$ rpki-client -vvf repo-rpki.idnic.net/repo/7e8cbdc8-d195-4c7d-b3e8-0a8fbae8c284/0/8790EFE9518BF8664B34E1227585F3516FDC5367.mft File: 8790EFE9518BF8664B34E1227585F3516FDC5367.mft (raw, json) Hash identifier: cn6+GgVdBwT4rX+CqCV5wsfiNibW+3r8p6eZtnMQ+x4= Subject key identifier: 04:3B:DE:D4:4E:92:19:B2:AD:C6:26:57:FC:78:17:D8:B5:F6:3C:9F Authority key identifier: 87:90:EF:E9:51:8B:F8:66:4B:34:E1:22:75:85:F3:51:6F:DC:53:67 Certificate issuer: /CN=8790EFE9518BF8664B34E1227585F3516FDC5367 Certificate serial: 4EDBE110BA77F6F0DB99C389CFA84668C4B62B78 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8790EFE9518BF8664B34E1227585F3516FDC5367.cer Subject info access: rsync://repo-rpki.idnic.net/repo/7e8cbdc8-d195-4c7d-b3e8-0a8fbae8c284/0/8790EFE9518BF8664B34E1227585F3516FDC5367.mft Manifest number: 01E6 Signing time: Wed 02 Jul 2025 02:02:23 +0000 Manifest this update: Wed 02 Jul 2025 01:57:23 +0000 Manifest next update: Sat 05 Jul 2025 10:42:23 +0000 Files and hashes: 1: 3130332e3136362e39302e302f32332d3234203d3e20313431393431.roa (hash: u/DfRKi6okqGd/2PRwDyTkJXR+LfAGJBXiMbBVUigkU=) 2: 8790EFE9518BF8664B34E1227585F3516FDC5367.crl (hash: l21B9yxwAiiqbLKUKfah0Aswx69F9n65r4WvxRqi2ck=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/7e8cbdc8-d195-4c7d-b3e8-0a8fbae8c284/0/8790EFE9518BF8664B34E1227585F3516FDC5367.crl rsync://repo-rpki.idnic.net/repo/7e8cbdc8-d195-4c7d-b3e8-0a8fbae8c284/0/8790EFE9518BF8664B34E1227585F3516FDC5367.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8790EFE9518BF8664B34E1227585F3516FDC5367.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 05 Jul 2025 10:42:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4e:db:e1:10:ba:77:f6:f0:db:99:c3:89:cf:a8:46:68:c4:b6:2b:78 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8790EFE9518BF8664B34E1227585F3516FDC5367 Validity Not Before: Jul 2 01:57:23 2025 GMT Not After : Jul 5 10:42:23 2025 GMT Subject: CN=043BDED44E9219B2ADC62657FC7817D8B5F63C9F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:7b:97:96:3b:0a:af:84:94:ed:08:df:a0:e9: aa:7b:2f:c7:4b:04:1f:a8:eb:08:fc:8d:f0:bb:34: b0:84:ac:67:98:a7:af:02:ab:4f:0a:48:81:44:3b: 44:65:e7:83:dd:7a:32:63:3f:ff:c1:0e:a2:78:92: 4f:0f:b3:59:5d:7b:24:b8:22:81:af:7c:b4:8a:af: ab:3c:e9:1b:f3:36:07:1f:d5:f8:3e:0f:fb:c9:ef: 07:fb:39:d7:ff:21:09:f5:a5:2f:fd:b2:3b:b7:ee: 04:fe:cb:8d:8a:26:5f:50:ba:26:5d:23:c3:75:d1: ca:b8:b1:ef:8b:d8:06:5f:5f:41:94:bb:0d:19:b4: 78:e7:18:8b:82:4d:ab:1f:eb:56:22:6d:0d:75:bd: 4b:a3:c5:c4:43:57:cf:f2:bc:80:96:dd:bc:de:e3: 05:e6:79:e0:7b:6e:70:11:79:36:19:ca:b2:f8:a6: 51:cc:b7:88:17:cc:88:2f:83:b5:4d:cb:bc:45:8d: 5c:41:7c:b5:8b:9b:66:b1:80:e2:eb:c5:f8:4a:64: 9d:ef:3c:a8:0d:ae:f5:66:9e:14:4e:bc:4f:28:f1: 69:78:97:9e:72:fd:87:eb:38:bd:0b:d4:65:bf:fd: dd:dc:1f:ee:87:f3:2a:03:47:8b:98:50:0c:cf:d6: 80:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 04:3B:DE:D4:4E:92:19:B2:AD:C6:26:57:FC:78:17:D8:B5:F6:3C:9F X509v3 Authority Key Identifier: keyid:87:90:EF:E9:51:8B:F8:66:4B:34:E1:22:75:85:F3:51:6F:DC:53:67 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/7e8cbdc8-d195-4c7d-b3e8-0a8fbae8c284/0/8790EFE9518BF8664B34E1227585F3516FDC5367.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8790EFE9518BF8664B34E1227585F3516FDC5367.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/7e8cbdc8-d195-4c7d-b3e8-0a8fbae8c284/0/8790EFE9518BF8664B34E1227585F3516FDC5367.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 57:7e:9f:37:9c:fa:48:27:92:15:e6:62:33:1c:93:41:a0:b5: 90:7c:80:ea:11:28:be:81:e5:89:f5:a6:fc:13:66:8c:80:b7: c9:09:b2:3a:08:e8:28:19:19:18:b7:98:3e:cd:1b:f4:82:5f: a0:e3:75:fd:54:57:73:63:d1:14:00:c3:fc:a0:e3:c8:66:06: 8f:66:0d:3f:97:de:ad:bf:86:fe:ca:6d:da:bd:31:b1:db:b8: d9:78:24:3a:e3:89:71:98:0b:48:8a:9e:9c:93:ca:ac:b8:3b: a2:d3:2e:b3:f9:ea:50:66:cd:17:29:c9:33:1c:51:4b:36:40: 73:3e:70:13:96:4c:d4:ea:11:d5:1a:bf:dc:c3:4f:8e:f9:2d: d0:3a:e0:8f:ea:07:c6:b0:ef:f2:76:4f:64:71:a3:21:76:0b: aa:7f:aa:4e:71:af:9d:15:3e:d9:89:d1:60:17:91:93:e9:75: f0:d6:03:fe:7d:ae:9a:e1:c0:b2:c1:41:24:ae:e5:db:26:5e: d4:de:5b:bd:cd:1e:f7:1c:06:c1:e9:75:4d:b5:8f:3f:0d:11: d8:b9:ed:f6:09:61:28:7d:e2:bd:1d:4a:4b:6d:ad:c3:17:b2: c4:e4:92:4a:2a:a8:35:b9:bf:1d:ba:3e:9d:d8:45:3f:ac:64: 40:f1:95:ff -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUTtvhELp39vDbmcOJz6hGaMS2K3gwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODc5MEVGRTk1MThCRjg2NjRCMzRFMTIyNzU4NUYzNTE2 RkRDNTM2NzAeFw0yNTA3MDIwMTU3MjNaFw0yNTA3MDUxMDQyMjNaMDMxMTAvBgNV BAMTKDA0M0JERUQ0NEU5MjE5QjJBREM2MjY1N0ZDNzgxN0Q4QjVGNjNDOUYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCqe5eWOwqvhJTtCN+g6ap7L8dL BB+o6wj8jfC7NLCErGeYp68Cq08KSIFEO0Rl54PdejJjP//BDqJ4kk8Ps1ldeyS4 IoGvfLSKr6s86RvzNgcf1fg+D/vJ7wf7Odf/IQn1pS/9sju37gT+y42KJl9QuiZd I8N10cq4se+L2AZfX0GUuw0ZtHjnGIuCTasf61YibQ11vUujxcRDV8/yvICW3bze 4wXmeeB7bnAReTYZyrL4plHMt4gXzIgvg7VNy7xFjVxBfLWLm2axgOLrxfhKZJ3v PKgNrvVmnhROvE8o8Wl4l55y/YfrOL0L1GW//d3cH+6H8yoDR4uYUAzP1oADAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUBDve1E6SGbKtxiZX/HgX2LX2PJ8wHwYDVR0j BBgwFoAUh5Dv6VGL+GZLNOEidYXzUW/cU2cwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 ZThjYmRjOC1kMTk1LTRjN2QtYjNlOC0wYThmYmFlOGMyODQvMC84NzkwRUZFOTUx OEJGODY2NEIzNEUxMjI3NTg1RjM1MTZGREM1MzY3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvODc5MEVGRTk1MThCRjg2NjRCMzRFMTIyNzU4NUYzNTE2RkRD NTM2Ny5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vN2U4Y2JkYzgtZDE5NS00YzdkLWIz ZTgtMGE4ZmJhZThjMjg0LzAvODc5MEVGRTk1MThCRjg2NjRCMzRFMTIyNzU4NUYz NTE2RkRDNTM2Ny5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFd+nzec+kgnkhXmYjMck0GgtZB8gOoRKL6B 5Yn1pvwTZoyAt8kJsjoI6CgZGRi3mD7NG/SCX6Djdf1UV3Nj0RQAw/yg48hmBo9m DT+X3q2/hv7Kbdq9MbHbuNl4JDrjiXGYC0iKnpyTyqy4O6LTLrP56lBmzRcpyTMc UUs2QHM+cBOWTNTqEdUav9zDT475LdA64I/qB8aw7/J2T2RxoyF2C6p/qk5xr50V PtmJ0WAXkZPpdfDWA/59rprhwLLBQSSu5dsmXtTeW73NHvccBsHpdU21jz8NEdi5 7fYJYSh94r0dSkttrcMXssTkkkoqqDW5vx26Pp3YRT+sZEDxlf8= -----END CERTIFICATE-----Generated at Thu Jul 3 06:54:06 2025 by rpki-client