$ rpki-client -vvf repo-rpki.idnic.net/repo/696a74df-d907-4aaf-a836-43e4e1968525/0/8D956CF1DF56850C9CF6173DF90141A9C6A46868.mft File: 8D956CF1DF56850C9CF6173DF90141A9C6A46868.mft (raw, json) Hash identifier: s/PXysS0E2HRmOac+fqN0mZRkHL0aUSH+NZFZU0/akg= Subject key identifier: A8:55:19:E2:18:2F:C7:2F:4B:CE:D6:02:05:78:C2:8A:2B:9A:9A:3D Authority key identifier: 8D:95:6C:F1:DF:56:85:0C:9C:F6:17:3D:F9:01:41:A9:C6:A4:68:68 Certificate issuer: /CN=8D956CF1DF56850C9CF6173DF90141A9C6A46868 Certificate serial: 68CF7FEF1C5656C164B98BD98076FFE728621880 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8D956CF1DF56850C9CF6173DF90141A9C6A46868.cer Subject info access: rsync://repo-rpki.idnic.net/repo/696a74df-d907-4aaf-a836-43e4e1968525/0/8D956CF1DF56850C9CF6173DF90141A9C6A46868.mft Manifest number: 01B0 Signing time: Fri 13 Jun 2025 19:32:10 +0000 Manifest this update: Fri 13 Jun 2025 19:27:10 +0000 Manifest next update: Tue 17 Jun 2025 06:13:10 +0000 Files and hashes: 1: 8D956CF1DF56850C9CF6173DF90141A9C6A46868.crl (hash: 8dQmqWOvMcF2Yo8/RoDppgTkUiSIZTf4H7Tg64J0WxM=) 2: 3130332e3135332e39362e302f32342d3234203d3e20313430343630.roa (hash: j2ooxEgwl+PYCxzVzg+BL2wikozzxYfw566b8wdA2jI=) 3: 3130332e3135332e39372e302f32342d3234203d3e20313430343630.roa (hash: nKx2W2J5QqbAPLTUpYp/KQAECRR7E2z1uXn+5NBG7zs=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/696a74df-d907-4aaf-a836-43e4e1968525/0/8D956CF1DF56850C9CF6173DF90141A9C6A46868.crl rsync://repo-rpki.idnic.net/repo/696a74df-d907-4aaf-a836-43e4e1968525/0/8D956CF1DF56850C9CF6173DF90141A9C6A46868.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8D956CF1DF56850C9CF6173DF90141A9C6A46868.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 17 Jun 2025 06:13:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 68:cf:7f:ef:1c:56:56:c1:64:b9:8b:d9:80:76:ff:e7:28:62:18:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8D956CF1DF56850C9CF6173DF90141A9C6A46868 Validity Not Before: Jun 13 19:27:10 2025 GMT Not After : Jun 17 06:13:10 2025 GMT Subject: CN=A85519E2182FC72F4BCED6020578C28A2B9A9A3D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:23:7f:29:1a:1d:da:e0:f8:36:a5:a8:a2:5c: d5:f6:81:64:7b:8e:51:60:8e:c6:a8:f9:6d:1a:2c: 16:bb:ce:4b:da:69:d3:0e:0b:93:01:89:1b:77:ad: 37:ed:9a:a0:be:c2:f7:81:dc:0d:9c:74:81:47:4a: 62:76:87:93:0d:3e:2f:29:d1:e0:28:be:42:f8:6b: 3d:83:ba:9e:26:9f:d9:c0:47:23:b2:b6:d4:11:c4: 47:09:48:3f:be:a2:4c:a5:3b:c1:88:31:5a:96:07: 4f:ea:26:af:6a:cb:1b:d0:06:b1:a8:77:48:cb:87: b3:ee:ba:aa:a4:87:17:2a:27:28:91:4a:42:89:25: c1:5b:02:54:40:68:a5:f8:ef:b6:54:c0:66:70:a8: 8c:95:c2:33:14:5a:3c:31:27:81:ce:88:75:ae:39: 42:27:71:c7:dc:dd:40:21:9e:9c:77:90:90:31:e9: 1d:51:c6:93:44:91:97:02:ae:14:68:e8:29:71:6c: aa:e7:ea:27:b1:bc:c2:03:b8:9e:20:de:cd:16:33: 3e:33:f8:50:a7:5f:a1:77:50:6b:0f:12:13:94:4d: 9e:73:0f:8f:99:cb:29:b9:3b:d2:9f:43:fd:99:50: d7:9d:8d:73:99:d1:76:c0:7a:cf:63:c0:c9:95:6a: 58:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A8:55:19:E2:18:2F:C7:2F:4B:CE:D6:02:05:78:C2:8A:2B:9A:9A:3D X509v3 Authority Key Identifier: keyid:8D:95:6C:F1:DF:56:85:0C:9C:F6:17:3D:F9:01:41:A9:C6:A4:68:68 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/696a74df-d907-4aaf-a836-43e4e1968525/0/8D956CF1DF56850C9CF6173DF90141A9C6A46868.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8D956CF1DF56850C9CF6173DF90141A9C6A46868.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/696a74df-d907-4aaf-a836-43e4e1968525/0/8D956CF1DF56850C9CF6173DF90141A9C6A46868.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 17:fc:0b:fc:db:83:34:fd:44:97:83:f2:54:6d:a7:98:32:ce: 37:3d:09:22:38:bb:f7:58:19:21:40:03:ed:bf:87:8d:89:a2: a4:83:0c:e6:57:d8:36:f3:5c:48:cf:cb:9e:62:57:90:6f:0d: 0c:23:d8:e2:c4:6b:13:f7:e5:b6:1b:bb:3d:97:ab:b9:62:f2: 6d:f6:52:1a:ab:af:75:55:10:27:df:06:8a:ac:a6:23:bd:38: 5d:a9:38:2c:e4:a5:0e:3e:d8:6c:f6:e4:47:dd:e2:27:0c:c4: b2:6e:f5:e9:36:82:cf:4b:07:2e:a8:c7:d3:39:ac:b7:f2:47: cc:95:e6:04:cb:85:bb:4b:9d:51:4c:ee:f5:b5:26:59:c6:6b: 3e:ea:80:80:f2:2f:cc:0b:20:87:29:be:50:72:1b:df:48:97: e2:b9:2c:8b:15:1e:8d:20:2b:36:1d:d5:b4:05:4a:7e:de:12: c4:33:19:0a:45:2b:57:cc:53:62:84:d9:a1:63:ab:63:d4:29: 54:15:2a:d2:dc:1c:51:c0:32:de:b4:59:44:4d:fe:73:93:81: 20:03:cd:49:b5:98:fb:75:13:c7:41:28:0d:bb:f5:2d:2f:20: 39:6f:a1:bd:af:2e:b3:30:3c:ca:bf:98:9f:25:cb:10:be:59: f7:a1:b2:ef -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUaM9/7xxWVsFkuYvZgHb/5yhiGIAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEQ5NTZDRjFERjU2ODUwQzlDRjYxNzNERjkwMTQxQTlD NkE0Njg2ODAeFw0yNTA2MTMxOTI3MTBaFw0yNTA2MTcwNjEzMTBaMDMxMTAvBgNV BAMTKEE4NTUxOUUyMTgyRkM3MkY0QkNFRDYwMjA1NzhDMjhBMkI5QTlBM0QwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDVI38pGh3a4Pg2paiiXNX2gWR7 jlFgjsao+W0aLBa7zkvaadMOC5MBiRt3rTftmqC+wveB3A2cdIFHSmJ2h5MNPi8p 0eAovkL4az2Dup4mn9nARyOyttQRxEcJSD++okylO8GIMVqWB0/qJq9qyxvQBrGo d0jLh7PuuqqkhxcqJyiRSkKJJcFbAlRAaKX477ZUwGZwqIyVwjMUWjwxJ4HOiHWu OUInccfc3UAhnpx3kJAx6R1RxpNEkZcCrhRo6ClxbKrn6iexvMIDuJ4g3s0WMz4z +FCnX6F3UGsPEhOUTZ5zD4+Zyym5O9KfQ/2ZUNedjXOZ0XbAes9jwMmValgZAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUqFUZ4hgvxy9LztYCBXjCiiuamj0wHwYDVR0j BBgwFoAUjZVs8d9WhQyc9hc9+QFBqcakaGgwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 OTZhNzRkZi1kOTA3LTRhYWYtYTgzNi00M2U0ZTE5Njg1MjUvMC84RDk1NkNGMURG NTY4NTBDOUNGNjE3M0RGOTAxNDFBOUM2QTQ2ODY4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOEQ5NTZDRjFERjU2ODUwQzlDRjYxNzNERjkwMTQxQTlDNkE0 Njg2OC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNjk2YTc0ZGYtZDkwNy00YWFmLWE4 MzYtNDNlNGUxOTY4NTI1LzAvOEQ5NTZDRjFERjU2ODUwQzlDRjYxNzNERjkwMTQx QTlDNkE0Njg2OC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABf8C/zbgzT9RJeD8lRtp5gyzjc9CSI4u/dY GSFAA+2/h42JoqSDDOZX2DbzXEjPy55iV5BvDQwj2OLEaxP35bYbuz2Xq7li8m32 Uhqrr3VVECffBoqspiO9OF2pOCzkpQ4+2Gz25Efd4icMxLJu9ek2gs9LBy6ox9M5 rLfyR8yV5gTLhbtLnVFM7vW1JlnGaz7qgIDyL8wLIIcpvlByG99Il+K5LIsVHo0g KzYd1bQFSn7eEsQzGQpFK1fMU2KE2aFjq2PUKVQVKtLcHFHAMt60WURN/nOTgSAD zUm1mPt1E8dBKA279S0vIDlvob2vLrMwPMq/mJ8lyxC+Wfehsu8= -----END CERTIFICATE-----Generated at Mon Jun 16 00:47:50 2025 by rpki-client