$ rpki-client -vvf repo-rpki.idnic.net/repo/8f6bf37c-d8ad-4e03-a06a-4408157cf57e/0/08632F1EBF41728D3E177234FCD8C0B9A988898B.mft File: 08632F1EBF41728D3E177234FCD8C0B9A988898B.mft (raw, json) Hash identifier: EAoWNHC3Tyy0bNsldXl5lU4SZWMNH44p/w2UazncuH8= Subject key identifier: 86:00:D8:BD:0B:A8:EC:90:22:92:C3:CC:A0:69:37:4D:79:D9:84:C3 Authority key identifier: 08:63:2F:1E:BF:41:72:8D:3E:17:72:34:FC:D8:C0:B9:A9:88:89:8B Certificate issuer: /CN=08632F1EBF41728D3E177234FCD8C0B9A988898B Certificate serial: 01B317FA7B4EC6BDFCFA4E3D7EB2F10F617C37CA Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/08632F1EBF41728D3E177234FCD8C0B9A988898B.cer Subject info access: rsync://repo-rpki.idnic.net/repo/8f6bf37c-d8ad-4e03-a06a-4408157cf57e/0/08632F1EBF41728D3E177234FCD8C0B9A988898B.mft Manifest number: 015C Signing time: Sat 28 Jun 2025 18:10:43 +0000 Manifest this update: Sat 28 Jun 2025 18:05:43 +0000 Manifest next update: Tue 01 Jul 2025 18:50:43 +0000 Files and hashes: 1: 3130332e3133332e33362e302f32342d3234203d3e20313338313333.roa (hash: nKmVU0aaMSmM7wKFukfzUIiKVfAI46n/zI3k22bxBr8=) 2: 08632F1EBF41728D3E177234FCD8C0B9A988898B.crl (hash: LBP99UA65aCaFA7+j0i/2kqohYwOkmL3BBjUdAixWVg=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/8f6bf37c-d8ad-4e03-a06a-4408157cf57e/0/08632F1EBF41728D3E177234FCD8C0B9A988898B.crl rsync://repo-rpki.idnic.net/repo/8f6bf37c-d8ad-4e03-a06a-4408157cf57e/0/08632F1EBF41728D3E177234FCD8C0B9A988898B.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/08632F1EBF41728D3E177234FCD8C0B9A988898B.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 01 Jul 2025 18:50:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:b3:17:fa:7b:4e:c6:bd:fc:fa:4e:3d:7e:b2:f1:0f:61:7c:37:ca Signature Algorithm: sha256WithRSAEncryption Issuer: CN=08632F1EBF41728D3E177234FCD8C0B9A988898B Validity Not Before: Jun 28 18:05:43 2025 GMT Not After : Jul 1 18:50:43 2025 GMT Subject: CN=8600D8BD0BA8EC902292C3CCA069374D79D984C3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:75:a8:6f:94:8a:22:e9:05:85:d5:55:52:0b: c3:3e:e7:ff:76:4f:23:f4:9e:a7:7f:9b:70:a8:ab: bf:be:43:79:4f:8d:f7:9b:14:c3:ec:f2:5a:a3:c2: 10:b7:58:06:b6:3a:fa:4c:87:89:07:dc:00:73:0e: f2:95:76:14:dc:95:c1:1d:3b:be:3a:d0:35:ca:57: 8d:16:b9:82:0f:0e:7d:b8:c8:92:d2:b6:60:ad:b6: 33:06:22:98:52:5d:c3:b9:cb:50:ba:dc:40:f9:5e: 18:21:62:10:fa:51:41:6d:b7:f7:2f:04:72:17:b1: f1:85:76:81:e2:41:e2:bb:5b:7e:dc:a7:f7:d2:2e: b1:fb:04:c7:05:f4:8d:21:23:01:65:a7:11:b7:6d: 44:81:a5:1d:fa:c9:7b:a3:00:73:0a:d9:25:37:44: d5:87:9d:00:8e:6a:b6:d9:29:ff:0a:28:46:6e:54: af:61:66:71:c7:ab:4d:4f:f8:46:33:15:67:7a:2e: 35:24:f0:ac:20:8a:76:de:93:08:03:65:ef:cc:60: 4c:ad:7e:a6:90:4f:34:67:5a:dd:f6:5a:93:12:43: 98:8a:2e:26:7f:0a:a8:a7:68:97:ad:c5:33:51:b6: 6a:b9:10:9c:95:bf:da:95:4c:57:24:b8:eb:93:b5: 1b:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:00:D8:BD:0B:A8:EC:90:22:92:C3:CC:A0:69:37:4D:79:D9:84:C3 X509v3 Authority Key Identifier: keyid:08:63:2F:1E:BF:41:72:8D:3E:17:72:34:FC:D8:C0:B9:A9:88:89:8B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/8f6bf37c-d8ad-4e03-a06a-4408157cf57e/0/08632F1EBF41728D3E177234FCD8C0B9A988898B.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/08632F1EBF41728D3E177234FCD8C0B9A988898B.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/8f6bf37c-d8ad-4e03-a06a-4408157cf57e/0/08632F1EBF41728D3E177234FCD8C0B9A988898B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption cb:62:33:f3:08:f0:8b:bb:c2:57:e5:35:9a:c5:ea:54:cf:44: 73:e4:2e:02:58:b4:c2:3f:38:2c:d1:00:f0:33:22:7a:2a:bd: 0a:97:58:99:78:77:19:17:d8:c4:ec:f0:80:a9:8c:66:61:7d: 69:c9:26:c7:40:53:cf:3c:5a:bb:74:7f:b6:ef:c6:95:ac:99: 2d:f9:79:ad:4f:d9:90:6b:10:d5:c0:62:8f:21:8f:51:1d:4e: 2e:8a:ed:82:ca:02:fa:e1:8f:24:31:de:65:b2:8e:53:35:d5: e1:35:d6:ce:13:12:5f:e7:ef:28:82:f2:57:7d:0c:0f:c4:c3: 4b:6c:74:b2:3c:f1:a9:95:40:a9:79:ee:32:49:44:3d:ff:08: e2:66:98:5a:72:26:54:15:ab:0d:02:e0:24:6c:87:45:59:3d: 6f:fc:0a:e0:3f:e7:ba:2b:73:c5:93:11:93:e3:a7:17:9b:89: 0c:38:81:0b:0e:e7:e0:62:18:82:f0:5e:1e:2f:4d:37:e9:a8: 8b:f1:4c:2b:98:b5:fb:ba:90:01:de:4b:d9:e3:9b:c7:34:54: f4:a8:90:e8:a6:c4:59:17:cf:d1:49:50:e7:26:27:4c:e5:6d: 72:07:59:db:92:0e:91:94:04:1d:24:03:1b:e5:65:33:80:ef: 60:26:b4:09 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUAbMX+ntOxr38+k49frLxD2F8N8owDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDg2MzJGMUVCRjQxNzI4RDNFMTc3MjM0RkNEOEMwQjlB OTg4ODk4QjAeFw0yNTA2MjgxODA1NDNaFw0yNTA3MDExODUwNDNaMDMxMTAvBgNV BAMTKDg2MDBEOEJEMEJBOEVDOTAyMjkyQzNDQ0EwNjkzNzRENzlEOTg0QzMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCudahvlIoi6QWF1VVSC8M+5/92 TyP0nqd/m3Coq7++Q3lPjfebFMPs8lqjwhC3WAa2OvpMh4kH3ABzDvKVdhTclcEd O7460DXKV40WuYIPDn24yJLStmCttjMGIphSXcO5y1C63ED5XhghYhD6UUFtt/cv BHIXsfGFdoHiQeK7W37cp/fSLrH7BMcF9I0hIwFlpxG3bUSBpR36yXujAHMK2SU3 RNWHnQCOarbZKf8KKEZuVK9hZnHHq01P+EYzFWd6LjUk8KwginbekwgDZe/MYEyt fqaQTzRnWt32WpMSQ5iKLiZ/CqinaJetxTNRtmq5EJyVv9qVTFckuOuTtRs3AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUhgDYvQuo7JAiksPMoGk3TXnZhMMwHwYDVR0j BBgwFoAUCGMvHr9Bco0+F3I0/NjAuamIiYswDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 ZjZiZjM3Yy1kOGFkLTRlMDMtYTA2YS00NDA4MTU3Y2Y1N2UvMC8wODYzMkYxRUJG NDE3MjhEM0UxNzcyMzRGQ0Q4QzBCOUE5ODg4OThCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMDg2MzJGMUVCRjQxNzI4RDNFMTc3MjM0RkNEOEMwQjlBOTg4 ODk4Qi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOGY2YmYzN2MtZDhhZC00ZTAzLWEw NmEtNDQwODE1N2NmNTdlLzAvMDg2MzJGMUVCRjQxNzI4RDNFMTc3MjM0RkNEOEMw QjlBOTg4ODk4Qi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAMtiM/MI8Iu7wlflNZrF6lTPRHPkLgJYtMI/ OCzRAPAzInoqvQqXWJl4dxkX2MTs8ICpjGZhfWnJJsdAU888Wrt0f7bvxpWsmS35 ea1P2ZBrENXAYo8hj1EdTi6K7YLKAvrhjyQx3mWyjlM11eE11s4TEl/n7yiC8ld9 DA/Ew0tsdLI88amVQKl57jJJRD3/COJmmFpyJlQVqw0C4CRsh0VZPW/8CuA/57or c8WTEZPjpxebiQw4gQsO5+BiGILwXh4vTTfpqIvxTCuYtfu6kAHeS9njm8c0VPSo kOimxFkXz9FJUOcmJ0zlbXIHWduSDpGUBB0kAxvlZTOA72AmtAk= -----END CERTIFICATE-----Generated at Sun Jun 29 21:46:01 2025 by rpki-client