$ rpki-client -vvf repo-rpki.idnic.net/repo/d8b98722-1cb4-40d4-ac8b-c3bca2bca217/0/8A95FAF723EC129E336E75ACE1CD4F3094FB6481.mft File: 8A95FAF723EC129E336E75ACE1CD4F3094FB6481.mft (raw, json) Hash identifier: I8FwfFXghdqL2mlAnxYGtxzmlcjqUl1oHpfCSWnWnhs= Subject key identifier: C5:43:AC:74:BA:6F:E0:6C:44:14:5B:D6:AD:2D:F6:0F:08:34:EC:B5 Authority key identifier: 8A:95:FA:F7:23:EC:12:9E:33:6E:75:AC:E1:CD:4F:30:94:FB:64:81 Certificate issuer: /CN=8A95FAF723EC129E336E75ACE1CD4F3094FB6481 Certificate serial: 1AA3F5CCDED535FF5F1671C8F2D0AFBBEF1147C4 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8A95FAF723EC129E336E75ACE1CD4F3094FB6481.cer Subject info access: rsync://repo-rpki.idnic.net/repo/d8b98722-1cb4-40d4-ac8b-c3bca2bca217/0/8A95FAF723EC129E336E75ACE1CD4F3094FB6481.mft Manifest number: 0429 Signing time: Mon 16 Jun 2025 19:01:32 +0000 Manifest this update: Mon 16 Jun 2025 18:56:32 +0000 Manifest next update: Fri 20 Jun 2025 00:33:32 +0000 Files and hashes: 1: 34332e3234352e3138302e302f32322d3234203d3e203538333937.roa (hash: f+W5KSnYaSOmv7obX83rwEJhTHZvGPxy0VlZOsEAh+k=) 2: 8A95FAF723EC129E336E75ACE1CD4F3094FB6481.crl (hash: xTdOH6hHBKNO0d7P1t4idIGr6xnKCeivx0IqwqWxJT0=) 3: 3130332e32332e32302e302f32322d3234203d3e203538333937.roa (hash: y/aRgAk/Ol217uqThdECq/g+tO93bdhzL10rqxPOy5s=) 4: 323030313a6466303a663830303a3a2f34382d3438203d3e203538333937.roa (hash: 8qFDAcssXXUuL7jdU+5MBpRRNuUnSR4XPXnprUszlok=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/d8b98722-1cb4-40d4-ac8b-c3bca2bca217/0/8A95FAF723EC129E336E75ACE1CD4F3094FB6481.crl rsync://repo-rpki.idnic.net/repo/d8b98722-1cb4-40d4-ac8b-c3bca2bca217/0/8A95FAF723EC129E336E75ACE1CD4F3094FB6481.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8A95FAF723EC129E336E75ACE1CD4F3094FB6481.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 20 Jun 2025 00:33:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1a:a3:f5:cc:de:d5:35:ff:5f:16:71:c8:f2:d0:af:bb:ef:11:47:c4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8A95FAF723EC129E336E75ACE1CD4F3094FB6481 Validity Not Before: Jun 16 18:56:32 2025 GMT Not After : Jun 20 00:33:32 2025 GMT Subject: CN=C543AC74BA6FE06C44145BD6AD2DF60F0834ECB5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:7c:e7:f0:e4:4d:fb:a9:09:28:d7:61:a4:24: 17:9a:aa:78:53:55:4c:ea:60:d7:03:34:0d:86:6b: 04:c8:0a:62:23:bd:67:79:bb:e9:c4:27:b7:04:5c: 58:da:a0:8b:25:dc:60:2d:9f:b7:5d:ad:68:fc:be: 41:eb:67:1f:d9:86:1d:27:e5:74:84:d0:b2:b4:28: e5:ef:e3:b6:be:7b:10:ea:1c:11:e2:cf:c3:7e:2d: 7a:7a:b6:dc:31:d4:23:20:93:55:5f:6e:02:ab:68: 85:80:02:81:de:c4:12:df:a1:8b:4e:64:af:7f:75: 2d:7f:d8:76:d6:ae:84:cd:f7:06:cc:f7:a5:f4:96: ef:8b:6a:d3:aa:14:45:1f:f9:bb:58:6d:f2:69:07: d8:ad:8f:bb:e8:ca:b0:5a:2f:2f:98:29:df:76:a9: be:f5:aa:8e:2f:7d:8a:50:13:96:37:27:a3:e0:06: 95:f8:f6:13:55:99:92:9f:c7:c2:66:15:a1:89:66: 4e:27:eb:3c:37:cb:0e:23:48:65:5b:24:0b:86:36: 68:79:f4:3b:dd:cc:1d:71:d8:bf:a6:b4:d1:bb:2d: 15:8a:cf:70:78:cd:18:69:46:d1:c3:8d:2d:0d:8a: 2e:10:89:b4:90:1a:d2:75:64:e2:8a:7a:b1:fb:52: 58:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:43:AC:74:BA:6F:E0:6C:44:14:5B:D6:AD:2D:F6:0F:08:34:EC:B5 X509v3 Authority Key Identifier: keyid:8A:95:FA:F7:23:EC:12:9E:33:6E:75:AC:E1:CD:4F:30:94:FB:64:81 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/d8b98722-1cb4-40d4-ac8b-c3bca2bca217/0/8A95FAF723EC129E336E75ACE1CD4F3094FB6481.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8A95FAF723EC129E336E75ACE1CD4F3094FB6481.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d8b98722-1cb4-40d4-ac8b-c3bca2bca217/0/8A95FAF723EC129E336E75ACE1CD4F3094FB6481.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b2:73:53:af:c7:47:37:73:46:1d:6d:93:80:6c:d4:d3:6c:bc: d1:2a:3c:14:7f:5f:29:b3:fc:42:f9:7a:29:de:dc:b8:07:9b: 23:c6:92:3a:2b:6e:36:7c:3b:22:e8:93:c3:f2:a2:5e:2d:11: 5c:d1:29:dc:3e:36:ad:fc:8c:e5:96:f3:d5:36:55:1c:c3:a3: 2b:bf:92:57:0b:32:10:03:39:b7:21:54:90:43:3c:72:39:d9: 75:cc:9b:13:34:82:2c:fc:c0:1c:3f:b5:bb:97:fa:e4:8d:13: d4:74:8a:d6:c3:26:31:e7:92:02:76:cb:f9:7a:0a:52:56:2b: 9a:73:38:11:b6:81:17:1a:01:a2:da:8b:47:ec:01:78:71:c9: 61:ed:be:29:7b:df:96:4a:2f:af:5d:21:4f:2d:07:6d:cc:88: 90:ca:68:1d:37:a5:23:f8:58:0c:07:78:85:b4:a4:7e:b9:dd: 4b:81:98:43:01:83:fe:02:9f:50:1f:d3:ff:70:77:2b:2e:50: f8:fb:f2:b7:35:7c:be:9e:7f:c9:79:4b:d7:8e:0a:c4:8f:a7: 78:db:27:f3:51:bb:94:bf:10:91:72:8a:77:c3:d4:ca:9d:4b: d6:79:5a:a0:c7:1e:8e:9d:1a:29:f2:ce:eb:1a:06:bc:b6:3b: 08:c4:7c:71 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUGqP1zN7VNf9fFnHI8tCvu+8RR8QwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEE5NUZBRjcyM0VDMTI5RTMzNkU3NUFDRTFDRDRGMzA5 NEZCNjQ4MTAeFw0yNTA2MTYxODU2MzJaFw0yNTA2MjAwMDMzMzJaMDMxMTAvBgNV BAMTKEM1NDNBQzc0QkE2RkUwNkM0NDE0NUJENkFEMkRGNjBGMDgzNEVDQjUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC9fOfw5E37qQko12GkJBeaqnhT VUzqYNcDNA2GawTICmIjvWd5u+nEJ7cEXFjaoIsl3GAtn7ddrWj8vkHrZx/Zhh0n 5XSE0LK0KOXv47a+exDqHBHiz8N+LXp6ttwx1CMgk1VfbgKraIWAAoHexBLfoYtO ZK9/dS1/2HbWroTN9wbM96X0lu+LatOqFEUf+btYbfJpB9itj7voyrBaLy+YKd92 qb71qo4vfYpQE5Y3J6PgBpX49hNVmZKfx8JmFaGJZk4n6zw3yw4jSGVbJAuGNmh5 9DvdzB1x2L+mtNG7LRWKz3B4zRhpRtHDjS0Nii4QibSQGtJ1ZOKKerH7UliPAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUxUOsdLpv4GxEFFvWrS32Dwg07LUwHwYDVR0j BBgwFoAUipX69yPsEp4zbnWs4c1PMJT7ZIEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k OGI5ODcyMi0xY2I0LTQwZDQtYWM4Yi1jM2JjYTJiY2EyMTcvMC84QTk1RkFGNzIz RUMxMjlFMzM2RTc1QUNFMUNENEYzMDk0RkI2NDgxLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOEE5NUZBRjcyM0VDMTI5RTMzNkU3NUFDRTFDRDRGMzA5NEZC NjQ4MS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZDhiOTg3MjItMWNiNC00MGQ0LWFj OGItYzNiY2EyYmNhMjE3LzAvOEE5NUZBRjcyM0VDMTI5RTMzNkU3NUFDRTFDRDRG MzA5NEZCNjQ4MS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALJzU6/HRzdzRh1tk4Bs1NNsvNEqPBR/Xymz /EL5eine3LgHmyPGkjorbjZ8OyLok8Pyol4tEVzRKdw+Nq38jOWW89U2VRzDoyu/ klcLMhADObchVJBDPHI52XXMmxM0giz8wBw/tbuX+uSNE9R0itbDJjHnkgJ2y/l6 ClJWK5pzOBG2gRcaAaLai0fsAXhxyWHtvil735ZKL69dIU8tB23MiJDKaB03pSP4 WAwHeIW0pH653UuBmEMBg/4Cn1Af0/9wdysuUPj78rc1fL6ef8l5S9eOCsSPp3jb J/NRu5S/EJFyinfD1MqdS9Z5WqDHHo6dGinyzusaBry2OwjEfHE= -----END CERTIFICATE-----Generated at Tue Jun 17 15:38:47 2025 by rpki-client