$ rpki-client -vvf repo-rpki.idnic.net/repo/f9e7a28a-62f0-4d14-8702-403a5190eae1/0/8A4FF836588BBDC5E5CC526BBBEB66D5140D1B86.mft File: 8A4FF836588BBDC5E5CC526BBBEB66D5140D1B86.mft (raw, json) Hash identifier: S/UnrlNFDfIj4TadgP0Rn722bX+EMBU0TPKIhz5DMn8= Subject key identifier: C6:3D:4F:7D:AC:DE:BF:35:4B:31:9E:31:AC:FE:57:3F:C8:80:73:03 Authority key identifier: 8A:4F:F8:36:58:8B:BD:C5:E5:CC:52:6B:BB:EB:66:D5:14:0D:1B:86 Certificate issuer: /CN=8A4FF836588BBDC5E5CC526BBBEB66D5140D1B86 Certificate serial: 17212E389876EDEA4CA7B5839AB594C6E22F Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8A4FF836588BBDC5E5CC526BBBEB66D5140D1B86.cer Subject info access: rsync://repo-rpki.idnic.net/repo/f9e7a28a-62f0-4d14-8702-403a5190eae1/0/8A4FF836588BBDC5E5CC526BBBEB66D5140D1B86.mft Manifest number: 030C Signing time: Sun 15 Jun 2025 02:41:18 +0000 Manifest this update: Sun 15 Jun 2025 02:36:18 +0000 Manifest next update: Wed 18 Jun 2025 05:02:18 +0000 Files and hashes: 1: 8A4FF836588BBDC5E5CC526BBBEB66D5140D1B86.crl (hash: rbOm7F4ot/CcPldhjVfH7oLEMXaQRjkYn+WwBPUBvrE=) 2: 3130332e3137312e33302e302f32332d3234203d3e20313331313131.roa (hash: 0IdcwPtxZArM5JrmLtgkLYtthS0u5GSXZS6q7IiPcxg=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/f9e7a28a-62f0-4d14-8702-403a5190eae1/0/8A4FF836588BBDC5E5CC526BBBEB66D5140D1B86.crl rsync://repo-rpki.idnic.net/repo/f9e7a28a-62f0-4d14-8702-403a5190eae1/0/8A4FF836588BBDC5E5CC526BBBEB66D5140D1B86.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8A4FF836588BBDC5E5CC526BBBEB66D5140D1B86.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 18 Jun 2025 05:02:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 17:21:2e:38:98:76:ed:ea:4c:a7:b5:83:9a:b5:94:c6:e2:2f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8A4FF836588BBDC5E5CC526BBBEB66D5140D1B86 Validity Not Before: Jun 15 02:36:18 2025 GMT Not After : Jun 18 05:02:18 2025 GMT Subject: CN=C63D4F7DACDEBF354B319E31ACFE573FC8807303 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:af:f7:11:61:fa:4b:b6:a5:10:ac:23:d6:f9: b0:bf:4c:6c:15:b5:08:f7:f1:94:75:fe:39:63:2a: 85:d8:69:3c:a0:28:09:05:f0:bc:3b:6e:4e:0e:0d: 10:ca:e1:f2:f0:c2:22:5f:0f:43:1b:02:18:00:a5: 57:a2:45:d7:06:af:21:e4:fb:56:0c:32:b8:a9:01: ae:10:cc:6b:15:eb:d8:47:78:a8:2b:01:cc:31:9f: dc:87:68:3d:58:6a:3a:8b:12:b1:02:4e:25:0f:ca: 89:0e:59:9b:63:3e:c0:aa:07:ba:c0:37:0f:75:a7: 42:92:25:91:28:58:60:c9:b7:64:dd:45:52:d6:1e: 8c:dc:58:a1:83:e5:21:89:ba:1f:ba:7b:f4:1d:09: 2e:24:be:c3:92:ee:0d:c5:cf:06:d6:1d:4b:06:c4: d8:a1:18:68:5c:83:eb:8b:52:40:a6:4a:be:11:05: 66:9e:c8:d5:dd:be:8a:d3:8c:30:f5:52:67:5c:26: e4:cf:bc:1c:07:a3:6b:b7:8d:27:ac:b6:2a:1c:1d: 0e:70:e5:ec:fe:b5:cc:6e:d4:c1:38:1e:12:b2:2f: f6:96:73:1b:3a:59:65:8b:dc:56:c4:29:41:a7:e5: f4:3a:5f:59:24:db:24:15:ca:9e:19:97:20:30:30: fa:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C6:3D:4F:7D:AC:DE:BF:35:4B:31:9E:31:AC:FE:57:3F:C8:80:73:03 X509v3 Authority Key Identifier: keyid:8A:4F:F8:36:58:8B:BD:C5:E5:CC:52:6B:BB:EB:66:D5:14:0D:1B:86 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/f9e7a28a-62f0-4d14-8702-403a5190eae1/0/8A4FF836588BBDC5E5CC526BBBEB66D5140D1B86.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8A4FF836588BBDC5E5CC526BBBEB66D5140D1B86.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f9e7a28a-62f0-4d14-8702-403a5190eae1/0/8A4FF836588BBDC5E5CC526BBBEB66D5140D1B86.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 71:b9:c7:01:c1:ef:f2:dc:2b:99:3c:6d:c1:57:8c:26:1f:8f: f5:62:6b:4d:d6:aa:3e:c8:99:7c:12:41:f5:85:2d:1d:a5:82: 70:4d:c2:c1:e0:cb:1a:27:9f:44:41:2b:d0:8c:79:22:49:d1: 49:5d:25:f8:94:94:f3:c0:69:f0:a3:ff:72:ee:34:e0:c1:5b: 65:4e:63:14:78:6d:29:dd:fb:6b:05:48:57:56:67:38:05:24: 44:c9:89:34:b1:07:86:84:40:27:f0:71:18:49:59:4a:bc:6b: 9d:2c:c3:1e:31:06:8c:ce:af:95:c9:0c:e9:09:4f:7c:38:89: 7e:ed:44:37:b2:de:b2:bb:5d:62:42:39:ad:48:5f:82:84:ca: d1:c3:3f:ff:e4:3d:84:88:3e:55:21:d3:14:9e:42:16:ef:9d: 65:9e:24:b2:ad:7a:12:d7:5a:61:b4:b8:3a:8f:af:27:d8:f4: 7c:41:83:dc:83:98:a7:71:49:14:51:f0:31:b9:74:e4:51:f4: 11:3a:27:9f:e6:d2:6c:81:c0:a7:df:c5:78:eb:e1:0a:ed:e9: 82:f7:40:48:c3:2c:3d:02:31:59:06:cb:d4:96:a8:b8:1a:55: 44:08:a6:b3:75:aa:da:d3:fc:36:a7:bb:b6:d1:d1:d8:d0:e1: 47:4c:02:d0 -----BEGIN CERTIFICATE----- MIIFMDCCBBigAwIBAgISFyEuOJh27epMp7WDmrWUxuIvMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhBNEZGODM2NTg4QkJEQzVFNUNDNTI2QkJCRUI2NkQ1MTQw RDFCODYwHhcNMjUwNjE1MDIzNjE4WhcNMjUwNjE4MDUwMjE4WjAzMTEwLwYDVQQD EyhDNjNENEY3REFDREVCRjM1NEIzMTlFMzFBQ0ZFNTczRkM4ODA3MzAzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs6/3EWH6S7alEKwj1vmwv0xsFbUI 9/GUdf45YyqF2Gk8oCgJBfC8O25ODg0QyuHy8MIiXw9DGwIYAKVXokXXBq8h5PtW DDK4qQGuEMxrFevYR3ioKwHMMZ/ch2g9WGo6ixKxAk4lD8qJDlmbYz7Aqge6wDcP dadCkiWRKFhgybdk3UVS1h6M3Fihg+Uhibofunv0HQkuJL7Dku4Nxc8G1h1LBsTY oRhoXIPri1JApkq+EQVmnsjV3b6K04ww9VJnXCbkz7wcB6Nrt40nrLYqHB0OcOXs /rXMbtTBOB4Ssi/2lnMbOllli9xWxClBp+X0Ol9ZJNskFcqeGZcgMDD6KwIDAQAB o4ICPDCCAjgwHQYDVR0OBBYEFMY9T32s3r81SzGeMaz+Vz/IgHMDMB8GA1UdIwQY MBaAFIpP+DZYi73F5cxSa7vrZtUUDRuGMA4GA1UdDwEB/wQEAwIHgDCBhQYDVR0f BH4wfDB6oHigdoZ0cnN5bmM6Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZjll N2EyOGEtNjJmMC00ZDE0LTg3MDItNDAzYTUxOTBlYWUxLzAvOEE0RkY4MzY1ODhC QkRDNUU1Q0M1MjZCQkJFQjY2RDUxNDBEMUI4Ni5jcmwwdAYIKwYBBQUHAQEEaDBm MGQGCCsGAQUFBzAChlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9J RE5JQy1JRC8yLzhBNEZGODM2NTg4QkJEQzVFNUNDNTI2QkJCRUI2NkQ1MTQwRDFC ODYuY2VyMIGTBggrBgEFBQcBCwSBhjCBgzCBgAYIKwYBBQUHMAuGdHJzeW5jOi8v cmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2Y5ZTdhMjhhLTYyZjAtNGQxNC04NzAy LTQwM2E1MTkwZWFlMS8wLzhBNEZGODM2NTg4QkJEQzVFNUNDNTI2QkJCRUI2NkQ1 MTQwRDFCODYubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUH AQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB/wQGMASgAgUA MA0GCSqGSIb3DQEBCwUAA4IBAQBxuccBwe/y3CuZPG3BV4wmH4/1YmtN1qo+yJl8 EkH1hS0dpYJwTcLB4MsaJ59EQSvQjHkiSdFJXSX4lJTzwGnwo/9y7jTgwVtlTmMU eG0p3ftrBUhXVmc4BSREyYk0sQeGhEAn8HEYSVlKvGudLMMeMQaMzq+VyQzpCU98 OIl+7UQ3st6yu11iQjmtSF+ChMrRwz//5D2EiD5VIdMUnkIW751lniSyrXoS11ph tLg6j68n2PR8QYPcg5incUkUUfAxuXTkUfQROief5tJsgcCn38V46+EK7emC90BI wyw9AjFZBsvUlqi4GlVECKazdara0/w2p7u20dHY0OFHTALQ -----END CERTIFICATE-----Generated at Mon Jun 16 01:17:35 2025 by rpki-client