$ rpki-client -vvf repo-rpki.idnic.net/repo/fa674668-0613-4a64-9323-547636b7d8b0/0/B8B47DE574D44D4CC9A3E4E2E1F7AC9CB0AEA0B5.mft File: B8B47DE574D44D4CC9A3E4E2E1F7AC9CB0AEA0B5.mft (raw, json) Hash identifier: yH182fV8njQOCOEpzOvt9s+5kURgtR3IWV1sSYf5izc= Subject key identifier: BC:F1:AF:CE:66:94:87:26:5D:0B:F9:C1:AB:9E:02:46:14:3A:C8:3B Authority key identifier: B8:B4:7D:E5:74:D4:4D:4C:C9:A3:E4:E2:E1:F7:AC:9C:B0:AE:A0:B5 Certificate issuer: /CN=B8B47DE574D44D4CC9A3E4E2E1F7AC9CB0AEA0B5 Certificate serial: 5F368E7491BBEB8C6F7EBE89BB528A02E19D59B6 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B8B47DE574D44D4CC9A3E4E2E1F7AC9CB0AEA0B5.cer Subject info access: rsync://repo-rpki.idnic.net/repo/fa674668-0613-4a64-9323-547636b7d8b0/0/B8B47DE574D44D4CC9A3E4E2E1F7AC9CB0AEA0B5.mft Manifest number: 0189 Signing time: Fri 22 Aug 2025 05:22:13 +0000 Manifest this update: Fri 22 Aug 2025 05:17:13 +0000 Manifest next update: Mon 25 Aug 2025 06:48:13 +0000 Files and hashes: 1: B8B47DE574D44D4CC9A3E4E2E1F7AC9CB0AEA0B5.crl (hash: wqURcrgKQsS/3Q/OlzvBhyL/QqRJJm4Pv07yZroE71g=) 2: 3130332e3131372e35362e302f32332d3234203d3e20313336303532.roa (hash: BAM070FvjGLMXJWAH9pbtiKqBzEQlvrgCYvemvA5CUw=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/fa674668-0613-4a64-9323-547636b7d8b0/0/B8B47DE574D44D4CC9A3E4E2E1F7AC9CB0AEA0B5.crl rsync://repo-rpki.idnic.net/repo/fa674668-0613-4a64-9323-547636b7d8b0/0/B8B47DE574D44D4CC9A3E4E2E1F7AC9CB0AEA0B5.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B8B47DE574D44D4CC9A3E4E2E1F7AC9CB0AEA0B5.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 25 Aug 2025 06:48:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5f:36:8e:74:91:bb:eb:8c:6f:7e:be:89:bb:52:8a:02:e1:9d:59:b6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B8B47DE574D44D4CC9A3E4E2E1F7AC9CB0AEA0B5 Validity Not Before: Aug 22 05:17:13 2025 GMT Not After : Aug 25 06:48:13 2025 GMT Subject: CN=BCF1AFCE669487265D0BF9C1AB9E0246143AC83B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:20:04:f0:5b:f8:a0:68:15:77:2e:9f:6a:05: de:71:4d:68:c7:fd:e8:ac:6f:53:e7:7f:f9:f6:9e: bb:00:07:80:87:6f:3c:3a:f8:ce:52:19:89:fa:ce: 98:28:dc:1a:5f:f9:ca:b5:ce:18:2b:de:a6:2b:31: ec:5b:94:16:3c:23:89:10:68:48:39:43:af:48:a6: 93:60:ef:84:e9:86:e9:46:d0:02:b5:d5:39:ca:07: 6f:1f:ab:20:b7:52:58:1e:87:7b:4c:79:a4:95:31: 37:ff:94:1a:79:87:7a:03:c2:17:ca:1e:30:d5:85: dc:8c:dc:7a:35:03:90:25:64:0e:63:71:dc:70:75: cf:32:ec:32:9b:25:52:ad:ac:26:b0:bd:b9:55:5a: cb:d0:0b:0a:ff:2c:55:07:21:cd:af:0a:e8:c2:43: 3e:1a:e0:55:99:57:03:fb:f3:13:a6:54:83:2e:de: a1:41:34:29:cc:7f:00:70:82:16:45:ef:1d:f1:1b: ac:5e:60:15:89:d4:51:45:cd:ef:bc:c0:a3:45:2f: 00:9f:be:be:8d:77:e6:07:ab:3e:d4:b5:65:b9:46: e0:d5:7c:5b:b6:d0:c3:83:a6:36:8f:94:55:71:66: 23:f9:e0:0a:21:a1:a8:18:64:72:59:33:69:17:84: ac:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BC:F1:AF:CE:66:94:87:26:5D:0B:F9:C1:AB:9E:02:46:14:3A:C8:3B X509v3 Authority Key Identifier: keyid:B8:B4:7D:E5:74:D4:4D:4C:C9:A3:E4:E2:E1:F7:AC:9C:B0:AE:A0:B5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/fa674668-0613-4a64-9323-547636b7d8b0/0/B8B47DE574D44D4CC9A3E4E2E1F7AC9CB0AEA0B5.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B8B47DE574D44D4CC9A3E4E2E1F7AC9CB0AEA0B5.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/fa674668-0613-4a64-9323-547636b7d8b0/0/B8B47DE574D44D4CC9A3E4E2E1F7AC9CB0AEA0B5.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 55:bb:ef:39:8e:ee:90:86:b7:57:c9:61:eb:ba:15:eb:b2:f9: 58:81:6c:17:e6:40:97:14:9b:c0:dd:7e:81:ee:62:4c:c4:8d: a7:3b:ae:c2:de:ab:fb:bb:89:aa:b6:49:7d:24:dd:1d:b0:37: 59:ce:ad:2e:23:f8:d4:6b:6e:1c:38:bf:d1:5a:76:8b:2f:45: 8a:87:f6:d9:aa:aa:8c:59:e3:4f:36:ea:98:f8:0c:e6:94:30: 7a:e2:ae:cd:2e:26:f8:98:25:cc:85:3b:45:1c:27:d1:51:f7: 7a:25:b0:13:e8:0e:a2:f1:ad:6a:9b:00:7e:5a:25:59:70:84: 62:b7:8b:6c:f7:74:5e:e4:24:0c:08:42:d7:52:93:e7:c5:3b: f6:69:49:f7:80:4e:ce:51:bd:94:26:2e:4c:ed:88:2e:e9:6f: 47:0d:86:20:2b:19:44:fd:31:89:54:63:28:80:ac:90:39:f4: d5:fc:a6:99:16:97:d3:40:48:5e:7d:ec:b8:8f:41:7f:02:6d: e8:dd:60:80:ac:18:90:c7:31:d1:c0:62:72:c1:cd:b0:c9:41: 25:38:eb:e9:9a:45:d3:48:13:19:95:fa:23:4d:fe:12:f0:6c: b4:f9:98:ac:8e:05:36:a9:ff:56:d9:d7:4c:e0:c0:c8:18:19: 92:65:6b:c6 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUXzaOdJG764xvfr6Ju1KKAuGdWbYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjhCNDdERTU3NEQ0NEQ0Q0M5QTNFNEUyRTFGN0FDOUNC MEFFQTBCNTAeFw0yNTA4MjIwNTE3MTNaFw0yNTA4MjUwNjQ4MTNaMDMxMTAvBgNV BAMTKEJDRjFBRkNFNjY5NDg3MjY1RDBCRjlDMUFCOUUwMjQ2MTQzQUM4M0IwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDhIATwW/igaBV3Lp9qBd5xTWjH /eisb1Pnf/n2nrsAB4CHbzw6+M5SGYn6zpgo3Bpf+cq1zhgr3qYrMexblBY8I4kQ aEg5Q69IppNg74TphulG0AK11TnKB28fqyC3Ulgeh3tMeaSVMTf/lBp5h3oDwhfK HjDVhdyM3Ho1A5AlZA5jcdxwdc8y7DKbJVKtrCawvblVWsvQCwr/LFUHIc2vCujC Qz4a4FWZVwP78xOmVIMu3qFBNCnMfwBwghZF7x3xG6xeYBWJ1FFFze+8wKNFLwCf vr6Nd+YHqz7UtWW5RuDVfFu20MODpjaPlFVxZiP54AohoagYZHJZM2kXhKwvAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUvPGvzmaUhyZdC/nBq54CRhQ6yDswHwYDVR0j BBgwFoAUuLR95XTUTUzJo+Ti4fesnLCuoLUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m YTY3NDY2OC0wNjEzLTRhNjQtOTMyMy01NDc2MzZiN2Q4YjAvMC9COEI0N0RFNTc0 RDQ0RDRDQzlBM0U0RTJFMUY3QUM5Q0IwQUVBMEI1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQjhCNDdERTU3NEQ0NEQ0Q0M5QTNFNEUyRTFGN0FDOUNCMEFF QTBCNS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZmE2NzQ2NjgtMDYxMy00YTY0LTkz MjMtNTQ3NjM2YjdkOGIwLzAvQjhCNDdERTU3NEQ0NEQ0Q0M5QTNFNEUyRTFGN0FD OUNCMEFFQTBCNS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFW77zmO7pCGt1fJYeu6Feuy+ViBbBfmQJcU m8DdfoHuYkzEjac7rsLeq/u7iaq2SX0k3R2wN1nOrS4j+NRrbhw4v9FadosvRYqH 9tmqqoxZ40826pj4DOaUMHrirs0uJviYJcyFO0UcJ9FR93olsBPoDqLxrWqbAH5a JVlwhGK3i2z3dF7kJAwIQtdSk+fFO/ZpSfeATs5RvZQmLkztiC7pb0cNhiArGUT9 MYlUYyiArJA59NX8ppkWl9NASF597LiPQX8CbejdYICsGJDHMdHAYnLBzbDJQSU4 6+maRdNIExmV+iNN/hLwbLT5mKyOBTap/1bZ10zgwMgYGZJla8Y= -----END CERTIFICATE-----Generated at Sat Aug 23 15:46:22 2025 by rpki-client