$ rpki-client -vvf repo-rpki.idnic.net/repo/d9afd315-f47f-4f6a-b8b5-45a2280bbc85/0/8CC3A67DBA162B4430DF0F08F810A7B953CBA4A1.mft File: 8CC3A67DBA162B4430DF0F08F810A7B953CBA4A1.mft (raw, json) Hash identifier: HFmLODvRWk+OYkdxcP00gmT/PJi4vG+VAGy9V/PsDj0= Subject key identifier: 87:C7:59:0F:A0:C8:B2:4F:4A:DE:2B:A9:1C:07:EC:B0:0F:5B:B3:0A Authority key identifier: 8C:C3:A6:7D:BA:16:2B:44:30:DF:0F:08:F8:10:A7:B9:53:CB:A4:A1 Certificate issuer: /CN=8CC3A67DBA162B4430DF0F08F810A7B953CBA4A1 Certificate serial: 3E563F838F6471DDFC234B19981E34FDA14BE161 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8CC3A67DBA162B4430DF0F08F810A7B953CBA4A1.cer Subject info access: rsync://repo-rpki.idnic.net/repo/d9afd315-f47f-4f6a-b8b5-45a2280bbc85/0/8CC3A67DBA162B4430DF0F08F810A7B953CBA4A1.mft Manifest number: 01E1 Signing time: Fri 27 Jun 2025 17:50:55 +0000 Manifest this update: Fri 27 Jun 2025 17:45:55 +0000 Manifest next update: Tue 01 Jul 2025 01:38:55 +0000 Files and hashes: 1: 3130332e3139312e35322e302f32332d3234203d3e2034383030.roa (hash: e+A7LYn+NCGFiG7Es9xiBuZGY1wSb3yZo5rf4YGYc54=) 2: 8CC3A67DBA162B4430DF0F08F810A7B953CBA4A1.crl (hash: qLQA5oomc1aVzWbEDRSDRog3CR0FWO7qYqpHh+N90n8=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/d9afd315-f47f-4f6a-b8b5-45a2280bbc85/0/8CC3A67DBA162B4430DF0F08F810A7B953CBA4A1.crl rsync://repo-rpki.idnic.net/repo/d9afd315-f47f-4f6a-b8b5-45a2280bbc85/0/8CC3A67DBA162B4430DF0F08F810A7B953CBA4A1.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8CC3A67DBA162B4430DF0F08F810A7B953CBA4A1.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 01 Jul 2025 01:38:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3e:56:3f:83:8f:64:71:dd:fc:23:4b:19:98:1e:34:fd:a1:4b:e1:61 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8CC3A67DBA162B4430DF0F08F810A7B953CBA4A1 Validity Not Before: Jun 27 17:45:55 2025 GMT Not After : Jul 1 01:38:55 2025 GMT Subject: CN=87C7590FA0C8B24F4ADE2BA91C07ECB00F5BB30A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:99:96:1a:14:c0:57:96:9c:23:51:ca:d5:eb: f0:0e:28:3d:c9:d1:08:72:30:7e:1f:c3:05:72:3b: 07:61:78:1d:ff:b4:26:60:b9:f7:f7:7f:5e:6b:be: e4:31:57:45:74:11:52:c5:90:1b:b8:0f:43:73:d7: 5b:24:2d:b4:41:29:ea:e1:c2:ec:00:57:dd:fa:97: df:78:db:2e:7d:26:3b:9c:1e:ac:a0:d3:d7:58:8c: 96:fa:87:e1:96:04:8c:74:a6:01:b6:7e:c7:19:1b: 50:61:4b:67:a6:b8:65:f4:de:b9:9f:ae:31:c3:d4: fa:65:e0:d1:d5:15:25:90:24:44:d1:2f:f2:fa:d1: 9c:a6:a3:df:26:fa:86:63:07:f1:05:31:c6:e3:96: 9d:2f:73:93:19:3c:f5:78:1e:6b:e2:e5:74:a0:fe: ca:1a:37:f9:85:31:43:a3:65:26:50:18:ee:46:b9: 9b:bd:05:e4:c5:67:e6:26:d8:c3:d7:56:b0:65:1f: ff:a9:cf:71:a3:33:0e:bd:3d:46:80:2d:20:1b:84: 62:36:77:0e:db:a0:20:ed:5b:0e:69:3d:93:b9:84: 8f:37:f6:eb:13:34:b1:f8:ca:9c:19:da:ad:80:b4: 05:13:f3:35:83:8a:ee:fa:f8:7c:b0:7e:4f:ec:1a: cb:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:C7:59:0F:A0:C8:B2:4F:4A:DE:2B:A9:1C:07:EC:B0:0F:5B:B3:0A X509v3 Authority Key Identifier: keyid:8C:C3:A6:7D:BA:16:2B:44:30:DF:0F:08:F8:10:A7:B9:53:CB:A4:A1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/d9afd315-f47f-4f6a-b8b5-45a2280bbc85/0/8CC3A67DBA162B4430DF0F08F810A7B953CBA4A1.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8CC3A67DBA162B4430DF0F08F810A7B953CBA4A1.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d9afd315-f47f-4f6a-b8b5-45a2280bbc85/0/8CC3A67DBA162B4430DF0F08F810A7B953CBA4A1.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 94:21:2e:6d:54:23:f4:98:bf:2d:bb:85:04:73:8d:0f:7d:b0: 69:5b:8c:d9:14:1f:c9:65:51:87:e3:7b:21:8b:76:83:c5:61: 41:1b:1b:ca:80:a9:7c:d4:66:73:c8:19:92:b1:c3:ef:ab:55: 26:5d:97:4b:fb:1a:d2:e1:39:62:b1:49:f4:fb:84:e2:53:e5: 88:d5:5f:79:5d:63:ea:6b:d2:90:29:99:9a:c2:bc:14:95:c1: 52:fd:96:61:48:12:33:25:03:70:e7:cf:01:8f:97:1c:ca:fc: b8:c7:ad:98:aa:7e:fe:c4:f8:f9:6c:3b:db:ff:4d:2d:75:db: 75:37:07:f0:d6:1d:35:b0:52:eb:2b:66:60:ad:ee:80:5a:13: d5:b1:f3:d7:12:4a:41:72:5c:10:18:ea:8b:93:71:5e:31:0b: 17:17:e3:e8:b5:26:ad:13:e6:ba:b8:29:e6:75:63:83:d9:b7: 2d:b2:34:2a:9d:0a:2d:7c:9e:1a:ea:a9:ad:97:28:dc:d7:5b: a3:42:35:e7:97:8e:42:39:9d:91:72:96:21:b1:47:f5:4d:c6: 68:43:24:99:2b:d8:ad:42:3a:36:46:38:64:6a:2a:9a:dd:d8: 08:c3:70:b0:72:8e:b9:aa:c0:c5:6c:db:c7:d0:83:bc:9d:ff: 8d:f1:4a:33 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUPlY/g49kcd38I0sZmB40/aFL4WEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOENDM0E2N0RCQTE2MkI0NDMwREYwRjA4RjgxMEE3Qjk1 M0NCQTRBMTAeFw0yNTA2MjcxNzQ1NTVaFw0yNTA3MDEwMTM4NTVaMDMxMTAvBgNV BAMTKDg3Qzc1OTBGQTBDOEIyNEY0QURFMkJBOTFDMDdFQ0IwMEY1QkIzMEEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+mZYaFMBXlpwjUcrV6/AOKD3J 0QhyMH4fwwVyOwdheB3/tCZguff3f15rvuQxV0V0EVLFkBu4D0Nz11skLbRBKerh wuwAV936l9942y59JjucHqyg09dYjJb6h+GWBIx0pgG2fscZG1BhS2emuGX03rmf rjHD1Ppl4NHVFSWQJETRL/L60Zymo98m+oZjB/EFMcbjlp0vc5MZPPV4Hmvi5XSg /soaN/mFMUOjZSZQGO5GuZu9BeTFZ+Ym2MPXVrBlH/+pz3GjMw69PUaALSAbhGI2 dw7boCDtWw5pPZO5hI839usTNLH4ypwZ2q2AtAUT8zWDiu76+Hywfk/sGsu5AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUh8dZD6DIsk9K3iupHAfssA9bswowHwYDVR0j BBgwFoAUjMOmfboWK0Qw3w8I+BCnuVPLpKEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k OWFmZDMxNS1mNDdmLTRmNmEtYjhiNS00NWEyMjgwYmJjODUvMC84Q0MzQTY3REJB MTYyQjQ0MzBERjBGMDhGODEwQTdCOTUzQ0JBNEExLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOENDM0E2N0RCQTE2MkI0NDMwREYwRjA4RjgxMEE3Qjk1M0NC QTRBMS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZDlhZmQzMTUtZjQ3Zi00ZjZhLWI4 YjUtNDVhMjI4MGJiYzg1LzAvOENDM0E2N0RCQTE2MkI0NDMwREYwRjA4RjgxMEE3 Qjk1M0NCQTRBMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJQhLm1UI/SYvy27hQRzjQ99sGlbjNkUH8ll UYfjeyGLdoPFYUEbG8qAqXzUZnPIGZKxw++rVSZdl0v7GtLhOWKxSfT7hOJT5YjV X3ldY+pr0pApmZrCvBSVwVL9lmFIEjMlA3DnzwGPlxzK/LjHrZiqfv7E+PlsO9v/ TS1123U3B/DWHTWwUusrZmCt7oBaE9Wx89cSSkFyXBAY6ouTcV4xCxcX4+i1Jq0T 5rq4KeZ1Y4PZty2yNCqdCi18nhrqqa2XKNzXW6NCNeeXjkI5nZFyliGxR/VNxmhD JJkr2K1COjZGOGRqKprd2AjDcLByjrmqwMVs28fQg7yd/43xSjM= -----END CERTIFICATE-----Generated at Mon Jun 30 00:56:20 2025 by rpki-client