$ rpki-client -vvf repo-rpki.idnic.net/repo/fbb5fa4a-bea6-464f-b409-11d9a3761a6c/1/8D4158039A86C34D5D36A83DDC40C959EDA21342.mft File: 8D4158039A86C34D5D36A83DDC40C959EDA21342.mft (raw, json) Hash identifier: Lj+rDgZr9PZaPTI/4Vocs95m58GRxuwmPgm7ThJaCmU= Subject key identifier: 63:36:A3:12:72:7E:1B:CC:53:DB:1C:42:8C:07:73:3C:E9:03:58:41 Authority key identifier: 8D:41:58:03:9A:86:C3:4D:5D:36:A8:3D:DC:40:C9:59:ED:A2:13:42 Certificate issuer: /CN=8D4158039A86C34D5D36A83DDC40C959EDA21342 Certificate serial: 5AF840C275B56325AF0910211345768226F236A4 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8D4158039A86C34D5D36A83DDC40C959EDA21342.cer Subject info access: rsync://repo-rpki.idnic.net/repo/fbb5fa4a-bea6-464f-b409-11d9a3761a6c/1/8D4158039A86C34D5D36A83DDC40C959EDA21342.mft Manifest number: A1 Signing time: Sun 29 Jun 2025 00:31:04 +0000 Manifest this update: Sun 29 Jun 2025 00:26:04 +0000 Manifest next update: Wed 02 Jul 2025 02:59:04 +0000 Files and hashes: 1: 8D4158039A86C34D5D36A83DDC40C959EDA21342.crl (hash: xhEs88W2+bgLrInOLeEqZIpK0yKFBNo6F0dYQpZijOc=) 2: 323030313a6466333a643363303a3a2f34382d3438203d3e20313532373930.roa (hash: XrGI552jWV7sNKcYT4/cR05JGNQdxhyBqphUE36lIJ0=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/fbb5fa4a-bea6-464f-b409-11d9a3761a6c/1/8D4158039A86C34D5D36A83DDC40C959EDA21342.crl rsync://repo-rpki.idnic.net/repo/fbb5fa4a-bea6-464f-b409-11d9a3761a6c/1/8D4158039A86C34D5D36A83DDC40C959EDA21342.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8D4158039A86C34D5D36A83DDC40C959EDA21342.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 02 Jul 2025 02:59:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5a:f8:40:c2:75:b5:63:25:af:09:10:21:13:45:76:82:26:f2:36:a4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8D4158039A86C34D5D36A83DDC40C959EDA21342 Validity Not Before: Jun 29 00:26:04 2025 GMT Not After : Jul 2 02:59:04 2025 GMT Subject: CN=6336A312727E1BCC53DB1C428C07733CE9035841 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:31:ca:f0:ef:bb:b1:90:c2:57:cc:e6:27:36: 76:e2:43:71:06:56:7d:ad:fe:91:1f:9b:25:5f:4f: 89:48:ed:da:b8:46:29:49:aa:ff:bb:33:f1:39:8f: c2:18:73:d4:e0:91:fb:f9:60:9e:df:7a:46:f4:e1: 7a:87:96:3a:61:f1:ac:20:ec:c1:df:62:15:91:b4: e1:d5:9c:9a:b1:48:0a:e3:bb:f5:18:73:a2:0d:f4: b7:da:05:a7:fe:ad:82:f6:78:48:62:2f:b8:f7:2b: b7:48:69:58:43:48:42:4a:0b:92:fa:23:01:0c:9d: d0:23:40:ba:74:fa:ac:c1:3b:83:d4:09:c9:b0:6f: d1:6e:ff:08:25:3e:a5:c5:16:7b:98:48:8a:32:d5: 05:c7:12:9a:b5:26:d6:17:dc:3f:03:d8:67:f0:36: fd:5e:df:01:c6:c4:06:5f:8f:35:1b:a8:3f:0f:fb: f4:f0:ca:b4:48:79:a1:4d:3b:1c:8c:06:87:f4:6c: c6:b2:05:50:69:ee:4b:98:c6:67:c3:97:5d:c3:c6: 65:4e:35:d5:06:66:19:6d:e8:93:32:ba:4a:e4:c5: 43:3a:f0:95:f1:fd:69:13:50:a3:1e:5a:3f:6d:4b: 71:6a:c4:65:4b:d7:ca:10:70:d3:0d:89:55:ec:e4: 9c:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 63:36:A3:12:72:7E:1B:CC:53:DB:1C:42:8C:07:73:3C:E9:03:58:41 X509v3 Authority Key Identifier: keyid:8D:41:58:03:9A:86:C3:4D:5D:36:A8:3D:DC:40:C9:59:ED:A2:13:42 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/fbb5fa4a-bea6-464f-b409-11d9a3761a6c/1/8D4158039A86C34D5D36A83DDC40C959EDA21342.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8D4158039A86C34D5D36A83DDC40C959EDA21342.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/fbb5fa4a-bea6-464f-b409-11d9a3761a6c/1/8D4158039A86C34D5D36A83DDC40C959EDA21342.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ca:80:26:c0:0e:fb:36:4f:fe:ee:66:ab:88:c8:24:db:bd:28: 69:f4:12:47:9d:da:7a:49:59:31:03:30:af:01:9d:35:8a:fc: 2b:6c:6b:01:8a:d5:b9:66:4d:4e:49:21:34:4b:ca:9a:88:d8: 20:b5:6a:11:29:1b:cc:41:78:d3:2e:c1:fe:4a:fc:8f:ea:fe: 86:2f:54:d8:c1:fd:7a:cd:43:3f:e0:fb:91:4c:5e:2d:bf:f6: d3:0e:fe:84:e4:0c:39:2c:92:52:a0:7b:c3:df:3e:49:02:bc: a5:8e:56:57:ee:6b:c9:df:c1:5c:03:04:58:a4:ae:c1:67:0b: 98:c1:bb:9c:00:0f:15:02:3b:be:b3:5d:30:62:61:3e:8d:de: 50:db:a9:a1:6c:80:8f:ab:c1:10:c8:b8:ef:94:a9:bd:10:20: e1:a8:0c:79:3c:dd:cc:94:28:6d:2f:33:ba:ee:a7:d9:36:6f: b9:4b:20:35:d2:7b:5b:f0:eb:99:45:45:77:89:d4:f2:f2:f9: 8e:3b:42:44:1c:bf:f8:4d:77:fe:78:5c:f3:cb:c4:58:f3:3d: fd:45:2d:6c:9a:9c:6a:f9:79:58:36:a4:88:aa:be:5c:e8:ad: f7:42:03:13:96:37:73:bc:cc:9f:d3:b6:9c:db:cb:1a:03:d6: cf:26:ce:5a -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUWvhAwnW1YyWvCRAhE0V2gibyNqQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEQ0MTU4MDM5QTg2QzM0RDVEMzZBODNEREM0MEM5NTlF REEyMTM0MjAeFw0yNTA2MjkwMDI2MDRaFw0yNTA3MDIwMjU5MDRaMDMxMTAvBgNV BAMTKDYzMzZBMzEyNzI3RTFCQ0M1M0RCMUM0MjhDMDc3MzNDRTkwMzU4NDEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDFMcrw77uxkMJXzOYnNnbiQ3EG Vn2t/pEfmyVfT4lI7dq4RilJqv+7M/E5j8IYc9Tgkfv5YJ7fekb04XqHljph8awg 7MHfYhWRtOHVnJqxSArju/UYc6IN9LfaBaf+rYL2eEhiL7j3K7dIaVhDSEJKC5L6 IwEMndAjQLp0+qzBO4PUCcmwb9Fu/wglPqXFFnuYSIoy1QXHEpq1JtYX3D8D2Gfw Nv1e3wHGxAZfjzUbqD8P+/TwyrRIeaFNOxyMBof0bMayBVBp7kuYxmfDl13DxmVO NdUGZhlt6JMyukrkxUM68JXx/WkTUKMeWj9tS3FqxGVL18oQcNMNiVXs5JwNAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUYzajEnJ+G8xT2xxCjAdzPOkDWEEwHwYDVR0j BBgwFoAUjUFYA5qGw01dNqg93EDJWe2iE0IwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m YmI1ZmE0YS1iZWE2LTQ2NGYtYjQwOS0xMWQ5YTM3NjFhNmMvMS84RDQxNTgwMzlB ODZDMzRENUQzNkE4M0REQzQwQzk1OUVEQTIxMzQyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOEQ0MTU4MDM5QTg2QzM0RDVEMzZBODNEREM0MEM5NTlFREEy MTM0Mi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZmJiNWZhNGEtYmVhNi00NjRmLWI0 MDktMTFkOWEzNzYxYTZjLzEvOEQ0MTU4MDM5QTg2QzM0RDVEMzZBODNEREM0MEM5 NTlFREEyMTM0Mi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAMqAJsAO+zZP/u5mq4jIJNu9KGn0Eked2npJ WTEDMK8BnTWK/CtsawGK1blmTU5JITRLypqI2CC1ahEpG8xBeNMuwf5K/I/q/oYv VNjB/XrNQz/g+5FMXi2/9tMO/oTkDDksklKge8PfPkkCvKWOVlfua8nfwVwDBFik rsFnC5jBu5wADxUCO76zXTBiYT6N3lDbqaFsgI+rwRDIuO+Uqb0QIOGoDHk83cyU KG0vM7rup9k2b7lLIDXSe1vw65lFRXeJ1PLy+Y47QkQcv/hNd/54XPPLxFjzPf1F LWyanGr5eVg2pIiqvlzorfdCAxOWN3O8zJ/TtpzbyxoD1s8mzlo= -----END CERTIFICATE-----Generated at Sun Jun 29 21:48:41 2025 by rpki-client