$ rpki-client -vvf repo-rpki.idnic.net/repo/b7b87f6d-29a7-4b4c-81c7-5b4cbdb2cb6a/0/8603B0F726A05AB356D10DB170BD8E27963AFE1A.mft File: 8603B0F726A05AB356D10DB170BD8E27963AFE1A.mft (raw, json) Hash identifier: rao7XG42S6LEu9xENNCNyXbq7m4iy0vMImm0DoGyj5I= Subject key identifier: AF:97:BA:37:B0:8F:FD:0A:45:75:B9:A3:25:04:A3:FE:57:0D:1B:60 Authority key identifier: 86:03:B0:F7:26:A0:5A:B3:56:D1:0D:B1:70:BD:8E:27:96:3A:FE:1A Certificate issuer: /CN=8603B0F726A05AB356D10DB170BD8E27963AFE1A Certificate serial: 096FCA41E16DDB2F2F86B7A667B6EE228CBB9226 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8603B0F726A05AB356D10DB170BD8E27963AFE1A.cer Subject info access: rsync://repo-rpki.idnic.net/repo/b7b87f6d-29a7-4b4c-81c7-5b4cbdb2cb6a/0/8603B0F726A05AB356D10DB170BD8E27963AFE1A.mft Manifest number: 03D5 Signing time: Tue 01 Jul 2025 17:31:55 +0000 Manifest this update: Tue 01 Jul 2025 17:26:55 +0000 Manifest next update: Fri 04 Jul 2025 22:32:55 +0000 Files and hashes: 1: 8603B0F726A05AB356D10DB170BD8E27963AFE1A.crl (hash: pTtHyQ4wFnXW35yvb1g8FuXzbcR7W33j5bWqKA0HOug=) 2: 3130332e3134382e31382e302f32332d3233203d3e20313339393738.roa (hash: 9QqvAfZSusq7TNTZjMNWZS+7iPHdwM0xe1dY5FOdfh4=) 3: 3130332e3134382e31392e302f32342d3234203d3e20313339393738.roa (hash: CZOT3Qe6u5gK3ZMkwDdMPzpBsT/hchoPycr1jT+sxpE=) 4: 3130332e3134382e31382e302f32342d3234203d3e20313339393738.roa (hash: KlVfWP1Il3RN3ASw6Ya5TPYfRFfepbYfILbLkUXBAks=) 5: 323430353a633763303a3a2f33322d3332203d3e20313339393738.roa (hash: w1U60qcdJqGqgGejfw5qqfHMeYCjchzAjGjkoYQhMH8=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/b7b87f6d-29a7-4b4c-81c7-5b4cbdb2cb6a/0/8603B0F726A05AB356D10DB170BD8E27963AFE1A.crl rsync://repo-rpki.idnic.net/repo/b7b87f6d-29a7-4b4c-81c7-5b4cbdb2cb6a/0/8603B0F726A05AB356D10DB170BD8E27963AFE1A.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8603B0F726A05AB356D10DB170BD8E27963AFE1A.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 04 Jul 2025 22:32:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 09:6f:ca:41:e1:6d:db:2f:2f:86:b7:a6:67:b6:ee:22:8c:bb:92:26 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8603B0F726A05AB356D10DB170BD8E27963AFE1A Validity Not Before: Jul 1 17:26:55 2025 GMT Not After : Jul 4 22:32:55 2025 GMT Subject: CN=AF97BA37B08FFD0A4575B9A32504A3FE570D1B60 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:cb:eb:ff:20:c7:55:a2:f0:37:4c:45:0a:8e: 49:27:5f:db:4e:7d:c6:a6:28:c0:31:a5:5c:c3:e2: b3:ae:0f:66:72:3f:1d:50:12:6e:bc:27:48:f5:c5: 9a:f6:40:b8:f6:ba:d8:57:9c:9b:b1:b0:3c:ea:d6: 01:73:07:16:30:0f:86:ee:d1:f7:71:21:67:c8:54: 77:7d:f8:28:4e:0d:da:5f:0b:0d:16:f4:d1:f5:02: db:2f:37:5b:cf:75:fb:52:60:cb:4b:e2:91:31:b1: e3:35:b1:d0:86:a0:e0:ae:6c:b6:59:46:09:b4:d8: e3:19:4f:4d:e7:80:eb:3e:7d:53:91:11:d5:de:d8: c1:21:f5:84:89:d5:8a:b5:34:31:42:c6:9e:f2:57: df:6c:f4:54:b6:cb:90:3a:8c:2a:62:32:c2:fe:4f: b4:45:d0:51:f4:52:ae:a1:e4:55:cc:77:97:6b:9f: 0d:5f:3d:c3:84:64:fa:54:61:a1:11:b3:04:50:fb: 09:40:58:7d:56:fc:e1:1f:fb:54:09:91:54:42:07: c1:8d:d7:14:bd:8c:c0:9e:85:1c:09:0d:54:6d:21: f0:cd:e9:21:f2:54:00:bb:c7:68:25:7b:be:9e:59: 06:d6:20:a3:a2:5b:ab:d9:87:08:07:6c:31:8a:44: a5:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:97:BA:37:B0:8F:FD:0A:45:75:B9:A3:25:04:A3:FE:57:0D:1B:60 X509v3 Authority Key Identifier: keyid:86:03:B0:F7:26:A0:5A:B3:56:D1:0D:B1:70:BD:8E:27:96:3A:FE:1A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/b7b87f6d-29a7-4b4c-81c7-5b4cbdb2cb6a/0/8603B0F726A05AB356D10DB170BD8E27963AFE1A.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8603B0F726A05AB356D10DB170BD8E27963AFE1A.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/b7b87f6d-29a7-4b4c-81c7-5b4cbdb2cb6a/0/8603B0F726A05AB356D10DB170BD8E27963AFE1A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 90:d6:2d:04:7b:47:73:9d:31:42:0a:7a:7a:02:a7:cf:31:f8: dc:16:1f:fd:0e:79:fd:19:dd:a3:78:31:dc:8f:e3:2a:68:09: 6f:d5:0f:21:02:97:b4:c6:e8:11:68:82:c9:e0:19:99:96:ed: b1:a8:d4:f4:75:ed:16:a3:a6:be:00:8d:db:4c:81:df:64:da: d6:e9:73:29:45:d3:2c:98:29:f2:50:18:14:ae:9e:d5:2a:44: 3a:8e:a7:7b:4a:fd:ff:47:80:79:b6:f1:69:0b:e1:6d:e1:34: 38:e3:59:ce:f4:b2:30:ee:5b:38:cc:bc:a1:94:98:92:6f:b0: 51:09:91:fc:a7:13:0c:08:db:c2:9e:7a:a9:c5:9a:a7:4f:54: cf:7e:fc:30:2a:e3:b1:e7:74:5d:2d:d1:1a:03:01:4c:45:5e: 2a:65:0d:61:ff:7f:ae:d1:83:8e:d1:cc:f2:7b:70:5b:e5:a3: 83:ab:f8:14:4d:88:0f:1f:16:9d:b8:72:1c:0d:d0:96:98:49: 91:5d:07:e3:27:12:db:be:99:40:1c:27:89:77:91:16:a6:1e: 7d:4b:bb:29:b1:07:d4:5d:20:5d:65:c8:19:93:35:7a:60:29: 36:a6:2f:28:d9:69:25:12:bc:7c:6b:76:bc:69:2a:70:18:7e: c1:ba:8a:34 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUCW/KQeFt2y8vhremZ7buIoy7kiYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODYwM0IwRjcyNkEwNUFCMzU2RDEwREIxNzBCRDhFMjc5 NjNBRkUxQTAeFw0yNTA3MDExNzI2NTVaFw0yNTA3MDQyMjMyNTVaMDMxMTAvBgNV BAMTKEFGOTdCQTM3QjA4RkZEMEE0NTc1QjlBMzI1MDRBM0ZFNTcwRDFCNjAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCzy+v/IMdVovA3TEUKjkknX9tO fcamKMAxpVzD4rOuD2ZyPx1QEm68J0j1xZr2QLj2uthXnJuxsDzq1gFzBxYwD4bu 0fdxIWfIVHd9+ChODdpfCw0W9NH1AtsvN1vPdftSYMtL4pExseM1sdCGoOCubLZZ Rgm02OMZT03ngOs+fVOREdXe2MEh9YSJ1Yq1NDFCxp7yV99s9FS2y5A6jCpiMsL+ T7RF0FH0Uq6h5FXMd5drnw1fPcOEZPpUYaERswRQ+wlAWH1W/OEf+1QJkVRCB8GN 1xS9jMCehRwJDVRtIfDN6SHyVAC7x2gle76eWQbWIKOiW6vZhwgHbDGKRKVlAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUr5e6N7CP/QpFdbmjJQSj/lcNG2AwHwYDVR0j BBgwFoAUhgOw9yagWrNW0Q2xcL2OJ5Y6/howDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i N2I4N2Y2ZC0yOWE3LTRiNGMtODFjNy01YjRjYmRiMmNiNmEvMC84NjAzQjBGNzI2 QTA1QUIzNTZEMTBEQjE3MEJEOEUyNzk2M0FGRTFBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvODYwM0IwRjcyNkEwNUFCMzU2RDEwREIxNzBCRDhFMjc5NjNB RkUxQS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYjdiODdmNmQtMjlhNy00YjRjLTgx YzctNWI0Y2JkYjJjYjZhLzAvODYwM0IwRjcyNkEwNUFCMzU2RDEwREIxNzBCRDhF Mjc5NjNBRkUxQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJDWLQR7R3OdMUIKenoCp88x+NwWH/0Oef0Z 3aN4MdyP4ypoCW/VDyECl7TG6BFogsngGZmW7bGo1PR17Rajpr4AjdtMgd9k2tbp cylF0yyYKfJQGBSuntUqRDqOp3tK/f9HgHm28WkL4W3hNDjjWc70sjDuWzjMvKGU mJJvsFEJkfynEwwI28KeeqnFmqdPVM9+/DAq47HndF0t0RoDAUxFXiplDWH/f67R g47RzPJ7cFvlo4Or+BRNiA8fFp24chwN0JaYSZFdB+MnEtu+mUAcJ4l3kRamHn1L uymxB9RdIF1lyBmTNXpgKTamLyjZaSUSvHxrdrxpKnAYfsG6ijQ= -----END CERTIFICATE-----Generated at Thu Jul 3 06:44:47 2025 by rpki-client