$ rpki-client -vvf repo-rpki.idnic.net/repo/fba48e4e-fc95-4acf-beac-d93a0f694421/0/8659BE8500DEBB314448F1412FA1E264025A4148.mft File: 8659BE8500DEBB314448F1412FA1E264025A4148.mft (raw, json) Hash identifier: FReSB6DScrtUCUxMOop9ymSJEZUmhh93ZbT7rKexFP8= Subject key identifier: D8:97:79:9B:71:45:A6:79:D8:BC:94:E8:D7:29:38:93:0B:20:6B:38 Authority key identifier: 86:59:BE:85:00:DE:BB:31:44:48:F1:41:2F:A1:E2:64:02:5A:41:48 Certificate issuer: /CN=8659BE8500DEBB314448F1412FA1E264025A4148 Certificate serial: 0B07217D2186D7C5D70A18C14C158584E2ACCE15 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8659BE8500DEBB314448F1412FA1E264025A4148.cer Subject info access: rsync://repo-rpki.idnic.net/repo/fba48e4e-fc95-4acf-beac-d93a0f694421/0/8659BE8500DEBB314448F1412FA1E264025A4148.mft Manifest number: 01B0 Signing time: Sun 29 Jun 2025 14:31:00 +0000 Manifest this update: Sun 29 Jun 2025 14:26:00 +0000 Manifest next update: Wed 02 Jul 2025 20:46:00 +0000 Files and hashes: 1: 323030313a6466313a316263303a3a2f34382d3438203d3e20313431393339.roa (hash: 7sEaXq5J0k7o+6aixvbPc/tcT7LYiqm7IslpQ0Vezhk=) 2: 8659BE8500DEBB314448F1412FA1E264025A4148.crl (hash: TepD5FmYtnaPWtVtX1RxhZ5wWhkT0LlHP1pzRkr4LxE=) 3: 3130332e3136342e3139322e302f32332d3234203d3e20313431393339.roa (hash: cJnOaGwkWse+gaN5dpuLlcDR+J9MkVOMmGejBDI/J0U=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/fba48e4e-fc95-4acf-beac-d93a0f694421/0/8659BE8500DEBB314448F1412FA1E264025A4148.crl rsync://repo-rpki.idnic.net/repo/fba48e4e-fc95-4acf-beac-d93a0f694421/0/8659BE8500DEBB314448F1412FA1E264025A4148.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8659BE8500DEBB314448F1412FA1E264025A4148.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 02 Jul 2025 20:46:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0b:07:21:7d:21:86:d7:c5:d7:0a:18:c1:4c:15:85:84:e2:ac:ce:15 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8659BE8500DEBB314448F1412FA1E264025A4148 Validity Not Before: Jun 29 14:26:00 2025 GMT Not After : Jul 2 20:46:00 2025 GMT Subject: CN=D897799B7145A679D8BC94E8D72938930B206B38 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:eb:91:dc:38:4a:cb:8a:16:ce:41:06:5a:e7:37: aa:e8:92:27:cb:91:20:4c:9f:40:08:f2:b8:0e:81: 67:5f:ed:19:c5:39:6d:ae:a8:f2:99:1e:c1:9a:01: 8e:bd:e3:a4:28:f7:b5:cb:d0:8a:43:f8:61:32:a5: e3:f1:3e:90:03:84:d7:98:75:ad:a7:74:79:9e:3c: 20:10:cb:92:12:eb:71:ba:62:79:5d:9d:d2:c6:f0: fb:96:64:f1:30:89:d1:9c:f1:06:43:1e:f5:db:70: 8d:fd:a5:d3:96:18:3a:6f:d7:86:5b:99:f8:2d:e4: f7:01:43:31:66:a5:d0:11:21:9d:e6:85:4f:86:8b: 96:81:3b:fa:4d:f4:3a:40:ed:4a:ff:20:93:7e:e6: d2:71:1d:de:bb:14:7c:d6:ed:fa:be:89:4b:25:17: c9:db:39:6b:d9:09:3f:da:ae:e0:c0:0f:0d:f9:5b: 44:f5:d0:57:ea:20:8e:8c:d4:b2:47:28:6b:a2:8f: 30:8e:50:d5:f3:97:80:db:8f:98:38:59:81:c7:48: b7:94:91:39:23:70:a7:85:3f:e4:6f:c1:5a:18:e0: ab:2f:ae:d8:b9:23:d2:6d:8f:8c:34:18:85:73:3b: e3:e3:a2:aa:97:b6:bf:35:4b:7d:fd:e9:7b:a6:f5: 02:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:97:79:9B:71:45:A6:79:D8:BC:94:E8:D7:29:38:93:0B:20:6B:38 X509v3 Authority Key Identifier: keyid:86:59:BE:85:00:DE:BB:31:44:48:F1:41:2F:A1:E2:64:02:5A:41:48 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/fba48e4e-fc95-4acf-beac-d93a0f694421/0/8659BE8500DEBB314448F1412FA1E264025A4148.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8659BE8500DEBB314448F1412FA1E264025A4148.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/fba48e4e-fc95-4acf-beac-d93a0f694421/0/8659BE8500DEBB314448F1412FA1E264025A4148.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 11:77:b6:97:e1:30:5a:d6:bd:df:db:a5:ec:42:d4:da:fd:8a: 87:cb:0a:28:ff:05:d4:d7:5d:76:21:c2:d5:1d:52:63:02:c8: 2e:ed:e5:28:25:dc:07:e4:9d:88:5d:6b:c8:d6:4c:37:ea:4e: 11:bc:ed:94:d8:2d:31:c0:09:97:4e:28:58:22:21:7a:8e:89: 93:b0:51:3b:06:3d:9b:ea:dc:81:e1:a8:02:2d:49:09:50:9f: 49:97:40:77:b5:3e:86:0c:34:7c:cd:3e:90:84:eb:83:80:3f: 44:22:2d:c1:2f:78:1c:76:29:98:da:97:42:ff:e8:96:a8:07: 13:48:23:10:ed:b3:c7:da:c6:5a:df:98:c8:74:59:f1:ec:4b: b2:7b:df:5a:89:1b:8e:d9:10:62:8b:30:d3:b1:64:38:ae:fe: 36:01:f8:45:05:a0:35:f5:4b:90:43:32:62:48:39:69:f4:58: 29:07:00:16:e5:9c:56:d5:1d:d3:29:91:b7:bc:22:16:f5:a6: e7:54:d9:7d:9f:c9:12:99:83:b1:47:d5:c4:89:07:14:5f:3b: ca:2b:30:6b:70:a0:9c:af:86:52:8b:d3:cc:48:a3:a1:10:72: 62:3e:c4:f2:bb:52:fb:16:9a:8c:51:b8:fa:a1:57:d9:05:a3: de:03:a3:74 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUCwchfSGG18XXChjBTBWFhOKszhUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODY1OUJFODUwMERFQkIzMTQ0NDhGMTQxMkZBMUUyNjQw MjVBNDE0ODAeFw0yNTA2MjkxNDI2MDBaFw0yNTA3MDIyMDQ2MDBaMDMxMTAvBgNV BAMTKEQ4OTc3OTlCNzE0NUE2NzlEOEJDOTRFOEQ3MjkzODkzMEIyMDZCMzgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDrkdw4SsuKFs5BBlrnN6rokifL kSBMn0AI8rgOgWdf7RnFOW2uqPKZHsGaAY6946Qo97XL0IpD+GEypePxPpADhNeY da2ndHmePCAQy5IS63G6YnldndLG8PuWZPEwidGc8QZDHvXbcI39pdOWGDpv14Zb mfgt5PcBQzFmpdARIZ3mhU+Gi5aBO/pN9DpA7Ur/IJN+5tJxHd67FHzW7fq+iUsl F8nbOWvZCT/aruDADw35W0T10FfqII6M1LJHKGuijzCOUNXzl4Dbj5g4WYHHSLeU kTkjcKeFP+RvwVoY4Ksvrti5I9Jtj4w0GIVzO+PjoqqXtr81S3396Xum9QJxAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU2Jd5m3FFpnnYvJTo1yk4kwsgazgwHwYDVR0j BBgwFoAUhlm+hQDeuzFESPFBL6HiZAJaQUgwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m YmE0OGU0ZS1mYzk1LTRhY2YtYmVhYy1kOTNhMGY2OTQ0MjEvMC84NjU5QkU4NTAw REVCQjMxNDQ0OEYxNDEyRkExRTI2NDAyNUE0MTQ4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvODY1OUJFODUwMERFQkIzMTQ0NDhGMTQxMkZBMUUyNjQwMjVB NDE0OC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZmJhNDhlNGUtZmM5NS00YWNmLWJl YWMtZDkzYTBmNjk0NDIxLzAvODY1OUJFODUwMERFQkIzMTQ0NDhGMTQxMkZBMUUy NjQwMjVBNDE0OC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABF3tpfhMFrWvd/bpexC1Nr9iofLCij/BdTX XXYhwtUdUmMCyC7t5Sgl3AfknYhda8jWTDfqThG87ZTYLTHACZdOKFgiIXqOiZOw UTsGPZvq3IHhqAItSQlQn0mXQHe1PoYMNHzNPpCE64OAP0QiLcEveBx2KZjal0L/ 6JaoBxNIIxDts8faxlrfmMh0WfHsS7J731qJG47ZEGKLMNOxZDiu/jYB+EUFoDX1 S5BDMmJIOWn0WCkHABblnFbVHdMpkbe8Ihb1pudU2X2fyRKZg7FH1cSJBxRfO8or MGtwoJyvhlKL08xIo6EQcmI+xPK7UvsWmoxRuPqhV9kFo94Do3Q= -----END CERTIFICATE-----Generated at Tue Jul 1 19:12:14 2025 by rpki-client