$ rpki-client -vvf repo-rpki.idnic.net/repo/17e26aa3-3073-4276-bd74-ad86f099c253/0/8955B36815B4084BAFC7908A639810631BEED49F.mft File: 8955B36815B4084BAFC7908A639810631BEED49F.mft (raw, json) Hash identifier: +jqXx6yZanL7ymvFDRoICsIs3IgaCoo+7PWl1f4Uj+A= Subject key identifier: C3:B3:F4:06:E6:8C:65:24:3C:F7:37:8D:F6:B3:CE:CD:32:67:C3:DD Authority key identifier: 89:55:B3:68:15:B4:08:4B:AF:C7:90:8A:63:98:10:63:1B:EE:D4:9F Certificate issuer: /CN=8955B36815B4084BAFC7908A639810631BEED49F Certificate serial: 2ACCE01EDAFE72F3ADE450413A731413B48CB5CB Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8955B36815B4084BAFC7908A639810631BEED49F.cer Subject info access: rsync://repo-rpki.idnic.net/repo/17e26aa3-3073-4276-bd74-ad86f099c253/0/8955B36815B4084BAFC7908A639810631BEED49F.mft Manifest number: 04D8 Signing time: Wed 02 Jul 2025 02:01:12 +0000 Manifest this update: Wed 02 Jul 2025 01:56:12 +0000 Manifest next update: Sat 05 Jul 2025 07:30:12 +0000 Files and hashes: 1: 8955B36815B4084BAFC7908A639810631BEED49F.crl (hash: xb5i1nFxqL5Nb4SPPR0NgshPeJmsuCzS6LLNa491hDM=) 2: 3130332e3135332e3234342e302f32342d3234203d3e20313430343734.roa (hash: anheo7/IFUA2/H9FN8liseYHAvu0fSEkGprdILkGE3g=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/17e26aa3-3073-4276-bd74-ad86f099c253/0/8955B36815B4084BAFC7908A639810631BEED49F.crl rsync://repo-rpki.idnic.net/repo/17e26aa3-3073-4276-bd74-ad86f099c253/0/8955B36815B4084BAFC7908A639810631BEED49F.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8955B36815B4084BAFC7908A639810631BEED49F.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 05 Jul 2025 07:30:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2a:cc:e0:1e:da:fe:72:f3:ad:e4:50:41:3a:73:14:13:b4:8c:b5:cb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8955B36815B4084BAFC7908A639810631BEED49F Validity Not Before: Jul 2 01:56:12 2025 GMT Not After : Jul 5 07:30:12 2025 GMT Subject: CN=C3B3F406E68C65243CF7378DF6B3CECD3267C3DD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:57:9b:e7:26:33:9c:6e:13:ae:c4:f0:eb:db: 65:83:d3:12:db:06:74:2b:a7:80:ac:3d:d3:22:3b: 37:e4:d6:a2:ac:0a:76:0a:29:08:97:83:e5:00:c9: f8:bc:3f:4a:74:5a:e7:30:fe:5e:41:ba:43:c8:04: 13:20:5a:d1:72:cd:87:c6:c1:10:3e:5c:97:8e:66: 3a:f2:96:1d:81:57:29:d9:d1:96:9b:44:7d:51:29: 7d:2d:67:d0:c3:48:9d:91:1e:87:a7:b1:c4:cd:58: 33:83:ec:d1:ff:25:0c:da:e5:b7:88:46:c4:f5:3a: 04:6c:cc:eb:21:9d:76:8e:9e:96:0d:ba:03:38:39: 77:95:f5:23:81:8a:61:ce:f8:7f:75:be:4f:a1:0d: a4:b5:7e:f8:8b:76:20:9b:64:03:ed:89:db:75:5f: 21:b2:cf:af:79:c9:96:cd:60:04:87:bd:5f:38:f1: 9a:ec:7c:9e:3e:73:c1:e2:01:69:99:65:f7:35:dc: 3f:18:a9:20:1c:6e:d7:20:e3:81:8a:d7:6a:13:ea: d9:d2:b8:c0:13:4c:e1:62:30:c3:d5:d5:45:9e:0c: 0e:85:8e:10:3e:6e:fc:81:35:eb:c3:44:49:2f:77: 96:c1:a2:7c:bd:00:91:ec:59:10:7e:15:be:73:04: fa:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C3:B3:F4:06:E6:8C:65:24:3C:F7:37:8D:F6:B3:CE:CD:32:67:C3:DD X509v3 Authority Key Identifier: keyid:89:55:B3:68:15:B4:08:4B:AF:C7:90:8A:63:98:10:63:1B:EE:D4:9F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/17e26aa3-3073-4276-bd74-ad86f099c253/0/8955B36815B4084BAFC7908A639810631BEED49F.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8955B36815B4084BAFC7908A639810631BEED49F.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/17e26aa3-3073-4276-bd74-ad86f099c253/0/8955B36815B4084BAFC7908A639810631BEED49F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 77:56:a2:18:be:ff:3f:85:83:07:bf:30:1b:e1:ec:24:45:ac: 43:cb:f0:2f:02:2c:47:a8:7d:b9:61:3e:a1:c3:ee:60:91:fd: be:03:21:b8:42:d9:9e:04:f9:fa:f0:c9:44:a1:5f:81:40:c9: be:25:00:46:92:4e:e3:8a:c9:09:7e:aa:a0:8e:b8:ae:65:96: c7:b4:e1:07:11:8d:df:a9:fd:1c:b2:5c:00:41:22:5c:f1:f5: b4:72:5f:21:aa:26:7d:79:7e:87:fd:1e:dc:8d:f2:f3:b2:e0: 0b:b5:10:f5:15:33:03:3c:86:a1:1f:36:bb:94:de:26:3b:5b: cd:9a:6d:dd:0e:16:8e:c7:48:41:d5:3c:85:3b:9f:76:1a:54: af:11:c8:ea:3e:d3:d8:d2:f4:3c:a5:06:2b:89:90:e2:5a:ac: 21:4b:2c:23:b6:24:48:3e:14:af:a6:81:8a:b3:5e:5a:a5:9b: 9d:a5:01:ba:f2:86:8f:77:48:0f:0c:f5:c5:db:c7:7f:82:e9: ad:8a:be:0d:b1:22:96:a8:5b:8f:de:76:b6:21:8c:55:ab:07: f3:6f:a9:ee:fd:0d:3b:56:fb:4b:96:40:58:ec:dd:af:04:20: 8d:10:2b:61:ca:54:4c:e6:02:5c:b2:3d:69:e7:1e:32:fe:a1: 76:a0:55:55 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUKszgHtr+cvOt5FBBOnMUE7SMtcswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODk1NUIzNjgxNUI0MDg0QkFGQzc5MDhBNjM5ODEwNjMx QkVFRDQ5RjAeFw0yNTA3MDIwMTU2MTJaFw0yNTA3MDUwNzMwMTJaMDMxMTAvBgNV BAMTKEMzQjNGNDA2RTY4QzY1MjQzQ0Y3Mzc4REY2QjNDRUNEMzI2N0MzREQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDNV5vnJjOcbhOuxPDr22WD0xLb BnQrp4CsPdMiOzfk1qKsCnYKKQiXg+UAyfi8P0p0Wucw/l5BukPIBBMgWtFyzYfG wRA+XJeOZjrylh2BVynZ0ZabRH1RKX0tZ9DDSJ2RHoenscTNWDOD7NH/JQza5beI RsT1OgRszOshnXaOnpYNugM4OXeV9SOBimHO+H91vk+hDaS1fviLdiCbZAPtidt1 XyGyz695yZbNYASHvV848ZrsfJ4+c8HiAWmZZfc13D8YqSAcbtcg44GK12oT6tnS uMATTOFiMMPV1UWeDA6FjhA+bvyBNevDREkvd5bBony9AJHsWRB+Fb5zBPqpAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUw7P0BuaMZSQ89zeN9rPOzTJnw90wHwYDVR0j BBgwFoAUiVWzaBW0CEuvx5CKY5gQYxvu1J8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x N2UyNmFhMy0zMDczLTQyNzYtYmQ3NC1hZDg2ZjA5OWMyNTMvMC84OTU1QjM2ODE1 QjQwODRCQUZDNzkwOEE2Mzk4MTA2MzFCRUVENDlGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvODk1NUIzNjgxNUI0MDg0QkFGQzc5MDhBNjM5ODEwNjMxQkVF RDQ5Ri5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMTdlMjZhYTMtMzA3My00Mjc2LWJk NzQtYWQ4NmYwOTljMjUzLzAvODk1NUIzNjgxNUI0MDg0QkFGQzc5MDhBNjM5ODEw NjMxQkVFRDQ5Ri5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHdWohi+/z+Fgwe/MBvh7CRFrEPL8C8CLEeo fblhPqHD7mCR/b4DIbhC2Z4E+frwyUShX4FAyb4lAEaSTuOKyQl+qqCOuK5llse0 4QcRjd+p/RyyXABBIlzx9bRyXyGqJn15fof9HtyN8vOy4Au1EPUVMwM8hqEfNruU 3iY7W82abd0OFo7HSEHVPIU7n3YaVK8RyOo+09jS9DylBiuJkOJarCFLLCO2JEg+ FK+mgYqzXlqlm52lAbryho93SA8M9cXbx3+C6a2Kvg2xIpaoW4/edrYhjFWrB/Nv qe79DTtW+0uWQFjs3a8EII0QK2HKVEzmAlyyPWnnHjL+oXagVVU= -----END CERTIFICATE-----Generated at Thu Jul 3 07:02:20 2025 by rpki-client