$ rpki-client -vvf repo-rpki.idnic.net/repo/643db7d2-b3fd-4214-b6a4-d0162f95e72e/0/8714172B5D3FC9C36A83EBA27AB946FC69A4F821.mft File: 8714172B5D3FC9C36A83EBA27AB946FC69A4F821.mft (raw, json) Hash identifier: sv9UBg97/YR/4zK2tsSw+7NnPJ5qOKwd7PAyXdQuThA= Subject key identifier: D0:42:43:50:AF:29:52:64:0C:7D:3C:FB:BF:02:E4:69:1B:7B:FB:0C Authority key identifier: 87:14:17:2B:5D:3F:C9:C3:6A:83:EB:A2:7A:B9:46:FC:69:A4:F8:21 Certificate issuer: /CN=8714172B5D3FC9C36A83EBA27AB946FC69A4F821 Certificate serial: 605324E07168D61B5246EB18A6A94634C8BE72E8 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8714172B5D3FC9C36A83EBA27AB946FC69A4F821.cer Subject info access: rsync://repo-rpki.idnic.net/repo/643db7d2-b3fd-4214-b6a4-d0162f95e72e/0/8714172B5D3FC9C36A83EBA27AB946FC69A4F821.mft Manifest number: 01D1 Signing time: Mon 30 Jun 2025 03:52:17 +0000 Manifest this update: Mon 30 Jun 2025 03:47:17 +0000 Manifest next update: Thu 03 Jul 2025 06:57:17 +0000 Files and hashes: 1: 3130332e32302e31362e302f32342d3234203d3e20313439393633.roa (hash: zDyrXTGOoVhoyVXFQzLfzvSBhhtitp+cvr9nrYj9PZk=) 2: 8714172B5D3FC9C36A83EBA27AB946FC69A4F821.crl (hash: 6effVV0xvpMlvGvmHYg5YZ04k44XAXFzR5zd6YZ7Q64=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/643db7d2-b3fd-4214-b6a4-d0162f95e72e/0/8714172B5D3FC9C36A83EBA27AB946FC69A4F821.crl rsync://repo-rpki.idnic.net/repo/643db7d2-b3fd-4214-b6a4-d0162f95e72e/0/8714172B5D3FC9C36A83EBA27AB946FC69A4F821.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8714172B5D3FC9C36A83EBA27AB946FC69A4F821.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 03 Jul 2025 06:57:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 60:53:24:e0:71:68:d6:1b:52:46:eb:18:a6:a9:46:34:c8:be:72:e8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8714172B5D3FC9C36A83EBA27AB946FC69A4F821 Validity Not Before: Jun 30 03:47:17 2025 GMT Not After : Jul 3 06:57:17 2025 GMT Subject: CN=D0424350AF2952640C7D3CFBBF02E4691B7BFB0C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f9:d0:14:ac:71:fd:85:23:f2:f6:e7:da:b5:b5: 76:7f:b4:fb:ef:8c:22:19:53:24:77:d0:be:f4:9a: 18:77:51:da:a9:28:66:21:52:88:7e:fb:38:0f:d6: 01:8f:44:e8:eb:8c:8a:0b:09:b1:f5:4f:80:10:dd: 52:92:81:96:fe:a4:c9:b8:c2:e6:84:7c:90:26:59: 1e:d4:f2:3d:93:37:5d:ff:e1:ad:88:73:23:ac:a8: 20:13:f0:64:3c:ce:f2:d9:df:f7:41:67:e3:cb:4c: eb:5b:a5:a5:26:85:45:3a:68:18:66:ed:80:02:67: 0b:66:b0:c2:c0:0f:41:bd:7d:14:3b:7f:f2:30:ca: 07:e0:d2:46:6f:7c:ab:6f:39:7e:6f:ef:86:6b:b4: 82:1b:29:7e:93:b6:5a:35:d2:5e:70:72:d1:b5:77: fe:38:40:47:03:68:10:11:f4:2e:25:3d:fd:7b:28: f0:76:d6:9c:67:88:54:d2:4d:09:89:1e:67:19:7e: 35:ab:08:a5:cf:70:4e:b6:9f:5b:36:ac:db:9e:ae: d6:69:4b:be:5b:0a:7b:76:1f:70:18:4f:3f:3c:03: 4e:0f:10:36:c3:1d:1b:3c:17:ea:d9:7b:36:83:25: 2f:ba:bf:6b:a0:00:51:b0:c6:fe:db:15:7e:28:54: 7e:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D0:42:43:50:AF:29:52:64:0C:7D:3C:FB:BF:02:E4:69:1B:7B:FB:0C X509v3 Authority Key Identifier: keyid:87:14:17:2B:5D:3F:C9:C3:6A:83:EB:A2:7A:B9:46:FC:69:A4:F8:21 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/643db7d2-b3fd-4214-b6a4-d0162f95e72e/0/8714172B5D3FC9C36A83EBA27AB946FC69A4F821.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8714172B5D3FC9C36A83EBA27AB946FC69A4F821.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/643db7d2-b3fd-4214-b6a4-d0162f95e72e/0/8714172B5D3FC9C36A83EBA27AB946FC69A4F821.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 38:b7:0c:76:a5:6d:5e:03:35:9b:83:74:78:1a:c9:9e:22:c4: 21:74:98:ff:b0:c8:be:39:3a:ba:07:26:fb:27:ae:20:12:32: 22:23:ee:44:ee:bc:58:db:a9:73:44:0a:d1:fa:c0:45:98:49: f4:66:0f:58:65:ae:93:f2:6d:7a:85:da:b8:74:51:d8:ef:49: f0:3e:f6:cd:aa:7a:da:25:f1:af:4e:5b:30:ce:24:45:79:cc: b0:29:a6:b4:92:11:ff:2b:9a:af:3f:c9:ee:39:8a:dd:73:86: 1f:ca:58:58:5f:85:a4:ad:0c:56:5a:c5:b4:6a:66:e2:c5:90: bc:2a:54:bf:f9:2f:35:2d:10:9d:93:27:e0:5a:34:ec:38:ea: 71:1e:00:6c:97:16:e9:7f:f7:81:43:43:0b:f5:d7:8a:f3:9a: 38:0e:22:f2:b3:e6:51:b0:52:b7:13:68:60:7f:3f:75:e8:61: 68:20:b8:ae:d6:65:20:b5:a5:94:86:d1:d2:d5:f6:0a:b9:f3: 36:d5:c0:f0:7a:7a:03:df:c0:d5:a8:80:f4:ec:53:26:80:40: 36:4b:9f:55:45:e1:0c:57:2e:b9:dd:b7:16:79:46:f9:d9:b4: d6:9d:7b:04:93:92:97:19:8e:e3:5d:83:d3:ff:5b:dc:41:57: 01:6c:bd:44 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUYFMk4HFo1htSRusYpqlGNMi+cugwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODcxNDE3MkI1RDNGQzlDMzZBODNFQkEyN0FCOTQ2RkM2 OUE0RjgyMTAeFw0yNTA2MzAwMzQ3MTdaFw0yNTA3MDMwNjU3MTdaMDMxMTAvBgNV BAMTKEQwNDI0MzUwQUYyOTUyNjQwQzdEM0NGQkJGMDJFNDY5MUI3QkZCMEMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD50BSscf2FI/L259q1tXZ/tPvv jCIZUyR30L70mhh3UdqpKGYhUoh++zgP1gGPROjrjIoLCbH1T4AQ3VKSgZb+pMm4 wuaEfJAmWR7U8j2TN13/4a2IcyOsqCAT8GQ8zvLZ3/dBZ+PLTOtbpaUmhUU6aBhm 7YACZwtmsMLAD0G9fRQ7f/Iwygfg0kZvfKtvOX5v74ZrtIIbKX6Ttlo10l5wctG1 d/44QEcDaBAR9C4lPf17KPB21pxniFTSTQmJHmcZfjWrCKXPcE62n1s2rNuertZp S75bCnt2H3AYTz88A04PEDbDHRs8F+rZezaDJS+6v2ugAFGwxv7bFX4oVH5xAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU0EJDUK8pUmQMfTz7vwLkaRt7+wwwHwYDVR0j BBgwFoAUhxQXK10/ycNqg+uierlG/Gmk+CEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 NDNkYjdkMi1iM2ZkLTQyMTQtYjZhNC1kMDE2MmY5NWU3MmUvMC84NzE0MTcyQjVE M0ZDOUMzNkE4M0VCQTI3QUI5NDZGQzY5QTRGODIxLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvODcxNDE3MkI1RDNGQzlDMzZBODNFQkEyN0FCOTQ2RkM2OUE0 RjgyMS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNjQzZGI3ZDItYjNmZC00MjE0LWI2 YTQtZDAxNjJmOTVlNzJlLzAvODcxNDE3MkI1RDNGQzlDMzZBODNFQkEyN0FCOTQ2 RkM2OUE0RjgyMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADi3DHalbV4DNZuDdHgayZ4ixCF0mP+wyL45 OroHJvsnriASMiIj7kTuvFjbqXNECtH6wEWYSfRmD1hlrpPybXqF2rh0UdjvSfA+ 9s2qetol8a9OWzDOJEV5zLApprSSEf8rmq8/ye45it1zhh/KWFhfhaStDFZaxbRq ZuLFkLwqVL/5LzUtEJ2TJ+BaNOw46nEeAGyXFul/94FDQwv114rzmjgOIvKz5lGw UrcTaGB/P3XoYWgguK7WZSC1pZSG0dLV9gq58zbVwPB6egPfwNWogPTsUyaAQDZL n1VF4QxXLrndtxZ5RvnZtNadewSTkpcZjuNdg9P/W9xBVwFsvUQ= -----END CERTIFICATE-----Generated at Mon Jun 30 11:02:51 2025 by rpki-client