$ rpki-client -vvf repo-rpki.idnic.net/repo/bfdb18ef-659f-4b1e-a2e0-b58af6b1271f/0/8D1D84B8A56224B4E290FBDA5C790CD1F03F11A7.mft File: 8D1D84B8A56224B4E290FBDA5C790CD1F03F11A7.mft (raw, json) Hash identifier: mpe3p7ihz4FdmjTeuVPPAq4BK4M/Dpp8ulWVpyeQdAA= Subject key identifier: B8:D7:48:41:E2:A1:50:11:F4:0D:37:60:EB:1A:FD:25:E5:C9:79:34 Authority key identifier: 8D:1D:84:B8:A5:62:24:B4:E2:90:FB:DA:5C:79:0C:D1:F0:3F:11:A7 Certificate issuer: /CN=8D1D84B8A56224B4E290FBDA5C790CD1F03F11A7 Certificate serial: 3E4105775B17C9C6AD8A60E799661259BF927438 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8D1D84B8A56224B4E290FBDA5C790CD1F03F11A7.cer Subject info access: rsync://repo-rpki.idnic.net/repo/bfdb18ef-659f-4b1e-a2e0-b58af6b1271f/0/8D1D84B8A56224B4E290FBDA5C790CD1F03F11A7.mft Manifest number: 01E5 Signing time: Sun 29 Jun 2025 02:01:47 +0000 Manifest this update: Sun 29 Jun 2025 01:56:47 +0000 Manifest next update: Wed 02 Jul 2025 02:30:47 +0000 Files and hashes: 1: 3130332e3136302e3133382e302f32332d3234203d3e203338333230.roa (hash: 1fOWEp4TrzIX6lJGhVie2BUvo2f5cu7g23YUAHBTka8=) 2: 8D1D84B8A56224B4E290FBDA5C790CD1F03F11A7.crl (hash: a+A9ITCsdT9KRKrUf78g6e+PCkSwtXua8/OBJ22eaEk=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/bfdb18ef-659f-4b1e-a2e0-b58af6b1271f/0/8D1D84B8A56224B4E290FBDA5C790CD1F03F11A7.crl rsync://repo-rpki.idnic.net/repo/bfdb18ef-659f-4b1e-a2e0-b58af6b1271f/0/8D1D84B8A56224B4E290FBDA5C790CD1F03F11A7.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8D1D84B8A56224B4E290FBDA5C790CD1F03F11A7.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 02 Jul 2025 02:30:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3e:41:05:77:5b:17:c9:c6:ad:8a:60:e7:99:66:12:59:bf:92:74:38 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8D1D84B8A56224B4E290FBDA5C790CD1F03F11A7 Validity Not Before: Jun 29 01:56:47 2025 GMT Not After : Jul 2 02:30:47 2025 GMT Subject: CN=B8D74841E2A15011F40D3760EB1AFD25E5C97934 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:26:43:dc:3b:f9:ac:0f:5a:39:53:be:ec:3e: a0:95:16:1f:e8:26:9e:ea:e4:f7:56:c2:77:b4:3c: f2:d6:ca:04:a5:54:f0:00:93:0d:ef:af:2d:5d:d0: 72:9a:89:4b:d1:d7:67:23:14:0c:21:58:dc:bd:c7: ed:14:fc:e5:9f:7c:49:c8:4d:c5:16:16:ad:7d:f7: 94:1a:29:ad:a1:60:02:6f:ea:62:5d:81:f0:ef:90: f4:0c:a6:9e:b6:04:25:ed:a4:af:3f:b0:b6:b6:71: 2c:66:73:cd:ef:16:74:69:4e:90:cf:87:f1:ec:df: f2:da:96:82:c7:b0:3c:7b:ed:d1:ba:0c:06:e1:68: f6:37:6f:c1:54:5f:7b:74:e3:8f:e2:5e:31:ef:40: 68:aa:e5:a1:12:17:29:9c:3d:9e:94:42:b0:14:26: 52:97:27:4f:f1:8c:22:f5:98:46:5b:e0:0f:34:a4: 90:69:c7:8c:ec:b6:b4:c3:17:01:cc:d1:74:e8:53: d0:d3:70:87:fb:da:47:f7:89:17:a0:60:ad:71:2d: e8:c0:4e:47:a2:ca:03:d2:61:0f:ed:45:a5:b6:78: 43:5b:e7:ec:b9:c5:68:0f:aa:03:31:e7:4f:aa:b4: d9:cf:0e:f2:08:90:f5:55:31:a1:4f:b2:4e:23:10: 34:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:D7:48:41:E2:A1:50:11:F4:0D:37:60:EB:1A:FD:25:E5:C9:79:34 X509v3 Authority Key Identifier: keyid:8D:1D:84:B8:A5:62:24:B4:E2:90:FB:DA:5C:79:0C:D1:F0:3F:11:A7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/bfdb18ef-659f-4b1e-a2e0-b58af6b1271f/0/8D1D84B8A56224B4E290FBDA5C790CD1F03F11A7.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8D1D84B8A56224B4E290FBDA5C790CD1F03F11A7.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/bfdb18ef-659f-4b1e-a2e0-b58af6b1271f/0/8D1D84B8A56224B4E290FBDA5C790CD1F03F11A7.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 18:62:cb:09:f4:b4:6b:7f:12:da:df:b3:e1:bf:df:84:34:50: 1d:e6:2f:61:44:be:8d:4c:ce:4f:74:dd:49:2a:d4:5f:e9:83: 3f:bf:27:b1:1d:95:31:34:45:8d:86:b6:ea:36:fd:0d:9a:0f: c7:7e:ef:d4:88:ba:75:53:e0:4c:f4:a7:da:29:0b:39:a3:76: e0:80:dd:66:ef:c7:b8:c9:08:b8:36:78:6e:56:1f:50:9b:15: 8c:70:09:35:d1:7f:72:ba:c5:04:ad:89:4e:b2:0d:b8:3b:15: 3c:8a:f0:17:77:bf:0f:6b:9f:f8:52:97:74:d0:3a:ac:89:41: 50:5a:ca:ab:25:b0:bf:55:35:5c:d8:66:ed:90:0b:18:08:89: 24:6a:14:29:7d:fc:e4:73:bd:36:30:8a:c6:be:d9:a5:9f:b8: ee:26:c4:88:2e:1a:4a:81:da:00:70:d6:24:bc:b1:ca:cd:4d: 2a:b5:16:eb:81:55:28:25:52:75:58:37:61:ce:0d:3e:10:2d: b4:86:85:91:a3:64:e8:ee:ac:14:e8:0a:53:af:e0:c6:82:ac: 3e:14:1c:11:5c:e5:30:b9:02:f9:67:27:13:3a:ce:b8:38:86: 9d:c8:81:6a:76:22:a6:2c:9e:ec:3c:89:80:4e:cb:81:7c:11: 22:fe:db:0a -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUPkEFd1sXycatimDnmWYSWb+SdDgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEQxRDg0QjhBNTYyMjRCNEUyOTBGQkRBNUM3OTBDRDFG MDNGMTFBNzAeFw0yNTA2MjkwMTU2NDdaFw0yNTA3MDIwMjMwNDdaMDMxMTAvBgNV BAMTKEI4RDc0ODQxRTJBMTUwMTFGNDBEMzc2MEVCMUFGRDI1RTVDOTc5MzQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDMJkPcO/msD1o5U77sPqCVFh/o Jp7q5PdWwne0PPLWygSlVPAAkw3vry1d0HKaiUvR12cjFAwhWNy9x+0U/OWffEnI TcUWFq1995QaKa2hYAJv6mJdgfDvkPQMpp62BCXtpK8/sLa2cSxmc83vFnRpTpDP h/Hs3/LaloLHsDx77dG6DAbhaPY3b8FUX3t044/iXjHvQGiq5aESFymcPZ6UQrAU JlKXJ0/xjCL1mEZb4A80pJBpx4zstrTDFwHM0XToU9DTcIf72kf3iRegYK1xLejA TkeiygPSYQ/tRaW2eENb5+y5xWgPqgMx50+qtNnPDvIIkPVVMaFPsk4jEDQdAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUuNdIQeKhUBH0DTdg6xr9JeXJeTQwHwYDVR0j BBgwFoAUjR2EuKViJLTikPvaXHkM0fA/EacwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i ZmRiMThlZi02NTlmLTRiMWUtYTJlMC1iNThhZjZiMTI3MWYvMC84RDFEODRCOEE1 NjIyNEI0RTI5MEZCREE1Qzc5MENEMUYwM0YxMUE3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOEQxRDg0QjhBNTYyMjRCNEUyOTBGQkRBNUM3OTBDRDFGMDNG MTFBNy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYmZkYjE4ZWYtNjU5Zi00YjFlLWEy ZTAtYjU4YWY2YjEyNzFmLzAvOEQxRDg0QjhBNTYyMjRCNEUyOTBGQkRBNUM3OTBD RDFGMDNGMTFBNy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABhiywn0tGt/Etrfs+G/34Q0UB3mL2FEvo1M zk903Ukq1F/pgz+/J7EdlTE0RY2Gtuo2/Q2aD8d+79SIunVT4Ez0p9opCzmjduCA 3Wbvx7jJCLg2eG5WH1CbFYxwCTXRf3K6xQStiU6yDbg7FTyK8Bd3vw9rn/hSl3TQ OqyJQVBayqslsL9VNVzYZu2QCxgIiSRqFCl9/ORzvTYwisa+2aWfuO4mxIguGkqB 2gBw1iS8scrNTSq1FuuBVSglUnVYN2HODT4QLbSGhZGjZOjurBToClOv4MaCrD4U HBFc5TC5AvlnJxM6zrg4hp3IgWp2IqYsnuw8iYBOy4F8ESL+2wo= -----END CERTIFICATE-----Generated at Mon Jun 30 16:24:06 2025 by rpki-client