$ rpki-client -vvf repo-rpki.idnic.net/repo/14758e8e-49c8-48b8-bdcb-35339e2ae601/0/8F9164714A1B3B906CF8A8B371F342EBA3540CD9.mft File: 8F9164714A1B3B906CF8A8B371F342EBA3540CD9.mft (raw, json) Hash identifier: El86j98UoyD3wQdAoPVV93t1qHd5yP/jWCeNB1l32fs= Subject key identifier: 95:CD:AC:92:1E:1B:E7:A1:16:4C:69:2B:0A:1C:6B:79:D4:CF:15:91 Authority key identifier: 8F:91:64:71:4A:1B:3B:90:6C:F8:A8:B3:71:F3:42:EB:A3:54:0C:D9 Certificate issuer: /CN=8F9164714A1B3B906CF8A8B371F342EBA3540CD9 Certificate serial: 330ADE0531D1E52BC5F6A5F4B83AEE115A1969E9 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8F9164714A1B3B906CF8A8B371F342EBA3540CD9.cer Subject info access: rsync://repo-rpki.idnic.net/repo/14758e8e-49c8-48b8-bdcb-35339e2ae601/0/8F9164714A1B3B906CF8A8B371F342EBA3540CD9.mft Manifest number: 01E1 Signing time: Mon 30 Jun 2025 09:30:34 +0000 Manifest this update: Mon 30 Jun 2025 09:25:34 +0000 Manifest next update: Thu 03 Jul 2025 15:05:34 +0000 Files and hashes: 1: 8F9164714A1B3B906CF8A8B371F342EBA3540CD9.crl (hash: XylS6HSCKauS8K8AN/+7UZ5gyO+bENVsG9Km2tvk61Y=) 2: 3130332e3138382e3131392e302f32342d3234203d3e20313439373435.roa (hash: VHhhP8m98Q6XFX6o9Io0DEj5+ACOMVpb0NESi8BC7x8=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/14758e8e-49c8-48b8-bdcb-35339e2ae601/0/8F9164714A1B3B906CF8A8B371F342EBA3540CD9.crl rsync://repo-rpki.idnic.net/repo/14758e8e-49c8-48b8-bdcb-35339e2ae601/0/8F9164714A1B3B906CF8A8B371F342EBA3540CD9.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8F9164714A1B3B906CF8A8B371F342EBA3540CD9.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 03 Jul 2025 15:05:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 33:0a:de:05:31:d1:e5:2b:c5:f6:a5:f4:b8:3a:ee:11:5a:19:69:e9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8F9164714A1B3B906CF8A8B371F342EBA3540CD9 Validity Not Before: Jun 30 09:25:34 2025 GMT Not After : Jul 3 15:05:34 2025 GMT Subject: CN=95CDAC921E1BE7A1164C692B0A1C6B79D4CF1591 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:e8:ac:c4:a4:07:61:b6:89:7e:17:4b:fd:a5: f7:c4:0c:f3:70:81:1d:21:08:95:ab:cb:96:de:8e: 2c:d7:09:15:8f:b4:40:b1:d7:98:6c:ad:d3:54:b2: e7:4c:bd:bb:1d:c2:b1:d1:b3:63:a5:a6:43:1e:b4: da:c1:0e:30:06:3a:8c:8a:6c:c0:18:09:c0:29:fc: d1:1f:f5:85:be:a6:e4:57:ba:2a:46:0c:c9:df:29: 18:cf:0b:8c:b9:2e:56:12:d6:16:cd:e7:97:3e:40: a2:fc:2f:88:60:b7:a0:6d:fb:ff:3f:91:ac:0e:06: e8:f7:86:cf:c4:d0:b4:4b:02:89:7c:df:2b:51:c6: 9b:39:07:6b:e4:7e:33:b5:9e:8f:3b:06:6d:31:b5: 8c:6e:63:f9:06:d8:d7:a4:6d:2a:13:9b:54:4b:54: 8e:7d:fd:d5:01:71:bd:5a:0b:bb:ac:38:ea:a4:53: fc:f2:a3:5e:ef:ac:89:a4:f8:d1:af:64:ae:e2:e0: a9:47:b2:d4:ed:e4:d7:61:a9:4a:fa:d8:56:22:3a: 26:47:9d:05:9d:4b:6e:8a:bc:bf:f5:eb:af:78:54: cd:85:50:4c:40:f2:4f:07:e9:c8:9b:01:3e:b9:cb: 84:2d:a2:e0:5f:8e:39:f1:9c:3a:a2:de:25:67:f9: 94:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:CD:AC:92:1E:1B:E7:A1:16:4C:69:2B:0A:1C:6B:79:D4:CF:15:91 X509v3 Authority Key Identifier: keyid:8F:91:64:71:4A:1B:3B:90:6C:F8:A8:B3:71:F3:42:EB:A3:54:0C:D9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/14758e8e-49c8-48b8-bdcb-35339e2ae601/0/8F9164714A1B3B906CF8A8B371F342EBA3540CD9.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8F9164714A1B3B906CF8A8B371F342EBA3540CD9.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/14758e8e-49c8-48b8-bdcb-35339e2ae601/0/8F9164714A1B3B906CF8A8B371F342EBA3540CD9.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3f:7c:3f:31:05:1f:36:2f:4a:55:7b:4a:e3:49:ba:06:77:c9: 88:31:f1:ff:4e:b2:b9:16:3c:11:b3:9b:9e:57:b1:5f:b3:c0: f6:d0:cd:75:75:60:c1:dc:18:2c:b1:fe:12:b8:9a:b1:08:6e: 66:7d:e9:17:ba:75:4b:da:70:25:04:c1:5f:8a:26:25:71:3b: 83:92:8f:b9:ac:ad:98:5f:5f:01:c3:5b:03:0f:68:6e:73:eb: 58:f6:39:f9:f8:70:f7:41:33:3f:41:e8:fd:68:ba:74:86:dc: 7a:62:37:d2:c5:13:6f:2b:0b:03:0b:6a:7d:f1:e2:1b:c5:76: 1d:4d:48:2f:ce:a7:0b:45:0a:c2:9b:22:85:0a:3f:3b:bd:74: f6:93:98:4f:6d:35:75:38:3b:8f:46:d0:b7:1b:98:e3:0c:6f: 72:5c:dc:90:f3:f1:de:b1:4f:9f:75:9e:19:89:90:f4:1f:b2: 1c:73:70:6d:0b:d3:cb:a7:c3:ef:6f:4d:03:02:ed:9f:97:65: 16:b5:b2:5a:a4:b0:3c:64:2c:24:96:ea:9a:1b:6c:a9:73:42: a7:4a:ac:ee:6e:77:03:a9:23:07:10:0a:3a:3e:15:6a:d9:05: a4:9f:d4:ed:e1:46:a9:0c:92:73:9d:ff:3c:a6:71:e0:af:1e: 35:bc:86:7b -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUMwreBTHR5SvF9qX0uDruEVoZaekwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEY5MTY0NzE0QTFCM0I5MDZDRjhBOEIzNzFGMzQyRUJB MzU0MENEOTAeFw0yNTA2MzAwOTI1MzRaFw0yNTA3MDMxNTA1MzRaMDMxMTAvBgNV BAMTKDk1Q0RBQzkyMUUxQkU3QTExNjRDNjkyQjBBMUM2Qjc5RDRDRjE1OTEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDX6KzEpAdhtol+F0v9pffEDPNw gR0hCJWry5bejizXCRWPtECx15hsrdNUsudMvbsdwrHRs2OlpkMetNrBDjAGOoyK bMAYCcAp/NEf9YW+puRXuipGDMnfKRjPC4y5LlYS1hbN55c+QKL8L4hgt6Bt+/8/ kawOBuj3hs/E0LRLAol83ytRxps5B2vkfjO1no87Bm0xtYxuY/kG2NekbSoTm1RL VI59/dUBcb1aC7usOOqkU/zyo17vrImk+NGvZK7i4KlHstTt5NdhqUr62FYiOiZH nQWdS26KvL/16694VM2FUExA8k8H6cibAT65y4QtouBfjjnxnDqi3iVn+ZTHAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUlc2skh4b56EWTGkrChxredTPFZEwHwYDVR0j BBgwFoAUj5FkcUobO5Bs+KizcfNC66NUDNkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x NDc1OGU4ZS00OWM4LTQ4YjgtYmRjYi0zNTMzOWUyYWU2MDEvMC84RjkxNjQ3MTRB MUIzQjkwNkNGOEE4QjM3MUYzNDJFQkEzNTQwQ0Q5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOEY5MTY0NzE0QTFCM0I5MDZDRjhBOEIzNzFGMzQyRUJBMzU0 MENEOS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMTQ3NThlOGUtNDljOC00OGI4LWJk Y2ItMzUzMzllMmFlNjAxLzAvOEY5MTY0NzE0QTFCM0I5MDZDRjhBOEIzNzFGMzQy RUJBMzU0MENEOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAD98PzEFHzYvSlV7SuNJugZ3yYgx8f9OsrkW PBGzm55XsV+zwPbQzXV1YMHcGCyx/hK4mrEIbmZ96Re6dUvacCUEwV+KJiVxO4OS j7msrZhfXwHDWwMPaG5z61j2Ofn4cPdBMz9B6P1ounSG3HpiN9LFE28rCwMLan3x 4hvFdh1NSC/OpwtFCsKbIoUKPzu9dPaTmE9tNXU4O49G0LcbmOMMb3Jc3JDz8d6x T591nhmJkPQfshxzcG0L08unw+9vTQMC7Z+XZRa1slqksDxkLCSW6pobbKlzQqdK rO5udwOpIwcQCjo+FWrZBaSf1O3hRqkMknOd/zymceCvHjW8hns= -----END CERTIFICATE-----Generated at Mon Jun 30 14:10:11 2025 by rpki-client