$ rpki-client -vvf repo-rpki.idnic.net/repo/c2b0bdd5-6e30-4a10-b993-77d48251f3a1/0/8B237B2BC0581B556DD5B4B0847F9C83408BA93D.mft File: 8B237B2BC0581B556DD5B4B0847F9C83408BA93D.mft (raw, json) Hash identifier: GRK8LLZYlPiMLLxD0bLl6/DsrtSlSyNzPobop3amBxQ= Subject key identifier: 96:01:9A:C3:8C:89:D0:42:F7:BF:57:68:36:A2:58:A0:64:AE:C8:F8 Authority key identifier: 8B:23:7B:2B:C0:58:1B:55:6D:D5:B4:B0:84:7F:9C:83:40:8B:A9:3D Certificate issuer: /CN=8B237B2BC0581B556DD5B4B0847F9C83408BA93D Certificate serial: 5668E61EED09CF09274456EBF5FC93439F84E820 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8B237B2BC0581B556DD5B4B0847F9C83408BA93D.cer Subject info access: rsync://repo-rpki.idnic.net/repo/c2b0bdd5-6e30-4a10-b993-77d48251f3a1/0/8B237B2BC0581B556DD5B4B0847F9C83408BA93D.mft Manifest number: 01E1 Signing time: Sun 29 Jun 2025 07:20:00 +0000 Manifest this update: Sun 29 Jun 2025 07:15:00 +0000 Manifest next update: Wed 02 Jul 2025 10:22:00 +0000 Files and hashes: 1: 8B237B2BC0581B556DD5B4B0847F9C83408BA93D.crl (hash: OQNX0odzVUwmVajzK7O6Ko9XADDGJq+TmM4xBZWA2N8=) 2: 3130332e3139302e3131342e302f32332d3233203d3e203435333035.roa (hash: ULVDgV6Ym293ne4NjwFyx9fV7GwDIsvmtft/evHC1jQ=) 3: 3130332e3139302e3131352e302f32342d3234203d3e203435333035.roa (hash: dEnaKQdLZdizpCqpcJnXth7f6FKcdGy1/gEWNghJ+nU=) 4: 3130332e3139302e3131342e302f32342d3234203d3e203435333035.roa (hash: KgdQImSFXI48JOCLFSTKKPItTv1rC7N1MfwzWNtz7zI=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/c2b0bdd5-6e30-4a10-b993-77d48251f3a1/0/8B237B2BC0581B556DD5B4B0847F9C83408BA93D.crl rsync://repo-rpki.idnic.net/repo/c2b0bdd5-6e30-4a10-b993-77d48251f3a1/0/8B237B2BC0581B556DD5B4B0847F9C83408BA93D.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8B237B2BC0581B556DD5B4B0847F9C83408BA93D.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 02 Jul 2025 10:22:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 56:68:e6:1e:ed:09:cf:09:27:44:56:eb:f5:fc:93:43:9f:84:e8:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8B237B2BC0581B556DD5B4B0847F9C83408BA93D Validity Not Before: Jun 29 07:15:00 2025 GMT Not After : Jul 2 10:22:00 2025 GMT Subject: CN=96019AC38C89D042F7BF576836A258A064AEC8F8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:4a:99:2f:31:22:4d:aa:a3:8a:8b:d3:a3:0d: db:2b:9a:72:0a:6a:68:08:aa:05:4e:16:ae:6c:4a: 03:14:94:19:6a:8e:7e:50:33:e9:08:99:29:c2:db: 26:8d:cf:b2:c0:3c:61:62:a7:87:5e:61:de:db:88: 8f:fb:d2:8a:fd:00:2f:5f:da:0f:65:22:ed:21:69: e5:64:72:e2:b8:a0:20:89:2a:92:9e:96:9c:71:37: d7:e7:e3:95:ae:ac:a4:4c:6b:1d:0e:d1:07:b2:e6: b6:bf:bb:48:5b:16:35:32:d1:af:1d:d1:0a:9a:3f: d1:7a:f9:b8:c9:fc:53:52:74:15:16:6c:00:18:19: 67:f7:14:b0:a7:0b:f4:e3:50:8e:63:b4:1c:b8:72: 0e:f1:36:7b:f8:b5:74:0e:ed:bc:c3:83:4a:32:74: 68:c9:c2:65:69:ee:ba:3e:7c:b4:4a:2d:95:5a:24: 43:7c:9e:27:a7:5a:cf:35:12:de:78:b9:c9:05:6d: 24:06:11:54:ae:60:28:38:f0:d4:71:0b:c7:6a:82: 03:fa:df:f5:c6:3a:fb:bc:ef:be:5c:e8:a4:f7:fc: 87:44:4c:32:be:cb:10:87:c2:d2:2a:f0:0f:cd:0f: 79:fe:ef:91:a2:26:bf:25:cb:79:ed:06:54:a5:bc: 95:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:01:9A:C3:8C:89:D0:42:F7:BF:57:68:36:A2:58:A0:64:AE:C8:F8 X509v3 Authority Key Identifier: keyid:8B:23:7B:2B:C0:58:1B:55:6D:D5:B4:B0:84:7F:9C:83:40:8B:A9:3D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/c2b0bdd5-6e30-4a10-b993-77d48251f3a1/0/8B237B2BC0581B556DD5B4B0847F9C83408BA93D.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8B237B2BC0581B556DD5B4B0847F9C83408BA93D.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c2b0bdd5-6e30-4a10-b993-77d48251f3a1/0/8B237B2BC0581B556DD5B4B0847F9C83408BA93D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0c:04:22:5b:b2:b3:2f:c1:bc:3a:a7:e3:44:ae:01:19:29:47: 52:1e:0d:8e:10:67:dd:34:2c:4c:97:90:18:cc:ec:9a:64:23: f5:0d:a9:8b:21:ac:e1:62:4d:88:ee:1a:aa:b9:6a:3a:ce:0b: 01:9f:1c:3f:d7:48:2c:f7:ee:29:4a:3c:7e:ee:ef:b1:be:79: d3:82:c2:1b:bf:02:63:64:e8:c5:70:42:26:92:12:a1:a7:7e: ec:7a:e3:bb:ed:8c:50:ac:46:98:b4:8e:f5:d6:1d:98:9c:c3: c3:30:a6:87:12:02:7f:70:03:c4:82:3c:a4:85:bf:08:3f:c0: 4f:0b:9c:d7:6f:3d:82:4d:3f:4b:71:2c:6d:4b:c0:74:23:8b: 39:3c:b1:c7:5b:ca:79:3d:82:11:c8:ab:46:0d:f6:f2:57:ac: 92:4c:5e:0d:ae:70:7d:ed:84:dd:20:c8:a3:9b:90:cb:29:8e: 39:08:57:c5:3b:32:24:28:13:d3:83:98:ea:1c:bf:38:b9:de: 16:65:95:16:2d:42:21:08:3a:2c:1a:ba:85:c8:9b:e5:d4:56: 18:f4:c2:1d:04:70:99:51:0f:dc:7a:57:b9:10:1b:7b:f0:6f: e7:66:c1:e0:b5:66:96:71:69:2b:dc:81:61:2e:ba:5d:17:b0: ed:3c:eb:3f -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUVmjmHu0JzwknRFbr9fyTQ5+E6CAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEIyMzdCMkJDMDU4MUI1NTZERDVCNEIwODQ3RjlDODM0 MDhCQTkzRDAeFw0yNTA2MjkwNzE1MDBaFw0yNTA3MDIxMDIyMDBaMDMxMTAvBgNV BAMTKDk2MDE5QUMzOEM4OUQwNDJGN0JGNTc2ODM2QTI1OEEwNjRBRUM4RjgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCySpkvMSJNqqOKi9OjDdsrmnIK amgIqgVOFq5sSgMUlBlqjn5QM+kImSnC2yaNz7LAPGFip4deYd7biI/70or9AC9f 2g9lIu0haeVkcuK4oCCJKpKelpxxN9fn45WurKRMax0O0Qey5ra/u0hbFjUy0a8d 0QqaP9F6+bjJ/FNSdBUWbAAYGWf3FLCnC/TjUI5jtBy4cg7xNnv4tXQO7bzDg0oy dGjJwmVp7ro+fLRKLZVaJEN8nienWs81Et54uckFbSQGEVSuYCg48NRxC8dqggP6 3/XGOvu8775c6KT3/IdETDK+yxCHwtIq8A/ND3n+75GiJr8ly3ntBlSlvJXXAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUlgGaw4yJ0EL3v1doNqJYoGSuyPgwHwYDVR0j BBgwFoAUiyN7K8BYG1Vt1bSwhH+cg0CLqT0wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j MmIwYmRkNS02ZTMwLTRhMTAtYjk5My03N2Q0ODI1MWYzYTEvMC84QjIzN0IyQkMw NTgxQjU1NkRENUI0QjA4NDdGOUM4MzQwOEJBOTNELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOEIyMzdCMkJDMDU4MUI1NTZERDVCNEIwODQ3RjlDODM0MDhC QTkzRC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYzJiMGJkZDUtNmUzMC00YTEwLWI5 OTMtNzdkNDgyNTFmM2ExLzAvOEIyMzdCMkJDMDU4MUI1NTZERDVCNEIwODQ3RjlD ODM0MDhCQTkzRC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAwEIluysy/BvDqn40SuARkpR1IeDY4QZ900 LEyXkBjM7JpkI/UNqYshrOFiTYjuGqq5ajrOCwGfHD/XSCz37ilKPH7u77G+edOC whu/AmNk6MVwQiaSEqGnfux647vtjFCsRpi0jvXWHZicw8MwpocSAn9wA8SCPKSF vwg/wE8LnNdvPYJNP0txLG1LwHQjizk8scdbynk9ghHIq0YN9vJXrJJMXg2ucH3t hN0gyKObkMspjjkIV8U7MiQoE9ODmOocvzi53hZllRYtQiEIOiwauoXIm+XUVhj0 wh0EcJlRD9x6V7kQG3vwb+dmweC1ZpZxaSvcgWEuul0XsO086z8= -----END CERTIFICATE-----Generated at Mon Jun 30 08:38:30 2025 by rpki-client