$ rpki-client -vvf repo-rpki.idnic.net/repo/a87c2b7e-2663-4d68-b25a-5fcf05e07bb4/0/B8E13B8031811FE78FA73151056FBFABEE076814.mft File: B8E13B8031811FE78FA73151056FBFABEE076814.mft (raw, json) Hash identifier: 0egQ2QaTbGg2egd9s/t4TfIxwcOkbF3xlCb3C5/3HjA= Subject key identifier: 05:8A:6B:27:2E:A7:95:33:41:A6:96:F5:32:D2:2E:11:E3:A9:25:97 Authority key identifier: B8:E1:3B:80:31:81:1F:E7:8F:A7:31:51:05:6F:BF:AB:EE:07:68:14 Certificate issuer: /CN=B8E13B8031811FE78FA73151056FBFABEE076814 Certificate serial: 5DF4A1D582F86FBB168D3C1F59D3EF74ED9002FF Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B8E13B8031811FE78FA73151056FBFABEE076814.cer Subject info access: rsync://repo-rpki.idnic.net/repo/a87c2b7e-2663-4d68-b25a-5fcf05e07bb4/0/B8E13B8031811FE78FA73151056FBFABEE076814.mft Manifest number: 06 Signing time: Sun 15 Jun 2025 03:52:05 +0000 Manifest this update: Sun 15 Jun 2025 03:47:05 +0000 Manifest next update: Wed 18 Jun 2025 09:14:05 +0000 Files and hashes: 1: B8E13B8031811FE78FA73151056FBFABEE076814.crl (hash: 0RqpmU1d60MAt1wCe/Hp+zmUfm0+bOWch0a12LX9bu8=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/a87c2b7e-2663-4d68-b25a-5fcf05e07bb4/0/B8E13B8031811FE78FA73151056FBFABEE076814.crl rsync://repo-rpki.idnic.net/repo/a87c2b7e-2663-4d68-b25a-5fcf05e07bb4/0/B8E13B8031811FE78FA73151056FBFABEE076814.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B8E13B8031811FE78FA73151056FBFABEE076814.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 18 Jun 2025 09:14:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5d:f4:a1:d5:82:f8:6f:bb:16:8d:3c:1f:59:d3:ef:74:ed:90:02:ff Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B8E13B8031811FE78FA73151056FBFABEE076814 Validity Not Before: Jun 15 03:47:05 2025 GMT Not After : Jun 18 09:14:05 2025 GMT Subject: CN=058A6B272EA7953341A696F532D22E11E3A92597 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:4c:be:d3:77:6a:f1:5f:e8:17:2c:01:9d:e7: 8b:17:2e:b4:a1:fa:e1:9c:ee:1b:68:7e:29:c5:be: a5:b9:ad:49:56:0a:ab:40:04:79:71:b4:37:7d:7c: 94:75:51:03:71:65:14:f4:64:a0:ce:c7:21:82:3d: 80:1c:0e:cd:24:ac:07:dd:ea:9c:f0:0c:9d:71:80: 2c:8d:5d:56:c2:d9:2b:00:dc:04:f1:56:5b:06:a1: 76:c2:28:c5:8e:83:76:0b:9a:e8:31:a0:87:b8:c7: ca:f1:91:b6:ee:f8:81:8e:4f:85:d5:f0:46:44:20: 95:cf:7b:88:ab:e4:67:1c:74:42:e8:d3:42:b7:fc: 68:1a:c1:28:e2:81:b0:8f:27:30:35:4a:2d:71:b9: 94:f4:40:7e:86:dd:b8:bd:5e:91:c5:ad:89:c5:8f: d2:c6:e5:05:3b:ee:82:da:2a:74:81:5e:b1:fb:00: 7a:db:7b:99:25:80:0e:9a:73:5e:cf:6f:84:5e:57: 60:b5:7e:c2:73:26:16:44:8f:39:d4:7b:65:7a:70: 8f:5c:87:97:d6:9e:3e:e8:7f:b6:6b:cf:a2:e0:b9: 74:e9:52:4a:6a:22:17:93:ac:7e:40:69:d6:fd:b9: 87:01:0c:91:80:d3:7f:25:9b:23:6f:a8:58:a8:3c: f2:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 05:8A:6B:27:2E:A7:95:33:41:A6:96:F5:32:D2:2E:11:E3:A9:25:97 X509v3 Authority Key Identifier: keyid:B8:E1:3B:80:31:81:1F:E7:8F:A7:31:51:05:6F:BF:AB:EE:07:68:14 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/a87c2b7e-2663-4d68-b25a-5fcf05e07bb4/0/B8E13B8031811FE78FA73151056FBFABEE076814.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B8E13B8031811FE78FA73151056FBFABEE076814.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a87c2b7e-2663-4d68-b25a-5fcf05e07bb4/0/B8E13B8031811FE78FA73151056FBFABEE076814.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 72:6f:68:c6:1b:ec:10:14:f7:15:8a:63:e2:60:f1:88:e9:d0: 6a:ab:6b:61:b8:47:b4:0d:03:f4:67:88:87:68:1d:45:a5:a8: 8a:12:3a:60:b6:60:e7:03:44:eb:c4:12:6d:e1:93:ae:a1:90: f9:97:25:81:62:71:1f:73:41:7e:cb:fe:83:70:48:67:e6:ac: 37:a6:33:b5:35:35:3b:4a:50:3a:33:ac:33:9a:c5:1c:7e:74: 14:3d:8f:26:d1:50:da:c3:75:3a:15:45:79:12:6b:ed:6e:bb: 86:fc:51:7b:77:77:3a:0c:21:8c:97:1d:7f:98:b9:2b:a5:65: 33:e0:f0:72:f6:13:0f:e9:b5:80:fe:7e:08:51:9d:ed:04:2f: 97:a3:33:c1:8e:41:43:70:08:42:49:05:24:15:51:f3:b4:d2: 17:b6:bb:d6:95:51:c8:66:b7:e8:f4:6c:b0:00:1f:11:b5:80: c9:1e:c8:55:dc:a6:18:2f:48:a9:4b:bd:d8:e0:9a:ae:57:25: 85:9b:85:eb:ab:96:b2:63:d8:82:4f:3a:32:55:1b:d3:e7:10: 60:d5:f9:08:e8:56:d9:ff:a3:45:5f:25:2e:17:c7:0e:7a:fa: e3:3d:1f:9f:57:b6:68:97:e9:f7:00:f6:a9:65:02:44:8e:13: 1b:4b:1f:0a -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUXfSh1YL4b7sWjTwfWdPvdO2QAv8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjhFMTNCODAzMTgxMUZFNzhGQTczMTUxMDU2RkJGQUJF RTA3NjgxNDAeFw0yNTA2MTUwMzQ3MDVaFw0yNTA2MTgwOTE0MDVaMDMxMTAvBgNV BAMTKDA1OEE2QjI3MkVBNzk1MzM0MUE2OTZGNTMyRDIyRTExRTNBOTI1OTcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC2TL7Td2rxX+gXLAGd54sXLrSh +uGc7htofinFvqW5rUlWCqtABHlxtDd9fJR1UQNxZRT0ZKDOxyGCPYAcDs0krAfd 6pzwDJ1xgCyNXVbC2SsA3ATxVlsGoXbCKMWOg3YLmugxoIe4x8rxkbbu+IGOT4XV 8EZEIJXPe4ir5GccdELo00K3/GgawSjigbCPJzA1Si1xuZT0QH6G3bi9XpHFrYnF j9LG5QU77oLaKnSBXrH7AHrbe5klgA6ac17Pb4ReV2C1fsJzJhZEjznUe2V6cI9c h5fWnj7of7Zrz6LguXTpUkpqIheTrH5Aadb9uYcBDJGA038lmyNvqFioPPIpAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUBYprJy6nlTNBppb1MtIuEeOpJZcwHwYDVR0j BBgwFoAUuOE7gDGBH+ePpzFRBW+/q+4HaBQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h ODdjMmI3ZS0yNjYzLTRkNjgtYjI1YS01ZmNmMDVlMDdiYjQvMC9COEUxM0I4MDMx ODExRkU3OEZBNzMxNTEwNTZGQkZBQkVFMDc2ODE0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQjhFMTNCODAzMTgxMUZFNzhGQTczMTUxMDU2RkJGQUJFRTA3 NjgxNC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYTg3YzJiN2UtMjY2My00ZDY4LWIy NWEtNWZjZjA1ZTA3YmI0LzAvQjhFMTNCODAzMTgxMUZFNzhGQTczMTUxMDU2RkJG QUJFRTA3NjgxNC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHJvaMYb7BAU9xWKY+Jg8Yjp0Gqra2G4R7QN A/RniIdoHUWlqIoSOmC2YOcDROvEEm3hk66hkPmXJYFicR9zQX7L/oNwSGfmrDem M7U1NTtKUDozrDOaxRx+dBQ9jybRUNrDdToVRXkSa+1uu4b8UXt3dzoMIYyXHX+Y uSulZTPg8HL2Ew/ptYD+fghRne0EL5ejM8GOQUNwCEJJBSQVUfO00he2u9aVUchm t+j0bLAAHxG1gMkeyFXcphgvSKlLvdjgmq5XJYWbheurlrJj2IJPOjJVG9PnEGDV +QjoVtn/o0VfJS4Xxw56+uM9H59XtmiX6fcA9qllAkSOExtLHwo= -----END CERTIFICATE-----Generated at Tue Jun 17 02:45:08 2025 by rpki-client