$ rpki-client -vvf repo-rpki.idnic.net/repo/dfee82b7-c182-4e83-897c-e00f3ce1b0d2/0/08E555759AA0C18576364C83261B6CEA4BCF0CCB.mft File: 08E555759AA0C18576364C83261B6CEA4BCF0CCB.mft (raw, json) Hash identifier: WZyLz4eYCph9bEKDXPy4liANtCLdwI6E9RM/unZ0mBE= Subject key identifier: 54:A3:14:3F:5E:BC:14:31:11:68:7D:2C:5A:13:F6:3E:CE:91:A3:9B Authority key identifier: 08:E5:55:75:9A:A0:C1:85:76:36:4C:83:26:1B:6C:EA:4B:CF:0C:CB Certificate issuer: /CN=08E555759AA0C18576364C83261B6CEA4BCF0CCB Certificate serial: 0A2123C81F2DB736B2028F9F80C9DC12EBC0784B Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/08E555759AA0C18576364C83261B6CEA4BCF0CCB.cer Subject info access: rsync://repo-rpki.idnic.net/repo/dfee82b7-c182-4e83-897c-e00f3ce1b0d2/0/08E555759AA0C18576364C83261B6CEA4BCF0CCB.mft Manifest number: 01C9 Signing time: Sat 28 Jun 2025 18:32:16 +0000 Manifest this update: Sat 28 Jun 2025 18:27:16 +0000 Manifest next update: Wed 02 Jul 2025 04:58:16 +0000 Files and hashes: 1: 08E555759AA0C18576364C83261B6CEA4BCF0CCB.crl (hash: MqlOwEgoB32/wPv7sg4CUKUV34uS1K+orbrTqhk9Iyk=) 2: 3130332e3232392e3138342e302f32332d3233203d3e2039333431.roa (hash: zmfwOq9tRL6y6itfiedhGYjkM224b5RPCWjPsZw7viw=) 3: 3130332e3232392e3138342e302f32342d3234203d3e2039333431.roa (hash: piQ+Kt4vXK/vmNsqLp+UmigWTKiGeB35znHHpmbJcwE=) 4: 3130332e3232392e3138352e302f32342d3234203d3e2039333431.roa (hash: l9zJUbcUQzAgBZ+HyXEIEbQ+42jDa7SiCHzZNC1m0V0=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/dfee82b7-c182-4e83-897c-e00f3ce1b0d2/0/08E555759AA0C18576364C83261B6CEA4BCF0CCB.crl rsync://repo-rpki.idnic.net/repo/dfee82b7-c182-4e83-897c-e00f3ce1b0d2/0/08E555759AA0C18576364C83261B6CEA4BCF0CCB.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/08E555759AA0C18576364C83261B6CEA4BCF0CCB.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 02 Jul 2025 04:58:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0a:21:23:c8:1f:2d:b7:36:b2:02:8f:9f:80:c9:dc:12:eb:c0:78:4b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=08E555759AA0C18576364C83261B6CEA4BCF0CCB Validity Not Before: Jun 28 18:27:16 2025 GMT Not After : Jul 2 04:58:16 2025 GMT Subject: CN=54A3143F5EBC143111687D2C5A13F63ECE91A39B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:74:c4:c2:15:97:70:b6:53:71:93:90:35:c5: 6a:06:43:a2:91:0b:6f:f4:d9:88:85:78:40:86:ee: 95:73:cb:19:6a:86:e4:2e:29:62:22:f2:27:90:f8: bb:cf:43:f4:b8:3d:0e:09:07:d5:ee:ce:52:37:3e: 93:72:9c:84:0c:f6:d4:45:e6:b5:7d:cd:28:25:7d: a5:4e:5d:a7:7d:aa:ac:7c:5f:a4:23:ca:9c:b4:f7: 59:22:5b:51:c7:ca:e0:b3:fe:16:b7:71:99:a3:3f: 47:8f:c5:77:81:2f:97:19:8a:8c:a9:da:a7:9e:2c: 94:bb:35:b6:6a:1c:a5:fb:73:52:6c:29:f0:ef:6c: e4:6a:4e:ce:12:75:2e:8a:fc:bf:7c:f5:da:99:12: 3f:b0:2e:84:ac:60:9d:5e:06:ba:2d:b9:c9:1f:09: bf:fb:ba:3c:30:d5:03:e7:dc:45:ff:fe:f5:64:75: 68:d3:7e:03:e5:91:72:ad:cd:47:7f:f4:49:d0:ee: 42:88:b0:0e:a5:a1:bc:c5:12:0d:92:8e:30:a1:cd: 68:3c:d1:36:c2:e2:17:b1:64:a6:b5:da:05:5b:64: 83:3e:c0:c8:ad:e2:9e:a5:2b:91:91:79:1c:b3:65: 23:52:3b:b3:8b:cc:91:1a:15:97:0a:6c:cb:e4:e8: 31:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 54:A3:14:3F:5E:BC:14:31:11:68:7D:2C:5A:13:F6:3E:CE:91:A3:9B X509v3 Authority Key Identifier: keyid:08:E5:55:75:9A:A0:C1:85:76:36:4C:83:26:1B:6C:EA:4B:CF:0C:CB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/dfee82b7-c182-4e83-897c-e00f3ce1b0d2/0/08E555759AA0C18576364C83261B6CEA4BCF0CCB.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/08E555759AA0C18576364C83261B6CEA4BCF0CCB.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/dfee82b7-c182-4e83-897c-e00f3ce1b0d2/0/08E555759AA0C18576364C83261B6CEA4BCF0CCB.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4b:89:77:68:be:2e:fd:41:ea:ce:1d:71:44:df:59:2a:58:cb: fd:27:5d:7a:ae:b5:ce:52:78:44:68:c6:f1:b3:28:38:dc:1c: 9a:f7:7a:40:72:8e:14:3e:e3:18:df:2a:0e:11:bd:89:54:bf: 45:78:0c:e4:b4:85:87:06:51:48:ed:fc:3f:4f:5c:f5:49:69: ba:14:a3:57:d2:ee:e5:65:15:9a:46:d9:10:2c:ab:ec:c6:3c: c7:a5:e4:67:51:6a:74:fc:31:1c:40:8d:ca:86:eb:e3:3f:f2: 80:e1:11:fe:43:b7:49:31:8d:bd:d8:1a:c5:bb:65:41:aa:c9: 4d:cb:2f:70:c0:24:10:19:3d:12:2d:2b:55:52:14:94:9c:e7: 8d:9c:f7:df:49:b2:ca:38:4f:66:b2:a1:83:8b:2f:98:d6:67: dc:36:c7:d6:be:29:4c:f3:72:f4:dd:c0:cf:bd:cb:a2:78:e1: 49:91:6d:a6:62:8e:c8:da:d2:dd:0d:af:b6:00:d2:f9:9e:c0: 13:b0:32:16:ae:b8:cf:bc:be:23:90:35:f6:b8:1a:64:f0:4e: ee:83:9e:6d:93:0f:00:c7:0b:b7:32:14:f7:aa:13:cf:95:c5: 46:aa:95:06:be:54:d6:78:58:9a:c6:71:68:90:a4:a1:b7:1f: 82:c0:fd:a9 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUCiEjyB8ttzayAo+fgMncEuvAeEswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDhFNTU1NzU5QUEwQzE4NTc2MzY0QzgzMjYxQjZDRUE0 QkNGMENDQjAeFw0yNTA2MjgxODI3MTZaFw0yNTA3MDIwNDU4MTZaMDMxMTAvBgNV BAMTKDU0QTMxNDNGNUVCQzE0MzExMTY4N0QyQzVBMTNGNjNFQ0U5MUEzOUIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDQdMTCFZdwtlNxk5A1xWoGQ6KR C2/02YiFeECG7pVzyxlqhuQuKWIi8ieQ+LvPQ/S4PQ4JB9XuzlI3PpNynIQM9tRF 5rV9zSglfaVOXad9qqx8X6Qjypy091kiW1HHyuCz/ha3cZmjP0ePxXeBL5cZioyp 2qeeLJS7NbZqHKX7c1JsKfDvbORqTs4SdS6K/L989dqZEj+wLoSsYJ1eBrotuckf Cb/7ujww1QPn3EX//vVkdWjTfgPlkXKtzUd/9EnQ7kKIsA6lobzFEg2SjjChzWg8 0TbC4hexZKa12gVbZIM+wMit4p6lK5GReRyzZSNSO7OLzJEaFZcKbMvk6DELAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUVKMUP168FDERaH0sWhP2Ps6Ro5swHwYDVR0j BBgwFoAUCOVVdZqgwYV2NkyDJhts6kvPDMswDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k ZmVlODJiNy1jMTgyLTRlODMtODk3Yy1lMDBmM2NlMWIwZDIvMC8wOEU1NTU3NTlB QTBDMTg1NzYzNjRDODMyNjFCNkNFQTRCQ0YwQ0NCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMDhFNTU1NzU5QUEwQzE4NTc2MzY0QzgzMjYxQjZDRUE0QkNG MENDQi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZGZlZTgyYjctYzE4Mi00ZTgzLTg5 N2MtZTAwZjNjZTFiMGQyLzAvMDhFNTU1NzU5QUEwQzE4NTc2MzY0QzgzMjYxQjZD RUE0QkNGMENDQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEuJd2i+Lv1B6s4dcUTfWSpYy/0nXXqutc5S eERoxvGzKDjcHJr3ekByjhQ+4xjfKg4RvYlUv0V4DOS0hYcGUUjt/D9PXPVJaboU o1fS7uVlFZpG2RAsq+zGPMel5GdRanT8MRxAjcqG6+M/8oDhEf5Dt0kxjb3YGsW7 ZUGqyU3LL3DAJBAZPRItK1VSFJSc542c999Jsso4T2ayoYOLL5jWZ9w2x9a+KUzz cvTdwM+9y6J44UmRbaZijsja0t0Nr7YA0vmewBOwMhauuM+8viOQNfa4GmTwTu6D nm2TDwDHC7cyFPeqE8+VxUaqlQa+VNZ4WJrGcWiQpKG3H4LA/ak= -----END CERTIFICATE-----Generated at Mon Jun 30 10:16:25 2025 by rpki-client