$ rpki-client -vvf repo-rpki.idnic.net/repo/aa914ada-a9aa-4d7f-9e47-594bcb7a70ab/0/8E3F7441403B9CDF2FD603CCBAF13D1671202D2D.mft File: 8E3F7441403B9CDF2FD603CCBAF13D1671202D2D.mft (raw, json) Hash identifier: SmdyKUcWRtxjAdkk2iYoOCAkDRhJNdg1+9mr7CYZeqM= Subject key identifier: 16:0C:A0:3C:A4:8E:D1:12:18:D5:A7:8B:2F:08:D0:90:6E:44:17:AB Authority key identifier: 8E:3F:74:41:40:3B:9C:DF:2F:D6:03:CC:BA:F1:3D:16:71:20:2D:2D Certificate issuer: /CN=8E3F7441403B9CDF2FD603CCBAF13D1671202D2D Certificate serial: 282AC17E56CFC2F504417C51A2347F9CA326F9EE Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8E3F7441403B9CDF2FD603CCBAF13D1671202D2D.cer Subject info access: rsync://repo-rpki.idnic.net/repo/aa914ada-a9aa-4d7f-9e47-594bcb7a70ab/0/8E3F7441403B9CDF2FD603CCBAF13D1671202D2D.mft Manifest number: 02F1 Signing time: Sat 28 Jun 2025 04:21:46 +0000 Manifest this update: Sat 28 Jun 2025 04:16:46 +0000 Manifest next update: Tue 01 Jul 2025 14:53:46 +0000 Files and hashes: 1: 3130332e3134342e3133352e302f32342d3234203d3e20313339343237.roa (hash: zWJYN2XG8P0RnY9CSUVBnEgmuVsEalWKm5k5yR0nlxQ=) 2: 8E3F7441403B9CDF2FD603CCBAF13D1671202D2D.crl (hash: lqPOGBL4eEaUZcsbU8oJH75jbb4VsNdbyEqIFUpH8Ts=) 3: 323430353a366463303a3a2f33322d3332203d3e20313339343237.roa (hash: wF6dopi/8yFT5FMMEEtbalVZ2HlgmQH2NzcCqjkPo/A=) 4: 3130332e3134342e3133342e302f32332d3233203d3e20313339343237.roa (hash: CwI8o18dMmmdKMsJY38paR/SR1tzAkJd4x6YF0hfFxY=) 5: 3130332e3134342e3133342e302f32342d3234203d3e20313339343237.roa (hash: i2RCXQ2h/tijX2X+SFP27I82J2d7eFOatLRW4qkSUTs=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/aa914ada-a9aa-4d7f-9e47-594bcb7a70ab/0/8E3F7441403B9CDF2FD603CCBAF13D1671202D2D.crl rsync://repo-rpki.idnic.net/repo/aa914ada-a9aa-4d7f-9e47-594bcb7a70ab/0/8E3F7441403B9CDF2FD603CCBAF13D1671202D2D.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8E3F7441403B9CDF2FD603CCBAF13D1671202D2D.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 01 Jul 2025 14:53:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 28:2a:c1:7e:56:cf:c2:f5:04:41:7c:51:a2:34:7f:9c:a3:26:f9:ee Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8E3F7441403B9CDF2FD603CCBAF13D1671202D2D Validity Not Before: Jun 28 04:16:46 2025 GMT Not After : Jul 1 14:53:46 2025 GMT Subject: CN=160CA03CA48ED11218D5A78B2F08D0906E4417AB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:bb:c0:d3:72:37:4c:04:c5:7b:71:ad:bc:14: d6:8e:ab:47:a7:f4:a9:e9:d1:f4:ab:8c:0a:01:3e: 9e:38:eb:1b:d5:37:50:c2:0d:5a:44:65:b2:33:44: 88:64:2f:88:fb:c9:92:62:e2:ee:c6:6a:d9:9a:db: ed:44:d9:22:88:63:b2:78:61:52:ed:0c:99:a0:77: d4:4e:0d:35:04:1f:fe:51:a6:a7:11:7a:b7:1b:c5: 16:ea:8a:da:5b:6c:f1:c6:6a:61:60:5c:3c:c8:c8: 3a:33:06:e5:eb:39:dc:b5:8c:04:5b:42:5b:61:e5: 01:fe:ca:ac:85:5b:ee:62:56:e9:96:24:13:8d:e2: dc:f6:64:69:06:5d:1a:8e:9d:b6:23:31:c2:b5:cc: fc:2b:d8:8e:e3:48:72:52:4b:ac:a5:92:32:64:87: 00:f3:61:36:48:aa:d6:a7:0f:2e:16:64:a9:da:e5: 20:77:71:fb:95:62:4e:e0:b9:fd:ab:23:bd:16:9a: f1:ed:98:be:40:df:af:c9:e3:0d:15:d7:d1:d8:f6: 1f:98:f4:9c:1b:25:f1:64:06:fc:0a:47:29:ab:09: e6:ca:d3:49:2b:6e:9a:77:47:8f:9f:39:9f:84:c5: 12:80:25:43:e4:c7:34:e1:8d:1f:0d:6e:ed:1a:ad: 77:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 16:0C:A0:3C:A4:8E:D1:12:18:D5:A7:8B:2F:08:D0:90:6E:44:17:AB X509v3 Authority Key Identifier: keyid:8E:3F:74:41:40:3B:9C:DF:2F:D6:03:CC:BA:F1:3D:16:71:20:2D:2D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/aa914ada-a9aa-4d7f-9e47-594bcb7a70ab/0/8E3F7441403B9CDF2FD603CCBAF13D1671202D2D.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8E3F7441403B9CDF2FD603CCBAF13D1671202D2D.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/aa914ada-a9aa-4d7f-9e47-594bcb7a70ab/0/8E3F7441403B9CDF2FD603CCBAF13D1671202D2D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 16:5a:f2:da:b9:97:e0:1c:8a:24:f6:91:63:7f:3e:69:40:46: 49:1f:9d:a1:78:87:c7:9b:49:5c:75:17:78:ac:ff:14:0a:df: 78:2c:b7:27:8e:af:40:d4:33:1f:90:01:90:5e:00:75:5d:f4: d7:2e:69:4d:0f:7a:a1:a1:74:b4:d7:a1:72:a3:5d:dd:74:8e: 4c:f6:f5:a2:b1:db:8d:a5:03:da:7b:4d:94:80:bd:71:8f:21: 83:d6:ad:a6:e3:ad:be:c7:7b:39:cd:80:4f:23:59:e7:06:54: f8:d1:fc:8f:d7:ca:56:4c:f3:0e:e7:11:ae:26:db:4f:29:7a: 71:34:c7:1e:cd:9f:90:0e:a9:f4:fa:0c:64:a7:f1:e2:36:f2: ae:97:35:7c:56:30:a2:58:51:9c:61:96:31:09:cc:74:f2:15: 7e:9c:65:ce:05:33:8f:ff:9d:74:c1:7f:02:de:9a:5b:37:e2: 74:44:5f:38:d5:f1:1d:fb:03:52:f9:68:9f:9d:da:68:77:f7: fb:4f:60:d8:e5:d5:31:85:19:48:60:86:2d:c9:b6:36:80:92: 5a:e6:1d:45:95:14:b7:aa:86:b0:a0:1c:f9:a9:d6:a6:e4:0d: 9c:2e:17:97:82:68:15:be:e7:27:59:88:28:b2:82:e0:ef:7c: c8:94:a2:67 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUKCrBflbPwvUEQXxRojR/nKMm+e4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEUzRjc0NDE0MDNCOUNERjJGRDYwM0NDQkFGMTNEMTY3 MTIwMkQyRDAeFw0yNTA2MjgwNDE2NDZaFw0yNTA3MDExNDUzNDZaMDMxMTAvBgNV BAMTKDE2MENBMDNDQTQ4RUQxMTIxOEQ1QTc4QjJGMDhEMDkwNkU0NDE3QUIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQChu8DTcjdMBMV7ca28FNaOq0en 9Knp0fSrjAoBPp446xvVN1DCDVpEZbIzRIhkL4j7yZJi4u7Gatma2+1E2SKIY7J4 YVLtDJmgd9RODTUEH/5RpqcRercbxRbqitpbbPHGamFgXDzIyDozBuXrOdy1jARb Qlth5QH+yqyFW+5iVumWJBON4tz2ZGkGXRqOnbYjMcK1zPwr2I7jSHJSS6ylkjJk hwDzYTZIqtanDy4WZKna5SB3cfuVYk7guf2rI70WmvHtmL5A36/J4w0V19HY9h+Y 9JwbJfFkBvwKRymrCebK00krbpp3R4+fOZ+ExRKAJUPkxzThjR8Nbu0arXfrAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUFgygPKSO0RIY1aeLLwjQkG5EF6swHwYDVR0j BBgwFoAUjj90QUA7nN8v1gPMuvE9FnEgLS0wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h YTkxNGFkYS1hOWFhLTRkN2YtOWU0Ny01OTRiY2I3YTcwYWIvMC84RTNGNzQ0MTQw M0I5Q0RGMkZENjAzQ0NCQUYxM0QxNjcxMjAyRDJELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOEUzRjc0NDE0MDNCOUNERjJGRDYwM0NDQkFGMTNEMTY3MTIw MkQyRC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYWE5MTRhZGEtYTlhYS00ZDdmLTll NDctNTk0YmNiN2E3MGFiLzAvOEUzRjc0NDE0MDNCOUNERjJGRDYwM0NDQkFGMTNE MTY3MTIwMkQyRC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABZa8tq5l+AciiT2kWN/PmlARkkfnaF4h8eb SVx1F3is/xQK33gstyeOr0DUMx+QAZBeAHVd9NcuaU0PeqGhdLTXoXKjXd10jkz2 9aKx242lA9p7TZSAvXGPIYPWrabjrb7HeznNgE8jWecGVPjR/I/XylZM8w7nEa4m 208penE0xx7Nn5AOqfT6DGSn8eI28q6XNXxWMKJYUZxhljEJzHTyFX6cZc4FM4// nXTBfwLemls34nREXzjV8R37A1L5aJ+d2mh39/tPYNjl1TGFGUhghi3JtjaAklrm HUWVFLeqhrCgHPmp1qbkDZwuF5eCaBW+5ydZiCiyguDvfMiUomc= -----END CERTIFICATE-----Generated at Sun Jun 29 18:10:15 2025 by rpki-client