$ rpki-client -vvf repo-rpki.idnic.net/repo/34e2bf09-5f42-4b65-a42d-63d0796d206c/0/8C3E44A2E2B475D5CF4A48E52D17290001FEFECA.mft File: 8C3E44A2E2B475D5CF4A48E52D17290001FEFECA.mft (raw, json) Hash identifier: W634OVb3Qddm4Aj2geim04CZgTvRSUQwefQCEPFRALQ= Subject key identifier: 1C:47:D5:8A:76:C3:EE:59:4B:19:94:43:28:CD:74:B5:E6:52:42:71 Authority key identifier: 8C:3E:44:A2:E2:B4:75:D5:CF:4A:48:E5:2D:17:29:00:01:FE:FE:CA Certificate issuer: /CN=8C3E44A2E2B475D5CF4A48E52D17290001FEFECA Certificate serial: 721C631079E352438A78C1E5F6DCF701DDAC90CE Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8C3E44A2E2B475D5CF4A48E52D17290001FEFECA.cer Subject info access: rsync://repo-rpki.idnic.net/repo/34e2bf09-5f42-4b65-a42d-63d0796d206c/0/8C3E44A2E2B475D5CF4A48E52D17290001FEFECA.mft Manifest number: 04EA Signing time: Sat 14 Jun 2025 07:00:36 +0000 Manifest this update: Sat 14 Jun 2025 06:55:36 +0000 Manifest next update: Tue 17 Jun 2025 18:03:36 +0000 Files and hashes: 1: 8C3E44A2E2B475D5CF4A48E52D17290001FEFECA.crl (hash: M6o4o3OmsdXISaguS1lhqC0T8Z9LMTpEjHM3bE6JobI=) 2: 34332e3233302e342e302f32342d3234203d3e203338373838.roa (hash: Myo0yUY2zYBlmDu7ifkTtwfEDTywRzZJiBzIgMz4kyk=) 3: 3130332e372e312e302f32342d3234203d3e203338373838.roa (hash: HfReQfR8KQgqYxrjCjLONRll8cJTpbYph9s5PnSext8=) 4: 34332e3233312e3132382e302f32332d3233203d3e203338373838.roa (hash: HFx27am61y/dC1xdTadXPgOw5A9a+PEjL0futSZShAU=) 5: 3130332e372e302e302f32342d3234203d3e203338373838.roa (hash: IvhePbxETJJ1An12hekeGcMrYJecR0U54GWOfDVzXpo=) 6: 34332e3233312e3132382e302f32342d3234203d3e203338373838.roa (hash: lmYVrCn9BeJjLwZ83vYZIK3fLJEIHwntZ3WH1J4i7Cc=) 7: 3130332e3234322e3138302e302f32342d3234203d3e203338373838.roa (hash: J6znwF/VIOIQq7nf+/cVdXFnP4yNGPdAl3m1qZHQzpE=) 8: 3130332e3234322e3138302e302f32332d3233203d3e203338373838.roa (hash: Q4FCJx2xdQyXWuG/Mkdlbm+EYQuJWHSMRXEQhaDwxBc=) 9: 34332e3233312e3132392e302f32342d3234203d3e203338373838.roa (hash: W5Zb76xYohKVMN4oDjg1HwPWp43mgnWE5orvLBb5SkM=) 10: 34332e3233302e372e302f32342d3234203d3e203338373838.roa (hash: i3HQaU7A5T+hugQmUCoVWplcF5RYtJ+OjDq/WGotyFM=) 11: 3130332e3234322e3138312e302f32342d3234203d3e203338373838.roa (hash: i565en58aZkxitE/Cu7dj7vQtPe24rOc0XFo1zdj2pA=) 12: 3130332e372e302e302f32332d3233203d3e203338373838.roa (hash: eYJSZ6BNvJdcwOjXxyxNY4HDMCsMbaLoRNn+0CbiAds=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/34e2bf09-5f42-4b65-a42d-63d0796d206c/0/8C3E44A2E2B475D5CF4A48E52D17290001FEFECA.crl rsync://repo-rpki.idnic.net/repo/34e2bf09-5f42-4b65-a42d-63d0796d206c/0/8C3E44A2E2B475D5CF4A48E52D17290001FEFECA.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8C3E44A2E2B475D5CF4A48E52D17290001FEFECA.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 17 Jun 2025 18:03:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 72:1c:63:10:79:e3:52:43:8a:78:c1:e5:f6:dc:f7:01:dd:ac:90:ce Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8C3E44A2E2B475D5CF4A48E52D17290001FEFECA Validity Not Before: Jun 14 06:55:36 2025 GMT Not After : Jun 17 18:03:36 2025 GMT Subject: CN=1C47D58A76C3EE594B19944328CD74B5E6524271 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:8d:80:d3:b2:86:65:0a:ae:bc:79:6d:cb:f3: c0:23:95:62:2e:01:b8:93:c3:24:1b:5d:d5:e8:e6: 31:d7:5a:8f:1c:aa:3b:60:dd:57:fb:93:0f:dd:4e: 87:9e:9d:c0:e4:25:e5:44:58:1a:fd:5d:cf:01:9a: 5f:72:53:18:a9:47:58:0a:ca:1b:ea:d8:67:71:88: fa:9a:af:c9:0e:e1:b2:0f:65:93:cd:4f:92:a3:58: 14:80:b3:47:c6:44:0a:2b:02:d3:25:b6:f6:b7:c2: e7:f3:27:7a:0a:c9:f0:27:19:f6:f9:68:73:64:61: 8d:bf:63:ea:53:9b:26:b4:c6:d3:3b:32:39:75:93: ad:0d:c5:ea:3a:cb:59:3d:a3:70:91:cc:e5:bc:14: da:ad:28:64:7c:9a:bf:ca:12:14:92:66:fa:f7:7d: 36:0f:c9:6e:92:0b:a5:02:28:d7:88:81:9f:1d:de: a2:69:ba:62:5d:4b:c9:0b:26:29:ae:a7:0c:f0:aa: 42:73:f9:9a:69:ee:e1:0c:f6:29:2a:e9:f2:c8:e3: f5:df:17:86:0b:75:98:92:fd:1b:a6:d2:a5:27:80: cf:3e:28:e0:55:c8:d8:32:87:2f:3c:c0:f0:dc:6c: cc:08:1e:79:a6:af:ac:c2:10:f4:29:01:d8:41:cf: b1:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1C:47:D5:8A:76:C3:EE:59:4B:19:94:43:28:CD:74:B5:E6:52:42:71 X509v3 Authority Key Identifier: keyid:8C:3E:44:A2:E2:B4:75:D5:CF:4A:48:E5:2D:17:29:00:01:FE:FE:CA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/34e2bf09-5f42-4b65-a42d-63d0796d206c/0/8C3E44A2E2B475D5CF4A48E52D17290001FEFECA.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8C3E44A2E2B475D5CF4A48E52D17290001FEFECA.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/34e2bf09-5f42-4b65-a42d-63d0796d206c/0/8C3E44A2E2B475D5CF4A48E52D17290001FEFECA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 89:b8:be:d0:4a:ff:26:88:8a:1e:57:ea:1d:06:2b:62:f7:79: 2c:81:45:ef:85:f1:19:ef:94:95:71:2b:6f:94:4c:d0:da:15: fe:2e:3f:29:6b:9e:1a:1b:55:55:99:d3:6f:81:c6:fc:75:0c: a4:5e:88:f9:4e:dc:b0:37:47:50:46:c7:96:65:9b:31:e1:2f: 77:db:45:58:6e:c6:bc:63:86:ab:25:b6:0d:ad:32:5b:7d:0b: 43:31:81:c3:d4:61:9c:e1:57:e4:06:df:70:27:f9:8a:ba:6a: ea:f7:0f:f8:59:4a:9f:49:6b:36:62:90:0a:c0:9a:0c:34:66: 8d:12:3c:20:63:6b:79:9d:2b:fa:6e:dc:79:41:be:f6:7c:a0: a2:c3:4f:51:1c:52:65:c2:00:4b:f9:e4:a0:d8:2e:31:3e:f4: 7e:93:76:e0:28:39:10:7b:2d:55:58:02:f1:25:ea:50:c4:64: 3f:51:8a:f4:57:fe:d8:dd:6e:04:da:06:17:8f:bb:a2:6a:05: c3:75:6d:4d:1f:c5:32:a9:05:fa:8b:58:d8:72:11:e7:5d:9d: 0d:3f:05:72:0a:56:a4:7d:00:dd:78:8f:d4:31:c2:99:15:8b: 00:94:09:2a:48:b1:55:ec:5e:6f:0b:9d:3b:85:d6:07:14:68: 8d:b3:a1:1b -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUchxjEHnjUkOKeMHl9tz3Ad2skM4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEMzRTQ0QTJFMkI0NzVENUNGNEE0OEU1MkQxNzI5MDAw MUZFRkVDQTAeFw0yNTA2MTQwNjU1MzZaFw0yNTA2MTcxODAzMzZaMDMxMTAvBgNV BAMTKDFDNDdENThBNzZDM0VFNTk0QjE5OTQ0MzI4Q0Q3NEI1RTY1MjQyNzEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC5jYDTsoZlCq68eW3L88AjlWIu AbiTwyQbXdXo5jHXWo8cqjtg3Vf7kw/dToeencDkJeVEWBr9Xc8Bml9yUxipR1gK yhvq2GdxiPqar8kO4bIPZZPNT5KjWBSAs0fGRAorAtMltva3wufzJ3oKyfAnGfb5 aHNkYY2/Y+pTmya0xtM7Mjl1k60Nxeo6y1k9o3CRzOW8FNqtKGR8mr/KEhSSZvr3 fTYPyW6SC6UCKNeIgZ8d3qJpumJdS8kLJimupwzwqkJz+Zpp7uEM9ikq6fLI4/Xf F4YLdZiS/Rum0qUngM8+KOBVyNgyhy88wPDcbMwIHnmmr6zCEPQpAdhBz7FLAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUHEfVinbD7llLGZRDKM10teZSQnEwHwYDVR0j BBgwFoAUjD5EouK0ddXPSkjlLRcpAAH+/sowDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z NGUyYmYwOS01ZjQyLTRiNjUtYTQyZC02M2QwNzk2ZDIwNmMvMC84QzNFNDRBMkUy QjQ3NUQ1Q0Y0QTQ4RTUyRDE3MjkwMDAxRkVGRUNBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOEMzRTQ0QTJFMkI0NzVENUNGNEE0OEU1MkQxNzI5MDAwMUZF RkVDQS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMzRlMmJmMDktNWY0Mi00YjY1LWE0 MmQtNjNkMDc5NmQyMDZjLzAvOEMzRTQ0QTJFMkI0NzVENUNGNEE0OEU1MkQxNzI5 MDAwMUZFRkVDQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIm4vtBK/yaIih5X6h0GK2L3eSyBRe+F8Rnv lJVxK2+UTNDaFf4uPylrnhobVVWZ02+Bxvx1DKReiPlO3LA3R1BGx5ZlmzHhL3fb RVhuxrxjhqsltg2tMlt9C0MxgcPUYZzhV+QG33An+Yq6aur3D/hZSp9JazZikArA mgw0Zo0SPCBja3mdK/pu3HlBvvZ8oKLDT1EcUmXCAEv55KDYLjE+9H6TduAoORB7 LVVYAvEl6lDEZD9RivRX/tjdbgTaBhePu6JqBcN1bU0fxTKpBfqLWNhyEeddnQ0/ BXIKVqR9AN14j9QxwpkViwCUCSpIsVXsXm8LnTuF1gcUaI2zoRs= -----END CERTIFICATE-----Generated at Sun Jun 15 22:25:07 2025 by rpki-client