$ rpki-client -vvf repo-rpki.idnic.net/repo/aef837b3-dfd2-42cc-9b79-74b6bafd4e2d/0/8711D05D82BAFB7BEAB275E079A72DDD554064EA.mft File: 8711D05D82BAFB7BEAB275E079A72DDD554064EA.mft (raw, json) Hash identifier: 6OJV3wmTzXFodOCsnzDv+CJE+PZFT5zcu/pgNoow0JA= Subject key identifier: 49:FD:62:B3:88:1E:83:1E:8F:95:12:FF:9F:1A:A0:1A:F2:40:E2:AA Authority key identifier: 87:11:D0:5D:82:BA:FB:7B:EA:B2:75:E0:79:A7:2D:DD:55:40:64:EA Certificate issuer: /CN=8711D05D82BAFB7BEAB275E079A72DDD554064EA Certificate serial: 51833B2EE129609059431A4A4B1515B476511829 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8711D05D82BAFB7BEAB275E079A72DDD554064EA.cer Subject info access: rsync://repo-rpki.idnic.net/repo/aef837b3-dfd2-42cc-9b79-74b6bafd4e2d/0/8711D05D82BAFB7BEAB275E079A72DDD554064EA.mft Manifest number: 01B3 Signing time: Sat 28 Jun 2025 10:52:01 +0000 Manifest this update: Sat 28 Jun 2025 10:47:01 +0000 Manifest next update: Tue 01 Jul 2025 17:56:01 +0000 Files and hashes: 1: 3130332e31372e3137392e302f32342d3234203d3e20313530323236.roa (hash: zZiAzMvnjGpr4Mq+/OGXUdFHQPaHJLr/tCxwWuWhySI=) 2: 8711D05D82BAFB7BEAB275E079A72DDD554064EA.crl (hash: qRMJqd5AqKNJ9smlbb23cauo68tcDkX49JbxBxLf5yg=) 3: 3130332e31372e3137382e302f32342d3234203d3e20313530323236.roa (hash: 6sZc5cLjn8BGU3ndbP5aYFbkGJW/EMEDKLHgtlwJygA=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/aef837b3-dfd2-42cc-9b79-74b6bafd4e2d/0/8711D05D82BAFB7BEAB275E079A72DDD554064EA.crl rsync://repo-rpki.idnic.net/repo/aef837b3-dfd2-42cc-9b79-74b6bafd4e2d/0/8711D05D82BAFB7BEAB275E079A72DDD554064EA.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8711D05D82BAFB7BEAB275E079A72DDD554064EA.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 01 Jul 2025 17:56:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 51:83:3b:2e:e1:29:60:90:59:43:1a:4a:4b:15:15:b4:76:51:18:29 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8711D05D82BAFB7BEAB275E079A72DDD554064EA Validity Not Before: Jun 28 10:47:01 2025 GMT Not After : Jul 1 17:56:01 2025 GMT Subject: CN=49FD62B3881E831E8F9512FF9F1AA01AF240E2AA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:66:73:b4:9d:4e:ef:e9:3a:06:27:84:06:a4: 69:7d:7a:b9:1d:54:3b:a2:82:0c:b4:12:66:55:84: ca:11:18:c7:b0:c4:fb:b9:3e:b2:54:d9:09:45:56: b8:45:08:87:e8:51:f4:c7:00:0c:91:ac:a3:37:9b: cd:e2:44:ec:35:0d:ac:57:bf:a8:6e:dd:01:74:4e: c7:25:e3:80:61:44:4e:e7:ca:e0:9f:a8:01:dc:ad: 39:8c:bf:4d:74:70:a5:63:79:4d:0b:21:3d:ae:55: f9:1f:7d:e6:48:7b:cc:3a:4c:e3:f7:c6:d4:c7:9f: 4d:5c:44:a7:07:14:f1:61:74:9a:6b:51:2e:53:bc: 97:b0:11:93:ae:b3:63:40:f5:f0:69:e3:87:6c:f8: 16:d2:74:f6:8d:d6:f3:a5:4d:07:7b:00:6f:92:b6: c7:b2:f3:22:fa:88:f2:9d:c4:5e:fd:f3:3e:15:ed: c2:a1:00:f9:0c:3e:4c:83:c4:40:ca:39:9c:f0:97: 33:f6:7b:f8:6a:b7:02:67:0d:ba:39:b7:28:de:8f: d2:71:9a:6c:20:5e:8a:fa:81:91:b5:90:03:05:7c: 6a:25:6c:19:f9:bd:6f:a4:91:95:e0:ab:a4:3a:30: 08:aa:b8:8d:dd:d7:21:d2:37:e4:af:51:47:3a:84: 28:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:FD:62:B3:88:1E:83:1E:8F:95:12:FF:9F:1A:A0:1A:F2:40:E2:AA X509v3 Authority Key Identifier: keyid:87:11:D0:5D:82:BA:FB:7B:EA:B2:75:E0:79:A7:2D:DD:55:40:64:EA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/aef837b3-dfd2-42cc-9b79-74b6bafd4e2d/0/8711D05D82BAFB7BEAB275E079A72DDD554064EA.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8711D05D82BAFB7BEAB275E079A72DDD554064EA.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/aef837b3-dfd2-42cc-9b79-74b6bafd4e2d/0/8711D05D82BAFB7BEAB275E079A72DDD554064EA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4e:ae:4b:7b:19:07:3c:b9:d4:40:3b:b4:63:a0:e4:4b:d6:59: ba:d6:e1:ec:fc:96:10:9e:c6:c4:20:a2:17:3e:6c:0e:3f:37: a1:bc:53:7d:fd:c6:f7:d6:98:7a:2a:1c:5a:10:85:9f:06:b1: 3b:da:ea:1a:fd:8f:e6:71:f3:a4:16:c1:8b:59:b7:fe:f3:e9: 3e:19:34:c6:00:13:fc:37:78:85:22:25:b1:72:c0:af:9b:28: 7f:ee:86:5f:4e:70:ea:bb:68:38:ca:41:71:d7:7f:98:d5:d6: ea:c4:e1:d5:5e:f5:85:21:32:31:bb:4f:31:84:68:7b:d3:6e: 26:e3:5d:aa:53:29:2d:da:d5:88:af:b2:dd:ad:5c:4f:dc:2b: dd:26:0d:1d:41:cd:f6:4a:da:2b:07:76:ba:3f:8a:23:a1:1a: e4:a0:81:74:d8:be:c8:e1:1f:d1:45:23:6b:de:94:95:ad:0b: fb:30:fb:63:d0:9b:db:75:f0:e2:d5:1f:ba:ac:20:3c:4b:9a: de:67:11:26:eb:d4:23:26:09:89:ff:82:01:a8:e9:cb:13:27: 94:ad:fb:f5:db:af:18:d9:5a:48:72:44:53:06:3d:f0:4c:da: 80:42:ca:73:f3:58:72:36:21:8f:66:78:24:17:2b:a7:8d:73: c5:5c:31:53 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUUYM7LuEpYJBZQxpKSxUVtHZRGCkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODcxMUQwNUQ4MkJBRkI3QkVBQjI3NUUwNzlBNzJEREQ1 NTQwNjRFQTAeFw0yNTA2MjgxMDQ3MDFaFw0yNTA3MDExNzU2MDFaMDMxMTAvBgNV BAMTKDQ5RkQ2MkIzODgxRTgzMUU4Rjk1MTJGRjlGMUFBMDFBRjI0MEUyQUEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDoZnO0nU7v6ToGJ4QGpGl9erkd VDuiggy0EmZVhMoRGMewxPu5PrJU2QlFVrhFCIfoUfTHAAyRrKM3m83iROw1DaxX v6hu3QF0Tscl44BhRE7nyuCfqAHcrTmMv010cKVjeU0LIT2uVfkffeZIe8w6TOP3 xtTHn01cRKcHFPFhdJprUS5TvJewEZOus2NA9fBp44ds+BbSdPaN1vOlTQd7AG+S tsey8yL6iPKdxF798z4V7cKhAPkMPkyDxEDKOZzwlzP2e/hqtwJnDbo5tyjej9Jx mmwgXor6gZG1kAMFfGolbBn5vW+kkZXgq6Q6MAiquI3d1yHSN+SvUUc6hCjjAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUSf1is4gegx6PlRL/nxqgGvJA4qowHwYDVR0j BBgwFoAUhxHQXYK6+3vqsnXgeact3VVAZOowDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h ZWY4MzdiMy1kZmQyLTQyY2MtOWI3OS03NGI2YmFmZDRlMmQvMC84NzExRDA1RDgy QkFGQjdCRUFCMjc1RTA3OUE3MkRERDU1NDA2NEVBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvODcxMUQwNUQ4MkJBRkI3QkVBQjI3NUUwNzlBNzJEREQ1NTQw NjRFQS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYWVmODM3YjMtZGZkMi00MmNjLTli NzktNzRiNmJhZmQ0ZTJkLzAvODcxMUQwNUQ4MkJBRkI3QkVBQjI3NUUwNzlBNzJE REQ1NTQwNjRFQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAE6uS3sZBzy51EA7tGOg5EvWWbrW4ez8lhCe xsQgohc+bA4/N6G8U339xvfWmHoqHFoQhZ8GsTva6hr9j+Zx86QWwYtZt/7z6T4Z NMYAE/w3eIUiJbFywK+bKH/uhl9OcOq7aDjKQXHXf5jV1urE4dVe9YUhMjG7TzGE aHvTbibjXapTKS3a1Yivst2tXE/cK90mDR1BzfZK2isHdro/iiOhGuSggXTYvsjh H9FFI2velJWtC/sw+2PQm9t18OLVH7qsIDxLmt5nESbr1CMmCYn/ggGo6csTJ5St +/XbrxjZWkhyRFMGPfBM2oBCynPzWHI2IY9meCQXK6eNc8VcMVM= -----END CERTIFICATE-----Generated at Sun Jun 29 18:10:15 2025 by rpki-client