$ rpki-client -vvf repo-rpki.idnic.net/repo/aba8cf65-d468-4309-9f30-9b9f26d9ce2d/0/8650DEF1B1C89D701C2BB99CA9079EEDBCCC046D.mft File: 8650DEF1B1C89D701C2BB99CA9079EEDBCCC046D.mft (raw, json) Hash identifier: FXlbYEfi6IMHecib4bXIEtQmIEMTyNlpmirmUIa55yI= Subject key identifier: B8:37:F8:B1:49:3C:6C:5A:1A:B2:14:2A:48:27:19:5C:02:C3:DC:A5 Authority key identifier: 86:50:DE:F1:B1:C8:9D:70:1C:2B:B9:9C:A9:07:9E:ED:BC:CC:04:6D Certificate issuer: /CN=8650DEF1B1C89D701C2BB99CA9079EEDBCCC046D Certificate serial: 52FC52E4D9A506CA22F98794F3013F9B06F7F9BF Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8650DEF1B1C89D701C2BB99CA9079EEDBCCC046D.cer Subject info access: rsync://repo-rpki.idnic.net/repo/aba8cf65-d468-4309-9f30-9b9f26d9ce2d/0/8650DEF1B1C89D701C2BB99CA9079EEDBCCC046D.mft Manifest number: 0107 Signing time: Mon 30 Jun 2025 15:41:02 +0000 Manifest this update: Mon 30 Jun 2025 15:36:02 +0000 Manifest next update: Thu 03 Jul 2025 19:28:02 +0000 Files and hashes: 1: 3137352e3131312e39392e302f32342d3234203d3e20313338313230.roa (hash: YRDtjy6dGfctkwwFkOVZ0Lht6L/ZRO27ITtMgAgG90E=) 2: 3137352e3131312e39382e302f32342d3234203d3e20313338313230.roa (hash: s8fg30WIA14JUIcMS3F2iWvbH1sPMTJyCo51fPayB6w=) 3: 8650DEF1B1C89D701C2BB99CA9079EEDBCCC046D.crl (hash: H1uBaGTsw0YHd/bYorhP4xZwdX/pRD/cj2+RMy4BA5k=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/aba8cf65-d468-4309-9f30-9b9f26d9ce2d/0/8650DEF1B1C89D701C2BB99CA9079EEDBCCC046D.crl rsync://repo-rpki.idnic.net/repo/aba8cf65-d468-4309-9f30-9b9f26d9ce2d/0/8650DEF1B1C89D701C2BB99CA9079EEDBCCC046D.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8650DEF1B1C89D701C2BB99CA9079EEDBCCC046D.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 03 Jul 2025 19:28:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 52:fc:52:e4:d9:a5:06:ca:22:f9:87:94:f3:01:3f:9b:06:f7:f9:bf Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8650DEF1B1C89D701C2BB99CA9079EEDBCCC046D Validity Not Before: Jun 30 15:36:02 2025 GMT Not After : Jul 3 19:28:02 2025 GMT Subject: CN=B837F8B1493C6C5A1AB2142A4827195C02C3DCA5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:74:59:e6:6c:9c:35:3b:34:ff:7e:8b:5c:ca: e3:2f:97:be:9d:f4:32:4b:d6:38:98:73:70:68:9b: 33:fe:22:b0:8b:45:4e:b5:e8:18:c0:89:a6:e1:91: b4:23:98:a8:14:91:b4:69:6b:5e:7f:88:30:67:c8: 07:2c:71:23:f1:77:cd:61:34:6d:c3:42:8e:1c:c2: b7:92:63:31:c4:3c:63:7c:46:6f:e0:48:d7:6f:07: 72:6e:42:1f:bf:a2:3e:50:8f:a6:0a:01:06:eb:1e: 1f:75:d7:c3:b0:c5:4e:0c:e8:59:62:d5:a2:06:74: 88:60:9d:9d:24:19:e7:a5:27:7c:47:ed:0a:2e:01: f6:db:de:3d:0f:a4:ca:d6:09:15:d8:d9:a7:38:cb: 28:02:65:35:1d:73:ee:0d:da:47:8d:39:f7:c0:45: c5:03:20:66:db:0f:86:07:a8:c4:29:db:e5:a7:40: fe:1c:27:09:0d:d1:ec:07:fa:6c:14:d4:af:b0:e8: a0:9c:1f:01:62:c2:92:e7:44:76:9c:9e:01:9e:f9: f6:b3:d9:ba:12:67:02:cc:40:3e:9a:fd:af:ed:59: 2b:ff:da:f1:d9:10:a3:1a:95:7f:bd:72:67:25:9a: 85:39:ef:7d:12:ff:70:8e:a0:d3:10:85:57:34:97: 83:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:37:F8:B1:49:3C:6C:5A:1A:B2:14:2A:48:27:19:5C:02:C3:DC:A5 X509v3 Authority Key Identifier: keyid:86:50:DE:F1:B1:C8:9D:70:1C:2B:B9:9C:A9:07:9E:ED:BC:CC:04:6D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/aba8cf65-d468-4309-9f30-9b9f26d9ce2d/0/8650DEF1B1C89D701C2BB99CA9079EEDBCCC046D.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8650DEF1B1C89D701C2BB99CA9079EEDBCCC046D.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/aba8cf65-d468-4309-9f30-9b9f26d9ce2d/0/8650DEF1B1C89D701C2BB99CA9079EEDBCCC046D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4e:4d:1a:7a:61:47:66:98:b1:42:ed:79:4e:a8:91:67:1a:fa: 40:82:59:1b:77:7c:e9:fb:c9:03:6c:4c:d4:94:2a:ff:53:b8: 6e:64:ff:11:6a:51:75:35:41:62:b6:ca:b4:09:e7:6e:00:c4: f5:18:0f:4f:28:3b:45:c6:30:9f:7b:ee:b4:86:ea:c0:b4:45: 3d:a3:55:6f:7c:92:03:9e:92:4b:38:4f:b9:d8:03:06:78:00: 1e:2f:51:09:15:5b:9a:26:88:b6:86:c7:a5:29:39:3d:19:6c: 18:e5:e6:c4:0a:b1:62:d0:e6:c3:c6:d0:39:00:8b:9b:b0:a2: 7b:4c:19:da:19:92:97:d1:47:22:96:05:86:c9:12:43:ec:76: 06:59:99:52:d9:4a:0a:ca:a2:12:8b:f5:b5:57:bd:d6:f1:7f: d5:3b:97:9c:43:e4:56:df:e6:0f:61:72:7f:10:b8:cf:9d:db: 8d:6e:50:57:15:a7:05:1e:07:0c:78:19:bf:cd:6e:17:be:ce: 43:1d:61:cb:5a:87:45:3e:cd:ce:c3:62:54:fd:6b:21:42:e3: 6b:0e:4a:c7:9b:b7:6f:04:33:70:5f:78:dd:72:97:26:de:58: 7b:99:97:d0:b9:4d:51:7f:82:9c:4a:73:ba:79:df:8f:23:52: 61:ae:65:e7 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUUvxS5NmlBsoi+YeU8wE/mwb3+b8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODY1MERFRjFCMUM4OUQ3MDFDMkJCOTlDQTkwNzlFRURC Q0NDMDQ2RDAeFw0yNTA2MzAxNTM2MDJaFw0yNTA3MDMxOTI4MDJaMDMxMTAvBgNV BAMTKEI4MzdGOEIxNDkzQzZDNUExQUIyMTQyQTQ4MjcxOTVDMDJDM0RDQTUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCudFnmbJw1OzT/fotcyuMvl76d 9DJL1jiYc3BomzP+IrCLRU616BjAiabhkbQjmKgUkbRpa15/iDBnyAcscSPxd81h NG3DQo4cwreSYzHEPGN8Rm/gSNdvB3JuQh+/oj5Qj6YKAQbrHh9118OwxU4M6Fli 1aIGdIhgnZ0kGeelJ3xH7QouAfbb3j0PpMrWCRXY2ac4yygCZTUdc+4N2keNOffA RcUDIGbbD4YHqMQp2+WnQP4cJwkN0ewH+mwU1K+w6KCcHwFiwpLnRHacngGe+faz 2boSZwLMQD6a/a/tWSv/2vHZEKMalX+9cmclmoU5730S/3COoNMQhVc0l4NpAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUuDf4sUk8bFoashQqSCcZXALD3KUwHwYDVR0j BBgwFoAUhlDe8bHInXAcK7mcqQee7bzMBG0wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h YmE4Y2Y2NS1kNDY4LTQzMDktOWYzMC05YjlmMjZkOWNlMmQvMC84NjUwREVGMUIx Qzg5RDcwMUMyQkI5OUNBOTA3OUVFREJDQ0MwNDZELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvODY1MERFRjFCMUM4OUQ3MDFDMkJCOTlDQTkwNzlFRURCQ0ND MDQ2RC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYWJhOGNmNjUtZDQ2OC00MzA5LTlm MzAtOWI5ZjI2ZDljZTJkLzAvODY1MERFRjFCMUM4OUQ3MDFDMkJCOTlDQTkwNzlF RURCQ0NDMDQ2RC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAE5NGnphR2aYsULteU6okWca+kCCWRt3fOn7 yQNsTNSUKv9TuG5k/xFqUXU1QWK2yrQJ524AxPUYD08oO0XGMJ977rSG6sC0RT2j VW98kgOekks4T7nYAwZ4AB4vUQkVW5omiLaGx6UpOT0ZbBjl5sQKsWLQ5sPG0DkA i5uwontMGdoZkpfRRyKWBYbJEkPsdgZZmVLZSgrKohKL9bVXvdbxf9U7l5xD5Fbf 5g9hcn8QuM+d241uUFcVpwUeBwx4Gb/Nbhe+zkMdYctah0U+zc7DYlT9ayFC42sO Ssebt28EM3BfeN1ylybeWHuZl9C5TVF/gpxKc7p5348jUmGuZec= -----END CERTIFICATE-----Generated at Tue Jul 1 11:58:41 2025 by rpki-client