$ rpki-client -vvf repo-rpki.idnic.net/repo/e3809384-9b1c-4f5a-aa6b-9de3b52a9c05/0/8932E25F54C4B10E2AE5B71E38D2AD4D1EE3BB11.mft File: 8932E25F54C4B10E2AE5B71E38D2AD4D1EE3BB11.mft (raw, json) Hash identifier: gmnzkJM+VLbgaWcdWHwGALOCuHGHwXIK74yiHSkraBQ= Subject key identifier: CA:70:F3:E8:34:21:D7:90:2C:C8:46:7C:CE:90:59:9E:20:5B:F6:DA Authority key identifier: 89:32:E2:5F:54:C4:B1:0E:2A:E5:B7:1E:38:D2:AD:4D:1E:E3:BB:11 Certificate issuer: /CN=8932E25F54C4B10E2AE5B71E38D2AD4D1EE3BB11 Certificate serial: 6B9314987813951E84EC000DFB762AEA5DFD8259 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8932E25F54C4B10E2AE5B71E38D2AD4D1EE3BB11.cer Subject info access: rsync://repo-rpki.idnic.net/repo/e3809384-9b1c-4f5a-aa6b-9de3b52a9c05/0/8932E25F54C4B10E2AE5B71E38D2AD4D1EE3BB11.mft Manifest number: B0 Signing time: Sun 29 Jun 2025 03:20:00 +0000 Manifest this update: Sun 29 Jun 2025 03:15:00 +0000 Manifest next update: Wed 02 Jul 2025 07:02:00 +0000 Files and hashes: 1: 3130332e32392e3137302e302f32342d3234203d3e203536323631.roa (hash: AbfmsPIM39RXP9giC5KqkIRrkD9RG/QaxNfAq/KCmcs=) 2: 8932E25F54C4B10E2AE5B71E38D2AD4D1EE3BB11.crl (hash: RHcq8GrjKHYoxrg9Q4Q7rhzpR1O3bxpqvlcU9H9C9ys=) 3: 3130332e32392e3137312e302f32342d3234203d3e203538333738.roa (hash: VGUNPT+EvshoEIe2DkaARFh/LWXkGNwN7useeVXqqQc=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/e3809384-9b1c-4f5a-aa6b-9de3b52a9c05/0/8932E25F54C4B10E2AE5B71E38D2AD4D1EE3BB11.crl rsync://repo-rpki.idnic.net/repo/e3809384-9b1c-4f5a-aa6b-9de3b52a9c05/0/8932E25F54C4B10E2AE5B71E38D2AD4D1EE3BB11.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8932E25F54C4B10E2AE5B71E38D2AD4D1EE3BB11.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 02 Jul 2025 07:02:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6b:93:14:98:78:13:95:1e:84:ec:00:0d:fb:76:2a:ea:5d:fd:82:59 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8932E25F54C4B10E2AE5B71E38D2AD4D1EE3BB11 Validity Not Before: Jun 29 03:15:00 2025 GMT Not After : Jul 2 07:02:00 2025 GMT Subject: CN=CA70F3E83421D7902CC8467CCE90599E205BF6DA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:77:c5:a8:33:f5:95:f3:fe:6e:7d:fb:1a:ae: 87:28:6e:c0:dd:32:ec:6a:3e:25:b5:4e:3a:1b:7e: 7b:13:09:fd:0a:e3:0e:d7:16:6f:6c:44:5e:61:33: d7:11:4c:66:a2:c1:70:77:3f:6a:0e:f9:6f:81:74: f7:24:51:23:36:48:ea:7a:73:9e:c2:35:aa:c7:3d: cc:b9:ae:3e:3b:e9:18:c6:cd:7b:81:68:0c:ff:e3: 05:92:1a:f4:f7:69:b2:d5:37:85:a4:93:02:71:ec: d4:5c:8d:16:f3:40:a1:37:0d:78:4f:cc:26:13:19: 2a:b1:ce:98:ef:f4:8a:ed:b5:43:ed:c7:d9:21:79: 38:35:72:9e:aa:5b:2e:1b:7e:f9:e6:2b:2e:21:84: db:65:dc:7c:7a:a5:ac:d9:c5:0d:51:1c:65:df:65: 9b:c3:2f:01:cd:aa:84:5e:19:f6:c8:e7:ed:04:dc: 32:b8:79:b1:1d:a4:99:a2:dc:b1:bc:c6:58:5d:2e: d2:51:fd:75:9b:8e:88:37:04:14:0d:83:d2:70:41: 8e:c4:41:b3:47:43:dc:32:fd:25:b0:5f:a4:70:4b: 11:07:2a:47:e8:fd:a5:2e:5d:16:11:88:f5:08:17: f2:fd:3b:3c:c8:55:2a:cf:21:ea:69:84:f1:0c:3b: 16:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:70:F3:E8:34:21:D7:90:2C:C8:46:7C:CE:90:59:9E:20:5B:F6:DA X509v3 Authority Key Identifier: keyid:89:32:E2:5F:54:C4:B1:0E:2A:E5:B7:1E:38:D2:AD:4D:1E:E3:BB:11 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/e3809384-9b1c-4f5a-aa6b-9de3b52a9c05/0/8932E25F54C4B10E2AE5B71E38D2AD4D1EE3BB11.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8932E25F54C4B10E2AE5B71E38D2AD4D1EE3BB11.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e3809384-9b1c-4f5a-aa6b-9de3b52a9c05/0/8932E25F54C4B10E2AE5B71E38D2AD4D1EE3BB11.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 16:79:64:c9:ec:00:a3:bf:56:70:ca:57:85:1b:7a:bf:1f:67: 30:45:7c:56:2f:f9:57:87:dc:bc:6a:49:bf:5b:f4:b1:50:b0: 05:ae:29:8a:16:17:8f:84:42:84:46:5a:d3:99:ea:d7:67:43: 58:76:c1:24:46:15:4d:27:75:d9:90:53:10:10:28:94:82:89: e9:4d:ff:52:ef:57:1b:9d:33:57:75:29:c8:9c:76:34:b3:c6: 77:ed:00:38:c9:97:81:b0:8c:0b:6c:6c:9e:b9:20:4d:70:f8: 01:20:18:a5:79:78:c6:8f:e6:6a:0e:fa:4a:13:a7:a1:0a:5d: 15:39:68:71:51:36:df:d9:ac:51:d1:86:80:86:15:57:ab:6f: b8:88:4a:bf:e4:f1:f9:9b:1d:b9:8f:c2:51:ca:01:da:0b:5f: fe:8a:29:78:c1:ac:ec:6a:b2:19:9d:72:b3:91:aa:4c:ce:79: 72:ee:44:69:d9:a9:99:88:08:e0:67:21:61:42:9c:ca:b4:ee: f7:4b:f3:74:2d:66:90:14:b2:6e:31:d3:bc:e0:81:69:99:dc: 24:c3:b5:88:8d:a0:53:1d:9e:06:0b:b1:31:df:e3:8b:5f:2c: c8:a1:ea:5d:c6:86:83:d2:2c:24:67:ed:a6:34:86:ce:96:55: c8:6c:ae:41 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUa5MUmHgTlR6E7AAN+3Yq6l39glkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODkzMkUyNUY1NEM0QjEwRTJBRTVCNzFFMzhEMkFENEQx RUUzQkIxMTAeFw0yNTA2MjkwMzE1MDBaFw0yNTA3MDIwNzAyMDBaMDMxMTAvBgNV BAMTKENBNzBGM0U4MzQyMUQ3OTAyQ0M4NDY3Q0NFOTA1OTlFMjA1QkY2REEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDPd8WoM/WV8/5uffsarocobsDd MuxqPiW1TjobfnsTCf0K4w7XFm9sRF5hM9cRTGaiwXB3P2oO+W+BdPckUSM2SOp6 c57CNarHPcy5rj476RjGzXuBaAz/4wWSGvT3abLVN4WkkwJx7NRcjRbzQKE3DXhP zCYTGSqxzpjv9IrttUPtx9kheTg1cp6qWy4bfvnmKy4hhNtl3Hx6pazZxQ1RHGXf ZZvDLwHNqoReGfbI5+0E3DK4ebEdpJmi3LG8xlhdLtJR/XWbjog3BBQNg9JwQY7E QbNHQ9wy/SWwX6RwSxEHKkfo/aUuXRYRiPUIF/L9OzzIVSrPIepphPEMOxYvAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUynDz6DQh15AsyEZ8zpBZniBb9towHwYDVR0j BBgwFoAUiTLiX1TEsQ4q5bceONKtTR7juxEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l MzgwOTM4NC05YjFjLTRmNWEtYWE2Yi05ZGUzYjUyYTljMDUvMC84OTMyRTI1RjU0 QzRCMTBFMkFFNUI3MUUzOEQyQUQ0RDFFRTNCQjExLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvODkzMkUyNUY1NEM0QjEwRTJBRTVCNzFFMzhEMkFENEQxRUUz QkIxMS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZTM4MDkzODQtOWIxYy00ZjVhLWFh NmItOWRlM2I1MmE5YzA1LzAvODkzMkUyNUY1NEM0QjEwRTJBRTVCNzFFMzhEMkFE NEQxRUUzQkIxMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABZ5ZMnsAKO/VnDKV4Uber8fZzBFfFYv+VeH 3LxqSb9b9LFQsAWuKYoWF4+EQoRGWtOZ6tdnQ1h2wSRGFU0nddmQUxAQKJSCielN /1LvVxudM1d1KcicdjSzxnftADjJl4GwjAtsbJ65IE1w+AEgGKV5eMaP5moO+koT p6EKXRU5aHFRNt/ZrFHRhoCGFVerb7iISr/k8fmbHbmPwlHKAdoLX/6KKXjBrOxq shmdcrORqkzOeXLuRGnZqZmICOBnIWFCnMq07vdL83QtZpAUsm4x07zggWmZ3CTD tYiNoFMdngYLsTHf44tfLMih6l3GhoPSLCRn7aY0hs6WVchsrkE= -----END CERTIFICATE-----Generated at Mon Jun 30 16:24:58 2025 by rpki-client