$ rpki-client -vvf repo-rpki.idnic.net/repo/44b27303-9e3d-4d42-af25-6a0f11808f27/0/8C888E996588527BC5EF8ABD293676C3463A1A22.mft File: 8C888E996588527BC5EF8ABD293676C3463A1A22.mft (raw, json) Hash identifier: b9D2x5jjCN/ZSQG7i55d3ZFPgebcBnX0x8PdPDofN5A= Subject key identifier: 27:64:B4:7C:FB:E7:53:A1:0F:2C:5C:E8:A5:A1:4B:A1:4D:01:40:29 Authority key identifier: 8C:88:8E:99:65:88:52:7B:C5:EF:8A:BD:29:36:76:C3:46:3A:1A:22 Certificate issuer: /CN=8C888E996588527BC5EF8ABD293676C3463A1A22 Certificate serial: 39A92C70CAA7A181641647D4D067D0DA7D123D11 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8C888E996588527BC5EF8ABD293676C3463A1A22.cer Subject info access: rsync://repo-rpki.idnic.net/repo/44b27303-9e3d-4d42-af25-6a0f11808f27/0/8C888E996588527BC5EF8ABD293676C3463A1A22.mft Manifest number: 0216 Signing time: Sat 28 Jun 2025 22:21:34 +0000 Manifest this update: Sat 28 Jun 2025 22:16:34 +0000 Manifest next update: Wed 02 Jul 2025 06:33:34 +0000 Files and hashes: 1: 8C888E996588527BC5EF8ABD293676C3463A1A22.crl (hash: 1aJ5BpvmLjRvbNc58mLRwIgRgrEjekQHdKGi5QrIcPI=) 2: 3130332e39372e342e302f32322d3234203d3e20313336313237.roa (hash: Fuo7Zv6Qy+uY4bdbE0UwMy6jWa9ZEF+DnD6ctpiueL4=) 3: 3130332e39372e342e302f32342d3234203d3e20313336313237.roa (hash: Jatff9pdbxHcTIoc61FwpQ4zDvedkS7YEGoxT4EFfu8=) 4: 3130332e39372e352e302f32342d3234203d3e20313336313237.roa (hash: cqTyGMrVXV3krfj6ahd0XiybL7qMxOankc/x3Ztfrtk=) 5: 3130332e39372e372e302f32342d3234203d3e20313336313237.roa (hash: JOk2hOEjt3VDU03LDOoQK88eKB9E+q6wdAJWayyHIwQ=) 6: 323430313a383034303a3a2f33322d3332203d3e20313336313237.roa (hash: ejjY61bhmlJl0lxMoyTYYJxk49QNB+St/BGfTNpwclI=) 7: 3130332e39372e362e302f32342d3234203d3e20313336313237.roa (hash: 953/1OAjNWabw3EekLLAXwzV4CYrLdUWpl5qPGTJpaU=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/44b27303-9e3d-4d42-af25-6a0f11808f27/0/8C888E996588527BC5EF8ABD293676C3463A1A22.crl rsync://repo-rpki.idnic.net/repo/44b27303-9e3d-4d42-af25-6a0f11808f27/0/8C888E996588527BC5EF8ABD293676C3463A1A22.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8C888E996588527BC5EF8ABD293676C3463A1A22.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 02 Jul 2025 06:33:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 39:a9:2c:70:ca:a7:a1:81:64:16:47:d4:d0:67:d0:da:7d:12:3d:11 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8C888E996588527BC5EF8ABD293676C3463A1A22 Validity Not Before: Jun 28 22:16:34 2025 GMT Not After : Jul 2 06:33:34 2025 GMT Subject: CN=2764B47CFBE753A10F2C5CE8A5A14BA14D014029 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:36:ad:f0:df:ba:e9:69:1f:c5:7c:15:c9:7c: 28:da:46:38:76:5b:b4:f2:fb:6c:9b:e1:db:20:b9: 3f:5b:46:00:c1:9b:4c:31:f0:57:a8:d9:99:33:3c: c8:9c:aa:9c:83:8b:e5:89:e4:e7:9f:82:a9:d8:7b: 68:fa:67:38:56:db:35:62:73:e9:70:88:81:d3:60: c4:f1:95:88:12:53:1d:6c:46:4a:c2:45:a8:35:07: 1d:06:a0:67:d6:d2:7d:39:c8:de:8f:05:f2:2f:14: f1:6e:04:41:2f:f9:27:5d:b1:5f:9e:ea:0c:3a:c4: cf:4f:c6:a5:90:31:4b:a7:f5:33:3f:f4:03:85:d5: 49:5d:c5:a1:97:78:64:c0:2e:12:f2:24:0b:d1:bf: ac:e7:29:d2:f9:fa:66:a6:d8:b9:4c:f3:55:12:6e: d3:64:73:d5:54:ff:a9:bd:f2:eb:97:b1:18:4d:ec: 95:11:55:34:82:63:a2:60:dd:0f:8a:6b:89:b1:7b: 9a:af:c8:e8:a2:82:8f:d3:36:5b:94:e8:7a:8a:87: 43:30:38:4c:47:33:78:78:d6:80:4c:32:10:4c:b3: bf:30:23:8b:88:88:c3:2e:54:10:83:16:9e:90:0e: 6b:64:25:b4:3f:5c:6d:9c:18:30:83:62:b4:e1:6b: f0:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 27:64:B4:7C:FB:E7:53:A1:0F:2C:5C:E8:A5:A1:4B:A1:4D:01:40:29 X509v3 Authority Key Identifier: keyid:8C:88:8E:99:65:88:52:7B:C5:EF:8A:BD:29:36:76:C3:46:3A:1A:22 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/44b27303-9e3d-4d42-af25-6a0f11808f27/0/8C888E996588527BC5EF8ABD293676C3463A1A22.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8C888E996588527BC5EF8ABD293676C3463A1A22.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/44b27303-9e3d-4d42-af25-6a0f11808f27/0/8C888E996588527BC5EF8ABD293676C3463A1A22.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b4:6a:b1:e3:cd:1e:11:71:e3:83:9d:86:b2:cf:df:11:e3:66: 1c:87:a0:db:0b:3c:2c:5c:c5:ae:ce:98:a5:73:ab:4f:9f:84: 0c:b4:65:06:dc:4b:a8:59:e1:b0:97:51:ec:d3:55:dc:2e:c1: 80:3c:5b:a9:17:da:37:56:ab:bc:1f:08:a7:91:fd:d8:97:e1: 27:43:da:ac:ce:63:57:24:f8:60:13:5d:c4:25:2f:b9:ef:35: 16:9a:77:f1:56:1f:e6:c5:92:23:06:80:dd:72:ba:11:4b:ba: 7a:bc:0d:6a:fc:56:eb:f7:6c:59:b3:1a:0e:0c:34:c1:37:7d: 41:73:70:d3:6a:32:c6:e3:34:f6:47:d4:9a:10:52:cc:ce:1f: af:60:68:b3:90:e6:d9:31:2f:10:fa:82:9b:2d:07:94:aa:fe: 54:21:8d:0b:dc:93:17:b3:a8:61:12:33:d7:e3:17:58:c9:d4: 17:58:da:6b:a6:19:1d:a4:87:27:0e:94:14:c6:fb:6d:46:21: 41:d4:51:29:37:e2:ba:34:ee:30:5e:c1:59:d1:f5:67:8a:76: 41:c1:91:8b:ef:c4:78:99:3e:71:07:47:64:65:11:bf:08:87: 61:08:49:5c:5b:2c:c9:38:a7:fa:b4:45:68:47:1c:d0:72:72: b7:25:d5:5c -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUOakscMqnoYFkFkfU0GfQ2n0SPREwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEM4ODhFOTk2NTg4NTI3QkM1RUY4QUJEMjkzNjc2QzM0 NjNBMUEyMjAeFw0yNTA2MjgyMjE2MzRaFw0yNTA3MDIwNjMzMzRaMDMxMTAvBgNV BAMTKDI3NjRCNDdDRkJFNzUzQTEwRjJDNUNFOEE1QTE0QkExNEQwMTQwMjkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+Nq3w37rpaR/FfBXJfCjaRjh2 W7Ty+2yb4dsguT9bRgDBm0wx8Feo2ZkzPMicqpyDi+WJ5OefgqnYe2j6ZzhW2zVi c+lwiIHTYMTxlYgSUx1sRkrCRag1Bx0GoGfW0n05yN6PBfIvFPFuBEEv+SddsV+e 6gw6xM9PxqWQMUun9TM/9AOF1UldxaGXeGTALhLyJAvRv6znKdL5+mam2LlM81US btNkc9VU/6m98uuXsRhN7JURVTSCY6Jg3Q+Ka4mxe5qvyOiigo/TNluU6HqKh0Mw OExHM3h41oBMMhBMs78wI4uIiMMuVBCDFp6QDmtkJbQ/XG2cGDCDYrTha/DFAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUJ2S0fPvnU6EPLFzopaFLoU0BQCkwHwYDVR0j BBgwFoAUjIiOmWWIUnvF74q9KTZ2w0Y6GiIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 NGIyNzMwMy05ZTNkLTRkNDItYWYyNS02YTBmMTE4MDhmMjcvMC84Qzg4OEU5OTY1 ODg1MjdCQzVFRjhBQkQyOTM2NzZDMzQ2M0ExQTIyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOEM4ODhFOTk2NTg4NTI3QkM1RUY4QUJEMjkzNjc2QzM0NjNB MUEyMi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNDRiMjczMDMtOWUzZC00ZDQyLWFm MjUtNmEwZjExODA4ZjI3LzAvOEM4ODhFOTk2NTg4NTI3QkM1RUY4QUJEMjkzNjc2 QzM0NjNBMUEyMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALRqsePNHhFx44OdhrLP3xHjZhyHoNsLPCxc xa7OmKVzq0+fhAy0ZQbcS6hZ4bCXUezTVdwuwYA8W6kX2jdWq7wfCKeR/diX4SdD 2qzOY1ck+GATXcQlL7nvNRaad/FWH+bFkiMGgN1yuhFLunq8DWr8Vuv3bFmzGg4M NME3fUFzcNNqMsbjNPZH1JoQUszOH69gaLOQ5tkxLxD6gpstB5Sq/lQhjQvckxez qGESM9fjF1jJ1BdY2mumGR2khycOlBTG+21GIUHUUSk34ro07jBewVnR9WeKdkHB kYvvxHiZPnEHR2RlEb8Ih2EISVxbLMk4p/q0RWhHHNBycrcl1Vw= -----END CERTIFICATE-----Generated at Sun Jun 29 18:54:45 2025 by rpki-client