$ rpki-client -vvf repo-rpki.idnic.net/repo/cf0ba1e7-d142-47cd-8d8f-2a372b922223/0/8874CE775F191B6E0B34A789A359EB9FB93B737E.mft File: 8874CE775F191B6E0B34A789A359EB9FB93B737E.mft (raw, json) Hash identifier: gmSqkXxksb4xmnsdib0jMB9r8peze2riz3j4bQp14cU= Subject key identifier: C5:39:03:AD:CD:5C:E2:DA:FC:14:12:AC:B0:B0:02:1F:F7:95:F4:07 Authority key identifier: 88:74:CE:77:5F:19:1B:6E:0B:34:A7:89:A3:59:EB:9F:B9:3B:73:7E Certificate issuer: /CN=8874CE775F191B6E0B34A789A359EB9FB93B737E Certificate serial: 473D980960A3DB13F875BF102E892BDCB9463A97 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8874CE775F191B6E0B34A789A359EB9FB93B737E.cer Subject info access: rsync://repo-rpki.idnic.net/repo/cf0ba1e7-d142-47cd-8d8f-2a372b922223/0/8874CE775F191B6E0B34A789A359EB9FB93B737E.mft Manifest number: 023A Signing time: Mon 16 Jun 2025 16:40:43 +0000 Manifest this update: Mon 16 Jun 2025 16:35:43 +0000 Manifest next update: Thu 19 Jun 2025 17:35:43 +0000 Files and hashes: 1: 3130332e3137322e32352e302f32342d3234203d3e20313432333837.roa (hash: CcBFwGpASAvXeD5i1IQiNWPfNj9jmof+ADOKkYxnqW8=) 2: 3130332e3137322e32342e302f32342d3234203d3e20313432333837.roa (hash: Y9XARniDJgg4OUqj6GjFvuZ0EXuuYtQJNDhXyplaxBY=) 3: 8874CE775F191B6E0B34A789A359EB9FB93B737E.crl (hash: 9fz759xI7jJL+ZknPjOoWMKNpe+pzH6AtLb+f6TGCEo=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/cf0ba1e7-d142-47cd-8d8f-2a372b922223/0/8874CE775F191B6E0B34A789A359EB9FB93B737E.crl rsync://repo-rpki.idnic.net/repo/cf0ba1e7-d142-47cd-8d8f-2a372b922223/0/8874CE775F191B6E0B34A789A359EB9FB93B737E.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8874CE775F191B6E0B34A789A359EB9FB93B737E.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 19 Jun 2025 17:35:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 47:3d:98:09:60:a3:db:13:f8:75:bf:10:2e:89:2b:dc:b9:46:3a:97 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8874CE775F191B6E0B34A789A359EB9FB93B737E Validity Not Before: Jun 16 16:35:43 2025 GMT Not After : Jun 19 17:35:43 2025 GMT Subject: CN=C53903ADCD5CE2DAFC1412ACB0B0021FF795F407 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:c3:96:74:5d:b0:f0:44:6e:67:fe:bd:0c:1b: f8:07:d4:a9:16:c5:56:d7:e3:df:19:9b:0d:0f:4e: 6d:60:dd:25:1e:f2:97:01:02:2f:bc:b7:fd:a4:54: c3:06:ce:d0:b3:dc:e7:18:dd:3f:a7:3d:50:4d:f4: e3:3d:9d:89:e5:49:6c:e0:8a:d8:c8:8e:94:13:93: 30:5d:25:91:45:ab:da:f3:ec:ac:2a:be:30:13:90: 1a:7e:ee:4e:d9:f5:78:76:ca:1e:14:cc:b9:3d:65: a0:53:bf:d9:d4:73:3c:b5:23:93:d3:03:b3:71:62: 99:24:8b:cc:6f:53:22:c5:1d:5a:03:33:df:3a:8a: 98:6b:a5:85:61:e3:87:08:4e:32:8c:6d:ea:35:6e: 17:4a:41:23:f8:8e:40:4b:2e:2a:b8:c7:4e:75:fb: 4f:b8:51:44:42:ab:53:b8:4a:49:47:88:0d:1a:bf: e2:dc:f0:be:7a:a5:6c:a5:eb:e1:3e:bb:98:21:3e: b0:37:5f:f3:eb:34:9c:6b:32:7c:fe:02:16:bc:b0: da:e4:7c:bb:22:77:2e:f4:96:07:90:ed:b0:71:f9: ac:09:31:06:13:0c:b8:a6:ae:cf:c2:a5:2f:66:1c: 56:33:c4:2c:2a:c0:cd:b5:77:44:e7:2c:bf:24:01: 2a:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:39:03:AD:CD:5C:E2:DA:FC:14:12:AC:B0:B0:02:1F:F7:95:F4:07 X509v3 Authority Key Identifier: keyid:88:74:CE:77:5F:19:1B:6E:0B:34:A7:89:A3:59:EB:9F:B9:3B:73:7E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/cf0ba1e7-d142-47cd-8d8f-2a372b922223/0/8874CE775F191B6E0B34A789A359EB9FB93B737E.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8874CE775F191B6E0B34A789A359EB9FB93B737E.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/cf0ba1e7-d142-47cd-8d8f-2a372b922223/0/8874CE775F191B6E0B34A789A359EB9FB93B737E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9e:d8:76:44:cc:5c:6b:a2:69:f6:fc:f6:3f:08:9c:f7:d5:56: a3:d8:25:4a:73:84:eb:c7:9f:2b:44:78:f0:70:ca:68:b9:60: 6c:0e:c5:96:ef:26:e6:bb:5a:9a:fe:60:91:c2:51:2a:9e:57: 1f:46:de:1b:b5:f7:eb:61:79:e9:1c:9d:35:42:e3:0e:09:2d: 46:24:7b:31:9a:b2:f4:63:84:b3:fa:bb:6c:3d:b6:49:e5:7f: 01:b5:02:22:66:26:45:40:86:fd:f1:de:28:b6:42:59:bd:40: 85:0f:1f:64:6e:89:c3:35:10:1e:9d:4a:73:25:d4:98:b5:3f: 85:6c:62:5c:fa:71:31:fb:9d:88:84:71:b4:ff:35:b5:e9:14: 25:9e:aa:f1:63:e9:8b:39:74:e4:79:60:1f:90:5f:0e:a9:2e: b8:13:0a:81:42:2e:da:46:2d:32:49:c7:34:11:a3:f0:6e:00: e8:64:c3:02:91:b0:88:9f:2e:15:4b:8d:91:8c:c7:b6:9c:8b: d8:6e:d5:85:59:ba:93:77:25:18:03:72:63:9b:d6:ce:64:2f: 2b:a2:7e:4d:3c:0a:a7:a8:5c:22:22:ba:ec:f6:ee:dd:c5:d6: 36:20:d9:f4:74:1c:0b:f7:16:90:7e:7e:0a:e5:79:08:fb:94: 28:e9:53:a9 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIURz2YCWCj2xP4db8QLokr3LlGOpcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODg3NENFNzc1RjE5MUI2RTBCMzRBNzg5QTM1OUVCOUZC OTNCNzM3RTAeFw0yNTA2MTYxNjM1NDNaFw0yNTA2MTkxNzM1NDNaMDMxMTAvBgNV BAMTKEM1MzkwM0FEQ0Q1Q0UyREFGQzE0MTJBQ0IwQjAwMjFGRjc5NUY0MDcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC9w5Z0XbDwRG5n/r0MG/gH1KkW xVbX498Zmw0PTm1g3SUe8pcBAi+8t/2kVMMGztCz3OcY3T+nPVBN9OM9nYnlSWzg itjIjpQTkzBdJZFFq9rz7KwqvjATkBp+7k7Z9Xh2yh4UzLk9ZaBTv9nUczy1I5PT A7NxYpkki8xvUyLFHVoDM986iphrpYVh44cITjKMbeo1bhdKQSP4jkBLLiq4x051 +0+4UURCq1O4SklHiA0av+Lc8L56pWyl6+E+u5ghPrA3X/PrNJxrMnz+Aha8sNrk fLsidy70lgeQ7bBx+awJMQYTDLimrs/CpS9mHFYzxCwqwM21d0TnLL8kASpHAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUxTkDrc1c4tr8FBKssLACH/eV9AcwHwYDVR0j BBgwFoAUiHTOd18ZG24LNKeJo1nrn7k7c34wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j ZjBiYTFlNy1kMTQyLTQ3Y2QtOGQ4Zi0yYTM3MmI5MjIyMjMvMC84ODc0Q0U3NzVG MTkxQjZFMEIzNEE3ODlBMzU5RUI5RkI5M0I3MzdFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvODg3NENFNzc1RjE5MUI2RTBCMzRBNzg5QTM1OUVCOUZCOTNC NzM3RS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vY2YwYmExZTctZDE0Mi00N2NkLThk OGYtMmEzNzJiOTIyMjIzLzAvODg3NENFNzc1RjE5MUI2RTBCMzRBNzg5QTM1OUVC OUZCOTNCNzM3RS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJ7YdkTMXGuiafb89j8InPfVVqPYJUpzhOvH nytEePBwymi5YGwOxZbvJua7Wpr+YJHCUSqeVx9G3hu19+theekcnTVC4w4JLUYk ezGasvRjhLP6u2w9tknlfwG1AiJmJkVAhv3x3ii2Qlm9QIUPH2RuicM1EB6dSnMl 1Ji1P4VsYlz6cTH7nYiEcbT/NbXpFCWeqvFj6Ys5dOR5YB+QXw6pLrgTCoFCLtpG LTJJxzQRo/BuAOhkwwKRsIifLhVLjZGMx7aci9hu1YVZupN3JRgDcmOb1s5kLyui fk08CqeoXCIiuuz27t3F1jYg2fR0HAv3FpB+fgrleQj7lCjpU6k= -----END CERTIFICATE-----Generated at Tue Jun 17 09:06:34 2025 by rpki-client