$ rpki-client -vvf repo-rpki.idnic.net/repo/d44dfb5a-6e24-4a4d-8969-eb3cbe34e47e/0/8F52E72816B856335390C4F4AFBAF207C21522F6.mft File: 8F52E72816B856335390C4F4AFBAF207C21522F6.mft (raw, json) Hash identifier: e7yQf0i6M/CVEev29w/v+x9u9quf2OKDhGCotvDIVKw= Subject key identifier: 14:BD:15:F7:61:06:7C:90:1A:63:92:A0:93:C9:DB:B7:60:1E:38:2F Authority key identifier: 8F:52:E7:28:16:B8:56:33:53:90:C4:F4:AF:BA:F2:07:C2:15:22:F6 Certificate issuer: /CN=8F52E72816B856335390C4F4AFBAF207C21522F6 Certificate serial: 2127B482EC1DA87C5E0AEE47677495E6EB30088E Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8F52E72816B856335390C4F4AFBAF207C21522F6.cer Subject info access: rsync://repo-rpki.idnic.net/repo/d44dfb5a-6e24-4a4d-8969-eb3cbe34e47e/0/8F52E72816B856335390C4F4AFBAF207C21522F6.mft Manifest number: 01E6 Signing time: Mon 30 Jun 2025 12:12:13 +0000 Manifest this update: Mon 30 Jun 2025 12:07:13 +0000 Manifest next update: Thu 03 Jul 2025 23:13:13 +0000 Files and hashes: 1: 8F52E72816B856335390C4F4AFBAF207C21522F6.crl (hash: 5QgfVYDFGy/A9bIKjgoDmhKAarE8XLjpvffCIY4PxUg=) 2: 3130332e3135382e3132362e302f32332d3234203d3e203338333230.roa (hash: sAEVe363BvIs2dOx1hxbCSZZoE73/9sHIDXoFlichKA=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/d44dfb5a-6e24-4a4d-8969-eb3cbe34e47e/0/8F52E72816B856335390C4F4AFBAF207C21522F6.crl rsync://repo-rpki.idnic.net/repo/d44dfb5a-6e24-4a4d-8969-eb3cbe34e47e/0/8F52E72816B856335390C4F4AFBAF207C21522F6.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8F52E72816B856335390C4F4AFBAF207C21522F6.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 03 Jul 2025 21:56:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 21:27:b4:82:ec:1d:a8:7c:5e:0a:ee:47:67:74:95:e6:eb:30:08:8e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8F52E72816B856335390C4F4AFBAF207C21522F6 Validity Not Before: Jun 30 12:07:13 2025 GMT Not After : Jul 3 23:13:13 2025 GMT Subject: CN=14BD15F761067C901A6392A093C9DBB7601E382F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:a1:2e:b0:5a:f7:dc:90:72:be:5a:97:3e:23: 6b:5f:f3:ac:dd:f3:1c:f7:93:45:74:54:50:36:5b: 9f:7a:63:67:4c:7d:07:ee:3f:93:d5:d5:bb:dd:3d: 71:01:83:5f:95:72:87:4a:20:93:38:4f:af:d0:3d: 13:75:29:92:05:32:4f:73:87:85:6f:6b:43:2b:1e: bf:5c:d6:a6:47:fc:86:27:dc:32:18:ef:66:69:91: c5:36:de:a2:fb:fa:81:e9:0a:27:3e:b2:92:d8:33: 32:79:07:c7:ac:f0:e4:11:d3:c6:32:2e:43:c0:7a: a1:69:10:a5:27:9f:cb:56:40:bf:98:b6:d8:02:2b: 6d:04:df:8c:79:43:6a:b9:19:ea:21:a5:4f:c6:df: 74:f2:82:8d:c0:7e:45:63:bc:b2:e2:91:0c:7a:d1: e0:b7:fa:ad:f9:d4:3b:e0:3d:a9:1d:9e:98:10:63: 20:34:c6:7e:ec:28:01:f2:72:38:63:eb:76:b5:47: ab:60:9f:3c:fe:c0:93:fa:c3:ae:b5:5d:8e:0e:37: 3d:e9:38:cf:ec:21:25:2e:1f:2f:1b:b0:ae:31:75: 08:11:1d:3a:69:29:39:ee:c5:cf:b3:16:8e:01:d7: 40:41:0f:fe:98:62:cc:52:86:e8:1f:51:8b:66:ed: 99:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:BD:15:F7:61:06:7C:90:1A:63:92:A0:93:C9:DB:B7:60:1E:38:2F X509v3 Authority Key Identifier: keyid:8F:52:E7:28:16:B8:56:33:53:90:C4:F4:AF:BA:F2:07:C2:15:22:F6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/d44dfb5a-6e24-4a4d-8969-eb3cbe34e47e/0/8F52E72816B856335390C4F4AFBAF207C21522F6.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8F52E72816B856335390C4F4AFBAF207C21522F6.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d44dfb5a-6e24-4a4d-8969-eb3cbe34e47e/0/8F52E72816B856335390C4F4AFBAF207C21522F6.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 24:58:83:24:96:a4:38:63:bb:85:24:dd:93:2f:89:97:f5:f8: d6:9f:f8:5a:74:ea:bf:b6:d5:14:fb:f5:6c:e0:74:a2:c8:48: fe:b4:9c:26:4b:2b:15:d8:67:30:0f:02:77:85:51:b5:26:48: 00:77:26:cc:82:e4:40:41:27:60:65:61:fa:80:ad:4a:65:a9: 77:84:dc:b7:89:59:2a:7c:fc:63:0f:2b:10:0a:76:c1:5d:94: 55:25:40:e5:cd:4a:00:6a:b1:85:e0:99:95:fa:99:04:9a:e4: 7d:3e:78:fc:10:32:98:ff:63:7d:3a:e3:c9:37:53:2c:e6:b3: 22:bc:6a:c4:42:ca:7d:18:cf:05:92:2f:53:f2:83:6d:d5:53: 92:ae:ac:f3:28:b5:62:b4:ce:a0:f7:22:af:2e:22:28:88:63: 79:fe:cf:3d:ae:55:c2:a8:57:24:aa:34:50:ba:2f:fb:bf:07: a4:d2:8f:f7:07:5e:3c:b8:09:52:92:2b:ab:38:8c:8c:39:b6: d2:9e:15:b6:9b:f7:ab:2c:59:60:81:bc:ca:1d:ec:4f:39:26: 48:32:d4:0e:0b:68:d6:97:21:8c:35:10:dd:80:e4:27:09:95: c8:c9:53:10:0c:83:62:de:ea:e4:2a:8a:31:a8:cc:5b:c8:84: eb:8b:f3:21 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUISe0guwdqHxeCu5HZ3SV5uswCI4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEY1MkU3MjgxNkI4NTYzMzUzOTBDNEY0QUZCQUYyMDdD MjE1MjJGNjAeFw0yNTA2MzAxMjA3MTNaFw0yNTA3MDMyMzEzMTNaMDMxMTAvBgNV BAMTKDE0QkQxNUY3NjEwNjdDOTAxQTYzOTJBMDkzQzlEQkI3NjAxRTM4MkYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDOoS6wWvfckHK+Wpc+I2tf86zd 8xz3k0V0VFA2W596Y2dMfQfuP5PV1bvdPXEBg1+VcodKIJM4T6/QPRN1KZIFMk9z h4Vva0MrHr9c1qZH/IYn3DIY72ZpkcU23qL7+oHpCic+spLYMzJ5B8es8OQR08Yy LkPAeqFpEKUnn8tWQL+YttgCK20E34x5Q2q5GeohpU/G33Tygo3AfkVjvLLikQx6 0eC3+q351DvgPakdnpgQYyA0xn7sKAHycjhj63a1R6tgnzz+wJP6w661XY4ONz3p OM/sISUuHy8bsK4xdQgRHTppKTnuxc+zFo4B10BBD/6YYsxShugfUYtm7ZkRAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUFL0V92EGfJAaY5Kgk8nbt2AeOC8wHwYDVR0j BBgwFoAUj1LnKBa4VjNTkMT0r7ryB8IVIvYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k NDRkZmI1YS02ZTI0LTRhNGQtODk2OS1lYjNjYmUzNGU0N2UvMC84RjUyRTcyODE2 Qjg1NjMzNTM5MEM0RjRBRkJBRjIwN0MyMTUyMkY2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOEY1MkU3MjgxNkI4NTYzMzUzOTBDNEY0QUZCQUYyMDdDMjE1 MjJGNi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZDQ0ZGZiNWEtNmUyNC00YTRkLTg5 NjktZWIzY2JlMzRlNDdlLzAvOEY1MkU3MjgxNkI4NTYzMzUzOTBDNEY0QUZCQUYy MDdDMjE1MjJGNi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACRYgySWpDhju4Uk3ZMviZf1+Naf+Fp06r+2 1RT79WzgdKLISP60nCZLKxXYZzAPAneFUbUmSAB3JsyC5EBBJ2BlYfqArUplqXeE 3LeJWSp8/GMPKxAKdsFdlFUlQOXNSgBqsYXgmZX6mQSa5H0+ePwQMpj/Y30648k3 UyzmsyK8asRCyn0YzwWSL1Pyg23VU5KurPMotWK0zqD3Iq8uIiiIY3n+zz2uVcKo VySqNFC6L/u/B6TSj/cHXjy4CVKSK6s4jIw5ttKeFbab96ssWWCBvMod7E85Jkgy 1A4LaNaXIYw1EN2A5CcJlcjJUxAMg2Le6uQqijGozFvIhOuL8yE= -----END CERTIFICATE-----Generated at Mon Jun 30 18:58:38 2025 by rpki-client