$ rpki-client -vvf repo-rpki.idnic.net/repo/b7b87f6d-29a7-4b4c-81c7-5b4cbdb2cb6a/0/8603B0F726A05AB356D10DB170BD8E27963AFE1A.mft File: 8603B0F726A05AB356D10DB170BD8E27963AFE1A.mft (raw, json) Hash identifier: 8IIp4u1PcaX8FoWJORctDG0ZEDcDPeAb8GMyw7RR6Hc= Subject key identifier: C4:6D:74:02:6E:9B:53:79:15:6A:E8:EF:D9:49:E9:06:39:4F:72:7C Authority key identifier: 86:03:B0:F7:26:A0:5A:B3:56:D1:0D:B1:70:BD:8E:27:96:3A:FE:1A Certificate issuer: /CN=8603B0F726A05AB356D10DB170BD8E27963AFE1A Certificate serial: 1081593C728215C6A38BBDFC616B9B1112E5BB38 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8603B0F726A05AB356D10DB170BD8E27963AFE1A.cer Subject info access: rsync://repo-rpki.idnic.net/repo/b7b87f6d-29a7-4b4c-81c7-5b4cbdb2cb6a/0/8603B0F726A05AB356D10DB170BD8E27963AFE1A.mft Manifest number: 03CD Signing time: Sat 14 Jun 2025 04:11:58 +0000 Manifest this update: Sat 14 Jun 2025 04:06:58 +0000 Manifest next update: Tue 17 Jun 2025 09:09:58 +0000 Files and hashes: 1: 323430353a633763303a3a2f33322d3332203d3e20313339393738.roa (hash: w1U60qcdJqGqgGejfw5qqfHMeYCjchzAjGjkoYQhMH8=) 2: 3130332e3134382e31382e302f32342d3234203d3e20313339393738.roa (hash: KlVfWP1Il3RN3ASw6Ya5TPYfRFfepbYfILbLkUXBAks=) 3: 8603B0F726A05AB356D10DB170BD8E27963AFE1A.crl (hash: VJ07nArYdNWKzTs7wMZMRnsv16hcPS/oEq/hDXx6GHs=) 4: 3130332e3134382e31392e302f32342d3234203d3e20313339393738.roa (hash: CZOT3Qe6u5gK3ZMkwDdMPzpBsT/hchoPycr1jT+sxpE=) 5: 3130332e3134382e31382e302f32332d3233203d3e20313339393738.roa (hash: 9QqvAfZSusq7TNTZjMNWZS+7iPHdwM0xe1dY5FOdfh4=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/b7b87f6d-29a7-4b4c-81c7-5b4cbdb2cb6a/0/8603B0F726A05AB356D10DB170BD8E27963AFE1A.crl rsync://repo-rpki.idnic.net/repo/b7b87f6d-29a7-4b4c-81c7-5b4cbdb2cb6a/0/8603B0F726A05AB356D10DB170BD8E27963AFE1A.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8603B0F726A05AB356D10DB170BD8E27963AFE1A.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 17 Jun 2025 09:09:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10:81:59:3c:72:82:15:c6:a3:8b:bd:fc:61:6b:9b:11:12:e5:bb:38 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8603B0F726A05AB356D10DB170BD8E27963AFE1A Validity Not Before: Jun 14 04:06:58 2025 GMT Not After : Jun 17 09:09:58 2025 GMT Subject: CN=C46D74026E9B5379156AE8EFD949E906394F727C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:72:7f:1a:a5:e6:d9:a5:47:9b:9d:5a:8d:db: 94:d8:b9:3b:46:13:4a:d5:b0:74:9c:e8:26:0d:d9: 4a:7e:99:dd:56:59:1f:e6:d8:0e:2b:86:58:bf:02: 21:91:26:eb:31:fe:ab:ed:33:b4:ad:ab:9e:54:c2: bf:19:80:7c:6c:99:44:4b:83:b1:ff:52:e5:dd:f3: 09:6c:82:33:a3:ce:a8:d7:dd:72:21:21:dd:ca:02: 11:4f:e1:45:51:1d:6e:ac:44:0b:08:ab:11:8d:a5: 59:16:29:59:cc:cf:fd:3a:85:40:da:59:4b:17:08: d1:54:de:a8:ab:de:cb:f6:12:ba:a0:9d:8f:b2:d0: 6f:13:f8:10:dd:cb:be:8a:14:a7:71:cc:af:61:25: 41:03:e2:4e:d7:14:43:b8:6a:86:53:b5:c3:42:12: f4:87:25:41:03:7f:cc:e5:44:cd:ca:4d:df:36:2e: d3:90:df:5f:0d:93:2f:07:a2:cf:ba:79:57:c8:6e: 71:41:09:cd:70:25:0c:cb:4b:56:72:b2:f2:ce:28: a4:6d:a7:ba:fa:68:28:d8:95:bb:ce:1d:8a:09:09: 3b:43:9c:a8:06:71:4b:77:6d:05:33:9a:b2:ad:b0: 87:93:04:fc:1e:02:13:50:b1:b2:d1:39:f6:69:ec: 8f:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:6D:74:02:6E:9B:53:79:15:6A:E8:EF:D9:49:E9:06:39:4F:72:7C X509v3 Authority Key Identifier: keyid:86:03:B0:F7:26:A0:5A:B3:56:D1:0D:B1:70:BD:8E:27:96:3A:FE:1A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/b7b87f6d-29a7-4b4c-81c7-5b4cbdb2cb6a/0/8603B0F726A05AB356D10DB170BD8E27963AFE1A.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8603B0F726A05AB356D10DB170BD8E27963AFE1A.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/b7b87f6d-29a7-4b4c-81c7-5b4cbdb2cb6a/0/8603B0F726A05AB356D10DB170BD8E27963AFE1A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8b:c3:a5:ff:8f:0e:dd:73:d7:c6:32:47:af:df:14:81:5a:d8: bb:89:8b:7a:4b:1f:71:99:64:66:2d:23:57:89:52:b0:52:76: f3:c9:f6:65:e2:5e:ad:05:ce:47:4e:15:cc:e9:a1:f2:be:e5: d0:9b:89:fa:4d:30:6f:2d:98:cc:39:cd:59:3b:8a:52:fa:d3: 1d:3f:08:b9:5e:e3:41:70:30:9a:c3:ea:80:55:ae:2e:d1:d1: 9e:ae:1e:7b:7a:c7:e3:6f:53:2e:ac:84:2b:19:c0:de:e4:89: 77:c1:c9:2f:bd:79:50:c1:c0:cb:43:4e:e0:c1:6e:11:5f:49: 61:f0:01:b0:8e:fa:f5:69:a9:70:9c:f1:1d:81:fd:f6:fa:68: 67:25:a1:0d:3f:92:e1:0a:b9:b7:6e:ac:cc:3f:d7:41:45:2f: 6c:c4:0b:aa:ec:66:1e:eb:8f:7a:18:9c:b5:e9:47:99:86:82: 62:94:0a:3f:ec:46:8d:b0:9d:77:af:27:94:e4:75:7b:66:cd: 5e:c9:0e:8d:b7:e8:50:81:72:f1:4a:b9:4f:c7:bc:88:bb:6a: b5:e1:da:fc:20:20:ef:1b:0c:b0:72:b8:6d:fc:d5:78:d1:40: 97:11:01:98:1c:09:c6:7d:57:2b:07:70:7b:37:7f:c0:fa:61: a8:1a:4f:88 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUEIFZPHKCFcaji738YWubERLluzgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODYwM0IwRjcyNkEwNUFCMzU2RDEwREIxNzBCRDhFMjc5 NjNBRkUxQTAeFw0yNTA2MTQwNDA2NThaFw0yNTA2MTcwOTA5NThaMDMxMTAvBgNV BAMTKEM0NkQ3NDAyNkU5QjUzNzkxNTZBRThFRkQ5NDlFOTA2Mzk0RjcyN0MwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC9cn8apebZpUebnVqN25TYuTtG E0rVsHSc6CYN2Up+md1WWR/m2A4rhli/AiGRJusx/qvtM7Stq55Uwr8ZgHxsmURL g7H/UuXd8wlsgjOjzqjX3XIhId3KAhFP4UVRHW6sRAsIqxGNpVkWKVnMz/06hUDa WUsXCNFU3qir3sv2ErqgnY+y0G8T+BDdy76KFKdxzK9hJUED4k7XFEO4aoZTtcNC EvSHJUEDf8zlRM3KTd82LtOQ318Nky8Hos+6eVfIbnFBCc1wJQzLS1ZysvLOKKRt p7r6aCjYlbvOHYoJCTtDnKgGcUt3bQUzmrKtsIeTBPweAhNQsbLROfZp7I/FAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUxG10Am6bU3kVaujv2UnpBjlPcnwwHwYDVR0j BBgwFoAUhgOw9yagWrNW0Q2xcL2OJ5Y6/howDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i N2I4N2Y2ZC0yOWE3LTRiNGMtODFjNy01YjRjYmRiMmNiNmEvMC84NjAzQjBGNzI2 QTA1QUIzNTZEMTBEQjE3MEJEOEUyNzk2M0FGRTFBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvODYwM0IwRjcyNkEwNUFCMzU2RDEwREIxNzBCRDhFMjc5NjNB RkUxQS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYjdiODdmNmQtMjlhNy00YjRjLTgx YzctNWI0Y2JkYjJjYjZhLzAvODYwM0IwRjcyNkEwNUFCMzU2RDEwREIxNzBCRDhF Mjc5NjNBRkUxQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIvDpf+PDt1z18YyR6/fFIFa2LuJi3pLH3GZ ZGYtI1eJUrBSdvPJ9mXiXq0FzkdOFczpofK+5dCbifpNMG8tmMw5zVk7ilL60x0/ CLle40FwMJrD6oBVri7R0Z6uHnt6x+NvUy6shCsZwN7kiXfByS+9eVDBwMtDTuDB bhFfSWHwAbCO+vVpqXCc8R2B/fb6aGcloQ0/kuEKubdurMw/10FFL2zEC6rsZh7r j3oYnLXpR5mGgmKUCj/sRo2wnXevJ5TkdXtmzV7JDo236FCBcvFKuU/HvIi7arXh 2vwgIO8bDLByuG381XjRQJcRAZgcCcZ9VysHcHs3f8D6YagaT4g= -----END CERTIFICATE-----Generated at Sun Jun 15 18:35:44 2025 by rpki-client