$ rpki-client -vvf repo-rpki.idnic.net/repo/02913fa1-33ae-4e33-bbe2-81bd9f03c84b/0/8C57C5860BF938BB57E0B7ED0F890D70BFEE55A0.mft File: 8C57C5860BF938BB57E0B7ED0F890D70BFEE55A0.mft (raw, json) Hash identifier: AW7WB1BbOvmG9OwTzty5NuPQgIa/HHs0Zd+DQgcqCSU= Subject key identifier: A5:89:BB:EA:F6:98:D6:CA:3F:56:AD:BC:94:9C:55:DE:D1:C6:4A:29 Authority key identifier: 8C:57:C5:86:0B:F9:38:BB:57:E0:B7:ED:0F:89:0D:70:BF:EE:55:A0 Certificate issuer: /CN=8C57C5860BF938BB57E0B7ED0F890D70BFEE55A0 Certificate serial: 1D63187A972A62BDFE2941C440D44C23D82BD1DB Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8C57C5860BF938BB57E0B7ED0F890D70BFEE55A0.cer Subject info access: rsync://repo-rpki.idnic.net/repo/02913fa1-33ae-4e33-bbe2-81bd9f03c84b/0/8C57C5860BF938BB57E0B7ED0F890D70BFEE55A0.mft Manifest number: 0315 Signing time: Wed 02 Jul 2025 11:50:03 +0000 Manifest this update: Wed 02 Jul 2025 11:45:03 +0000 Manifest next update: Sat 05 Jul 2025 20:54:03 +0000 Files and hashes: 1: 3130332e3135392e3230322e302f32332d3234203d3e20313331313131.roa (hash: Ho5Y5TOHX49gl1fZYVO+j2M3OjYa1AKAk+KnhAmd/6M=) 2: 8C57C5860BF938BB57E0B7ED0F890D70BFEE55A0.crl (hash: Jpx1eBOg2QPyKMKx7txTG/ttzD+Q6CvOrhR02MttNwM=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/02913fa1-33ae-4e33-bbe2-81bd9f03c84b/0/8C57C5860BF938BB57E0B7ED0F890D70BFEE55A0.crl rsync://repo-rpki.idnic.net/repo/02913fa1-33ae-4e33-bbe2-81bd9f03c84b/0/8C57C5860BF938BB57E0B7ED0F890D70BFEE55A0.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8C57C5860BF938BB57E0B7ED0F890D70BFEE55A0.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 05 Jul 2025 15:58:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1d:63:18:7a:97:2a:62:bd:fe:29:41:c4:40:d4:4c:23:d8:2b:d1:db Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8C57C5860BF938BB57E0B7ED0F890D70BFEE55A0 Validity Not Before: Jul 2 11:45:03 2025 GMT Not After : Jul 5 20:54:03 2025 GMT Subject: CN=A589BBEAF698D6CA3F56ADBC949C55DED1C64A29 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:6f:93:dc:3f:b2:1d:20:0d:3c:ef:86:0e:6c: 0a:8c:dc:e0:15:47:1f:b5:2c:ba:03:b0:84:3e:5f: 89:05:56:86:63:bf:dd:11:3b:8c:44:5d:ad:a5:f9: 0c:b8:36:97:63:46:da:45:dc:2e:0c:c2:ef:96:fa: f4:41:d2:b4:2b:3a:50:d5:6b:fd:5b:13:ab:f6:09: 95:d4:30:21:d3:e4:fb:d1:fa:38:71:42:16:86:3a: f2:20:07:81:c9:20:ba:8b:ef:73:7b:c5:90:08:e3: 7d:a5:b2:04:9d:eb:1d:c7:44:67:15:b2:9d:8e:7f: 70:bb:5f:44:0d:e3:51:4c:76:b3:5f:69:2b:5e:34: 95:25:6e:18:43:c4:26:d2:95:a0:8c:c7:4d:0c:58: 63:15:b2:53:58:f6:16:98:3e:bc:aa:60:ff:06:5c: b1:9a:76:38:c3:63:6b:17:47:22:21:a8:a3:c1:84: 2d:5e:89:7a:ad:28:6b:1d:cd:fc:66:37:40:1c:ad: 25:b8:85:00:39:58:74:e0:0b:e0:82:d5:6b:41:e6: 4f:a8:60:37:f0:90:9d:69:bf:46:bc:99:f9:42:2c: b2:40:55:69:84:58:c3:78:be:41:3f:fa:df:ca:68: 59:a5:d2:90:15:d8:14:ea:20:e5:e2:9a:a4:22:6f: c1:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:89:BB:EA:F6:98:D6:CA:3F:56:AD:BC:94:9C:55:DE:D1:C6:4A:29 X509v3 Authority Key Identifier: keyid:8C:57:C5:86:0B:F9:38:BB:57:E0:B7:ED:0F:89:0D:70:BF:EE:55:A0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/02913fa1-33ae-4e33-bbe2-81bd9f03c84b/0/8C57C5860BF938BB57E0B7ED0F890D70BFEE55A0.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8C57C5860BF938BB57E0B7ED0F890D70BFEE55A0.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/02913fa1-33ae-4e33-bbe2-81bd9f03c84b/0/8C57C5860BF938BB57E0B7ED0F890D70BFEE55A0.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1f:73:88:9e:a4:5f:45:8f:02:f6:62:fa:fb:2d:af:f5:fa:d1: df:9f:60:bb:6c:06:10:a6:68:7a:ed:e5:08:56:95:0b:2d:78: 1f:71:96:c8:d3:bd:26:51:8c:66:83:16:dd:5d:6a:3f:95:57: 35:88:f7:76:08:58:71:cb:da:50:2a:15:e4:74:14:5b:75:0f: c4:70:eb:d0:0a:1f:f5:3e:06:02:02:d8:19:0b:0f:d1:4e:4d: 7e:a4:4d:19:cf:ce:b8:9a:b5:3a:4a:a6:cf:9e:4a:d7:93:28: 4b:8d:96:e2:4c:37:76:cf:71:1c:a3:49:d2:40:38:20:b4:73: 6d:82:fc:99:a1:f2:5e:04:e6:64:ac:c9:0a:50:92:86:cb:d8: 87:4c:56:f5:b5:00:bc:22:38:8b:23:fb:01:f0:68:8d:6d:75: 28:c6:3f:89:6c:4a:16:36:ed:75:cc:a0:9e:20:2a:eb:e2:01: 89:ae:67:40:57:ff:f1:68:81:4a:6d:3c:8c:a1:6c:dc:ff:b8: 7c:89:39:11:d9:cf:eb:7b:18:83:db:bf:0f:a0:ce:a5:8a:55: a6:dd:ac:0b:b4:f0:74:fa:7f:c0:af:de:86:4c:7a:17:ce:e0: 9f:b1:08:db:7b:92:7f:4b:5c:b6:08:30:fc:0d:a3:09:d0:4e: a1:5e:e7:84 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUHWMYepcqYr3+KUHEQNRMI9gr0dswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEM1N0M1ODYwQkY5MzhCQjU3RTBCN0VEMEY4OTBENzBC RkVFNTVBMDAeFw0yNTA3MDIxMTQ1MDNaFw0yNTA3MDUyMDU0MDNaMDMxMTAvBgNV BAMTKEE1ODlCQkVBRjY5OEQ2Q0EzRjU2QURCQzk0OUM1NURFRDFDNjRBMjkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDBb5PcP7IdIA0874YObAqM3OAV Rx+1LLoDsIQ+X4kFVoZjv90RO4xEXa2l+Qy4NpdjRtpF3C4Mwu+W+vRB0rQrOlDV a/1bE6v2CZXUMCHT5PvR+jhxQhaGOvIgB4HJILqL73N7xZAI432lsgSd6x3HRGcV sp2Of3C7X0QN41FMdrNfaSteNJUlbhhDxCbSlaCMx00MWGMVslNY9haYPryqYP8G XLGadjjDY2sXRyIhqKPBhC1eiXqtKGsdzfxmN0AcrSW4hQA5WHTgC+CC1WtB5k+o YDfwkJ1pv0a8mflCLLJAVWmEWMN4vkE/+t/KaFml0pAV2BTqIOXimqQib8GrAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUpYm76vaY1so/Vq28lJxV3tHGSikwHwYDVR0j BBgwFoAUjFfFhgv5OLtX4LftD4kNcL/uVaAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w MjkxM2ZhMS0zM2FlLTRlMzMtYmJlMi04MWJkOWYwM2M4NGIvMC84QzU3QzU4NjBC RjkzOEJCNTdFMEI3RUQwRjg5MEQ3MEJGRUU1NUEwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOEM1N0M1ODYwQkY5MzhCQjU3RTBCN0VEMEY4OTBENzBCRkVF NTVBMC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMDI5MTNmYTEtMzNhZS00ZTMzLWJi ZTItODFiZDlmMDNjODRiLzAvOEM1N0M1ODYwQkY5MzhCQjU3RTBCN0VEMEY4OTBE NzBCRkVFNTVBMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAB9ziJ6kX0WPAvZi+vstr/X60d+fYLtsBhCm aHrt5QhWlQsteB9xlsjTvSZRjGaDFt1daj+VVzWI93YIWHHL2lAqFeR0FFt1D8Rw 69AKH/U+BgIC2BkLD9FOTX6kTRnPzriatTpKps+eSteTKEuNluJMN3bPcRyjSdJA OCC0c22C/Jmh8l4E5mSsyQpQkobL2IdMVvW1ALwiOIsj+wHwaI1tdSjGP4lsShY2 7XXMoJ4gKuviAYmuZ0BX//FogUptPIyhbNz/uHyJORHZz+t7GIPbvw+gzqWKVabd rAu08HT6f8Cv3oZMehfO4J+xCNt7kn9LXLYIMPwNownQTqFe54Q= -----END CERTIFICATE-----Generated at Wed Jul 2 14:41:01 2025 by rpki-client