$ rpki-client -vvf repo-rpki.idnic.net/repo/a2aa16ea-2aec-495d-a9a3-6925730d5e0f/0/8458BC369C80A76B2875FC97DBE5D1A09B6AF317.mft File: 8458BC369C80A76B2875FC97DBE5D1A09B6AF317.mft (raw, json) Hash identifier: zd70AA26YOzvjFIwu2i7viVuPyFuDUvCpICDfr5S8ss= Subject key identifier: FA:84:54:32:40:40:AB:0B:54:EF:CF:4C:77:45:37:58:98:7A:42:C1 Authority key identifier: 84:58:BC:36:9C:80:A7:6B:28:75:FC:97:DB:E5:D1:A0:9B:6A:F3:17 Certificate issuer: /CN=8458BC369C80A76B2875FC97DBE5D1A09B6AF317 Certificate serial: 188693D27B78323F4C0148F4F2148C10A0049996 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8458BC369C80A76B2875FC97DBE5D1A09B6AF317.cer Subject info access: rsync://repo-rpki.idnic.net/repo/a2aa16ea-2aec-495d-a9a3-6925730d5e0f/0/8458BC369C80A76B2875FC97DBE5D1A09B6AF317.mft Manifest number: 04E7 Signing time: Sat 28 Jun 2025 20:51:44 +0000 Manifest this update: Sat 28 Jun 2025 20:46:44 +0000 Manifest next update: Tue 01 Jul 2025 21:47:44 +0000 Files and hashes: 1: 8458BC369C80A76B2875FC97DBE5D1A09B6AF317.crl (hash: TFLXorHBQsyO95/XtRrOw6wabZ6MiZva0jAaKbqTlj0=) 2: 3130332e36362e36392e302f32342d3234203d3e203535363835.roa (hash: x+jv4TuSSXN4C68g+x8B9A51ZwulAwMClt9iXTwzSmY=) 3: 3130332e36362e37302e302f32342d3234203d3e20313333383430.roa (hash: Wxz1us2zDXrNlhEeTyTFEnQyiq4EZlAgNa1zZuJQj0g=) 4: 3130332e36362e36382e302f32342d3234203d3e203535363835.roa (hash: tpDStVFIFqB4DRm6j6XW2vqPZ0uybsz5vrF6Xuyk+08=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/a2aa16ea-2aec-495d-a9a3-6925730d5e0f/0/8458BC369C80A76B2875FC97DBE5D1A09B6AF317.crl rsync://repo-rpki.idnic.net/repo/a2aa16ea-2aec-495d-a9a3-6925730d5e0f/0/8458BC369C80A76B2875FC97DBE5D1A09B6AF317.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8458BC369C80A76B2875FC97DBE5D1A09B6AF317.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 01 Jul 2025 21:47:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 18:86:93:d2:7b:78:32:3f:4c:01:48:f4:f2:14:8c:10:a0:04:99:96 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8458BC369C80A76B2875FC97DBE5D1A09B6AF317 Validity Not Before: Jun 28 20:46:44 2025 GMT Not After : Jul 1 21:47:44 2025 GMT Subject: CN=FA8454324040AB0B54EFCF4C77453758987A42C1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:70:96:e9:9d:2a:c4:50:41:1f:cf:d7:5c:48: db:06:00:89:53:5c:99:04:b6:2e:75:9d:d7:9c:c7: ea:33:44:c9:e1:ba:15:c5:3d:1b:57:d8:29:47:e7: 9a:5e:71:5e:8d:5c:3f:4f:20:d1:b6:da:07:1c:2a: fa:8c:1b:19:e1:c7:c6:19:95:9c:97:ea:4c:7f:de: 29:31:09:04:67:96:20:f6:43:a7:da:5b:c3:53:cf: 0c:5e:cf:78:a0:07:7d:ab:cf:de:73:4c:94:fe:b5: a3:ea:06:7a:ca:f4:3c:59:e4:55:82:0a:d5:25:0c: 0b:e1:88:7b:0e:c1:71:00:f8:ae:dc:89:04:fa:63: 7c:b7:28:b5:ab:05:e1:cc:fb:9b:ac:a5:2f:2b:39: 67:a8:b8:48:02:4c:52:37:bf:84:f1:77:08:78:f5: ad:77:aa:7d:7a:ea:9b:32:1d:86:03:3b:eb:76:fe: 1c:fe:85:b1:2f:62:19:ad:3e:37:af:ff:e5:ff:ac: f9:aa:16:0b:aa:ff:00:a8:47:49:d9:29:fa:a8:3e: b2:90:26:18:6b:1a:f5:de:79:43:63:59:7d:54:15: 0a:97:4d:18:e8:94:7e:5b:21:05:15:13:84:3e:9f: 8b:22:a3:9f:71:7c:fd:dc:7e:62:c1:ff:77:c1:50: 10:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FA:84:54:32:40:40:AB:0B:54:EF:CF:4C:77:45:37:58:98:7A:42:C1 X509v3 Authority Key Identifier: keyid:84:58:BC:36:9C:80:A7:6B:28:75:FC:97:DB:E5:D1:A0:9B:6A:F3:17 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/a2aa16ea-2aec-495d-a9a3-6925730d5e0f/0/8458BC369C80A76B2875FC97DBE5D1A09B6AF317.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8458BC369C80A76B2875FC97DBE5D1A09B6AF317.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a2aa16ea-2aec-495d-a9a3-6925730d5e0f/0/8458BC369C80A76B2875FC97DBE5D1A09B6AF317.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 62:53:b8:6e:5b:e8:c7:de:fb:64:45:1b:be:6b:ce:1f:4e:4d: 61:8c:00:10:56:c1:9c:82:44:dd:f1:b0:65:2d:53:2f:5d:19: 26:c5:59:82:7b:54:a2:90:6b:e0:7c:89:96:42:b1:fb:a2:13: 97:d1:75:e2:91:f9:01:6f:a7:3d:21:1f:42:f8:db:d2:72:20: bf:af:79:a2:f0:6e:9a:0f:63:25:a2:af:96:eb:e8:1a:6d:7a: ef:b8:43:d5:89:a8:b3:18:6e:da:82:ce:44:b3:0c:69:37:b1: 3c:0e:d8:bd:5a:8d:61:9c:17:84:3b:47:06:4c:c2:a8:d3:6d: 5c:c3:e3:1b:b6:cd:bb:3c:0a:04:be:20:77:f4:e8:67:c7:02: 73:6c:0c:df:53:1e:d2:b3:fe:13:aa:a6:38:9b:aa:26:4f:3f: 06:8f:f4:ac:36:ba:1e:21:51:f2:87:2e:c2:02:86:0b:a3:5f: 5e:bf:29:ec:ad:5e:aa:e5:c8:da:e0:37:8b:bb:82:a9:f7:18: c9:0a:23:7a:88:90:19:6f:80:a1:70:a4:83:35:e9:a5:dc:71: 5e:b7:6d:6f:07:27:b5:d7:22:f0:43:58:b4:12:27:d4:f1:a6: ef:20:be:db:33:a8:d4:43:7d:4a:5c:dd:af:ab:6a:80:84:b9: 59:b0:52:6b -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUGIaT0nt4Mj9MAUj08hSMEKAEmZYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODQ1OEJDMzY5QzgwQTc2QjI4NzVGQzk3REJFNUQxQTA5 QjZBRjMxNzAeFw0yNTA2MjgyMDQ2NDRaFw0yNTA3MDEyMTQ3NDRaMDMxMTAvBgNV BAMTKEZBODQ1NDMyNDA0MEFCMEI1NEVGQ0Y0Qzc3NDUzNzU4OTg3QTQyQzEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDacJbpnSrEUEEfz9dcSNsGAIlT XJkEti51ndecx+ozRMnhuhXFPRtX2ClH55pecV6NXD9PING22gccKvqMGxnhx8YZ lZyX6kx/3ikxCQRnliD2Q6faW8NTzwxez3igB32rz95zTJT+taPqBnrK9DxZ5FWC CtUlDAvhiHsOwXEA+K7ciQT6Y3y3KLWrBeHM+5uspS8rOWeouEgCTFI3v4Txdwh4 9a13qn166psyHYYDO+t2/hz+hbEvYhmtPjev/+X/rPmqFguq/wCoR0nZKfqoPrKQ JhhrGvXeeUNjWX1UFQqXTRjolH5bIQUVE4Q+n4sio59xfP3cfmLB/3fBUBCfAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU+oRUMkBAqwtU789Md0U3WJh6QsEwHwYDVR0j BBgwFoAUhFi8NpyAp2sodfyX2+XRoJtq8xcwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h MmFhMTZlYS0yYWVjLTQ5NWQtYTlhMy02OTI1NzMwZDVlMGYvMC84NDU4QkMzNjlD ODBBNzZCMjg3NUZDOTdEQkU1RDFBMDlCNkFGMzE3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvODQ1OEJDMzY5QzgwQTc2QjI4NzVGQzk3REJFNUQxQTA5QjZB RjMxNy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYTJhYTE2ZWEtMmFlYy00OTVkLWE5 YTMtNjkyNTczMGQ1ZTBmLzAvODQ1OEJDMzY5QzgwQTc2QjI4NzVGQzk3REJFNUQx QTA5QjZBRjMxNy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGJTuG5b6Mfe+2RFG75rzh9OTWGMABBWwZyC RN3xsGUtUy9dGSbFWYJ7VKKQa+B8iZZCsfuiE5fRdeKR+QFvpz0hH0L429JyIL+v eaLwbpoPYyWir5br6Bpteu+4Q9WJqLMYbtqCzkSzDGk3sTwO2L1ajWGcF4Q7RwZM wqjTbVzD4xu2zbs8CgS+IHf06GfHAnNsDN9THtKz/hOqpjibqiZPPwaP9Kw2uh4h UfKHLsIChgujX16/KeytXqrlyNrgN4u7gqn3GMkKI3qIkBlvgKFwpIM16aXccV63 bW8HJ7XXIvBDWLQSJ9Txpu8gvtszqNRDfUpc3a+raoCEuVmwUms= -----END CERTIFICATE-----Generated at Sun Jun 29 18:51:28 2025 by rpki-client