$ rpki-client -vvf repo-rpki.idnic.net/repo/f9e7a28a-62f0-4d14-8702-403a5190eae1/0/8A4FF836588BBDC5E5CC526BBBEB66D5140D1B86.mft File: 8A4FF836588BBDC5E5CC526BBBEB66D5140D1B86.mft (raw, json) Hash identifier: FBjwBENoxS9TdsgZWwMxVobB2JGL6XYA+9A2A/cDPK8= Subject key identifier: 3B:DA:D1:A9:43:42:2F:79:FE:12:58:90:1C:18:02:0C:86:9D:30:AD Authority key identifier: 8A:4F:F8:36:58:8B:BD:C5:E5:CC:52:6B:BB:EB:66:D5:14:0D:1B:86 Certificate issuer: /CN=8A4FF836588BBDC5E5CC526BBBEB66D5140D1B86 Certificate serial: 75ABFEC4F743F6CF08B6AD775A23504F46911800 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8A4FF836588BBDC5E5CC526BBBEB66D5140D1B86.cer Subject info access: rsync://repo-rpki.idnic.net/repo/f9e7a28a-62f0-4d14-8702-403a5190eae1/0/8A4FF836588BBDC5E5CC526BBBEB66D5140D1B86.mft Manifest number: 0312 Signing time: Sat 28 Jun 2025 20:21:25 +0000 Manifest this update: Sat 28 Jun 2025 20:16:25 +0000 Manifest next update: Tue 01 Jul 2025 22:22:25 +0000 Files and hashes: 1: 8A4FF836588BBDC5E5CC526BBBEB66D5140D1B86.crl (hash: wlngi0B+12JxlLImcg/OM//dFTl/K5NQPLzB3zfAO34=) 2: 3130332e3137312e33302e302f32332d3234203d3e20313331313131.roa (hash: 0IdcwPtxZArM5JrmLtgkLYtthS0u5GSXZS6q7IiPcxg=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/f9e7a28a-62f0-4d14-8702-403a5190eae1/0/8A4FF836588BBDC5E5CC526BBBEB66D5140D1B86.crl rsync://repo-rpki.idnic.net/repo/f9e7a28a-62f0-4d14-8702-403a5190eae1/0/8A4FF836588BBDC5E5CC526BBBEB66D5140D1B86.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8A4FF836588BBDC5E5CC526BBBEB66D5140D1B86.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 01 Jul 2025 22:22:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 75:ab:fe:c4:f7:43:f6:cf:08:b6:ad:77:5a:23:50:4f:46:91:18:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8A4FF836588BBDC5E5CC526BBBEB66D5140D1B86 Validity Not Before: Jun 28 20:16:25 2025 GMT Not After : Jul 1 22:22:25 2025 GMT Subject: CN=3BDAD1A943422F79FE1258901C18020C869D30AD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:33:39:25:93:62:da:f1:a0:78:f4:d3:05:fc: ad:55:bf:68:c0:b9:8f:2c:18:3b:02:11:3d:61:18: 64:fc:d6:03:42:6e:e8:7a:f4:3f:03:20:e2:c9:34: a0:5d:0e:8b:e7:66:a6:99:77:8a:90:27:a5:21:33: 33:11:67:9e:f6:83:5f:8a:f6:fa:8e:14:fd:42:4a: 31:16:8e:86:7f:a8:c3:0d:4b:94:1f:c9:fb:eb:38: 41:17:a3:93:76:6c:a7:8a:60:3e:2a:78:ea:ef:37: 8a:14:70:de:78:9a:c8:16:95:3e:f9:c0:db:4b:ed: 8c:a0:ac:84:27:4d:d2:a1:39:79:27:58:e4:ce:03: 0b:46:9e:d2:e0:d2:25:cc:47:86:6f:20:5b:1e:e1: b2:ae:fb:1d:c5:81:40:e9:d4:50:45:41:0f:69:29: be:75:23:2a:ce:ce:91:13:f1:4f:a1:49:0b:2a:27: 13:36:52:85:0a:0c:6b:5f:63:20:8e:27:a7:cf:26: 6e:91:a5:8f:bc:f7:3a:4c:d6:4b:1e:45:11:1d:71: 23:fa:b9:31:aa:c5:82:78:76:42:14:32:2d:20:e3: 7a:24:76:5f:fa:94:83:6a:9d:49:c9:73:ca:7e:5e: 1b:7d:84:9f:65:09:a9:2b:73:df:b4:76:f3:68:5d: ee:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3B:DA:D1:A9:43:42:2F:79:FE:12:58:90:1C:18:02:0C:86:9D:30:AD X509v3 Authority Key Identifier: keyid:8A:4F:F8:36:58:8B:BD:C5:E5:CC:52:6B:BB:EB:66:D5:14:0D:1B:86 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/f9e7a28a-62f0-4d14-8702-403a5190eae1/0/8A4FF836588BBDC5E5CC526BBBEB66D5140D1B86.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8A4FF836588BBDC5E5CC526BBBEB66D5140D1B86.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f9e7a28a-62f0-4d14-8702-403a5190eae1/0/8A4FF836588BBDC5E5CC526BBBEB66D5140D1B86.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1e:2b:14:bb:0b:f6:8e:9c:48:ee:ec:50:37:75:c7:5f:08:01: 1d:f4:da:c4:9c:48:ca:8b:fd:35:ad:36:16:65:ee:b4:f2:d1: f6:f3:b0:a8:05:34:25:ac:c5:2d:99:30:3a:cd:91:26:f3:a2: c7:b6:44:c9:3c:0c:49:10:a2:3a:ad:a2:03:53:c6:4f:d1:04: c2:e3:33:3d:57:eb:45:a9:cd:57:64:09:60:33:eb:8b:b9:51: d1:9b:2f:49:d7:4c:f3:76:e8:57:72:56:fb:83:c9:c0:b1:cf: c9:3d:88:d4:77:96:c1:c2:83:e5:32:bd:d6:70:9e:2d:a6:66: dd:44:ca:ce:fa:d8:96:bc:b7:6a:93:19:b0:19:f2:48:d1:22: 4f:a6:c4:3b:c6:bf:12:d5:cc:2d:ae:fa:4d:d9:eb:64:c4:5e: 7b:77:6d:06:23:fd:66:3e:6b:22:4e:9b:9d:fa:cb:aa:74:59: 3a:f1:88:65:b9:57:5f:ee:60:1c:4a:70:67:cd:e9:07:35:37: 0c:b4:d6:43:a1:a1:47:31:34:87:cb:d0:54:30:f8:b7:b4:46: 94:b3:5d:55:44:56:cd:33:04:97:3c:fc:b8:55:44:2c:b4:3b: 57:9c:10:e0:46:b7:7e:0b:5d:b9:5f:97:52:79:6b:5c:0c:1c: ba:4b:cf:86 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUdav+xPdD9s8Itq13WiNQT0aRGAAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEE0RkY4MzY1ODhCQkRDNUU1Q0M1MjZCQkJFQjY2RDUx NDBEMUI4NjAeFw0yNTA2MjgyMDE2MjVaFw0yNTA3MDEyMjIyMjVaMDMxMTAvBgNV BAMTKDNCREFEMUE5NDM0MjJGNzlGRTEyNTg5MDFDMTgwMjBDODY5RDMwQUQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC4Mzklk2La8aB49NMF/K1Vv2jA uY8sGDsCET1hGGT81gNCbuh69D8DIOLJNKBdDovnZqaZd4qQJ6UhMzMRZ572g1+K 9vqOFP1CSjEWjoZ/qMMNS5QfyfvrOEEXo5N2bKeKYD4qeOrvN4oUcN54msgWlT75 wNtL7YygrIQnTdKhOXknWOTOAwtGntLg0iXMR4ZvIFse4bKu+x3FgUDp1FBFQQ9p Kb51IyrOzpET8U+hSQsqJxM2UoUKDGtfYyCOJ6fPJm6RpY+89zpM1kseRREdcSP6 uTGqxYJ4dkIUMi0g43okdl/6lINqnUnJc8p+Xht9hJ9lCakrc9+0dvNoXe7NAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUO9rRqUNCL3n+EliQHBgCDIadMK0wHwYDVR0j BBgwFoAUik/4NliLvcXlzFJru+tm1RQNG4YwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m OWU3YTI4YS02MmYwLTRkMTQtODcwMi00MDNhNTE5MGVhZTEvMC84QTRGRjgzNjU4 OEJCREM1RTVDQzUyNkJCQkVCNjZENTE0MEQxQjg2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOEE0RkY4MzY1ODhCQkRDNUU1Q0M1MjZCQkJFQjY2RDUxNDBE MUI4Ni5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZjllN2EyOGEtNjJmMC00ZDE0LTg3 MDItNDAzYTUxOTBlYWUxLzAvOEE0RkY4MzY1ODhCQkRDNUU1Q0M1MjZCQkJFQjY2 RDUxNDBEMUI4Ni5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAB4rFLsL9o6cSO7sUDd1x18IAR302sScSMqL /TWtNhZl7rTy0fbzsKgFNCWsxS2ZMDrNkSbzose2RMk8DEkQojqtogNTxk/RBMLj Mz1X60WpzVdkCWAz64u5UdGbL0nXTPN26FdyVvuDycCxz8k9iNR3lsHCg+UyvdZw ni2mZt1Eys762Ja8t2qTGbAZ8kjRIk+mxDvGvxLVzC2u+k3Z62TEXnt3bQYj/WY+ ayJOm536y6p0WTrxiGW5V1/uYBxKcGfN6Qc1Nwy01kOhoUcxNIfL0FQw+Le0RpSz XVVEVs0zBJc8/LhVRCy0O1ecEOBGt34LXblfl1J5a1wMHLpLz4Y= -----END CERTIFICATE-----Generated at Sun Jun 29 19:40:35 2025 by rpki-client