$ rpki-client -vvf repo-rpki.idnic.net/repo/fbb5fa4a-bea6-464f-b409-11d9a3761a6c/1/8D4158039A86C34D5D36A83DDC40C959EDA21342.mft File: 8D4158039A86C34D5D36A83DDC40C959EDA21342.mft (raw, json) Hash identifier: 2GaUiqGk/5OKO9Nu7pSf1j0k8ckg5tVGzp90g2CEGKw= Subject key identifier: 23:91:C5:71:91:0F:52:63:1A:55:8D:1A:38:7A:D7:23:02:B9:27:4B Authority key identifier: 8D:41:58:03:9A:86:C3:4D:5D:36:A8:3D:DC:40:C9:59:ED:A2:13:42 Certificate issuer: /CN=8D4158039A86C34D5D36A83DDC40C959EDA21342 Certificate serial: 33EA52BDA266C21153BC0754B3C7CD89A9F09DBA Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8D4158039A86C34D5D36A83DDC40C959EDA21342.cer Subject info access: rsync://repo-rpki.idnic.net/repo/fbb5fa4a-bea6-464f-b409-11d9a3761a6c/1/8D4158039A86C34D5D36A83DDC40C959EDA21342.mft Manifest number: 9B Signing time: Sun 15 Jun 2025 04:51:04 +0000 Manifest this update: Sun 15 Jun 2025 04:46:04 +0000 Manifest next update: Wed 18 Jun 2025 13:52:04 +0000 Files and hashes: 1: 323030313a6466333a643363303a3a2f34382d3438203d3e20313532373930.roa (hash: XrGI552jWV7sNKcYT4/cR05JGNQdxhyBqphUE36lIJ0=) 2: 8D4158039A86C34D5D36A83DDC40C959EDA21342.crl (hash: IvXBEp78+cM2MvMnflnN7PnUh3VpB1eCVSDXmX7MN3A=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/fbb5fa4a-bea6-464f-b409-11d9a3761a6c/1/8D4158039A86C34D5D36A83DDC40C959EDA21342.crl rsync://repo-rpki.idnic.net/repo/fbb5fa4a-bea6-464f-b409-11d9a3761a6c/1/8D4158039A86C34D5D36A83DDC40C959EDA21342.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8D4158039A86C34D5D36A83DDC40C959EDA21342.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 18 Jun 2025 13:52:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 33:ea:52:bd:a2:66:c2:11:53:bc:07:54:b3:c7:cd:89:a9:f0:9d:ba Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8D4158039A86C34D5D36A83DDC40C959EDA21342 Validity Not Before: Jun 15 04:46:04 2025 GMT Not After : Jun 18 13:52:04 2025 GMT Subject: CN=2391C571910F52631A558D1A387AD72302B9274B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:1c:65:8a:48:1c:63:11:80:9a:ba:f8:1a:8c: 4d:cd:fd:4c:51:8d:a8:c4:09:26:c5:2b:75:64:08: 5c:50:af:79:ed:48:61:66:7e:cf:86:e8:34:3a:31: 1f:6e:37:b9:37:bb:f1:7c:1b:84:8a:65:0c:d3:30: 0b:45:97:c0:b6:2b:67:39:19:72:f1:e4:69:fa:9e: af:f6:da:63:43:b8:32:71:b8:98:6c:ed:76:55:03: ab:03:63:e6:9b:05:8c:99:9d:30:10:92:16:6a:f9: a9:ec:cf:ea:4c:82:e0:d1:fd:b4:a9:94:00:26:19: 82:6f:97:ea:93:3b:e8:65:ca:77:c4:ea:75:23:f5: 3d:ac:78:15:3c:13:8f:85:e8:23:00:23:0d:88:51: 66:bc:fe:00:b0:1e:f6:6c:27:79:cb:0c:27:ac:34: d4:08:23:c3:3c:19:8d:1f:73:6f:e6:86:a6:23:ca: c1:10:57:d9:8b:04:04:f9:9e:78:a7:c8:51:31:d2: 61:67:4f:38:5a:e3:f8:7e:01:b1:3b:ae:87:23:22: 92:b5:77:14:29:54:1b:e8:82:0c:a6:a9:28:2e:ab: 0f:ce:81:17:fd:5d:fc:1e:a3:ae:56:ba:46:03:6b: 49:b4:be:cf:25:14:73:c4:94:da:f5:95:7d:99:c5: f3:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:91:C5:71:91:0F:52:63:1A:55:8D:1A:38:7A:D7:23:02:B9:27:4B X509v3 Authority Key Identifier: keyid:8D:41:58:03:9A:86:C3:4D:5D:36:A8:3D:DC:40:C9:59:ED:A2:13:42 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/fbb5fa4a-bea6-464f-b409-11d9a3761a6c/1/8D4158039A86C34D5D36A83DDC40C959EDA21342.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8D4158039A86C34D5D36A83DDC40C959EDA21342.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/fbb5fa4a-bea6-464f-b409-11d9a3761a6c/1/8D4158039A86C34D5D36A83DDC40C959EDA21342.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption cc:33:9f:bb:fa:d8:23:3c:97:22:8e:45:2a:1d:25:44:08:db: b5:25:d2:aa:f6:d0:87:ff:ff:6f:f5:e9:5b:4a:28:ef:73:d7: 08:e9:be:2e:80:1d:bb:af:f0:cc:dd:57:32:fe:d5:9b:e9:50: 18:23:73:0b:df:54:21:0c:08:a1:4a:45:68:fb:7a:2b:db:e1: e5:4e:d9:f2:c4:fe:c8:10:47:ba:b7:8c:20:8a:17:71:14:15: 33:80:af:2b:d0:26:6f:c6:7c:19:fe:c6:a7:97:fe:80:b9:d6: ee:51:18:c0:27:c4:7a:1e:82:fa:8a:4c:55:1a:c3:63:9b:b1: 76:f5:52:05:18:d2:be:2b:1f:31:ec:13:18:c1:c2:fb:88:00: 06:d5:0e:fb:80:fc:3d:d1:31:98:cd:a4:4a:c3:dd:af:68:da: d3:47:4c:6b:d0:cb:77:53:dc:12:79:21:9b:fc:a1:8e:d8:db: 64:e0:5e:75:fc:95:24:86:65:7a:dd:72:7b:ea:7f:b3:de:af: 88:42:db:ac:be:c5:10:b0:17:58:86:44:ac:9a:f6:ce:9d:18: 1e:30:46:13:86:72:9b:07:1a:4a:d8:a7:d8:a0:13:67:d8:09: a8:85:56:84:33:68:bb:24:19:e3:f5:a2:90:0b:cb:5b:8c:bc: a1:b6:53:23 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUM+pSvaJmwhFTvAdUs8fNianwnbowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEQ0MTU4MDM5QTg2QzM0RDVEMzZBODNEREM0MEM5NTlF REEyMTM0MjAeFw0yNTA2MTUwNDQ2MDRaFw0yNTA2MTgxMzUyMDRaMDMxMTAvBgNV BAMTKDIzOTFDNTcxOTEwRjUyNjMxQTU1OEQxQTM4N0FENzIzMDJCOTI3NEIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC7HGWKSBxjEYCauvgajE3N/UxR jajECSbFK3VkCFxQr3ntSGFmfs+G6DQ6MR9uN7k3u/F8G4SKZQzTMAtFl8C2K2c5 GXLx5Gn6nq/22mNDuDJxuJhs7XZVA6sDY+abBYyZnTAQkhZq+ansz+pMguDR/bSp lAAmGYJvl+qTO+hlynfE6nUj9T2seBU8E4+F6CMAIw2IUWa8/gCwHvZsJ3nLDCes NNQII8M8GY0fc2/mhqYjysEQV9mLBAT5nninyFEx0mFnTzha4/h+AbE7rocjIpK1 dxQpVBvoggymqSguqw/OgRf9Xfweo65WukYDa0m0vs8lFHPElNr1lX2ZxfMRAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUI5HFcZEPUmMaVY0aOHrXIwK5J0swHwYDVR0j BBgwFoAUjUFYA5qGw01dNqg93EDJWe2iE0IwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m YmI1ZmE0YS1iZWE2LTQ2NGYtYjQwOS0xMWQ5YTM3NjFhNmMvMS84RDQxNTgwMzlB ODZDMzRENUQzNkE4M0REQzQwQzk1OUVEQTIxMzQyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOEQ0MTU4MDM5QTg2QzM0RDVEMzZBODNEREM0MEM5NTlFREEy MTM0Mi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZmJiNWZhNGEtYmVhNi00NjRmLWI0 MDktMTFkOWEzNzYxYTZjLzEvOEQ0MTU4MDM5QTg2QzM0RDVEMzZBODNEREM0MEM5 NTlFREEyMTM0Mi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAMwzn7v62CM8lyKORSodJUQI27Ul0qr20If/ /2/16VtKKO9z1wjpvi6AHbuv8MzdVzL+1ZvpUBgjcwvfVCEMCKFKRWj7eivb4eVO 2fLE/sgQR7q3jCCKF3EUFTOAryvQJm/GfBn+xqeX/oC51u5RGMAnxHoegvqKTFUa w2ObsXb1UgUY0r4rHzHsExjBwvuIAAbVDvuA/D3RMZjNpErD3a9o2tNHTGvQy3dT 3BJ5IZv8oY7Y22TgXnX8lSSGZXrdcnvqf7Per4hC26y+xRCwF1iGRKya9s6dGB4w RhOGcpsHGkrYp9igE2fYCaiFVoQzaLskGeP1opALy1uMvKG2UyM= -----END CERTIFICATE-----Generated at Mon Jun 16 04:34:59 2025 by rpki-client