$ rpki-client -vvf repo-rpki.idnic.net/repo/fba48e4e-fc95-4acf-beac-d93a0f694421/0/8659BE8500DEBB314448F1412FA1E264025A4148.mft File: 8659BE8500DEBB314448F1412FA1E264025A4148.mft (raw, json) Hash identifier: hBEMVIyWntEH23/bbT2fYMkNsMKn6411/DD1Q7/Ugwo= Subject key identifier: 16:9C:A0:DB:64:F3:1B:96:40:85:77:B8:1E:7F:60:4A:3F:7B:BA:80 Authority key identifier: 86:59:BE:85:00:DE:BB:31:44:48:F1:41:2F:A1:E2:64:02:5A:41:48 Certificate issuer: /CN=8659BE8500DEBB314448F1412FA1E264025A4148 Certificate serial: 79F51EAB552595ADCD6D2BDB61980F3B172D2DF5 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8659BE8500DEBB314448F1412FA1E264025A4148.cer Subject info access: rsync://repo-rpki.idnic.net/repo/fba48e4e-fc95-4acf-beac-d93a0f694421/0/8659BE8500DEBB314448F1412FA1E264025A4148.mft Manifest number: 01CA Signing time: Fri 22 Aug 2025 16:11:05 +0000 Manifest this update: Fri 22 Aug 2025 16:06:05 +0000 Manifest next update: Tue 26 Aug 2025 02:05:05 +0000 Files and hashes: 1: 8659BE8500DEBB314448F1412FA1E264025A4148.crl (hash: ZHoOCBeRvRftAO0cHvMh28YkBCVEJQ+6NSFdRa3TRWQ=) 2: 3130332e3136342e3139332e302f32342d3234203d3e20313431393339.roa (hash: o1EC2V3xudD67YQ4ezVJUlO4R22GwhC3UT5xp118BUc=) 3: 3130332e3136342e3139322e302f32332d3234203d3e20313431393339.roa (hash: DGmbIbAAoCUymOY6DDh+0S4rcPuhCP+BlaH232+y3TY=) 4: 3130332e3136342e3139322e302f32342d3234203d3e20313431393339.roa (hash: V8FXW6i5FhDhWnneEy9JcwyRx6grWMlQZ/xTqZlJefU=) 5: 323030313a6466313a316263303a3a2f34382d3438203d3e20313431393339.roa (hash: E8NUcaKWe3ABHFVxNWSSIkp1m8C7YtMxKMRA2hg1NmI=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/fba48e4e-fc95-4acf-beac-d93a0f694421/0/8659BE8500DEBB314448F1412FA1E264025A4148.crl rsync://repo-rpki.idnic.net/repo/fba48e4e-fc95-4acf-beac-d93a0f694421/0/8659BE8500DEBB314448F1412FA1E264025A4148.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8659BE8500DEBB314448F1412FA1E264025A4148.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 26 Aug 2025 02:05:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 79:f5:1e:ab:55:25:95:ad:cd:6d:2b:db:61:98:0f:3b:17:2d:2d:f5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8659BE8500DEBB314448F1412FA1E264025A4148 Validity Not Before: Aug 22 16:06:05 2025 GMT Not After : Aug 26 02:05:05 2025 GMT Subject: CN=169CA0DB64F31B96408577B81E7F604A3F7BBA80 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:47:1b:6a:05:ad:92:02:e1:aa:bf:93:a6:c5: e1:13:bd:13:96:c0:c8:94:5e:cd:0d:a4:cd:0a:9e: 76:0a:e9:bc:d5:db:4b:b8:6a:d5:ef:87:9f:c0:1f: 23:22:20:47:d8:ee:48:fd:95:19:d2:42:9d:fa:56: c7:b8:e4:40:f7:0f:e6:57:cd:ca:e2:31:b9:35:6e: 02:34:a0:cd:72:2b:63:3c:ab:1c:c2:0c:3f:92:a3: f3:dd:bb:47:72:b4:65:85:9e:06:1a:e0:82:c8:d7: 08:32:18:4d:6a:13:4c:f6:29:0c:66:cb:7a:bd:db: d6:30:60:79:1b:0e:d1:97:3d:4e:bf:db:35:fa:53: 25:56:13:6f:e8:99:64:00:82:cf:94:34:92:3d:25: b5:be:a2:a6:53:9e:db:b0:ef:40:dd:f3:d3:df:f9: c9:17:fa:ec:f7:6e:dc:17:20:ca:73:43:62:12:e8: 33:28:ff:a1:52:78:9e:cd:10:bc:8d:50:66:6c:e2: 93:ff:62:02:76:32:37:43:0a:5a:f4:ee:ed:c4:80: ce:19:4f:b5:66:b3:cd:63:37:fe:a6:4a:d8:a8:5c: 22:26:ea:09:39:a0:3c:86:6b:a2:7a:03:49:bc:30: 60:3e:c1:48:69:69:d1:b9:1f:62:83:eb:c2:91:50: 79:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 16:9C:A0:DB:64:F3:1B:96:40:85:77:B8:1E:7F:60:4A:3F:7B:BA:80 X509v3 Authority Key Identifier: keyid:86:59:BE:85:00:DE:BB:31:44:48:F1:41:2F:A1:E2:64:02:5A:41:48 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/fba48e4e-fc95-4acf-beac-d93a0f694421/0/8659BE8500DEBB314448F1412FA1E264025A4148.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8659BE8500DEBB314448F1412FA1E264025A4148.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/fba48e4e-fc95-4acf-beac-d93a0f694421/0/8659BE8500DEBB314448F1412FA1E264025A4148.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 62:b0:c4:f6:c0:cd:47:3b:40:12:bb:bd:45:b1:aa:6c:96:6d: 95:1a:31:b4:ea:1e:f0:ca:95:bb:41:a9:55:d9:93:80:aa:71: 0a:ce:8e:b8:bf:b2:82:23:70:ad:a8:0c:f6:5d:20:b8:ae:c0: bc:08:93:39:63:4b:51:35:b5:9c:6c:9b:6d:10:1c:36:7c:28: 0b:6b:83:94:80:73:00:96:27:db:f7:a4:68:a3:52:bd:72:ef: ac:36:6a:29:22:8f:1d:70:5c:04:08:2d:1a:56:db:fe:7e:ad: 04:96:8c:5a:f0:8b:d3:19:00:76:d3:9d:ee:49:e0:f9:3d:27: 55:52:57:95:46:4f:85:53:c3:db:ee:f6:46:28:21:be:bb:58: c8:30:3b:91:65:16:c5:47:31:20:d4:11:a9:7e:63:b3:06:e1: 83:00:e5:d3:0e:79:a4:d5:b6:fc:a3:eb:13:f0:cf:b7:93:1a: 08:7c:78:3c:3b:d3:e4:e7:28:6c:f3:53:07:28:ce:a4:90:16: 61:34:70:b8:0a:a3:e1:50:53:4a:fc:9b:e5:39:06:90:a2:0a: e3:f7:08:03:6c:1c:e8:5c:cb:9a:a9:c0:41:fd:2e:cf:96:99: d3:b4:11:4d:f5:cb:cc:73:93:83:ca:28:84:90:55:a4:48:0a: 54:4d:06:0f -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUefUeq1Ulla3NbSvbYZgPOxctLfUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODY1OUJFODUwMERFQkIzMTQ0NDhGMTQxMkZBMUUyNjQw MjVBNDE0ODAeFw0yNTA4MjIxNjA2MDVaFw0yNTA4MjYwMjA1MDVaMDMxMTAvBgNV BAMTKDE2OUNBMERCNjRGMzFCOTY0MDg1NzdCODFFN0Y2MDRBM0Y3QkJBODAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDTRxtqBa2SAuGqv5OmxeETvROW wMiUXs0NpM0KnnYK6bzV20u4atXvh5/AHyMiIEfY7kj9lRnSQp36Vse45ED3D+ZX zcriMbk1bgI0oM1yK2M8qxzCDD+So/Pdu0dytGWFngYa4ILI1wgyGE1qE0z2KQxm y3q929YwYHkbDtGXPU6/2zX6UyVWE2/omWQAgs+UNJI9JbW+oqZTntuw70Dd89Pf +ckX+uz3btwXIMpzQ2IS6DMo/6FSeJ7NELyNUGZs4pP/YgJ2MjdDClr07u3EgM4Z T7Vms81jN/6mStioXCIm6gk5oDyGa6J6A0m8MGA+wUhpadG5H2KD68KRUHnZAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUFpyg22TzG5ZAhXe4Hn9gSj97uoAwHwYDVR0j BBgwFoAUhlm+hQDeuzFESPFBL6HiZAJaQUgwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m YmE0OGU0ZS1mYzk1LTRhY2YtYmVhYy1kOTNhMGY2OTQ0MjEvMC84NjU5QkU4NTAw REVCQjMxNDQ0OEYxNDEyRkExRTI2NDAyNUE0MTQ4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvODY1OUJFODUwMERFQkIzMTQ0NDhGMTQxMkZBMUUyNjQwMjVB NDE0OC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZmJhNDhlNGUtZmM5NS00YWNmLWJl YWMtZDkzYTBmNjk0NDIxLzAvODY1OUJFODUwMERFQkIzMTQ0NDhGMTQxMkZBMUUy NjQwMjVBNDE0OC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGKwxPbAzUc7QBK7vUWxqmyWbZUaMbTqHvDK lbtBqVXZk4CqcQrOjri/soIjcK2oDPZdILiuwLwIkzljS1E1tZxsm20QHDZ8KAtr g5SAcwCWJ9v3pGijUr1y76w2aikijx1wXAQILRpW2/5+rQSWjFrwi9MZAHbTne5J 4Pk9J1VSV5VGT4VTw9vu9kYoIb67WMgwO5FlFsVHMSDUEal+Y7MG4YMA5dMOeaTV tvyj6xPwz7eTGgh8eDw70+TnKGzzUwcozqSQFmE0cLgKo+FQU0r8m+U5BpCiCuP3 CANsHOhcy5qpwEH9Ls+WmdO0EU31y8xzk4PKKISQVaRIClRNBg8= -----END CERTIFICATE-----Generated at Sat Aug 23 12:31:45 2025 by rpki-client