$ rpki-client -vvf repo-rpki.idnic.net/repo/d70d629a-96ed-451a-8787-34122282a706/0/08435803278DC5796EE67697996454D656195D4C.mft File: 08435803278DC5796EE67697996454D656195D4C.mft (raw, json) Hash identifier: GE5N4rKFZwbScIZy4q/X1JiUyBBMa/JmWOwfX7Qzgz4= Subject key identifier: A6:F1:3F:7E:3C:E6:02:74:BC:49:B7:CC:C2:83:BC:A9:B6:74:F7:39 Authority key identifier: 08:43:58:03:27:8D:C5:79:6E:E6:76:97:99:64:54:D6:56:19:5D:4C Certificate issuer: /CN=08435803278DC5796EE67697996454D656195D4C Certificate serial: 27DDA15267A04FF5A3DB34498A5D59A92A6629B9 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/08435803278DC5796EE67697996454D656195D4C.cer Subject info access: rsync://repo-rpki.idnic.net/repo/d70d629a-96ed-451a-8787-34122282a706/0/08435803278DC5796EE67697996454D656195D4C.mft Manifest number: CE Signing time: Mon 16 Jun 2025 05:20:43 +0000 Manifest this update: Mon 16 Jun 2025 05:15:43 +0000 Manifest next update: Thu 19 Jun 2025 14:53:43 +0000 Files and hashes: 1: 3130332e3138302e3136322e302f32342d3234203d3e20313439333737.roa (hash: 9RpvEpb4MDeR7vKuO5QULV5yAgtCcQbQomTWzkC1nrk=) 2: 08435803278DC5796EE67697996454D656195D4C.crl (hash: KKCUaVf2fEfYSH/PdAxjvUTD07Rx/6145pUAsO+zY4Y=) 3: 3130332e3233302e3234362e302f32342d3234203d3e20313331373735.roa (hash: jTbfZ/3Hx6CL4SSiGlERkjd7H5tKmVCxpeA0RfZsKRg=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/d70d629a-96ed-451a-8787-34122282a706/0/08435803278DC5796EE67697996454D656195D4C.crl rsync://repo-rpki.idnic.net/repo/d70d629a-96ed-451a-8787-34122282a706/0/08435803278DC5796EE67697996454D656195D4C.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/08435803278DC5796EE67697996454D656195D4C.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 19 Jun 2025 14:53:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 27:dd:a1:52:67:a0:4f:f5:a3:db:34:49:8a:5d:59:a9:2a:66:29:b9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=08435803278DC5796EE67697996454D656195D4C Validity Not Before: Jun 16 05:15:43 2025 GMT Not After : Jun 19 14:53:43 2025 GMT Subject: CN=A6F13F7E3CE60274BC49B7CCC283BCA9B674F739 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:28:85:13:5f:0a:2b:7f:bd:6b:d1:37:23:78: 37:77:d9:25:8f:37:67:9a:44:e2:9a:38:7a:f4:17: bc:5c:47:ba:01:a5:d1:36:2c:a2:33:52:4c:31:8a: 1a:80:f9:b1:8d:1e:10:c6:4d:3f:8c:2e:a2:a6:4d: 7e:22:dc:59:4f:03:05:d5:48:50:1d:b1:6e:47:b8: fb:55:8f:d2:ae:00:a1:ea:ce:2d:5e:49:82:56:ab: 16:88:a0:e1:27:98:7e:77:b7:c2:ad:40:1d:96:f2: e3:37:56:80:a2:7e:f7:37:9b:74:6d:d3:72:d2:90: c8:9c:b8:dd:36:c1:ec:10:0f:2a:7f:bf:42:86:c2: 05:9b:18:1e:eb:ad:88:f9:c7:18:9a:8f:ef:d4:6a: 9b:ac:48:a8:20:14:0b:9f:ab:6f:2a:5f:d2:39:c2: 5f:92:a8:b0:d8:5d:e3:f4:eb:06:f6:d5:43:9b:13: 96:b0:50:49:ee:66:6e:e9:a7:e4:50:6a:42:dd:74: ee:ef:18:73:af:fe:a6:16:bc:37:09:3f:fb:98:c3: 1c:04:36:d3:05:1a:ef:f8:17:48:c5:0e:d4:b0:ac: bb:76:48:03:e1:ca:8c:f6:c6:6e:0d:1b:07:43:4b: 93:2c:cf:21:6c:b3:ae:19:58:0b:b5:b9:c0:e1:8d: 26:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A6:F1:3F:7E:3C:E6:02:74:BC:49:B7:CC:C2:83:BC:A9:B6:74:F7:39 X509v3 Authority Key Identifier: keyid:08:43:58:03:27:8D:C5:79:6E:E6:76:97:99:64:54:D6:56:19:5D:4C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/d70d629a-96ed-451a-8787-34122282a706/0/08435803278DC5796EE67697996454D656195D4C.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/08435803278DC5796EE67697996454D656195D4C.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d70d629a-96ed-451a-8787-34122282a706/0/08435803278DC5796EE67697996454D656195D4C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b9:b4:7a:30:53:7b:a1:85:c2:6e:38:f1:f2:07:45:88:95:2e: e3:74:62:7e:df:35:62:87:37:f8:37:74:0a:7a:17:6e:7e:01: b5:16:7f:61:34:fc:a9:8b:ee:c7:c4:d8:03:cc:23:2f:f6:da: d2:bf:2e:6c:6f:9e:42:1c:2c:ec:3f:58:79:18:7c:a0:f4:be: e0:be:90:45:2c:eb:99:c3:7c:42:b8:56:7e:20:91:01:c2:a0: 8d:6d:eb:3b:be:fb:ab:be:49:09:0c:4d:fd:10:8d:8d:6d:8a: 3d:2e:d4:36:6c:8d:c7:82:2b:5f:5e:5e:ef:08:62:d1:47:55: 0c:81:61:75:f5:43:7f:ad:48:5c:2e:71:81:38:71:2c:7c:3c: fc:ff:8d:e8:ba:98:49:c8:d3:08:5e:64:9e:91:3f:c8:0b:dc: ed:e3:9c:94:fb:50:2b:98:f0:97:78:07:f9:2b:18:c7:0c:46: 3b:04:00:90:4f:7d:e6:31:17:15:e0:96:45:70:ee:dd:08:12: 82:cc:bc:c7:ee:2b:a0:7a:af:d9:50:0c:d4:60:2e:2d:65:e3: 13:35:db:fa:bb:70:7b:15:20:37:96:da:17:0d:06:ba:e6:a3: 69:e8:2b:95:2f:31:bf:ac:bc:53:4b:ce:e9:d8:fa:93:77:57: b2:52:07:1e -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUJ92hUmegT/Wj2zRJil1ZqSpmKbkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDg0MzU4MDMyNzhEQzU3OTZFRTY3Njk3OTk2NDU0RDY1 NjE5NUQ0QzAeFw0yNTA2MTYwNTE1NDNaFw0yNTA2MTkxNDUzNDNaMDMxMTAvBgNV BAMTKEE2RjEzRjdFM0NFNjAyNzRCQzQ5QjdDQ0MyODNCQ0E5QjY3NEY3MzkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCjKIUTXworf71r0TcjeDd32SWP N2eaROKaOHr0F7xcR7oBpdE2LKIzUkwxihqA+bGNHhDGTT+MLqKmTX4i3FlPAwXV SFAdsW5HuPtVj9KuAKHqzi1eSYJWqxaIoOEnmH53t8KtQB2W8uM3VoCifvc3m3Rt 03LSkMicuN02wewQDyp/v0KGwgWbGB7rrYj5xxiaj+/UapusSKggFAufq28qX9I5 wl+SqLDYXeP06wb21UObE5awUEnuZm7pp+RQakLddO7vGHOv/qYWvDcJP/uYwxwE NtMFGu/4F0jFDtSwrLt2SAPhyoz2xm4NGwdDS5MszyFss64ZWAu1ucDhjSYDAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUpvE/fjzmAnS8SbfMwoO8qbZ09zkwHwYDVR0j BBgwFoAUCENYAyeNxXlu5naXmWRU1lYZXUwwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k NzBkNjI5YS05NmVkLTQ1MWEtODc4Ny0zNDEyMjI4MmE3MDYvMC8wODQzNTgwMzI3 OERDNTc5NkVFNjc2OTc5OTY0NTRENjU2MTk1RDRDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMDg0MzU4MDMyNzhEQzU3OTZFRTY3Njk3OTk2NDU0RDY1NjE5 NUQ0Qy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZDcwZDYyOWEtOTZlZC00NTFhLTg3 ODctMzQxMjIyODJhNzA2LzAvMDg0MzU4MDMyNzhEQzU3OTZFRTY3Njk3OTk2NDU0 RDY1NjE5NUQ0Qy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALm0ejBTe6GFwm448fIHRYiVLuN0Yn7fNWKH N/g3dAp6F25+AbUWf2E0/KmL7sfE2APMIy/22tK/LmxvnkIcLOw/WHkYfKD0vuC+ kEUs65nDfEK4Vn4gkQHCoI1t6zu++6u+SQkMTf0QjY1tij0u1DZsjceCK19eXu8I YtFHVQyBYXX1Q3+tSFwucYE4cSx8PPz/jei6mEnI0wheZJ6RP8gL3O3jnJT7UCuY 8Jd4B/krGMcMRjsEAJBPfeYxFxXglkVw7t0IEoLMvMfuK6B6r9lQDNRgLi1l4xM1 2/q7cHsVIDeW2hcNBrrmo2noK5UvMb+svFNLzunY+pN3V7JSBx4= -----END CERTIFICATE-----Generated at Wed Jun 18 12:16:06 2025 by rpki-client