$ rpki-client -vvf repo-rpki.idnic.net/repo/908ab157-d827-49a8-bb86-28be131c3d26/0/8E2059B2D2448585D11ED2B0143FEFC0E9B2DA36.mft File: 8E2059B2D2448585D11ED2B0143FEFC0E9B2DA36.mft (raw, json) Hash identifier: I3el46tn8TOat+Z4zLfzBStb6zS9JFMVN9KGQBa0wZQ= Subject key identifier: C0:4F:41:23:F9:FD:9D:40:36:FC:63:BE:4B:E0:D6:8D:45:8E:F5:83 Authority key identifier: 8E:20:59:B2:D2:44:85:85:D1:1E:D2:B0:14:3F:EF:C0:E9:B2:DA:36 Certificate issuer: /CN=8E2059B2D2448585D11ED2B0143FEFC0E9B2DA36 Certificate serial: 495D347E147009D052A1E069FD69605D92942B0F Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/8E2059B2D2448585D11ED2B0143FEFC0E9B2DA36.cer Subject info access: rsync://repo-rpki.idnic.net/repo/908ab157-d827-49a8-bb86-28be131c3d26/0/8E2059B2D2448585D11ED2B0143FEFC0E9B2DA36.mft Manifest number: 84 Signing time: Sun 15 Jun 2025 00:10:45 +0000 Manifest this update: Sun 15 Jun 2025 00:05:45 +0000 Manifest next update: Wed 18 Jun 2025 10:53:45 +0000 Files and hashes: 1: 8E2059B2D2448585D11ED2B0143FEFC0E9B2DA36.crl (hash: 3IRgxLk/jFrwyYfCwFZ1Z6Objf7XDvHi6OpRf/zXBb0=) 2: 3136302e32322e3235312e302f32342d3234203d3e20313430343536.roa (hash: k9ZzAkFQGvt+xqoKJ82nD9k3QBtwiwB5qwFg/LMZg2I=) 3: 3136302e32322e3235302e302f32332d3233203d3e20313430343536.roa (hash: MO6/lQY/Nl8VnXin+gA+foQOLuvJOUz6SX7TNLs7MqE=) 4: 3136302e32322e3235302e302f32342d3234203d3e20313430343536.roa (hash: oOhjxNchKYaSdtA4Y1DYNdIAblAIJ4R/DzgKf/zg2vo=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/908ab157-d827-49a8-bb86-28be131c3d26/0/8E2059B2D2448585D11ED2B0143FEFC0E9B2DA36.crl rsync://repo-rpki.idnic.net/repo/908ab157-d827-49a8-bb86-28be131c3d26/0/8E2059B2D2448585D11ED2B0143FEFC0E9B2DA36.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/8E2059B2D2448585D11ED2B0143FEFC0E9B2DA36.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 18 Jun 2025 10:53:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 49:5d:34:7e:14:70:09:d0:52:a1:e0:69:fd:69:60:5d:92:94:2b:0f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8E2059B2D2448585D11ED2B0143FEFC0E9B2DA36 Validity Not Before: Jun 15 00:05:45 2025 GMT Not After : Jun 18 10:53:45 2025 GMT Subject: CN=C04F4123F9FD9D4036FC63BE4BE0D68D458EF583 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:7e:09:97:1d:20:d0:7d:af:05:6e:7f:04:f0: bb:52:df:58:be:fa:22:b5:99:ee:a6:fe:9c:20:f6: ef:2c:76:7f:30:32:fb:d2:72:54:16:16:d9:5a:c6: d9:9a:f6:a7:2f:6e:4a:4b:ef:62:87:91:a8:df:de: 52:a8:07:1e:54:be:01:56:d0:1c:6e:58:1b:a6:ce: b7:a3:b1:c0:d7:d3:b6:c7:ae:e5:d9:37:dc:d6:ae: 3b:64:e2:a4:33:a4:36:3b:da:5f:6e:ca:8e:86:d1: 50:4f:de:9e:7c:3f:f1:00:64:1b:e7:ab:da:b1:4d: 44:9e:4b:44:bd:98:2d:56:29:02:69:82:5a:0f:ae: 8f:43:85:c7:1f:e8:33:ed:86:2d:c2:64:0d:79:96: c8:94:0a:98:20:3e:fe:4d:85:d8:88:bf:2e:9e:79: 6f:43:f2:44:09:6f:c5:ea:35:b1:c4:73:b2:02:44: 22:00:21:8e:56:8b:20:a5:ab:53:b6:dc:d8:6e:51: 14:a9:e3:11:5a:b5:af:de:46:b3:de:74:4c:89:b3: e5:d1:7b:c4:a8:f3:8a:26:d0:7d:0e:6c:c9:14:62: 27:3a:a9:80:85:4e:6b:40:d5:b2:62:62:be:0c:b7: 66:ed:59:be:2e:bc:4b:3e:64:2f:72:f6:80:1f:53: 66:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C0:4F:41:23:F9:FD:9D:40:36:FC:63:BE:4B:E0:D6:8D:45:8E:F5:83 X509v3 Authority Key Identifier: keyid:8E:20:59:B2:D2:44:85:85:D1:1E:D2:B0:14:3F:EF:C0:E9:B2:DA:36 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/908ab157-d827-49a8-bb86-28be131c3d26/0/8E2059B2D2448585D11ED2B0143FEFC0E9B2DA36.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/8E2059B2D2448585D11ED2B0143FEFC0E9B2DA36.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/908ab157-d827-49a8-bb86-28be131c3d26/0/8E2059B2D2448585D11ED2B0143FEFC0E9B2DA36.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1d:30:ad:3a:fc:9f:f9:5d:c0:ca:91:ed:11:c6:6b:71:52:c8: 1c:e8:e7:cc:65:34:56:ca:e8:0c:66:85:9c:b3:ea:14:08:3d: d3:c9:ab:cd:c2:92:ca:bb:fe:55:ee:3a:16:d1:c2:66:b5:2f: d1:de:09:de:26:c4:e2:de:11:e7:37:d1:e6:b0:5f:2b:d8:2d: 41:fc:66:cf:ed:67:4b:d9:cc:1f:01:6d:80:07:38:d6:06:bf: de:72:ba:79:ca:95:fe:6f:cd:4d:35:82:34:ae:0e:f5:35:3f: af:8b:fb:a3:84:93:02:07:97:e4:82:2a:ca:64:33:af:f1:b3: 83:f6:34:13:32:f9:0e:66:ea:9a:37:0c:58:3f:cb:b6:19:01: a6:45:18:17:11:84:33:37:d0:e7:29:d1:cc:43:7f:7a:5b:dc: 5b:97:4d:22:45:4f:ce:b3:36:35:da:f5:98:ea:eb:81:30:ac: 10:1c:93:6a:07:7e:87:8a:a6:3b:7b:7f:8d:b3:37:e6:ca:6f: 47:58:ff:ea:03:33:39:3e:2b:d7:19:e5:d1:ec:fd:70:4d:64: d6:d3:a0:69:36:19:0b:54:e9:cc:8d:9e:32:8c:7b:64:30:46: 8f:5d:9f:1f:b8:ca:e7:8b:96:b3:d2:3f:6d:c4:74:9e:d9:3f: 89:c6:87:1e -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUSV00fhRwCdBSoeBp/WlgXZKUKw8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEUyMDU5QjJEMjQ0ODU4NUQxMUVEMkIwMTQzRkVGQzBF OUIyREEzNjAeFw0yNTA2MTUwMDA1NDVaFw0yNTA2MTgxMDUzNDVaMDMxMTAvBgNV BAMTKEMwNEY0MTIzRjlGRDlENDAzNkZDNjNCRTRCRTBENjhENDU4RUY1ODMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDOfgmXHSDQfa8Fbn8E8LtS31i+ +iK1me6m/pwg9u8sdn8wMvvSclQWFtlaxtma9qcvbkpL72KHkajf3lKoBx5UvgFW 0BxuWBumzrejscDX07bHruXZN9zWrjtk4qQzpDY72l9uyo6G0VBP3p58P/EAZBvn q9qxTUSeS0S9mC1WKQJpgloPro9Dhccf6DPthi3CZA15lsiUCpggPv5NhdiIvy6e eW9D8kQJb8XqNbHEc7ICRCIAIY5WiyClq1O23NhuURSp4xFata/eRrPedEyJs+XR e8So84om0H0ObMkUYic6qYCFTmtA1bJiYr4Mt2btWb4uvEs+ZC9y9oAfU2bzAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUwE9BI/n9nUA2/GO+S+DWjUWO9YMwHwYDVR0j BBgwFoAUjiBZstJEhYXRHtKwFD/vwOmy2jYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 MDhhYjE1Ny1kODI3LTQ5YTgtYmI4Ni0yOGJlMTMxYzNkMjYvMC84RTIwNTlCMkQy NDQ4NTg1RDExRUQyQjAxNDNGRUZDMEU5QjJEQTM2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvOEUyMDU5QjJEMjQ0ODU4NUQxMUVEMkIwMTQzRkVGQzBFOUIy REEzNi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOTA4YWIxNTctZDgyNy00OWE4LWJi ODYtMjhiZTEzMWMzZDI2LzAvOEUyMDU5QjJEMjQ0ODU4NUQxMUVEMkIwMTQzRkVG QzBFOUIyREEzNi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAB0wrTr8n/ldwMqR7RHGa3FSyBzo58xlNFbK 6AxmhZyz6hQIPdPJq83Cksq7/lXuOhbRwma1L9HeCd4mxOLeEec30eawXyvYLUH8 Zs/tZ0vZzB8BbYAHONYGv95yunnKlf5vzU01gjSuDvU1P6+L+6OEkwIHl+SCKspk M6/xs4P2NBMy+Q5m6po3DFg/y7YZAaZFGBcRhDM30Ocp0cxDf3pb3FuXTSJFT86z NjXa9Zjq64EwrBAck2oHfoeKpjt7f42zN+bKb0dY/+oDMzk+K9cZ5dHs/XBNZNbT oGk2GQtU6cyNnjKMe2QwRo9dnx+4yueLlrPSP23EdJ7ZP4nGhx4= -----END CERTIFICATE-----Generated at Tue Jun 17 03:46:06 2025 by rpki-client