$ rpki-client -vvf repo-rpki.idnic.net/repo/f0a929c6-1e25-494a-b0f9-55fc4fc94fbc/0/8A0F7659BE6C916702994F1B653CA6335CF48F9F.mft File: 8A0F7659BE6C916702994F1B653CA6335CF48F9F.mft (raw, json) Hash identifier: FT82jtHMarrVb/vsD+xqDAkA4hX//zJ3DMD+uB6rdeU= Subject key identifier: C2:8B:0D:40:BC:39:72:D4:74:C7:FC:84:A3:8B:A9:18:13:EC:A0:7D Authority key identifier: 8A:0F:76:59:BE:6C:91:67:02:99:4F:1B:65:3C:A6:33:5C:F4:8F:9F Certificate issuer: /CN=8A0F7659BE6C916702994F1B653CA6335CF48F9F Certificate serial: 1B07805A796F24948F11EBCAE84C4C9BB8F17112 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8A0F7659BE6C916702994F1B653CA6335CF48F9F.cer Subject info access: rsync://repo-rpki.idnic.net/repo/f0a929c6-1e25-494a-b0f9-55fc4fc94fbc/0/8A0F7659BE6C916702994F1B653CA6335CF48F9F.mft Manifest number: 03D2 Signing time: Sun 29 Jun 2025 00:22:03 +0000 Manifest this update: Sun 29 Jun 2025 00:17:03 +0000 Manifest next update: Wed 02 Jul 2025 02:57:03 +0000 Files and hashes: 1: 3230322e38372e3234382e302f32312d3234203d3e203234323031.roa (hash: YIGWj76AnaLSHaaCNOVsCHFGKespwS6XW2pML5MbQts=) 2: 3130332e3232382e3234302e302f32322d3234203d3e203435373030.roa (hash: nYsP2Y+L7z5x+ELGHcLfdcfTT6FcQq7vqqfEAudnokQ=) 3: 323430343a3530303a3a2f33322d3438203d3e203234323031.roa (hash: ZncYvkH3fAKDn8QBBs6vlpl5n6FCs5nY6O2LpIihUog=) 4: 8A0F7659BE6C916702994F1B653CA6335CF48F9F.crl (hash: Cm88AyR7hMmfcLNZUj8jmD2940xngAcar21imiaxtN8=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/f0a929c6-1e25-494a-b0f9-55fc4fc94fbc/0/8A0F7659BE6C916702994F1B653CA6335CF48F9F.crl rsync://repo-rpki.idnic.net/repo/f0a929c6-1e25-494a-b0f9-55fc4fc94fbc/0/8A0F7659BE6C916702994F1B653CA6335CF48F9F.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8A0F7659BE6C916702994F1B653CA6335CF48F9F.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 02 Jul 2025 02:57:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1b:07:80:5a:79:6f:24:94:8f:11:eb:ca:e8:4c:4c:9b:b8:f1:71:12 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8A0F7659BE6C916702994F1B653CA6335CF48F9F Validity Not Before: Jun 29 00:17:03 2025 GMT Not After : Jul 2 02:57:03 2025 GMT Subject: CN=C28B0D40BC3972D474C7FC84A38BA91813ECA07D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:f8:db:75:49:c8:10:11:f4:17:14:b2:05:0b: af:4c:06:b8:84:e5:97:0d:17:de:8a:f9:90:01:fc: 32:11:fd:50:c6:e2:40:d6:f5:92:1c:be:d8:4d:cc: ec:d4:42:2a:a1:9a:e1:85:f1:6e:d6:75:bb:65:6a: a5:40:0e:41:bc:f4:8a:c7:b7:8a:5b:1f:5e:6e:1e: 86:df:56:bb:14:83:c4:2b:d9:18:11:d3:ee:0d:a9: c1:36:46:f9:88:19:88:7e:4e:1c:0d:ba:9f:88:0f: 6f:35:d9:1c:1a:7e:ca:fe:e7:8a:6a:41:77:58:33: 3d:8f:8a:9b:ac:cb:05:19:56:07:95:00:04:89:d8: a4:c9:69:38:2e:e0:16:71:bd:c4:50:34:b0:cc:52: a3:7b:2f:4e:9a:ab:12:55:4d:31:d2:1f:92:9d:d0: de:c9:13:6e:0c:cd:ce:62:06:e0:f9:b5:8c:53:e4: 4c:a6:77:81:a5:68:90:f2:3c:33:26:e6:af:05:95: d2:bc:16:1a:fc:e3:83:03:ab:d3:bb:d0:71:a6:ab: 8d:58:43:43:17:bd:1f:7a:d2:38:63:9c:82:46:6d: cd:56:c8:e6:50:93:80:e9:7d:22:30:94:af:ab:c0: 26:e1:3b:ef:7d:17:08:77:62:c0:21:09:ea:16:b6: 3b:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C2:8B:0D:40:BC:39:72:D4:74:C7:FC:84:A3:8B:A9:18:13:EC:A0:7D X509v3 Authority Key Identifier: keyid:8A:0F:76:59:BE:6C:91:67:02:99:4F:1B:65:3C:A6:33:5C:F4:8F:9F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/f0a929c6-1e25-494a-b0f9-55fc4fc94fbc/0/8A0F7659BE6C916702994F1B653CA6335CF48F9F.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8A0F7659BE6C916702994F1B653CA6335CF48F9F.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f0a929c6-1e25-494a-b0f9-55fc4fc94fbc/0/8A0F7659BE6C916702994F1B653CA6335CF48F9F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2f:32:42:03:5a:a7:87:a0:f1:14:7a:33:e8:5c:c9:64:46:88: 3d:e2:0a:c0:4c:3f:40:9a:57:a0:0b:e4:dc:0c:b7:6f:d7:a1: f0:b6:fb:58:3a:a0:68:60:10:5b:29:4f:fd:a7:b6:74:3d:f3: 9f:46:b8:aa:79:86:2e:c4:6e:19:8f:b7:79:8c:08:d8:0c:85: 21:7d:4b:2f:08:7b:6b:bf:f4:15:42:91:7f:e7:b6:4d:66:ab: 05:56:30:17:ed:15:1a:b3:cf:54:ec:ff:94:b7:95:4c:ce:2f: d6:46:2c:7f:aa:4d:da:30:5e:6f:3e:d2:20:fb:c7:09:86:e0: 63:f3:ab:be:05:d0:b7:66:59:e7:3e:a8:d8:ca:05:a3:ec:70: 2e:48:33:51:17:b9:ff:39:a8:98:65:14:3e:ee:c5:d6:fd:99: 97:f4:97:09:af:2e:7c:39:4d:59:ff:fa:80:ff:08:fa:bb:83: fc:1d:6f:78:c3:f6:cf:fe:36:53:3e:f7:d1:cd:9d:1d:7d:5c: de:ce:63:a5:dd:be:7e:2c:cf:32:eb:39:78:56:b0:7c:e3:6f: 88:dc:88:6b:89:5d:85:da:89:35:9c:36:ac:31:52:7b:e3:ae: be:fd:9c:83:cc:23:c9:21:c0:6a:f9:ff:c8:4c:c2:4c:50:a1: d4:fd:2d:81 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUGweAWnlvJJSPEevK6ExMm7jxcRIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEEwRjc2NTlCRTZDOTE2NzAyOTk0RjFCNjUzQ0E2MzM1 Q0Y0OEY5RjAeFw0yNTA2MjkwMDE3MDNaFw0yNTA3MDIwMjU3MDNaMDMxMTAvBgNV BAMTKEMyOEIwRDQwQkMzOTcyRDQ3NEM3RkM4NEEzOEJBOTE4MTNFQ0EwN0QwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDY+Nt1ScgQEfQXFLIFC69MBriE 5ZcNF96K+ZAB/DIR/VDG4kDW9ZIcvthNzOzUQiqhmuGF8W7WdbtlaqVADkG89IrH t4pbH15uHobfVrsUg8Qr2RgR0+4NqcE2RvmIGYh+ThwNup+ID2812Rwafsr+54pq QXdYMz2PipusywUZVgeVAASJ2KTJaTgu4BZxvcRQNLDMUqN7L06aqxJVTTHSH5Kd 0N7JE24Mzc5iBuD5tYxT5Eymd4GlaJDyPDMm5q8FldK8Fhr844MDq9O70HGmq41Y Q0MXvR960jhjnIJGbc1WyOZQk4DpfSIwlK+rwCbhO+99Fwh3YsAhCeoWtjv5AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUwosNQLw5ctR0x/yEo4upGBPsoH0wHwYDVR0j BBgwFoAUig92Wb5skWcCmU8bZTymM1z0j58wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m MGE5MjljNi0xZTI1LTQ5NGEtYjBmOS01NWZjNGZjOTRmYmMvMC84QTBGNzY1OUJF NkM5MTY3MDI5OTRGMUI2NTNDQTYzMzVDRjQ4RjlGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOEEwRjc2NTlCRTZDOTE2NzAyOTk0RjFCNjUzQ0E2MzM1Q0Y0 OEY5Ri5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZjBhOTI5YzYtMWUyNS00OTRhLWIw ZjktNTVmYzRmYzk0ZmJjLzAvOEEwRjc2NTlCRTZDOTE2NzAyOTk0RjFCNjUzQ0E2 MzM1Q0Y0OEY5Ri5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAC8yQgNap4eg8RR6M+hcyWRGiD3iCsBMP0Ca V6AL5NwMt2/XofC2+1g6oGhgEFspT/2ntnQ9859GuKp5hi7EbhmPt3mMCNgMhSF9 Sy8Ie2u/9BVCkX/ntk1mqwVWMBftFRqzz1Ts/5S3lUzOL9ZGLH+qTdowXm8+0iD7 xwmG4GPzq74F0LdmWec+qNjKBaPscC5IM1EXuf85qJhlFD7uxdb9mZf0lwmvLnw5 TVn/+oD/CPq7g/wdb3jD9s/+NlM+99HNnR19XN7OY6Xdvn4szzLrOXhWsHzjb4jc iGuJXYXaiTWcNqwxUnvjrr79nIPMI8khwGr5/8hMwkxQodT9LYE= -----END CERTIFICATE-----Generated at Mon Jun 30 00:25:51 2025 by rpki-client