$ rpki-client -vvf repo-rpki.idnic.net/repo/14758e8e-49c8-48b8-bdcb-35339e2ae601/0/8F9164714A1B3B906CF8A8B371F342EBA3540CD9.mft File: 8F9164714A1B3B906CF8A8B371F342EBA3540CD9.mft (raw, json) Hash identifier: 34GRvmsOyZFiPuHKUgDErS9wJ4E/LDA9xh3qzL8ZKHg= Subject key identifier: 91:9E:67:A9:21:B7:88:80:A0:E3:90:3E:F6:0D:30:4A:85:5D:5A:4B Authority key identifier: 8F:91:64:71:4A:1B:3B:90:6C:F8:A8:B3:71:F3:42:EB:A3:54:0C:D9 Certificate issuer: /CN=8F9164714A1B3B906CF8A8B371F342EBA3540CD9 Certificate serial: 4C985B364087F9A1E16112A339F8ABBEE90DAB62 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8F9164714A1B3B906CF8A8B371F342EBA3540CD9.cer Subject info access: rsync://repo-rpki.idnic.net/repo/14758e8e-49c8-48b8-bdcb-35339e2ae601/0/8F9164714A1B3B906CF8A8B371F342EBA3540CD9.mft Manifest number: 01DA Signing time: Sat 14 Jun 2025 23:30:34 +0000 Manifest this update: Sat 14 Jun 2025 23:25:34 +0000 Manifest next update: Wed 18 Jun 2025 08:42:34 +0000 Files and hashes: 1: 8F9164714A1B3B906CF8A8B371F342EBA3540CD9.crl (hash: wB0KKCDWIJtSYFxdIIHQMDf6QwqMBwyqTd5EAdmaKKc=) 2: 3130332e3138382e3131392e302f32342d3234203d3e20313439373435.roa (hash: VHhhP8m98Q6XFX6o9Io0DEj5+ACOMVpb0NESi8BC7x8=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/14758e8e-49c8-48b8-bdcb-35339e2ae601/0/8F9164714A1B3B906CF8A8B371F342EBA3540CD9.crl rsync://repo-rpki.idnic.net/repo/14758e8e-49c8-48b8-bdcb-35339e2ae601/0/8F9164714A1B3B906CF8A8B371F342EBA3540CD9.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8F9164714A1B3B906CF8A8B371F342EBA3540CD9.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 18 Jun 2025 08:42:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4c:98:5b:36:40:87:f9:a1:e1:61:12:a3:39:f8:ab:be:e9:0d:ab:62 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8F9164714A1B3B906CF8A8B371F342EBA3540CD9 Validity Not Before: Jun 14 23:25:34 2025 GMT Not After : Jun 18 08:42:34 2025 GMT Subject: CN=919E67A921B78880A0E3903EF60D304A855D5A4B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:41:62:c5:7c:5c:33:34:a7:c4:dc:3b:42:3a: 7c:48:a0:a5:7e:7e:c2:6c:bb:c7:26:00:93:49:b4: c0:72:64:0d:47:6b:39:b2:30:f4:94:dd:47:a8:e5: 93:79:bf:e1:14:49:fd:dd:09:27:54:b8:df:b3:b0: cf:18:c4:f1:20:aa:8d:88:ff:a8:27:c3:ec:9a:d9: f7:9e:b2:01:9e:b7:35:c4:a6:68:7a:e1:46:90:88: a3:b9:19:7b:fa:30:bf:d6:6f:96:b1:dd:6f:9b:63: c4:7c:95:18:5e:dc:ee:70:84:79:4b:80:d0:40:3c: f5:cf:fa:4e:be:96:e5:ac:a7:1e:8b:5d:90:91:45: ab:db:b5:4d:c1:d4:90:6c:4a:91:13:fb:28:f8:de: cd:63:de:15:3f:70:5b:2e:91:7d:53:95:bb:67:f0: e8:16:9c:8e:ed:59:38:1f:ac:48:b5:a1:ee:8c:0b: 8d:c5:a3:2e:af:1d:c8:ae:d8:1a:53:4a:85:57:52: 0a:cf:28:2c:93:cc:4b:98:98:91:72:cd:0d:75:aa: bb:ad:80:8f:82:33:95:14:8a:08:60:fa:29:0e:10: 6b:ba:d0:4c:20:9c:cd:d3:eb:b5:7d:47:3f:08:cc: 2a:ba:b2:65:a2:12:64:34:49:59:eb:2e:66:9f:c3: 85:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:9E:67:A9:21:B7:88:80:A0:E3:90:3E:F6:0D:30:4A:85:5D:5A:4B X509v3 Authority Key Identifier: keyid:8F:91:64:71:4A:1B:3B:90:6C:F8:A8:B3:71:F3:42:EB:A3:54:0C:D9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/14758e8e-49c8-48b8-bdcb-35339e2ae601/0/8F9164714A1B3B906CF8A8B371F342EBA3540CD9.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8F9164714A1B3B906CF8A8B371F342EBA3540CD9.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/14758e8e-49c8-48b8-bdcb-35339e2ae601/0/8F9164714A1B3B906CF8A8B371F342EBA3540CD9.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 00:dc:db:7e:68:c2:14:47:69:3d:ad:3d:f5:6d:05:f7:4d:d2: 9a:19:27:ef:79:20:a3:02:23:67:b6:06:01:21:56:3f:82:0d: d0:ba:e9:85:59:6c:90:4c:f2:3f:c9:43:4f:eb:af:19:83:cb: 8d:85:68:5a:56:db:63:c4:bc:1a:de:d0:d3:80:22:ca:25:40: 54:5b:16:9a:ba:13:fb:f6:b7:9f:6c:59:82:c2:c2:80:d2:d4: 93:26:02:55:f5:ec:cc:a4:7c:d9:02:00:c4:1d:f1:2a:5f:41: df:a7:cf:98:63:ea:f9:11:28:b0:6a:12:1c:11:cd:12:2c:22: 57:89:b8:34:65:0b:c9:bc:5b:38:8f:b5:1e:99:7c:51:a8:72: c0:97:b5:c0:6f:e5:b4:4a:3a:eb:63:d0:0e:95:70:74:da:91: 56:c7:c9:00:d0:c4:87:dc:48:c7:85:3d:cc:3f:da:c7:41:ee: 31:0a:54:64:d0:87:1e:65:ae:b5:19:10:82:05:6d:62:55:5a: 45:b4:65:60:d5:27:31:89:9a:73:1e:8f:98:0b:b2:bc:06:0c: af:be:c6:1b:6b:38:f6:16:e7:c0:e9:d8:ba:cb:8c:78:39:3a: 6c:98:74:e4:2a:dd:78:4d:63:39:9a:dd:17:7b:91:b7:27:9c: 52:97:c0:26 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUTJhbNkCH+aHhYRKjOfirvukNq2IwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEY5MTY0NzE0QTFCM0I5MDZDRjhBOEIzNzFGMzQyRUJB MzU0MENEOTAeFw0yNTA2MTQyMzI1MzRaFw0yNTA2MTgwODQyMzRaMDMxMTAvBgNV BAMTKDkxOUU2N0E5MjFCNzg4ODBBMEUzOTAzRUY2MEQzMDRBODU1RDVBNEIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDKQWLFfFwzNKfE3DtCOnxIoKV+ fsJsu8cmAJNJtMByZA1HazmyMPSU3Ueo5ZN5v+EUSf3dCSdUuN+zsM8YxPEgqo2I /6gnw+ya2feesgGetzXEpmh64UaQiKO5GXv6ML/Wb5ax3W+bY8R8lRhe3O5whHlL gNBAPPXP+k6+luWspx6LXZCRRavbtU3B1JBsSpET+yj43s1j3hU/cFsukX1Tlbtn 8OgWnI7tWTgfrEi1oe6MC43Foy6vHciu2BpTSoVXUgrPKCyTzEuYmJFyzQ11qrut gI+CM5UUighg+ikOEGu60EwgnM3T67V9Rz8IzCq6smWiEmQ0SVnrLmafw4XhAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUkZ5nqSG3iICg45A+9g0wSoVdWkswHwYDVR0j BBgwFoAUj5FkcUobO5Bs+KizcfNC66NUDNkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x NDc1OGU4ZS00OWM4LTQ4YjgtYmRjYi0zNTMzOWUyYWU2MDEvMC84RjkxNjQ3MTRB MUIzQjkwNkNGOEE4QjM3MUYzNDJFQkEzNTQwQ0Q5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOEY5MTY0NzE0QTFCM0I5MDZDRjhBOEIzNzFGMzQyRUJBMzU0 MENEOS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMTQ3NThlOGUtNDljOC00OGI4LWJk Y2ItMzUzMzllMmFlNjAxLzAvOEY5MTY0NzE0QTFCM0I5MDZDRjhBOEIzNzFGMzQy RUJBMzU0MENEOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAADc235owhRHaT2tPfVtBfdN0poZJ+95IKMC I2e2BgEhVj+CDdC66YVZbJBM8j/JQ0/rrxmDy42FaFpW22PEvBre0NOAIsolQFRb Fpq6E/v2t59sWYLCwoDS1JMmAlX17MykfNkCAMQd8SpfQd+nz5hj6vkRKLBqEhwR zRIsIleJuDRlC8m8WziPtR6ZfFGocsCXtcBv5bRKOutj0A6VcHTakVbHyQDQxIfc SMeFPcw/2sdB7jEKVGTQhx5lrrUZEIIFbWJVWkW0ZWDVJzGJmnMej5gLsrwGDK++ xhtrOPYW58Dp2LrLjHg5OmyYdOQq3XhNYzma3Rd7kbcnnFKXwCY= -----END CERTIFICATE-----Generated at Mon Jun 16 04:14:06 2025 by rpki-client