$ rpki-client -vvf repo-rpki.idnic.net/repo/b5424280-33be-4eb7-8db9-e03d417c4d97/0/8B4A0C10F88A0B6EF9E4510F0F6127AD75DBC492.mft File: 8B4A0C10F88A0B6EF9E4510F0F6127AD75DBC492.mft (raw, json) Hash identifier: cLK7zDaB8W2wnrkaZSyKDEkHFf2dGkwbw6x9NoYyJDs= Subject key identifier: BE:C0:65:FC:06:69:F2:98:01:D7:1B:56:D4:E7:7A:98:35:31:BB:A1 Authority key identifier: 8B:4A:0C:10:F8:8A:0B:6E:F9:E4:51:0F:0F:61:27:AD:75:DB:C4:92 Certificate issuer: /CN=8B4A0C10F88A0B6EF9E4510F0F6127AD75DBC492 Certificate serial: 1B4DF0D9AD54AC73FCA0A1B2F9BC2840084E7FBC Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8B4A0C10F88A0B6EF9E4510F0F6127AD75DBC492.cer Subject info access: rsync://repo-rpki.idnic.net/repo/b5424280-33be-4eb7-8db9-e03d417c4d97/0/8B4A0C10F88A0B6EF9E4510F0F6127AD75DBC492.mft Manifest number: 049A Signing time: Mon 16 Jun 2025 17:30:44 +0000 Manifest this update: Mon 16 Jun 2025 17:25:44 +0000 Manifest next update: Fri 20 Jun 2025 01:49:44 +0000 Files and hashes: 1: 8B4A0C10F88A0B6EF9E4510F0F6127AD75DBC492.crl (hash: f3oopPtR4kJcG6dUGR0Tlcwl4ONfbP8O2udiYym4h5o=) 2: 3130332e3134332e36382e302f32342d3234203d3e20313339333931.roa (hash: wVNUf+VlURHvtPfJTdBPKqRmCoRq5tMqXCMVvLe41BI=) 3: 3130332e3134332e36392e302f32342d3234203d3e20313339333931.roa (hash: 617B49ZlXhGk82stAiewN3YrmDgkhS7z3S8GVYVN5mw=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/b5424280-33be-4eb7-8db9-e03d417c4d97/0/8B4A0C10F88A0B6EF9E4510F0F6127AD75DBC492.crl rsync://repo-rpki.idnic.net/repo/b5424280-33be-4eb7-8db9-e03d417c4d97/0/8B4A0C10F88A0B6EF9E4510F0F6127AD75DBC492.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8B4A0C10F88A0B6EF9E4510F0F6127AD75DBC492.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 19 Jun 2025 23:33:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1b:4d:f0:d9:ad:54:ac:73:fc:a0:a1:b2:f9:bc:28:40:08:4e:7f:bc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8B4A0C10F88A0B6EF9E4510F0F6127AD75DBC492 Validity Not Before: Jun 16 17:25:44 2025 GMT Not After : Jun 20 01:49:44 2025 GMT Subject: CN=BEC065FC0669F29801D71B56D4E77A983531BBA1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:af:c3:dd:af:5b:52:6e:f5:89:f2:b8:5c:90: 6d:b1:78:ea:84:2d:57:ad:40:74:ac:2d:21:32:a4: 59:d7:e6:fa:be:f2:97:96:c3:2f:0b:9b:66:e7:d8: c0:eb:a3:f8:d8:ef:99:c5:a5:d5:15:31:09:ed:56: 01:cd:47:f2:a4:e9:a4:a2:06:de:fe:98:95:76:30: ae:59:42:6c:8b:42:b3:86:12:5d:da:25:b8:af:62: fa:d8:57:93:44:9f:3f:12:0d:a7:9c:56:fb:87:db: cc:40:a1:1a:a7:dc:cc:ab:e6:3e:58:7a:df:94:21: 1d:e7:a1:d9:b8:ae:31:e0:47:39:29:33:e7:3b:a9: 2c:8a:a9:f6:75:2c:45:1d:a3:56:86:9a:e7:33:db: 2d:88:d4:3e:21:d1:63:05:74:85:31:56:54:7d:78: 82:99:cf:46:04:74:29:17:ca:cd:80:55:88:8c:58: eb:0e:79:60:13:af:48:2a:05:f6:47:55:a1:2e:cc: 9a:46:46:8f:90:ac:51:35:24:f3:4f:c7:f1:c9:fb: ec:0c:6f:79:ac:c3:fe:67:b2:b8:10:02:61:3d:d4: eb:9a:ca:6f:85:89:d7:54:2d:1a:e2:2b:4e:4b:3d: f6:81:f5:17:9f:c5:58:00:d8:5b:7d:fd:5e:9c:a9: ec:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BE:C0:65:FC:06:69:F2:98:01:D7:1B:56:D4:E7:7A:98:35:31:BB:A1 X509v3 Authority Key Identifier: keyid:8B:4A:0C:10:F8:8A:0B:6E:F9:E4:51:0F:0F:61:27:AD:75:DB:C4:92 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/b5424280-33be-4eb7-8db9-e03d417c4d97/0/8B4A0C10F88A0B6EF9E4510F0F6127AD75DBC492.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8B4A0C10F88A0B6EF9E4510F0F6127AD75DBC492.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/b5424280-33be-4eb7-8db9-e03d417c4d97/0/8B4A0C10F88A0B6EF9E4510F0F6127AD75DBC492.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 18:cb:3b:62:77:75:ac:88:3b:e9:33:09:b3:bb:12:66:b0:bd: 96:6c:9d:f7:3d:b0:cd:eb:f7:a0:8a:a2:d8:dd:a0:a1:47:5d: 1a:45:44:16:ce:b4:7f:ad:ec:51:03:0b:53:99:40:41:90:9b: f2:18:fd:ab:f5:c3:50:9d:07:65:ed:79:80:ed:d8:12:da:f5: 0a:79:7a:5d:5d:32:fa:b3:66:a4:ec:b3:cd:9a:e2:b8:aa:b7: 00:11:99:fc:84:17:5d:a8:57:b5:3d:61:41:cf:d8:bf:01:b8: 05:8c:e5:d6:56:c1:51:f5:15:5f:ef:3e:a2:fe:b4:94:e8:44: 6a:e0:e0:2a:ca:0d:74:9d:fd:7f:1e:16:94:04:4d:16:82:75: c5:7f:07:a5:3b:40:5d:9d:9c:4d:07:f9:d4:64:30:b4:cd:22: d3:bb:7c:c0:21:60:15:4c:c6:f7:fd:35:b5:5b:e1:68:56:88: 02:46:b7:61:7d:85:02:11:72:d1:89:47:68:e0:21:1d:93:1c: 01:9e:d4:46:5c:37:40:e4:54:28:de:88:6a:b5:60:66:4e:bd: 69:7e:bb:2d:24:0f:8e:2a:37:69:b0:bd:85:ee:0e:a3:31:89: 47:b7:90:b2:a6:64:05:a6:2b:31:40:c1:7d:06:61:b7:56:4f: ab:1b:c4:3d -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUG03w2a1UrHP8oKGy+bwoQAhOf7wwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEI0QTBDMTBGODhBMEI2RUY5RTQ1MTBGMEY2MTI3QUQ3 NURCQzQ5MjAeFw0yNTA2MTYxNzI1NDRaFw0yNTA2MjAwMTQ5NDRaMDMxMTAvBgNV BAMTKEJFQzA2NUZDMDY2OUYyOTgwMUQ3MUI1NkQ0RTc3QTk4MzUzMUJCQTEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC2r8Pdr1tSbvWJ8rhckG2xeOqE LVetQHSsLSEypFnX5vq+8peWwy8Lm2bn2MDro/jY75nFpdUVMQntVgHNR/Kk6aSi Bt7+mJV2MK5ZQmyLQrOGEl3aJbivYvrYV5NEnz8SDaecVvuH28xAoRqn3Myr5j5Y et+UIR3nodm4rjHgRzkpM+c7qSyKqfZ1LEUdo1aGmucz2y2I1D4h0WMFdIUxVlR9 eIKZz0YEdCkXys2AVYiMWOsOeWATr0gqBfZHVaEuzJpGRo+QrFE1JPNPx/HJ++wM b3msw/5nsrgQAmE91Ouaym+FiddULRriK05LPfaB9RefxVgA2Ft9/V6cqeyxAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUvsBl/AZp8pgB1xtW1Od6mDUxu6EwHwYDVR0j BBgwFoAUi0oMEPiKC2755FEPD2EnrXXbxJIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i NTQyNDI4MC0zM2JlLTRlYjctOGRiOS1lMDNkNDE3YzRkOTcvMC84QjRBMEMxMEY4 OEEwQjZFRjlFNDUxMEYwRjYxMjdBRDc1REJDNDkyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOEI0QTBDMTBGODhBMEI2RUY5RTQ1MTBGMEY2MTI3QUQ3NURC QzQ5Mi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYjU0MjQyODAtMzNiZS00ZWI3LThk YjktZTAzZDQxN2M0ZDk3LzAvOEI0QTBDMTBGODhBMEI2RUY5RTQ1MTBGMEY2MTI3 QUQ3NURCQzQ5Mi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABjLO2J3dayIO+kzCbO7EmawvZZsnfc9sM3r 96CKotjdoKFHXRpFRBbOtH+t7FEDC1OZQEGQm/IY/av1w1CdB2XteYDt2BLa9Qp5 el1dMvqzZqTss82a4riqtwARmfyEF12oV7U9YUHP2L8BuAWM5dZWwVH1FV/vPqL+ tJToRGrg4CrKDXSd/X8eFpQETRaCdcV/B6U7QF2dnE0H+dRkMLTNItO7fMAhYBVM xvf9NbVb4WhWiAJGt2F9hQIRctGJR2jgIR2THAGe1EZcN0DkVCjeiGq1YGZOvWl+ uy0kD44qN2mwvYXuDqMxiUe3kLKmZAWmKzFAwX0GYbdWT6sbxD0= -----END CERTIFICATE-----Generated at Tue Jun 17 04:39:50 2025 by rpki-client