$ rpki-client -vvf repo-rpki.idnic.net/repo/8d5bbd81-0332-4202-9c92-eb1746a8cd9d/0/8B0DC79B66A96FA7FA3180C20B06A5C43C9CFEA1.mft File: 8B0DC79B66A96FA7FA3180C20B06A5C43C9CFEA1.mft (raw, json) Hash identifier: jc8E8UoV+nFLJEdJEiYuvKgj7Y1Wke+xO9TvIc9aXok= Subject key identifier: 49:77:3E:31:87:31:D0:D2:F0:34:D0:3A:8F:3D:0A:FB:C2:65:69:9E Authority key identifier: 8B:0D:C7:9B:66:A9:6F:A7:FA:31:80:C2:0B:06:A5:C4:3C:9C:FE:A1 Certificate issuer: /CN=8B0DC79B66A96FA7FA3180C20B06A5C43C9CFEA1 Certificate serial: 1141FB0DB561D00BE47C28F5468065BCB29C26B4 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8B0DC79B66A96FA7FA3180C20B06A5C43C9CFEA1.cer Subject info access: rsync://repo-rpki.idnic.net/repo/8d5bbd81-0332-4202-9c92-eb1746a8cd9d/0/8B0DC79B66A96FA7FA3180C20B06A5C43C9CFEA1.mft Manifest number: 02F4 Signing time: Mon 30 Jun 2025 14:12:14 +0000 Manifest this update: Mon 30 Jun 2025 14:07:14 +0000 Manifest next update: Thu 03 Jul 2025 19:40:14 +0000 Files and hashes: 1: 3130332e3131382e332e302f32342d3234203d3e20313337333732.roa (hash: CnYInR0edgXU+mYMJQGAiAKWjbNlk8PVPSzC/8WPG5g=) 2: 8B0DC79B66A96FA7FA3180C20B06A5C43C9CFEA1.crl (hash: a9O+0Aj4+O5xwe6saZhZa/NRdBvjAa/azYSPPQ99olk=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/8d5bbd81-0332-4202-9c92-eb1746a8cd9d/0/8B0DC79B66A96FA7FA3180C20B06A5C43C9CFEA1.crl rsync://repo-rpki.idnic.net/repo/8d5bbd81-0332-4202-9c92-eb1746a8cd9d/0/8B0DC79B66A96FA7FA3180C20B06A5C43C9CFEA1.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8B0DC79B66A96FA7FA3180C20B06A5C43C9CFEA1.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 03 Jul 2025 19:40:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 11:41:fb:0d:b5:61:d0:0b:e4:7c:28:f5:46:80:65:bc:b2:9c:26:b4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8B0DC79B66A96FA7FA3180C20B06A5C43C9CFEA1 Validity Not Before: Jun 30 14:07:14 2025 GMT Not After : Jul 3 19:40:14 2025 GMT Subject: CN=49773E318731D0D2F034D03A8F3D0AFBC265699E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:77:78:f4:9e:7a:94:e8:a4:a0:3e:ab:52:c4: c3:6d:2c:d6:a3:af:c7:aa:c1:80:cb:f3:be:fd:7d: a6:fd:1d:eb:02:3a:53:82:85:a0:f9:38:43:ec:84: df:0b:bd:ef:2f:00:ce:a1:e7:79:eb:45:b1:9e:30: 48:02:62:ae:53:ad:ee:b5:46:4a:fe:6b:1a:0d:49: 69:fb:35:ae:a9:0f:a8:94:e0:50:e5:3a:cc:91:3e: 12:de:d0:2b:23:ed:e5:38:cf:45:56:eb:60:5f:a9: ec:74:13:13:73:10:66:e2:b0:04:93:81:e1:03:e3: a2:bb:05:7c:67:c6:f7:ae:55:58:ea:80:d4:b7:44: f2:ff:be:b6:4a:28:b5:51:d9:94:08:7e:00:e6:79: 7b:29:04:80:28:16:34:e3:de:40:34:5b:1a:fe:31: 23:ce:48:6b:73:19:3f:d5:98:d1:ec:a8:af:e4:55: af:3b:64:3a:aa:bb:8d:cd:1f:ca:ee:48:73:fd:73: 1f:7f:5a:56:62:85:5f:d5:67:59:78:8d:fd:ef:e5: 6c:0d:1d:91:43:5b:79:68:7f:4f:38:5b:f7:31:3c: a8:72:40:80:8f:2f:23:71:a7:fc:97:a8:b7:5b:50: f3:7f:f2:4d:45:0a:ab:36:c9:f3:5e:be:58:40:66: 1e:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:77:3E:31:87:31:D0:D2:F0:34:D0:3A:8F:3D:0A:FB:C2:65:69:9E X509v3 Authority Key Identifier: keyid:8B:0D:C7:9B:66:A9:6F:A7:FA:31:80:C2:0B:06:A5:C4:3C:9C:FE:A1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/8d5bbd81-0332-4202-9c92-eb1746a8cd9d/0/8B0DC79B66A96FA7FA3180C20B06A5C43C9CFEA1.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8B0DC79B66A96FA7FA3180C20B06A5C43C9CFEA1.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/8d5bbd81-0332-4202-9c92-eb1746a8cd9d/0/8B0DC79B66A96FA7FA3180C20B06A5C43C9CFEA1.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4b:c3:5e:db:aa:7b:11:7d:24:f3:16:bf:3d:3b:c6:0a:10:05: d3:62:84:4f:1e:43:a7:b2:d3:9b:60:9e:74:47:29:70:7d:c0: 8f:e0:92:af:d2:6a:f0:77:90:0f:5f:20:69:e9:73:9f:ce:a5: 12:db:29:99:85:58:e8:15:63:c3:b1:96:c6:e4:89:f8:4b:c7: 30:c1:ad:7d:58:d6:3b:6c:16:78:a5:29:93:db:d0:a4:d5:1a: f2:00:83:ba:0f:50:12:ac:49:b7:57:4f:e8:5a:c4:f5:98:54: 71:71:da:5a:c1:62:e4:37:9e:cc:a8:50:1a:cc:a3:26:64:6b: a8:ac:a5:51:66:9e:37:f7:12:7e:28:ed:43:c7:c2:2b:94:9b: e0:22:71:d1:b3:f4:5f:4b:7c:95:82:c0:0f:62:3f:c9:ba:a1: 42:78:0c:35:31:bc:c2:61:0b:08:56:8f:a3:4e:bb:22:59:23: 0f:f3:56:c7:09:8f:41:46:ac:dc:35:48:7e:e1:00:36:f2:f2: 92:a8:69:7b:67:e6:4c:61:a9:3d:33:30:ca:3c:da:b1:7b:aa: 18:36:fd:d4:f8:96:56:28:1b:06:8c:5d:f6:3a:b6:48:71:13: 38:88:b1:6a:05:f6:8b:3e:6c:71:be:b4:7e:b5:3c:f9:b4:03: 3c:45:4c:e3 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUEUH7DbVh0AvkfCj1RoBlvLKcJrQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEIwREM3OUI2NkE5NkZBN0ZBMzE4MEMyMEIwNkE1QzQz QzlDRkVBMTAeFw0yNTA2MzAxNDA3MTRaFw0yNTA3MDMxOTQwMTRaMDMxMTAvBgNV BAMTKDQ5NzczRTMxODczMUQwRDJGMDM0RDAzQThGM0QwQUZCQzI2NTY5OUUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCpd3j0nnqU6KSgPqtSxMNtLNaj r8eqwYDL8779fab9HesCOlOChaD5OEPshN8Lve8vAM6h53nrRbGeMEgCYq5Tre61 Rkr+axoNSWn7Na6pD6iU4FDlOsyRPhLe0Csj7eU4z0VW62Bfqex0ExNzEGbisAST geED46K7BXxnxveuVVjqgNS3RPL/vrZKKLVR2ZQIfgDmeXspBIAoFjTj3kA0Wxr+ MSPOSGtzGT/VmNHsqK/kVa87ZDqqu43NH8ruSHP9cx9/WlZihV/VZ1l4jf3v5WwN HZFDW3lof084W/cxPKhyQICPLyNxp/yXqLdbUPN/8k1FCqs2yfNevlhAZh7pAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUSXc+MYcx0NLwNNA6jz0K+8JlaZ4wHwYDVR0j BBgwFoAUiw3Hm2apb6f6MYDCCwalxDyc/qEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 ZDViYmQ4MS0wMzMyLTQyMDItOWM5Mi1lYjE3NDZhOGNkOWQvMC84QjBEQzc5QjY2 QTk2RkE3RkEzMTgwQzIwQjA2QTVDNDNDOUNGRUExLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOEIwREM3OUI2NkE5NkZBN0ZBMzE4MEMyMEIwNkE1QzQzQzlD RkVBMS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOGQ1YmJkODEtMDMzMi00MjAyLTlj OTItZWIxNzQ2YThjZDlkLzAvOEIwREM3OUI2NkE5NkZBN0ZBMzE4MEMyMEIwNkE1 QzQzQzlDRkVBMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEvDXtuqexF9JPMWvz07xgoQBdNihE8eQ6ey 05tgnnRHKXB9wI/gkq/SavB3kA9fIGnpc5/OpRLbKZmFWOgVY8OxlsbkifhLxzDB rX1Y1jtsFnilKZPb0KTVGvIAg7oPUBKsSbdXT+haxPWYVHFx2lrBYuQ3nsyoUBrM oyZka6ispVFmnjf3En4o7UPHwiuUm+AicdGz9F9LfJWCwA9iP8m6oUJ4DDUxvMJh CwhWj6NOuyJZIw/zVscJj0FGrNw1SH7hADby8pKoaXtn5kxhqT0zMMo82rF7qhg2 /dT4llYoGwaMXfY6tkhxEziIsWoF9os+bHG+tH61PPm0AzxFTOM= -----END CERTIFICATE-----Generated at Wed Jul 2 04:23:23 2025 by rpki-client