$ rpki-client -vvf repo-rpki.idnic.net/repo/6e9b0bad-66b9-4f28-a7c5-e9a9fe120ad7/0/8DAFDBD814B60F568505D65130E4661FCD7D665F.mft File: 8DAFDBD814B60F568505D65130E4661FCD7D665F.mft (raw, json) Hash identifier: 9GeGBa+sSvsSxBFSRhCo75RRYHpe/QHKRz1g6fVr9VU= Subject key identifier: A6:BF:05:4C:4E:1B:1A:D5:F4:2A:80:D9:32:41:AE:5D:DC:0F:27:F4 Authority key identifier: 8D:AF:DB:D8:14:B6:0F:56:85:05:D6:51:30:E4:66:1F:CD:7D:66:5F Certificate issuer: /CN=8DAFDBD814B60F568505D65130E4661FCD7D665F Certificate serial: 5B56FB727ADCC5F7D99C6EE3C5CECCBC902756A6 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8DAFDBD814B60F568505D65130E4661FCD7D665F.cer Subject info access: rsync://repo-rpki.idnic.net/repo/6e9b0bad-66b9-4f28-a7c5-e9a9fe120ad7/0/8DAFDBD814B60F568505D65130E4661FCD7D665F.mft Manifest number: 0213 Signing time: Sat 28 Jun 2025 04:11:49 +0000 Manifest this update: Sat 28 Jun 2025 04:06:49 +0000 Manifest next update: Tue 01 Jul 2025 06:57:49 +0000 Files and hashes: 1: 3130332e3136382e3139302e302f32342d3234203d3e20313432333139.roa (hash: /4nmgLfcCNw5dynQDZtGk4IBxc3BmveSB9gkF4R0RCk=) 2: 8DAFDBD814B60F568505D65130E4661FCD7D665F.crl (hash: sDZPFqKWu3serUTQoI3C/YvXA+i54MXT66BulmSD1wM=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/6e9b0bad-66b9-4f28-a7c5-e9a9fe120ad7/0/8DAFDBD814B60F568505D65130E4661FCD7D665F.crl rsync://repo-rpki.idnic.net/repo/6e9b0bad-66b9-4f28-a7c5-e9a9fe120ad7/0/8DAFDBD814B60F568505D65130E4661FCD7D665F.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8DAFDBD814B60F568505D65130E4661FCD7D665F.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 01 Jul 2025 06:57:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5b:56:fb:72:7a:dc:c5:f7:d9:9c:6e:e3:c5:ce:cc:bc:90:27:56:a6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8DAFDBD814B60F568505D65130E4661FCD7D665F Validity Not Before: Jun 28 04:06:49 2025 GMT Not After : Jul 1 06:57:49 2025 GMT Subject: CN=A6BF054C4E1B1AD5F42A80D93241AE5DDC0F27F4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:24:ef:62:1b:ed:65:40:9f:ea:dc:47:5b:fe: c7:59:00:4b:04:7f:1f:ba:11:61:e4:f0:62:00:24: 5d:59:8b:33:8e:a9:c0:e3:7a:9c:f3:49:dd:30:45: 02:79:66:19:9a:4e:27:09:07:7c:a3:e0:7a:7f:6e: fd:84:ed:8d:84:74:39:76:9c:62:00:02:b0:96:34: 5f:f7:fc:3d:6c:68:f2:4b:1d:ba:dc:8b:25:06:e3: 54:ed:62:97:cf:f1:88:d6:8a:53:da:3f:e7:75:dd: 0a:5d:bd:b6:84:b0:17:a5:78:30:37:23:41:0a:88: fb:f4:e8:65:61:0a:90:83:81:92:4d:3e:71:29:d8: 6c:ff:90:8c:58:17:9c:40:96:8f:a6:47:43:6b:6e: 14:9f:84:bb:b9:e5:f5:de:f3:1e:91:ef:47:cf:5d: 9d:82:4d:0b:ce:6d:c9:ad:41:69:9f:2a:b4:46:7c: c1:09:8b:f8:ef:93:17:8a:e5:e0:38:08:5d:02:84: 40:05:18:59:93:ab:b0:ed:f0:72:3d:a0:80:f4:d4: 6c:b2:4d:f2:7d:0e:32:2c:7a:97:f6:8e:03:c0:da: 22:02:ad:c8:8e:33:8e:e2:b3:09:e4:9e:85:3f:dd: 90:8a:f0:63:77:83:20:04:b1:cc:0a:0d:32:c1:23: 62:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A6:BF:05:4C:4E:1B:1A:D5:F4:2A:80:D9:32:41:AE:5D:DC:0F:27:F4 X509v3 Authority Key Identifier: keyid:8D:AF:DB:D8:14:B6:0F:56:85:05:D6:51:30:E4:66:1F:CD:7D:66:5F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/6e9b0bad-66b9-4f28-a7c5-e9a9fe120ad7/0/8DAFDBD814B60F568505D65130E4661FCD7D665F.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8DAFDBD814B60F568505D65130E4661FCD7D665F.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/6e9b0bad-66b9-4f28-a7c5-e9a9fe120ad7/0/8DAFDBD814B60F568505D65130E4661FCD7D665F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 78:83:0a:b1:b9:7d:7f:75:90:e5:c7:93:cd:ca:7c:ae:58:b1: e5:c0:bd:eb:35:2f:60:d5:94:dd:ba:69:e6:19:2c:8d:1b:84: 88:75:9f:56:56:a3:0f:e1:5d:84:c3:e0:8c:00:2c:91:ca:c0: 40:8f:8c:c8:1b:19:98:89:1d:48:42:55:7b:78:5f:dd:a8:af: 89:c7:0d:db:1a:34:bf:2e:3a:a8:f2:19:f1:b5:e4:0f:7a:ec: e8:64:cc:19:e9:ff:3d:d9:8c:04:aa:7d:18:ac:10:b7:70:0d: 90:ab:60:c2:c3:4a:57:9e:f0:ea:a5:07:c9:ac:c1:bd:c9:5a: 59:71:dd:80:cf:65:f0:a2:fc:fb:67:c2:8f:4b:a1:07:3c:42: b8:b9:42:fa:d8:51:7d:db:50:db:7d:4e:5f:8a:3a:97:c5:88: 2c:9f:0c:77:37:6b:56:81:28:87:5b:58:ba:be:0c:84:44:1a: 49:41:32:74:b1:72:ca:68:15:c9:13:b1:6d:99:f9:6c:15:9e: 3f:4b:4e:4e:4b:07:6f:1d:7c:f9:cf:52:14:2c:19:aa:b2:41: f2:11:79:26:11:22:31:db:59:cd:dc:79:8f:d0:68:2a:31:13: d7:fc:35:69:8f:16:a2:f2:2d:d6:1a:c1:46:92:cd:a1:69:b2: 06:eb:af:5d -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUW1b7cnrcxffZnG7jxc7MvJAnVqYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOERBRkRCRDgxNEI2MEY1Njg1MDVENjUxMzBFNDY2MUZD RDdENjY1RjAeFw0yNTA2MjgwNDA2NDlaFw0yNTA3MDEwNjU3NDlaMDMxMTAvBgNV BAMTKEE2QkYwNTRDNEUxQjFBRDVGNDJBODBEOTMyNDFBRTVEREMwRjI3RjQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCqJO9iG+1lQJ/q3Edb/sdZAEsE fx+6EWHk8GIAJF1ZizOOqcDjepzzSd0wRQJ5ZhmaTicJB3yj4Hp/bv2E7Y2EdDl2 nGIAArCWNF/3/D1saPJLHbrciyUG41TtYpfP8YjWilPaP+d13QpdvbaEsBeleDA3 I0EKiPv06GVhCpCDgZJNPnEp2Gz/kIxYF5xAlo+mR0NrbhSfhLu55fXe8x6R70fP XZ2CTQvObcmtQWmfKrRGfMEJi/jvkxeK5eA4CF0ChEAFGFmTq7Dt8HI9oID01Gyy TfJ9DjIsepf2jgPA2iICrciOM47iswnknoU/3ZCK8GN3gyAEscwKDTLBI2J/AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUpr8FTE4bGtX0KoDZMkGuXdwPJ/QwHwYDVR0j BBgwFoAUja/b2BS2D1aFBdZRMORmH819Zl8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 ZTliMGJhZC02NmI5LTRmMjgtYTdjNS1lOWE5ZmUxMjBhZDcvMC84REFGREJEODE0 QjYwRjU2ODUwNUQ2NTEzMEU0NjYxRkNEN0Q2NjVGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOERBRkRCRDgxNEI2MEY1Njg1MDVENjUxMzBFNDY2MUZDRDdE NjY1Ri5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNmU5YjBiYWQtNjZiOS00ZjI4LWE3 YzUtZTlhOWZlMTIwYWQ3LzAvOERBRkRCRDgxNEI2MEY1Njg1MDVENjUxMzBFNDY2 MUZDRDdENjY1Ri5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHiDCrG5fX91kOXHk83KfK5YseXAves1L2DV lN26aeYZLI0bhIh1n1ZWow/hXYTD4IwALJHKwECPjMgbGZiJHUhCVXt4X92or4nH DdsaNL8uOqjyGfG15A967OhkzBnp/z3ZjASqfRisELdwDZCrYMLDSlee8OqlB8ms wb3JWllx3YDPZfCi/Ptnwo9LoQc8Qri5QvrYUX3bUNt9Tl+KOpfFiCyfDHc3a1aB KIdbWLq+DIREGklBMnSxcspoFckTsW2Z+WwVnj9LTk5LB28dfPnPUhQsGaqyQfIR eSYRIjHbWc3ceY/QaCoxE9f8NWmPFqLyLdYawUaSzaFpsgbrr10= -----END CERTIFICATE-----Generated at Mon Jun 30 07:28:01 2025 by rpki-client