$ rpki-client -vvf repo-rpki.idnic.net/repo/8116fbc9-b31c-4225-a697-4fedbc234db6/0/C0C8E7243E4E8DECD7A8EA1D61FD424108E8D3D5.mft File: C0C8E7243E4E8DECD7A8EA1D61FD424108E8D3D5.mft (raw, json) Hash identifier: iT3NrG3529DTGV80wNueE2IhBqt67Ti7osAKlncG8gM= Subject key identifier: 6C:87:47:9E:99:70:A1:68:5E:14:62:3D:73:B6:38:7E:D3:03:D2:4A Authority key identifier: C0:C8:E7:24:3E:4E:8D:EC:D7:A8:EA:1D:61:FD:42:41:08:E8:D3:D5 Certificate issuer: /CN=C0C8E7243E4E8DECD7A8EA1D61FD424108E8D3D5 Certificate serial: 36E37FF33B65933690F10453EF9556FA9A02C9FF Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C0C8E7243E4E8DECD7A8EA1D61FD424108E8D3D5.cer Subject info access: rsync://repo-rpki.idnic.net/repo/8116fbc9-b31c-4225-a697-4fedbc234db6/0/C0C8E7243E4E8DECD7A8EA1D61FD424108E8D3D5.mft Manifest number: 80 Signing time: Sun 29 Jun 2025 23:31:23 +0000 Manifest this update: Sun 29 Jun 2025 23:26:23 +0000 Manifest next update: Thu 03 Jul 2025 10:01:23 +0000 Files and hashes: 1: C0C8E7243E4E8DECD7A8EA1D61FD424108E8D3D5.crl (hash: s6b5ejClCM5QcMdPJpQqkJ2biyQk2Mw6AArPHWzI1RE=) 2: 3130332e37352e3233372e302f32342d3234203d3e203634333130.roa (hash: zLA6/bRI9VboLYe5I2cJ3lQAESTlC0UxgoZrgcRdKsk=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/8116fbc9-b31c-4225-a697-4fedbc234db6/0/C0C8E7243E4E8DECD7A8EA1D61FD424108E8D3D5.crl rsync://repo-rpki.idnic.net/repo/8116fbc9-b31c-4225-a697-4fedbc234db6/0/C0C8E7243E4E8DECD7A8EA1D61FD424108E8D3D5.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C0C8E7243E4E8DECD7A8EA1D61FD424108E8D3D5.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 02 Jul 2025 07:23:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 36:e3:7f:f3:3b:65:93:36:90:f1:04:53:ef:95:56:fa:9a:02:c9:ff Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C0C8E7243E4E8DECD7A8EA1D61FD424108E8D3D5 Validity Not Before: Jun 29 23:26:23 2025 GMT Not After : Jul 3 10:01:23 2025 GMT Subject: CN=6C87479E9970A1685E14623D73B6387ED303D24A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:8d:47:9d:5c:d0:5e:20:a5:16:33:8f:d5:ae: 00:23:3c:31:f0:18:87:81:ad:ab:23:cd:b5:62:7b: 99:a2:55:fb:0e:91:22:84:f3:69:80:7a:ae:fe:0d: 9d:e3:b1:fc:64:36:bd:b9:9a:75:43:29:23:ab:ec: 4b:07:25:e4:97:21:93:50:b2:09:f2:1f:e8:84:b9: 3b:28:d2:3a:ea:b6:1f:67:bd:4f:df:9d:3e:53:44: fb:24:80:44:54:bb:10:cc:1a:13:c6:3f:ef:a3:31: 14:b3:7c:f8:46:5e:e1:76:25:13:9a:a1:0e:2b:0f: a0:6b:f9:74:26:b6:70:86:c5:29:3a:c3:01:c5:db: b5:cb:f8:da:0e:a7:c9:6d:be:59:0a:7f:60:30:57: 29:a6:65:fc:29:70:07:69:75:7e:71:45:a9:a4:d4: 08:08:15:66:2c:f9:a3:65:d7:87:ac:a9:2e:75:49: f4:6e:d9:7c:c7:ca:d3:eb:ff:3a:c9:82:c5:b9:f1: 17:dd:24:5d:ca:3a:2b:c6:7c:f2:45:98:a9:be:b5: 0f:eb:92:0d:dc:6a:2b:de:e8:2c:f8:4e:5d:7f:6d: 0b:2a:d2:18:e1:9f:03:52:fa:26:26:c4:1e:c3:83: 10:38:f2:c8:c9:3d:c4:ca:51:3e:71:b0:9d:6e:82: 2c:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6C:87:47:9E:99:70:A1:68:5E:14:62:3D:73:B6:38:7E:D3:03:D2:4A X509v3 Authority Key Identifier: keyid:C0:C8:E7:24:3E:4E:8D:EC:D7:A8:EA:1D:61:FD:42:41:08:E8:D3:D5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/8116fbc9-b31c-4225-a697-4fedbc234db6/0/C0C8E7243E4E8DECD7A8EA1D61FD424108E8D3D5.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C0C8E7243E4E8DECD7A8EA1D61FD424108E8D3D5.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/8116fbc9-b31c-4225-a697-4fedbc234db6/0/C0C8E7243E4E8DECD7A8EA1D61FD424108E8D3D5.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 36:50:0d:bd:f5:2e:f9:bd:c8:2a:5a:9f:18:1c:5a:13:9d:a3: 19:28:45:37:29:4b:4c:26:3d:45:41:8e:39:05:9f:ab:9e:4f: f3:35:a1:8a:91:5c:d0:67:8f:61:6a:5c:9c:77:7f:df:66:aa: eb:e4:29:7d:c4:20:29:3d:a4:1c:58:e7:e1:cf:9c:39:85:b9: 05:48:f9:cc:a8:74:d8:f2:3a:be:ba:ac:30:9d:01:2a:92:6a: ad:04:0d:27:03:bc:7a:de:78:a4:07:cb:55:d0:8e:db:34:78: f0:2a:51:5b:49:67:0e:39:bb:67:22:46:3e:a9:d7:03:7d:aa: 17:b7:71:cf:8c:e8:8e:5b:b2:67:f5:e3:62:82:78:6e:2c:56: e5:23:78:e4:b0:87:24:02:a1:15:ab:c8:a1:1a:36:ef:19:67: ec:35:44:bd:56:80:dd:81:5e:b8:0f:85:f8:74:96:cc:3e:dd: 18:ca:07:5b:19:3b:24:96:42:2d:48:30:08:c5:5d:f9:d7:72: 41:de:87:6b:75:6b:e0:33:28:7d:63:61:22:c1:1c:96:cf:9d: ad:33:76:1d:2c:42:61:43:09:62:3b:c6:c2:ae:db:1e:91:ed: 24:13:5e:fa:72:39:0a:84:5b:e0:12:00:2b:65:19:6c:5c:4b: 44:38:b1:7a -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUNuN/8ztlkzaQ8QRT75VW+poCyf8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzBDOEU3MjQzRTRFOERFQ0Q3QThFQTFENjFGRDQyNDEw OEU4RDNENTAeFw0yNTA2MjkyMzI2MjNaFw0yNTA3MDMxMDAxMjNaMDMxMTAvBgNV BAMTKDZDODc0NzlFOTk3MEExNjg1RTE0NjIzRDczQjYzODdFRDMwM0QyNEEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDdjUedXNBeIKUWM4/VrgAjPDHw GIeBrasjzbVie5miVfsOkSKE82mAeq7+DZ3jsfxkNr25mnVDKSOr7EsHJeSXIZNQ sgnyH+iEuTso0jrqth9nvU/fnT5TRPskgERUuxDMGhPGP++jMRSzfPhGXuF2JROa oQ4rD6Br+XQmtnCGxSk6wwHF27XL+NoOp8ltvlkKf2AwVymmZfwpcAdpdX5xRamk 1AgIFWYs+aNl14esqS51SfRu2XzHytPr/zrJgsW58RfdJF3KOivGfPJFmKm+tQ/r kg3caive6Cz4Tl1/bQsq0hjhnwNS+iYmxB7DgxA48sjJPcTKUT5xsJ1ugiwxAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUbIdHnplwoWheFGI9c7Y4ftMD0kowHwYDVR0j BBgwFoAUwMjnJD5OjezXqOodYf1CQQjo09UwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 MTE2ZmJjOS1iMzFjLTQyMjUtYTY5Ny00ZmVkYmMyMzRkYjYvMC9DMEM4RTcyNDNF NEU4REVDRDdBOEVBMUQ2MUZENDI0MTA4RThEM0Q1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQzBDOEU3MjQzRTRFOERFQ0Q3QThFQTFENjFGRDQyNDEwOEU4 RDNENS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vODExNmZiYzktYjMxYy00MjI1LWE2 OTctNGZlZGJjMjM0ZGI2LzAvQzBDOEU3MjQzRTRFOERFQ0Q3QThFQTFENjFGRDQy NDEwOEU4RDNENS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADZQDb31Lvm9yCpanxgcWhOdoxkoRTcpS0wm PUVBjjkFn6ueT/M1oYqRXNBnj2FqXJx3f99mquvkKX3EICk9pBxY5+HPnDmFuQVI +cyodNjyOr66rDCdASqSaq0EDScDvHreeKQHy1XQjts0ePAqUVtJZw45u2ciRj6p 1wN9qhe3cc+M6I5bsmf142KCeG4sVuUjeOSwhyQCoRWryKEaNu8ZZ+w1RL1WgN2B XrgPhfh0lsw+3RjKB1sZOySWQi1IMAjFXfnXckHeh2t1a+AzKH1jYSLBHJbPna0z dh0sQmFDCWI7xsKu2x6R7SQTXvpyOQqEW+ASACtlGWxcS0Q4sXo= -----END CERTIFICATE-----Generated at Mon Jun 30 01:11:40 2025 by rpki-client