$ rpki-client -vvf repo-rpki.idnic.net/repo/b94c1e95-a738-4e47-8e5c-7af681b36b00/0/8DBECF314BD3C829923A3A97BFC62113A61F8EE1.mft File: 8DBECF314BD3C829923A3A97BFC62113A61F8EE1.mft (raw, json) Hash identifier: H9ILQoBLdpd5xpS7nAX9BsE4NTDKtzKUEScqHXccE7E= Subject key identifier: DA:F4:CA:AC:5F:37:CE:07:C7:2A:F6:4D:9A:62:4D:3F:3B:96:53:D7 Authority key identifier: 8D:BE:CF:31:4B:D3:C8:29:92:3A:3A:97:BF:C6:21:13:A6:1F:8E:E1 Certificate issuer: /CN=8DBECF314BD3C829923A3A97BFC62113A61F8EE1 Certificate serial: 09D5AE6E66D7CB56D9C3583C8518BABE02C6EFB7 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8DBECF314BD3C829923A3A97BFC62113A61F8EE1.cer Subject info access: rsync://repo-rpki.idnic.net/repo/b94c1e95-a738-4e47-8e5c-7af681b36b00/0/8DBECF314BD3C829923A3A97BFC62113A61F8EE1.mft Manifest number: 01E1 Signing time: Sat 28 Jun 2025 14:51:08 +0000 Manifest this update: Sat 28 Jun 2025 14:46:08 +0000 Manifest next update: Wed 02 Jul 2025 01:16:08 +0000 Files and hashes: 1: 3130332e3138362e39302e302f32342d3234203d3e20313439373037.roa (hash: 656gLN35OIXcG6Vik35XhI6XoKD7dIobeeOabAVD0UQ=) 2: 3130332e3138362e39302e302f32332d3233203d3e20313439373037.roa (hash: IxE4f1xQzeKQZjsPZmdFbJyZKv94xhwmFh4/4Aw/W0I=) 3: 8DBECF314BD3C829923A3A97BFC62113A61F8EE1.crl (hash: JNcediJXu+oB29UzqjmnSY/GkR+yxXP7sTmLwJCcciQ=) 4: 3130332e3138362e39312e302f32342d3234203d3e20313439373037.roa (hash: v7WXEnDaWLgLHCCs0/IjJD0cW6T6d8CeSIJNddKA634=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/b94c1e95-a738-4e47-8e5c-7af681b36b00/0/8DBECF314BD3C829923A3A97BFC62113A61F8EE1.crl rsync://repo-rpki.idnic.net/repo/b94c1e95-a738-4e47-8e5c-7af681b36b00/0/8DBECF314BD3C829923A3A97BFC62113A61F8EE1.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8DBECF314BD3C829923A3A97BFC62113A61F8EE1.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 02 Jul 2025 01:16:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 09:d5:ae:6e:66:d7:cb:56:d9:c3:58:3c:85:18:ba:be:02:c6:ef:b7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8DBECF314BD3C829923A3A97BFC62113A61F8EE1 Validity Not Before: Jun 28 14:46:08 2025 GMT Not After : Jul 2 01:16:08 2025 GMT Subject: CN=DAF4CAAC5F37CE07C72AF64D9A624D3F3B9653D7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:af:e4:6c:93:eb:fa:5c:f8:c2:8b:11:6c:0d: b2:9d:e1:63:8e:55:c6:b7:f6:3c:a7:1b:96:2d:c9: 18:37:b6:10:3e:3f:a8:05:3e:5b:c9:ef:6a:c2:f9: c2:11:7c:32:d1:45:12:f4:82:35:3c:f9:ee:91:e2: ad:0f:58:a2:60:95:ab:77:45:40:07:2f:96:c3:8b: 6b:5a:d5:2f:35:0d:08:4d:c6:d4:48:23:64:1b:f1: ac:56:54:3b:c5:2b:8e:81:97:b5:27:2a:44:41:c1: 99:1b:50:7d:b1:06:e3:51:84:33:3c:13:9d:4c:0d: 15:08:df:00:f5:d8:0b:51:cf:8f:6d:fa:a5:d3:ba: 16:54:23:38:64:a7:c4:86:77:c4:38:50:97:6f:94: 9e:85:28:90:d8:23:de:3c:ae:5c:ee:f4:12:0a:91: 5b:f7:51:c1:42:8f:45:4e:55:b6:d3:57:08:c9:07: b6:86:c7:46:b4:0c:44:40:81:83:dd:32:25:46:1e: 4d:ee:31:28:bd:f7:5a:4a:9e:70:1a:6d:5d:53:89: 11:22:09:2a:70:ea:7f:17:bc:5e:a7:2c:9f:48:f9: f3:7d:b3:99:a6:22:1e:2e:14:64:ff:e8:4a:5e:26: 65:bd:cc:9b:4f:4c:89:30:64:e8:f6:cf:87:40:64: 76:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DA:F4:CA:AC:5F:37:CE:07:C7:2A:F6:4D:9A:62:4D:3F:3B:96:53:D7 X509v3 Authority Key Identifier: keyid:8D:BE:CF:31:4B:D3:C8:29:92:3A:3A:97:BF:C6:21:13:A6:1F:8E:E1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/b94c1e95-a738-4e47-8e5c-7af681b36b00/0/8DBECF314BD3C829923A3A97BFC62113A61F8EE1.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8DBECF314BD3C829923A3A97BFC62113A61F8EE1.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/b94c1e95-a738-4e47-8e5c-7af681b36b00/0/8DBECF314BD3C829923A3A97BFC62113A61F8EE1.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 70:42:45:ad:84:6f:54:79:9a:a6:80:7d:2d:c2:70:60:90:8d: 3f:ce:56:d0:0d:18:33:64:cb:b4:ed:3f:f0:c0:05:ce:b1:03: 7d:67:1c:59:44:61:b2:f6:de:5d:a1:9e:35:96:b0:3b:25:e8: b7:4f:6c:ea:e8:f1:f0:e9:dc:1d:e2:23:4f:e2:27:77:1b:40: d3:d8:ff:72:3a:82:90:ef:33:2d:34:a3:a6:f4:ed:c7:21:62: 89:da:f4:71:d6:14:5f:5f:6d:93:4d:29:b1:ab:7f:0e:56:65: ed:50:e3:45:7b:39:c6:0d:3a:33:bf:dd:1b:74:46:28:bd:15: 74:9a:0d:ca:93:1a:9c:52:9c:bb:bd:2a:b5:af:a7:84:49:43: 41:1a:28:59:22:3e:33:9c:4f:ac:f6:74:4c:00:be:91:28:60: 2b:78:2d:8d:75:3d:df:01:52:77:af:b0:b3:05:82:b6:ac:a0: f5:ee:45:8c:4d:3b:90:24:b7:46:3b:0a:a0:2d:77:dc:4e:46: 76:36:43:fa:67:46:cc:45:70:df:47:9e:e9:47:15:87:b3:48: 58:f6:34:b6:4e:39:5c:32:34:e0:98:fd:ed:70:1e:4e:a8:7b: 06:b6:bf:8d:fb:a1:70:5d:e6:4b:91:69:3f:25:d6:8e:96:4c: ab:a3:23:b0 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUCdWubmbXy1bZw1g8hRi6vgLG77cwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOERCRUNGMzE0QkQzQzgyOTkyM0EzQTk3QkZDNjIxMTNB NjFGOEVFMTAeFw0yNTA2MjgxNDQ2MDhaFw0yNTA3MDIwMTE2MDhaMDMxMTAvBgNV BAMTKERBRjRDQUFDNUYzN0NFMDdDNzJBRjY0RDlBNjI0RDNGM0I5NjUzRDcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDGr+Rsk+v6XPjCixFsDbKd4WOO Vca39jynG5YtyRg3thA+P6gFPlvJ72rC+cIRfDLRRRL0gjU8+e6R4q0PWKJglat3 RUAHL5bDi2ta1S81DQhNxtRII2Qb8axWVDvFK46Bl7UnKkRBwZkbUH2xBuNRhDM8 E51MDRUI3wD12AtRz49t+qXTuhZUIzhkp8SGd8Q4UJdvlJ6FKJDYI948rlzu9BIK kVv3UcFCj0VOVbbTVwjJB7aGx0a0DERAgYPdMiVGHk3uMSi991pKnnAabV1TiREi CSpw6n8XvF6nLJ9I+fN9s5mmIh4uFGT/6EpeJmW9zJtPTIkwZOj2z4dAZHbNAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU2vTKrF83zgfHKvZNmmJNPzuWU9cwHwYDVR0j BBgwFoAUjb7PMUvTyCmSOjqXv8YhE6YfjuEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i OTRjMWU5NS1hNzM4LTRlNDctOGU1Yy03YWY2ODFiMzZiMDAvMC84REJFQ0YzMTRC RDNDODI5OTIzQTNBOTdCRkM2MjExM0E2MUY4RUUxLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOERCRUNGMzE0QkQzQzgyOTkyM0EzQTk3QkZDNjIxMTNBNjFG OEVFMS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYjk0YzFlOTUtYTczOC00ZTQ3LThl NWMtN2FmNjgxYjM2YjAwLzAvOERCRUNGMzE0QkQzQzgyOTkyM0EzQTk3QkZDNjIx MTNBNjFGOEVFMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHBCRa2Eb1R5mqaAfS3CcGCQjT/OVtANGDNk y7TtP/DABc6xA31nHFlEYbL23l2hnjWWsDsl6LdPbOro8fDp3B3iI0/iJ3cbQNPY /3I6gpDvMy00o6b07cchYona9HHWFF9fbZNNKbGrfw5WZe1Q40V7OcYNOjO/3Rt0 Rii9FXSaDcqTGpxSnLu9KrWvp4RJQ0EaKFkiPjOcT6z2dEwAvpEoYCt4LY11Pd8B UnevsLMFgrasoPXuRYxNO5Akt0Y7CqAtd9xORnY2Q/pnRsxFcN9HnulHFYezSFj2 NLZOOVwyNOCY/e1wHk6oewa2v437oXBd5kuRaT8l1o6WTKujI7A= -----END CERTIFICATE-----Generated at Sun Jun 29 18:18:44 2025 by rpki-client