$ rpki-client -vvf repo-rpki.idnic.net/repo/4157c9ac-52db-4dba-ac77-845e2ddd8879/0/8D7AD1F796C88BCD49E1BEC42851AFA58BD78588.mft File: 8D7AD1F796C88BCD49E1BEC42851AFA58BD78588.mft (raw, json) Hash identifier: PgFdL1EFUFRGJtfdjyGkkqiFo+ozcduTS9LguE3olhE= Subject key identifier: 41:F7:F7:EC:72:81:2F:7A:5E:28:8E:30:0A:CC:09:3F:B1:56:56:18 Authority key identifier: 8D:7A:D1:F7:96:C8:8B:CD:49:E1:BE:C4:28:51:AF:A5:8B:D7:85:88 Certificate issuer: /CN=8D7AD1F796C88BCD49E1BEC42851AFA58BD78588 Certificate serial: 71733EEBC3B0045D30DD664AB8D34890BD45EC28 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8D7AD1F796C88BCD49E1BEC42851AFA58BD78588.cer Subject info access: rsync://repo-rpki.idnic.net/repo/4157c9ac-52db-4dba-ac77-845e2ddd8879/0/8D7AD1F796C88BCD49E1BEC42851AFA58BD78588.mft Manifest number: 016B Signing time: Wed 18 Jun 2025 13:21:37 +0000 Manifest this update: Wed 18 Jun 2025 13:16:37 +0000 Manifest next update: Sat 21 Jun 2025 18:57:37 +0000 Files and hashes: 1: 3130332e3130312e39362e302f32332d3233203d3e20313530393430.roa (hash: lwBU7RZrxpXV+tNL6ldwUUEfAC8x198/UcNXhcVqIDE=) 2: 3130332e3130312e39372e302f32342d3234203d3e20313530393430.roa (hash: aTXk/DsjXzFyIklyAQb47qbqcaGolhR0lzBTP747Tls=) 3: 3130332e3130312e39362e302f32342d3234203d3e20313530393430.roa (hash: S5y/AAm56aWRItZwk28UKrK77+5w1nu1pwxZLQMOads=) 4: 8D7AD1F796C88BCD49E1BEC42851AFA58BD78588.crl (hash: XWgGiybZJprnrFeRQMbx69SQsr7bRu6ZGAOBJijEOoY=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/4157c9ac-52db-4dba-ac77-845e2ddd8879/0/8D7AD1F796C88BCD49E1BEC42851AFA58BD78588.crl rsync://repo-rpki.idnic.net/repo/4157c9ac-52db-4dba-ac77-845e2ddd8879/0/8D7AD1F796C88BCD49E1BEC42851AFA58BD78588.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8D7AD1F796C88BCD49E1BEC42851AFA58BD78588.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 21 Jun 2025 18:57:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 71:73:3e:eb:c3:b0:04:5d:30:dd:66:4a:b8:d3:48:90:bd:45:ec:28 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8D7AD1F796C88BCD49E1BEC42851AFA58BD78588 Validity Not Before: Jun 18 13:16:37 2025 GMT Not After : Jun 21 18:57:37 2025 GMT Subject: CN=41F7F7EC72812F7A5E288E300ACC093FB1565618 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:a0:87:21:76:83:14:80:5e:8c:63:9a:4f:8e: 60:61:93:c7:b2:dc:71:2e:c3:c6:83:10:03:b8:8b: 75:13:65:8f:5e:2f:52:f5:16:a9:2a:46:4e:7c:8e: 7a:f3:4f:f3:5e:74:dd:31:50:c0:a4:52:06:e9:9f: b3:1e:52:f8:62:95:3c:57:33:aa:2f:7b:66:7e:21: 23:17:de:1c:0a:d0:87:9e:27:58:3f:ed:e9:a4:33: e6:c8:9b:dc:65:c8:6b:d9:ea:3d:67:38:36:58:c0: 05:ba:6c:2d:0d:3e:a9:fa:c4:6d:ce:e2:a7:ca:31: 49:bb:65:35:ec:79:ee:d7:5c:ba:b9:cf:38:dc:7e: bd:52:c9:22:66:21:82:a8:46:ac:1a:1c:34:63:9e: 13:ea:76:92:6d:20:2a:ec:f4:f5:36:d7:3e:b4:88: 34:33:e6:f1:7c:a3:4c:3e:a6:24:8a:a1:02:6a:fa: 72:17:d4:1a:48:6e:02:e7:8c:cc:16:10:07:c0:d2: b3:72:4b:b0:69:34:9a:3d:d9:10:89:f2:ff:e6:55: 7e:fb:bc:5d:b5:de:51:8e:1d:3c:ba:c4:f4:02:d4: 30:ca:5e:08:ed:ee:cb:1e:d1:c5:25:bd:7b:2a:64: 13:d8:b9:76:40:ee:72:07:47:c6:45:a4:34:1e:46: 87:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:F7:F7:EC:72:81:2F:7A:5E:28:8E:30:0A:CC:09:3F:B1:56:56:18 X509v3 Authority Key Identifier: keyid:8D:7A:D1:F7:96:C8:8B:CD:49:E1:BE:C4:28:51:AF:A5:8B:D7:85:88 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/4157c9ac-52db-4dba-ac77-845e2ddd8879/0/8D7AD1F796C88BCD49E1BEC42851AFA58BD78588.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8D7AD1F796C88BCD49E1BEC42851AFA58BD78588.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/4157c9ac-52db-4dba-ac77-845e2ddd8879/0/8D7AD1F796C88BCD49E1BEC42851AFA58BD78588.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b0:c3:e2:97:d0:38:13:cd:9d:1f:db:5a:c4:18:dd:ae:15:a4: 59:9b:35:20:98:7c:35:49:01:a4:58:ef:77:5c:93:21:96:f1: 01:70:dc:d4:47:35:fb:d2:b9:48:51:c8:9c:ca:b4:ac:9e:65: c2:c8:cb:a2:80:73:63:97:bf:d0:37:35:54:95:a2:6a:71:a1: df:6e:ae:2b:cd:07:0c:f6:bb:d6:b4:82:45:18:b8:95:bb:0b: 0a:ba:d9:64:dd:c0:bc:7c:bb:b9:91:ea:cb:1d:76:00:3a:e2: da:97:6e:df:01:c3:98:fc:2b:8d:c5:d5:00:f4:79:63:8a:c1: be:ab:7d:e6:8c:2a:0a:41:3d:df:dc:a3:31:64:fb:6d:f2:54: fd:d7:d8:e3:28:d8:f2:bb:07:ff:9f:6b:72:52:94:39:55:ab: ec:f9:b7:1c:ff:c1:b1:6d:ab:04:28:dc:86:81:3a:44:7f:6f: 2f:14:72:fe:a4:57:73:13:47:e0:42:e3:8b:11:e8:40:17:78: 16:17:47:da:aa:cd:1f:5c:86:85:25:cd:6e:3c:cc:fc:f3:35: 76:51:0c:6d:1b:b7:46:1c:cf:38:b8:1f:87:25:ed:a1:45:04: c9:c6:6b:af:0e:91:f7:bb:76:da:59:22:e4:cd:2e:c5:8b:3a: ec:f5:0a:f4 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUcXM+68OwBF0w3WZKuNNIkL1F7CgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEQ3QUQxRjc5NkM4OEJDRDQ5RTFCRUM0Mjg1MUFGQTU4 QkQ3ODU4ODAeFw0yNTA2MTgxMzE2MzdaFw0yNTA2MjExODU3MzdaMDMxMTAvBgNV BAMTKDQxRjdGN0VDNzI4MTJGN0E1RTI4OEUzMDBBQ0MwOTNGQjE1NjU2MTgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDboIchdoMUgF6MY5pPjmBhk8ey 3HEuw8aDEAO4i3UTZY9eL1L1FqkqRk58jnrzT/NedN0xUMCkUgbpn7MeUvhilTxX M6ove2Z+ISMX3hwK0IeeJ1g/7emkM+bIm9xlyGvZ6j1nODZYwAW6bC0NPqn6xG3O 4qfKMUm7ZTXsee7XXLq5zzjcfr1SySJmIYKoRqwaHDRjnhPqdpJtICrs9PU21z60 iDQz5vF8o0w+piSKoQJq+nIX1BpIbgLnjMwWEAfA0rNyS7BpNJo92RCJ8v/mVX77 vF213lGOHTy6xPQC1DDKXgjt7sse0cUlvXsqZBPYuXZA7nIHR8ZFpDQeRocjAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUQff37HKBL3peKI4wCswJP7FWVhgwHwYDVR0j BBgwFoAUjXrR95bIi81J4b7EKFGvpYvXhYgwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 MTU3YzlhYy01MmRiLTRkYmEtYWM3Ny04NDVlMmRkZDg4NzkvMC84RDdBRDFGNzk2 Qzg4QkNENDlFMUJFQzQyODUxQUZBNThCRDc4NTg4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOEQ3QUQxRjc5NkM4OEJDRDQ5RTFCRUM0Mjg1MUFGQTU4QkQ3 ODU4OC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNDE1N2M5YWMtNTJkYi00ZGJhLWFj NzctODQ1ZTJkZGQ4ODc5LzAvOEQ3QUQxRjc5NkM4OEJDRDQ5RTFCRUM0Mjg1MUFG QTU4QkQ3ODU4OC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALDD4pfQOBPNnR/bWsQY3a4VpFmbNSCYfDVJ AaRY73dckyGW8QFw3NRHNfvSuUhRyJzKtKyeZcLIy6KAc2OXv9A3NVSVompxod9u rivNBwz2u9a0gkUYuJW7Cwq62WTdwLx8u7mR6ssddgA64tqXbt8Bw5j8K43F1QD0 eWOKwb6rfeaMKgpBPd/cozFk+23yVP3X2OMo2PK7B/+fa3JSlDlVq+z5txz/wbFt qwQo3IaBOkR/by8Ucv6kV3MTR+BC44sR6EAXeBYXR9qqzR9choUlzW48zPzzNXZR DG0bt0Yczzi4H4cl7aFFBMnGa68Okfe7dtpZIuTNLsWLOuz1CvQ= -----END CERTIFICATE-----Generated at Fri Jun 20 12:14:18 2025 by rpki-client