$ rpki-client -vvf repo-rpki.idnic.net/repo/7f4b53d8-b2ff-4973-b1ac-6f85faeadbe5/0/B8D444C5B3184A4F8C8F199A432242C44E19EACB.mft File: B8D444C5B3184A4F8C8F199A432242C44E19EACB.mft (raw, json) Hash identifier: nhLyh9+bGeLv+KUO4j8LijUi1ak8k/8bXUr2rkWPcdo= Subject key identifier: FC:3C:FA:E8:2C:C5:6F:1C:FD:62:25:58:79:62:95:07:34:F4:6C:8E Authority key identifier: B8:D4:44:C5:B3:18:4A:4F:8C:8F:19:9A:43:22:42:C4:4E:19:EA:CB Certificate issuer: /CN=B8D444C5B3184A4F8C8F199A432242C44E19EACB Certificate serial: 4FAE407BEE1D7A5A2BEA7BC044557CA492FED6D3 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/B8D444C5B3184A4F8C8F199A432242C44E19EACB.cer Subject info access: rsync://repo-rpki.idnic.net/repo/7f4b53d8-b2ff-4973-b1ac-6f85faeadbe5/0/B8D444C5B3184A4F8C8F199A432242C44E19EACB.mft Manifest number: 9F Signing time: Sat 28 Jun 2025 16:31:54 +0000 Manifest this update: Sat 28 Jun 2025 16:26:54 +0000 Manifest next update: Wed 02 Jul 2025 00:54:54 +0000 Files and hashes: 1: B8D444C5B3184A4F8C8F199A432242C44E19EACB.crl (hash: DQdXf6I9hWh8g+u8u9/K/Y7e++Ds1lHd24KsvL+sVEQ=) 2: 3136302e32352e33362e302f32342d3234203d3e20313532383332.roa (hash: 1SJ9LA44FkXb29+CiOLplkV9zxTaWTCw2H5Ki5oako8=) 3: 3136302e32352e33372e302f32342d3234203d3e20313532383332.roa (hash: 2EK7G4yp/ra7lqC0aFCR3YZxswSuxrQQ2ZJJKEPHMZg=) 4: 3136302e32352e33362e302f32332d3234203d3e20313532383332.roa (hash: 0s3rWLKkoef0LRd26YLEPlEN62q6VM66IYGFVdLCLsM=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/7f4b53d8-b2ff-4973-b1ac-6f85faeadbe5/0/B8D444C5B3184A4F8C8F199A432242C44E19EACB.crl rsync://repo-rpki.idnic.net/repo/7f4b53d8-b2ff-4973-b1ac-6f85faeadbe5/0/B8D444C5B3184A4F8C8F199A432242C44E19EACB.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/B8D444C5B3184A4F8C8F199A432242C44E19EACB.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 02 Jul 2025 00:54:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4f:ae:40:7b:ee:1d:7a:5a:2b:ea:7b:c0:44:55:7c:a4:92:fe:d6:d3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B8D444C5B3184A4F8C8F199A432242C44E19EACB Validity Not Before: Jun 28 16:26:54 2025 GMT Not After : Jul 2 00:54:54 2025 GMT Subject: CN=FC3CFAE82CC56F1CFD6225587962950734F46C8E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:55:56:71:1b:88:7f:43:07:2f:9b:3e:3d:7f: d2:f5:2d:fc:40:57:8d:36:a6:48:c5:35:85:ac:54: e4:f8:b6:4b:a1:f4:6f:0e:ef:77:5f:7b:b6:6d:5f: 68:67:21:be:b0:45:46:d3:34:82:e1:72:73:a3:bd: d7:aa:a8:5b:f1:ec:b5:1f:00:09:e2:3e:9a:b4:7b: 35:ea:98:bc:d1:af:1e:a6:ef:9c:ac:7b:89:63:62: ed:02:49:1d:13:b8:ef:62:6a:e0:c7:aa:c5:27:26: 4b:49:be:77:3e:85:18:ff:38:b0:65:dc:db:7c:40: b8:9f:7c:6b:17:c4:68:39:24:0c:89:b5:b7:35:da: 74:57:6d:d9:0c:28:93:1d:e2:ac:6c:bf:18:36:cc: 43:94:5f:8f:8d:6f:90:00:9e:a7:aa:09:09:15:3d: b5:6c:fe:cb:49:02:44:c3:9f:d2:6a:dc:4b:6a:20: 8b:17:43:3f:d4:f3:fa:a3:56:df:36:be:6b:94:ce: 36:a9:82:dc:13:6f:f8:97:e6:8c:0c:3a:09:3a:68: 41:b6:64:f3:0e:cc:cc:f3:e6:a1:c2:21:69:42:b3: 5c:5a:b9:dc:dd:00:0e:49:f6:54:ff:f7:93:4a:a7: 99:51:cf:cb:38:37:f8:ce:97:4b:d3:f0:3e:83:f2: 12:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FC:3C:FA:E8:2C:C5:6F:1C:FD:62:25:58:79:62:95:07:34:F4:6C:8E X509v3 Authority Key Identifier: keyid:B8:D4:44:C5:B3:18:4A:4F:8C:8F:19:9A:43:22:42:C4:4E:19:EA:CB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/7f4b53d8-b2ff-4973-b1ac-6f85faeadbe5/0/B8D444C5B3184A4F8C8F199A432242C44E19EACB.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/B8D444C5B3184A4F8C8F199A432242C44E19EACB.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/7f4b53d8-b2ff-4973-b1ac-6f85faeadbe5/0/B8D444C5B3184A4F8C8F199A432242C44E19EACB.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 17:38:68:0e:39:55:15:61:02:e4:23:ae:f5:9f:0a:3a:a5:2a: a5:12:25:cc:b5:db:1f:0a:55:b2:5a:e6:92:59:0d:00:46:fe: 6b:5d:99:f3:4e:30:07:b9:a6:63:50:37:ae:1a:4a:a0:36:70: 0b:01:bb:fa:f1:f5:1a:e2:7f:c3:cb:4b:9c:52:9e:72:48:ce: 8f:3a:78:e4:77:b8:ea:93:a8:6f:da:75:31:39:48:41:ff:fb: 1d:34:bb:9a:ad:d0:8d:30:70:25:92:2f:9b:8f:91:37:69:a0: f9:f1:74:e1:cc:bc:06:54:85:1f:52:1a:73:06:d5:90:5b:8f: 9c:ea:56:57:3e:39:04:83:df:2a:4b:a5:43:f0:c7:9c:b3:7c: d9:89:b9:ff:3f:9b:77:e6:6c:a9:1f:3b:5b:66:10:80:1d:21: cc:90:40:cb:a6:2c:d1:3f:b5:8c:5a:ec:18:21:25:99:42:fa: 6e:05:6e:a3:f7:da:24:b9:11:35:af:ea:08:2b:e3:32:eb:cd: 60:40:20:26:f3:dd:bf:0e:e7:f7:c2:59:0e:f5:91:7e:a0:6b: f9:ad:34:ee:0c:ca:74:00:09:ac:38:45:34:21:bf:5c:42:c1: ad:6a:e8:ab:52:0a:2e:21:95:27:b6:47:6f:e5:2e:a4:9e:06: 2e:d0:8d:aa -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUT65Ae+4delor6nvARFV8pJL+1tMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjhENDQ0QzVCMzE4NEE0RjhDOEYxOTlBNDMyMjQyQzQ0 RTE5RUFDQjAeFw0yNTA2MjgxNjI2NTRaFw0yNTA3MDIwMDU0NTRaMDMxMTAvBgNV BAMTKEZDM0NGQUU4MkNDNTZGMUNGRDYyMjU1ODc5NjI5NTA3MzRGNDZDOEUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCkVVZxG4h/Qwcvmz49f9L1LfxA V402pkjFNYWsVOT4tkuh9G8O73dfe7ZtX2hnIb6wRUbTNILhcnOjvdeqqFvx7LUf AAniPpq0ezXqmLzRrx6m75yse4ljYu0CSR0TuO9iauDHqsUnJktJvnc+hRj/OLBl 3Nt8QLiffGsXxGg5JAyJtbc12nRXbdkMKJMd4qxsvxg2zEOUX4+Nb5AAnqeqCQkV PbVs/stJAkTDn9Jq3EtqIIsXQz/U8/qjVt82vmuUzjapgtwTb/iX5owMOgk6aEG2 ZPMOzMzz5qHCIWlCs1xaudzdAA5J9lT/95NKp5lRz8s4N/jOl0vT8D6D8hJxAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU/Dz66CzFbxz9YiVYeWKVBzT0bI4wHwYDVR0j BBgwFoAUuNRExbMYSk+MjxmaQyJCxE4Z6sswDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 ZjRiNTNkOC1iMmZmLTQ5NzMtYjFhYy02Zjg1ZmFlYWRiZTUvMC9COEQ0NDRDNUIz MTg0QTRGOEM4RjE5OUE0MzIyNDJDNDRFMTlFQUNCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvQjhENDQ0QzVCMzE4NEE0RjhDOEYxOTlBNDMyMjQyQzQ0RTE5 RUFDQi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vN2Y0YjUzZDgtYjJmZi00OTczLWIx YWMtNmY4NWZhZWFkYmU1LzAvQjhENDQ0QzVCMzE4NEE0RjhDOEYxOTlBNDMyMjQy QzQ0RTE5RUFDQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABc4aA45VRVhAuQjrvWfCjqlKqUSJcy12x8K VbJa5pJZDQBG/mtdmfNOMAe5pmNQN64aSqA2cAsBu/rx9Rrif8PLS5xSnnJIzo86 eOR3uOqTqG/adTE5SEH/+x00u5qt0I0wcCWSL5uPkTdpoPnxdOHMvAZUhR9SGnMG 1ZBbj5zqVlc+OQSD3ypLpUPwx5yzfNmJuf8/m3fmbKkfO1tmEIAdIcyQQMumLNE/ tYxa7BghJZlC+m4FbqP32iS5ETWv6ggr4zLrzWBAICbz3b8O5/fCWQ71kX6ga/mt NO4MynQACaw4RTQhv1xCwa1q6KtSCi4hlSe2R2/lLqSeBi7Qjao= -----END CERTIFICATE-----Generated at Mon Jun 30 08:54:34 2025 by rpki-client