$ rpki-client -vvf repo-rpki.idnic.net/repo/aef837b3-dfd2-42cc-9b79-74b6bafd4e2d/0/8711D05D82BAFB7BEAB275E079A72DDD554064EA.mft File: 8711D05D82BAFB7BEAB275E079A72DDD554064EA.mft (raw, json) Hash identifier: hjHtyygktMO4eOnWmVSSTpbkiS6f31iXeoMW1lxWgWU= Subject key identifier: EB:37:E3:55:E6:B0:4B:8C:A4:94:0F:26:CD:3A:F9:0E:6F:20:2D:08 Authority key identifier: 87:11:D0:5D:82:BA:FB:7B:EA:B2:75:E0:79:A7:2D:DD:55:40:64:EA Certificate issuer: /CN=8711D05D82BAFB7BEAB275E079A72DDD554064EA Certificate serial: 606E8F1977D29E1893855B2C9049011FD098BFF2 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8711D05D82BAFB7BEAB275E079A72DDD554064EA.cer Subject info access: rsync://repo-rpki.idnic.net/repo/aef837b3-dfd2-42cc-9b79-74b6bafd4e2d/0/8711D05D82BAFB7BEAB275E079A72DDD554064EA.mft Manifest number: 01AD Signing time: Sun 15 Jun 2025 13:02:00 +0000 Manifest this update: Sun 15 Jun 2025 12:57:00 +0000 Manifest next update: Wed 18 Jun 2025 16:54:00 +0000 Files and hashes: 1: 8711D05D82BAFB7BEAB275E079A72DDD554064EA.crl (hash: hWzy8o3uo7Dh9Et9YjX6zBvT1jcpr/UtmxwjR9yxzus=) 2: 3130332e31372e3137392e302f32342d3234203d3e20313530323236.roa (hash: zZiAzMvnjGpr4Mq+/OGXUdFHQPaHJLr/tCxwWuWhySI=) 3: 3130332e31372e3137382e302f32342d3234203d3e20313530323236.roa (hash: 6sZc5cLjn8BGU3ndbP5aYFbkGJW/EMEDKLHgtlwJygA=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/aef837b3-dfd2-42cc-9b79-74b6bafd4e2d/0/8711D05D82BAFB7BEAB275E079A72DDD554064EA.crl rsync://repo-rpki.idnic.net/repo/aef837b3-dfd2-42cc-9b79-74b6bafd4e2d/0/8711D05D82BAFB7BEAB275E079A72DDD554064EA.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8711D05D82BAFB7BEAB275E079A72DDD554064EA.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 18 Jun 2025 11:39:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 60:6e:8f:19:77:d2:9e:18:93:85:5b:2c:90:49:01:1f:d0:98:bf:f2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8711D05D82BAFB7BEAB275E079A72DDD554064EA Validity Not Before: Jun 15 12:57:00 2025 GMT Not After : Jun 18 16:54:00 2025 GMT Subject: CN=EB37E355E6B04B8CA4940F26CD3AF90E6F202D08 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:f7:49:44:4e:d2:99:18:97:29:5c:7d:81:db: be:db:20:ab:29:ff:1f:81:4c:4e:46:7b:01:72:ae: ce:0d:ec:2c:1a:dc:64:a2:d7:d5:b7:b8:99:8e:a7: 44:7e:6b:59:3e:bf:f6:85:1a:23:d6:f5:b3:35:16: b0:56:15:02:45:e2:36:33:f1:24:b8:c0:20:29:20: fc:bd:8c:b3:d4:cb:bf:8c:b2:77:5a:6b:ed:d1:cc: 64:28:a5:a0:28:ee:a0:a5:fb:13:bc:da:84:04:04: ff:9f:61:2d:76:a0:c7:ce:4d:2e:c5:bf:cf:85:e9: 17:6f:ce:4d:60:a1:89:9f:cb:5e:49:29:cf:b7:e4: 80:ae:bd:3c:1e:fa:d2:d9:d6:d0:08:00:b0:5b:f8: 71:0e:cc:d4:d5:f4:f9:23:7e:39:c1:cf:62:7e:5a: af:2a:3a:5a:5e:5b:9b:8c:87:c8:69:92:ed:c1:cc: e7:f8:c5:e1:5a:97:7c:82:23:dd:1b:f9:b3:4b:e1: 03:6b:a4:62:81:f2:fe:5b:02:47:13:25:e7:f2:3e: c3:43:77:58:1a:1f:3c:f4:64:ad:8a:76:ca:4d:47: 59:ea:04:9d:35:a3:14:b7:d5:d5:69:58:09:ba:09: bc:12:01:0a:9b:a7:32:22:e0:c2:ec:20:c8:c2:92: 6d:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EB:37:E3:55:E6:B0:4B:8C:A4:94:0F:26:CD:3A:F9:0E:6F:20:2D:08 X509v3 Authority Key Identifier: keyid:87:11:D0:5D:82:BA:FB:7B:EA:B2:75:E0:79:A7:2D:DD:55:40:64:EA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/aef837b3-dfd2-42cc-9b79-74b6bafd4e2d/0/8711D05D82BAFB7BEAB275E079A72DDD554064EA.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8711D05D82BAFB7BEAB275E079A72DDD554064EA.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/aef837b3-dfd2-42cc-9b79-74b6bafd4e2d/0/8711D05D82BAFB7BEAB275E079A72DDD554064EA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption dc:6b:6c:0c:ec:a6:ae:48:7f:54:64:a9:8f:20:95:e2:6f:e2: cb:35:e1:fe:2c:d4:b4:84:e6:46:90:46:84:0a:8d:07:69:11: de:3f:42:ba:37:16:48:d9:3a:fc:bd:66:93:bf:d6:5f:5e:03: 9a:9e:50:83:a3:6c:a0:5f:08:28:2b:19:e5:02:50:7a:32:24: bd:28:48:02:62:91:af:5a:31:e7:1e:d9:bc:82:a2:ff:79:93: 10:1f:3c:d7:21:a8:83:01:48:33:09:6d:ab:8e:2f:a3:85:81: 0c:f6:1c:cb:19:c2:7e:3f:35:a8:51:b8:b6:6a:23:b7:80:a7: 52:59:1b:aa:d6:9f:7a:6f:5e:7d:a8:86:2a:cf:89:f3:a0:3e: 37:34:69:b2:24:61:56:fb:3a:e7:75:59:c3:53:18:c4:db:f1: b2:1d:ef:b8:e4:6e:57:ee:ab:2c:3f:fd:98:6e:e9:46:59:fc: ea:c7:e5:59:25:69:2f:f3:b4:b2:62:14:a3:b5:41:06:1e:a0: d2:a4:67:de:18:e4:7b:a3:7f:c4:a1:93:46:8e:f9:81:d3:59: c9:6a:be:29:7f:df:47:8b:58:78:c2:1a:6f:51:e2:26:5f:47: a0:d3:00:53:20:9b:43:2d:09:71:2f:db:e7:ec:1e:7d:05:f6: a4:d5:6b:43 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUYG6PGXfSnhiThVsskEkBH9CYv/IwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODcxMUQwNUQ4MkJBRkI3QkVBQjI3NUUwNzlBNzJEREQ1 NTQwNjRFQTAeFw0yNTA2MTUxMjU3MDBaFw0yNTA2MTgxNjU0MDBaMDMxMTAvBgNV BAMTKEVCMzdFMzU1RTZCMDRCOENBNDk0MEYyNkNEM0FGOTBFNkYyMDJEMDgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDa90lETtKZGJcpXH2B277bIKsp /x+BTE5GewFyrs4N7Cwa3GSi19W3uJmOp0R+a1k+v/aFGiPW9bM1FrBWFQJF4jYz 8SS4wCApIPy9jLPUy7+Msndaa+3RzGQopaAo7qCl+xO82oQEBP+fYS12oMfOTS7F v8+F6Rdvzk1goYmfy15JKc+35ICuvTwe+tLZ1tAIALBb+HEOzNTV9PkjfjnBz2J+ Wq8qOlpeW5uMh8hpku3BzOf4xeFal3yCI90b+bNL4QNrpGKB8v5bAkcTJefyPsND d1gaHzz0ZK2KdspNR1nqBJ01oxS31dVpWAm6CbwSAQqbpzIi4MLsIMjCkm0zAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU6zfjVeawS4yklA8mzTr5Dm8gLQgwHwYDVR0j BBgwFoAUhxHQXYK6+3vqsnXgeact3VVAZOowDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h ZWY4MzdiMy1kZmQyLTQyY2MtOWI3OS03NGI2YmFmZDRlMmQvMC84NzExRDA1RDgy QkFGQjdCRUFCMjc1RTA3OUE3MkRERDU1NDA2NEVBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvODcxMUQwNUQ4MkJBRkI3QkVBQjI3NUUwNzlBNzJEREQ1NTQw NjRFQS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYWVmODM3YjMtZGZkMi00MmNjLTli NzktNzRiNmJhZmQ0ZTJkLzAvODcxMUQwNUQ4MkJBRkI3QkVBQjI3NUUwNzlBNzJE REQ1NTQwNjRFQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBANxrbAzspq5If1RkqY8gleJv4ss14f4s1LSE 5kaQRoQKjQdpEd4/Qro3FkjZOvy9ZpO/1l9eA5qeUIOjbKBfCCgrGeUCUHoyJL0o SAJika9aMece2byCov95kxAfPNchqIMBSDMJbauOL6OFgQz2HMsZwn4/NahRuLZq I7eAp1JZG6rWn3pvXn2ohirPifOgPjc0abIkYVb7Oud1WcNTGMTb8bId77jkblfu qyw//Zhu6UZZ/OrH5VklaS/ztLJiFKO1QQYeoNKkZ94Y5Hujf8Shk0aO+YHTWclq vil/30eLWHjCGm9R4iZfR6DTAFMgm0MtCXEv2+fsHn0F9qTVa0M= -----END CERTIFICATE-----Generated at Sun Jun 15 15:20:06 2025 by rpki-client