$ rpki-client -vvf repo-rpki.idnic.net/repo/3c86cb5d-f07d-426a-8e5e-a77a978dd2ee/0/8DA8C02216F0C7D625FEFA7EF659021425920442.mft File: 8DA8C02216F0C7D625FEFA7EF659021425920442.mft (raw, json) Hash identifier: OfuM8BgL7iV8QvEZEVG57uEe8SSXCwKGxgljUwIHH9k= Subject key identifier: 29:30:C1:DA:D1:30:FE:00:EA:4C:50:07:58:C2:B7:E4:7B:A7:B0:D6 Authority key identifier: 8D:A8:C0:22:16:F0:C7:D6:25:FE:FA:7E:F6:59:02:14:25:92:04:42 Certificate issuer: /CN=8DA8C02216F0C7D625FEFA7EF659021425920442 Certificate serial: 1BD98D248D1F4D495EBB23794540B6BC4ABBE053 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8DA8C02216F0C7D625FEFA7EF659021425920442.cer Subject info access: rsync://repo-rpki.idnic.net/repo/3c86cb5d-f07d-426a-8e5e-a77a978dd2ee/0/8DA8C02216F0C7D625FEFA7EF659021425920442.mft Manifest number: 01A5 Signing time: Sat 28 Jun 2025 07:01:38 +0000 Manifest this update: Sat 28 Jun 2025 06:56:38 +0000 Manifest next update: Tue 01 Jul 2025 08:52:38 +0000 Files and hashes: 1: 3130332e37312e32352e302f32342d3234203d3e20313530323333.roa (hash: 7V+15ddHSP30dhzOt3k9NRabUa1L2vfsDa5xrSuHr2U=) 2: 8DA8C02216F0C7D625FEFA7EF659021425920442.crl (hash: 0e2fJO7n7hfWkBtCiep0ySBPJfN442/t0tDMGYlBZUQ=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/3c86cb5d-f07d-426a-8e5e-a77a978dd2ee/0/8DA8C02216F0C7D625FEFA7EF659021425920442.crl rsync://repo-rpki.idnic.net/repo/3c86cb5d-f07d-426a-8e5e-a77a978dd2ee/0/8DA8C02216F0C7D625FEFA7EF659021425920442.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8DA8C02216F0C7D625FEFA7EF659021425920442.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 01 Jul 2025 08:52:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1b:d9:8d:24:8d:1f:4d:49:5e:bb:23:79:45:40:b6:bc:4a:bb:e0:53 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8DA8C02216F0C7D625FEFA7EF659021425920442 Validity Not Before: Jun 28 06:56:38 2025 GMT Not After : Jul 1 08:52:38 2025 GMT Subject: CN=2930C1DAD130FE00EA4C500758C2B7E47BA7B0D6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:ef:1a:4f:bb:5b:18:13:73:a5:6f:fb:0c:58: da:23:eb:ef:33:1c:ec:55:15:24:60:2d:fb:0f:6a: 3e:e2:b8:aa:9e:28:14:77:89:30:e7:81:80:be:9c: 36:0f:80:7b:e2:6d:48:1c:60:fb:91:0a:8c:fe:f8: b6:39:e4:04:40:6c:d5:53:fe:2c:b7:b0:73:a8:5f: 9d:10:0f:68:66:7d:ff:25:72:0b:d5:ca:1e:6c:89: d4:c5:eb:bb:93:31:26:10:d4:98:53:33:1a:11:12: e8:15:9c:e0:1a:bc:cb:47:32:3b:fc:cb:19:8d:16: 80:68:07:62:f2:6c:9a:6e:6d:8f:e8:ea:75:32:0f: 94:85:02:7e:f6:f9:c1:5c:6b:03:c8:9c:c5:07:a6: d2:81:01:df:0a:ba:49:02:d4:31:a8:ab:4c:91:49: d1:bd:b0:11:19:31:51:f3:c4:84:57:d4:f1:97:fa: fe:b3:3c:11:7f:56:99:4f:86:ee:25:bb:32:ea:7e: fe:3d:05:4d:c0:f6:02:8f:6b:b0:bb:29:11:fd:54: 94:06:ac:10:0e:04:85:8b:43:1a:8b:8d:28:ec:a8: 87:1d:4b:36:6a:73:5b:bc:3e:5b:55:8b:e2:92:f1: 0e:05:14:17:dd:3b:1d:eb:30:5f:cd:02:07:0f:90: 39:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:30:C1:DA:D1:30:FE:00:EA:4C:50:07:58:C2:B7:E4:7B:A7:B0:D6 X509v3 Authority Key Identifier: keyid:8D:A8:C0:22:16:F0:C7:D6:25:FE:FA:7E:F6:59:02:14:25:92:04:42 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/3c86cb5d-f07d-426a-8e5e-a77a978dd2ee/0/8DA8C02216F0C7D625FEFA7EF659021425920442.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8DA8C02216F0C7D625FEFA7EF659021425920442.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3c86cb5d-f07d-426a-8e5e-a77a978dd2ee/0/8DA8C02216F0C7D625FEFA7EF659021425920442.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 64:3e:15:a1:65:6a:57:a2:28:f8:c4:a6:f7:c9:d8:21:02:d1: 22:27:d6:20:e0:e5:8a:a5:26:ca:8f:5e:6f:81:ef:6a:8c:a2: 7f:20:b4:e1:3f:cf:4c:29:63:54:b0:5b:be:64:3c:e0:9b:3c: b6:86:f3:c1:2c:9f:64:e7:77:48:ca:51:7d:03:30:c1:65:8b: 06:7a:c4:dc:37:95:f3:52:ea:2d:29:46:09:09:e7:20:01:82: fc:93:d3:10:54:ba:db:8f:b9:22:2f:ce:5b:82:e5:69:98:13: e0:47:67:be:81:94:db:5b:dd:43:d1:e9:b3:0c:2a:92:33:f5: 38:79:35:25:92:24:9c:56:b7:3f:9a:9d:43:5d:95:9e:29:72: 7f:95:ce:e2:c8:c7:12:cf:27:fe:38:c0:9b:12:c5:19:ad:2b: 58:ff:17:84:f1:b7:f3:2d:94:c6:1c:71:9c:cd:95:d3:98:9a: 6d:6f:4c:2c:d3:5a:81:8f:ce:f8:43:c8:e4:f4:7a:6d:8e:fe: 2b:17:dc:84:06:33:31:22:31:29:57:b1:42:9d:a8:98:cb:c0: 4f:5f:a4:da:7b:1b:a4:16:25:51:c4:d8:60:bb:7f:f7:c6:dc: bd:14:a6:e0:9d:3e:9a:05:8e:4b:95:91:1d:81:cc:09:e2:45: 24:5e:d3:c0 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUG9mNJI0fTUleuyN5RUC2vEq74FMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOERBOEMwMjIxNkYwQzdENjI1RkVGQTdFRjY1OTAyMTQy NTkyMDQ0MjAeFw0yNTA2MjgwNjU2MzhaFw0yNTA3MDEwODUyMzhaMDMxMTAvBgNV BAMTKDI5MzBDMURBRDEzMEZFMDBFQTRDNTAwNzU4QzJCN0U0N0JBN0IwRDYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDJ7xpPu1sYE3Olb/sMWNoj6+8z HOxVFSRgLfsPaj7iuKqeKBR3iTDngYC+nDYPgHvibUgcYPuRCoz++LY55ARAbNVT /iy3sHOoX50QD2hmff8lcgvVyh5sidTF67uTMSYQ1JhTMxoREugVnOAavMtHMjv8 yxmNFoBoB2LybJpubY/o6nUyD5SFAn72+cFcawPInMUHptKBAd8KukkC1DGoq0yR SdG9sBEZMVHzxIRX1PGX+v6zPBF/VplPhu4luzLqfv49BU3A9gKPa7C7KRH9VJQG rBAOBIWLQxqLjSjsqIcdSzZqc1u8PltVi+KS8Q4FFBfdOx3rMF/NAgcPkDm3AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUKTDB2tEw/gDqTFAHWMK35HunsNYwHwYDVR0j BBgwFoAUjajAIhbwx9Yl/vp+9lkCFCWSBEIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z Yzg2Y2I1ZC1mMDdkLTQyNmEtOGU1ZS1hNzdhOTc4ZGQyZWUvMC84REE4QzAyMjE2 RjBDN0Q2MjVGRUZBN0VGNjU5MDIxNDI1OTIwNDQyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOERBOEMwMjIxNkYwQzdENjI1RkVGQTdFRjY1OTAyMTQyNTky MDQ0Mi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vM2M4NmNiNWQtZjA3ZC00MjZhLThl NWUtYTc3YTk3OGRkMmVlLzAvOERBOEMwMjIxNkYwQzdENjI1RkVGQTdFRjY1OTAy MTQyNTkyMDQ0Mi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGQ+FaFlaleiKPjEpvfJ2CEC0SIn1iDg5Yql JsqPXm+B72qMon8gtOE/z0wpY1SwW75kPOCbPLaG88Esn2Tnd0jKUX0DMMFliwZ6 xNw3lfNS6i0pRgkJ5yABgvyT0xBUutuPuSIvzluC5WmYE+BHZ76BlNtb3UPR6bMM KpIz9Th5NSWSJJxWtz+anUNdlZ4pcn+VzuLIxxLPJ/44wJsSxRmtK1j/F4Txt/Mt lMYccZzNldOYmm1vTCzTWoGPzvhDyOT0em2O/isX3IQGMzEiMSlXsUKdqJjLwE9f pNp7G6QWJVHE2GC7f/fG3L0UpuCdPpoFjkuVkR2BzAniRSRe08A= -----END CERTIFICATE-----Generated at Sun Jun 29 18:47:29 2025 by rpki-client