$ rpki-client -vvf repo-rpki.idnic.net/repo/d7ff01d0-26f9-4b20-a318-c311c267f2af/0/8A54C81A444D07051A24AACF743F01863F8129AB.mft File: 8A54C81A444D07051A24AACF743F01863F8129AB.mft (raw, json) Hash identifier: /GmIn+xHwNu+4hagQNqiLjsacYFuSyGzxvYo0J4j3x8= Subject key identifier: 71:5C:19:C0:19:98:6B:8F:B2:51:01:E4:50:5B:6B:5E:07:05:CC:43 Authority key identifier: 8A:54:C8:1A:44:4D:07:05:1A:24:AA:CF:74:3F:01:86:3F:81:29:AB Certificate issuer: /CN=8A54C81A444D07051A24AACF743F01863F8129AB Certificate serial: 31004F6BA466596A239D72010BF7239ECBB1F82C Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8A54C81A444D07051A24AACF743F01863F8129AB.cer Subject info access: rsync://repo-rpki.idnic.net/repo/d7ff01d0-26f9-4b20-a318-c311c267f2af/0/8A54C81A444D07051A24AACF743F01863F8129AB.mft Manifest number: 02BF Signing time: Sun 15 Jun 2025 12:00:37 +0000 Manifest this update: Sun 15 Jun 2025 11:55:37 +0000 Manifest next update: Wed 18 Jun 2025 18:22:37 +0000 Files and hashes: 1: 8A54C81A444D07051A24AACF743F01863F8129AB.crl (hash: yYEr9zbAVWNYDoLDxURaBWrCFPPrv26a6lKCPjI4DY4=) 2: 3130332e3136362e3135382e302f32332d3233203d3e20313431393535.roa (hash: 8iqd/DLPSKXzm6qMwrWasV0WJDuso56p2m5ElmgcTDA=) 3: 3130332e3136362e3135382e302f32342d3234203d3e20313431393535.roa (hash: Bup7LELWa0M49WEmJBOXwO3r0+CyN1znNANGE751Xcc=) 4: 3130332e3136362e3135392e302f32342d3234203d3e20313431393535.roa (hash: D5y/dOOdbevGbXtghOHQINTcjdbypBLwek1XQ3CqPYE=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/d7ff01d0-26f9-4b20-a318-c311c267f2af/0/8A54C81A444D07051A24AACF743F01863F8129AB.crl rsync://repo-rpki.idnic.net/repo/d7ff01d0-26f9-4b20-a318-c311c267f2af/0/8A54C81A444D07051A24AACF743F01863F8129AB.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8A54C81A444D07051A24AACF743F01863F8129AB.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 18 Jun 2025 18:22:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 31:00:4f:6b:a4:66:59:6a:23:9d:72:01:0b:f7:23:9e:cb:b1:f8:2c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8A54C81A444D07051A24AACF743F01863F8129AB Validity Not Before: Jun 15 11:55:37 2025 GMT Not After : Jun 18 18:22:37 2025 GMT Subject: CN=715C19C019986B8FB25101E4505B6B5E0705CC43 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:9f:aa:69:05:5b:e5:e3:91:46:96:87:26:69: bb:88:c4:32:7e:e3:5b:23:7f:75:37:b5:c6:b8:b1: 54:50:ab:01:ab:85:e1:78:00:30:87:94:91:d7:f1: 25:44:63:77:d5:c9:79:7d:4b:d0:55:b1:b8:96:f4: 1b:b0:c4:82:79:c5:58:a0:e9:72:90:a6:d0:f0:42: 6d:11:d5:c7:78:b2:b7:f6:31:69:dc:6e:57:92:0d: e5:19:1a:dc:06:25:7c:ec:9b:f7:2d:7e:bc:1d:ea: a3:1d:d4:49:28:c4:4c:3c:9b:b3:81:10:b6:1f:c2: 9a:5c:af:a9:0f:a0:c3:1a:3e:ea:34:38:ec:5f:ed: c8:20:7b:8c:68:80:80:19:eb:27:f2:58:0a:60:25: b9:a2:f2:ff:ce:18:87:52:fd:69:f4:7c:15:8f:8b: 05:a1:c4:da:d4:01:4e:63:f6:7b:b3:69:32:62:4b: e6:9f:26:f7:77:bd:5e:17:0a:b4:a3:84:0d:e2:47: 90:07:d5:9b:95:c2:e0:d3:54:40:77:97:59:14:c4: cf:ad:78:9f:ac:b0:73:52:b9:b9:9e:da:d9:6f:d9: ad:89:67:bf:cf:fc:04:2c:40:3b:08:58:c2:32:ac: b8:ca:cf:6b:b9:7c:57:d9:05:17:a0:bc:0a:c1:83: b0:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:5C:19:C0:19:98:6B:8F:B2:51:01:E4:50:5B:6B:5E:07:05:CC:43 X509v3 Authority Key Identifier: keyid:8A:54:C8:1A:44:4D:07:05:1A:24:AA:CF:74:3F:01:86:3F:81:29:AB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/d7ff01d0-26f9-4b20-a318-c311c267f2af/0/8A54C81A444D07051A24AACF743F01863F8129AB.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8A54C81A444D07051A24AACF743F01863F8129AB.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d7ff01d0-26f9-4b20-a318-c311c267f2af/0/8A54C81A444D07051A24AACF743F01863F8129AB.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6c:c8:eb:76:ab:6f:38:54:76:ab:bd:aa:fb:5f:5e:22:71:5c: 51:ed:4f:6e:23:b9:f2:a9:28:a2:4e:2f:89:37:ca:c8:e9:a4: 8a:cd:26:1f:35:57:4a:d2:c3:c7:6e:a8:d4:60:8e:1d:ba:f6: 64:8f:fd:2b:dd:77:90:49:c0:cd:20:8d:33:8d:e7:3e:d9:d4: a5:f8:f6:8d:3f:77:86:8e:dc:32:c0:a0:aa:65:75:6b:dd:85: be:08:41:e1:0d:b7:9c:bd:f0:b3:02:91:41:6d:36:23:d2:cf: 40:24:df:53:6a:8c:4a:30:f9:af:25:6e:fe:1a:54:5d:30:a3: a8:af:df:86:b2:ae:b7:31:9c:39:46:51:dd:0c:f5:96:ec:13: 87:41:40:e1:ca:5a:d6:0d:b9:9b:56:67:6c:a7:36:1e:e1:94: 0a:dd:cc:5f:ad:43:4b:e3:48:04:d0:fd:ec:f5:d9:28:65:a5: 89:27:e3:3a:25:d0:36:b4:ff:a7:5f:d2:ac:23:93:2f:15:84: a3:95:5e:57:17:16:c0:06:22:6e:70:6f:9b:fc:b7:c0:5b:e0: a6:7a:d4:93:4a:0b:49:98:70:9e:af:54:c0:2a:e7:9a:85:7c: a6:69:44:6e:e0:bf:a1:84:1f:3b:87:ac:0e:c2:0a:b0:9d:08: 82:5f:ed:c7 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUMQBPa6RmWWojnXIBC/cjnsux+CwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEE1NEM4MUE0NDREMDcwNTFBMjRBQUNGNzQzRjAxODYz RjgxMjlBQjAeFw0yNTA2MTUxMTU1MzdaFw0yNTA2MTgxODIyMzdaMDMxMTAvBgNV BAMTKDcxNUMxOUMwMTk5ODZCOEZCMjUxMDFFNDUwNUI2QjVFMDcwNUNDNDMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDNn6ppBVvl45FGlocmabuIxDJ+ 41sjf3U3tca4sVRQqwGrheF4ADCHlJHX8SVEY3fVyXl9S9BVsbiW9BuwxIJ5xVig 6XKQptDwQm0R1cd4srf2MWncbleSDeUZGtwGJXzsm/ctfrwd6qMd1EkoxEw8m7OB ELYfwppcr6kPoMMaPuo0OOxf7cgge4xogIAZ6yfyWApgJbmi8v/OGIdS/Wn0fBWP iwWhxNrUAU5j9nuzaTJiS+afJvd3vV4XCrSjhA3iR5AH1ZuVwuDTVEB3l1kUxM+t eJ+ssHNSubme2tlv2a2JZ7/P/AQsQDsIWMIyrLjKz2u5fFfZBRegvArBg7A9AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUcVwZwBmYa4+yUQHkUFtrXgcFzEMwHwYDVR0j BBgwFoAUilTIGkRNBwUaJKrPdD8Bhj+BKaswDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k N2ZmMDFkMC0yNmY5LTRiMjAtYTMxOC1jMzExYzI2N2YyYWYvMC84QTU0QzgxQTQ0 NEQwNzA1MUEyNEFBQ0Y3NDNGMDE4NjNGODEyOUFCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOEE1NEM4MUE0NDREMDcwNTFBMjRBQUNGNzQzRjAxODYzRjgx MjlBQi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZDdmZjAxZDAtMjZmOS00YjIwLWEz MTgtYzMxMWMyNjdmMmFmLzAvOEE1NEM4MUE0NDREMDcwNTFBMjRBQUNGNzQzRjAx ODYzRjgxMjlBQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGzI63arbzhUdqu9qvtfXiJxXFHtT24jufKp KKJOL4k3ysjppIrNJh81V0rSw8duqNRgjh269mSP/Svdd5BJwM0gjTON5z7Z1KX4 9o0/d4aO3DLAoKpldWvdhb4IQeENt5y98LMCkUFtNiPSz0Ak31NqjEow+a8lbv4a VF0wo6iv34ayrrcxnDlGUd0M9ZbsE4dBQOHKWtYNuZtWZ2ynNh7hlArdzF+tQ0vj SATQ/ez12ShlpYkn4zol0Da0/6df0qwjky8VhKOVXlcXFsAGIm5wb5v8t8Bb4KZ6 1JNKC0mYcJ6vVMAq55qFfKZpRG7gv6GEHzuHrA7CCrCdCIJf7cc= -----END CERTIFICATE-----Generated at Mon Jun 16 11:59:22 2025 by rpki-client