$ rpki-client -vvf repo-rpki.idnic.net/repo/8919b80d-4693-4095-a9e3-412e12828ff2/0/8DC2ED0870A005152606E2E6BEB6B6C78A522AF4.mft File: 8DC2ED0870A005152606E2E6BEB6B6C78A522AF4.mft (raw, json) Hash identifier: Df12W+5W6K06z3rR6xxhThjBn4cRZ/LU2V9sfHc0pcQ= Subject key identifier: 9A:25:99:BD:83:42:04:79:29:9B:2F:0A:08:17:7C:F3:F6:47:FD:41 Authority key identifier: 8D:C2:ED:08:70:A0:05:15:26:06:E2:E6:BE:B6:B6:C7:8A:52:2A:F4 Certificate issuer: /CN=8DC2ED0870A005152606E2E6BEB6B6C78A522AF4 Certificate serial: 6B0C70C66D48E91BD5BEEBF9B9551A07639A5B6A Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8DC2ED0870A005152606E2E6BEB6B6C78A522AF4.cer Subject info access: rsync://repo-rpki.idnic.net/repo/8919b80d-4693-4095-a9e3-412e12828ff2/0/8DC2ED0870A005152606E2E6BEB6B6C78A522AF4.mft Manifest number: 02B0 Signing time: Mon 30 Jun 2025 09:40:54 +0000 Manifest this update: Mon 30 Jun 2025 09:35:54 +0000 Manifest next update: Thu 03 Jul 2025 16:14:54 +0000 Files and hashes: 1: 8DC2ED0870A005152606E2E6BEB6B6C78A522AF4.crl (hash: CLi/FFgygZ27Niqk/nC3eG6RmlO5N9Ed/xUcVIKPClw=) 2: 3130332e3137322e33302e302f32342d3234203d3e20313437303737.roa (hash: Ln5Z8ccUeGrlnQ20DfbZRqINCn2+komW7fJKFCt/jbE=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/8919b80d-4693-4095-a9e3-412e12828ff2/0/8DC2ED0870A005152606E2E6BEB6B6C78A522AF4.crl rsync://repo-rpki.idnic.net/repo/8919b80d-4693-4095-a9e3-412e12828ff2/0/8DC2ED0870A005152606E2E6BEB6B6C78A522AF4.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8DC2ED0870A005152606E2E6BEB6B6C78A522AF4.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 03 Jul 2025 16:14:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6b:0c:70:c6:6d:48:e9:1b:d5:be:eb:f9:b9:55:1a:07:63:9a:5b:6a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8DC2ED0870A005152606E2E6BEB6B6C78A522AF4 Validity Not Before: Jun 30 09:35:54 2025 GMT Not After : Jul 3 16:14:54 2025 GMT Subject: CN=9A2599BD83420479299B2F0A08177CF3F647FD41 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:99:a3:38:64:67:44:d9:52:70:15:3f:d5:28: 5b:ea:dd:a8:e3:e8:c0:2e:21:fd:55:87:45:21:2a: 45:1b:7d:ac:7d:fa:44:e6:06:c3:53:7d:91:90:9b: c4:28:01:f5:48:6f:af:ea:a7:0e:ba:fb:3a:ad:88: 9c:89:7c:99:6c:69:83:75:ab:ea:1a:c3:3e:c2:f3: b1:1c:77:c4:76:0f:8a:51:c0:ac:14:a8:41:a1:02: c8:62:6a:38:19:65:ce:49:72:3a:04:50:3d:48:22: f5:23:31:2a:9e:3c:8f:28:e6:e9:92:0a:18:90:8d: f5:af:d8:d0:61:17:0e:8c:dd:82:db:ee:46:ea:c4: 84:79:9e:52:ff:43:04:6a:81:3b:b6:cc:86:3e:a6: d1:25:24:e1:6c:19:55:37:4b:a0:a3:e5:96:21:27: b9:e7:94:98:79:87:53:6c:c6:5b:7f:f0:d9:3f:13: 55:be:fe:4f:e8:b8:4e:09:bc:8f:ee:cf:f8:7c:5c: 18:6a:1b:50:c0:71:0b:c9:62:b1:19:5c:dc:a1:10: 97:4c:cb:cf:6e:b9:91:84:8e:45:86:0d:60:33:12: 06:4a:a6:fc:e0:dd:53:21:8e:3b:35:7a:52:5a:b5: a4:cd:3f:90:4e:31:9d:54:0d:e8:3e:ff:01:f8:fd: 99:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9A:25:99:BD:83:42:04:79:29:9B:2F:0A:08:17:7C:F3:F6:47:FD:41 X509v3 Authority Key Identifier: keyid:8D:C2:ED:08:70:A0:05:15:26:06:E2:E6:BE:B6:B6:C7:8A:52:2A:F4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/8919b80d-4693-4095-a9e3-412e12828ff2/0/8DC2ED0870A005152606E2E6BEB6B6C78A522AF4.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8DC2ED0870A005152606E2E6BEB6B6C78A522AF4.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/8919b80d-4693-4095-a9e3-412e12828ff2/0/8DC2ED0870A005152606E2E6BEB6B6C78A522AF4.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b2:32:1d:03:9a:0f:70:7a:b2:e0:31:38:ab:d5:9a:16:14:c4: 4d:86:19:14:db:48:b7:ba:b2:4e:93:07:b5:95:21:20:59:27: 8e:38:c6:0d:96:33:dc:19:f1:88:02:b1:e8:20:34:31:53:e0: 14:17:c3:61:e9:e0:a7:2f:38:20:0f:96:ac:75:05:69:21:f8: 85:dc:94:fb:bd:1d:16:f8:4b:5e:85:93:96:ea:9a:af:79:7d: fa:34:b7:9b:f9:be:be:e8:71:20:ea:1f:f0:bb:58:6f:c1:32: 5a:27:e8:f6:0f:9d:0f:15:b0:8f:69:4f:c4:5c:7b:05:ee:27: dd:02:3b:87:35:2f:ad:72:ce:46:33:ae:73:ed:f5:29:20:40: da:48:76:22:02:99:74:92:d9:66:e0:d2:c0:45:af:8a:48:bd: 86:cb:b3:cd:c6:f8:c6:a1:bf:85:2a:8f:f0:03:c0:4e:8f:2f: 58:96:16:b6:74:af:7b:d2:c2:4c:f5:e6:6c:73:10:9e:c5:ba: 54:2d:5c:f5:d7:f2:0f:ba:24:f8:e8:3e:12:c5:0a:80:2f:a7: 7b:aa:ef:d5:20:14:e4:da:37:a7:27:30:37:91:77:59:11:64: c9:0a:f0:34:84:21:fc:2a:30:ad:72:27:4f:34:64:0e:91:db: 68:38:f9:32 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUawxwxm1I6RvVvuv5uVUaB2OaW2owDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOERDMkVEMDg3MEEwMDUxNTI2MDZFMkU2QkVCNkI2Qzc4 QTUyMkFGNDAeFw0yNTA2MzAwOTM1NTRaFw0yNTA3MDMxNjE0NTRaMDMxMTAvBgNV BAMTKDlBMjU5OUJEODM0MjA0NzkyOTlCMkYwQTA4MTc3Q0YzRjY0N0ZENDEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC5maM4ZGdE2VJwFT/VKFvq3ajj 6MAuIf1Vh0UhKkUbfax9+kTmBsNTfZGQm8QoAfVIb6/qpw66+zqtiJyJfJlsaYN1 q+oawz7C87Ecd8R2D4pRwKwUqEGhAshiajgZZc5JcjoEUD1IIvUjMSqePI8o5umS ChiQjfWv2NBhFw6M3YLb7kbqxIR5nlL/QwRqgTu2zIY+ptElJOFsGVU3S6Cj5ZYh J7nnlJh5h1Nsxlt/8Nk/E1W+/k/ouE4JvI/uz/h8XBhqG1DAcQvJYrEZXNyhEJdM y89uuZGEjkWGDWAzEgZKpvzg3VMhjjs1elJataTNP5BOMZ1UDeg+/wH4/ZkVAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUmiWZvYNCBHkpmy8KCBd88/ZH/UEwHwYDVR0j BBgwFoAUjcLtCHCgBRUmBuLmvra2x4pSKvQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 OTE5YjgwZC00NjkzLTQwOTUtYTllMy00MTJlMTI4MjhmZjIvMC84REMyRUQwODcw QTAwNTE1MjYwNkUyRTZCRUI2QjZDNzhBNTIyQUY0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOERDMkVEMDg3MEEwMDUxNTI2MDZFMkU2QkVCNkI2Qzc4QTUy MkFGNC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vODkxOWI4MGQtNDY5My00MDk1LWE5 ZTMtNDEyZTEyODI4ZmYyLzAvOERDMkVEMDg3MEEwMDUxNTI2MDZFMkU2QkVCNkI2 Qzc4QTUyMkFGNC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALIyHQOaD3B6suAxOKvVmhYUxE2GGRTbSLe6 sk6TB7WVISBZJ444xg2WM9wZ8YgCseggNDFT4BQXw2Hp4KcvOCAPlqx1BWkh+IXc lPu9HRb4S16Fk5bqmq95ffo0t5v5vr7ocSDqH/C7WG/BMlon6PYPnQ8VsI9pT8Rc ewXuJ90CO4c1L61yzkYzrnPt9SkgQNpIdiICmXSS2Wbg0sBFr4pIvYbLs83G+Mah v4Uqj/ADwE6PL1iWFrZ0r3vSwkz15mxzEJ7FulQtXPXX8g+6JPjoPhLFCoAvp3uq 79UgFOTaN6cnMDeRd1kRZMkK8DSEIfwqMK1yJ080ZA6R22g4+TI= -----END CERTIFICATE-----Generated at Wed Jul 2 14:41:51 2025 by rpki-client