$ rpki-client -vvf repo-rpki.idnic.net/repo/27d9f851-7e73-4384-950e-8be8e15fd3ee/0/8F84D6FEEAF8C5D3C5D13F101BC70B758BF50F6A.mft File: 8F84D6FEEAF8C5D3C5D13F101BC70B758BF50F6A.mft (raw, json) Hash identifier: zCXT5Ppm6Oo2YjRd3r4gsIXkpQTLTna/dzZHPa10Yko= Subject key identifier: 43:04:2D:03:F1:C9:4E:85:C8:72:D5:98:0B:35:10:F7:13:77:5C:07 Authority key identifier: 8F:84:D6:FE:EA:F8:C5:D3:C5:D1:3F:10:1B:C7:0B:75:8B:F5:0F:6A Certificate issuer: /CN=8F84D6FEEAF8C5D3C5D13F101BC70B758BF50F6A Certificate serial: 1015E371AB81FE9FA38324BA0617BCA2D8AA8439 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8F84D6FEEAF8C5D3C5D13F101BC70B758BF50F6A.cer Subject info access: rsync://repo-rpki.idnic.net/repo/27d9f851-7e73-4384-950e-8be8e15fd3ee/0/8F84D6FEEAF8C5D3C5D13F101BC70B758BF50F6A.mft Manifest number: 05A6 Signing time: Sun 29 Jun 2025 15:00:36 +0000 Manifest this update: Sun 29 Jun 2025 14:55:36 +0000 Manifest next update: Thu 03 Jul 2025 01:22:36 +0000 Files and hashes: 1: 3230322e37332e32352e302f32342d3234203d3e20313431383932.roa (hash: L3e7xhgbdKiD6xLSCC6o4EcC4VabYtoVoPe/Fd1r3p4=) 2: 34392e302e302e302f32322d3234203d3e203535373031.roa (hash: yzJFuCgJdtqHHRWns+YkV15nd/BuBUJW5VOi1zg7H6Q=) 3: 8F84D6FEEAF8C5D3C5D13F101BC70B758BF50F6A.crl (hash: XUkhgVJkNpu09h6jSAXHyHK1/btmh/8IYdITOMV2ICQ=) 4: 3130332e33312e3233322e302f32322d3234203d3e203535373031.roa (hash: BrB/GW7Td9VbCbmZFNch6tbk4BKMd6sCGKbNPlrCa44=) 5: 3230322e37332e32362e302f32342d3234203d3e20313431383932.roa (hash: QqG89TEZjAnI8K1IrPR29kJtDOMjh4sJXdy9wDe7GkQ=) 6: 34332e3235322e3233362e302f32332d3234203d3e203535373031.roa (hash: Dc8BdtAPO03Z1L5MRp5Y72lj+merY2MxA64B93hGmbo=) 7: 34332e3235322e3233382e302f32342d3234203d3e203535373031.roa (hash: Nnf66JxT1+eZbCkYQn8x6cz4I9We7qQ0T90RTh7FkG0=) 8: 3130332e31382e37362e302f32322d3234203d3e203535373031.roa (hash: oa5lMgIER/j9/ZBqK2jTnvVzB4d9A9ON67O4sbQz5Lo=) 9: 3230322e37332e32372e302f32342d3234203d3e203535373031.roa (hash: 7FX65tSRyznIseHKWjzPuHzH3CNvHvrWJempYLyB19A=) 10: 3230322e37332e32342e302f32342d3234203d3e203535373031.roa (hash: 4zJcjhi99V9+23NjQKwrFy3Y4HQGoSDMxwY4qblbwdg=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/27d9f851-7e73-4384-950e-8be8e15fd3ee/0/8F84D6FEEAF8C5D3C5D13F101BC70B758BF50F6A.crl rsync://repo-rpki.idnic.net/repo/27d9f851-7e73-4384-950e-8be8e15fd3ee/0/8F84D6FEEAF8C5D3C5D13F101BC70B758BF50F6A.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8F84D6FEEAF8C5D3C5D13F101BC70B758BF50F6A.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 02 Jul 2025 07:23:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10:15:e3:71:ab:81:fe:9f:a3:83:24:ba:06:17:bc:a2:d8:aa:84:39 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8F84D6FEEAF8C5D3C5D13F101BC70B758BF50F6A Validity Not Before: Jun 29 14:55:36 2025 GMT Not After : Jul 3 01:22:36 2025 GMT Subject: CN=43042D03F1C94E85C872D5980B3510F713775C07 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:a3:95:cb:40:9a:1f:89:75:b4:54:88:d9:14: 18:56:56:2a:1b:d2:65:62:06:f1:88:2f:ff:b0:8b: 0e:17:84:d8:38:bd:26:43:f2:4c:2c:9d:53:16:c6: 25:96:fe:03:2c:79:2d:eb:f0:f6:c7:e2:b4:14:7c: 16:5b:2b:c5:71:6c:72:cf:1e:1e:97:a4:83:cd:9b: 82:d6:95:81:2a:8c:5d:49:bd:de:cc:81:15:77:61: 5c:18:11:65:3d:9e:02:47:29:8e:a5:fa:f8:23:d1: 9f:6c:19:26:fc:56:51:b5:9a:ae:dc:65:9e:f2:af: 3a:14:d1:b2:af:fd:d0:a1:e6:e6:d7:ba:d6:8e:55: c5:a8:8f:73:11:e5:7c:b9:2d:00:eb:06:2a:4d:94: 3d:c6:a0:26:e6:55:c8:28:8c:26:ae:09:e2:96:8e: 97:93:d6:64:74:90:62:a6:15:82:2f:d3:88:25:d3: de:00:bc:64:e7:80:b5:b2:d8:25:03:77:05:29:69: e2:de:69:e6:a5:f6:48:e4:db:c5:84:57:1f:10:c7: 2a:c6:9e:66:31:0c:80:c4:81:49:eb:2e:1a:48:41: a6:8e:65:16:bc:28:38:3a:61:b1:99:56:9f:cc:6d: e4:fd:97:4c:64:c5:22:48:94:5c:84:2f:84:ae:06: 09:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:04:2D:03:F1:C9:4E:85:C8:72:D5:98:0B:35:10:F7:13:77:5C:07 X509v3 Authority Key Identifier: keyid:8F:84:D6:FE:EA:F8:C5:D3:C5:D1:3F:10:1B:C7:0B:75:8B:F5:0F:6A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/27d9f851-7e73-4384-950e-8be8e15fd3ee/0/8F84D6FEEAF8C5D3C5D13F101BC70B758BF50F6A.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8F84D6FEEAF8C5D3C5D13F101BC70B758BF50F6A.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/27d9f851-7e73-4384-950e-8be8e15fd3ee/0/8F84D6FEEAF8C5D3C5D13F101BC70B758BF50F6A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a1:71:b5:19:a5:2e:2a:5f:1d:d2:c4:01:a8:2d:75:9c:1e:54: 6a:d0:bc:82:11:cb:c5:8d:df:28:bc:74:88:e3:24:5d:11:f7: 03:fd:b2:5c:11:ea:8c:7f:29:66:f0:7f:d9:31:84:1e:f6:74: ac:8d:af:22:8c:44:56:20:83:c6:0c:d0:8e:40:49:2a:40:be: cd:99:b4:11:3c:43:4b:98:b3:ae:f7:5f:c3:ee:9d:32:51:e2: 95:9e:61:c7:a3:0c:41:42:9e:9f:64:c2:12:53:69:89:fd:f3: dc:4e:6c:dd:69:7b:78:9d:18:b9:90:c5:9c:52:b8:19:ca:df: a8:d5:55:da:4b:3a:d0:24:37:ee:4d:21:a3:3c:f9:a1:21:45: c4:61:27:12:f7:b8:5f:22:82:2a:47:3f:bd:05:2c:31:bc:73: f0:ec:b1:24:6c:90:06:10:c0:a9:38:2e:77:70:b0:a6:e8:08: c5:2a:52:ec:13:8b:d8:b6:21:f0:48:ba:d8:23:c1:1e:22:23: 2d:75:2f:c1:03:37:10:96:34:16:de:bb:f5:7d:8a:89:4f:12: 59:39:53:39:15:d0:f3:91:26:ad:8b:71:ee:ab:77:21:0b:ad: bd:d9:12:39:31:d5:65:7a:a6:78:da:9c:d1:e5:7e:c7:cc:41: ca:fd:31:f5 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUEBXjcauB/p+jgyS6Bhe8otiqhDkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEY4NEQ2RkVFQUY4QzVEM0M1RDEzRjEwMUJDNzBCNzU4 QkY1MEY2QTAeFw0yNTA2MjkxNDU1MzZaFw0yNTA3MDMwMTIyMzZaMDMxMTAvBgNV BAMTKDQzMDQyRDAzRjFDOTRFODVDODcyRDU5ODBCMzUxMEY3MTM3NzVDMDcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC2o5XLQJofiXW0VIjZFBhWViob 0mViBvGIL/+wiw4XhNg4vSZD8kwsnVMWxiWW/gMseS3r8PbH4rQUfBZbK8VxbHLP Hh6XpIPNm4LWlYEqjF1Jvd7MgRV3YVwYEWU9ngJHKY6l+vgj0Z9sGSb8VlG1mq7c ZZ7yrzoU0bKv/dCh5ubXutaOVcWoj3MR5Xy5LQDrBipNlD3GoCbmVcgojCauCeKW jpeT1mR0kGKmFYIv04gl094AvGTngLWy2CUDdwUpaeLeaeal9kjk28WEVx8QxyrG nmYxDIDEgUnrLhpIQaaOZRa8KDg6YbGZVp/MbeT9l0xkxSJIlFyEL4SuBgnTAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUQwQtA/HJToXIctWYCzUQ9xN3XAcwHwYDVR0j BBgwFoAUj4TW/ur4xdPF0T8QG8cLdYv1D2owDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y N2Q5Zjg1MS03ZTczLTQzODQtOTUwZS04YmU4ZTE1ZmQzZWUvMC84Rjg0RDZGRUVB RjhDNUQzQzVEMTNGMTAxQkM3MEI3NThCRjUwRjZBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOEY4NEQ2RkVFQUY4QzVEM0M1RDEzRjEwMUJDNzBCNzU4QkY1 MEY2QS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMjdkOWY4NTEtN2U3My00Mzg0LTk1 MGUtOGJlOGUxNWZkM2VlLzAvOEY4NEQ2RkVFQUY4QzVEM0M1RDEzRjEwMUJDNzBC NzU4QkY1MEY2QS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKFxtRmlLipfHdLEAagtdZweVGrQvIIRy8WN 3yi8dIjjJF0R9wP9slwR6ox/KWbwf9kxhB72dKyNryKMRFYgg8YM0I5ASSpAvs2Z tBE8Q0uYs673X8PunTJR4pWeYcejDEFCnp9kwhJTaYn989xObN1pe3idGLmQxZxS uBnK36jVVdpLOtAkN+5NIaM8+aEhRcRhJxL3uF8igipHP70FLDG8c/DssSRskAYQ wKk4LndwsKboCMUqUuwTi9i2IfBIutgjwR4iIy11L8EDNxCWNBbeu/V9iolPElk5 UzkV0PORJq2Lce6rdyELrb3ZEjkx1WV6pnjanNHlfsfMQcr9MfU= -----END CERTIFICATE-----Generated at Sun Jun 29 18:34:55 2025 by rpki-client