$ rpki-client -vvf repo-rpki.idnic.net/repo/d44dfb5a-6e24-4a4d-8969-eb3cbe34e47e/0/8F52E72816B856335390C4F4AFBAF207C21522F6.mft File: 8F52E72816B856335390C4F4AFBAF207C21522F6.mft (raw, json) Hash identifier: Sh14P2S3r/YZTVq6olozDN0ZYENBjVtHV/W/etUXapw= Subject key identifier: D2:DB:99:7A:8E:25:F3:86:2A:1B:4B:74:0F:A3:1C:10:0C:08:CE:16 Authority key identifier: 8F:52:E7:28:16:B8:56:33:53:90:C4:F4:AF:BA:F2:07:C2:15:22:F6 Certificate issuer: /CN=8F52E72816B856335390C4F4AFBAF207C21522F6 Certificate serial: 0515E74CDFCB444F1EF21D1CF4502D7FD4201795 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8F52E72816B856335390C4F4AFBAF207C21522F6.cer Subject info access: rsync://repo-rpki.idnic.net/repo/d44dfb5a-6e24-4a4d-8969-eb3cbe34e47e/0/8F52E72816B856335390C4F4AFBAF207C21522F6.mft Manifest number: 01DF Signing time: Sat 14 Jun 2025 17:52:11 +0000 Manifest this update: Sat 14 Jun 2025 17:47:11 +0000 Manifest next update: Tue 17 Jun 2025 20:21:11 +0000 Files and hashes: 1: 3130332e3135382e3132362e302f32332d3234203d3e203338333230.roa (hash: sAEVe363BvIs2dOx1hxbCSZZoE73/9sHIDXoFlichKA=) 2: 8F52E72816B856335390C4F4AFBAF207C21522F6.crl (hash: rU2RxVtzkhkhRdSwhK36sffhtFa1UbXZMRcxZK67wzE=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/d44dfb5a-6e24-4a4d-8969-eb3cbe34e47e/0/8F52E72816B856335390C4F4AFBAF207C21522F6.crl rsync://repo-rpki.idnic.net/repo/d44dfb5a-6e24-4a4d-8969-eb3cbe34e47e/0/8F52E72816B856335390C4F4AFBAF207C21522F6.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8F52E72816B856335390C4F4AFBAF207C21522F6.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 17 Jun 2025 20:21:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 05:15:e7:4c:df:cb:44:4f:1e:f2:1d:1c:f4:50:2d:7f:d4:20:17:95 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8F52E72816B856335390C4F4AFBAF207C21522F6 Validity Not Before: Jun 14 17:47:11 2025 GMT Not After : Jun 17 20:21:11 2025 GMT Subject: CN=D2DB997A8E25F3862A1B4B740FA31C100C08CE16 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:76:13:31:9f:4a:d0:24:a4:80:85:57:0a:ee: 7f:fc:14:21:35:c3:7d:f7:2f:ba:fa:ce:38:b3:0b: 97:ca:3c:28:f9:e3:72:d2:e0:83:0e:26:96:da:c8: 84:ea:c8:fd:f8:7c:1e:5d:ef:87:31:8c:55:bd:f8: de:b4:d7:ad:64:5c:f3:b2:8d:f2:1a:a1:93:96:f4: 32:0d:f9:c9:83:dc:2f:f0:c9:71:79:ce:60:e4:7f: 04:68:4e:85:0f:ce:34:5c:b0:8e:06:63:d8:e4:c8: 40:99:95:c8:a8:ce:f9:31:b9:f5:48:2e:9d:a1:69: 99:2a:f3:b3:26:48:35:c9:93:ab:df:2e:dd:63:58: 5c:81:a4:c1:3c:2e:3a:70:e7:61:57:b6:45:81:8f: c4:47:76:e2:a3:47:d4:26:c9:ee:98:a7:03:7d:5f: 78:c9:3b:55:7d:71:ec:68:e6:1b:1f:8d:22:f5:17: 57:4a:e8:d8:18:2c:ba:7b:a0:e9:8d:f0:91:bf:39: f2:84:3b:3f:6f:3a:ba:7c:29:05:47:fb:9f:45:97: 9c:43:f5:9a:be:9c:e3:7d:ba:95:8c:0c:57:c6:4b: 78:fd:89:b6:be:98:c9:57:40:3f:31:07:f1:a8:2c: 5c:57:66:81:f2:8e:73:f1:b7:de:aa:d2:fa:15:e1: d7:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:DB:99:7A:8E:25:F3:86:2A:1B:4B:74:0F:A3:1C:10:0C:08:CE:16 X509v3 Authority Key Identifier: keyid:8F:52:E7:28:16:B8:56:33:53:90:C4:F4:AF:BA:F2:07:C2:15:22:F6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/d44dfb5a-6e24-4a4d-8969-eb3cbe34e47e/0/8F52E72816B856335390C4F4AFBAF207C21522F6.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8F52E72816B856335390C4F4AFBAF207C21522F6.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d44dfb5a-6e24-4a4d-8969-eb3cbe34e47e/0/8F52E72816B856335390C4F4AFBAF207C21522F6.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 95:76:46:5e:83:4d:9f:8b:a8:40:e9:c6:d9:ee:e4:21:98:2a: 89:b7:68:bd:4d:cf:26:0e:da:65:f2:04:e7:b2:02:a3:52:f6: 74:fb:7c:cd:77:d1:47:0d:45:38:16:7f:7a:ce:e5:ad:e9:19: 88:97:ba:cb:4c:13:13:58:23:28:7c:20:77:79:16:15:1b:19: 48:f4:9c:6c:20:3b:47:81:1e:eb:26:97:a7:43:b4:22:18:36: 8f:5c:1f:98:f2:f6:5a:9e:c3:30:6a:bb:c0:d8:ea:b1:5c:c4: b2:6e:3c:6e:21:e9:60:92:b8:e6:c2:60:e3:0f:97:75:19:dd: 77:ea:eb:31:6f:5a:c0:93:b4:0f:c0:c5:1b:94:82:8b:c4:09: e3:cf:f5:aa:23:59:dc:fb:06:63:64:3d:97:e1:5f:76:80:f9: 5f:50:e7:c2:9c:16:0e:7a:4f:5c:0e:5f:93:ab:a1:7f:c2:b4: 5e:17:0d:35:31:4a:73:c4:67:68:98:9f:b0:73:de:c4:cb:20: 38:2a:67:6b:6a:b1:94:d3:f6:99:9b:d7:2f:87:cd:29:61:f4: df:e1:a1:47:28:4f:72:53:fb:8c:f1:30:4a:74:28:2f:37:c2: f4:cd:7b:77:4b:14:71:c2:0c:76:6f:4a:09:7a:07:33:09:4b: 41:c0:a3:ac -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUBRXnTN/LRE8e8h0c9FAtf9QgF5UwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEY1MkU3MjgxNkI4NTYzMzUzOTBDNEY0QUZCQUYyMDdD MjE1MjJGNjAeFw0yNTA2MTQxNzQ3MTFaFw0yNTA2MTcyMDIxMTFaMDMxMTAvBgNV BAMTKEQyREI5OTdBOEUyNUYzODYyQTFCNEI3NDBGQTMxQzEwMEMwOENFMTYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC3dhMxn0rQJKSAhVcK7n/8FCE1 w333L7r6zjizC5fKPCj543LS4IMOJpbayITqyP34fB5d74cxjFW9+N60161kXPOy jfIaoZOW9DIN+cmD3C/wyXF5zmDkfwRoToUPzjRcsI4GY9jkyECZlciozvkxufVI Lp2haZkq87MmSDXJk6vfLt1jWFyBpME8Ljpw52FXtkWBj8RHduKjR9Qmye6YpwN9 X3jJO1V9cexo5hsfjSL1F1dK6NgYLLp7oOmN8JG/OfKEOz9vOrp8KQVH+59Fl5xD 9Zq+nON9upWMDFfGS3j9iba+mMlXQD8xB/GoLFxXZoHyjnPxt96q0voV4df1AgMB AAGjggI8MIICODAdBgNVHQ4EFgQU0tuZeo4l84YqG0t0D6McEAwIzhYwHwYDVR0j BBgwFoAUj1LnKBa4VjNTkMT0r7ryB8IVIvYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k NDRkZmI1YS02ZTI0LTRhNGQtODk2OS1lYjNjYmUzNGU0N2UvMC84RjUyRTcyODE2 Qjg1NjMzNTM5MEM0RjRBRkJBRjIwN0MyMTUyMkY2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOEY1MkU3MjgxNkI4NTYzMzUzOTBDNEY0QUZCQUYyMDdDMjE1 MjJGNi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZDQ0ZGZiNWEtNmUyNC00YTRkLTg5 NjktZWIzY2JlMzRlNDdlLzAvOEY1MkU3MjgxNkI4NTYzMzUzOTBDNEY0QUZCQUYy MDdDMjE1MjJGNi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJV2Rl6DTZ+LqEDpxtnu5CGYKom3aL1NzyYO 2mXyBOeyAqNS9nT7fM130UcNRTgWf3rO5a3pGYiXustMExNYIyh8IHd5FhUbGUj0 nGwgO0eBHusml6dDtCIYNo9cH5jy9lqewzBqu8DY6rFcxLJuPG4h6WCSuObCYOMP l3UZ3Xfq6zFvWsCTtA/AxRuUgovECePP9aojWdz7BmNkPZfhX3aA+V9Q58KcFg56 T1wOX5OroX/CtF4XDTUxSnPEZ2iYn7Bz3sTLIDgqZ2tqsZTT9pmb1y+HzSlh9N/h oUcoT3JT+4zxMEp0KC83wvTNe3dLFHHCDHZvSgl6BzMJS0HAo6w= -----END CERTIFICATE-----Generated at Sun Jun 15 17:09:58 2025 by rpki-client