$ rpki-client -vvf repo-rpki.idnic.net/repo/758db87b-16cd-437a-a5b5-08cb35da97f0/0/8CBCE2EE006256C9A6207949314A7D1FCC415B5A.mft File: 8CBCE2EE006256C9A6207949314A7D1FCC415B5A.mft (raw, json) Hash identifier: qeWmM7yejksrryqIhreZ2bVLz/5YLzgk1u2gc6m/JsI= Subject key identifier: B2:5E:9F:A5:B0:2D:E7:FD:21:CB:3B:01:78:5B:29:F3:80:16:9A:AB Authority key identifier: 8C:BC:E2:EE:00:62:56:C9:A6:20:79:49:31:4A:7D:1F:CC:41:5B:5A Certificate issuer: /CN=8CBCE2EE006256C9A6207949314A7D1FCC415B5A Certificate serial: 104A4E6280F3ED9BFD688F5E9F283DCC5C87BD77 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8CBCE2EE006256C9A6207949314A7D1FCC415B5A.cer Subject info access: rsync://repo-rpki.idnic.net/repo/758db87b-16cd-437a-a5b5-08cb35da97f0/0/8CBCE2EE006256C9A6207949314A7D1FCC415B5A.mft Manifest number: 01F4 Signing time: Sun 29 Jun 2025 08:11:29 +0000 Manifest this update: Sun 29 Jun 2025 08:06:29 +0000 Manifest next update: Wed 02 Jul 2025 20:01:29 +0000 Files and hashes: 1: 3130332e3138372e3131322e302f32332d3234203d3e20313439373230.roa (hash: tJd9lCwOT2E5aUEAYGLVk9Vox9W7mUTKc82A3hANFMo=) 2: 8CBCE2EE006256C9A6207949314A7D1FCC415B5A.crl (hash: yI53vpHfce9XICXbrFy3tPA98Hs+oCDbUGZmH1+erMU=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/758db87b-16cd-437a-a5b5-08cb35da97f0/0/8CBCE2EE006256C9A6207949314A7D1FCC415B5A.crl rsync://repo-rpki.idnic.net/repo/758db87b-16cd-437a-a5b5-08cb35da97f0/0/8CBCE2EE006256C9A6207949314A7D1FCC415B5A.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8CBCE2EE006256C9A6207949314A7D1FCC415B5A.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 02 Jul 2025 07:23:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10:4a:4e:62:80:f3:ed:9b:fd:68:8f:5e:9f:28:3d:cc:5c:87:bd:77 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8CBCE2EE006256C9A6207949314A7D1FCC415B5A Validity Not Before: Jun 29 08:06:29 2025 GMT Not After : Jul 2 20:01:29 2025 GMT Subject: CN=B25E9FA5B02DE7FD21CB3B01785B29F380169AAB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:50:cb:43:de:69:91:d0:d6:cd:73:0a:32:53: d5:d1:c6:5a:14:52:ed:5a:1b:09:e9:a5:e8:91:49: 59:bf:1b:3d:45:ad:78:cf:a6:92:d8:84:fd:e4:7f: 6d:d9:2c:0d:6e:4f:c5:cf:3c:45:d2:5b:0c:2c:6b: c3:c8:9b:a4:c2:40:e0:89:9f:72:59:62:09:c0:59: 54:8c:c4:a5:15:00:f8:80:60:18:40:69:2a:d6:0c: 8b:0f:55:82:c8:13:81:07:58:1e:c7:3d:0f:50:de: df:c7:be:ae:db:e3:10:68:44:9f:00:8d:64:c2:08: ae:cf:e8:52:2c:a2:b7:f2:74:f6:be:a8:42:83:bc: da:4f:92:34:21:85:2f:db:70:ee:d6:da:34:da:35: 27:9e:4e:28:d0:99:4e:b4:0e:d2:ea:50:5f:fc:64: c5:91:92:ed:f1:a8:b4:4d:4c:8f:ad:ea:47:83:3d: 4c:77:29:e8:4c:48:3f:8c:da:bb:2e:95:f1:a2:0d: 00:2c:b2:64:39:dd:ac:99:0a:47:e8:fa:68:29:e9: d5:c8:1d:47:a5:96:15:18:4a:fe:00:c1:f7:1b:a2: 09:73:77:25:0f:01:79:52:79:b7:93:24:6b:46:74: bd:31:a8:b4:8f:13:0b:ee:98:c2:bc:80:7d:1f:af: bf:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B2:5E:9F:A5:B0:2D:E7:FD:21:CB:3B:01:78:5B:29:F3:80:16:9A:AB X509v3 Authority Key Identifier: keyid:8C:BC:E2:EE:00:62:56:C9:A6:20:79:49:31:4A:7D:1F:CC:41:5B:5A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/758db87b-16cd-437a-a5b5-08cb35da97f0/0/8CBCE2EE006256C9A6207949314A7D1FCC415B5A.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8CBCE2EE006256C9A6207949314A7D1FCC415B5A.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/758db87b-16cd-437a-a5b5-08cb35da97f0/0/8CBCE2EE006256C9A6207949314A7D1FCC415B5A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7b:82:ce:6f:96:41:f2:4f:45:16:b9:c7:63:80:02:bc:4b:78: 73:af:da:8a:40:2f:05:de:e7:7b:32:79:4b:66:8c:55:c8:af: 0d:a9:35:c6:97:f4:8d:0a:f7:97:5b:75:dd:52:fd:51:f5:45: 9d:26:3d:d0:45:82:ed:3e:a9:e2:3e:fb:1d:ef:dd:56:ea:ac: 41:13:0f:81:b9:b1:05:2b:80:0f:37:8a:a3:0f:e5:27:19:99: a7:0c:f7:6a:f0:6c:5b:6c:3e:2c:fc:9d:72:cc:1f:79:7c:89: bc:a8:de:09:95:09:d2:99:ae:e0:bf:50:6d:35:26:e4:4b:39: 6b:89:b8:5b:af:39:f9:59:5e:bd:14:6f:dc:f1:f3:b9:b1:06: eb:4a:7c:45:1e:7c:10:e4:3a:1d:93:8b:04:b4:2e:a8:22:65: 1b:22:3a:54:a6:3a:11:e2:96:dc:80:05:4a:06:f4:f5:a5:20: bb:fd:77:01:cc:25:43:90:ad:70:96:0c:47:89:1c:a5:bd:71: 97:3b:ff:fe:96:e4:36:2e:99:c7:60:d4:d3:ed:d8:30:3c:ff: ba:16:90:b2:9a:73:41:1a:a2:2d:48:c1:7d:7c:7a:f7:55:e8: e9:45:8a:3d:66:f8:e6:6e:26:b7:13:44:e1:46:14:53:1e:c7: 54:f7:50:c8 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUEEpOYoDz7Zv9aI9enyg9zFyHvXcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOENCQ0UyRUUwMDYyNTZDOUE2MjA3OTQ5MzE0QTdEMUZD QzQxNUI1QTAeFw0yNTA2MjkwODA2MjlaFw0yNTA3MDIyMDAxMjlaMDMxMTAvBgNV BAMTKEIyNUU5RkE1QjAyREU3RkQyMUNCM0IwMTc4NUIyOUYzODAxNjlBQUIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDDUMtD3mmR0NbNcwoyU9XRxloU Uu1aGwnppeiRSVm/Gz1FrXjPppLYhP3kf23ZLA1uT8XPPEXSWwwsa8PIm6TCQOCJ n3JZYgnAWVSMxKUVAPiAYBhAaSrWDIsPVYLIE4EHWB7HPQ9Q3t/Hvq7b4xBoRJ8A jWTCCK7P6FIsorfydPa+qEKDvNpPkjQhhS/bcO7W2jTaNSeeTijQmU60DtLqUF/8 ZMWRku3xqLRNTI+t6keDPUx3KehMSD+M2rsulfGiDQAssmQ53ayZCkfo+mgp6dXI HUellhUYSv4AwfcboglzdyUPAXlSebeTJGtGdL0xqLSPEwvumMK8gH0fr7/TAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUsl6fpbAt5/0hyzsBeFsp84AWmqswHwYDVR0j BBgwFoAUjLzi7gBiVsmmIHlJMUp9H8xBW1owDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 NThkYjg3Yi0xNmNkLTQzN2EtYTViNS0wOGNiMzVkYTk3ZjAvMC84Q0JDRTJFRTAw NjI1NkM5QTYyMDc5NDkzMTRBN0QxRkNDNDE1QjVBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOENCQ0UyRUUwMDYyNTZDOUE2MjA3OTQ5MzE0QTdEMUZDQzQx NUI1QS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNzU4ZGI4N2ItMTZjZC00MzdhLWE1 YjUtMDhjYjM1ZGE5N2YwLzAvOENCQ0UyRUUwMDYyNTZDOUE2MjA3OTQ5MzE0QTdE MUZDQzQxNUI1QS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHuCzm+WQfJPRRa5x2OAArxLeHOv2opALwXe 53syeUtmjFXIrw2pNcaX9I0K95dbdd1S/VH1RZ0mPdBFgu0+qeI++x3v3VbqrEET D4G5sQUrgA83iqMP5ScZmacM92rwbFtsPiz8nXLMH3l8ibyo3gmVCdKZruC/UG01 JuRLOWuJuFuvOflZXr0Ub9zx87mxButKfEUefBDkOh2TiwS0LqgiZRsiOlSmOhHi ltyABUoG9PWlILv9dwHMJUOQrXCWDEeJHKW9cZc7//6W5DYumcdg1NPt2DA8/7oW kLKac0Eaoi1IwX18evdV6OlFij1m+OZuJrcTROFGFFMex1T3UMg= -----END CERTIFICATE-----Generated at Sun Jun 29 18:08:46 2025 by rpki-client