$ rpki-client -vvf repo-rpki.idnic.net/repo/a0ba85a0-3534-49a4-a826-13a735f94369/0/8C210840D9E28A465D4F0B9F3A1D7C31CC6680C0.mft File: 8C210840D9E28A465D4F0B9F3A1D7C31CC6680C0.mft (raw, json) Hash identifier: yggQ2oqkWbCLOxO8PdmhgGhDINyutq8fseLreWXR8WI= Subject key identifier: 49:B1:A0:AF:8C:6C:A5:DA:FE:66:13:A2:6C:1E:21:8C:16:C1:09:B8 Authority key identifier: 8C:21:08:40:D9:E2:8A:46:5D:4F:0B:9F:3A:1D:7C:31:CC:66:80:C0 Certificate issuer: /CN=8C210840D9E28A465D4F0B9F3A1D7C31CC6680C0 Certificate serial: 1BE7CE0274209B0D7FE2AA3943E7A1F2219DE9F4 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/8C210840D9E28A465D4F0B9F3A1D7C31CC6680C0.cer Subject info access: rsync://repo-rpki.idnic.net/repo/a0ba85a0-3534-49a4-a826-13a735f94369/0/8C210840D9E28A465D4F0B9F3A1D7C31CC6680C0.mft Manifest number: 9D Signing time: Mon 16 Jun 2025 08:20:42 +0000 Manifest this update: Mon 16 Jun 2025 08:15:42 +0000 Manifest next update: Thu 19 Jun 2025 18:56:42 +0000 Files and hashes: 1: 8C210840D9E28A465D4F0B9F3A1D7C31CC6680C0.crl (hash: 5J/+PDv82IoKDNwWITJ+I61NwCuaT9P+Myv7MTLJSKE=) 2: 3136302e32322e3139342e302f32332d3234203d3e20313532383236.roa (hash: 8CRgA1ByY654Nlat1fHrKnqGH93mDlUGlMXfJsCa4ik=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/a0ba85a0-3534-49a4-a826-13a735f94369/0/8C210840D9E28A465D4F0B9F3A1D7C31CC6680C0.crl rsync://repo-rpki.idnic.net/repo/a0ba85a0-3534-49a4-a826-13a735f94369/0/8C210840D9E28A465D4F0B9F3A1D7C31CC6680C0.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/8C210840D9E28A465D4F0B9F3A1D7C31CC6680C0.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 19 Jun 2025 18:56:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1b:e7:ce:02:74:20:9b:0d:7f:e2:aa:39:43:e7:a1:f2:21:9d:e9:f4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8C210840D9E28A465D4F0B9F3A1D7C31CC6680C0 Validity Not Before: Jun 16 08:15:42 2025 GMT Not After : Jun 19 18:56:42 2025 GMT Subject: CN=49B1A0AF8C6CA5DAFE6613A26C1E218C16C109B8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:25:73:d7:78:15:19:c8:b5:0f:dd:ee:97:29: eb:ec:3f:ec:f7:02:fa:4c:76:c4:d8:df:4d:56:57: 4c:43:24:65:0a:1c:2b:d4:b8:b9:cd:3b:a1:a6:95: 0d:17:e3:c0:f9:36:da:c5:e1:fb:70:e2:37:cc:f7: 11:33:b6:24:30:48:09:3b:60:1e:bb:d8:30:b2:b9: 56:2d:4f:26:c1:2f:1a:e2:23:ba:8d:7c:2f:09:71: 72:96:a7:83:5e:71:82:66:d6:6c:37:ad:fe:bf:7a: 8b:72:27:8a:4b:e4:9d:c9:22:bc:fc:21:ec:5d:54: 26:f5:5c:18:77:de:f5:1a:7e:2a:ab:b9:6a:1b:69: 6a:f2:fd:1f:dd:4e:3c:cd:8f:65:50:87:f5:ab:70: ed:61:e0:d4:a1:17:56:6e:fc:49:88:6d:3d:d8:51: 7f:b0:54:e3:fe:f5:f0:c6:b9:a4:3c:d6:19:42:86: ba:a5:0a:25:25:06:08:1b:1d:91:23:b7:94:74:d7: 69:7e:45:88:2c:b4:10:68:18:72:cf:5c:07:18:33: a9:6e:f8:2c:17:19:30:91:2a:70:d2:91:9c:05:00: 37:22:dc:54:18:b1:83:f9:e5:e7:42:90:e3:7f:3e: b3:92:96:bd:39:64:4a:93:ab:9e:c4:d6:f8:28:62: 95:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:B1:A0:AF:8C:6C:A5:DA:FE:66:13:A2:6C:1E:21:8C:16:C1:09:B8 X509v3 Authority Key Identifier: keyid:8C:21:08:40:D9:E2:8A:46:5D:4F:0B:9F:3A:1D:7C:31:CC:66:80:C0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/a0ba85a0-3534-49a4-a826-13a735f94369/0/8C210840D9E28A465D4F0B9F3A1D7C31CC6680C0.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/8C210840D9E28A465D4F0B9F3A1D7C31CC6680C0.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a0ba85a0-3534-49a4-a826-13a735f94369/0/8C210840D9E28A465D4F0B9F3A1D7C31CC6680C0.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9a:20:78:61:41:74:46:a8:e4:ce:24:29:1c:bb:50:fc:39:bf: 0c:93:cd:a8:12:e8:c1:b0:20:c3:ad:2a:e8:cf:d2:eb:fa:37: a8:32:87:27:94:ee:f7:00:87:9d:85:02:07:cf:49:31:aa:1b: 9e:9c:67:99:e9:97:b8:e3:d4:9f:19:f0:e6:bf:39:5a:ac:e1: 9a:80:d8:ac:9d:1b:0e:ad:c4:c7:52:20:6f:a1:9b:ca:48:90: 14:3c:7e:e8:27:bf:04:93:b8:5a:d3:fb:8c:72:56:26:f3:36: ff:64:13:8b:68:25:a4:43:86:59:1e:cb:a4:99:00:cf:4f:15: 9a:6b:91:e8:73:b4:ec:c1:28:c5:06:d9:fc:19:c1:87:05:b2: dd:f5:15:9d:ab:64:3e:51:46:b7:a7:9d:c3:ed:e2:6d:60:05: 08:5b:8f:2a:a1:60:84:d6:19:e9:39:c0:32:8b:97:8f:87:e9: ad:5b:99:b4:db:ec:78:e8:ed:7f:77:5c:a6:81:bd:ab:b4:b3: a8:fb:5d:ae:99:96:d8:c4:b2:b0:a6:a4:f0:d1:72:aa:26:45: 95:65:8e:d4:4a:73:ff:00:79:d1:d1:1e:ae:47:16:94:bc:b8: 68:a4:b3:85:5d:99:c1:6f:2f:56:c5:cc:c9:ce:3d:3c:41:39: f5:c2:eb:17 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUG+fOAnQgmw1/4qo5Q+eh8iGd6fQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEMyMTA4NDBEOUUyOEE0NjVENEYwQjlGM0ExRDdDMzFD QzY2ODBDMDAeFw0yNTA2MTYwODE1NDJaFw0yNTA2MTkxODU2NDJaMDMxMTAvBgNV BAMTKDQ5QjFBMEFGOEM2Q0E1REFGRTY2MTNBMjZDMUUyMThDMTZDMTA5QjgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDDJXPXeBUZyLUP3e6XKevsP+z3 AvpMdsTY301WV0xDJGUKHCvUuLnNO6GmlQ0X48D5NtrF4ftw4jfM9xEztiQwSAk7 YB672DCyuVYtTybBLxriI7qNfC8JcXKWp4NecYJm1mw3rf6/eotyJ4pL5J3JIrz8 IexdVCb1XBh33vUafiqruWobaWry/R/dTjzNj2VQh/WrcO1h4NShF1Zu/EmIbT3Y UX+wVOP+9fDGuaQ81hlChrqlCiUlBggbHZEjt5R012l+RYgstBBoGHLPXAcYM6lu +CwXGTCRKnDSkZwFADci3FQYsYP55edCkON/PrOSlr05ZEqTq57E1vgoYpWZAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUSbGgr4xspdr+ZhOibB4hjBbBCbgwHwYDVR0j BBgwFoAUjCEIQNniikZdTwufOh18McxmgMAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h MGJhODVhMC0zNTM0LTQ5YTQtYTgyNi0xM2E3MzVmOTQzNjkvMC84QzIxMDg0MEQ5 RTI4QTQ2NUQ0RjBCOUYzQTFEN0MzMUNDNjY4MEMwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvOEMyMTA4NDBEOUUyOEE0NjVENEYwQjlGM0ExRDdDMzFDQzY2 ODBDMC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYTBiYTg1YTAtMzUzNC00OWE0LWE4 MjYtMTNhNzM1Zjk0MzY5LzAvOEMyMTA4NDBEOUUyOEE0NjVENEYwQjlGM0ExRDdD MzFDQzY2ODBDMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJogeGFBdEao5M4kKRy7UPw5vwyTzagS6MGw IMOtKujP0uv6N6gyhyeU7vcAh52FAgfPSTGqG56cZ5npl7jj1J8Z8Oa/OVqs4ZqA 2KydGw6txMdSIG+hm8pIkBQ8fugnvwSTuFrT+4xyVibzNv9kE4toJaRDhlkey6SZ AM9PFZprkehztOzBKMUG2fwZwYcFst31FZ2rZD5RRrenncPt4m1gBQhbjyqhYITW Gek5wDKLl4+H6a1bmbTb7Hjo7X93XKaBvau0s6j7Xa6ZltjEsrCmpPDRcqomRZVl jtRKc/8AedHRHq5HFpS8uGiks4VdmcFvL1bFzMnOPTxBOfXC6xc= -----END CERTIFICATE-----Generated at Wed Jun 18 00:07:33 2025 by rpki-client