$ rpki-client -vvf repo-rpki.idnic.net/repo/d7ff01d0-26f9-4b20-a318-c311c267f2af/0/8A54C81A444D07051A24AACF743F01863F8129AB.mft File: 8A54C81A444D07051A24AACF743F01863F8129AB.mft (raw, json) Hash identifier: VMiRFdPpANK3FSxpeEOkJUydEZ5TJt2ZoGD6AfHSgK4= Subject key identifier: 91:3D:59:7D:89:F1:CA:28:15:DC:33:18:20:89:7B:29:9C:CC:7F:F6 Authority key identifier: 8A:54:C8:1A:44:4D:07:05:1A:24:AA:CF:74:3F:01:86:3F:81:29:AB Certificate issuer: /CN=8A54C81A444D07051A24AACF743F01863F8129AB Certificate serial: 79A302C83126876FA6D0075BB2F8B2B46FAD0D9D Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8A54C81A444D07051A24AACF743F01863F8129AB.cer Subject info access: rsync://repo-rpki.idnic.net/repo/d7ff01d0-26f9-4b20-a318-c311c267f2af/0/8A54C81A444D07051A24AACF743F01863F8129AB.mft Manifest number: 02C5 Signing time: Sun 29 Jun 2025 03:30:38 +0000 Manifest this update: Sun 29 Jun 2025 03:25:38 +0000 Manifest next update: Wed 02 Jul 2025 10:03:38 +0000 Files and hashes: 1: 3130332e3136362e3135382e302f32342d3234203d3e20313431393535.roa (hash: Bup7LELWa0M49WEmJBOXwO3r0+CyN1znNANGE751Xcc=) 2: 8A54C81A444D07051A24AACF743F01863F8129AB.crl (hash: 8rYLxHhuFW5Eg/Mmwct+qCWHJl+h6Mvq3bXLvWoLWGc=) 3: 3130332e3136362e3135382e302f32332d3233203d3e20313431393535.roa (hash: 8iqd/DLPSKXzm6qMwrWasV0WJDuso56p2m5ElmgcTDA=) 4: 3130332e3136362e3135392e302f32342d3234203d3e20313431393535.roa (hash: D5y/dOOdbevGbXtghOHQINTcjdbypBLwek1XQ3CqPYE=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/d7ff01d0-26f9-4b20-a318-c311c267f2af/0/8A54C81A444D07051A24AACF743F01863F8129AB.crl rsync://repo-rpki.idnic.net/repo/d7ff01d0-26f9-4b20-a318-c311c267f2af/0/8A54C81A444D07051A24AACF743F01863F8129AB.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8A54C81A444D07051A24AACF743F01863F8129AB.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 02 Jul 2025 10:03:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 79:a3:02:c8:31:26:87:6f:a6:d0:07:5b:b2:f8:b2:b4:6f:ad:0d:9d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8A54C81A444D07051A24AACF743F01863F8129AB Validity Not Before: Jun 29 03:25:38 2025 GMT Not After : Jul 2 10:03:38 2025 GMT Subject: CN=913D597D89F1CA2815DC331820897B299CCC7FF6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:e2:c1:c4:57:f4:d5:f8:31:f6:a8:16:e8:4f: 0c:6d:47:16:b2:61:e0:f0:d3:6b:5f:93:af:a3:0f: 00:a2:84:26:e0:cf:cd:bf:2b:37:4d:b8:3d:c1:4b: 31:8c:d0:9b:b2:26:98:1a:0c:2a:35:e7:07:b5:4a: 68:eb:7d:20:46:11:46:b4:fd:53:17:bc:44:e6:ff: 06:91:dc:6b:6d:81:63:cd:0a:74:22:da:d4:7d:48: 9b:7e:69:dd:e0:d6:36:2e:c1:bc:1a:3a:83:77:0c: ec:72:75:5f:58:5c:5d:ae:9a:c7:c4:33:25:1c:c4: 80:07:05:1a:b7:e8:ba:b6:88:01:6f:80:89:7d:82: 97:21:81:30:e0:3e:b4:d5:58:8b:98:f1:ba:f0:37: fe:7b:e2:18:5e:c5:3b:a9:c7:db:58:c1:3e:b9:be: ea:29:b5:50:9c:d0:40:45:66:ae:0a:0a:56:43:31: 78:b4:43:04:4f:c8:b8:55:4e:fc:ae:dd:58:41:5b: e7:5c:72:5e:ad:09:66:cb:b5:6d:0d:c9:4b:5e:7c: 20:99:8d:56:cf:f2:5a:38:e4:60:a8:ab:0b:be:c9: 83:1d:c2:79:f2:02:a6:be:d3:d4:a5:f8:61:4c:77: d2:c8:e2:ef:95:5c:55:41:47:ba:b9:f6:a8:29:5d: aa:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:3D:59:7D:89:F1:CA:28:15:DC:33:18:20:89:7B:29:9C:CC:7F:F6 X509v3 Authority Key Identifier: keyid:8A:54:C8:1A:44:4D:07:05:1A:24:AA:CF:74:3F:01:86:3F:81:29:AB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/d7ff01d0-26f9-4b20-a318-c311c267f2af/0/8A54C81A444D07051A24AACF743F01863F8129AB.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8A54C81A444D07051A24AACF743F01863F8129AB.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d7ff01d0-26f9-4b20-a318-c311c267f2af/0/8A54C81A444D07051A24AACF743F01863F8129AB.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 55:ec:bf:56:8b:2b:7d:61:2b:8f:e9:f3:da:9f:78:1d:cf:58: 5e:fc:a0:40:1c:f4:dc:01:54:ab:11:c8:24:51:04:5a:5b:f5: 7d:77:42:00:ec:0e:7e:cc:65:2a:c0:e8:42:39:ae:71:02:a1: f0:37:b8:2b:a8:f7:b9:bb:25:8f:1a:d1:ac:83:fb:cd:68:f0: 3a:f8:90:9f:5b:43:bc:7d:3e:28:5b:50:6b:f9:d0:14:f9:76: 39:c6:fd:46:a6:b7:c5:19:e7:50:d2:a8:7c:e2:85:6c:2a:09: 0e:04:e0:90:1d:69:44:c9:23:5c:eb:e8:c0:70:7d:cb:73:81: 4a:32:15:f5:3e:0b:f7:37:e0:db:c5:dc:7f:bc:12:db:63:4d: e3:82:65:53:d6:25:3b:cf:df:bf:d8:a4:91:c9:fa:13:04:88: ff:69:90:bf:00:4a:aa:02:d6:ac:9b:e8:26:e2:84:c4:0a:f6: 7a:4a:90:7e:1d:b4:a7:20:d9:e7:20:22:24:13:29:45:31:fd: 3c:73:97:fa:68:f6:c9:3c:7f:5f:f3:bb:2a:25:7e:36:87:e8: 97:87:10:02:72:f5:be:b8:be:57:52:98:76:75:98:28:e3:c7: c4:72:2c:fb:53:31:a6:c9:59:92:67:de:f5:a2:04:16:07:1b: ff:ec:20:69 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUeaMCyDEmh2+m0AdbsviytG+tDZ0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEE1NEM4MUE0NDREMDcwNTFBMjRBQUNGNzQzRjAxODYz RjgxMjlBQjAeFw0yNTA2MjkwMzI1MzhaFw0yNTA3MDIxMDAzMzhaMDMxMTAvBgNV BAMTKDkxM0Q1OTdEODlGMUNBMjgxNURDMzMxODIwODk3QjI5OUNDQzdGRjYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDR4sHEV/TV+DH2qBboTwxtRxay YeDw02tfk6+jDwCihCbgz82/KzdNuD3BSzGM0JuyJpgaDCo15we1SmjrfSBGEUa0 /VMXvETm/waR3GttgWPNCnQi2tR9SJt+ad3g1jYuwbwaOoN3DOxydV9YXF2umsfE MyUcxIAHBRq36Lq2iAFvgIl9gpchgTDgPrTVWIuY8brwN/574hhexTupx9tYwT65 vuoptVCc0EBFZq4KClZDMXi0QwRPyLhVTvyu3VhBW+dccl6tCWbLtW0NyUtefCCZ jVbP8lo45GCoqwu+yYMdwnnyAqa+09Sl+GFMd9LI4u+VXFVBR7q59qgpXaoNAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUkT1ZfYnxyigV3DMYIIl7KZzMf/YwHwYDVR0j BBgwFoAUilTIGkRNBwUaJKrPdD8Bhj+BKaswDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k N2ZmMDFkMC0yNmY5LTRiMjAtYTMxOC1jMzExYzI2N2YyYWYvMC84QTU0QzgxQTQ0 NEQwNzA1MUEyNEFBQ0Y3NDNGMDE4NjNGODEyOUFCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOEE1NEM4MUE0NDREMDcwNTFBMjRBQUNGNzQzRjAxODYzRjgx MjlBQi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZDdmZjAxZDAtMjZmOS00YjIwLWEz MTgtYzMxMWMyNjdmMmFmLzAvOEE1NEM4MUE0NDREMDcwNTFBMjRBQUNGNzQzRjAx ODYzRjgxMjlBQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFXsv1aLK31hK4/p89qfeB3PWF78oEAc9NwB VKsRyCRRBFpb9X13QgDsDn7MZSrA6EI5rnECofA3uCuo97m7JY8a0ayD+81o8Dr4 kJ9bQ7x9PihbUGv50BT5djnG/Uamt8UZ51DSqHzihWwqCQ4E4JAdaUTJI1zr6MBw fctzgUoyFfU+C/c34NvF3H+8EttjTeOCZVPWJTvP37/YpJHJ+hMEiP9pkL8ASqoC 1qyb6CbihMQK9npKkH4dtKcg2ecgIiQTKUUx/Txzl/po9sk8f1/zuyolfjaH6JeH EAJy9b64vldSmHZ1mCjjx8RyLPtTMabJWZJn3vWiBBYHG//sIGk= -----END CERTIFICATE-----Generated at Tue Jul 1 02:07:40 2025 by rpki-client