$ rpki-client -vvf repo-rpki.idnic.net/repo/59cc2e5b-3b91-42af-8203-5e3b91704843/0/8E5335B45EE371DC463E5C65783A244FD1846656.mft File: 8E5335B45EE371DC463E5C65783A244FD1846656.mft (raw, json) Hash identifier: sspgKCmJQO9esnJiU3T3S09BKOsljIgeRuA/6799sEM= Subject key identifier: F8:BC:F9:37:3E:41:3A:7F:E6:AE:7E:D8:2F:6C:F3:23:ED:11:60:DD Authority key identifier: 8E:53:35:B4:5E:E3:71:DC:46:3E:5C:65:78:3A:24:4F:D1:84:66:56 Certificate issuer: /CN=8E5335B45EE371DC463E5C65783A244FD1846656 Certificate serial: 259ADA45A0E482AA14A0BE45D2CB9671A4FEE3DB Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8E5335B45EE371DC463E5C65783A244FD1846656.cer Subject info access: rsync://repo-rpki.idnic.net/repo/59cc2e5b-3b91-42af-8203-5e3b91704843/0/8E5335B45EE371DC463E5C65783A244FD1846656.mft Manifest number: D5 Signing time: Thu 24 Jul 2025 02:31:28 +0000 Manifest this update: Thu 24 Jul 2025 02:26:28 +0000 Manifest next update: Sun 27 Jul 2025 12:00:28 +0000 Files and hashes: 1: 3130332e3138302e39352e302f32342d3234203d3e20313439333538.roa (hash: gZ7MIdwunPoLq27viYGE8zwAvrRl3NrvQYfYS07O7wA=) 2: 8E5335B45EE371DC463E5C65783A244FD1846656.crl (hash: pmtx9nivbUK2Elyey59QgY9CwMbxynmlqsba1Y2Rp0Y=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/59cc2e5b-3b91-42af-8203-5e3b91704843/0/8E5335B45EE371DC463E5C65783A244FD1846656.crl rsync://repo-rpki.idnic.net/repo/59cc2e5b-3b91-42af-8203-5e3b91704843/0/8E5335B45EE371DC463E5C65783A244FD1846656.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8E5335B45EE371DC463E5C65783A244FD1846656.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Jul 2025 12:00:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 25:9a:da:45:a0:e4:82:aa:14:a0:be:45:d2:cb:96:71:a4:fe:e3:db Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8E5335B45EE371DC463E5C65783A244FD1846656 Validity Not Before: Jul 24 02:26:28 2025 GMT Not After : Jul 27 12:00:28 2025 GMT Subject: CN=F8BCF9373E413A7FE6AE7ED82F6CF323ED1160DD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:27:42:78:d6:36:eb:3e:6a:56:2a:3b:fb:23: d5:a0:71:f6:6d:a8:d5:e4:30:64:da:66:27:1d:ad: b1:16:ae:5f:0c:0c:7e:33:01:64:d9:2a:91:66:89: 44:96:88:1c:ae:a1:21:4a:aa:5c:6d:46:a9:8a:4a: 2b:85:56:96:e4:f8:17:4e:3e:45:0c:ad:b9:44:bd: 9e:dc:88:1a:6a:56:f1:5e:64:46:57:87:b0:b5:67: 6f:76:1a:23:ad:5a:0e:21:e6:67:09:95:6d:ea:fb: a3:62:8c:8d:3d:16:9a:28:10:47:58:27:64:df:20: ba:f0:f5:be:5f:f7:8e:26:65:6d:dd:b5:d2:6c:50: 32:4f:63:46:4a:f5:ce:2a:fa:c3:8f:2c:97:30:ec: 6c:a6:88:70:d9:da:97:4d:ef:56:9d:db:3d:34:25: 89:ff:c3:0c:38:b8:87:a3:3c:1b:30:ff:c2:97:26: cc:aa:8f:a3:94:dd:54:b0:f2:51:fd:1c:dc:39:e4: 85:83:42:8e:48:58:51:54:e0:b0:a1:ce:40:84:76: 62:43:88:60:9a:5d:04:ba:ac:5e:c6:2b:b6:c7:b6: 0a:3b:13:27:20:34:16:be:23:1d:34:f6:8c:1b:bb: fa:05:20:4f:68:48:dc:59:2a:f5:3c:a6:f3:e0:a0: d3:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F8:BC:F9:37:3E:41:3A:7F:E6:AE:7E:D8:2F:6C:F3:23:ED:11:60:DD X509v3 Authority Key Identifier: keyid:8E:53:35:B4:5E:E3:71:DC:46:3E:5C:65:78:3A:24:4F:D1:84:66:56 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/59cc2e5b-3b91-42af-8203-5e3b91704843/0/8E5335B45EE371DC463E5C65783A244FD1846656.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8E5335B45EE371DC463E5C65783A244FD1846656.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/59cc2e5b-3b91-42af-8203-5e3b91704843/0/8E5335B45EE371DC463E5C65783A244FD1846656.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c7:4c:50:03:27:f8:8a:12:0d:00:51:0d:4b:30:31:7e:4e:ed: 4f:c1:f7:59:64:e2:8b:a2:f8:4e:12:ea:78:4f:36:73:fc:79: 85:d2:fc:db:56:61:4f:46:65:2a:8b:a1:93:39:bd:61:d1:2b: f7:1a:99:9a:56:d0:d6:7a:b0:18:a4:0d:81:3e:78:31:57:2a: e8:9a:76:01:41:69:02:ac:8d:d6:ad:6e:d8:f4:6b:9f:aa:f6: 14:02:43:28:29:5f:d1:fd:93:71:85:29:78:56:b8:fd:3e:11: 6e:98:5f:f5:fc:1d:a6:3a:bf:d7:32:55:b0:3e:91:b5:41:cd: 56:e8:67:26:ae:80:82:89:b6:1f:01:fe:9c:d3:77:67:a6:a5: bd:70:cb:17:a8:53:ad:79:1c:4a:da:fa:e5:71:d6:d9:f4:49: f4:76:5f:32:3c:06:30:9e:64:c4:61:57:4f:08:27:68:53:4c: 01:67:d2:a2:d1:44:17:b4:15:46:5d:ee:fc:b8:7b:57:0d:e5: 7e:76:02:79:c7:fc:3f:76:7b:95:1f:15:0f:fb:57:ab:86:36: 14:bb:42:13:87:5f:c8:0e:c9:d3:86:49:a1:4a:95:4b:02:8d: 36:c0:03:4c:23:93:80:12:b1:fc:8b:4b:27:5a:92:f1:9b:bc: 22:df:e6:72 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUJZraRaDkgqoUoL5F0suWcaT+49swDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEU1MzM1QjQ1RUUzNzFEQzQ2M0U1QzY1NzgzQTI0NEZE MTg0NjY1NjAeFw0yNTA3MjQwMjI2MjhaFw0yNTA3MjcxMjAwMjhaMDMxMTAvBgNV BAMTKEY4QkNGOTM3M0U0MTNBN0ZFNkFFN0VEODJGNkNGMzIzRUQxMTYwREQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDlJ0J41jbrPmpWKjv7I9WgcfZt qNXkMGTaZicdrbEWrl8MDH4zAWTZKpFmiUSWiByuoSFKqlxtRqmKSiuFVpbk+BdO PkUMrblEvZ7ciBpqVvFeZEZXh7C1Z292GiOtWg4h5mcJlW3q+6NijI09FpooEEdY J2TfILrw9b5f944mZW3dtdJsUDJPY0ZK9c4q+sOPLJcw7GymiHDZ2pdN71ad2z00 JYn/www4uIejPBsw/8KXJsyqj6OU3VSw8lH9HNw55IWDQo5IWFFU4LChzkCEdmJD iGCaXQS6rF7GK7bHtgo7EycgNBa+Ix009owbu/oFIE9oSNxZKvU8pvPgoNM7AgMB AAGjggI8MIICODAdBgNVHQ4EFgQU+Lz5Nz5BOn/mrn7YL2zzI+0RYN0wHwYDVR0j BBgwFoAUjlM1tF7jcdxGPlxleDokT9GEZlYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 OWNjMmU1Yi0zYjkxLTQyYWYtODIwMy01ZTNiOTE3MDQ4NDMvMC84RTUzMzVCNDVF RTM3MURDNDYzRTVDNjU3ODNBMjQ0RkQxODQ2NjU2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOEU1MzM1QjQ1RUUzNzFEQzQ2M0U1QzY1NzgzQTI0NEZEMTg0 NjY1Ni5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNTljYzJlNWItM2I5MS00MmFmLTgy MDMtNWUzYjkxNzA0ODQzLzAvOEU1MzM1QjQ1RUUzNzFEQzQ2M0U1QzY1NzgzQTI0 NEZEMTg0NjY1Ni5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAMdMUAMn+IoSDQBRDUswMX5O7U/B91lk4oui +E4S6nhPNnP8eYXS/NtWYU9GZSqLoZM5vWHRK/camZpW0NZ6sBikDYE+eDFXKuia dgFBaQKsjdatbtj0a5+q9hQCQygpX9H9k3GFKXhWuP0+EW6YX/X8HaY6v9cyVbA+ kbVBzVboZyaugIKJth8B/pzTd2empb1wyxeoU615HEra+uVx1tn0SfR2XzI8BjCe ZMRhV08IJ2hTTAFn0qLRRBe0FUZd7vy4e1cN5X52AnnH/D92e5UfFQ/7V6uGNhS7 QhOHX8gOydOGSaFKlUsCjTbAA0wjk4ASsfyLSydakvGbvCLf5nI= -----END CERTIFICATE-----Generated at Fri Jul 25 06:52:14 2025 by rpki-client