$ rpki-client -vvf repo-rpki.idnic.net/repo/6e9b0bad-66b9-4f28-a7c5-e9a9fe120ad7/0/8DAFDBD814B60F568505D65130E4661FCD7D665F.mft File: 8DAFDBD814B60F568505D65130E4661FCD7D665F.mft (raw, json) Hash identifier: /Ui8qyIHOyyaNkXcBtEkuch0ZXpe3INxzfPc11Ih36E= Subject key identifier: DB:43:A2:EC:3D:F9:63:BB:EB:F7:4D:E0:8A:67:D2:B3:48:7A:9A:F2 Authority key identifier: 8D:AF:DB:D8:14:B6:0F:56:85:05:D6:51:30:E4:66:1F:CD:7D:66:5F Certificate issuer: /CN=8DAFDBD814B60F568505D65130E4661FCD7D665F Certificate serial: 08A1584614152BADD191FF66084327F79496B931 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8DAFDBD814B60F568505D65130E4661FCD7D665F.cer Subject info access: rsync://repo-rpki.idnic.net/repo/6e9b0bad-66b9-4f28-a7c5-e9a9fe120ad7/0/8DAFDBD814B60F568505D65130E4661FCD7D665F.mft Manifest number: 020D Signing time: Sat 14 Jun 2025 15:51:49 +0000 Manifest this update: Sat 14 Jun 2025 15:46:49 +0000 Manifest next update: Tue 17 Jun 2025 23:54:49 +0000 Files and hashes: 1: 8DAFDBD814B60F568505D65130E4661FCD7D665F.crl (hash: lZdjsOuEN5Ytf+ByWhPWxzvX/edRk6/Y1194nAOB7NU=) 2: 3130332e3136382e3139302e302f32342d3234203d3e20313432333139.roa (hash: /4nmgLfcCNw5dynQDZtGk4IBxc3BmveSB9gkF4R0RCk=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/6e9b0bad-66b9-4f28-a7c5-e9a9fe120ad7/0/8DAFDBD814B60F568505D65130E4661FCD7D665F.crl rsync://repo-rpki.idnic.net/repo/6e9b0bad-66b9-4f28-a7c5-e9a9fe120ad7/0/8DAFDBD814B60F568505D65130E4661FCD7D665F.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8DAFDBD814B60F568505D65130E4661FCD7D665F.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 17 Jun 2025 23:54:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 08:a1:58:46:14:15:2b:ad:d1:91:ff:66:08:43:27:f7:94:96:b9:31 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8DAFDBD814B60F568505D65130E4661FCD7D665F Validity Not Before: Jun 14 15:46:49 2025 GMT Not After : Jun 17 23:54:49 2025 GMT Subject: CN=DB43A2EC3DF963BBEBF74DE08A67D2B3487A9AF2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:70:b1:c1:8f:28:40:92:8e:58:bc:8e:55:1c: 48:d7:99:e8:22:0b:27:42:cd:70:44:01:21:cc:7f: 14:54:31:e9:8e:8a:47:40:ba:cc:22:94:16:c2:b6: 9e:ce:35:97:bf:58:96:dd:c1:87:1e:52:10:57:74: 64:b4:51:4a:06:3c:92:a3:a1:ae:80:e9:dc:fe:07: c5:82:95:aa:b7:a4:71:f4:02:00:8d:99:53:be:97: 70:db:c7:34:07:07:1c:83:db:c8:df:c2:87:33:27: 1f:d6:2b:dd:f9:89:22:4e:3a:92:10:a2:f0:6b:a2: 20:d4:bf:c5:d3:1d:7c:d1:c3:1d:c0:89:47:39:76: 98:4f:38:da:79:1a:49:b4:15:72:47:0a:74:9a:15: 15:9c:21:75:2d:10:e3:cc:72:51:dc:f6:4a:93:2a: 3c:88:0e:78:52:d1:b4:8c:dc:00:fb:3a:68:c0:8d: 16:b6:93:a6:32:a8:04:89:07:38:64:0b:4f:be:f0: bf:32:db:d6:1a:81:7d:6d:2c:cf:53:30:4f:0f:4e: 80:0b:cb:69:c0:b3:1d:d0:a9:22:64:23:37:f8:58: ec:ee:80:93:3d:86:a5:de:28:44:60:d5:48:65:45: e7:98:a3:51:da:7b:65:0b:dc:2e:3d:c2:a3:0c:80: 2a:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DB:43:A2:EC:3D:F9:63:BB:EB:F7:4D:E0:8A:67:D2:B3:48:7A:9A:F2 X509v3 Authority Key Identifier: keyid:8D:AF:DB:D8:14:B6:0F:56:85:05:D6:51:30:E4:66:1F:CD:7D:66:5F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/6e9b0bad-66b9-4f28-a7c5-e9a9fe120ad7/0/8DAFDBD814B60F568505D65130E4661FCD7D665F.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8DAFDBD814B60F568505D65130E4661FCD7D665F.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/6e9b0bad-66b9-4f28-a7c5-e9a9fe120ad7/0/8DAFDBD814B60F568505D65130E4661FCD7D665F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 43:3f:d5:67:d9:a8:bf:94:0a:17:00:52:e0:ff:33:ad:56:db: 72:dd:75:a8:99:e1:5f:0d:10:77:07:c9:c3:99:26:6b:1f:87: f5:3d:82:3b:41:b4:26:04:59:8b:49:80:c2:bd:e4:61:c7:9a: 5e:37:e2:c4:f8:d9:af:30:3b:7b:71:df:50:f7:f6:a3:bc:fd: e6:19:ed:f8:9a:93:7a:62:c5:6f:62:81:19:bc:c6:be:1c:49: 7b:83:ab:0f:0e:dc:b8:97:37:64:4e:44:76:ec:be:e0:bc:98: bb:8c:cc:a8:58:c7:c3:db:3a:55:cc:09:57:d4:f8:b3:e5:30: 56:7c:07:df:4e:35:80:5c:d2:43:67:3c:ab:07:17:75:51:50: 17:ca:cf:c8:d9:82:71:93:33:09:8f:73:e7:7a:25:ee:8d:e3: 64:e0:1e:86:1e:b6:b7:e1:93:ab:e4:b3:7c:bc:97:b0:db:3d: e6:68:89:56:36:ff:b7:c1:32:e6:75:88:25:18:c6:29:a3:9f: 35:c7:82:ae:bf:48:b4:b0:ee:f2:87:79:66:ee:f3:6f:ff:54: b2:4d:3e:94:19:97:e6:6b:f6:fa:69:01:4d:24:38:af:f6:41: 47:f7:62:b3:d7:3b:8f:55:29:d9:7d:c4:4a:70:54:d5:c3:f7: c0:f7:5b:38 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUCKFYRhQVK63Rkf9mCEMn95SWuTEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOERBRkRCRDgxNEI2MEY1Njg1MDVENjUxMzBFNDY2MUZD RDdENjY1RjAeFw0yNTA2MTQxNTQ2NDlaFw0yNTA2MTcyMzU0NDlaMDMxMTAvBgNV BAMTKERCNDNBMkVDM0RGOTYzQkJFQkY3NERFMDhBNjdEMkIzNDg3QTlBRjIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDJcLHBjyhAko5YvI5VHEjXmegi CydCzXBEASHMfxRUMemOikdAuswilBbCtp7ONZe/WJbdwYceUhBXdGS0UUoGPJKj oa6A6dz+B8WClaq3pHH0AgCNmVO+l3DbxzQHBxyD28jfwoczJx/WK935iSJOOpIQ ovBroiDUv8XTHXzRwx3AiUc5dphPONp5Gkm0FXJHCnSaFRWcIXUtEOPMclHc9kqT KjyIDnhS0bSM3AD7OmjAjRa2k6YyqASJBzhkC0++8L8y29YagX1tLM9TME8PToAL y2nAsx3QqSJkIzf4WOzugJM9hqXeKERg1UhlReeYo1Hae2UL3C49wqMMgCqdAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU20Oi7D35Y7vr903gimfSs0h6mvIwHwYDVR0j BBgwFoAUja/b2BS2D1aFBdZRMORmH819Zl8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 ZTliMGJhZC02NmI5LTRmMjgtYTdjNS1lOWE5ZmUxMjBhZDcvMC84REFGREJEODE0 QjYwRjU2ODUwNUQ2NTEzMEU0NjYxRkNEN0Q2NjVGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOERBRkRCRDgxNEI2MEY1Njg1MDVENjUxMzBFNDY2MUZDRDdE NjY1Ri5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNmU5YjBiYWQtNjZiOS00ZjI4LWE3 YzUtZTlhOWZlMTIwYWQ3LzAvOERBRkRCRDgxNEI2MEY1Njg1MDVENjUxMzBFNDY2 MUZDRDdENjY1Ri5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEM/1WfZqL+UChcAUuD/M61W23LddaiZ4V8N EHcHycOZJmsfh/U9gjtBtCYEWYtJgMK95GHHml434sT42a8wO3tx31D39qO8/eYZ 7fiak3pixW9igRm8xr4cSXuDqw8O3LiXN2RORHbsvuC8mLuMzKhYx8PbOlXMCVfU +LPlMFZ8B99ONYBc0kNnPKsHF3VRUBfKz8jZgnGTMwmPc+d6Je6N42TgHoYetrfh k6vks3y8l7DbPeZoiVY2/7fBMuZ1iCUYximjnzXHgq6/SLSw7vKHeWbu82//VLJN PpQZl+Zr9vppAU0kOK/2QUf3YrPXO49VKdl9xEpwVNXD98D3Wzg= -----END CERTIFICATE-----Generated at Mon Jun 16 20:44:02 2025 by rpki-client