$ rpki-client -vvf repo-rpki.idnic.net/repo/44b27303-9e3d-4d42-af25-6a0f11808f27/0/8C888E996588527BC5EF8ABD293676C3463A1A22.mft File: 8C888E996588527BC5EF8ABD293676C3463A1A22.mft (raw, json) Hash identifier: xjwA5yGPFkpHi8bPoiYEM0+Qgr8Ff/Q4SJZAqWZ3NjQ= Subject key identifier: 79:D0:EB:37:E3:69:7D:B2:19:40:DD:FD:0A:E3:6B:BD:C6:EC:92:E3 Authority key identifier: 8C:88:8E:99:65:88:52:7B:C5:EF:8A:BD:29:36:76:C3:46:3A:1A:22 Certificate issuer: /CN=8C888E996588527BC5EF8ABD293676C3463A1A22 Certificate serial: 019471DD3931C540BD7C79F21F81370A429095FB Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8C888E996588527BC5EF8ABD293676C3463A1A22.cer Subject info access: rsync://repo-rpki.idnic.net/repo/44b27303-9e3d-4d42-af25-6a0f11808f27/0/8C888E996588527BC5EF8ABD293676C3463A1A22.mft Manifest number: 0210 Signing time: Sat 14 Jun 2025 23:11:34 +0000 Manifest this update: Sat 14 Jun 2025 23:06:34 +0000 Manifest next update: Wed 18 Jun 2025 09:24:34 +0000 Files and hashes: 1: 3130332e39372e342e302f32322d3234203d3e20313336313237.roa (hash: Fuo7Zv6Qy+uY4bdbE0UwMy6jWa9ZEF+DnD6ctpiueL4=) 2: 3130332e39372e372e302f32342d3234203d3e20313336313237.roa (hash: JOk2hOEjt3VDU03LDOoQK88eKB9E+q6wdAJWayyHIwQ=) 3: 3130332e39372e362e302f32342d3234203d3e20313336313237.roa (hash: 953/1OAjNWabw3EekLLAXwzV4CYrLdUWpl5qPGTJpaU=) 4: 3130332e39372e342e302f32342d3234203d3e20313336313237.roa (hash: Jatff9pdbxHcTIoc61FwpQ4zDvedkS7YEGoxT4EFfu8=) 5: 323430313a383034303a3a2f33322d3332203d3e20313336313237.roa (hash: ejjY61bhmlJl0lxMoyTYYJxk49QNB+St/BGfTNpwclI=) 6: 3130332e39372e352e302f32342d3234203d3e20313336313237.roa (hash: cqTyGMrVXV3krfj6ahd0XiybL7qMxOankc/x3Ztfrtk=) 7: 8C888E996588527BC5EF8ABD293676C3463A1A22.crl (hash: imAX1JqB28FZrsTzKdRukStFpGAV5ynPqGw+FpSQv7E=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/44b27303-9e3d-4d42-af25-6a0f11808f27/0/8C888E996588527BC5EF8ABD293676C3463A1A22.crl rsync://repo-rpki.idnic.net/repo/44b27303-9e3d-4d42-af25-6a0f11808f27/0/8C888E996588527BC5EF8ABD293676C3463A1A22.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8C888E996588527BC5EF8ABD293676C3463A1A22.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 18 Jun 2025 09:24:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:94:71:dd:39:31:c5:40:bd:7c:79:f2:1f:81:37:0a:42:90:95:fb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8C888E996588527BC5EF8ABD293676C3463A1A22 Validity Not Before: Jun 14 23:06:34 2025 GMT Not After : Jun 18 09:24:34 2025 GMT Subject: CN=79D0EB37E3697DB21940DDFD0AE36BBDC6EC92E3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:7b:d2:5d:2a:55:21:ff:d0:33:a1:b4:06:55: 35:9c:04:63:69:7b:bc:2b:82:6d:ff:47:d8:77:e3: df:cd:bf:03:31:ee:e3:05:62:c0:2b:4e:c5:a4:ab: 40:74:8b:d2:e8:64:20:50:83:44:72:57:2e:81:fa: 45:3f:14:c1:6e:d1:bd:52:3b:cb:bf:1f:5c:28:75: ed:27:d6:c2:96:0b:e6:4c:9b:00:58:63:aa:50:c2: 5d:7c:3a:4f:07:f8:b6:06:5c:7b:0a:b6:1f:71:8b: e2:dd:e4:ea:bb:14:08:f2:1f:79:dd:7d:a5:b2:9c: cf:b3:71:1a:c1:15:02:ab:b4:0c:cd:98:8c:aa:2c: 83:b4:e7:0b:f7:fd:36:f0:97:c8:b5:d4:67:f1:7d: d5:b8:6d:47:4f:b8:ac:71:5a:a7:57:e2:1c:88:ec: d6:21:7f:76:b8:21:ed:29:3f:97:24:bc:4e:1b:1f: b5:f5:9f:bb:1d:49:e7:88:b4:06:db:3f:24:2e:e7: 04:9f:ac:9a:96:7a:21:d0:3b:d1:42:e0:09:91:d5: d7:fa:1b:22:bf:a8:a9:cc:cf:94:34:07:36:56:98: 77:41:11:f7:b3:0d:b3:93:03:0e:eb:52:99:13:e3: c5:41:2e:83:80:bd:b1:28:cf:8b:87:68:fe:7d:d3: 67:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 79:D0:EB:37:E3:69:7D:B2:19:40:DD:FD:0A:E3:6B:BD:C6:EC:92:E3 X509v3 Authority Key Identifier: keyid:8C:88:8E:99:65:88:52:7B:C5:EF:8A:BD:29:36:76:C3:46:3A:1A:22 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/44b27303-9e3d-4d42-af25-6a0f11808f27/0/8C888E996588527BC5EF8ABD293676C3463A1A22.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8C888E996588527BC5EF8ABD293676C3463A1A22.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/44b27303-9e3d-4d42-af25-6a0f11808f27/0/8C888E996588527BC5EF8ABD293676C3463A1A22.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c9:12:7b:02:c8:a6:b8:cd:8f:e4:38:ce:87:14:85:82:53:8a: 76:cd:c5:63:a3:85:bf:9b:28:76:c9:e9:2a:50:b2:fc:73:ca: 48:f2:fd:3c:35:b9:b1:3a:fc:18:9e:fc:4d:d6:ac:ad:c3:b4: 07:dc:f6:7e:f4:47:70:d2:b3:e0:f8:2d:91:3d:92:a9:d1:bb: dd:b1:40:88:0e:68:1c:fc:1d:7b:27:b8:dc:2b:36:75:2b:5b: 6e:23:6d:f3:41:91:42:6d:8f:ca:c8:b1:53:91:11:c9:1c:a5: 3a:f7:3f:86:9f:80:13:59:3d:3c:c4:36:ae:2e:d3:d1:55:6a: 03:91:a8:c2:ee:fa:f6:dc:cb:e9:c4:3a:3a:c7:e4:0f:a9:a3: b6:73:1e:fb:de:8c:1a:3a:9c:8e:3d:f4:93:45:42:b1:6c:29: b7:5b:39:d2:6b:04:2a:53:90:18:ac:a0:a1:c4:13:68:50:a2: 51:ef:e7:64:2f:87:23:eb:4b:d0:55:90:93:f2:cc:19:cb:05: c4:c3:88:94:c2:d1:f2:24:39:4d:b4:43:3b:c1:ff:74:b5:b5: 68:28:35:f1:1e:6a:f7:ef:d4:9b:ab:5c:3f:84:90:32:33:be: 62:21:e9:65:c6:b9:ec:99:c4:bb:63:68:ff:7e:ab:dd:ce:ed: 74:6f:67:84 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUAZRx3TkxxUC9fHnyH4E3CkKQlfswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEM4ODhFOTk2NTg4NTI3QkM1RUY4QUJEMjkzNjc2QzM0 NjNBMUEyMjAeFw0yNTA2MTQyMzA2MzRaFw0yNTA2MTgwOTI0MzRaMDMxMTAvBgNV BAMTKDc5RDBFQjM3RTM2OTdEQjIxOTQwRERGRDBBRTM2QkJEQzZFQzkyRTMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDne9JdKlUh/9AzobQGVTWcBGNp e7wrgm3/R9h349/NvwMx7uMFYsArTsWkq0B0i9LoZCBQg0RyVy6B+kU/FMFu0b1S O8u/H1wode0n1sKWC+ZMmwBYY6pQwl18Ok8H+LYGXHsKth9xi+Ld5Oq7FAjyH3nd faWynM+zcRrBFQKrtAzNmIyqLIO05wv3/Tbwl8i11GfxfdW4bUdPuKxxWqdX4hyI 7NYhf3a4Ie0pP5ckvE4bH7X1n7sdSeeItAbbPyQu5wSfrJqWeiHQO9FC4AmR1df6 GyK/qKnMz5Q0BzZWmHdBEfezDbOTAw7rUpkT48VBLoOAvbEoz4uHaP5902e7AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUedDrN+NpfbIZQN39CuNrvcbskuMwHwYDVR0j BBgwFoAUjIiOmWWIUnvF74q9KTZ2w0Y6GiIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 NGIyNzMwMy05ZTNkLTRkNDItYWYyNS02YTBmMTE4MDhmMjcvMC84Qzg4OEU5OTY1 ODg1MjdCQzVFRjhBQkQyOTM2NzZDMzQ2M0ExQTIyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOEM4ODhFOTk2NTg4NTI3QkM1RUY4QUJEMjkzNjc2QzM0NjNB MUEyMi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNDRiMjczMDMtOWUzZC00ZDQyLWFm MjUtNmEwZjExODA4ZjI3LzAvOEM4ODhFOTk2NTg4NTI3QkM1RUY4QUJEMjkzNjc2 QzM0NjNBMUEyMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAMkSewLIprjNj+Q4zocUhYJTinbNxWOjhb+b KHbJ6SpQsvxzykjy/Tw1ubE6/Bie/E3WrK3DtAfc9n70R3DSs+D4LZE9kqnRu92x QIgOaBz8HXsnuNwrNnUrW24jbfNBkUJtj8rIsVOREckcpTr3P4afgBNZPTzENq4u 09FVagORqMLu+vbcy+nEOjrH5A+po7ZzHvvejBo6nI499JNFQrFsKbdbOdJrBCpT kBisoKHEE2hQolHv52QvhyPrS9BVkJPyzBnLBcTDiJTC0fIkOU20QzvB/3S1tWgo NfEeavfv1JurXD+EkDIzvmIh6WXGueyZxLtjaP9+q93O7XRvZ4Q= -----END CERTIFICATE-----Generated at Mon Jun 16 00:42:28 2025 by rpki-client