$ rpki-client -vvf repo-rpki.idnic.net/repo/5e6c2a91-6afc-4767-bbc1-750613264585/0/8BF02D8172D4CA8A00A9EE2EB8CC099F0727F1CB.mft File: 8BF02D8172D4CA8A00A9EE2EB8CC099F0727F1CB.mft (raw, json) Hash identifier: iLnMto/C8ngsminmRRJ9QE5Mr7DI0mDyt/ZW+C+Dye4= Subject key identifier: D3:03:73:E2:3B:C0:A4:CC:E8:C8:E8:AB:BD:F5:8C:48:37:D7:6B:4C Authority key identifier: 8B:F0:2D:81:72:D4:CA:8A:00:A9:EE:2E:B8:CC:09:9F:07:27:F1:CB Certificate issuer: /CN=8BF02D8172D4CA8A00A9EE2EB8CC099F0727F1CB Certificate serial: 3F9831B1C70FC7DD464A72A538A9382C0D2543F9 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8BF02D8172D4CA8A00A9EE2EB8CC099F0727F1CB.cer Subject info access: rsync://repo-rpki.idnic.net/repo/5e6c2a91-6afc-4767-bbc1-750613264585/0/8BF02D8172D4CA8A00A9EE2EB8CC099F0727F1CB.mft Manifest number: 01E2 Signing time: Fri 27 Jun 2025 11:53:25 +0000 Manifest this update: Fri 27 Jun 2025 11:48:25 +0000 Manifest next update: Mon 30 Jun 2025 19:30:25 +0000 Files and hashes: 1: 8BF02D8172D4CA8A00A9EE2EB8CC099F0727F1CB.crl (hash: L4vPsnRnmw5ncnmt+Ap/keaIC1tobDkawcXVy+ezHsQ=) 2: 3130332e3133352e342e302f32322d3234203d3e203338333230.roa (hash: 8BpU0pm5UxOt5Z/5pCKxKlre5ZOR7m9ogADS2QXiNkA=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/5e6c2a91-6afc-4767-bbc1-750613264585/0/8BF02D8172D4CA8A00A9EE2EB8CC099F0727F1CB.crl rsync://repo-rpki.idnic.net/repo/5e6c2a91-6afc-4767-bbc1-750613264585/0/8BF02D8172D4CA8A00A9EE2EB8CC099F0727F1CB.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8BF02D8172D4CA8A00A9EE2EB8CC099F0727F1CB.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 30 Jun 2025 19:30:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3f:98:31:b1:c7:0f:c7:dd:46:4a:72:a5:38:a9:38:2c:0d:25:43:f9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8BF02D8172D4CA8A00A9EE2EB8CC099F0727F1CB Validity Not Before: Jun 27 11:48:25 2025 GMT Not After : Jun 30 19:30:25 2025 GMT Subject: CN=D30373E23BC0A4CCE8C8E8ABBDF58C4837D76B4C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:fa:0b:dc:08:80:72:1f:0e:0c:5a:2d:7a:47: 5e:b6:ec:f9:1d:8a:11:27:aa:86:a0:10:4b:92:47: bc:68:1e:aa:2d:61:1c:5b:4d:dd:6f:68:9c:80:4d: 6f:df:0a:75:0f:ed:4e:70:b9:11:cb:e6:4c:5b:d0: 75:08:43:92:d5:b4:bb:b3:61:17:b6:44:ad:c0:35: 4c:da:ac:60:6d:26:28:47:3f:5b:64:e4:b9:c2:8c: 17:5c:e7:7b:aa:65:57:f0:2e:b1:3a:85:1b:fb:93: 76:21:96:c5:6a:60:17:49:0c:51:c6:b3:3c:ea:7d: 47:ac:fd:e7:89:26:f5:fc:ad:a8:d5:4d:47:a7:e0: 9d:40:42:34:89:c3:c4:e2:22:49:cf:e8:ba:42:16: 44:dc:19:1a:0e:cf:eb:65:be:24:4f:60:33:99:62: c6:0b:62:7f:8a:28:54:c4:b0:2c:84:4e:9b:a4:0a: d1:32:73:15:17:fd:dc:a6:a5:f8:78:7d:c6:a8:fd: 17:9f:4e:23:15:00:6f:0d:7c:26:51:f5:ce:fb:f7: 8f:0b:66:a6:db:fc:0c:b3:37:8d:4f:81:63:dd:58: 06:7d:5e:34:fe:2b:08:60:fa:c8:29:6e:04:27:b2: 93:36:65:0f:e5:e0:c5:4c:f8:12:ef:20:12:22:c8: 16:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:03:73:E2:3B:C0:A4:CC:E8:C8:E8:AB:BD:F5:8C:48:37:D7:6B:4C X509v3 Authority Key Identifier: keyid:8B:F0:2D:81:72:D4:CA:8A:00:A9:EE:2E:B8:CC:09:9F:07:27:F1:CB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/5e6c2a91-6afc-4767-bbc1-750613264585/0/8BF02D8172D4CA8A00A9EE2EB8CC099F0727F1CB.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8BF02D8172D4CA8A00A9EE2EB8CC099F0727F1CB.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/5e6c2a91-6afc-4767-bbc1-750613264585/0/8BF02D8172D4CA8A00A9EE2EB8CC099F0727F1CB.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 70:44:17:5c:11:a2:a8:8f:5d:6a:78:a3:dd:91:35:ff:2d:40: d2:f5:09:96:4c:3c:41:db:60:dd:ab:e9:77:36:68:c0:89:fa: f8:d0:8e:01:8b:70:a6:08:e1:85:6d:a2:c6:08:b6:38:51:35: a9:5a:13:17:42:72:17:bc:38:bb:a2:33:6a:8b:71:3a:46:5d: a3:a6:83:cd:44:d3:5a:c5:44:b8:5e:bb:7a:9d:90:4a:1b:1c: b3:3c:15:75:d8:93:ad:fd:23:6e:fc:3e:56:27:be:c1:4c:06: 83:55:8c:c2:e1:ce:97:9e:29:63:d4:ef:61:90:cc:ed:50:23: cc:01:b7:46:2d:02:a1:b0:46:cb:af:b7:d9:d2:d7:11:3c:43: 3a:14:0f:3c:33:94:d1:41:72:98:2f:4e:d7:57:77:a5:02:89: ed:24:26:d8:e1:95:c1:61:0c:38:e6:7c:3f:2e:57:a2:54:4c: 82:92:56:cf:79:1a:5d:ab:29:89:d8:df:44:3e:80:3e:2e:6a: b7:cf:12:be:85:17:46:43:32:19:b7:72:1e:3d:5b:6b:b9:3c: 56:cb:dd:c8:c2:88:7e:fb:b5:f3:e1:77:33:fc:94:61:bf:4e: c8:f3:2d:2d:bc:20:1f:ac:c2:a5:93:b6:a6:54:f3:b8:cd:4a: 51:e5:be:c7 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUP5gxsccPx91GSnKlOKk4LA0lQ/kwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEJGMDJEODE3MkQ0Q0E4QTAwQTlFRTJFQjhDQzA5OUYw NzI3RjFDQjAeFw0yNTA2MjcxMTQ4MjVaFw0yNTA2MzAxOTMwMjVaMDMxMTAvBgNV BAMTKEQzMDM3M0UyM0JDMEE0Q0NFOEM4RThBQkJERjU4QzQ4MzdENzZCNEMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC5+gvcCIByHw4MWi16R1627Pkd ihEnqoagEEuSR7xoHqotYRxbTd1vaJyATW/fCnUP7U5wuRHL5kxb0HUIQ5LVtLuz YRe2RK3ANUzarGBtJihHP1tk5LnCjBdc53uqZVfwLrE6hRv7k3YhlsVqYBdJDFHG szzqfUes/eeJJvX8rajVTUen4J1AQjSJw8TiIknP6LpCFkTcGRoOz+tlviRPYDOZ YsYLYn+KKFTEsCyETpukCtEycxUX/dympfh4fcao/RefTiMVAG8NfCZR9c77948L Zqbb/AyzN41PgWPdWAZ9XjT+Kwhg+sgpbgQnspM2ZQ/l4MVM+BLvIBIiyBaXAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU0wNz4jvApMzoyOirvfWMSDfXa0wwHwYDVR0j BBgwFoAUi/AtgXLUyooAqe4uuMwJnwcn8cswDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 ZTZjMmE5MS02YWZjLTQ3NjctYmJjMS03NTA2MTMyNjQ1ODUvMC84QkYwMkQ4MTcy RDRDQThBMDBBOUVFMkVCOENDMDk5RjA3MjdGMUNCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOEJGMDJEODE3MkQ0Q0E4QTAwQTlFRTJFQjhDQzA5OUYwNzI3 RjFDQi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNWU2YzJhOTEtNmFmYy00NzY3LWJi YzEtNzUwNjEzMjY0NTg1LzAvOEJGMDJEODE3MkQ0Q0E4QTAwQTlFRTJFQjhDQzA5 OUYwNzI3RjFDQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHBEF1wRoqiPXWp4o92RNf8tQNL1CZZMPEHb YN2r6Xc2aMCJ+vjQjgGLcKYI4YVtosYItjhRNalaExdCche8OLuiM2qLcTpGXaOm g81E01rFRLheu3qdkEobHLM8FXXYk639I278PlYnvsFMBoNVjMLhzpeeKWPU72GQ zO1QI8wBt0YtAqGwRsuvt9nS1xE8QzoUDzwzlNFBcpgvTtdXd6UCie0kJtjhlcFh DDjmfD8uV6JUTIKSVs95Gl2rKYnY30Q+gD4uarfPEr6FF0ZDMhm3ch49W2u5PFbL 3cjCiH77tfPhdzP8lGG/TsjzLS28IB+swqWTtqZU87jNSlHlvsc= -----END CERTIFICATE-----Generated at Sun Jun 29 20:11:12 2025 by rpki-client