$ rpki-client -vvf repo-rpki.idnic.net/repo/02913fa1-33ae-4e33-bbe2-81bd9f03c84b/0/8C57C5860BF938BB57E0B7ED0F890D70BFEE55A0.mft File: 8C57C5860BF938BB57E0B7ED0F890D70BFEE55A0.mft (raw, json) Hash identifier: h50mKmDd+tCwYDapAFv/K9Tj1OgtbkJ1aRLv73SCJAo= Subject key identifier: 26:87:FF:E9:97:9D:7F:64:8E:6D:E1:4D:E9:B7:49:FE:92:2A:9A:46 Authority key identifier: 8C:57:C5:86:0B:F9:38:BB:57:E0:B7:ED:0F:89:0D:70:BF:EE:55:A0 Certificate issuer: /CN=8C57C5860BF938BB57E0B7ED0F890D70BFEE55A0 Certificate serial: 59532D72F9F07A3365CCDB404CAC79E90B39AAA7 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8C57C5860BF938BB57E0B7ED0F890D70BFEE55A0.cer Subject info access: rsync://repo-rpki.idnic.net/repo/02913fa1-33ae-4e33-bbe2-81bd9f03c84b/0/8C57C5860BF938BB57E0B7ED0F890D70BFEE55A0.mft Manifest number: 030E Signing time: Mon 16 Jun 2025 22:50:03 +0000 Manifest this update: Mon 16 Jun 2025 22:45:03 +0000 Manifest next update: Fri 20 Jun 2025 04:59:03 +0000 Files and hashes: 1: 3130332e3135392e3230322e302f32332d3234203d3e20313331313131.roa (hash: Ho5Y5TOHX49gl1fZYVO+j2M3OjYa1AKAk+KnhAmd/6M=) 2: 8C57C5860BF938BB57E0B7ED0F890D70BFEE55A0.crl (hash: KXcMW6a1V2Fm/mADc7kJnyQzu8sbkQuf/6kddygY1u8=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/02913fa1-33ae-4e33-bbe2-81bd9f03c84b/0/8C57C5860BF938BB57E0B7ED0F890D70BFEE55A0.crl rsync://repo-rpki.idnic.net/repo/02913fa1-33ae-4e33-bbe2-81bd9f03c84b/0/8C57C5860BF938BB57E0B7ED0F890D70BFEE55A0.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8C57C5860BF938BB57E0B7ED0F890D70BFEE55A0.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 20 Jun 2025 04:59:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 59:53:2d:72:f9:f0:7a:33:65:cc:db:40:4c:ac:79:e9:0b:39:aa:a7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8C57C5860BF938BB57E0B7ED0F890D70BFEE55A0 Validity Not Before: Jun 16 22:45:03 2025 GMT Not After : Jun 20 04:59:03 2025 GMT Subject: CN=2687FFE9979D7F648E6DE14DE9B749FE922A9A46 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:5b:77:f5:6c:7c:28:e5:dd:53:27:42:ea:4e: e7:23:d7:37:88:82:ad:4e:3d:67:03:1d:99:c9:e1: de:84:da:a9:9b:68:e8:8b:dc:20:8f:7f:a1:1a:4d: aa:95:a7:ef:4e:af:53:73:81:45:97:ec:a9:87:71: d7:ae:bb:60:dd:5d:b0:bf:15:d1:ee:a1:2d:dc:31: d7:34:46:3e:84:b1:b8:44:5a:53:f6:1e:fa:80:aa: 89:40:8c:d6:1d:ac:81:9e:cd:bf:16:f2:d3:19:60: 76:ab:9c:6a:e3:b8:ce:76:83:06:29:7b:e2:42:db: db:04:d0:93:04:92:3c:e4:09:30:a8:92:55:ba:53: e0:4a:25:8b:f8:c7:86:5b:9a:89:1a:c4:af:aa:8d: 84:bc:ca:87:32:3f:a7:fb:d6:f7:dc:00:65:aa:ae: 0a:ea:76:63:a3:cc:1b:da:6b:b1:da:42:fa:c0:3b: d0:e0:95:63:8c:91:2c:41:97:de:f0:01:b8:c9:e1: 1d:48:33:ed:61:05:50:38:35:8f:87:b6:ea:6d:0b: d0:60:86:03:f4:24:a0:a8:50:09:51:17:03:5e:4c: 6b:d6:31:2e:92:d9:5c:60:35:a8:7b:64:7c:82:9b: e8:16:fd:ef:35:08:8d:0b:f5:ee:67:64:10:0d:85: c7:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 26:87:FF:E9:97:9D:7F:64:8E:6D:E1:4D:E9:B7:49:FE:92:2A:9A:46 X509v3 Authority Key Identifier: keyid:8C:57:C5:86:0B:F9:38:BB:57:E0:B7:ED:0F:89:0D:70:BF:EE:55:A0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/02913fa1-33ae-4e33-bbe2-81bd9f03c84b/0/8C57C5860BF938BB57E0B7ED0F890D70BFEE55A0.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8C57C5860BF938BB57E0B7ED0F890D70BFEE55A0.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/02913fa1-33ae-4e33-bbe2-81bd9f03c84b/0/8C57C5860BF938BB57E0B7ED0F890D70BFEE55A0.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 83:38:09:d9:bf:77:cd:02:9b:2e:0f:04:b2:c7:ea:ba:f4:9d: 28:79:ce:ed:fb:54:a6:bd:44:f2:81:dc:1d:b3:bf:92:0d:19: 29:dc:92:e0:8a:ae:8b:0f:6b:17:0b:37:06:11:40:f2:16:eb: 20:99:ed:57:9a:ac:40:fa:04:ea:02:3c:4f:3a:64:30:ed:e0: f0:36:ca:80:9c:03:13:f0:75:86:8d:8f:e0:bc:0c:36:51:7d: 43:5a:5f:9b:26:87:22:5c:55:f1:11:94:d7:79:b3:21:4a:13: d6:86:95:67:d5:06:87:b0:87:9e:02:4b:16:67:91:e9:95:c7: 31:a2:36:3a:98:21:32:08:a3:18:dc:24:3e:a0:d1:41:28:3c: bd:a6:97:4f:a9:f5:2b:d4:ae:9e:07:2a:bf:cb:58:e1:f9:cd: 25:53:42:ab:fa:0e:1f:05:df:6c:55:6d:87:02:15:f9:21:00: 2d:a1:a5:92:27:33:79:a0:d7:49:52:2b:a3:ca:03:ba:73:13: 1a:b2:49:88:dd:26:c3:1d:bc:00:53:8c:74:39:08:8f:42:d0: d5:75:52:5a:a4:66:cb:f6:3f:38:3e:8d:e5:ec:60:22:50:05: 01:a2:d5:3a:95:0a:c1:04:e2:d3:78:f8:fc:cf:50:46:5c:68: ab:1d:78:ea -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUWVMtcvnwejNlzNtATKx56Qs5qqcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEM1N0M1ODYwQkY5MzhCQjU3RTBCN0VEMEY4OTBENzBC RkVFNTVBMDAeFw0yNTA2MTYyMjQ1MDNaFw0yNTA2MjAwNDU5MDNaMDMxMTAvBgNV BAMTKDI2ODdGRkU5OTc5RDdGNjQ4RTZERTE0REU5Qjc0OUZFOTIyQTlBNDYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCzW3f1bHwo5d1TJ0LqTucj1zeI gq1OPWcDHZnJ4d6E2qmbaOiL3CCPf6EaTaqVp+9Or1NzgUWX7KmHcdeuu2DdXbC/ FdHuoS3cMdc0Rj6EsbhEWlP2HvqAqolAjNYdrIGezb8W8tMZYHarnGrjuM52gwYp e+JC29sE0JMEkjzkCTCoklW6U+BKJYv4x4ZbmokaxK+qjYS8yocyP6f71vfcAGWq rgrqdmOjzBvaa7HaQvrAO9DglWOMkSxBl97wAbjJ4R1IM+1hBVA4NY+HtuptC9Bg hgP0JKCoUAlRFwNeTGvWMS6S2VxgNah7ZHyCm+gW/e81CI0L9e5nZBANhcdbAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUJof/6Zedf2SObeFN6bdJ/pIqmkYwHwYDVR0j BBgwFoAUjFfFhgv5OLtX4LftD4kNcL/uVaAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w MjkxM2ZhMS0zM2FlLTRlMzMtYmJlMi04MWJkOWYwM2M4NGIvMC84QzU3QzU4NjBC RjkzOEJCNTdFMEI3RUQwRjg5MEQ3MEJGRUU1NUEwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOEM1N0M1ODYwQkY5MzhCQjU3RTBCN0VEMEY4OTBENzBCRkVF NTVBMC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMDI5MTNmYTEtMzNhZS00ZTMzLWJi ZTItODFiZDlmMDNjODRiLzAvOEM1N0M1ODYwQkY5MzhCQjU3RTBCN0VEMEY4OTBE NzBCRkVFNTVBMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIM4Cdm/d80Cmy4PBLLH6rr0nSh5zu37VKa9 RPKB3B2zv5INGSnckuCKrosPaxcLNwYRQPIW6yCZ7VearED6BOoCPE86ZDDt4PA2 yoCcAxPwdYaNj+C8DDZRfUNaX5smhyJcVfERlNd5syFKE9aGlWfVBoewh54CSxZn kemVxzGiNjqYITIIoxjcJD6g0UEoPL2ml0+p9SvUrp4HKr/LWOH5zSVTQqv6Dh8F 32xVbYcCFfkhAC2hpZInM3mg10lSK6PKA7pzExqySYjdJsMdvABTjHQ5CI9C0NV1 UlqkZsv2Pzg+jeXsYCJQBQGi1TqVCsEE4tN4+PzPUEZcaKsdeOo= -----END CERTIFICATE-----Generated at Tue Jun 17 11:11:45 2025 by rpki-client