$ rpki-client -vvf repo-rpki.idnic.net/repo/b5424280-33be-4eb7-8db9-e03d417c4d97/0/8B4A0C10F88A0B6EF9E4510F0F6127AD75DBC492.mft File: 8B4A0C10F88A0B6EF9E4510F0F6127AD75DBC492.mft (raw, json) Hash identifier: /CTFHfur3QDiX8Efk8cyPPreZedygGLLVsN30tJnMXU= Subject key identifier: 82:14:36:5C:4D:6C:08:C6:3F:65:4C:83:49:20:E5:BC:2D:3B:DE:46 Authority key identifier: 8B:4A:0C:10:F8:8A:0B:6E:F9:E4:51:0F:0F:61:27:AD:75:DB:C4:92 Certificate issuer: /CN=8B4A0C10F88A0B6EF9E4510F0F6127AD75DBC492 Certificate serial: 50840F3AC9055D68E135039FAA377445131EBFEC Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8B4A0C10F88A0B6EF9E4510F0F6127AD75DBC492.cer Subject info access: rsync://repo-rpki.idnic.net/repo/b5424280-33be-4eb7-8db9-e03d417c4d97/0/8B4A0C10F88A0B6EF9E4510F0F6127AD75DBC492.mft Manifest number: 04A2 Signing time: Fri 04 Jul 2025 20:10:47 +0000 Manifest this update: Fri 04 Jul 2025 20:05:47 +0000 Manifest next update: Tue 08 Jul 2025 00:48:47 +0000 Files and hashes: 1: 3130332e3134332e36392e302f32342d3234203d3e20313339333931.roa (hash: 617B49ZlXhGk82stAiewN3YrmDgkhS7z3S8GVYVN5mw=) 2: 3130332e3134332e36382e302f32342d3234203d3e20313339333931.roa (hash: wVNUf+VlURHvtPfJTdBPKqRmCoRq5tMqXCMVvLe41BI=) 3: 8B4A0C10F88A0B6EF9E4510F0F6127AD75DBC492.crl (hash: uDQJDArhHh3KIP4Czf8MSS3up/RqpXvBo8zNhp7JYVE=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/b5424280-33be-4eb7-8db9-e03d417c4d97/0/8B4A0C10F88A0B6EF9E4510F0F6127AD75DBC492.crl rsync://repo-rpki.idnic.net/repo/b5424280-33be-4eb7-8db9-e03d417c4d97/0/8B4A0C10F88A0B6EF9E4510F0F6127AD75DBC492.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8B4A0C10F88A0B6EF9E4510F0F6127AD75DBC492.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 08 Jul 2025 00:48:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 50:84:0f:3a:c9:05:5d:68:e1:35:03:9f:aa:37:74:45:13:1e:bf:ec Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8B4A0C10F88A0B6EF9E4510F0F6127AD75DBC492 Validity Not Before: Jul 4 20:05:47 2025 GMT Not After : Jul 8 00:48:47 2025 GMT Subject: CN=8214365C4D6C08C63F654C834920E5BC2D3BDE46 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:9d:98:ac:da:48:e8:17:6b:a3:63:21:06:39: 68:02:eb:82:88:74:30:9c:1a:48:fc:87:d9:2c:a8: 89:93:8c:6e:bd:3b:57:19:e7:7d:92:ac:39:21:ce: f1:7d:61:93:88:dc:42:91:4a:fc:b7:49:eb:f0:9a: 35:de:10:c5:20:bc:64:04:7c:fc:65:92:f3:ea:b8: fc:95:79:bf:25:f9:38:cb:49:72:3b:27:19:cc:9d: e5:8a:51:74:ae:b8:84:08:b3:97:b3:24:3c:a8:95: 86:de:25:44:ed:b1:8a:0e:d4:c2:b9:65:11:bc:12: e7:4c:12:a9:89:e1:84:e8:c4:33:5e:ac:7c:9b:4c: 82:7b:b6:d5:81:78:91:ea:f8:09:f9:aa:fc:73:f1: e4:f8:50:06:0c:28:9d:51:f8:aa:84:b2:cb:69:fe: 1a:a8:0a:c4:3e:46:37:61:ae:55:32:aa:1a:66:e3: 75:b0:07:02:eb:28:5c:8a:27:26:fe:04:af:ba:28: 27:64:77:9a:8f:de:50:f7:34:01:0a:7b:88:b0:f5: ec:0d:9f:94:99:fe:a7:55:d5:fd:b4:46:a1:12:61: 22:06:0e:e8:78:68:9a:fa:1b:86:7c:51:92:8d:74: 69:64:e9:7d:10:91:5b:ef:24:d5:24:1e:48:c6:54: 6c:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 82:14:36:5C:4D:6C:08:C6:3F:65:4C:83:49:20:E5:BC:2D:3B:DE:46 X509v3 Authority Key Identifier: keyid:8B:4A:0C:10:F8:8A:0B:6E:F9:E4:51:0F:0F:61:27:AD:75:DB:C4:92 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/b5424280-33be-4eb7-8db9-e03d417c4d97/0/8B4A0C10F88A0B6EF9E4510F0F6127AD75DBC492.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8B4A0C10F88A0B6EF9E4510F0F6127AD75DBC492.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/b5424280-33be-4eb7-8db9-e03d417c4d97/0/8B4A0C10F88A0B6EF9E4510F0F6127AD75DBC492.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 71:4a:de:4a:17:eb:ac:cb:42:da:57:53:f2:ae:2d:25:84:e2: 7d:4d:c3:bb:5d:79:d2:6b:b5:c4:af:82:65:09:7d:22:ec:1e: 13:17:89:b7:b1:56:82:e3:99:ee:e5:ae:6a:81:ba:0a:fd:d1: f3:47:5b:a9:7f:45:bd:f3:c0:11:c1:f9:80:a4:cd:31:54:86: c2:b8:bd:46:4b:a7:71:ad:b3:c7:44:a7:98:7a:0a:33:63:c2: ec:8a:86:c5:82:85:7c:ed:21:47:a4:5a:0d:cd:f8:02:10:5a: f2:35:29:9e:27:e2:56:50:58:7c:6b:9d:72:bd:59:4f:a2:bb: c5:34:68:bf:74:03:57:c4:92:7a:91:06:33:1b:69:5c:3b:44: 7c:09:77:53:de:f0:91:75:cc:b9:7f:31:7d:47:ff:31:c1:29: e6:b3:18:2b:1e:a4:af:a3:e9:9b:44:c0:82:cf:b9:85:dc:42: 7e:98:0d:f5:8b:3a:a1:f7:1a:71:5f:7c:57:d7:ea:fb:5f:24: 56:96:bd:bd:4e:cd:a9:01:9f:8f:dc:fa:35:1f:03:5c:3b:42: c7:19:99:ef:33:b3:ce:bd:5c:42:1a:17:3c:87:59:d6:16:bd: 45:62:a4:bc:35:4c:87:06:f3:0b:9b:5e:37:4e:6e:26:c9:73: 1e:7c:45:73 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUUIQPOskFXWjhNQOfqjd0RRMev+wwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEI0QTBDMTBGODhBMEI2RUY5RTQ1MTBGMEY2MTI3QUQ3 NURCQzQ5MjAeFw0yNTA3MDQyMDA1NDdaFw0yNTA3MDgwMDQ4NDdaMDMxMTAvBgNV BAMTKDgyMTQzNjVDNEQ2QzA4QzYzRjY1NEM4MzQ5MjBFNUJDMkQzQkRFNDYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDLnZis2kjoF2ujYyEGOWgC64KI dDCcGkj8h9ksqImTjG69O1cZ532SrDkhzvF9YZOI3EKRSvy3SevwmjXeEMUgvGQE fPxlkvPquPyVeb8l+TjLSXI7JxnMneWKUXSuuIQIs5ezJDyolYbeJUTtsYoO1MK5 ZRG8EudMEqmJ4YToxDNerHybTIJ7ttWBeJHq+An5qvxz8eT4UAYMKJ1R+KqEsstp /hqoCsQ+RjdhrlUyqhpm43WwBwLrKFyKJyb+BK+6KCdkd5qP3lD3NAEKe4iw9ewN n5SZ/qdV1f20RqESYSIGDuh4aJr6G4Z8UZKNdGlk6X0QkVvvJNUkHkjGVGxFAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUghQ2XE1sCMY/ZUyDSSDlvC073kYwHwYDVR0j BBgwFoAUi0oMEPiKC2755FEPD2EnrXXbxJIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i NTQyNDI4MC0zM2JlLTRlYjctOGRiOS1lMDNkNDE3YzRkOTcvMC84QjRBMEMxMEY4 OEEwQjZFRjlFNDUxMEYwRjYxMjdBRDc1REJDNDkyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOEI0QTBDMTBGODhBMEI2RUY5RTQ1MTBGMEY2MTI3QUQ3NURC QzQ5Mi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYjU0MjQyODAtMzNiZS00ZWI3LThk YjktZTAzZDQxN2M0ZDk3LzAvOEI0QTBDMTBGODhBMEI2RUY5RTQ1MTBGMEY2MTI3 QUQ3NURCQzQ5Mi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHFK3koX66zLQtpXU/KuLSWE4n1Nw7tdedJr tcSvgmUJfSLsHhMXibexVoLjme7lrmqBugr90fNHW6l/Rb3zwBHB+YCkzTFUhsK4 vUZLp3Gts8dEp5h6CjNjwuyKhsWChXztIUekWg3N+AIQWvI1KZ4n4lZQWHxrnXK9 WU+iu8U0aL90A1fEknqRBjMbaVw7RHwJd1Pe8JF1zLl/MX1H/zHBKeazGCsepK+j 6ZtEwILPuYXcQn6YDfWLOqH3GnFffFfX6vtfJFaWvb1OzakBn4/c+jUfA1w7QscZ me8zs869XEIaFzyHWdYWvUVipLw1TIcG8wubXjdObibJcx58RXM= -----END CERTIFICATE-----Generated at Sat Jul 5 20:58:55 2025 by rpki-client