$ rpki-client -vvf repo-rpki.idnic.net/repo/8919b80d-4693-4095-a9e3-412e12828ff2/0/8DC2ED0870A005152606E2E6BEB6B6C78A522AF4.mft File: 8DC2ED0870A005152606E2E6BEB6B6C78A522AF4.mft (raw, json) Hash identifier: Pe3z1nWMTUj37e9P+jh1ZJOkrjujaE6zY5Wg2eafQfY= Subject key identifier: 95:8B:C2:8C:E4:18:E7:55:28:08:0B:BF:D0:B0:EB:18:C6:B3:0E:80 Authority key identifier: 8D:C2:ED:08:70:A0:05:15:26:06:E2:E6:BE:B6:B6:C7:8A:52:2A:F4 Certificate issuer: /CN=8DC2ED0870A005152606E2E6BEB6B6C78A522AF4 Certificate serial: 47B62FEA57246ADEDB01243CB7FDBACE2687DD52 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8DC2ED0870A005152606E2E6BEB6B6C78A522AF4.cer Subject info access: rsync://repo-rpki.idnic.net/repo/8919b80d-4693-4095-a9e3-412e12828ff2/0/8DC2ED0870A005152606E2E6BEB6B6C78A522AF4.mft Manifest number: 02A9 Signing time: Sun 15 Jun 2025 14:00:54 +0000 Manifest this update: Sun 15 Jun 2025 13:55:54 +0000 Manifest next update: Wed 18 Jun 2025 19:19:54 +0000 Files and hashes: 1: 8DC2ED0870A005152606E2E6BEB6B6C78A522AF4.crl (hash: /PlLPNh21u5iZ+1t0Hp+MDlhCC3POCWkO4RpJnZfbKM=) 2: 3130332e3137322e33302e302f32342d3234203d3e20313437303737.roa (hash: Ln5Z8ccUeGrlnQ20DfbZRqINCn2+komW7fJKFCt/jbE=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/8919b80d-4693-4095-a9e3-412e12828ff2/0/8DC2ED0870A005152606E2E6BEB6B6C78A522AF4.crl rsync://repo-rpki.idnic.net/repo/8919b80d-4693-4095-a9e3-412e12828ff2/0/8DC2ED0870A005152606E2E6BEB6B6C78A522AF4.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8DC2ED0870A005152606E2E6BEB6B6C78A522AF4.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 18 Jun 2025 19:19:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 47:b6:2f:ea:57:24:6a:de:db:01:24:3c:b7:fd:ba:ce:26:87:dd:52 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8DC2ED0870A005152606E2E6BEB6B6C78A522AF4 Validity Not Before: Jun 15 13:55:54 2025 GMT Not After : Jun 18 19:19:54 2025 GMT Subject: CN=958BC28CE418E75528080BBFD0B0EB18C6B30E80 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:08:44:ac:fb:dc:f0:d0:45:1d:2e:ec:37:28: b3:03:54:53:ac:08:fc:3a:f5:b7:04:31:7e:ea:15: 61:c8:16:09:2c:1f:a5:92:3e:10:0e:69:50:98:de: be:7f:84:16:d1:25:f1:be:68:fe:21:78:a5:53:14: 14:fc:88:9c:f3:1a:49:cb:7f:ee:83:a3:df:2c:a3: 9e:4c:73:3b:e8:97:fd:8c:80:b6:a2:6a:fd:4a:03: 5d:52:75:5c:87:bc:c0:8c:4a:dd:cd:67:42:7f:77: 7b:2e:e6:fd:7c:53:17:ef:81:97:f0:0a:13:42:b6: 2a:f0:3e:56:56:fc:ac:27:82:37:e7:ed:2d:14:46: 7c:3f:24:a1:55:a2:ea:1c:24:e3:45:86:21:a2:35: ac:0d:39:5e:35:50:da:0e:fd:1c:a9:46:40:02:2d: 02:de:6a:8d:7d:3b:5a:37:1a:57:68:db:da:7a:c2: 0a:0b:82:ce:5d:65:27:3a:b1:de:fa:7a:b5:82:78: 95:88:be:fb:a5:35:5c:28:87:36:ad:f8:2f:a9:c7: 72:57:fb:25:83:aa:f8:46:d6:c8:b1:a3:0f:8c:b6: 59:24:3f:66:2c:33:71:68:2a:16:b5:79:8f:a7:23: d0:71:45:ef:f9:82:b2:49:d9:76:1f:98:a7:d4:f9: 6c:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:8B:C2:8C:E4:18:E7:55:28:08:0B:BF:D0:B0:EB:18:C6:B3:0E:80 X509v3 Authority Key Identifier: keyid:8D:C2:ED:08:70:A0:05:15:26:06:E2:E6:BE:B6:B6:C7:8A:52:2A:F4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/8919b80d-4693-4095-a9e3-412e12828ff2/0/8DC2ED0870A005152606E2E6BEB6B6C78A522AF4.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8DC2ED0870A005152606E2E6BEB6B6C78A522AF4.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/8919b80d-4693-4095-a9e3-412e12828ff2/0/8DC2ED0870A005152606E2E6BEB6B6C78A522AF4.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3a:7e:d0:b3:18:e2:d0:2d:1d:70:5d:45:3c:d4:b6:eb:08:a1: 54:b4:37:a0:54:53:8a:eb:96:24:15:2b:af:c6:a1:c9:79:9b: e2:73:40:66:3a:13:41:3b:76:4c:35:a9:74:b1:4a:44:45:54: 02:d9:52:b2:12:bf:f2:65:f5:ed:fc:86:b0:a7:87:c2:30:3f: 2c:77:00:75:e0:5c:7b:06:c7:0f:34:38:8e:de:7a:ee:56:d2: a0:a4:80:41:21:44:22:96:d5:9c:3b:4e:b8:22:63:e8:8a:20: 7e:45:45:18:1e:59:c1:f6:a4:2c:72:6a:81:6d:9a:f4:f8:17: b1:c1:35:f7:d1:1b:1b:cb:02:02:5a:6c:a1:83:5a:d5:c4:bf: d2:d1:98:e1:85:61:aa:f0:7d:aa:1c:0c:d0:f1:3c:f3:e3:10: 6a:19:74:d5:d4:0f:03:3a:bc:b1:e0:c9:47:9d:bf:f8:f8:8a: 30:ff:c9:95:61:e4:5f:58:bc:5e:72:16:c2:cf:74:37:90:72: 62:b0:9b:6e:bd:a2:7d:7c:3a:c4:3e:7e:2b:24:08:cd:1e:9d: 84:bb:b0:07:fa:db:cd:23:fd:bd:ae:70:07:fd:42:7d:c1:d8: 1d:6b:19:6b:d2:ec:19:36:b3:b0:b3:35:a7:34:8b:c4:bf:3e: 13:80:ef:fd -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUR7Yv6lckat7bASQ8t/26ziaH3VIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOERDMkVEMDg3MEEwMDUxNTI2MDZFMkU2QkVCNkI2Qzc4 QTUyMkFGNDAeFw0yNTA2MTUxMzU1NTRaFw0yNTA2MTgxOTE5NTRaMDMxMTAvBgNV BAMTKDk1OEJDMjhDRTQxOEU3NTUyODA4MEJCRkQwQjBFQjE4QzZCMzBFODAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC1CESs+9zw0EUdLuw3KLMDVFOs CPw69bcEMX7qFWHIFgksH6WSPhAOaVCY3r5/hBbRJfG+aP4heKVTFBT8iJzzGknL f+6Do98so55Mczvol/2MgLaiav1KA11SdVyHvMCMSt3NZ0J/d3su5v18UxfvgZfw ChNCtirwPlZW/Kwngjfn7S0URnw/JKFVouocJONFhiGiNawNOV41UNoO/RypRkAC LQLeao19O1o3Gldo29p6wgoLgs5dZSc6sd76erWCeJWIvvulNVwohzat+C+px3JX +yWDqvhG1sixow+MtlkkP2YsM3FoKha1eY+nI9BxRe/5grJJ2XYfmKfU+WwdAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUlYvCjOQY51UoCAu/0LDrGMazDoAwHwYDVR0j BBgwFoAUjcLtCHCgBRUmBuLmvra2x4pSKvQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 OTE5YjgwZC00NjkzLTQwOTUtYTllMy00MTJlMTI4MjhmZjIvMC84REMyRUQwODcw QTAwNTE1MjYwNkUyRTZCRUI2QjZDNzhBNTIyQUY0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOERDMkVEMDg3MEEwMDUxNTI2MDZFMkU2QkVCNkI2Qzc4QTUy MkFGNC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vODkxOWI4MGQtNDY5My00MDk1LWE5 ZTMtNDEyZTEyODI4ZmYyLzAvOERDMkVEMDg3MEEwMDUxNTI2MDZFMkU2QkVCNkI2 Qzc4QTUyMkFGNC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADp+0LMY4tAtHXBdRTzUtusIoVS0N6BUU4rr liQVK6/Gocl5m+JzQGY6E0E7dkw1qXSxSkRFVALZUrISv/Jl9e38hrCnh8IwPyx3 AHXgXHsGxw80OI7eeu5W0qCkgEEhRCKW1Zw7TrgiY+iKIH5FRRgeWcH2pCxyaoFt mvT4F7HBNffRGxvLAgJabKGDWtXEv9LRmOGFYarwfaocDNDxPPPjEGoZdNXUDwM6 vLHgyUedv/j4ijD/yZVh5F9YvF5yFsLPdDeQcmKwm269on18OsQ+fiskCM0enYS7 sAf6280j/b2ucAf9Qn3B2B1rGWvS7Bk2s7CzNac0i8S/PhOA7/0= -----END CERTIFICATE-----Generated at Tue Jun 17 11:08:54 2025 by rpki-client