$ rpki-client -vvf repo-rpki.idnic.net/repo/dacb7187-7a5f-4e23-be94-593a0c288cb9/0/8C6B9FE80EF1DA40B964D4429F78785ADDD29EFB.mft File: 8C6B9FE80EF1DA40B964D4429F78785ADDD29EFB.mft (raw, json) Hash identifier: xIRclAQE+/50TXN1fIqxZQalLLVVsBRJS+OWY+8Vmks= Subject key identifier: 59:E3:12:C5:1E:13:AF:DD:EE:DC:7C:AB:98:60:3D:F2:87:EB:D3:03 Authority key identifier: 8C:6B:9F:E8:0E:F1:DA:40:B9:64:D4:42:9F:78:78:5A:DD:D2:9E:FB Certificate issuer: /CN=8C6B9FE80EF1DA40B964D4429F78785ADDD29EFB Certificate serial: 254390EB7B79C88BC27AC7E0C1A8495F362F25C2 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8C6B9FE80EF1DA40B964D4429F78785ADDD29EFB.cer Subject info access: rsync://repo-rpki.idnic.net/repo/dacb7187-7a5f-4e23-be94-593a0c288cb9/0/8C6B9FE80EF1DA40B964D4429F78785ADDD29EFB.mft Manifest number: 01BB Signing time: Wed 18 Jun 2025 16:31:22 +0000 Manifest this update: Wed 18 Jun 2025 16:26:22 +0000 Manifest next update: Sat 21 Jun 2025 22:14:22 +0000 Files and hashes: 1: 8C6B9FE80EF1DA40B964D4429F78785ADDD29EFB.crl (hash: OQ90kHsEv4cBSuoVLf/+w4NJ/D9UxhA6wd4iH+fjKjQ=) 2: 3130332e31302e37312e302f32342d3234203d3e20313530323130.roa (hash: wDta+92k3x+gK76Z0kGm3qQTLhs6WF7nJtND4k4DV9Y=) 3: 3130332e31302e37302e302f32342d3234203d3e20313530323130.roa (hash: 5JDd/HA007WXvt9HRMOrUb4bJ8L4vCr7oaVmKSZ2Ddg=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/dacb7187-7a5f-4e23-be94-593a0c288cb9/0/8C6B9FE80EF1DA40B964D4429F78785ADDD29EFB.crl rsync://repo-rpki.idnic.net/repo/dacb7187-7a5f-4e23-be94-593a0c288cb9/0/8C6B9FE80EF1DA40B964D4429F78785ADDD29EFB.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8C6B9FE80EF1DA40B964D4429F78785ADDD29EFB.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 21 Jun 2025 22:14:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 25:43:90:eb:7b:79:c8:8b:c2:7a:c7:e0:c1:a8:49:5f:36:2f:25:c2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8C6B9FE80EF1DA40B964D4429F78785ADDD29EFB Validity Not Before: Jun 18 16:26:22 2025 GMT Not After : Jun 21 22:14:22 2025 GMT Subject: CN=59E312C51E13AFDDEEDC7CAB98603DF287EBD303 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:65:aa:85:89:53:ab:ff:ce:4c:4a:f9:51:8c: 44:39:eb:aa:24:b6:46:4b:40:7f:c1:53:02:ee:5e: 36:40:f4:f5:c1:0c:89:e0:0c:36:2b:72:40:be:0e: 36:95:2a:05:1a:44:96:7c:17:de:c4:11:44:cd:4d: 6d:16:3a:cf:29:e0:95:a4:e3:3a:4b:35:09:75:6e: cd:9b:8e:8b:fb:3c:c1:9d:be:ec:a3:18:7b:39:b9: b8:56:6e:3c:f2:6b:06:04:45:7e:1b:ea:45:00:cd: 59:4f:19:d0:f9:84:6e:73:bd:9c:94:8e:f5:78:fd: 55:2a:be:f7:52:3e:4a:75:3e:44:df:53:d6:b6:bc: 6b:0c:2a:d9:1f:29:79:29:d1:ad:45:bc:6d:0e:f1: 6b:97:3a:ef:3d:65:b6:da:bb:1d:83:c5:83:3f:4c: 2c:87:cf:f4:67:74:b4:c4:b8:c2:fd:3c:78:35:9d: 0a:6b:41:af:b3:c8:55:36:a3:bb:05:1b:9c:ae:a3: fc:86:01:13:9a:90:0c:e8:08:fc:69:ef:29:a4:02: 1a:ad:c0:53:19:a4:58:78:08:e4:8f:05:a9:44:be: 69:6f:d9:e8:d3:0d:c3:58:06:35:1a:12:4a:8e:74: 9f:0a:19:8b:a4:72:a1:ce:5e:1c:13:fc:ee:43:c2: 4e:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 59:E3:12:C5:1E:13:AF:DD:EE:DC:7C:AB:98:60:3D:F2:87:EB:D3:03 X509v3 Authority Key Identifier: keyid:8C:6B:9F:E8:0E:F1:DA:40:B9:64:D4:42:9F:78:78:5A:DD:D2:9E:FB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/dacb7187-7a5f-4e23-be94-593a0c288cb9/0/8C6B9FE80EF1DA40B964D4429F78785ADDD29EFB.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8C6B9FE80EF1DA40B964D4429F78785ADDD29EFB.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/dacb7187-7a5f-4e23-be94-593a0c288cb9/0/8C6B9FE80EF1DA40B964D4429F78785ADDD29EFB.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 72:42:a1:df:37:71:b4:cc:47:e8:75:77:99:fb:54:dd:0b:3c: de:9b:b0:ae:01:a2:43:7e:22:e6:d4:50:72:61:dc:fa:4b:ca: 02:6f:1f:01:e2:60:27:21:a8:6d:d8:a1:fb:f9:c3:04:e6:8c: 05:53:b8:3d:a5:7f:ce:92:9f:1a:e1:5e:49:52:a6:6b:09:51: 8d:f3:f4:05:60:1c:91:ff:96:cd:24:02:7b:a4:4a:56:21:c3: 68:a5:3c:54:97:c6:bd:6e:f8:ef:25:c0:85:6e:ea:da:e7:8c: 93:ff:49:bb:6f:98:16:7e:74:f9:0b:1b:6d:f7:36:7d:b1:8e: b1:ae:d6:34:56:a8:a3:d9:8a:8d:c9:91:7d:3e:84:2e:77:47: fa:71:62:30:b1:7f:03:13:f7:ba:01:d5:56:e6:36:88:62:ef: 2c:0e:fe:41:2e:f5:6d:71:f9:70:77:11:f3:ff:4e:21:0b:9d: 57:f8:7c:f1:31:a0:38:c7:b7:05:0c:d8:8a:a5:71:3e:96:57: ab:98:60:51:8d:3a:5c:a8:c2:9e:d3:68:3a:3c:4e:da:6a:9e: b2:2c:fc:75:df:81:bf:77:14:6b:7c:c0:4a:81:73:fd:48:88: c3:21:06:7e:36:0e:f9:06:48:e6:a1:86:0f:8b:80:2e:9f:15: 7a:f4:f3:65 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUJUOQ63t5yIvCesfgwahJXzYvJcIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEM2QjlGRTgwRUYxREE0MEI5NjRENDQyOUY3ODc4NUFE REQyOUVGQjAeFw0yNTA2MTgxNjI2MjJaFw0yNTA2MjEyMjE0MjJaMDMxMTAvBgNV BAMTKDU5RTMxMkM1MUUxM0FGRERFRURDN0NBQjk4NjAzREYyODdFQkQzMDMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCqZaqFiVOr/85MSvlRjEQ566ok tkZLQH/BUwLuXjZA9PXBDIngDDYrckC+DjaVKgUaRJZ8F97EEUTNTW0WOs8p4JWk 4zpLNQl1bs2bjov7PMGdvuyjGHs5ubhWbjzyawYERX4b6kUAzVlPGdD5hG5zvZyU jvV4/VUqvvdSPkp1PkTfU9a2vGsMKtkfKXkp0a1FvG0O8WuXOu89Zbbaux2DxYM/ TCyHz/RndLTEuML9PHg1nQprQa+zyFU2o7sFG5yuo/yGAROakAzoCPxp7ymkAhqt wFMZpFh4COSPBalEvmlv2ejTDcNYBjUaEkqOdJ8KGYukcqHOXhwT/O5Dwk4DAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUWeMSxR4Tr93u3HyrmGA98ofr0wMwHwYDVR0j BBgwFoAUjGuf6A7x2kC5ZNRCn3h4Wt3SnvswDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k YWNiNzE4Ny03YTVmLTRlMjMtYmU5NC01OTNhMGMyODhjYjkvMC84QzZCOUZFODBF RjFEQTQwQjk2NEQ0NDI5Rjc4Nzg1QURERDI5RUZCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOEM2QjlGRTgwRUYxREE0MEI5NjRENDQyOUY3ODc4NUFEREQy OUVGQi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZGFjYjcxODctN2E1Zi00ZTIzLWJl OTQtNTkzYTBjMjg4Y2I5LzAvOEM2QjlGRTgwRUYxREE0MEI5NjRENDQyOUY3ODc4 NUFEREQyOUVGQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHJCod83cbTMR+h1d5n7VN0LPN6bsK4BokN+ IubUUHJh3PpLygJvHwHiYCchqG3Yofv5wwTmjAVTuD2lf86SnxrhXklSpmsJUY3z 9AVgHJH/ls0kAnukSlYhw2ilPFSXxr1u+O8lwIVu6trnjJP/SbtvmBZ+dPkLG233 Nn2xjrGu1jRWqKPZio3JkX0+hC53R/pxYjCxfwMT97oB1VbmNohi7ywO/kEu9W1x +XB3EfP/TiELnVf4fPExoDjHtwUM2IqlcT6WV6uYYFGNOlyowp7TaDo8TtpqnrIs /HXfgb93FGt8wEqBc/1IiMMhBn42DvkGSOahhg+LgC6fFXr082U= -----END CERTIFICATE-----Generated at Thu Jun 19 02:18:32 2025 by rpki-client