$ rpki-client -vvf repo-rpki.idnic.net/repo/696a74df-d907-4aaf-a836-43e4e1968525/0/8D956CF1DF56850C9CF6173DF90141A9C6A46868.mft File: 8D956CF1DF56850C9CF6173DF90141A9C6A46868.mft (raw, json) Hash identifier: k9iP31RgGBNIDIwhQ/rmg/KAhvODc3IMv/xl2sZKd7U= Subject key identifier: 81:DB:B6:52:71:83:A0:80:BD:B9:1A:95:B1:10:A5:7E:DD:E6:8D:9F Authority key identifier: 8D:95:6C:F1:DF:56:85:0C:9C:F6:17:3D:F9:01:41:A9:C6:A4:68:68 Certificate issuer: /CN=8D956CF1DF56850C9CF6173DF90141A9C6A46868 Certificate serial: 2ECEA4ACE88EEA6F278048B51D67E178600B71DF Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8D956CF1DF56850C9CF6173DF90141A9C6A46868.cer Subject info access: rsync://repo-rpki.idnic.net/repo/696a74df-d907-4aaf-a836-43e4e1968525/0/8D956CF1DF56850C9CF6173DF90141A9C6A46868.mft Manifest number: 01B7 Signing time: Sun 29 Jun 2025 19:02:06 +0000 Manifest this update: Sun 29 Jun 2025 18:57:06 +0000 Manifest next update: Wed 02 Jul 2025 21:21:06 +0000 Files and hashes: 1: 8D956CF1DF56850C9CF6173DF90141A9C6A46868.crl (hash: tI3zO0kyPBWrpubm2IJPhEfzhI7NQjLuXDrG6QPnm+M=) 2: 3130332e3135332e39372e302f32342d3234203d3e20313430343630.roa (hash: nKx2W2J5QqbAPLTUpYp/KQAECRR7E2z1uXn+5NBG7zs=) 3: 3130332e3135332e39362e302f32342d3234203d3e20313430343630.roa (hash: j2ooxEgwl+PYCxzVzg+BL2wikozzxYfw566b8wdA2jI=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/696a74df-d907-4aaf-a836-43e4e1968525/0/8D956CF1DF56850C9CF6173DF90141A9C6A46868.crl rsync://repo-rpki.idnic.net/repo/696a74df-d907-4aaf-a836-43e4e1968525/0/8D956CF1DF56850C9CF6173DF90141A9C6A46868.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8D956CF1DF56850C9CF6173DF90141A9C6A46868.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 02 Jul 2025 07:23:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2e:ce:a4:ac:e8:8e:ea:6f:27:80:48:b5:1d:67:e1:78:60:0b:71:df Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8D956CF1DF56850C9CF6173DF90141A9C6A46868 Validity Not Before: Jun 29 18:57:06 2025 GMT Not After : Jul 2 21:21:06 2025 GMT Subject: CN=81DBB6527183A080BDB91A95B110A57EDDE68D9F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:1e:e9:4a:b1:d8:44:c1:ad:e2:7b:67:a8:56: 3b:13:38:bc:91:0b:aa:27:02:e8:ba:1c:22:d3:23: 29:94:4a:17:fd:36:c9:c3:2c:2f:22:9b:71:5a:75: 39:4f:76:20:2d:78:65:cf:92:b6:a8:c2:92:cf:c2: 12:f0:74:83:27:32:f0:ab:b0:54:7e:a0:dc:aa:a9: 72:b4:81:9f:0c:e1:9c:dd:0c:24:d8:b1:f9:0e:f2: 56:ed:78:07:88:61:53:01:c9:e0:db:df:48:bb:92: 9f:d2:4d:be:70:7f:1c:23:5e:b1:e7:a1:76:c1:ff: a1:d7:30:04:a5:d8:70:5f:7d:8c:e4:df:16:d6:eb: 21:0f:17:dd:1c:32:7f:7f:b8:a8:18:7c:1a:0e:7f: d8:97:34:9d:77:10:e7:54:c1:73:89:d1:30:91:c1: e0:3f:b5:b5:82:b8:e1:7a:50:9a:ae:66:6d:6d:f8: 65:92:de:e1:12:a9:0d:f2:fc:3f:1b:91:cc:8c:61: a6:c7:26:35:b7:20:ad:80:8b:58:5c:f6:fe:a5:71: 2a:1c:7c:ac:ea:c2:aa:c2:54:d7:a5:88:97:68:1d: 1a:ca:76:be:93:1c:34:93:e5:86:a8:d3:00:0d:fd: 79:d4:03:af:b5:bd:10:a7:86:8f:38:77:8e:c7:9c: 85:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 81:DB:B6:52:71:83:A0:80:BD:B9:1A:95:B1:10:A5:7E:DD:E6:8D:9F X509v3 Authority Key Identifier: keyid:8D:95:6C:F1:DF:56:85:0C:9C:F6:17:3D:F9:01:41:A9:C6:A4:68:68 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/696a74df-d907-4aaf-a836-43e4e1968525/0/8D956CF1DF56850C9CF6173DF90141A9C6A46868.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8D956CF1DF56850C9CF6173DF90141A9C6A46868.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/696a74df-d907-4aaf-a836-43e4e1968525/0/8D956CF1DF56850C9CF6173DF90141A9C6A46868.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 39:ed:ec:c2:d0:a0:20:a5:0c:a7:aa:2e:ea:b3:95:5e:9c:a6: bb:04:36:90:5b:af:5b:3f:b2:ae:85:f1:dd:3f:ad:08:db:d4: c4:24:30:5e:c0:18:8d:4e:6c:ee:51:a4:d4:fe:c1:3d:0c:15: 2b:a1:1e:70:0a:b2:9f:d2:96:36:48:d6:81:29:96:df:13:d8: b4:74:d1:6a:69:d1:de:a5:e4:dc:a6:65:f3:20:61:6b:f2:96: be:4d:2d:a9:9f:52:34:19:70:09:88:f3:e2:d3:52:96:c2:06: f4:03:44:8b:14:33:08:bf:01:99:72:75:66:61:b5:4c:03:82: 02:9e:1c:45:17:e5:a8:27:2b:fd:97:2b:d5:fe:ce:10:eb:3a: c8:0c:6e:b5:85:c2:5b:eb:f2:0e:40:f6:cb:4b:ef:59:ed:e3: bc:35:79:34:32:af:2e:6e:0a:9f:52:20:b7:fb:60:0b:42:c9: 68:ca:a4:bf:49:5c:34:e7:49:e1:97:34:48:30:7d:bd:a4:5c: e1:66:29:09:3c:93:cf:0f:40:3c:7b:6d:56:ab:5a:ac:21:ce: e8:5c:53:d4:5b:2d:07:8c:5f:59:ea:54:b4:35:07:46:b5:8c: 70:80:59:fc:7e:b6:65:0a:da:b8:a6:9a:8c:52:10:69:6b:02: 9a:8c:24:ab -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIULs6krOiO6m8ngEi1HWfheGALcd8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEQ5NTZDRjFERjU2ODUwQzlDRjYxNzNERjkwMTQxQTlD NkE0Njg2ODAeFw0yNTA2MjkxODU3MDZaFw0yNTA3MDIyMTIxMDZaMDMxMTAvBgNV BAMTKDgxREJCNjUyNzE4M0EwODBCREI5MUE5NUIxMTBBNTdFRERFNjhEOUYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC3HulKsdhEwa3ie2eoVjsTOLyR C6onAui6HCLTIymUShf9NsnDLC8im3FadTlPdiAteGXPkraowpLPwhLwdIMnMvCr sFR+oNyqqXK0gZ8M4ZzdDCTYsfkO8lbteAeIYVMByeDb30i7kp/STb5wfxwjXrHn oXbB/6HXMASl2HBffYzk3xbW6yEPF90cMn9/uKgYfBoOf9iXNJ13EOdUwXOJ0TCR weA/tbWCuOF6UJquZm1t+GWS3uESqQ3y/D8bkcyMYabHJjW3IK2Ai1hc9v6lcSoc fKzqwqrCVNeliJdoHRrKdr6THDST5Yao0wAN/XnUA6+1vRCnho84d47HnIURAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUgdu2UnGDoIC9uRqVsRClft3mjZ8wHwYDVR0j BBgwFoAUjZVs8d9WhQyc9hc9+QFBqcakaGgwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 OTZhNzRkZi1kOTA3LTRhYWYtYTgzNi00M2U0ZTE5Njg1MjUvMC84RDk1NkNGMURG NTY4NTBDOUNGNjE3M0RGOTAxNDFBOUM2QTQ2ODY4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOEQ5NTZDRjFERjU2ODUwQzlDRjYxNzNERjkwMTQxQTlDNkE0 Njg2OC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNjk2YTc0ZGYtZDkwNy00YWFmLWE4 MzYtNDNlNGUxOTY4NTI1LzAvOEQ5NTZDRjFERjU2ODUwQzlDRjYxNzNERjkwMTQx QTlDNkE0Njg2OC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADnt7MLQoCClDKeqLuqzlV6cprsENpBbr1s/ sq6F8d0/rQjb1MQkMF7AGI1ObO5RpNT+wT0MFSuhHnAKsp/SljZI1oEplt8T2LR0 0Wpp0d6l5NymZfMgYWvylr5NLamfUjQZcAmI8+LTUpbCBvQDRIsUMwi/AZlydWZh tUwDggKeHEUX5agnK/2XK9X+zhDrOsgMbrWFwlvr8g5A9stL71nt47w1eTQyry5u Cp9SILf7YAtCyWjKpL9JXDTnSeGXNEgwfb2kXOFmKQk8k88PQDx7bVarWqwhzuhc U9RbLQeMX1nqVLQ1B0a1jHCAWfx+tmUK2rimmoxSEGlrApqMJKs= -----END CERTIFICATE-----Generated at Sun Jun 29 22:37:50 2025 by rpki-client