$ rpki-client -vvf repo-rpki.idnic.net/repo/2d2a5b51-bc00-4d6b-8761-c7d0d3f6de12/0/8C5FA2EBD7AF40393883FB08E71BDF41AAE20F57.mft File: 8C5FA2EBD7AF40393883FB08E71BDF41AAE20F57.mft (raw, json) Hash identifier: ffQlUfVOoYQ35X2EVKmUebHc0Lugfyejbz2nBFUOexE= Subject key identifier: B7:C5:54:37:C2:B5:07:11:BF:56:9E:46:F3:5C:35:D3:22:9C:29:BF Authority key identifier: 8C:5F:A2:EB:D7:AF:40:39:38:83:FB:08:E7:1B:DF:41:AA:E2:0F:57 Certificate issuer: /CN=8C5FA2EBD7AF40393883FB08E71BDF41AAE20F57 Certificate serial: 760ADC5D9C5B81C4DBDF4AC927BFA5E8E8E31E49 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8C5FA2EBD7AF40393883FB08E71BDF41AAE20F57.cer Subject info access: rsync://repo-rpki.idnic.net/repo/2d2a5b51-bc00-4d6b-8761-c7d0d3f6de12/0/8C5FA2EBD7AF40393883FB08E71BDF41AAE20F57.mft Manifest number: 04A2 Signing time: Tue 05 Aug 2025 14:51:34 +0000 Manifest this update: Tue 05 Aug 2025 14:46:34 +0000 Manifest next update: Fri 08 Aug 2025 17:01:34 +0000 Files and hashes: 1: 3130332e3131382e3132342e302f32322d3234203d3e20313337333736.roa (hash: GgQGIVctlCvNlOfS2rEwMFV2kj5ohQAxfF74xcz3/1E=) 2: 8C5FA2EBD7AF40393883FB08E71BDF41AAE20F57.crl (hash: /aor8xZKAtvmjJcf41vMa7frFiPdWXPtuscqzmzZ5PM=) 3: 323430333a333163303a3a2f33322d3332203d3e20313337333736.roa (hash: ZFgZf5/tUMHm0Xvm8MvmyqUsY/m95WPUFwA/Bk3NXco=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/2d2a5b51-bc00-4d6b-8761-c7d0d3f6de12/0/8C5FA2EBD7AF40393883FB08E71BDF41AAE20F57.crl rsync://repo-rpki.idnic.net/repo/2d2a5b51-bc00-4d6b-8761-c7d0d3f6de12/0/8C5FA2EBD7AF40393883FB08E71BDF41AAE20F57.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8C5FA2EBD7AF40393883FB08E71BDF41AAE20F57.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 08 Aug 2025 17:01:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 76:0a:dc:5d:9c:5b:81:c4:db:df:4a:c9:27:bf:a5:e8:e8:e3:1e:49 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8C5FA2EBD7AF40393883FB08E71BDF41AAE20F57 Validity Not Before: Aug 5 14:46:34 2025 GMT Not After : Aug 8 17:01:34 2025 GMT Subject: CN=B7C55437C2B50711BF569E46F35C35D3229C29BF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:b1:9a:05:25:99:31:2a:24:e8:82:16:8d:81: d6:a8:bb:65:26:9b:0e:14:5f:cc:cf:e8:d1:bc:67: f4:08:e3:9f:b0:a2:80:c1:4d:2b:5e:8e:79:70:b1: 36:9c:04:0f:fc:ca:4a:cc:5f:dd:a9:ec:2d:bc:f2: 82:56:69:71:c3:7e:58:51:31:65:d8:38:ee:12:6e: 77:0e:e9:12:54:4a:cd:5e:e8:35:55:67:f0:48:3c: ac:71:28:d9:4e:22:2e:39:d9:cd:16:18:d6:48:e0: e1:72:05:b7:28:81:33:ef:83:05:41:99:c7:c2:0e: f0:68:a5:4b:70:b7:22:e2:4b:13:99:2b:b4:d2:b0: 23:13:12:ba:8c:b3:8e:99:3a:db:d6:62:86:0d:57: 27:d2:01:ab:fe:8c:4b:7d:6d:7f:c5:28:6a:57:ee: 96:da:e0:ba:48:4b:00:9a:4d:bc:6d:b8:cf:9f:af: 9e:3c:84:b8:f1:07:b8:71:19:ff:80:4b:81:8a:03: 97:07:23:a1:f5:43:f0:27:db:56:16:2e:6f:50:1c: 52:25:e2:a8:3f:9c:4d:16:37:6b:b2:4c:e9:48:ce: ff:8f:14:fe:2c:98:01:c3:74:1c:9e:9c:b9:ea:4e: 2a:c2:39:a9:57:6f:ac:25:96:bf:90:c3:40:a1:7d: 06:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B7:C5:54:37:C2:B5:07:11:BF:56:9E:46:F3:5C:35:D3:22:9C:29:BF X509v3 Authority Key Identifier: keyid:8C:5F:A2:EB:D7:AF:40:39:38:83:FB:08:E7:1B:DF:41:AA:E2:0F:57 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/2d2a5b51-bc00-4d6b-8761-c7d0d3f6de12/0/8C5FA2EBD7AF40393883FB08E71BDF41AAE20F57.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8C5FA2EBD7AF40393883FB08E71BDF41AAE20F57.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/2d2a5b51-bc00-4d6b-8761-c7d0d3f6de12/0/8C5FA2EBD7AF40393883FB08E71BDF41AAE20F57.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9a:2c:85:0d:ed:23:2d:8b:97:35:7a:60:b8:b3:bb:fc:34:9c: 68:b1:58:62:2b:19:5a:ec:ec:98:03:fe:62:df:dc:62:c9:61: 8c:0c:e2:5d:67:9b:95:41:62:f1:c6:6b:90:c2:67:c4:d3:27: 05:67:98:56:fb:9c:b0:32:1d:e4:84:42:67:d6:91:55:51:d9: af:66:bb:ee:ae:34:ac:d0:40:5b:1a:e2:aa:39:31:06:66:f0: 57:06:74:e1:81:08:2e:0d:bd:e0:0c:78:16:8b:b3:10:78:8e: 26:55:53:33:a5:37:2d:c9:1d:fc:2a:9f:96:b9:8a:a7:d6:ac: 53:93:3f:3e:34:2a:b9:da:97:f7:db:f2:fa:ff:db:6d:e7:7c: 83:ac:11:a2:1a:d6:55:43:7d:cc:e2:0f:b7:74:a7:b5:01:1e: a3:a0:7f:f7:3a:29:03:ec:3a:e6:be:6f:50:9b:89:b9:dd:a7: 05:c9:b5:08:f7:c3:68:8d:c1:8d:79:be:5e:15:ec:13:9a:9a: 6a:ca:02:57:de:5e:c7:46:d4:80:fe:d7:c6:22:c0:92:47:b4: 50:98:46:4d:fc:49:ae:2b:71:be:4a:c5:88:2a:5b:29:31:1f: 98:5d:18:77:0e:32:b1:0a:cc:99:5c:cd:aa:0c:94:88:d9:e7: 6e:6e:ad:e8 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUdgrcXZxbgcTb30rJJ7+l6OjjHkkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEM1RkEyRUJEN0FGNDAzOTM4ODNGQjA4RTcxQkRGNDFB QUUyMEY1NzAeFw0yNTA4MDUxNDQ2MzRaFw0yNTA4MDgxNzAxMzRaMDMxMTAvBgNV BAMTKEI3QzU1NDM3QzJCNTA3MTFCRjU2OUU0NkYzNUMzNUQzMjI5QzI5QkYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCnsZoFJZkxKiToghaNgdaou2Um mw4UX8zP6NG8Z/QI45+wooDBTStejnlwsTacBA/8ykrMX92p7C288oJWaXHDflhR MWXYOO4SbncO6RJUSs1e6DVVZ/BIPKxxKNlOIi452c0WGNZI4OFyBbcogTPvgwVB mcfCDvBopUtwtyLiSxOZK7TSsCMTErqMs46ZOtvWYoYNVyfSAav+jEt9bX/FKGpX 7pba4LpISwCaTbxtuM+fr548hLjxB7hxGf+AS4GKA5cHI6H1Q/An21YWLm9QHFIl 4qg/nE0WN2uyTOlIzv+PFP4smAHDdByenLnqTirCOalXb6wllr+Qw0ChfQYRAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUt8VUN8K1BxG/Vp5G81w10yKcKb8wHwYDVR0j BBgwFoAUjF+i69evQDk4g/sI5xvfQariD1cwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y ZDJhNWI1MS1iYzAwLTRkNmItODc2MS1jN2QwZDNmNmRlMTIvMC84QzVGQTJFQkQ3 QUY0MDM5Mzg4M0ZCMDhFNzFCREY0MUFBRTIwRjU3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOEM1RkEyRUJEN0FGNDAzOTM4ODNGQjA4RTcxQkRGNDFBQUUy MEY1Ny5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMmQyYTViNTEtYmMwMC00ZDZiLTg3 NjEtYzdkMGQzZjZkZTEyLzAvOEM1RkEyRUJEN0FGNDAzOTM4ODNGQjA4RTcxQkRG NDFBQUUyMEY1Ny5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJoshQ3tIy2LlzV6YLizu/w0nGixWGIrGVrs 7JgD/mLf3GLJYYwM4l1nm5VBYvHGa5DCZ8TTJwVnmFb7nLAyHeSEQmfWkVVR2a9m u+6uNKzQQFsa4qo5MQZm8FcGdOGBCC4NveAMeBaLsxB4jiZVUzOlNy3JHfwqn5a5 iqfWrFOTPz40Krnal/fb8vr/223nfIOsEaIa1lVDfcziD7d0p7UBHqOgf/c6KQPs Oua+b1CbibndpwXJtQj3w2iNwY15vl4V7BOammrKAlfeXsdG1ID+18YiwJJHtFCY Rk38Sa4rcb5KxYgqWykxH5hdGHcOMrEKzJlczaoMlIjZ525ureg= -----END CERTIFICATE-----Generated at Thu Aug 7 00:27:17 2025 by rpki-client