$ rpki-client -vvf repo-rpki.idnic.net/repo/a2aa16ea-2aec-495d-a9a3-6925730d5e0f/0/8458BC369C80A76B2875FC97DBE5D1A09B6AF317.mft File: 8458BC369C80A76B2875FC97DBE5D1A09B6AF317.mft (raw, json) Hash identifier: hhIgQAN3Ah7/e8vwOxPyZKQkB/XTjehFr2/ntOZG0ww= Subject key identifier: 88:B5:A1:4E:CF:D4:16:0F:4A:16:35:28:24:9A:3C:23:BA:8B:FA:43 Authority key identifier: 84:58:BC:36:9C:80:A7:6B:28:75:FC:97:DB:E5:D1:A0:9B:6A:F3:17 Certificate issuer: /CN=8458BC369C80A76B2875FC97DBE5D1A09B6AF317 Certificate serial: 394982FE4B2F24BA99F4D033FE194732C2227345 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8458BC369C80A76B2875FC97DBE5D1A09B6AF317.cer Subject info access: rsync://repo-rpki.idnic.net/repo/a2aa16ea-2aec-495d-a9a3-6925730d5e0f/0/8458BC369C80A76B2875FC97DBE5D1A09B6AF317.mft Manifest number: 04E1 Signing time: Sun 15 Jun 2025 17:41:45 +0000 Manifest this update: Sun 15 Jun 2025 17:36:45 +0000 Manifest next update: Wed 18 Jun 2025 17:51:45 +0000 Files and hashes: 1: 3130332e36362e36392e302f32342d3234203d3e203535363835.roa (hash: x+jv4TuSSXN4C68g+x8B9A51ZwulAwMClt9iXTwzSmY=) 2: 3130332e36362e37302e302f32342d3234203d3e20313333383430.roa (hash: Wxz1us2zDXrNlhEeTyTFEnQyiq4EZlAgNa1zZuJQj0g=) 3: 8458BC369C80A76B2875FC97DBE5D1A09B6AF317.crl (hash: sHD469kYD7R2SLdn0cl7iKY3JBOzQNPe1Ru8gxQOK5A=) 4: 3130332e36362e36382e302f32342d3234203d3e203535363835.roa (hash: tpDStVFIFqB4DRm6j6XW2vqPZ0uybsz5vrF6Xuyk+08=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/a2aa16ea-2aec-495d-a9a3-6925730d5e0f/0/8458BC369C80A76B2875FC97DBE5D1A09B6AF317.crl rsync://repo-rpki.idnic.net/repo/a2aa16ea-2aec-495d-a9a3-6925730d5e0f/0/8458BC369C80A76B2875FC97DBE5D1A09B6AF317.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8458BC369C80A76B2875FC97DBE5D1A09B6AF317.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 18 Jun 2025 17:51:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 39:49:82:fe:4b:2f:24:ba:99:f4:d0:33:fe:19:47:32:c2:22:73:45 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8458BC369C80A76B2875FC97DBE5D1A09B6AF317 Validity Not Before: Jun 15 17:36:45 2025 GMT Not After : Jun 18 17:51:45 2025 GMT Subject: CN=88B5A14ECFD4160F4A163528249A3C23BA8BFA43 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:4d:05:6a:57:b1:95:dd:35:b3:03:1b:7e:e3: ee:23:ba:4d:9b:da:d6:18:09:bd:d3:ff:f3:19:66: f3:02:26:d9:cb:77:ee:ca:c4:04:e7:5c:fe:d8:9d: d5:66:7a:0b:a3:9b:32:86:38:68:5a:0b:bd:9c:62: 85:d3:7e:db:5e:3b:3c:0f:7c:c9:8b:5f:8d:fb:0e: 37:4d:e9:b4:20:e8:db:73:5f:92:d7:a3:32:60:24: 71:64:65:e1:33:2b:a8:9c:52:03:91:8a:c5:1d:ab: 12:81:78:05:2f:9e:c8:c6:21:61:ec:94:7d:17:9b: 59:96:7e:99:9b:c1:fb:b4:ef:e5:c9:89:72:14:95: 95:47:ed:09:28:43:a7:86:e8:0c:77:10:96:0d:d3: 09:ff:c6:49:46:7b:9d:6a:40:79:2b:4e:76:81:c0: 53:79:cd:eb:b5:4b:4f:77:a3:6d:93:b7:11:3d:d3: 86:b8:ac:76:e9:e0:45:d6:7d:75:2e:0e:16:9f:96: e4:dc:e9:75:ae:b4:29:88:43:42:62:94:1e:85:62: 83:2c:f0:60:c4:a0:b5:34:72:d6:9e:b3:73:c6:bd: fc:aa:06:b0:fc:de:97:58:7f:13:c6:d2:d8:36:89: ca:22:70:cb:7d:7f:52:26:6a:97:37:9b:b4:be:4a: 23:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:B5:A1:4E:CF:D4:16:0F:4A:16:35:28:24:9A:3C:23:BA:8B:FA:43 X509v3 Authority Key Identifier: keyid:84:58:BC:36:9C:80:A7:6B:28:75:FC:97:DB:E5:D1:A0:9B:6A:F3:17 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/a2aa16ea-2aec-495d-a9a3-6925730d5e0f/0/8458BC369C80A76B2875FC97DBE5D1A09B6AF317.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8458BC369C80A76B2875FC97DBE5D1A09B6AF317.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a2aa16ea-2aec-495d-a9a3-6925730d5e0f/0/8458BC369C80A76B2875FC97DBE5D1A09B6AF317.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 72:75:61:14:ff:80:79:8f:15:35:de:62:45:8c:f7:02:c7:26: 4f:29:81:31:85:21:b2:bc:06:0c:2f:cc:23:c1:01:4d:1d:37: 68:40:1a:35:4d:14:75:0f:e1:83:2b:09:8a:95:66:d4:46:20: 42:67:03:e7:b8:ef:ff:63:21:07:cb:bf:70:bb:9e:eb:41:97: 06:3b:01:2e:fe:0f:47:3e:b2:bf:b2:09:3d:db:27:7a:e5:2d: 5d:1f:f9:d9:4a:af:f9:33:46:90:9f:cd:04:d3:ac:35:f8:c5: 05:af:4f:ad:ee:d8:10:9a:4e:8d:23:90:e1:61:03:01:cf:80: 3f:d6:89:06:58:c6:91:12:ca:5f:f5:4b:36:44:c0:11:c1:f1: c9:a4:45:e1:94:dd:c5:1a:94:2a:d8:4f:4c:ca:98:d7:f6:2e: e3:4a:6d:81:8a:3c:d4:1b:9d:e5:eb:8a:73:0c:e0:b5:33:35: 5a:2f:3b:55:d2:e7:13:77:44:25:2e:1e:d2:68:55:a9:c8:f8: d7:c0:27:f1:b7:fa:01:ae:66:3c:4c:f2:74:1e:1c:a1:70:fc: 5d:af:f0:42:df:da:cf:23:31:a5:f1:41:33:08:df:2e:0f:ff: 88:db:0c:1c:ef:c0:1e:8b:fc:86:53:34:39:17:cd:ee:f9:a0: 1d:a4:ee:8d -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUOUmC/ksvJLqZ9NAz/hlHMsIic0UwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODQ1OEJDMzY5QzgwQTc2QjI4NzVGQzk3REJFNUQxQTA5 QjZBRjMxNzAeFw0yNTA2MTUxNzM2NDVaFw0yNTA2MTgxNzUxNDVaMDMxMTAvBgNV BAMTKDg4QjVBMTRFQ0ZENDE2MEY0QTE2MzUyODI0OUEzQzIzQkE4QkZBNDMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCgTQVqV7GV3TWzAxt+4+4juk2b 2tYYCb3T//MZZvMCJtnLd+7KxATnXP7YndVmegujmzKGOGhaC72cYoXTftteOzwP fMmLX437DjdN6bQg6NtzX5LXozJgJHFkZeEzK6icUgORisUdqxKBeAUvnsjGIWHs lH0Xm1mWfpmbwfu07+XJiXIUlZVH7QkoQ6eG6Ax3EJYN0wn/xklGe51qQHkrTnaB wFN5zeu1S093o22TtxE904a4rHbp4EXWfXUuDhafluTc6XWutCmIQ0JilB6FYoMs 8GDEoLU0ctaes3PGvfyqBrD83pdYfxPG0tg2icoicMt9f1Imapc3m7S+SiPfAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUiLWhTs/UFg9KFjUoJJo8I7qL+kMwHwYDVR0j BBgwFoAUhFi8NpyAp2sodfyX2+XRoJtq8xcwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h MmFhMTZlYS0yYWVjLTQ5NWQtYTlhMy02OTI1NzMwZDVlMGYvMC84NDU4QkMzNjlD ODBBNzZCMjg3NUZDOTdEQkU1RDFBMDlCNkFGMzE3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvODQ1OEJDMzY5QzgwQTc2QjI4NzVGQzk3REJFNUQxQTA5QjZB RjMxNy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYTJhYTE2ZWEtMmFlYy00OTVkLWE5 YTMtNjkyNTczMGQ1ZTBmLzAvODQ1OEJDMzY5QzgwQTc2QjI4NzVGQzk3REJFNUQx QTA5QjZBRjMxNy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHJ1YRT/gHmPFTXeYkWM9wLHJk8pgTGFIbK8 BgwvzCPBAU0dN2hAGjVNFHUP4YMrCYqVZtRGIEJnA+e47/9jIQfLv3C7nutBlwY7 AS7+D0c+sr+yCT3bJ3rlLV0f+dlKr/kzRpCfzQTTrDX4xQWvT63u2BCaTo0jkOFh AwHPgD/WiQZYxpESyl/1SzZEwBHB8cmkReGU3cUalCrYT0zKmNf2LuNKbYGKPNQb neXrinMM4LUzNVovO1XS5xN3RCUuHtJoVanI+NfAJ/G3+gGuZjxM8nQeHKFw/F2v 8ELf2s8jMaXxQTMI3y4P/4jbDBzvwB6L/IZTNDkXze75oB2k7o0= -----END CERTIFICATE-----Generated at Mon Jun 16 15:42:50 2025 by rpki-client