$ rpki-client -vvf repo-rpki.idnic.net/repo/7846fed7-f88e-48ea-a6d1-6f756bcf8db6/0/8E9447BD6E58024BA4182380EFF3743772CEBED8.mft File: 8E9447BD6E58024BA4182380EFF3743772CEBED8.mft (raw, json) Hash identifier: oRDNqi9GOzXE1yCeRRU4/9Lnp1HgEbzHT/+XQLSiP4k= Subject key identifier: D9:D0:5C:CB:27:7D:B0:56:E1:4E:37:C3:84:C2:67:1F:BE:E5:AF:EB Authority key identifier: 8E:94:47:BD:6E:58:02:4B:A4:18:23:80:EF:F3:74:37:72:CE:BE:D8 Certificate issuer: /CN=8E9447BD6E58024BA4182380EFF3743772CEBED8 Certificate serial: 5ABE574E3620B886BA5FDAFC77103107CDBD0742 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8E9447BD6E58024BA4182380EFF3743772CEBED8.cer Subject info access: rsync://repo-rpki.idnic.net/repo/7846fed7-f88e-48ea-a6d1-6f756bcf8db6/0/8E9447BD6E58024BA4182380EFF3743772CEBED8.mft Manifest number: 01C0 Signing time: Tue 17 Jun 2025 11:12:07 +0000 Manifest this update: Tue 17 Jun 2025 11:07:07 +0000 Manifest next update: Fri 20 Jun 2025 13:07:07 +0000 Files and hashes: 1: 8E9447BD6E58024BA4182380EFF3743772CEBED8.crl (hash: CQI36VQYecmMzLxaq0513cD694HeXMZjlRW+D6rdZfc=) 2: 3130332e3136302e33372e302f32342d3234203d3e20313431353834.roa (hash: wJlXaDLFCYfatW/Pf9biHdSsz2xVZ6B2MJMlr5+ydx4=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/7846fed7-f88e-48ea-a6d1-6f756bcf8db6/0/8E9447BD6E58024BA4182380EFF3743772CEBED8.crl rsync://repo-rpki.idnic.net/repo/7846fed7-f88e-48ea-a6d1-6f756bcf8db6/0/8E9447BD6E58024BA4182380EFF3743772CEBED8.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8E9447BD6E58024BA4182380EFF3743772CEBED8.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 20 Jun 2025 13:07:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5a:be:57:4e:36:20:b8:86:ba:5f:da:fc:77:10:31:07:cd:bd:07:42 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8E9447BD6E58024BA4182380EFF3743772CEBED8 Validity Not Before: Jun 17 11:07:07 2025 GMT Not After : Jun 20 13:07:07 2025 GMT Subject: CN=D9D05CCB277DB056E14E37C384C2671FBEE5AFEB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:ee:aa:81:89:95:cf:19:aa:69:fc:08:68:01: 87:ac:5b:de:9e:ac:a8:ce:ae:26:2c:e0:10:30:80: cc:48:49:e2:fd:ab:d8:4b:c4:4e:8f:b7:53:b1:80: 63:c3:01:5d:4b:73:1b:a3:5b:8e:49:6c:a8:88:2f: 41:7b:a4:14:15:28:8e:84:65:72:84:0f:70:1a:fe: 3b:d9:d8:cd:3b:6d:66:84:4b:53:b7:7d:50:ff:98: 74:91:72:6c:5b:3f:35:22:60:bd:cc:68:3a:a1:ef: 00:cd:14:50:d0:65:44:e4:3c:b2:67:01:56:a1:8d: 44:16:04:fa:e3:97:89:f3:72:f3:b6:02:ab:43:62: 72:94:8c:37:c4:26:3a:86:8a:61:48:71:de:36:ec: 1e:9c:12:81:f5:37:ea:ff:63:c8:f4:3c:3e:35:99: e7:84:7b:44:30:f4:55:a6:2c:3c:46:32:52:64:ab: be:a8:46:13:18:23:37:10:1f:d7:8d:7a:c6:78:6d: 39:b8:82:d8:60:ad:3c:f7:46:c4:8e:fe:74:94:30: bf:b1:7e:87:8a:c3:ce:07:9f:20:fb:22:71:54:4f: e9:95:56:b9:fd:a3:06:ba:8d:61:3e:c1:4d:5d:56: b2:d5:0a:f9:08:29:aa:27:4f:a1:58:b2:10:7a:6d: e7:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:D0:5C:CB:27:7D:B0:56:E1:4E:37:C3:84:C2:67:1F:BE:E5:AF:EB X509v3 Authority Key Identifier: keyid:8E:94:47:BD:6E:58:02:4B:A4:18:23:80:EF:F3:74:37:72:CE:BE:D8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/7846fed7-f88e-48ea-a6d1-6f756bcf8db6/0/8E9447BD6E58024BA4182380EFF3743772CEBED8.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8E9447BD6E58024BA4182380EFF3743772CEBED8.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/7846fed7-f88e-48ea-a6d1-6f756bcf8db6/0/8E9447BD6E58024BA4182380EFF3743772CEBED8.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption bf:bd:de:38:6f:a1:e7:34:26:8f:70:2b:70:1a:d4:10:63:81: 7d:83:f3:0d:b2:62:a2:d0:31:10:1c:bb:6d:f2:31:33:97:91: 62:fa:bc:b6:69:e8:ec:c7:88:2f:4b:3c:c1:15:29:af:55:9e: d2:a4:ed:d2:13:75:7a:19:30:0e:52:1a:45:c8:5b:05:ed:d6: 01:c6:e9:b0:85:ac:e2:2b:c7:6b:bd:29:30:f6:ff:ce:99:76: ea:b2:ff:aa:02:bd:12:c1:34:59:f1:1e:22:61:69:c1:3d:dc: c0:14:51:c3:90:8a:b1:da:39:45:81:d6:9a:e4:87:45:1c:94: d1:38:2c:7d:24:79:9b:0e:6c:e0:62:d2:50:d2:e3:2a:29:b2: f2:d1:d3:4a:73:38:6b:7f:5f:59:8a:29:db:45:0b:81:cf:6a: a9:cd:00:1d:80:b9:d7:7d:9a:2b:85:27:61:53:fd:69:85:16: 6f:38:14:65:d7:fd:c2:8f:6e:b7:fa:42:f1:fe:aa:de:99:05: 09:61:fd:cd:c9:93:4b:b3:ac:72:90:9f:15:eb:ff:81:bc:b6: 98:62:d3:a5:00:2c:ad:a6:ec:c2:63:30:c5:d4:c6:51:5d:eb: 5f:f2:a5:a9:72:71:81:c1:02:85:f9:9a:27:1d:df:49:40:3c: 08:61:22:d6 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUWr5XTjYguIa6X9r8dxAxB829B0IwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEU5NDQ3QkQ2RTU4MDI0QkE0MTgyMzgwRUZGMzc0Mzc3 MkNFQkVEODAeFw0yNTA2MTcxMTA3MDdaFw0yNTA2MjAxMzA3MDdaMDMxMTAvBgNV BAMTKEQ5RDA1Q0NCMjc3REIwNTZFMTRFMzdDMzg0QzI2NzFGQkVFNUFGRUIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC67qqBiZXPGapp/AhoAYesW96e rKjOriYs4BAwgMxISeL9q9hLxE6Pt1OxgGPDAV1LcxujW45JbKiIL0F7pBQVKI6E ZXKED3Aa/jvZ2M07bWaES1O3fVD/mHSRcmxbPzUiYL3MaDqh7wDNFFDQZUTkPLJn AVahjUQWBPrjl4nzcvO2AqtDYnKUjDfEJjqGimFIcd427B6cEoH1N+r/Y8j0PD41 meeEe0Qw9FWmLDxGMlJkq76oRhMYIzcQH9eNesZ4bTm4gthgrTz3RsSO/nSUML+x foeKw84HnyD7InFUT+mVVrn9owa6jWE+wU1dVrLVCvkIKaonT6FYshB6beenAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU2dBcyyd9sFbhTjfDhMJnH77lr+swHwYDVR0j BBgwFoAUjpRHvW5YAkukGCOA7/N0N3LOvtgwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 ODQ2ZmVkNy1mODhlLTQ4ZWEtYTZkMS02Zjc1NmJjZjhkYjYvMC84RTk0NDdCRDZF NTgwMjRCQTQxODIzODBFRkYzNzQzNzcyQ0VCRUQ4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOEU5NDQ3QkQ2RTU4MDI0QkE0MTgyMzgwRUZGMzc0Mzc3MkNF QkVEOC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNzg0NmZlZDctZjg4ZS00OGVhLWE2 ZDEtNmY3NTZiY2Y4ZGI2LzAvOEU5NDQ3QkQ2RTU4MDI0QkE0MTgyMzgwRUZGMzc0 Mzc3MkNFQkVEOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAL+93jhvoec0Jo9wK3Aa1BBjgX2D8w2yYqLQ MRAcu23yMTOXkWL6vLZp6OzHiC9LPMEVKa9VntKk7dITdXoZMA5SGkXIWwXt1gHG 6bCFrOIrx2u9KTD2/86Zduqy/6oCvRLBNFnxHiJhacE93MAUUcOQirHaOUWB1prk h0UclNE4LH0keZsObOBi0lDS4yopsvLR00pzOGt/X1mKKdtFC4HPaqnNAB2Audd9 miuFJ2FT/WmFFm84FGXX/cKPbrf6QvH+qt6ZBQlh/c3Jk0uzrHKQnxXr/4G8tphi 06UALK2m7MJjMMXUxlFd61/ypalycYHBAoX5micd30lAPAhhItY= -----END CERTIFICATE-----Generated at Wed Jun 18 02:36:27 2025 by rpki-client