$ rpki-client -vvf repo-rpki.idnic.net/repo/a82db9d3-d6eb-4d6b-9a24-feeb21aa8f53/0/8BE281D2F4ED4091746FDA568A4296F1171589E8.mft File: 8BE281D2F4ED4091746FDA568A4296F1171589E8.mft (raw, json) Hash identifier: YS6H2QkbHuyzX2vYpVN4og5a1zF+hr/A/Az2elZY1FQ= Subject key identifier: F4:AC:77:2C:F1:39:A6:70:9B:0C:20:39:43:2E:62:03:38:62:56:D0 Authority key identifier: 8B:E2:81:D2:F4:ED:40:91:74:6F:DA:56:8A:42:96:F1:17:15:89:E8 Certificate issuer: /CN=8BE281D2F4ED4091746FDA568A4296F1171589E8 Certificate serial: 44C21C1ECF8BDBE87CB1E505E1129475505D21D9 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8BE281D2F4ED4091746FDA568A4296F1171589E8.cer Subject info access: rsync://repo-rpki.idnic.net/repo/a82db9d3-d6eb-4d6b-9a24-feeb21aa8f53/0/8BE281D2F4ED4091746FDA568A4296F1171589E8.mft Manifest number: 04E7 Signing time: Sun 29 Jun 2025 07:10:36 +0000 Manifest this update: Sun 29 Jun 2025 07:05:36 +0000 Manifest next update: Wed 02 Jul 2025 10:53:36 +0000 Files and hashes: 1: 3130332e3133342e38372e302f32342d3234203d3e203538333639.roa (hash: JnMoHtL2uw/1X+XpxI+WJ5aRYCDoJDTU7TkrgplgZrw=) 2: 8BE281D2F4ED4091746FDA568A4296F1171589E8.crl (hash: xjaJroHHr3PvLeMHPycHy+Tj9ikXSi1SFvs1gLQC2bY=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/a82db9d3-d6eb-4d6b-9a24-feeb21aa8f53/0/8BE281D2F4ED4091746FDA568A4296F1171589E8.crl rsync://repo-rpki.idnic.net/repo/a82db9d3-d6eb-4d6b-9a24-feeb21aa8f53/0/8BE281D2F4ED4091746FDA568A4296F1171589E8.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8BE281D2F4ED4091746FDA568A4296F1171589E8.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 02 Jul 2025 10:53:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 44:c2:1c:1e:cf:8b:db:e8:7c:b1:e5:05:e1:12:94:75:50:5d:21:d9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8BE281D2F4ED4091746FDA568A4296F1171589E8 Validity Not Before: Jun 29 07:05:36 2025 GMT Not After : Jul 2 10:53:36 2025 GMT Subject: CN=F4AC772CF139A6709B0C2039432E6203386256D0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:c3:39:c7:f8:c5:db:2d:ad:43:d2:9d:0e:79: 08:e6:84:75:91:4e:7a:19:c3:39:e4:c9:58:44:4b: 4c:ff:07:8a:c9:ed:67:36:b9:b7:51:85:84:13:16: 88:51:c5:0f:5b:8d:c0:25:bc:63:b9:01:1d:50:c2: 0b:8f:fb:5b:16:a2:05:32:9c:cf:3d:f7:b9:61:21: 08:53:3f:f4:88:74:ed:b4:f4:0a:8f:6c:58:0e:15: d6:60:ae:1b:19:74:98:2e:1f:4a:3c:af:a0:fa:dc: f1:8b:21:37:f4:6b:ec:e0:d1:a7:00:24:df:aa:17: ad:c0:0e:9e:51:1d:ed:78:d6:78:2e:c6:6e:5c:ae: 70:fb:5c:27:fd:2d:1e:4c:18:ed:b3:ae:93:0f:d4: ce:7a:7c:c2:ab:ce:9c:dc:8a:a4:91:72:33:ab:26: 08:9a:cd:4a:88:f4:8e:a6:61:c8:1a:6e:20:8d:0a: 0e:b6:e0:d7:43:94:f3:c2:15:89:8d:b3:fc:55:c4: fe:84:c5:ec:f0:c0:4c:a3:c8:71:80:40:fa:3d:19: a0:a5:d8:9d:80:c1:c3:dc:f8:17:e5:94:28:52:14: 6b:f0:33:ab:fd:7d:b2:1b:39:c0:ee:82:77:b5:36: 73:5d:1a:21:d2:a7:ee:ae:85:8b:3a:96:90:e5:eb: 38:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F4:AC:77:2C:F1:39:A6:70:9B:0C:20:39:43:2E:62:03:38:62:56:D0 X509v3 Authority Key Identifier: keyid:8B:E2:81:D2:F4:ED:40:91:74:6F:DA:56:8A:42:96:F1:17:15:89:E8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/a82db9d3-d6eb-4d6b-9a24-feeb21aa8f53/0/8BE281D2F4ED4091746FDA568A4296F1171589E8.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8BE281D2F4ED4091746FDA568A4296F1171589E8.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a82db9d3-d6eb-4d6b-9a24-feeb21aa8f53/0/8BE281D2F4ED4091746FDA568A4296F1171589E8.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c7:0d:14:ea:07:c6:b6:b6:94:a5:bb:98:83:12:6c:dc:73:f0: f7:63:05:e0:9b:98:56:17:9b:c5:b4:ac:cd:d9:c8:b7:d7:d7: 1e:1f:48:23:1e:9d:5a:6b:e4:9b:e7:05:6b:be:f0:c3:10:21: 90:99:f2:30:0d:2a:d2:90:20:74:e0:7b:f4:31:9d:f1:01:7b: c9:fe:8a:a3:14:1a:1c:31:0f:02:27:4c:8d:d9:73:65:46:75: 84:a4:6d:22:d3:97:4a:e2:9d:7d:ea:ba:d0:4b:fb:47:09:74: fc:25:68:d0:a2:bf:46:55:6e:8c:55:76:d5:b8:9a:2b:97:6f: 2d:27:bf:ea:01:04:48:cf:41:7a:97:ba:bb:2e:28:44:2b:bb: 66:0e:6b:19:66:43:ee:6c:5d:06:5f:cc:8e:25:e1:26:51:03: 6e:93:54:b5:54:43:9e:14:b8:2c:3a:3f:f7:77:bf:cb:ff:ed: 86:f0:09:b3:3f:38:69:6c:de:32:80:17:92:b3:7b:5b:bd:0f: 3a:43:37:40:c8:e8:97:61:28:83:27:03:21:cf:ac:95:e0:c5: c0:ae:6d:f8:d7:4f:64:51:7c:ac:ae:a0:0e:4d:61:32:6c:a6: 62:23:59:e7:52:ba:7a:13:47:6c:13:76:41:a5:cf:5f:f4:c6: 14:d0:9c:9a -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIURMIcHs+L2+h8seUF4RKUdVBdIdkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEJFMjgxRDJGNEVENDA5MTc0NkZEQTU2OEE0Mjk2RjEx NzE1ODlFODAeFw0yNTA2MjkwNzA1MzZaFw0yNTA3MDIxMDUzMzZaMDMxMTAvBgNV BAMTKEY0QUM3NzJDRjEzOUE2NzA5QjBDMjAzOTQzMkU2MjAzMzg2MjU2RDAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDCwznH+MXbLa1D0p0OeQjmhHWR TnoZwznkyVhES0z/B4rJ7Wc2ubdRhYQTFohRxQ9bjcAlvGO5AR1QwguP+1sWogUy nM8997lhIQhTP/SIdO209AqPbFgOFdZgrhsZdJguH0o8r6D63PGLITf0a+zg0acA JN+qF63ADp5RHe141nguxm5crnD7XCf9LR5MGO2zrpMP1M56fMKrzpzciqSRcjOr JgiazUqI9I6mYcgabiCNCg624NdDlPPCFYmNs/xVxP6ExezwwEyjyHGAQPo9GaCl 2J2AwcPc+BfllChSFGvwM6v9fbIbOcDugne1NnNdGiHSp+6uhYs6lpDl6zirAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU9Kx3LPE5pnCbDCA5Qy5iAzhiVtAwHwYDVR0j BBgwFoAUi+KB0vTtQJF0b9pWikKW8RcViegwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h ODJkYjlkMy1kNmViLTRkNmItOWEyNC1mZWViMjFhYThmNTMvMC84QkUyODFEMkY0 RUQ0MDkxNzQ2RkRBNTY4QTQyOTZGMTE3MTU4OUU4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOEJFMjgxRDJGNEVENDA5MTc0NkZEQTU2OEE0Mjk2RjExNzE1 ODlFOC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYTgyZGI5ZDMtZDZlYi00ZDZiLTlh MjQtZmVlYjIxYWE4ZjUzLzAvOEJFMjgxRDJGNEVENDA5MTc0NkZEQTU2OEE0Mjk2 RjExNzE1ODlFOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAMcNFOoHxra2lKW7mIMSbNxz8PdjBeCbmFYX m8W0rM3ZyLfX1x4fSCMenVpr5JvnBWu+8MMQIZCZ8jANKtKQIHTge/QxnfEBe8n+ iqMUGhwxDwInTI3Zc2VGdYSkbSLTl0rinX3qutBL+0cJdPwlaNCiv0ZVboxVdtW4 miuXby0nv+oBBEjPQXqXursuKEQru2YOaxlmQ+5sXQZfzI4l4SZRA26TVLVUQ54U uCw6P/d3v8v/7YbwCbM/OGls3jKAF5Kze1u9DzpDN0DI6JdhKIMnAyHPrJXgxcCu bfjXT2RRfKyuoA5NYTJspmIjWedSunoTR2wTdkGlz1/0xhTQnJo= -----END CERTIFICATE-----Generated at Mon Jun 30 14:37:08 2025 by rpki-client