$ rpki-client -vvf repo-rpki.idnic.net/repo/42083d44-7835-443d-853a-0a79cf00e950/0/08A94FD7F0E8A287AD318D7A26254192431E175F.mft File: 08A94FD7F0E8A287AD318D7A26254192431E175F.mft (raw, json) Hash identifier: F7EYMwYGoX8VqonUgDxQo7upHSZfPwbujEa0Af2ZEeU= Subject key identifier: 32:0C:DE:CA:69:AE:08:CE:5E:8F:8A:CC:9E:22:F7:2B:C9:60:1C:97 Authority key identifier: 08:A9:4F:D7:F0:E8:A2:87:AD:31:8D:7A:26:25:41:92:43:1E:17:5F Certificate issuer: /CN=08A94FD7F0E8A287AD318D7A26254192431E175F Certificate serial: 501E40DD71EB5F468B5BAEE1577E5D1F1F81AA6E Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/08A94FD7F0E8A287AD318D7A26254192431E175F.cer Subject info access: rsync://repo-rpki.idnic.net/repo/42083d44-7835-443d-853a-0a79cf00e950/0/08A94FD7F0E8A287AD318D7A26254192431E175F.mft Manifest number: 01A3 Signing time: Wed 18 Jun 2025 07:20:37 +0000 Manifest this update: Wed 18 Jun 2025 07:15:37 +0000 Manifest next update: Sat 21 Jun 2025 10:52:37 +0000 Files and hashes: 1: 08A94FD7F0E8A287AD318D7A26254192431E175F.crl (hash: oxrbiTCKzX6YuMMK8Axkim55MWvm9+TG1tCO4rwMADY=) 2: 3130332e34332e32342e302f32332d3233203d3e20313339343139.roa (hash: hbNG6hIOkdyYmaAkCW7DcbNe2DcTn/F6KWsqvk9yDQk=) 3: 3130332e34332e32342e302f32342d3234203d3e20313339343139.roa (hash: n37UknBhv1+9WuSxzltTO8fZT8WF7d4rSmL/iPmFdNo=) 4: 3130332e34332e32352e302f32342d3234203d3e20313339343139.roa (hash: qjzhR95ymw0taG0t2O442+cnY2VZL01g0Ypqud4E2Io=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/42083d44-7835-443d-853a-0a79cf00e950/0/08A94FD7F0E8A287AD318D7A26254192431E175F.crl rsync://repo-rpki.idnic.net/repo/42083d44-7835-443d-853a-0a79cf00e950/0/08A94FD7F0E8A287AD318D7A26254192431E175F.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/08A94FD7F0E8A287AD318D7A26254192431E175F.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 21 Jun 2025 10:52:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 50:1e:40:dd:71:eb:5f:46:8b:5b:ae:e1:57:7e:5d:1f:1f:81:aa:6e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=08A94FD7F0E8A287AD318D7A26254192431E175F Validity Not Before: Jun 18 07:15:37 2025 GMT Not After : Jun 21 10:52:37 2025 GMT Subject: CN=320CDECA69AE08CE5E8F8ACC9E22F72BC9601C97 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:24:8c:95:05:b8:fe:fc:db:7c:49:0a:3f:0d: 95:9f:c6:0a:be:fe:9f:77:2e:b9:82:7a:94:ee:5f: b7:c2:19:32:db:ca:7a:ce:51:7b:e4:66:0f:26:55: 1a:ce:c6:33:45:8c:38:bf:ce:b4:ed:18:43:6d:19: cb:f4:68:84:1a:fc:98:45:e2:fe:56:e9:98:e8:aa: af:41:65:e2:b7:7f:60:f4:6c:f4:a2:19:84:39:bb: 3a:ab:98:94:74:84:cf:8c:0f:3c:30:0e:72:26:3d: 93:f2:7b:96:b6:bf:4a:a1:9b:37:63:fb:46:65:69: 17:64:5b:26:1c:47:2e:f9:89:c3:b4:f8:67:dc:b9: 19:cd:27:75:b7:54:e4:64:42:98:7c:e0:c5:a9:6b: 49:e3:c6:5e:bf:db:60:3d:55:1b:f7:a5:00:b1:be: c2:f1:2d:16:f3:26:04:97:f7:e1:12:e4:e9:9f:7a: 7a:97:fe:ea:0d:50:c5:26:9a:f1:a0:45:62:3f:2c: 7b:7b:56:e9:db:ea:bf:05:41:e8:16:6c:cb:3c:ab: 9a:f2:a1:d8:62:fb:81:3c:e0:d7:cd:80:63:96:db: 29:44:11:6b:9b:79:d0:a1:cf:59:cc:f5:c4:a7:43: 7e:24:a7:1a:6e:14:e4:4b:73:68:06:ff:9e:76:47: 9e:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:0C:DE:CA:69:AE:08:CE:5E:8F:8A:CC:9E:22:F7:2B:C9:60:1C:97 X509v3 Authority Key Identifier: keyid:08:A9:4F:D7:F0:E8:A2:87:AD:31:8D:7A:26:25:41:92:43:1E:17:5F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/42083d44-7835-443d-853a-0a79cf00e950/0/08A94FD7F0E8A287AD318D7A26254192431E175F.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/08A94FD7F0E8A287AD318D7A26254192431E175F.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/42083d44-7835-443d-853a-0a79cf00e950/0/08A94FD7F0E8A287AD318D7A26254192431E175F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 29:79:dd:2d:19:b2:fd:f5:cb:99:5f:06:c5:23:0a:d5:69:c8: 5a:12:ad:c9:26:68:96:c4:65:b0:ca:6a:3f:7e:22:3d:e2:67: f0:8d:9a:3a:6f:6c:bd:e9:86:7e:08:86:07:ee:84:4b:88:84: 4c:45:96:a7:ba:15:e0:36:01:d9:da:20:8d:f1:b0:b0:d4:fb: 7b:c8:b0:29:06:5a:4b:2d:95:8b:35:11:86:17:27:ad:d9:a8: ca:94:6d:19:59:5e:be:62:a9:dc:40:70:c1:34:12:3c:03:8d: 5e:87:33:55:91:0c:02:af:44:fb:8b:35:58:5c:ed:68:23:9d: f2:a9:1a:c7:3d:46:09:8f:21:c1:5a:7b:e9:3b:61:f1:6c:02: d9:5a:93:88:37:f8:06:8e:f3:98:b1:19:de:de:e4:a2:df:48: e7:30:77:8f:78:ba:95:0f:79:38:2d:e6:91:f0:85:97:a1:15: 3b:5b:3a:11:dc:a5:a6:e6:02:83:b9:35:26:1e:e3:80:2f:4c: ea:6e:6d:ca:b4:75:b5:61:c4:5e:35:f0:49:7f:1b:8a:fc:b8: ef:b0:5c:aa:ac:1e:0b:94:dd:4c:af:88:50:3e:cb:70:fd:77: c6:d5:b4:77:32:c2:b1:12:55:1a:81:59:49:50:5f:a3:e3:b4: 14:60:a2:22 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUUB5A3XHrX0aLW67hV35dHx+Bqm4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDhBOTRGRDdGMEU4QTI4N0FEMzE4RDdBMjYyNTQxOTI0 MzFFMTc1RjAeFw0yNTA2MTgwNzE1MzdaFw0yNTA2MjExMDUyMzdaMDMxMTAvBgNV BAMTKDMyMENERUNBNjlBRTA4Q0U1RThGOEFDQzlFMjJGNzJCQzk2MDFDOTcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDoJIyVBbj+/Nt8SQo/DZWfxgq+ /p93LrmCepTuX7fCGTLbynrOUXvkZg8mVRrOxjNFjDi/zrTtGENtGcv0aIQa/JhF 4v5W6Zjoqq9BZeK3f2D0bPSiGYQ5uzqrmJR0hM+MDzwwDnImPZPye5a2v0qhmzdj +0ZlaRdkWyYcRy75icO0+GfcuRnNJ3W3VORkQph84MWpa0njxl6/22A9VRv3pQCx vsLxLRbzJgSX9+ES5OmfenqX/uoNUMUmmvGgRWI/LHt7Vunb6r8FQegWbMs8q5ry odhi+4E84NfNgGOW2ylEEWubedChz1nM9cSnQ34kpxpuFORLc2gG/552R54LAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUMgzeymmuCM5ej4rMniL3K8lgHJcwHwYDVR0j BBgwFoAUCKlP1/DoooetMY16JiVBkkMeF18wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 MjA4M2Q0NC03ODM1LTQ0M2QtODUzYS0wYTc5Y2YwMGU5NTAvMC8wOEE5NEZEN0Yw RThBMjg3QUQzMThEN0EyNjI1NDE5MjQzMUUxNzVGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMDhBOTRGRDdGMEU4QTI4N0FEMzE4RDdBMjYyNTQxOTI0MzFF MTc1Ri5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNDIwODNkNDQtNzgzNS00NDNkLTg1 M2EtMGE3OWNmMDBlOTUwLzAvMDhBOTRGRDdGMEU4QTI4N0FEMzE4RDdBMjYyNTQx OTI0MzFFMTc1Ri5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACl53S0Zsv31y5lfBsUjCtVpyFoSrckmaJbE ZbDKaj9+Ij3iZ/CNmjpvbL3phn4IhgfuhEuIhExFlqe6FeA2AdnaII3xsLDU+3vI sCkGWkstlYs1EYYXJ63ZqMqUbRlZXr5iqdxAcME0EjwDjV6HM1WRDAKvRPuLNVhc 7WgjnfKpGsc9RgmPIcFae+k7YfFsAtlak4g3+AaO85ixGd7e5KLfSOcwd494upUP eTgt5pHwhZehFTtbOhHcpabmAoO5NSYe44AvTOpubcq0dbVhxF418El/G4r8uO+w XKqsHguU3UyviFA+y3D9d8bVtHcywrESVRqBWUlQX6PjtBRgoiI= -----END CERTIFICATE-----Generated at Wed Jun 18 22:35:25 2025 by rpki-client