$ rpki-client -vvf repo-rpki.idnic.net/repo/927a6f34-1b6e-4e92-b2d2-0b9301a666a5/0/8DEDABAD21AD1A6BEF27E91FCEE30465563DFE72.mft File: 8DEDABAD21AD1A6BEF27E91FCEE30465563DFE72.mft (raw, json) Hash identifier: rI2aqoAHjV1tzuribyh09maVwjkptJCkmbd0omEO8nc= Subject key identifier: B1:F2:07:A6:88:58:FF:DC:31:0A:44:76:99:68:D4:C8:C0:1C:85:14 Authority key identifier: 8D:ED:AB:AD:21:AD:1A:6B:EF:27:E9:1F:CE:E3:04:65:56:3D:FE:72 Certificate issuer: /CN=8DEDABAD21AD1A6BEF27E91FCEE30465563DFE72 Certificate serial: 0E3ED38F256B4EF94EB7AA4040076B17FF44C4B0 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8DEDABAD21AD1A6BEF27E91FCEE30465563DFE72.cer Subject info access: rsync://repo-rpki.idnic.net/repo/927a6f34-1b6e-4e92-b2d2-0b9301a666a5/0/8DEDABAD21AD1A6BEF27E91FCEE30465563DFE72.mft Manifest number: 04E4 Signing time: Sat 28 Jun 2025 16:32:05 +0000 Manifest this update: Sat 28 Jun 2025 16:27:05 +0000 Manifest next update: Wed 02 Jul 2025 02:37:05 +0000 Files and hashes: 1: 3130332e3234372e31322e302f32322d3234203d3e20313331373036.roa (hash: mWjb/DW+b3X3xyLO8KMUDwzQ73HydHkJibyBar99dKU=) 2: 8DEDABAD21AD1A6BEF27E91FCEE30465563DFE72.crl (hash: dHxs930yY/jo2hlLwksQNcLIFZpruP3TGJfDU8VhncU=) 3: 323430323a653330303a3a2f33322d3438203d3e20313331373036.roa (hash: EV88jOIELhWBAVSmJqvptwA4m5UyL3dS/vav1cA94d8=) 4: 3132312e3130312e3132382e302f32312d3234203d3e20313331373036.roa (hash: LxNIC9GUMk4NDV//CAiwhidJ9aXKaAFBBW+ysgKoUy0=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/927a6f34-1b6e-4e92-b2d2-0b9301a666a5/0/8DEDABAD21AD1A6BEF27E91FCEE30465563DFE72.crl rsync://repo-rpki.idnic.net/repo/927a6f34-1b6e-4e92-b2d2-0b9301a666a5/0/8DEDABAD21AD1A6BEF27E91FCEE30465563DFE72.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8DEDABAD21AD1A6BEF27E91FCEE30465563DFE72.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 02 Jul 2025 02:37:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0e:3e:d3:8f:25:6b:4e:f9:4e:b7:aa:40:40:07:6b:17:ff:44:c4:b0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8DEDABAD21AD1A6BEF27E91FCEE30465563DFE72 Validity Not Before: Jun 28 16:27:05 2025 GMT Not After : Jul 2 02:37:05 2025 GMT Subject: CN=B1F207A68858FFDC310A44769968D4C8C01C8514 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:af:53:e3:da:7b:4a:80:b1:8c:08:83:fe:f8: e2:90:1b:f3:90:bf:0d:d0:89:da:6b:35:e5:fd:b6: 79:b2:11:80:96:bb:87:69:62:f2:0a:b8:dd:c7:f2: 88:8d:62:2d:4d:5a:24:e1:bd:ab:1c:a3:f6:24:8b: 64:cd:26:3f:12:0b:34:10:b2:09:74:aa:e3:2a:c0: 02:b7:83:e2:9a:05:b8:05:2f:b0:42:98:21:51:a0: 6d:d9:53:79:45:6a:f6:d4:1d:d7:d1:a5:fa:0d:ce: 98:81:20:05:40:5f:0b:e5:c0:57:04:ee:15:cb:a6: ff:7b:db:36:d3:22:f2:d2:fb:5b:b9:19:16:f4:60: 9f:58:82:95:0c:c2:1d:c4:20:d5:cc:0e:d3:31:a0: 3a:1c:b1:34:8a:fe:83:0d:e7:81:ea:51:38:8f:0d: f6:64:23:0a:fc:ec:76:00:d5:80:ca:47:4e:59:7b: 5e:49:7f:b5:de:ef:a5:ff:19:e5:f6:1e:1f:35:e7: 62:e1:7d:b9:74:b1:1d:85:92:3c:5d:a8:61:02:79: 94:d9:fd:6d:84:d7:06:7a:50:df:68:ee:63:98:5b: de:64:8d:3b:55:fb:69:c1:dc:9f:14:d1:a3:6e:62: 58:cd:4c:bd:b2:1f:f2:a0:98:f8:5f:b8:f4:6d:e1: 52:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B1:F2:07:A6:88:58:FF:DC:31:0A:44:76:99:68:D4:C8:C0:1C:85:14 X509v3 Authority Key Identifier: keyid:8D:ED:AB:AD:21:AD:1A:6B:EF:27:E9:1F:CE:E3:04:65:56:3D:FE:72 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/927a6f34-1b6e-4e92-b2d2-0b9301a666a5/0/8DEDABAD21AD1A6BEF27E91FCEE30465563DFE72.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8DEDABAD21AD1A6BEF27E91FCEE30465563DFE72.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/927a6f34-1b6e-4e92-b2d2-0b9301a666a5/0/8DEDABAD21AD1A6BEF27E91FCEE30465563DFE72.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 05:e4:bc:c2:db:dd:76:b2:02:76:73:b7:a4:ce:c2:29:b1:5b: d4:78:31:5b:c6:a3:cf:6f:ea:33:25:a5:80:5c:c5:0b:1e:6c: 73:a4:2f:c8:5b:b9:63:a6:64:26:87:0c:4b:07:79:61:f4:ee: d5:9a:22:0d:61:3d:88:fa:b4:9b:50:2e:a3:21:87:3e:cf:ad: 93:10:89:8c:d9:96:05:d8:22:69:21:fd:8a:91:56:a5:73:94: 6b:3c:a7:fd:c5:01:a0:ff:26:41:4f:dc:12:57:3a:9e:8f:ff: 40:8f:48:38:e7:6e:b1:ec:99:a3:3e:d0:1b:1b:86:38:32:c5: 09:dc:37:80:c5:28:3e:25:47:5c:2f:e2:48:58:d3:9d:b4:47: 6e:ef:0a:a7:f1:b6:7f:64:61:71:b5:91:44:ef:a3:c9:99:92: 95:6c:76:1d:57:78:5b:05:80:98:a5:e5:94:31:e4:5b:2f:1a: 55:16:d7:11:1d:df:82:e2:93:93:2f:94:36:f3:94:38:5c:41: 0f:9d:d6:3d:e4:3e:da:0d:fb:aa:98:9a:9b:d7:1a:77:8f:a0: c6:a8:c9:2a:7b:d4:4d:f7:7a:0c:46:b5:59:bd:4f:92:13:c5: fd:a2:f6:75:09:67:45:15:fa:e4:13:d9:d6:8e:29:64:a2:5d: 8e:1d:78:71 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUDj7TjyVrTvlOt6pAQAdrF/9ExLAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOERFREFCQUQyMUFEMUE2QkVGMjdFOTFGQ0VFMzA0NjU1 NjNERkU3MjAeFw0yNTA2MjgxNjI3MDVaFw0yNTA3MDIwMjM3MDVaMDMxMTAvBgNV BAMTKEIxRjIwN0E2ODg1OEZGREMzMTBBNDQ3Njk5NjhENEM4QzAxQzg1MTQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDKr1Pj2ntKgLGMCIP++OKQG/OQ vw3QidprNeX9tnmyEYCWu4dpYvIKuN3H8oiNYi1NWiThvasco/Yki2TNJj8SCzQQ sgl0quMqwAK3g+KaBbgFL7BCmCFRoG3ZU3lFavbUHdfRpfoNzpiBIAVAXwvlwFcE 7hXLpv972zbTIvLS+1u5GRb0YJ9YgpUMwh3EINXMDtMxoDocsTSK/oMN54HqUTiP DfZkIwr87HYA1YDKR05Ze15Jf7Xe76X/GeX2Hh8152Lhfbl0sR2FkjxdqGECeZTZ /W2E1wZ6UN9o7mOYW95kjTtV+2nB3J8U0aNuYljNTL2yH/KgmPhfuPRt4VKfAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUsfIHpohY/9wxCkR2mWjUyMAchRQwHwYDVR0j BBgwFoAUje2rrSGtGmvvJ+kfzuMEZVY9/nIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 MjdhNmYzNC0xYjZlLTRlOTItYjJkMi0wYjkzMDFhNjY2YTUvMC84REVEQUJBRDIx QUQxQTZCRUYyN0U5MUZDRUUzMDQ2NTU2M0RGRTcyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOERFREFCQUQyMUFEMUE2QkVGMjdFOTFGQ0VFMzA0NjU1NjNE RkU3Mi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOTI3YTZmMzQtMWI2ZS00ZTkyLWIy ZDItMGI5MzAxYTY2NmE1LzAvOERFREFCQUQyMUFEMUE2QkVGMjdFOTFGQ0VFMzA0 NjU1NjNERkU3Mi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAXkvMLb3XayAnZzt6TOwimxW9R4MVvGo89v 6jMlpYBcxQsebHOkL8hbuWOmZCaHDEsHeWH07tWaIg1hPYj6tJtQLqMhhz7PrZMQ iYzZlgXYImkh/YqRVqVzlGs8p/3FAaD/JkFP3BJXOp6P/0CPSDjnbrHsmaM+0Bsb hjgyxQncN4DFKD4lR1wv4khY0520R27vCqfxtn9kYXG1kUTvo8mZkpVsdh1XeFsF gJil5ZQx5FsvGlUW1xEd34Lik5MvlDbzlDhcQQ+d1j3kPtoN+6qYmpvXGnePoMao ySp71E33egxGtVm9T5ITxf2i9nUJZ0UV+uQT2daOKWSiXY4deHE= -----END CERTIFICATE-----Generated at Sun Jun 29 21:54:33 2025 by rpki-client