$ rpki-client -vvf repo-rpki.idnic.net/repo/e5b1e57e-a0f1-467f-a46f-55a3157b0d65/0/B8C2A2B1B21164AF8EAEE387C7D9A5D94D4F8308.mft File: B8C2A2B1B21164AF8EAEE387C7D9A5D94D4F8308.mft (raw, json) Hash identifier: OVQY18k8tkEmHf3kxmeBIiL2QRs5UgiYFYD5e12DrlE= Subject key identifier: D1:6D:CD:DD:82:CF:4C:95:64:A4:4C:BB:DB:B2:2A:EE:0F:E0:FF:0F Authority key identifier: B8:C2:A2:B1:B2:11:64:AF:8E:AE:E3:87:C7:D9:A5:D9:4D:4F:83:08 Certificate issuer: /CN=B8C2A2B1B21164AF8EAEE387C7D9A5D94D4F8308 Certificate serial: 0850DD4C6975F20F97EB6425EB5DD9160A231F64 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B8C2A2B1B21164AF8EAEE387C7D9A5D94D4F8308.cer Subject info access: rsync://repo-rpki.idnic.net/repo/e5b1e57e-a0f1-467f-a46f-55a3157b0d65/0/B8C2A2B1B21164AF8EAEE387C7D9A5D94D4F8308.mft Manifest number: 018C Signing time: Sat 28 Jun 2025 14:41:05 +0000 Manifest this update: Sat 28 Jun 2025 14:36:05 +0000 Manifest next update: Tue 01 Jul 2025 20:13:05 +0000 Files and hashes: 1: 3230322e3135392e39362e302f31392d3234203d3e2039333430.roa (hash: 4CYpX855PsKjE7pRqG0I65N8tDE2yevHm2JcGXCxF84=) 2: 3131372e35342e302e302f31362d3234203d3e2039333430.roa (hash: UieSxZjEvKIMrWcJdH2TDXUustdkDqF4w0J/hh4yLRA=) 3: B8C2A2B1B21164AF8EAEE387C7D9A5D94D4F8308.crl (hash: EDAyRDrklQwjrMpa3d6I2IqgPPKIYiTVZViZFsCxzKU=) 4: 3230322e3135392e35302e302f32332d3234203d3e203435373239.roa (hash: 7LPe2lEj9jSSghBzwzWvEJHD1rdTalK2jKZeyt7h7R0=) 5: 3230322e3135332e3232342e302f31392d3234203d3e2039333430.roa (hash: vY8tbOcXriyCtT6FUxDmURMpeDa3xL/alWeAEYVK8DM=) 6: 3230322e35332e3232342e302f31392d3234203d3e2039333430.roa (hash: cxySA+7GoKy0ZBQ953Jz7wXFE+7U1S6vU/NAFozpO4w=) 7: 3230322e3135392e302e302f31382d3234203d3e2039333430.roa (hash: Juur4GxLWpPp32FXP5B1lQD8F+2wWzZU/lQ5cSimSag=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/e5b1e57e-a0f1-467f-a46f-55a3157b0d65/0/B8C2A2B1B21164AF8EAEE387C7D9A5D94D4F8308.crl rsync://repo-rpki.idnic.net/repo/e5b1e57e-a0f1-467f-a46f-55a3157b0d65/0/B8C2A2B1B21164AF8EAEE387C7D9A5D94D4F8308.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B8C2A2B1B21164AF8EAEE387C7D9A5D94D4F8308.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 01 Jul 2025 20:13:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 08:50:dd:4c:69:75:f2:0f:97:eb:64:25:eb:5d:d9:16:0a:23:1f:64 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B8C2A2B1B21164AF8EAEE387C7D9A5D94D4F8308 Validity Not Before: Jun 28 14:36:05 2025 GMT Not After : Jul 1 20:13:05 2025 GMT Subject: CN=D16DCDDD82CF4C9564A44CBBDBB22AEE0FE0FF0F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f4:bf:82:00:5b:58:64:d2:e1:75:90:73:ae:d4: 65:bd:bc:f9:d0:4c:cb:c1:51:6f:ef:76:83:17:21: f2:68:0c:1b:cd:65:57:42:d4:cf:31:48:9c:2e:f7: 7b:3c:ba:78:74:46:39:56:bb:9b:a0:bd:2a:da:2d: c2:86:61:da:f1:cf:0c:3b:74:9c:ad:5d:6a:36:25: 47:70:df:94:c1:eb:bf:6b:6f:96:db:d1:4a:4d:5e: 9d:93:8b:2e:c5:b1:12:b6:a7:d1:96:e6:83:c6:df: 0f:5b:e9:8e:e1:30:84:1d:9b:a7:a9:11:42:69:2f: 20:66:bf:96:ac:1a:bf:76:17:84:a6:4f:ad:58:91: 66:b8:f2:9f:59:e9:9e:c7:ec:cd:f0:62:4b:47:98: 40:1e:f1:5c:b3:c4:7c:12:7d:a1:f5:68:a7:6b:d7: 35:5a:69:4f:83:1c:16:57:74:87:8b:5e:c1:3a:de: 0f:10:84:62:f4:d6:ac:e4:8e:20:12:f2:83:b6:10: 69:46:e8:1b:4c:b5:c3:be:45:04:25:ea:07:37:4c: 50:ef:af:54:e4:ca:88:bc:a8:f2:5c:cd:28:e2:f4: 10:4c:65:42:36:04:83:32:b5:79:b8:aa:62:23:85: 22:3d:b1:98:00:01:16:2f:da:6f:c1:aa:8c:85:35: 09:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D1:6D:CD:DD:82:CF:4C:95:64:A4:4C:BB:DB:B2:2A:EE:0F:E0:FF:0F X509v3 Authority Key Identifier: keyid:B8:C2:A2:B1:B2:11:64:AF:8E:AE:E3:87:C7:D9:A5:D9:4D:4F:83:08 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/e5b1e57e-a0f1-467f-a46f-55a3157b0d65/0/B8C2A2B1B21164AF8EAEE387C7D9A5D94D4F8308.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B8C2A2B1B21164AF8EAEE387C7D9A5D94D4F8308.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e5b1e57e-a0f1-467f-a46f-55a3157b0d65/0/B8C2A2B1B21164AF8EAEE387C7D9A5D94D4F8308.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6e:13:c4:b4:e0:09:b2:83:53:56:03:a5:36:6d:28:95:e6:ef: 36:14:a3:98:56:5f:0f:78:bc:e8:2d:fc:ed:6b:00:24:7b:47: 18:b1:08:58:c4:01:00:c4:22:36:90:70:c0:d1:27:54:a5:52: ab:2c:89:d7:7d:df:c0:3b:68:07:3b:6d:2e:a0:85:bc:35:0b: 10:cf:91:13:4a:0c:fd:a9:3a:16:b0:55:89:64:ea:5c:7a:71: b8:7b:ea:33:a8:08:3b:53:4a:75:a5:a3:da:7b:f1:31:b9:df: 0c:9d:b7:05:93:c7:74:52:e4:54:37:6b:25:e6:ea:86:91:13: 57:61:21:d6:c2:ff:2e:39:4d:9c:49:19:17:25:2d:13:5a:f3: f5:d4:55:e0:37:a7:96:d0:f9:8d:25:15:4f:e0:13:45:4a:5f: 84:1c:69:de:39:20:5e:51:ff:ef:ff:c8:67:0c:d8:39:f7:99: f5:1a:c5:5b:db:0f:5a:8d:3e:9f:77:06:62:1d:12:7c:e6:ea: 03:85:e5:9d:9d:b2:9b:91:d5:e2:ee:91:ea:8a:39:b5:54:46: 6c:ba:f1:ae:af:bf:c2:02:26:de:59:d8:fe:c9:77:d8:01:a9: 9a:38:ad:90:25:c8:f3:ca:bf:88:11:79:04:fb:33:52:91:ab: 39:dd:a1:c3 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUCFDdTGl18g+X62Ql613ZFgojH2QwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjhDMkEyQjFCMjExNjRBRjhFQUVFMzg3QzdEOUE1RDk0 RDRGODMwODAeFw0yNTA2MjgxNDM2MDVaFw0yNTA3MDEyMDEzMDVaMDMxMTAvBgNV BAMTKEQxNkRDREREODJDRjRDOTU2NEE0NENCQkRCQjIyQUVFMEZFMEZGMEYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD0v4IAW1hk0uF1kHOu1GW9vPnQ TMvBUW/vdoMXIfJoDBvNZVdC1M8xSJwu93s8unh0RjlWu5ugvSraLcKGYdrxzww7 dJytXWo2JUdw35TB679rb5bb0UpNXp2Tiy7FsRK2p9GW5oPG3w9b6Y7hMIQdm6ep EUJpLyBmv5asGr92F4SmT61YkWa48p9Z6Z7H7M3wYktHmEAe8VyzxHwSfaH1aKdr 1zVaaU+DHBZXdIeLXsE63g8QhGL01qzkjiAS8oO2EGlG6BtMtcO+RQQl6gc3TFDv r1Tkyoi8qPJczSji9BBMZUI2BIMytXm4qmIjhSI9sZgAARYv2m/BqoyFNQnjAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU0W3N3YLPTJVkpEy727Iq7g/g/w8wHwYDVR0j BBgwFoAUuMKisbIRZK+OruOHx9ml2U1PgwgwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l NWIxZTU3ZS1hMGYxLTQ2N2YtYTQ2Zi01NWEzMTU3YjBkNjUvMC9COEMyQTJCMUIy MTE2NEFGOEVBRUUzODdDN0Q5QTVEOTRENEY4MzA4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQjhDMkEyQjFCMjExNjRBRjhFQUVFMzg3QzdEOUE1RDk0RDRG ODMwOC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZTViMWU1N2UtYTBmMS00NjdmLWE0 NmYtNTVhMzE1N2IwZDY1LzAvQjhDMkEyQjFCMjExNjRBRjhFQUVFMzg3QzdEOUE1 RDk0RDRGODMwOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAG4TxLTgCbKDU1YDpTZtKJXm7zYUo5hWXw94 vOgt/O1rACR7RxixCFjEAQDEIjaQcMDRJ1SlUqssidd938A7aAc7bS6ghbw1CxDP kRNKDP2pOhawVYlk6lx6cbh76jOoCDtTSnWlo9p78TG53wydtwWTx3RS5FQ3ayXm 6oaRE1dhIdbC/y45TZxJGRclLRNa8/XUVeA3p5bQ+Y0lFU/gE0VKX4Qcad45IF5R /+//yGcM2Dn3mfUaxVvbD1qNPp93BmIdEnzm6gOF5Z2dspuR1eLukeqKObVURmy6 8a6vv8ICJt5Z2P7Jd9gBqZo4rZAlyPPKv4gReQT7M1KRqzndocM= -----END CERTIFICATE-----Generated at Mon Jun 30 00:32:26 2025 by rpki-client