$ rpki-client -vvf repo-rpki.idnic.net/repo/88788a8b-541b-4cbf-bab9-8dc377bc1284/0/8208317A24AB4CD828CD8855F81F3EF2B53CC681.mft File: 8208317A24AB4CD828CD8855F81F3EF2B53CC681.mft (raw, json) Hash identifier: o5GbggqHlaCEtH87p5KLD9t2mYi77i+OxB6MeR5d0qA= Subject key identifier: E6:D5:92:8C:40:12:F3:D5:CB:8E:08:F0:A5:B3:96:54:28:60:24:63 Authority key identifier: 82:08:31:7A:24:AB:4C:D8:28:CD:88:55:F8:1F:3E:F2:B5:3C:C6:81 Certificate issuer: /CN=8208317A24AB4CD828CD8855F81F3EF2B53CC681 Certificate serial: 2BF96FFDDFC3E2FB09DBF794E8FDD22EF4E4A5D2 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8208317A24AB4CD828CD8855F81F3EF2B53CC681.cer Subject info access: rsync://repo-rpki.idnic.net/repo/88788a8b-541b-4cbf-bab9-8dc377bc1284/0/8208317A24AB4CD828CD8855F81F3EF2B53CC681.mft Manifest number: 0160 Signing time: Sat 28 Jun 2025 08:22:05 +0000 Manifest this update: Sat 28 Jun 2025 08:17:05 +0000 Manifest next update: Tue 01 Jul 2025 17:08:05 +0000 Files and hashes: 1: 8208317A24AB4CD828CD8855F81F3EF2B53CC681.crl (hash: YSnvHriGA1BUwqqucSNcM8oOaq+HWIZnyY1e0biLwwA=) 2: 323030313a6466343a663930303a3a2f34382d3438203d3e20313337333531.roa (hash: b4NjxQmSbJ+wk760b/yGVrpvatI7XP4yXIQB6LdeYtw=) 3: 3130332e3131342e3134342e302f32342d3234203d3e20313337333531.roa (hash: ty2A/+XUIZKKt+5K+zVnVNMiG2s1JjDQEBRNkGaNrQE=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/88788a8b-541b-4cbf-bab9-8dc377bc1284/0/8208317A24AB4CD828CD8855F81F3EF2B53CC681.crl rsync://repo-rpki.idnic.net/repo/88788a8b-541b-4cbf-bab9-8dc377bc1284/0/8208317A24AB4CD828CD8855F81F3EF2B53CC681.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8208317A24AB4CD828CD8855F81F3EF2B53CC681.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 01 Jul 2025 17:08:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2b:f9:6f:fd:df:c3:e2:fb:09:db:f7:94:e8:fd:d2:2e:f4:e4:a5:d2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8208317A24AB4CD828CD8855F81F3EF2B53CC681 Validity Not Before: Jun 28 08:17:05 2025 GMT Not After : Jul 1 17:08:05 2025 GMT Subject: CN=E6D5928C4012F3D5CB8E08F0A5B3965428602463 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:71:ec:f9:0a:8c:85:b1:b8:37:85:78:f3:7d: a5:2b:53:07:82:36:ff:b9:63:c6:85:5d:01:8f:d6: c5:2c:d3:b2:9d:00:59:2b:7d:5c:49:9b:6d:b2:4a: 49:60:26:2c:d1:05:3b:f6:b9:56:f0:e8:cc:7a:a6: 3a:fe:6e:0b:ed:1f:c0:99:c4:ec:93:f6:69:b6:c0: 2d:00:87:19:07:f0:09:fa:b7:05:8d:8f:b7:da:ee: 25:bd:bf:f4:a1:ee:13:37:d7:05:47:f8:c5:c5:4d: 27:fc:d3:d0:8f:58:43:4b:85:9f:51:fc:f7:36:fd: dd:7f:2a:a1:e4:c7:0f:9a:35:a3:9f:db:c3:57:6a: 1b:c9:cb:6e:c1:13:13:d7:22:ce:7c:a9:c0:ac:cc: 6e:0a:fe:17:0f:41:f8:50:00:59:64:51:e6:fc:82: 70:e2:20:92:8d:60:64:73:09:3c:f9:0a:97:85:28: 11:78:72:02:7f:28:aa:04:62:4a:b9:e6:69:e4:59: 46:52:d9:da:1c:e2:55:de:82:93:a1:30:96:43:25: 1a:32:c9:48:07:6b:bb:5b:8f:8f:5c:2c:8c:1e:26: 41:b4:4e:2e:a0:fa:a0:4d:0b:12:0d:5c:38:76:4d: 27:7c:48:c6:db:6f:c4:ca:0b:0b:3c:7a:75:a3:3f: ae:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E6:D5:92:8C:40:12:F3:D5:CB:8E:08:F0:A5:B3:96:54:28:60:24:63 X509v3 Authority Key Identifier: keyid:82:08:31:7A:24:AB:4C:D8:28:CD:88:55:F8:1F:3E:F2:B5:3C:C6:81 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/88788a8b-541b-4cbf-bab9-8dc377bc1284/0/8208317A24AB4CD828CD8855F81F3EF2B53CC681.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8208317A24AB4CD828CD8855F81F3EF2B53CC681.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/88788a8b-541b-4cbf-bab9-8dc377bc1284/0/8208317A24AB4CD828CD8855F81F3EF2B53CC681.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6e:ed:7c:90:e8:24:76:1b:78:28:1b:20:98:e1:6d:01:23:51: 77:15:06:f3:65:1f:18:a8:23:c4:07:96:ab:ca:01:48:a1:69: 51:e6:8c:60:22:5c:7b:90:bc:03:78:4e:33:25:cb:47:3e:ab: 62:88:97:bd:d9:c6:2c:b9:13:8d:a5:20:89:c9:3b:88:a7:1d: 35:dc:de:4b:60:5b:ca:41:32:93:1f:fc:69:1e:15:de:29:5d: 7c:d8:58:90:aa:9e:fa:19:66:f1:e4:30:8a:20:5e:c3:8d:4e: 26:79:69:e1:44:29:9e:9f:d0:94:e2:a7:e8:4d:fe:20:19:ae: 65:ce:69:9f:69:a3:7c:bf:2e:a5:bc:d6:e5:76:83:7a:3c:06: f8:80:07:9e:6a:3c:90:79:d0:49:10:14:19:be:29:a7:28:4e: 49:2c:0d:c9:7c:7d:d2:f3:8a:14:db:8d:03:c1:d9:e3:50:cd: fa:68:4e:9e:70:75:a5:d4:a1:8b:c9:56:1b:40:33:d2:6d:98: 31:72:7f:23:cd:7c:5f:4c:32:33:61:ba:a3:b6:61:0a:f9:59: 1c:b0:e3:75:94:b9:e3:59:d8:c6:ea:3a:58:80:2e:74:51:24: d8:da:7a:2f:cd:4a:28:cf:35:7f:89:9c:d3:ad:bf:4d:6f:8e: 6e:a0:fa:13 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUK/lv/d/D4vsJ2/eU6P3SLvTkpdIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODIwODMxN0EyNEFCNENEODI4Q0Q4ODU1RjgxRjNFRjJC NTNDQzY4MTAeFw0yNTA2MjgwODE3MDVaFw0yNTA3MDExNzA4MDVaMDMxMTAvBgNV BAMTKEU2RDU5MjhDNDAxMkYzRDVDQjhFMDhGMEE1QjM5NjU0Mjg2MDI0NjMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDecez5CoyFsbg3hXjzfaUrUweC Nv+5Y8aFXQGP1sUs07KdAFkrfVxJm22ySklgJizRBTv2uVbw6Mx6pjr+bgvtH8CZ xOyT9mm2wC0AhxkH8An6twWNj7fa7iW9v/Sh7hM31wVH+MXFTSf809CPWENLhZ9R /Pc2/d1/KqHkxw+aNaOf28NXahvJy27BExPXIs58qcCszG4K/hcPQfhQAFlkUeb8 gnDiIJKNYGRzCTz5CpeFKBF4cgJ/KKoEYkq55mnkWUZS2doc4lXegpOhMJZDJRoy yUgHa7tbj49cLIweJkG0Ti6g+qBNCxINXDh2TSd8SMbbb8TKCws8enWjP64xAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU5tWSjEAS89XLjgjwpbOWVChgJGMwHwYDVR0j BBgwFoAUgggxeiSrTNgozYhV+B8+8rU8xoEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 ODc4OGE4Yi01NDFiLTRjYmYtYmFiOS04ZGMzNzdiYzEyODQvMC84MjA4MzE3QTI0 QUI0Q0Q4MjhDRDg4NTVGODFGM0VGMkI1M0NDNjgxLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvODIwODMxN0EyNEFCNENEODI4Q0Q4ODU1RjgxRjNFRjJCNTND QzY4MS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vODg3ODhhOGItNTQxYi00Y2JmLWJh YjktOGRjMzc3YmMxMjg0LzAvODIwODMxN0EyNEFCNENEODI4Q0Q4ODU1RjgxRjNF RjJCNTNDQzY4MS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAG7tfJDoJHYbeCgbIJjhbQEjUXcVBvNlHxio I8QHlqvKAUihaVHmjGAiXHuQvAN4TjMly0c+q2KIl73Zxiy5E42lIInJO4inHTXc 3ktgW8pBMpMf/GkeFd4pXXzYWJCqnvoZZvHkMIogXsONTiZ5aeFEKZ6f0JTip+hN /iAZrmXOaZ9po3y/LqW81uV2g3o8BviAB55qPJB50EkQFBm+KacoTkksDcl8fdLz ihTbjQPB2eNQzfpoTp5wdaXUoYvJVhtAM9JtmDFyfyPNfF9MMjNhuqO2YQr5WRyw 43WUueNZ2MbqOliALnRRJNjaei/NSijPNX+JnNOtv01vjm6g+hM= -----END CERTIFICATE-----Generated at Sun Jun 29 19:46:02 2025 by rpki-client