$ rpki-client -vvf repo-rpki.idnic.net/repo/e8ced18d-a7cc-4b44-af4a-85f304f9eb6c/0/08683ED5C748B79A346EF705A2DCF809A31C75DF.mft File: 08683ED5C748B79A346EF705A2DCF809A31C75DF.mft (raw, json) Hash identifier: Lf0MgFup7lcR/6zYPyTNGYZfOUzb7BHnkkS+5DZGg3k= Subject key identifier: 9E:A2:16:D3:A1:48:0A:2D:40:FF:59:F6:36:BB:5A:91:8B:6E:7E:2D Authority key identifier: 08:68:3E:D5:C7:48:B7:9A:34:6E:F7:05:A2:DC:F8:09:A3:1C:75:DF Certificate issuer: /CN=08683ED5C748B79A346EF705A2DCF809A31C75DF Certificate serial: 6477965403DA276DDAB11843340FA9962D764042 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/08683ED5C748B79A346EF705A2DCF809A31C75DF.cer Subject info access: rsync://repo-rpki.idnic.net/repo/e8ced18d-a7cc-4b44-af4a-85f304f9eb6c/0/08683ED5C748B79A346EF705A2DCF809A31C75DF.mft Manifest number: B6 Signing time: Sat 14 Jun 2025 21:51:22 +0000 Manifest this update: Sat 14 Jun 2025 21:46:22 +0000 Manifest next update: Wed 18 Jun 2025 01:01:22 +0000 Files and hashes: 1: 3135372e32302e3233332e302f32342d3234203d3e20313532343339.roa (hash: 7TI4pzLcqyxuF39YuyeEo0KkPf4qVThK/j4OGDR/rss=) 2: 08683ED5C748B79A346EF705A2DCF809A31C75DF.crl (hash: FCgBffS2zS5SRFLuWhTsJ5hbP9QMJUVrbIgFwJxLI3E=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/e8ced18d-a7cc-4b44-af4a-85f304f9eb6c/0/08683ED5C748B79A346EF705A2DCF809A31C75DF.crl rsync://repo-rpki.idnic.net/repo/e8ced18d-a7cc-4b44-af4a-85f304f9eb6c/0/08683ED5C748B79A346EF705A2DCF809A31C75DF.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/08683ED5C748B79A346EF705A2DCF809A31C75DF.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 18 Jun 2025 01:01:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 64:77:96:54:03:da:27:6d:da:b1:18:43:34:0f:a9:96:2d:76:40:42 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=08683ED5C748B79A346EF705A2DCF809A31C75DF Validity Not Before: Jun 14 21:46:22 2025 GMT Not After : Jun 18 01:01:22 2025 GMT Subject: CN=9EA216D3A1480A2D40FF59F636BB5A918B6E7E2D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:a5:e5:f7:e9:d0:e3:14:ec:4d:e7:1c:e6:2a: 9a:2f:64:48:62:3a:75:af:5a:2b:37:31:1f:9f:5e: 2d:77:91:4c:a5:38:1d:77:bf:29:8d:1c:4e:8d:11: 4a:bb:f1:ca:0a:90:c2:54:df:12:91:d4:18:ff:57: be:15:30:69:25:8c:54:ca:ca:21:2b:eb:1b:72:ba: 38:1e:5d:df:8d:9e:8d:68:89:4d:ab:73:7e:09:08: a9:44:3b:20:7c:d4:97:fc:f1:aa:01:e3:c1:d5:2c: a7:e6:88:e0:f5:28:c3:96:49:db:13:a9:3e:3a:a1: 39:56:fc:5d:17:fb:68:f7:79:e8:ea:28:41:c6:e0: 52:b4:f1:c4:73:30:9e:26:a5:e1:b5:ec:a0:92:47: b1:d5:66:fd:98:ab:7d:6c:4d:54:a9:65:42:ee:6b: 9a:0f:47:b8:b0:5f:e9:e4:4b:75:eb:fd:c5:be:bd: 90:3f:d9:43:67:4a:a2:17:e0:6f:ba:f4:29:fa:4b: 1e:b7:8c:dc:86:ac:68:26:39:b5:6a:50:de:b9:02: 60:4c:36:d6:2f:ad:11:40:2a:d6:ca:af:5b:d8:32: 29:f5:22:db:50:9f:9f:de:93:0c:dc:d0:b5:84:09: 99:11:fa:74:44:82:13:50:ab:56:7c:65:ae:21:3e: 2b:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9E:A2:16:D3:A1:48:0A:2D:40:FF:59:F6:36:BB:5A:91:8B:6E:7E:2D X509v3 Authority Key Identifier: keyid:08:68:3E:D5:C7:48:B7:9A:34:6E:F7:05:A2:DC:F8:09:A3:1C:75:DF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/e8ced18d-a7cc-4b44-af4a-85f304f9eb6c/0/08683ED5C748B79A346EF705A2DCF809A31C75DF.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/08683ED5C748B79A346EF705A2DCF809A31C75DF.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e8ced18d-a7cc-4b44-af4a-85f304f9eb6c/0/08683ED5C748B79A346EF705A2DCF809A31C75DF.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4e:ba:a2:17:a0:7a:5a:cf:93:1d:1c:d6:0f:24:22:68:1c:17: cd:ec:a6:d6:6b:86:08:c4:11:67:33:c0:56:e3:08:34:bd:ce: 16:12:03:b6:b3:52:b9:6e:f3:b0:17:49:a2:98:d2:ea:34:1f: 2f:d5:1e:d5:25:ba:4e:8e:14:a0:59:49:6f:74:8a:18:bc:bd: 22:c3:5f:60:28:dc:c6:34:02:6f:c9:c2:50:53:66:80:52:aa: 61:ba:54:ac:5a:57:6a:39:a7:2f:51:84:2f:4f:4c:c9:b5:c5: ce:50:3e:fb:63:74:49:fe:55:c1:2a:0d:cb:fe:08:a8:99:a4: a1:1a:ac:34:09:f4:d1:0b:3a:31:dc:92:06:3c:9f:34:d9:64: 22:52:12:53:38:9a:97:96:73:62:91:66:dc:20:45:2b:f8:c0: fc:57:bb:67:b0:1e:8c:1a:b3:76:66:8b:86:a8:2c:7c:81:b3: dc:a2:0b:65:d5:47:27:b0:bd:81:c2:af:4a:b2:15:d8:0b:b4: fb:36:d3:9b:25:43:60:16:94:29:c8:31:6f:03:78:3c:8b:12: 18:dd:64:54:00:f3:c7:51:5f:b1:4a:66:9c:0d:fe:56:80:38: 5e:0a:e9:52:63:27:26:48:7a:51:a4:62:ef:e5:8a:d7:8c:55: a2:26:5a:c9 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUZHeWVAPaJ23asRhDNA+pli12QEIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDg2ODNFRDVDNzQ4Qjc5QTM0NkVGNzA1QTJEQ0Y4MDlB MzFDNzVERjAeFw0yNTA2MTQyMTQ2MjJaFw0yNTA2MTgwMTAxMjJaMDMxMTAvBgNV BAMTKDlFQTIxNkQzQTE0ODBBMkQ0MEZGNTlGNjM2QkI1QTkxOEI2RTdFMkQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC2peX36dDjFOxN5xzmKpovZEhi OnWvWis3MR+fXi13kUylOB13vymNHE6NEUq78coKkMJU3xKR1Bj/V74VMGkljFTK yiEr6xtyujgeXd+Nno1oiU2rc34JCKlEOyB81Jf88aoB48HVLKfmiOD1KMOWSdsT qT46oTlW/F0X+2j3eejqKEHG4FK08cRzMJ4mpeG17KCSR7HVZv2Yq31sTVSpZULu a5oPR7iwX+nkS3Xr/cW+vZA/2UNnSqIX4G+69Cn6Sx63jNyGrGgmObVqUN65AmBM NtYvrRFAKtbKr1vYMin1IttQn5/ekwzc0LWECZkR+nREghNQq1Z8Za4hPiuXAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUnqIW06FICi1A/1n2NrtakYtufi0wHwYDVR0j BBgwFoAUCGg+1cdIt5o0bvcFotz4CaMcdd8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l OGNlZDE4ZC1hN2NjLTRiNDQtYWY0YS04NWYzMDRmOWViNmMvMC8wODY4M0VENUM3 NDhCNzlBMzQ2RUY3MDVBMkRDRjgwOUEzMUM3NURGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvMDg2ODNFRDVDNzQ4Qjc5QTM0NkVGNzA1QTJEQ0Y4MDlBMzFD NzVERi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZThjZWQxOGQtYTdjYy00YjQ0LWFm NGEtODVmMzA0ZjllYjZjLzAvMDg2ODNFRDVDNzQ4Qjc5QTM0NkVGNzA1QTJEQ0Y4 MDlBMzFDNzVERi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAE66ohegelrPkx0c1g8kImgcF83sptZrhgjE EWczwFbjCDS9zhYSA7azUrlu87AXSaKY0uo0Hy/VHtUluk6OFKBZSW90ihi8vSLD X2Ao3MY0Am/JwlBTZoBSqmG6VKxaV2o5py9RhC9PTMm1xc5QPvtjdEn+VcEqDcv+ CKiZpKEarDQJ9NELOjHckgY8nzTZZCJSElM4mpeWc2KRZtwgRSv4wPxXu2ewHowa s3Zmi4aoLHyBs9yiC2XVRyewvYHCr0qyFdgLtPs205slQ2AWlCnIMW8DeDyLEhjd ZFQA88dRX7FKZpwN/laAOF4K6VJjJyZIelGkYu/liteMVaImWsk= -----END CERTIFICATE-----Generated at Mon Jun 16 10:41:07 2025 by rpki-client