$ rpki-client -vvf repo-rpki.idnic.net/repo/643db7d2-b3fd-4214-b6a4-d0162f95e72e/0/8714172B5D3FC9C36A83EBA27AB946FC69A4F821.mft File: 8714172B5D3FC9C36A83EBA27AB946FC69A4F821.mft (raw, json) Hash identifier: /dDGhahfrZNNriAIVHSN6iJlTsbaTX20fCqKymxvvcs= Subject key identifier: 1B:68:40:67:E3:E9:CD:A8:EB:A8:B0:E4:13:CA:7F:B2:0C:18:17:55 Authority key identifier: 87:14:17:2B:5D:3F:C9:C3:6A:83:EB:A2:7A:B9:46:FC:69:A4:F8:21 Certificate issuer: /CN=8714172B5D3FC9C36A83EBA27AB946FC69A4F821 Certificate serial: 574C25A2E63E8019D70E5DAA8DC5B4DED644ADD1 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8714172B5D3FC9C36A83EBA27AB946FC69A4F821.cer Subject info access: rsync://repo-rpki.idnic.net/repo/643db7d2-b3fd-4214-b6a4-d0162f95e72e/0/8714172B5D3FC9C36A83EBA27AB946FC69A4F821.mft Manifest number: 01CA Signing time: Sat 14 Jun 2025 17:02:18 +0000 Manifest this update: Sat 14 Jun 2025 16:57:18 +0000 Manifest next update: Wed 18 Jun 2025 00:58:18 +0000 Files and hashes: 1: 3130332e32302e31362e302f32342d3234203d3e20313439393633.roa (hash: zDyrXTGOoVhoyVXFQzLfzvSBhhtitp+cvr9nrYj9PZk=) 2: 8714172B5D3FC9C36A83EBA27AB946FC69A4F821.crl (hash: k/CSaNPIg5r3Q93fItxbGRePsfghgLdPV9tdBkDB4AQ=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/643db7d2-b3fd-4214-b6a4-d0162f95e72e/0/8714172B5D3FC9C36A83EBA27AB946FC69A4F821.crl rsync://repo-rpki.idnic.net/repo/643db7d2-b3fd-4214-b6a4-d0162f95e72e/0/8714172B5D3FC9C36A83EBA27AB946FC69A4F821.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8714172B5D3FC9C36A83EBA27AB946FC69A4F821.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 18 Jun 2025 00:58:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 57:4c:25:a2:e6:3e:80:19:d7:0e:5d:aa:8d:c5:b4:de:d6:44:ad:d1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8714172B5D3FC9C36A83EBA27AB946FC69A4F821 Validity Not Before: Jun 14 16:57:18 2025 GMT Not After : Jun 18 00:58:18 2025 GMT Subject: CN=1B684067E3E9CDA8EBA8B0E413CA7FB20C181755 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:f7:31:1c:c5:17:11:ed:bd:dc:8e:8b:19:a3: 1a:05:12:c4:81:97:49:82:ca:56:d7:a9:a7:ba:d0: 32:fa:a0:ce:5c:06:d7:7d:93:52:fa:83:61:11:b2: 7a:19:67:8a:32:68:f3:70:3b:df:14:d9:f0:03:98: ef:a7:f5:8d:4c:df:5e:fb:9c:01:9d:2d:5c:06:e8: 6e:5d:17:04:79:e8:69:af:a6:63:62:e4:87:70:05: 4d:b2:09:b0:f8:13:13:3f:f5:43:f1:68:c0:e6:e5: f9:2b:ab:22:32:6c:24:8a:f3:07:f4:02:1b:de:b1: a2:e6:63:53:b4:71:2e:01:d7:a8:bc:3a:18:a5:98: 83:56:4e:d0:9d:47:1b:7e:b0:b2:e4:08:2b:e2:2b: 27:f2:07:4a:a8:60:fe:93:31:20:38:c3:60:1a:c2: a7:8b:4a:91:28:cc:99:25:c2:43:c2:f9:60:a0:b1: 48:39:59:d4:f3:b1:39:aa:51:5b:62:55:2b:36:c6: ad:d1:9f:e4:a6:9a:27:28:c6:25:0a:ab:82:6b:cf: c2:96:d4:25:5a:7f:eb:e8:4e:06:dd:fb:1a:8a:7f: 8c:d3:8d:26:5a:bd:38:f2:bf:ac:28:f3:86:09:0d: a8:70:f5:d1:3c:86:da:33:65:01:ef:83:0f:99:90: 80:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1B:68:40:67:E3:E9:CD:A8:EB:A8:B0:E4:13:CA:7F:B2:0C:18:17:55 X509v3 Authority Key Identifier: keyid:87:14:17:2B:5D:3F:C9:C3:6A:83:EB:A2:7A:B9:46:FC:69:A4:F8:21 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/643db7d2-b3fd-4214-b6a4-d0162f95e72e/0/8714172B5D3FC9C36A83EBA27AB946FC69A4F821.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8714172B5D3FC9C36A83EBA27AB946FC69A4F821.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/643db7d2-b3fd-4214-b6a4-d0162f95e72e/0/8714172B5D3FC9C36A83EBA27AB946FC69A4F821.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6f:bc:4e:2f:52:48:87:6b:ae:ac:64:ae:c3:bc:03:02:30:57: 16:16:54:ae:02:3d:b5:03:20:05:27:c9:c4:1e:5c:d1:b5:a8: 42:72:64:a1:3c:32:14:06:74:01:d4:b9:66:54:e9:14:a6:9c: 81:f7:50:64:21:d0:2f:64:6d:2c:95:0f:4d:36:cb:88:79:75: 46:23:a1:47:7b:ee:65:3f:3e:6f:dd:d3:ba:b1:44:bc:e2:66: bf:c7:8b:5f:62:09:0a:98:98:5f:f2:c5:06:c3:da:9d:2b:87: 64:fc:d5:e6:31:e3:a0:68:35:e6:25:ee:50:da:a3:72:9f:e0: fe:33:b2:cc:58:53:7e:73:90:6c:62:ba:64:8a:5f:c4:50:19: 4a:7c:55:cc:85:96:e1:83:bc:69:80:3d:00:d1:09:bb:08:f5: 7f:4b:10:c6:f9:08:8d:ee:44:7a:8d:f5:61:f3:91:1d:7b:c4: 23:16:e6:8c:22:ec:64:0a:8e:e9:05:e1:f8:55:aa:50:fc:9b: 8b:dd:0b:74:f3:d2:c2:4c:0b:c7:8a:00:ff:73:c3:51:25:98: 0a:98:cd:b6:9e:08:47:9f:5b:0b:6d:c8:c5:8d:ea:6a:ee:19: 3c:27:11:28:8b:69:0b:1c:4f:93:d0:ba:d4:93:86:6e:e8:e0: dd:1f:e3:2d -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUV0wlouY+gBnXDl2qjcW03tZErdEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODcxNDE3MkI1RDNGQzlDMzZBODNFQkEyN0FCOTQ2RkM2 OUE0RjgyMTAeFw0yNTA2MTQxNjU3MThaFw0yNTA2MTgwMDU4MThaMDMxMTAvBgNV BAMTKDFCNjg0MDY3RTNFOUNEQThFQkE4QjBFNDEzQ0E3RkIyMEMxODE3NTUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDm9zEcxRcR7b3cjosZoxoFEsSB l0mCylbXqae60DL6oM5cBtd9k1L6g2ERsnoZZ4oyaPNwO98U2fADmO+n9Y1M3177 nAGdLVwG6G5dFwR56GmvpmNi5IdwBU2yCbD4ExM/9UPxaMDm5fkrqyIybCSK8wf0 AhvesaLmY1O0cS4B16i8OhilmINWTtCdRxt+sLLkCCviKyfyB0qoYP6TMSA4w2Aa wqeLSpEozJklwkPC+WCgsUg5WdTzsTmqUVtiVSs2xq3Rn+SmmicoxiUKq4Jrz8KW 1CVaf+voTgbd+xqKf4zTjSZavTjyv6wo84YJDahw9dE8htozZQHvgw+ZkICZAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUG2hAZ+PpzajrqLDkE8p/sgwYF1UwHwYDVR0j BBgwFoAUhxQXK10/ycNqg+uierlG/Gmk+CEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 NDNkYjdkMi1iM2ZkLTQyMTQtYjZhNC1kMDE2MmY5NWU3MmUvMC84NzE0MTcyQjVE M0ZDOUMzNkE4M0VCQTI3QUI5NDZGQzY5QTRGODIxLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvODcxNDE3MkI1RDNGQzlDMzZBODNFQkEyN0FCOTQ2RkM2OUE0 RjgyMS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNjQzZGI3ZDItYjNmZC00MjE0LWI2 YTQtZDAxNjJmOTVlNzJlLzAvODcxNDE3MkI1RDNGQzlDMzZBODNFQkEyN0FCOTQ2 RkM2OUE0RjgyMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAG+8Ti9SSIdrrqxkrsO8AwIwVxYWVK4CPbUD IAUnycQeXNG1qEJyZKE8MhQGdAHUuWZU6RSmnIH3UGQh0C9kbSyVD002y4h5dUYj oUd77mU/Pm/d07qxRLziZr/Hi19iCQqYmF/yxQbD2p0rh2T81eYx46BoNeYl7lDa o3Kf4P4zssxYU35zkGxiumSKX8RQGUp8VcyFluGDvGmAPQDRCbsI9X9LEMb5CI3u RHqN9WHzkR17xCMW5owi7GQKjukF4fhVqlD8m4vdC3Tz0sJMC8eKAP9zw1ElmAqY zbaeCEefWwttyMWN6mruGTwnESiLaQscT5PQutSThm7o4N0f4y0= -----END CERTIFICATE-----Generated at Mon Jun 16 22:48:51 2025 by rpki-client