$ rpki-client -vvf repo-rpki.idnic.net/repo/2b69822c-2e22-48be-8ba2-634f582c2ecb/0/8FB177AE83526D713C1240D5CEFAF73844F7F4E5.mft File: 8FB177AE83526D713C1240D5CEFAF73844F7F4E5.mft (raw, json) Hash identifier: mcEFiZYJlqXoFWEKfufRCY3NN0ZJ5nAJzy83lxzle14= Subject key identifier: 12:EB:72:3C:31:0D:6A:1D:4F:74:CB:9E:0D:15:39:FD:CC:7B:4C:67 Authority key identifier: 8F:B1:77:AE:83:52:6D:71:3C:12:40:D5:CE:FA:F7:38:44:F7:F4:E5 Certificate issuer: /CN=8FB177AE83526D713C1240D5CEFAF73844F7F4E5 Certificate serial: 7A1220E1CB396B011B15AF9B09573BC11C26F063 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8FB177AE83526D713C1240D5CEFAF73844F7F4E5.cer Subject info access: rsync://repo-rpki.idnic.net/repo/2b69822c-2e22-48be-8ba2-634f582c2ecb/0/8FB177AE83526D713C1240D5CEFAF73844F7F4E5.mft Manifest number: 04EA Signing time: Tue 01 Jul 2025 00:12:07 +0000 Manifest this update: Tue 01 Jul 2025 00:07:07 +0000 Manifest next update: Fri 04 Jul 2025 10:46:07 +0000 Files and hashes: 1: 8FB177AE83526D713C1240D5CEFAF73844F7F4E5.crl (hash: Ih0t1YFiFKnnQpyyN2d2OphtZuI/lGxQ5Kfp3cTZdWo=) 2: 3230322e3135302e3132382e302f31392d3234203d3e203233393439.roa (hash: IcMuwwFWI9N+s2xXptufPfoLzyxZbJESlpNOp3hNLjk=) 3: 3130332e32342e3134382e302f32322d3234203d3e203233393439.roa (hash: ZdZBTzxEvF0Eo40CSK2hJ56qvhPrglPp9cbPLo54JU8=) 4: 34332e3232392e32302e302f32322d3234203d3e203233393439.roa (hash: eFCW4mBhrgv32rd+aPVfExuT3QEaHahKTCkeKrhzQUs=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/2b69822c-2e22-48be-8ba2-634f582c2ecb/0/8FB177AE83526D713C1240D5CEFAF73844F7F4E5.crl rsync://repo-rpki.idnic.net/repo/2b69822c-2e22-48be-8ba2-634f582c2ecb/0/8FB177AE83526D713C1240D5CEFAF73844F7F4E5.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8FB177AE83526D713C1240D5CEFAF73844F7F4E5.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 04 Jul 2025 10:46:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7a:12:20:e1:cb:39:6b:01:1b:15:af:9b:09:57:3b:c1:1c:26:f0:63 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8FB177AE83526D713C1240D5CEFAF73844F7F4E5 Validity Not Before: Jul 1 00:07:07 2025 GMT Not After : Jul 4 10:46:07 2025 GMT Subject: CN=12EB723C310D6A1D4F74CB9E0D1539FDCC7B4C67 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:08:67:c6:99:34:c4:c9:b6:fc:ba:60:7a:9f: 39:86:cf:78:4c:00:18:eb:93:6c:76:c7:29:f0:85: 87:52:c6:97:f0:8c:b0:f3:ef:ab:e3:3a:8f:65:dc: 3c:42:7f:17:9c:16:dc:69:e4:b7:b8:4f:33:9b:25: a2:fd:59:86:99:8a:7b:34:0b:fb:6a:ff:9b:42:55: 42:6d:7a:29:8b:52:bc:62:c3:d3:49:da:8b:85:26: eb:b2:92:c3:70:41:b7:46:81:4d:53:89:63:42:1f: 7b:b7:b5:3c:aa:c4:2b:5a:6e:14:dd:e6:8d:d2:d6: 2d:de:90:21:d6:9f:56:16:3f:22:b2:1f:88:29:03: 68:42:92:dd:40:c7:4f:06:d7:85:83:fb:94:a0:87: 67:5b:b5:7a:5d:85:5d:b0:9f:97:0c:92:d5:1e:1d: 80:0e:70:a5:ab:c2:ab:c9:74:71:f1:f4:29:81:d4: 01:6f:fa:1a:78:83:88:be:30:24:50:43:0a:4f:10: 27:ea:cf:4b:33:b2:88:44:25:b8:5b:ab:9f:6b:b6: 19:b3:61:58:46:80:6e:2e:e0:49:09:f1:df:26:fe: a8:b4:5b:22:78:b1:73:b4:8a:f2:e8:b9:57:9e:00: a0:e9:07:51:aa:33:9a:5b:26:63:0b:55:c5:5c:86: 66:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:EB:72:3C:31:0D:6A:1D:4F:74:CB:9E:0D:15:39:FD:CC:7B:4C:67 X509v3 Authority Key Identifier: keyid:8F:B1:77:AE:83:52:6D:71:3C:12:40:D5:CE:FA:F7:38:44:F7:F4:E5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/2b69822c-2e22-48be-8ba2-634f582c2ecb/0/8FB177AE83526D713C1240D5CEFAF73844F7F4E5.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8FB177AE83526D713C1240D5CEFAF73844F7F4E5.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/2b69822c-2e22-48be-8ba2-634f582c2ecb/0/8FB177AE83526D713C1240D5CEFAF73844F7F4E5.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 64:b2:d9:ed:6c:ab:aa:57:ca:30:14:07:77:cd:c4:07:4d:11: 1a:9a:5e:08:19:e4:08:3b:d0:09:25:55:c9:9f:4a:5e:5a:09: e9:1e:5d:51:25:c7:f3:6f:bd:75:3a:71:68:e4:98:5c:63:cf: 60:96:e8:4b:76:9d:6a:b5:d7:3d:27:a7:a9:a8:a9:a1:cb:81: 26:f8:dd:3b:53:10:04:ab:88:be:de:63:02:8d:ce:df:8f:9e: 8b:78:cd:a0:1e:6c:e1:e1:35:77:04:94:c0:e5:a0:ed:6c:61: 48:ee:49:91:cb:7a:ce:b8:fb:11:00:7c:e2:da:d9:0d:d2:e6: df:81:df:d8:60:b0:0d:e9:57:24:ce:32:3e:78:91:9f:dd:a7: 06:3e:62:a8:63:f9:1d:36:9a:04:92:d3:3d:74:b0:f5:41:dd: 19:a1:a7:c5:a6:6a:48:e5:00:28:d1:75:70:67:3d:00:72:aa: 6d:ac:7c:5b:2f:06:e2:4c:5d:fa:77:7e:4c:25:ca:8d:9f:d4: 55:35:53:6e:2f:f0:a9:28:e2:41:d4:10:0e:2c:a7:1a:00:c8: 35:17:75:3c:1c:97:bb:d2:df:1f:cc:06:a5:80:e2:35:b9:4b: 7b:46:31:2a:6e:c1:0e:19:53:92:62:ff:eb:b2:d0:2f:80:d1: 18:96:bb:18 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUehIg4cs5awEbFa+bCVc7wRwm8GMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEZCMTc3QUU4MzUyNkQ3MTNDMTI0MEQ1Q0VGQUY3Mzg0 NEY3RjRFNTAeFw0yNTA3MDEwMDA3MDdaFw0yNTA3MDQxMDQ2MDdaMDMxMTAvBgNV BAMTKDEyRUI3MjNDMzEwRDZBMUQ0Rjc0Q0I5RTBEMTUzOUZEQ0M3QjRDNjcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC4CGfGmTTEybb8umB6nzmGz3hM ABjrk2x2xynwhYdSxpfwjLDz76vjOo9l3DxCfxecFtxp5Le4TzObJaL9WYaZins0 C/tq/5tCVUJteimLUrxiw9NJ2ouFJuuyksNwQbdGgU1TiWNCH3u3tTyqxCtabhTd 5o3S1i3ekCHWn1YWPyKyH4gpA2hCkt1Ax08G14WD+5Sgh2dbtXpdhV2wn5cMktUe HYAOcKWrwqvJdHHx9CmB1AFv+hp4g4i+MCRQQwpPECfqz0szsohEJbhbq59rthmz YVhGgG4u4EkJ8d8m/qi0WyJ4sXO0ivLouVeeAKDpB1GqM5pbJmMLVcVchmb1AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUEutyPDENah1PdMueDRU5/cx7TGcwHwYDVR0j BBgwFoAUj7F3roNSbXE8EkDVzvr3OET39OUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y YjY5ODIyYy0yZTIyLTQ4YmUtOGJhMi02MzRmNTgyYzJlY2IvMC84RkIxNzdBRTgz NTI2RDcxM0MxMjQwRDVDRUZBRjczODQ0RjdGNEU1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOEZCMTc3QUU4MzUyNkQ3MTNDMTI0MEQ1Q0VGQUY3Mzg0NEY3 RjRFNS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMmI2OTgyMmMtMmUyMi00OGJlLThi YTItNjM0ZjU4MmMyZWNiLzAvOEZCMTc3QUU4MzUyNkQ3MTNDMTI0MEQ1Q0VGQUY3 Mzg0NEY3RjRFNS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGSy2e1sq6pXyjAUB3fNxAdNERqaXggZ5Ag7 0AklVcmfSl5aCekeXVElx/NvvXU6cWjkmFxjz2CW6Et2nWq11z0np6moqaHLgSb4 3TtTEASriL7eYwKNzt+Pnot4zaAebOHhNXcElMDloO1sYUjuSZHLes64+xEAfOLa 2Q3S5t+B39hgsA3pVyTOMj54kZ/dpwY+Yqhj+R02mgSS0z10sPVB3Rmhp8Wmakjl ACjRdXBnPQByqm2sfFsvBuJMXfp3fkwlyo2f1FU1U24v8Kko4kHUEA4spxoAyDUX dTwcl7vS3x/MBqWA4jW5S3tGMSpuwQ4ZU5Ji/+uy0C+A0RiWuxg= -----END CERTIFICATE-----Generated at Thu Jul 3 00:43:31 2025 by rpki-client