$ rpki-client -vvf repo-rpki.idnic.net/repo/dfee82b7-c182-4e83-897c-e00f3ce1b0d2/0/08E555759AA0C18576364C83261B6CEA4BCF0CCB.mft File: 08E555759AA0C18576364C83261B6CEA4BCF0CCB.mft (raw, json) Hash identifier: /Z+2awA2OHU+zGKB7bAQzfoWtE+sMzZPZJ/EKcxqpec= Subject key identifier: A2:70:3F:3D:B9:4D:4D:E5:20:0D:6E:7E:2E:6B:F4:67:CB:42:94:FA Authority key identifier: 08:E5:55:75:9A:A0:C1:85:76:36:4C:83:26:1B:6C:EA:4B:CF:0C:CB Certificate issuer: /CN=08E555759AA0C18576364C83261B6CEA4BCF0CCB Certificate serial: 0211BC4A2B8D1C08FA7FD43A36050C3ACED29168 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/08E555759AA0C18576364C83261B6CEA4BCF0CCB.cer Subject info access: rsync://repo-rpki.idnic.net/repo/dfee82b7-c182-4e83-897c-e00f3ce1b0d2/0/08E555759AA0C18576364C83261B6CEA4BCF0CCB.mft Manifest number: 01C3 Signing time: Sun 15 Jun 2025 03:22:18 +0000 Manifest this update: Sun 15 Jun 2025 03:17:18 +0000 Manifest next update: Wed 18 Jun 2025 03:42:18 +0000 Files and hashes: 1: 3130332e3232392e3138342e302f32342d3234203d3e2039333431.roa (hash: piQ+Kt4vXK/vmNsqLp+UmigWTKiGeB35znHHpmbJcwE=) 2: 3130332e3232392e3138352e302f32342d3234203d3e2039333431.roa (hash: l9zJUbcUQzAgBZ+HyXEIEbQ+42jDa7SiCHzZNC1m0V0=) 3: 08E555759AA0C18576364C83261B6CEA4BCF0CCB.crl (hash: 8QbCFzD9dVfFxDQPiTRUMSpagceyjxzSFQynSbnMOVc=) 4: 3130332e3232392e3138342e302f32332d3233203d3e2039333431.roa (hash: zmfwOq9tRL6y6itfiedhGYjkM224b5RPCWjPsZw7viw=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/dfee82b7-c182-4e83-897c-e00f3ce1b0d2/0/08E555759AA0C18576364C83261B6CEA4BCF0CCB.crl rsync://repo-rpki.idnic.net/repo/dfee82b7-c182-4e83-897c-e00f3ce1b0d2/0/08E555759AA0C18576364C83261B6CEA4BCF0CCB.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/08E555759AA0C18576364C83261B6CEA4BCF0CCB.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 18 Jun 2025 03:42:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 02:11:bc:4a:2b:8d:1c:08:fa:7f:d4:3a:36:05:0c:3a:ce:d2:91:68 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=08E555759AA0C18576364C83261B6CEA4BCF0CCB Validity Not Before: Jun 15 03:17:18 2025 GMT Not After : Jun 18 03:42:18 2025 GMT Subject: CN=A2703F3DB94D4DE5200D6E7E2E6BF467CB4294FA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:1b:50:9a:de:76:ab:76:82:80:cc:59:bc:af: 89:b6:70:14:51:c6:5a:8b:60:19:89:8c:cf:31:04: 4c:10:2b:f4:cd:04:0e:39:2b:b1:34:25:f9:ca:ff: 3b:a8:ae:6e:a5:2a:a8:49:0d:97:38:5f:f8:e7:f9: b0:5e:0f:6b:ce:d4:4b:26:3c:f3:a7:c9:eb:5a:e5: 2b:e8:4e:13:55:c0:28:31:0d:f1:6c:44:db:04:52: 5e:17:c1:03:cc:68:58:f6:e5:3f:a2:0a:ae:1b:a4: 98:08:4e:8c:a1:bb:74:76:fb:76:59:10:14:b6:c9: d1:2e:74:8b:25:31:22:29:64:a5:ad:e8:bb:1b:96: 20:e3:b9:35:b4:b3:89:d3:1c:fd:38:f6:9e:60:26: 1e:02:c1:00:da:0c:b9:57:cd:fc:9f:7c:c2:1e:91: eb:2d:e4:7d:44:6c:52:a1:66:cd:a1:93:24:2a:22: eb:be:05:7e:43:ce:6f:d9:ba:74:4b:d9:44:fa:fd: 5e:c4:21:4e:39:98:3a:a6:e2:de:08:08:5c:a2:32: 57:6f:19:c6:b2:e2:97:fb:99:55:e0:87:f1:bc:70: 61:5e:1b:fd:f1:42:fd:43:97:e9:9b:af:24:44:f5: 7d:08:d5:ee:20:e1:99:73:47:d0:f0:85:04:02:5d: a5:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:70:3F:3D:B9:4D:4D:E5:20:0D:6E:7E:2E:6B:F4:67:CB:42:94:FA X509v3 Authority Key Identifier: keyid:08:E5:55:75:9A:A0:C1:85:76:36:4C:83:26:1B:6C:EA:4B:CF:0C:CB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/dfee82b7-c182-4e83-897c-e00f3ce1b0d2/0/08E555759AA0C18576364C83261B6CEA4BCF0CCB.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/08E555759AA0C18576364C83261B6CEA4BCF0CCB.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/dfee82b7-c182-4e83-897c-e00f3ce1b0d2/0/08E555759AA0C18576364C83261B6CEA4BCF0CCB.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 29:57:6f:af:fe:1a:87:6e:44:7e:b3:8d:58:0f:bd:78:57:99: 0b:84:b6:fd:e0:4b:93:d7:b8:f0:57:46:4d:11:63:51:21:07: 9c:e6:a6:84:8c:78:61:49:b7:a3:d3:cf:5d:4a:2e:dc:0b:87: df:ac:a8:24:41:11:24:10:9c:d1:f3:e8:37:c9:8b:88:ad:07: 4d:4f:5e:7a:b2:58:2a:9f:15:6e:54:ce:a8:f8:42:9b:ce:96: e0:13:21:07:7e:6b:59:31:e6:5d:98:75:5b:40:76:28:81:08: 87:20:6f:02:d2:8c:b8:46:a3:48:73:af:2a:f3:71:31:96:6e: e4:1c:f4:02:f1:8d:ed:4b:02:9c:84:ea:5e:e4:ac:a5:8a:a5: 94:f6:a3:bc:93:78:7e:d4:30:6c:e2:42:bb:ed:73:a7:d6:00: e2:a8:7c:ff:55:23:b5:bc:2b:c1:96:cc:6c:9a:cb:d0:33:41: d7:9d:f8:92:28:5d:1b:fa:bc:b7:f5:a0:c2:8e:e6:4e:dd:8b: 9a:dc:22:90:7a:92:0d:35:61:91:76:7b:3d:2d:49:74:41:3e: 19:b3:ff:31:87:85:a5:93:77:f2:3a:09:b7:93:32:47:91:f0: e8:83:99:1d:91:7d:19:20:9e:be:c1:31:f8:f3:d5:d6:66:93: d6:04:2f:78 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUAhG8SiuNHAj6f9Q6NgUMOs7SkWgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDhFNTU1NzU5QUEwQzE4NTc2MzY0QzgzMjYxQjZDRUE0 QkNGMENDQjAeFw0yNTA2MTUwMzE3MThaFw0yNTA2MTgwMzQyMThaMDMxMTAvBgNV BAMTKEEyNzAzRjNEQjk0RDRERTUyMDBENkU3RTJFNkJGNDY3Q0I0Mjk0RkEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC4G1Ca3nardoKAzFm8r4m2cBRR xlqLYBmJjM8xBEwQK/TNBA45K7E0JfnK/zuorm6lKqhJDZc4X/jn+bBeD2vO1Esm PPOnyeta5SvoThNVwCgxDfFsRNsEUl4XwQPMaFj25T+iCq4bpJgIToyhu3R2+3ZZ EBS2ydEudIslMSIpZKWt6LsbliDjuTW0s4nTHP049p5gJh4CwQDaDLlXzfyffMIe kest5H1EbFKhZs2hkyQqIuu+BX5Dzm/ZunRL2UT6/V7EIU45mDqm4t4ICFyiMldv Gcay4pf7mVXgh/G8cGFeG/3xQv1Dl+mbryRE9X0I1e4g4ZlzR9DwhQQCXaWRAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUonA/PblNTeUgDW5+Lmv0Z8tClPowHwYDVR0j BBgwFoAUCOVVdZqgwYV2NkyDJhts6kvPDMswDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k ZmVlODJiNy1jMTgyLTRlODMtODk3Yy1lMDBmM2NlMWIwZDIvMC8wOEU1NTU3NTlB QTBDMTg1NzYzNjRDODMyNjFCNkNFQTRCQ0YwQ0NCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMDhFNTU1NzU5QUEwQzE4NTc2MzY0QzgzMjYxQjZDRUE0QkNG MENDQi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZGZlZTgyYjctYzE4Mi00ZTgzLTg5 N2MtZTAwZjNjZTFiMGQyLzAvMDhFNTU1NzU5QUEwQzE4NTc2MzY0QzgzMjYxQjZD RUE0QkNGMENDQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAClXb6/+GoduRH6zjVgPvXhXmQuEtv3gS5PX uPBXRk0RY1EhB5zmpoSMeGFJt6PTz11KLtwLh9+sqCRBESQQnNHz6DfJi4itB01P XnqyWCqfFW5Uzqj4QpvOluATIQd+a1kx5l2YdVtAdiiBCIcgbwLSjLhGo0hzryrz cTGWbuQc9ALxje1LApyE6l7krKWKpZT2o7yTeH7UMGziQrvtc6fWAOKofP9VI7W8 K8GWzGyay9AzQded+JIoXRv6vLf1oMKO5k7di5rcIpB6kg01YZF2ez0tSXRBPhmz /zGHhaWTd/I6CbeTMkeR8OiDmR2RfRkgnr7BMfjz1dZmk9YEL3g= -----END CERTIFICATE-----Generated at Mon Jun 16 22:18:01 2025 by rpki-client