$ rpki-client -vvf repo-rpki.idnic.net/repo/b2e06f72-1323-4fbd-b26e-9ed9a9add880/0/09F58F641C5D42BD2D2557FFA2EA061B66ACBDA8.mft File: 09F58F641C5D42BD2D2557FFA2EA061B66ACBDA8.mft (raw, json) Hash identifier: FlvoTv+w6bVfsD7BKJWivUULTntviNMFRg4gKJhVkKk= Subject key identifier: 86:4F:80:11:EC:D4:7B:5F:5B:F2:DF:CB:F3:1D:50:0F:EA:57:96:B5 Authority key identifier: 09:F5:8F:64:1C:5D:42:BD:2D:25:57:FF:A2:EA:06:1B:66:AC:BD:A8 Certificate issuer: /CN=09F58F641C5D42BD2D2557FFA2EA061B66ACBDA8 Certificate serial: 425A849FEC6180270138B6B37ACACE6D03EEE34B Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/09F58F641C5D42BD2D2557FFA2EA061B66ACBDA8.cer Subject info access: rsync://repo-rpki.idnic.net/repo/b2e06f72-1323-4fbd-b26e-9ed9a9add880/0/09F58F641C5D42BD2D2557FFA2EA061B66ACBDA8.mft Manifest number: B8 Signing time: Sat 28 Jun 2025 11:20:58 +0000 Manifest this update: Sat 28 Jun 2025 11:15:58 +0000 Manifest next update: Tue 01 Jul 2025 12:29:58 +0000 Files and hashes: 1: 09F58F641C5D42BD2D2557FFA2EA061B66ACBDA8.crl (hash: opqH0ZLjVRfeKElSefukpxVXS64wICAOTeIwUjVQd9Y=) 2: 3130332e3134332e3139342e302f32342d3234203d3e20313339343135.roa (hash: 6JTrw+Mp0tW4mL+1m/3L++wGPh6kpNXujm25I/r3bRQ=) 3: 3130332e3134332e3139352e302f32342d3234203d3e20313339343135.roa (hash: SPQ4XR24apUiNOZQsSPO5TwjwY0jCKQWVjVVXKtDXDI=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/b2e06f72-1323-4fbd-b26e-9ed9a9add880/0/09F58F641C5D42BD2D2557FFA2EA061B66ACBDA8.crl rsync://repo-rpki.idnic.net/repo/b2e06f72-1323-4fbd-b26e-9ed9a9add880/0/09F58F641C5D42BD2D2557FFA2EA061B66ACBDA8.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/09F58F641C5D42BD2D2557FFA2EA061B66ACBDA8.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 01 Jul 2025 12:29:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 42:5a:84:9f:ec:61:80:27:01:38:b6:b3:7a:ca:ce:6d:03:ee:e3:4b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=09F58F641C5D42BD2D2557FFA2EA061B66ACBDA8 Validity Not Before: Jun 28 11:15:58 2025 GMT Not After : Jul 1 12:29:58 2025 GMT Subject: CN=864F8011ECD47B5F5BF2DFCBF31D500FEA5796B5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f4:c1:4a:77:85:bc:f0:3d:ce:cb:ce:2c:64:58: 5a:1b:ab:94:0f:ce:03:58:6e:e0:88:07:d7:19:2d: b7:ef:16:94:e2:5f:26:51:f2:22:f8:31:3d:68:54: 52:70:5b:2f:0a:19:79:99:07:80:19:a6:d0:42:56: 4e:fa:ce:12:49:70:fa:f9:a5:32:49:42:79:a2:a7: ce:12:00:ba:8a:e9:c1:55:b2:d5:8f:fb:38:ff:42: 4b:84:be:be:f9:12:43:fa:8f:84:78:03:4f:b5:d2: 19:16:2b:51:8e:ac:14:06:b7:89:b5:c7:0f:65:87: 17:93:0b:77:af:e2:ec:a3:be:26:df:86:d3:01:d5: ce:1a:c3:be:0e:14:47:f1:08:e0:65:3f:8b:56:6c: 61:9a:d3:48:c3:80:97:a0:45:2c:4c:42:3f:96:4e: 5e:61:b8:e7:b8:19:56:05:25:da:64:d8:70:ea:db: f9:11:5b:0a:8c:91:84:fb:e5:62:7f:1c:47:53:32: 58:d2:5d:d8:16:e2:90:54:8f:d4:95:7c:d1:37:49: 55:07:64:02:fb:02:7b:95:4f:0c:d9:cc:74:87:50: 4c:0f:16:93:27:63:00:8c:8a:db:5b:69:b7:f4:f9: eb:45:54:88:30:b8:e0:fe:f0:ac:aa:e7:26:e4:54: 38:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:4F:80:11:EC:D4:7B:5F:5B:F2:DF:CB:F3:1D:50:0F:EA:57:96:B5 X509v3 Authority Key Identifier: keyid:09:F5:8F:64:1C:5D:42:BD:2D:25:57:FF:A2:EA:06:1B:66:AC:BD:A8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/b2e06f72-1323-4fbd-b26e-9ed9a9add880/0/09F58F641C5D42BD2D2557FFA2EA061B66ACBDA8.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/09F58F641C5D42BD2D2557FFA2EA061B66ACBDA8.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/b2e06f72-1323-4fbd-b26e-9ed9a9add880/0/09F58F641C5D42BD2D2557FFA2EA061B66ACBDA8.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 60:32:39:bb:c9:48:b6:80:e7:1c:d9:8a:64:09:87:b0:bb:19: c0:a3:ee:20:11:22:a0:a2:3d:ef:1d:93:93:b2:c9:1b:f0:7f: 60:27:25:bd:f4:de:2f:51:2f:0b:ad:96:5e:58:11:c5:d0:ef: 59:ae:b5:b5:75:b7:bc:1b:1c:a8:af:fb:71:bb:f8:fd:1a:f5: d4:60:6d:39:08:29:e6:d4:cd:b6:06:bf:53:96:5d:2e:dd:dc: 18:40:13:30:d1:7c:41:99:85:0b:1e:6a:df:4c:8e:7a:02:28: 55:7a:ef:e0:e4:b8:49:c1:f0:63:61:78:8c:93:94:ef:93:eb: 36:f9:91:b3:9d:d6:c5:0d:44:af:48:44:ed:8b:3c:35:9e:ed: a8:d1:b1:9d:91:dd:b1:46:28:29:1e:ed:08:15:77:4f:5d:72: 00:8d:24:dd:fc:6b:b6:71:be:64:8e:4a:c0:e5:dd:73:7e:9f: 3f:29:89:4d:6e:39:c7:87:d9:c0:5e:62:9f:5b:ff:ab:a4:e3: ea:f1:9e:79:ef:73:cd:17:24:0e:07:9b:f6:d5:be:68:2f:ad: 21:1b:78:ee:e7:6b:ad:30:e8:6c:21:9c:b7:7d:0e:d0:9b:fa: a1:d3:80:99:19:77:c8:ef:ea:1b:90:fe:ce:bf:bd:8d:f0:e5: a8:45:60:e8 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUQlqEn+xhgCcBOLazesrObQPu40swDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDlGNThGNjQxQzVENDJCRDJEMjU1N0ZGQTJFQTA2MUI2 NkFDQkRBODAeFw0yNTA2MjgxMTE1NThaFw0yNTA3MDExMjI5NThaMDMxMTAvBgNV BAMTKDg2NEY4MDExRUNENDdCNUY1QkYyREZDQkYzMUQ1MDBGRUE1Nzk2QjUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD0wUp3hbzwPc7LzixkWFobq5QP zgNYbuCIB9cZLbfvFpTiXyZR8iL4MT1oVFJwWy8KGXmZB4AZptBCVk76zhJJcPr5 pTJJQnmip84SALqK6cFVstWP+zj/QkuEvr75EkP6j4R4A0+10hkWK1GOrBQGt4m1 xw9lhxeTC3ev4uyjvibfhtMB1c4aw74OFEfxCOBlP4tWbGGa00jDgJegRSxMQj+W Tl5huOe4GVYFJdpk2HDq2/kRWwqMkYT75WJ/HEdTMljSXdgW4pBUj9SVfNE3SVUH ZAL7AnuVTwzZzHSHUEwPFpMnYwCMittbabf0+etFVIgwuOD+8Kyq5ybkVDhTAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUhk+AEezUe19b8t/L8x1QD+pXlrUwHwYDVR0j BBgwFoAUCfWPZBxdQr0tJVf/ouoGG2asvagwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i MmUwNmY3Mi0xMzIzLTRmYmQtYjI2ZS05ZWQ5YTlhZGQ4ODAvMC8wOUY1OEY2NDFD NUQ0MkJEMkQyNTU3RkZBMkVBMDYxQjY2QUNCREE4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMDlGNThGNjQxQzVENDJCRDJEMjU1N0ZGQTJFQTA2MUI2NkFD QkRBOC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYjJlMDZmNzItMTMyMy00ZmJkLWIy NmUtOWVkOWE5YWRkODgwLzAvMDlGNThGNjQxQzVENDJCRDJEMjU1N0ZGQTJFQTA2 MUI2NkFDQkRBOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGAyObvJSLaA5xzZimQJh7C7GcCj7iARIqCi Pe8dk5OyyRvwf2AnJb303i9RLwutll5YEcXQ71mutbV1t7wbHKiv+3G7+P0a9dRg bTkIKebUzbYGv1OWXS7d3BhAEzDRfEGZhQseat9MjnoCKFV67+DkuEnB8GNheIyT lO+T6zb5kbOd1sUNRK9IRO2LPDWe7ajRsZ2R3bFGKCke7QgVd09dcgCNJN38a7Zx vmSOSsDl3XN+nz8piU1uOceH2cBeYp9b/6uk4+rxnnnvc80XJA4Hm/bVvmgvrSEb eO7na60w6GwhnLd9DtCb+qHTgJkZd8jv6huQ/s6/vY3w5ahFYOg= -----END CERTIFICATE-----Generated at Mon Jun 30 01:09:44 2025 by rpki-client