:d9:c9:7c:1a:df:e3:e7:3f:45:1a:eb:7d:c1:72: f6:1a:84:b0:09:17:05:e8:90:7b:8a:fe:b7:dc:33:6f:78:c8: 04:9c:d2:88:82:fc:20:bb:31:2c:2f:a5:79:a3:0c:a3:c8:5f: 3b:9a:82:6e:49:f0:45:d6:1f:36:72:30:fc:11:05:8f:c0:c3: c5:19:ce:18:cb:7d:3a:e5:fa:e7:8a:93:c0:1a:84:81:67:76: ba:d3:80:50:fe:a0:6b:f8:2b:9a:f3:19:ce:c4:28:97:9f:7e: eb:f3:c1:0e:33:70:b6:13:d5:0b:ed:ce:f4:2c:15:d0:ea:09: b6:db:38:69:67:a9:39:d7:a7:f5:d7:96:9c:3d:78:d2:39:5f: 45:d6:8d:d2:a6:d3:89:2e:fd:da:cc:74:d4:56:34:85:bd:d0: 87:0c:77:26:5d:10:bb:70:ec:78:ef:15:f3:ce:3f:36:10:18: e2:b5:3f:28:35:6f:09:62:d2:79:f5:b4:e8:68:b8:a1:4a:7d: 13:75:9a:4e:26:ad:05:63:b7:27:ea:77:4d:da:78:ca:87:9f: 23:9e:c3:55:3b:f7:30:92:ab:bd:f1:2d:7f:79:43:42:5d:ab: 6a:81:53:7e:3e:59:eb:c8:b6:86:41:c2:c0:57:15:43:69:2d: e5:e8:30:7a -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUbLRQcWz3OfTHmbwXh/hPqkM9ODIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjg0MzZBQ0I3Q0U4RjhDMkY1NzI0NUZGRTRFNkJBMkY1 MjM5M0Y0RDAeFw0yNTA4MjIxODM2NDRaFw0yNTA4MjUyMDU1NDRaMDMxMTAvBgNV BAMTKEQxQTM1NENCMEYzNDIyMDVERDk3OUFFNDFFM0MzOTgzQkQxMjhEOEMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC6Fpy68F1l9fZSBsU8iW5mdUn5 YIo6DstEMRqYbL5T7yWdLd3rycaGzgKUpUnIaEL7IaBMHpPvoAXTdsYAp9xxP2/a 7jXIsGQwKKb6XDQrK5wCjtn6E9HTDA50Ee97ovxfXicfcaO1FQIPQBZ+M7Vcz0dN pPLWvhqEwFnE/ogtn20ewUFsRDp7fogNStozZtToOdpk9EzALA6ZdUB2824/dPAf sFzYofMiHsd55Ff9YgA32ltiuu4aaO221JEIZp3e4DYlo5dFGQldlmdNjMaxl9V6 gYGSyRh8A8WAf4pL10iorjaznG1t4XCer4ApHBVKpFnf6YPpajmYgdc8nRQZAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU0aNUyw80IgXdl5rkHjw5g70SjYwwHwYDVR0j BBgwFoAUuENqy3zo+ML1ckX/5Oa6L1I5P00wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l YmVmYmYwNC00MWJlLTQ4ZDctYWMwMC04YTNjNDk4Y2E5YWUvMC9CODQzNkFDQjdD RThGOEMyRjU3MjQ1RkZFNEU2QkEyRjUyMzkzRjRELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQjg0MzZBQ0I3Q0U4RjhDMkY1NzI0NUZGRTRFNkJBMkY1MjM5 M0Y0RC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZWJlZmJmMDQtNDFiZS00OGQ3LWFj MDAtOGEzYzQ5OGNhOWFlLzAvQjg0MzZBQ0I3Q0U4RjhDMkY1NzI0NUZGRTRFNkJB MkY1MjM5M0Y0RC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADPAQlHZyXwa3+PnP0Ua633BcvYahLAJFwXo kHuK/rfcM294yASc0oiC/CC7MSwvpXmjDKPIXzuagm5J8EXWHzZyMPwRBY/Aw8UZ zhjLfTrl+ueKk8AahIFndrrTgFD+oGv4K5rzGc7EKJeffuvzwQ4zcLYT1QvtzvQs FdDqCbbbOGlnqTnXp/XXlpw9eNI5X0XWjdKm04ku/drMdNRWNIW90IcMdyZdELtw 7HjvFfPOPzYQGOK1Pyg1bwli0nn1tOhouKFKfRN1mk4mrQVjtyfqd03aeMqHnyOe w1U79zCSq73xLX95Q0Jdq2qBU34+WevItoZBwsBXFUNpLeXoMHo= -----END CERTIFICATE-----Generated at Sun Aug 24 00:23:33 2025 by rpki-client