$ rpki-client -vvf repo-rpki.idnic.net/repo/e3809384-9b1c-4f5a-aa6b-9de3b52a9c05/0/8932E25F54C4B10E2AE5B71E38D2AD4D1EE3BB11.mft File: 8932E25F54C4B10E2AE5B71E38D2AD4D1EE3BB11.mft (raw, json) Hash identifier: FLYTUK44SN38bYNXgWKTda/7v6jeKVWUiw55y3p4oVM= Subject key identifier: B0:98:4E:CB:A3:7E:11:92:F4:38:66:E7:E1:1C:A7:DB:3D:64:BF:0C Authority key identifier: 89:32:E2:5F:54:C4:B1:0E:2A:E5:B7:1E:38:D2:AD:4D:1E:E3:BB:11 Certificate issuer: /CN=8932E25F54C4B10E2AE5B71E38D2AD4D1EE3BB11 Certificate serial: 75CA5A43EADA4F11A75466FE78C7D57CDF5085 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8932E25F54C4B10E2AE5B71E38D2AD4D1EE3BB11.cer Subject info access: rsync://repo-rpki.idnic.net/repo/e3809384-9b1c-4f5a-aa6b-9de3b52a9c05/0/8932E25F54C4B10E2AE5B71E38D2AD4D1EE3BB11.mft Manifest number: AA Signing time: Sun 15 Jun 2025 20:40:00 +0000 Manifest this update: Sun 15 Jun 2025 20:35:00 +0000 Manifest next update: Wed 18 Jun 2025 21:27:00 +0000 Files and hashes: 1: 3130332e32392e3137312e302f32342d3234203d3e203538333738.roa (hash: VGUNPT+EvshoEIe2DkaARFh/LWXkGNwN7useeVXqqQc=) 2: 8932E25F54C4B10E2AE5B71E38D2AD4D1EE3BB11.crl (hash: Z/0KhEn08I6tLEJ1aV8DJDBsCnrmmdEuFwYT4D1ZMTU=) 3: 3130332e32392e3137302e302f32342d3234203d3e203536323631.roa (hash: AbfmsPIM39RXP9giC5KqkIRrkD9RG/QaxNfAq/KCmcs=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/e3809384-9b1c-4f5a-aa6b-9de3b52a9c05/0/8932E25F54C4B10E2AE5B71E38D2AD4D1EE3BB11.crl rsync://repo-rpki.idnic.net/repo/e3809384-9b1c-4f5a-aa6b-9de3b52a9c05/0/8932E25F54C4B10E2AE5B71E38D2AD4D1EE3BB11.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8932E25F54C4B10E2AE5B71E38D2AD4D1EE3BB11.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 18 Jun 2025 21:27:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 75:ca:5a:43:ea:da:4f:11:a7:54:66:fe:78:c7:d5:7c:df:50:85 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8932E25F54C4B10E2AE5B71E38D2AD4D1EE3BB11 Validity Not Before: Jun 15 20:35:00 2025 GMT Not After : Jun 18 21:27:00 2025 GMT Subject: CN=B0984ECBA37E1192F43866E7E11CA7DB3D64BF0C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:8e:62:5d:86:2e:ad:a5:9f:16:1b:5e:23:2e: 53:d9:14:01:f4:8e:41:e7:91:61:a4:8d:8e:65:1d: ab:82:56:80:d5:d4:ef:93:ab:99:45:ae:88:20:75: ec:64:af:bc:83:27:89:d1:67:1e:4e:90:44:ee:b1: 04:9d:8a:77:73:b0:eb:73:a8:87:41:5e:7b:0b:ed: 63:70:28:a2:8b:35:89:85:18:ce:1e:5a:18:43:c0: 8f:98:1b:3d:63:1d:5d:f9:98:72:6c:41:0d:da:e6: 1a:04:0c:ff:67:54:14:00:11:e3:ee:88:da:52:2c: ea:23:ed:53:1b:84:08:64:46:0b:ac:7f:cb:60:4a: 31:78:64:2d:c9:00:ef:07:74:54:63:34:12:03:70: 54:ed:14:1e:81:cd:0c:9a:d5:24:78:56:df:9a:ad: 3c:24:54:70:95:11:8a:a2:80:67:e2:a2:de:5e:3c: 63:ce:cd:c2:a1:29:3f:ca:47:9d:9b:03:5c:12:25: 09:97:88:ae:c8:f1:59:b6:21:47:7e:4d:56:f1:71: 5a:cd:db:0f:92:d2:91:7c:65:b0:d1:4f:4e:c3:60: e1:68:e1:07:fe:bf:67:11:fb:cb:5e:36:34:1b:29: 6d:05:87:e7:f3:2f:a6:d3:c1:bc:3c:c6:b5:fb:91: 0f:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B0:98:4E:CB:A3:7E:11:92:F4:38:66:E7:E1:1C:A7:DB:3D:64:BF:0C X509v3 Authority Key Identifier: keyid:89:32:E2:5F:54:C4:B1:0E:2A:E5:B7:1E:38:D2:AD:4D:1E:E3:BB:11 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/e3809384-9b1c-4f5a-aa6b-9de3b52a9c05/0/8932E25F54C4B10E2AE5B71E38D2AD4D1EE3BB11.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8932E25F54C4B10E2AE5B71E38D2AD4D1EE3BB11.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e3809384-9b1c-4f5a-aa6b-9de3b52a9c05/0/8932E25F54C4B10E2AE5B71E38D2AD4D1EE3BB11.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5d:f8:24:99:98:24:63:9e:86:f2:7d:71:ec:a9:c7:98:a0:b7: 5d:e2:64:f9:dc:e9:39:1b:23:a7:af:fd:7b:40:82:40:05:c7: 28:09:7f:ff:b0:81:9c:be:d8:98:ea:ad:59:a8:f3:23:05:0a: 77:6a:6e:c7:cc:2c:3f:69:9e:8b:35:08:bd:fe:30:c6:3f:3e: 1b:ab:e3:be:2d:f7:d9:c4:7b:99:87:9f:15:d8:b5:07:9a:15: 4e:d0:12:84:ae:1e:d0:46:bd:f8:e6:ed:54:81:cc:db:4c:b4: ff:e2:73:bb:7a:da:a2:be:31:e8:cc:93:09:dc:09:21:73:3c: 76:c9:5d:4f:0a:b9:02:4b:b9:13:bd:c6:9f:39:f0:4a:c1:a6: be:44:49:77:57:cb:a2:a6:26:be:9f:cc:86:aa:cc:bf:fd:fb: 4c:7d:5d:dc:2b:be:59:cb:f5:8b:ba:42:68:87:1a:52:e0:92: 99:b3:08:55:69:7f:9e:90:e1:86:16:55:52:fd:ce:07:f4:46: 4c:5d:bb:26:76:2f:c9:99:24:1f:5c:b0:84:4c:15:f1:81:20: 3b:fe:7c:55:c9:b9:8a:5d:31:ec:0c:69:83:e5:5a:7b:35:74: 7e:f2:ee:aa:cd:9e:11:fa:6d:92:b5:23:68:c6:8a:fe:7b:27: b0:90:be:d9 -----BEGIN CERTIFICATE----- MIIFMTCCBBmgAwIBAgITdcpaQ+raTxGnVGb+eMfVfN9QhTANBgkqhkiG9w0BAQsF ADAzMTEwLwYDVQQDEyg4OTMyRTI1RjU0QzRCMTBFMkFFNUI3MUUzOEQyQUQ0RDFF RTNCQjExMB4XDTI1MDYxNTIwMzUwMFoXDTI1MDYxODIxMjcwMFowMzExMC8GA1UE AxMoQjA5ODRFQ0JBMzdFMTE5MkY0Mzg2NkU3RTExQ0E3REIzRDY0QkYwQzCCASIw DQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBALSOYl2GLq2lnxYbXiMuU9kUAfSO QeeRYaSNjmUdq4JWgNXU75OrmUWuiCB17GSvvIMnidFnHk6QRO6xBJ2Kd3Ow63Oo h0FeewvtY3Aooos1iYUYzh5aGEPAj5gbPWMdXfmYcmxBDdrmGgQM/2dUFAAR4+6I 2lIs6iPtUxuECGRGC6x/y2BKMXhkLckA7wd0VGM0EgNwVO0UHoHNDJrVJHhW35qt PCRUcJURiqKAZ+Ki3l48Y87NwqEpP8pHnZsDXBIlCZeIrsjxWbYhR35NVvFxWs3b D5LSkXxlsNFPTsNg4WjhB/6/ZxH7y142NBspbQWH5/MvptPBvDzGtfuRD9MCAwEA AaOCAjwwggI4MB0GA1UdDgQWBBSwmE7Lo34RkvQ4ZufhHKfbPWS/DDAfBgNVHSME GDAWgBSJMuJfVMSxDirltx440q1NHuO7ETAOBgNVHQ8BAf8EBAMCB4AwgYUGA1Ud HwR+MHwweqB4oHaGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2Uz ODA5Mzg0LTliMWMtNGY1YS1hYTZiLTlkZTNiNTJhOWMwNS8wLzg5MzJFMjVGNTRD NEIxMEUyQUU1QjcxRTM4RDJBRDREMUVFM0JCMTEuY3JsMHQGCCsGAQUFBwEBBGgw ZjBkBggrBgEFBQcwAoZYcnN5bmM6Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8v SUROSUMtSUQvMi84OTMyRTI1RjU0QzRCMTBFMkFFNUI3MUUzOEQyQUQ0RDFFRTNC QjExLmNlcjCBkwYIKwYBBQUHAQsEgYYwgYMwgYAGCCsGAQUFBzALhnRyc3luYzov L3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9lMzgwOTM4NC05YjFjLTRmNWEtYWE2 Yi05ZGUzYjUyYTljMDUvMC84OTMyRTI1RjU0QzRCMTBFMkFFNUI3MUUzOEQyQUQ0 RDFFRTNCQjExLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUF BwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADANBgkqhkiG9w0BAQsFAAOCAQEAXfgkmZgkY56G8n1x7KnHmKC3XeJk+dzpORsj p6/9e0CCQAXHKAl//7CBnL7YmOqtWajzIwUKd2pux8wsP2meizUIvf4wxj8+G6vj vi332cR7mYefFdi1B5oVTtAShK4e0Ea9+ObtVIHM20y0/+Jzu3raor4x6MyTCdwJ IXM8dsldTwq5Aku5E73GnznwSsGmvkRJd1fLoqYmvp/MhqrMv/37TH1d3Cu+Wcv1 i7pCaIcaUuCSmbMIVWl/npDhhhZVUv3OB/RGTF27JnYvyZkkH1ywhEwV8YEgO/58 Vcm5il0x7Axpg+VaezV0fvLuqs2eEfptkrUjaMaK/nsnsJC+2Q== -----END CERTIFICATE-----Generated at Mon Jun 16 20:41:58 2025 by rpki-client