$ rpki-client -vvf repo-rpki.idnic.net/repo/5252ead3-dc8f-4d86-afcf-a140e5b87532/0/8CFB227DA1EF51DB23364BBA034D0F68A09A5F59.mft File: 8CFB227DA1EF51DB23364BBA034D0F68A09A5F59.mft (raw, json) Hash identifier: uUi+U/cgTDF9NwBGN4MYQrZMu3pxbPNyvDipg1BRs/Y= Subject key identifier: EB:28:9E:9D:B4:F4:83:B1:5C:81:E2:C5:B4:31:37:A0:05:B2:CB:5B Authority key identifier: 8C:FB:22:7D:A1:EF:51:DB:23:36:4B:BA:03:4D:0F:68:A0:9A:5F:59 Certificate issuer: /CN=8CFB227DA1EF51DB23364BBA034D0F68A09A5F59 Certificate serial: 48BB1A1E554A3B75D475536ECCD149719A131249 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8CFB227DA1EF51DB23364BBA034D0F68A09A5F59.cer Subject info access: rsync://repo-rpki.idnic.net/repo/5252ead3-dc8f-4d86-afcf-a140e5b87532/0/8CFB227DA1EF51DB23364BBA034D0F68A09A5F59.mft Manifest number: 0205 Signing time: Sun 29 Jun 2025 22:41:31 +0000 Manifest this update: Sun 29 Jun 2025 22:36:31 +0000 Manifest next update: Thu 03 Jul 2025 00:39:31 +0000 Files and hashes: 1: 8CFB227DA1EF51DB23364BBA034D0F68A09A5F59.crl (hash: bKrru7BlTUjZW4PS+RrK/VAi7fG2enC1CGWGwvFzz5c=) 2: 3130332e3138362e3139342e302f32342d3234203d3e20313439373132.roa (hash: uzPIoUslKlL0kCJ3Mr8GlDHsPvFS4WU5l7ZsMhLtDsU=) 3: 3130332e3138362e3139342e302f32332d3233203d3e20313439373132.roa (hash: swBTOVyl/nQxFd9eqJx6PzMQ7ExSAWTFjV6g64/KqU0=) 4: 3130332e3138362e3139352e302f32342d3234203d3e203438343635.roa (hash: 9nS/psP6uP/NgK0GsDYJioeVISZGFYj6wNXBWyPXoig=) 5: 3130332e3138362e3139342e302f32332d3234203d3e20313439373132.roa (hash: S9MFaIq/j9TJ63dOJfnzWaZP6j2QyCQRqTU45iGYFSM=) 6: 3130332e3138362e3139342e302f32342d3234203d3e203438343635.roa (hash: nuw56AWJFQx7bF2mLso7Fp7ypapHW7bx18alMUZHm9U=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/5252ead3-dc8f-4d86-afcf-a140e5b87532/0/8CFB227DA1EF51DB23364BBA034D0F68A09A5F59.crl rsync://repo-rpki.idnic.net/repo/5252ead3-dc8f-4d86-afcf-a140e5b87532/0/8CFB227DA1EF51DB23364BBA034D0F68A09A5F59.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8CFB227DA1EF51DB23364BBA034D0F68A09A5F59.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 03 Jul 2025 00:39:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 48:bb:1a:1e:55:4a:3b:75:d4:75:53:6e:cc:d1:49:71:9a:13:12:49 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8CFB227DA1EF51DB23364BBA034D0F68A09A5F59 Validity Not Before: Jun 29 22:36:31 2025 GMT Not After : Jul 3 00:39:31 2025 GMT Subject: CN=EB289E9DB4F483B15C81E2C5B43137A005B2CB5B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:ce:0d:16:80:99:20:ce:fb:1b:f4:13:ea:88: b8:d2:dd:6d:4f:98:35:8f:ed:29:ed:b1:71:15:d2: 02:32:62:72:00:7c:b1:7e:c5:c3:1f:b0:3c:ed:64: 67:1d:99:74:92:e7:6d:ff:83:e5:64:e6:c9:ed:6f: 26:51:14:9e:5a:de:16:f4:91:a2:6e:71:0d:5d:75: f0:60:b3:dc:c6:d6:d9:5a:60:7e:a0:3c:e4:cc:c2: 10:4f:8a:f0:eb:ea:4a:f0:3a:bd:b9:fd:e6:99:f4: fc:0d:8b:8a:92:42:90:f7:40:db:b4:c8:d4:1a:98: ad:3f:83:a0:91:d8:c2:d7:ec:43:49:f4:d5:0b:72: 65:d7:dd:ad:c8:4c:7c:3e:88:f0:42:b6:19:3e:a5: c2:4f:23:0c:ec:47:ce:1e:b2:0d:e9:dd:bb:cf:41: 12:46:40:62:b6:6a:00:56:45:5a:f0:a6:ba:a8:61: b7:3b:90:96:30:d4:2e:91:ba:48:92:65:3c:c3:33: a7:72:73:e9:64:a8:a8:30:65:db:ef:fa:38:6f:09: e1:d1:19:96:e3:6e:df:0a:c8:3c:ad:7d:19:47:6a: 48:69:a2:aa:35:39:11:f8:bd:9c:f0:f7:00:d4:7b: c7:53:aa:2e:ad:a1:30:78:29:92:f3:01:15:3e:49: 35:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EB:28:9E:9D:B4:F4:83:B1:5C:81:E2:C5:B4:31:37:A0:05:B2:CB:5B X509v3 Authority Key Identifier: keyid:8C:FB:22:7D:A1:EF:51:DB:23:36:4B:BA:03:4D:0F:68:A0:9A:5F:59 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/5252ead3-dc8f-4d86-afcf-a140e5b87532/0/8CFB227DA1EF51DB23364BBA034D0F68A09A5F59.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8CFB227DA1EF51DB23364BBA034D0F68A09A5F59.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/5252ead3-dc8f-4d86-afcf-a140e5b87532/0/8CFB227DA1EF51DB23364BBA034D0F68A09A5F59.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 14:74:5e:d2:e1:98:3c:6e:4a:4e:85:4f:8d:46:9a:3f:0c:ad: cd:3c:b4:78:72:e1:09:be:d2:3b:83:9c:ed:36:aa:1c:ea:3b: 7e:a9:0d:23:1c:dc:fe:15:45:ec:69:70:0d:85:14:a5:0d:7d: 51:90:b8:e4:69:70:ea:f5:b2:7f:ea:03:98:f3:cd:11:ba:29: 2f:2c:6c:a2:16:99:14:31:3b:4b:40:2c:0f:bf:79:e2:4b:80: d1:af:75:b7:0b:71:67:91:d7:a1:45:f7:16:b6:74:a6:77:db: c9:27:2a:ea:9a:c3:34:33:54:3d:7b:e3:20:32:e2:c5:95:27: 9d:b9:d3:bd:3e:36:a9:d9:2f:b3:8a:64:79:da:f0:c2:85:34: 58:c1:79:4f:68:75:d9:88:d1:97:9d:97:5e:04:d2:89:58:e4: 45:5f:f8:19:c1:b1:69:5f:0a:39:dd:53:51:55:2f:d3:16:ba: af:a1:8b:b5:48:4f:d0:39:75:ae:2e:7e:68:dd:fe:ae:a2:32: fb:7b:1e:fd:f0:e3:ae:bf:98:04:f0:a4:9b:c4:0b:85:fe:8f: 40:88:9f:1b:c6:50:62:2f:52:3f:74:ce:1b:44:f2:f6:15:db: 9f:d3:6e:ce:5e:7f:0a:24:8f:df:2d:90:57:50:4d:97:6e:09: cb:3c:fe:dd -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUSLsaHlVKO3XUdVNuzNFJcZoTEkkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOENGQjIyN0RBMUVGNTFEQjIzMzY0QkJBMDM0RDBGNjhB MDlBNUY1OTAeFw0yNTA2MjkyMjM2MzFaFw0yNTA3MDMwMDM5MzFaMDMxMTAvBgNV BAMTKEVCMjg5RTlEQjRGNDgzQjE1QzgxRTJDNUI0MzEzN0EwMDVCMkNCNUIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCizg0WgJkgzvsb9BPqiLjS3W1P mDWP7SntsXEV0gIyYnIAfLF+xcMfsDztZGcdmXSS523/g+Vk5sntbyZRFJ5a3hb0 kaJucQ1ddfBgs9zG1tlaYH6gPOTMwhBPivDr6krwOr25/eaZ9PwNi4qSQpD3QNu0 yNQamK0/g6CR2MLX7ENJ9NULcmXX3a3ITHw+iPBCthk+pcJPIwzsR84esg3p3bvP QRJGQGK2agBWRVrwprqoYbc7kJYw1C6RukiSZTzDM6dyc+lkqKgwZdvv+jhvCeHR GZbjbt8KyDytfRlHakhpoqo1ORH4vZzw9wDUe8dTqi6toTB4KZLzARU+STXBAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU6yienbT0g7FcgeLFtDE3oAWyy1swHwYDVR0j BBgwFoAUjPsifaHvUdsjNku6A00PaKCaX1kwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 MjUyZWFkMy1kYzhmLTRkODYtYWZjZi1hMTQwZTViODc1MzIvMC84Q0ZCMjI3REEx RUY1MURCMjMzNjRCQkEwMzREMEY2OEEwOUE1RjU5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOENGQjIyN0RBMUVGNTFEQjIzMzY0QkJBMDM0RDBGNjhBMDlB NUY1OS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNTI1MmVhZDMtZGM4Zi00ZDg2LWFm Y2YtYTE0MGU1Yjg3NTMyLzAvOENGQjIyN0RBMUVGNTFEQjIzMzY0QkJBMDM0RDBG NjhBMDlBNUY1OS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABR0XtLhmDxuSk6FT41Gmj8Mrc08tHhy4Qm+ 0juDnO02qhzqO36pDSMc3P4VRexpcA2FFKUNfVGQuORpcOr1sn/qA5jzzRG6KS8s bKIWmRQxO0tALA+/eeJLgNGvdbcLcWeR16FF9xa2dKZ328knKuqawzQzVD174yAy 4sWVJ525070+NqnZL7OKZHna8MKFNFjBeU9oddmI0Zedl14E0olY5EVf+BnBsWlf CjndU1FVL9MWuq+hi7VIT9A5da4ufmjd/q6iMvt7Hv3w466/mATwpJvEC4X+j0CI nxvGUGIvUj90zhtE8vYV25/Tbs5efwokj98tkFdQTZduCcs8/t0= -----END CERTIFICATE-----Generated at Mon Jun 30 14:32:56 2025 by rpki-client