$ rpki-client -vvf repo-rpki.idnic.net/repo/d9afd315-f47f-4f6a-b8b5-45a2280bbc85/0/8CC3A67DBA162B4430DF0F08F810A7B953CBA4A1.mft File: 8CC3A67DBA162B4430DF0F08F810A7B953CBA4A1.mft (raw, json) Hash identifier: Ynb934WJII5zvy9Fss2gr94vtoT7CALeqdl3fbyynoM= Subject key identifier: 3B:EC:5D:B1:D1:E0:B7:3F:5E:30:08:48:DE:74:93:B5:03:13:63:DC Authority key identifier: 8C:C3:A6:7D:BA:16:2B:44:30:DF:0F:08:F8:10:A7:B9:53:CB:A4:A1 Certificate issuer: /CN=8CC3A67DBA162B4430DF0F08F810A7B953CBA4A1 Certificate serial: 10A3CBF8F2775B35D7F04479F239EFDA5B588E5E Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8CC3A67DBA162B4430DF0F08F810A7B953CBA4A1.cer Subject info access: rsync://repo-rpki.idnic.net/repo/d9afd315-f47f-4f6a-b8b5-45a2280bbc85/0/8CC3A67DBA162B4430DF0F08F810A7B953CBA4A1.mft Manifest number: 01DB Signing time: Sat 14 Jun 2025 05:00:55 +0000 Manifest this update: Sat 14 Jun 2025 04:55:55 +0000 Manifest next update: Tue 17 Jun 2025 05:19:55 +0000 Files and hashes: 1: 3130332e3139312e35322e302f32332d3234203d3e2034383030.roa (hash: e+A7LYn+NCGFiG7Es9xiBuZGY1wSb3yZo5rf4YGYc54=) 2: 8CC3A67DBA162B4430DF0F08F810A7B953CBA4A1.crl (hash: eMaNWQqRr3cpLGLhRMbS7SKNAnyR3SKhJYcZuBBMo3E=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/d9afd315-f47f-4f6a-b8b5-45a2280bbc85/0/8CC3A67DBA162B4430DF0F08F810A7B953CBA4A1.crl rsync://repo-rpki.idnic.net/repo/d9afd315-f47f-4f6a-b8b5-45a2280bbc85/0/8CC3A67DBA162B4430DF0F08F810A7B953CBA4A1.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8CC3A67DBA162B4430DF0F08F810A7B953CBA4A1.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 17 Jun 2025 05:19:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10:a3:cb:f8:f2:77:5b:35:d7:f0:44:79:f2:39:ef:da:5b:58:8e:5e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8CC3A67DBA162B4430DF0F08F810A7B953CBA4A1 Validity Not Before: Jun 14 04:55:55 2025 GMT Not After : Jun 17 05:19:55 2025 GMT Subject: CN=3BEC5DB1D1E0B73F5E300848DE7493B5031363DC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:56:ed:23:4a:68:ce:15:e6:6b:91:36:16:b8: 36:a8:97:8c:48:d7:d9:34:3b:c4:90:59:de:34:84: 26:22:27:04:4c:c2:d2:04:a9:27:4c:b9:a4:a0:68: 80:e5:3f:f9:12:df:67:82:a4:68:00:f5:f2:ef:2c: 41:4a:f0:2e:83:c4:aa:68:23:65:dd:f1:53:e4:86: ce:64:1a:c2:36:c3:be:a9:1a:2a:66:49:ac:33:18: 1f:0c:2e:6c:b3:d8:5a:a4:7f:d0:1c:5b:e9:9f:56: 85:62:44:4f:03:c2:13:f5:2b:ba:54:54:66:01:bc: f1:07:a9:23:12:7a:b6:4b:0e:b9:af:ac:dc:dd:97: 8e:7e:fe:21:f3:75:c6:7c:58:ae:55:ea:58:f6:75: 46:ae:38:8a:79:c0:55:46:e0:1f:bb:e7:a3:5b:98: 7e:26:dc:68:31:55:74:34:d1:7b:e6:7a:20:ba:96: b1:3c:bc:24:5c:42:a8:9a:06:43:74:43:94:ef:3d: c7:5e:ce:3f:a2:e4:24:b0:0f:13:97:ae:4c:0e:f8: df:93:6a:ca:4c:50:e3:be:f4:56:51:5c:b4:44:4c: 5e:6e:1a:22:56:cf:59:c9:4d:01:93:25:3b:bf:6c: ef:e6:d4:30:f2:13:4f:eb:b6:20:c7:2a:b4:1c:1b: ce:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3B:EC:5D:B1:D1:E0:B7:3F:5E:30:08:48:DE:74:93:B5:03:13:63:DC X509v3 Authority Key Identifier: keyid:8C:C3:A6:7D:BA:16:2B:44:30:DF:0F:08:F8:10:A7:B9:53:CB:A4:A1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/d9afd315-f47f-4f6a-b8b5-45a2280bbc85/0/8CC3A67DBA162B4430DF0F08F810A7B953CBA4A1.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8CC3A67DBA162B4430DF0F08F810A7B953CBA4A1.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d9afd315-f47f-4f6a-b8b5-45a2280bbc85/0/8CC3A67DBA162B4430DF0F08F810A7B953CBA4A1.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 79:58:66:68:8f:ed:02:c8:d6:83:fa:b1:f4:56:92:0c:e6:62: c1:bb:80:ce:bc:84:21:59:ad:90:8d:f0:27:4f:e2:f4:73:95: 60:d4:9c:53:e5:7f:31:e0:a4:25:30:8a:8b:60:72:13:39:98: 1b:98:c3:ef:75:18:83:fe:0f:5d:b5:0d:d6:8d:c6:48:60:2b: a7:dd:ef:ff:c2:f3:2d:66:a7:8f:8a:65:91:21:c5:48:f9:12: c1:d1:bb:a3:80:d3:21:2d:48:60:be:73:da:c1:4f:c0:fb:ee: a4:3d:92:87:fe:79:85:03:c1:71:71:a4:7e:b0:93:a5:48:7c: b2:8b:d1:84:2b:d2:8e:75:54:ca:a9:0d:7e:92:58:d5:27:79: 76:ef:fa:21:1e:e9:24:28:11:23:78:ad:85:8b:91:b7:3a:22: f2:e8:2e:dc:fd:e7:40:80:6e:19:96:cd:f2:f6:30:74:e0:0e: 17:50:a2:d0:e9:4f:c2:b7:15:6b:2c:cf:48:6f:34:f9:9a:c3: b0:b0:67:7f:ed:2e:0f:ed:67:a5:fa:7d:19:bf:a8:e6:5b:79: 68:0e:30:2c:6f:a6:fb:13:0b:3b:f8:6a:1f:29:90:f1:5c:be: 89:a3:fc:e6:33:d5:00:83:bf:d4:79:8f:bf:ec:a0:1b:9e:b4: 69:47:76:66 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUEKPL+PJ3WzXX8ER58jnv2ltYjl4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOENDM0E2N0RCQTE2MkI0NDMwREYwRjA4RjgxMEE3Qjk1 M0NCQTRBMTAeFw0yNTA2MTQwNDU1NTVaFw0yNTA2MTcwNTE5NTVaMDMxMTAvBgNV BAMTKDNCRUM1REIxRDFFMEI3M0Y1RTMwMDg0OERFNzQ5M0I1MDMxMzYzREMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCvVu0jSmjOFeZrkTYWuDaol4xI 19k0O8SQWd40hCYiJwRMwtIEqSdMuaSgaIDlP/kS32eCpGgA9fLvLEFK8C6DxKpo I2Xd8VPkhs5kGsI2w76pGipmSawzGB8MLmyz2Fqkf9AcW+mfVoViRE8DwhP1K7pU VGYBvPEHqSMSerZLDrmvrNzdl45+/iHzdcZ8WK5V6lj2dUauOIp5wFVG4B+756Nb mH4m3GgxVXQ00XvmeiC6lrE8vCRcQqiaBkN0Q5TvPcdezj+i5CSwDxOXrkwO+N+T aspMUOO+9FZRXLRETF5uGiJWz1nJTQGTJTu/bO/m1DDyE0/rtiDHKrQcG87XAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUO+xdsdHgtz9eMAhI3nSTtQMTY9wwHwYDVR0j BBgwFoAUjMOmfboWK0Qw3w8I+BCnuVPLpKEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k OWFmZDMxNS1mNDdmLTRmNmEtYjhiNS00NWEyMjgwYmJjODUvMC84Q0MzQTY3REJB MTYyQjQ0MzBERjBGMDhGODEwQTdCOTUzQ0JBNEExLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOENDM0E2N0RCQTE2MkI0NDMwREYwRjA4RjgxMEE3Qjk1M0NC QTRBMS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZDlhZmQzMTUtZjQ3Zi00ZjZhLWI4 YjUtNDVhMjI4MGJiYzg1LzAvOENDM0E2N0RCQTE2MkI0NDMwREYwRjA4RjgxMEE3 Qjk1M0NCQTRBMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHlYZmiP7QLI1oP6sfRWkgzmYsG7gM68hCFZ rZCN8CdP4vRzlWDUnFPlfzHgpCUwiotgchM5mBuYw+91GIP+D121DdaNxkhgK6fd 7//C8y1mp4+KZZEhxUj5EsHRu6OA0yEtSGC+c9rBT8D77qQ9kof+eYUDwXFxpH6w k6VIfLKL0YQr0o51VMqpDX6SWNUneXbv+iEe6SQoESN4rYWLkbc6IvLoLtz950CA bhmWzfL2MHTgDhdQotDpT8K3FWssz0hvNPmaw7CwZ3/tLg/tZ6X6fRm/qOZbeWgO MCxvpvsTCzv4ah8pkPFcvomj/OYz1QCDv9R5j7/soBuetGlHdmY= -----END CERTIFICATE-----Generated at Sun Jun 15 22:32:29 2025 by rpki-client