$ rpki-client -vvf repo-rpki.idnic.net/repo/ecdae0a5-b4f6-4e08-8beb-63ebe0853df3/0/B8A9E45E7E2DEA6624140C03DE025D16B91CB9DC.mft File: B8A9E45E7E2DEA6624140C03DE025D16B91CB9DC.mft (raw, json) Hash identifier: De6cTI28KX3ApDFpSTNZR9dI0n98yHNm3kFEgcYcXfY= Subject key identifier: AA:3D:DD:EC:6B:4B:4F:38:D9:6A:E1:68:95:A0:1A:29:85:BD:90:5E Authority key identifier: B8:A9:E4:5E:7E:2D:EA:66:24:14:0C:03:DE:02:5D:16:B9:1C:B9:DC Certificate issuer: /CN=B8A9E45E7E2DEA6624140C03DE025D16B91CB9DC Certificate serial: 57C547FF63FD63B3A37C11D69CC1A8F9BC416685 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B8A9E45E7E2DEA6624140C03DE025D16B91CB9DC.cer Subject info access: rsync://repo-rpki.idnic.net/repo/ecdae0a5-b4f6-4e08-8beb-63ebe0853df3/0/B8A9E45E7E2DEA6624140C03DE025D16B91CB9DC.mft Manifest number: 015F Signing time: Thu 21 Aug 2025 23:02:10 +0000 Manifest this update: Thu 21 Aug 2025 22:57:10 +0000 Manifest next update: Mon 25 Aug 2025 03:01:10 +0000 Files and hashes: 1: 3130332e34302e39322e302f32332d3233203d3e203633353034.roa (hash: SFyP6dQXcZeCfICHfcQqBzkquUF0rSVZjhOo/oTB3lM=) 2: B8A9E45E7E2DEA6624140C03DE025D16B91CB9DC.crl (hash: 3RAXr07w18y567i5CbjSJaMa5gKg2nh63ENuvtUs1m4=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/ecdae0a5-b4f6-4e08-8beb-63ebe0853df3/0/B8A9E45E7E2DEA6624140C03DE025D16B91CB9DC.crl rsync://repo-rpki.idnic.net/repo/ecdae0a5-b4f6-4e08-8beb-63ebe0853df3/0/B8A9E45E7E2DEA6624140C03DE025D16B91CB9DC.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B8A9E45E7E2DEA6624140C03DE025D16B91CB9DC.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 25 Aug 2025 03:01:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 57:c5:47:ff:63:fd:63:b3:a3:7c:11:d6:9c:c1:a8:f9:bc:41:66:85 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B8A9E45E7E2DEA6624140C03DE025D16B91CB9DC Validity Not Before: Aug 21 22:57:10 2025 GMT Not After : Aug 25 03:01:10 2025 GMT Subject: CN=AA3DDDEC6B4B4F38D96AE16895A01A2985BD905E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:91:f4:2b:f6:17:57:a1:06:d2:cd:52:da:e6: 8b:2d:64:9d:26:ad:ca:b6:c6:53:33:bf:f2:cd:c2: 27:6f:f0:91:f3:ab:da:a2:f3:6a:c7:5c:71:25:b7: 40:69:8c:84:0a:a8:cc:62:c0:e4:41:9b:c2:cf:ae: 06:08:79:6c:3c:5d:84:44:c0:b7:51:11:33:c2:02: a2:39:70:bc:7a:7b:9c:4b:a0:52:57:2c:e9:ea:46: fa:9b:86:46:df:87:a2:e9:01:9b:32:38:8d:05:66: 15:e8:db:3b:2d:19:e4:b6:f0:9d:c1:0b:ae:a1:3d: 89:60:4e:b6:a8:56:2e:c8:ea:48:17:73:26:f7:55: 36:f6:10:73:a5:58:a0:52:1e:08:d9:77:34:3c:9d: a1:db:0c:de:f3:b8:e3:57:04:9e:31:4e:72:b2:71: 85:3b:46:ab:81:ff:63:61:0f:bd:d6:17:6d:d5:44: 66:b5:2b:80:ad:7d:0c:f9:17:d7:e8:99:d9:7b:cb: 08:6d:01:d2:25:56:d6:5e:97:d6:59:30:71:a4:1b: 14:95:9f:4f:98:a7:16:9c:f9:e0:5c:1e:2f:ef:a1: d5:15:d0:2f:41:08:02:fd:40:0d:81:8d:29:c3:e8: c4:a3:7f:3a:0b:53:fb:75:a6:16:7c:a5:05:00:19: 26:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AA:3D:DD:EC:6B:4B:4F:38:D9:6A:E1:68:95:A0:1A:29:85:BD:90:5E X509v3 Authority Key Identifier: keyid:B8:A9:E4:5E:7E:2D:EA:66:24:14:0C:03:DE:02:5D:16:B9:1C:B9:DC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/ecdae0a5-b4f6-4e08-8beb-63ebe0853df3/0/B8A9E45E7E2DEA6624140C03DE025D16B91CB9DC.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B8A9E45E7E2DEA6624140C03DE025D16B91CB9DC.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ecdae0a5-b4f6-4e08-8beb-63ebe0853df3/0/B8A9E45E7E2DEA6624140C03DE025D16B91CB9DC.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ad:7e:41:17:71:cb:cb:b2:4c:5a:6b:3d:08:26:3b:43:08:01: 0a:ad:07:6e:ff:f3:f5:07:f5:ed:86:40:51:b3:a1:ff:ee:68: 83:22:39:7a:91:30:1f:d0:06:d5:6d:84:29:d7:f8:21:24:ac: 7f:a0:a6:e6:e5:25:b4:16:0b:1e:61:a8:28:52:db:ba:f7:1c: 4c:8f:bc:d0:a7:f2:16:47:ec:9c:4e:9f:73:30:7b:27:18:ac: ef:dc:35:e7:3a:89:81:74:15:95:da:2f:5d:3e:b4:3e:b4:02: 4b:c2:fc:0d:76:a9:b8:10:f2:52:87:ea:75:cc:10:72:f9:22: ac:f3:da:c3:96:f9:d8:dc:ee:ee:66:30:a9:d5:55:b5:50:c9: 8f:fc:4e:b0:21:0c:87:06:26:73:d6:94:3b:c8:00:42:c2:d0: 9b:eb:52:29:5f:d1:4d:37:4f:74:1e:ce:81:79:1f:57:73:9b: 6e:32:ed:28:53:4c:f0:4c:bb:f3:28:12:b3:6e:b8:34:89:6e: 88:de:ad:ff:c4:c3:a0:26:7a:25:30:3d:b9:2a:c3:af:30:e8: 79:17:0f:fa:bd:35:a8:80:f2:3e:05:cc:a2:c0:4f:c6:14:38: e5:46:d0:5a:04:2f:db:04:cc:69:7e:2c:c0:c7:52:33:cd:06: 09:18:9e:34 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUV8VH/2P9Y7OjfBHWnMGo+bxBZoUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjhBOUU0NUU3RTJERUE2NjI0MTQwQzAzREUwMjVEMTZC OTFDQjlEQzAeFw0yNTA4MjEyMjU3MTBaFw0yNTA4MjUwMzAxMTBaMDMxMTAvBgNV BAMTKEFBM0REREVDNkI0QjRGMzhEOTZBRTE2ODk1QTAxQTI5ODVCRDkwNUUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+kfQr9hdXoQbSzVLa5ostZJ0m rcq2xlMzv/LNwidv8JHzq9qi82rHXHElt0BpjIQKqMxiwORBm8LPrgYIeWw8XYRE wLdRETPCAqI5cLx6e5xLoFJXLOnqRvqbhkbfh6LpAZsyOI0FZhXo2zstGeS28J3B C66hPYlgTraoVi7I6kgXcyb3VTb2EHOlWKBSHgjZdzQ8naHbDN7zuONXBJ4xTnKy cYU7RquB/2NhD73WF23VRGa1K4CtfQz5F9fomdl7ywhtAdIlVtZel9ZZMHGkGxSV n0+Ypxac+eBcHi/vodUV0C9BCAL9QA2BjSnD6MSjfzoLU/t1phZ8pQUAGSadAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUqj3d7GtLTzjZauFolaAaKYW9kF4wHwYDVR0j BBgwFoAUuKnkXn4t6mYkFAwD3gJdFrkcudwwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l Y2RhZTBhNS1iNGY2LTRlMDgtOGJlYi02M2ViZTA4NTNkZjMvMC9COEE5RTQ1RTdF MkRFQTY2MjQxNDBDMDNERTAyNUQxNkI5MUNCOURDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQjhBOUU0NUU3RTJERUE2NjI0MTQwQzAzREUwMjVEMTZCOTFD QjlEQy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZWNkYWUwYTUtYjRmNi00ZTA4LThi ZWItNjNlYmUwODUzZGYzLzAvQjhBOUU0NUU3RTJERUE2NjI0MTQwQzAzREUwMjVE MTZCOTFDQjlEQy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAK1+QRdxy8uyTFprPQgmO0MIAQqtB27/8/UH 9e2GQFGzof/uaIMiOXqRMB/QBtVthCnX+CEkrH+gpublJbQWCx5hqChS27r3HEyP vNCn8hZH7JxOn3MweycYrO/cNec6iYF0FZXaL10+tD60AkvC/A12qbgQ8lKH6nXM EHL5Iqzz2sOW+djc7u5mMKnVVbVQyY/8TrAhDIcGJnPWlDvIAELC0JvrUilf0U03 T3QezoF5H1dzm24y7ShTTPBMu/MoErNuuDSJbojerf/Ew6AmeiUwPbkqw68w6HkX D/q9NaiA8j4FzKLAT8YUOOVG0FoEL9sEzGl+LMDHUjPNBgkYnjQ= -----END CERTIFICATE-----Generated at Sat Aug 23 12:29:19 2025 by rpki-client