$ rpki-client -vvf repo-rpki.idnic.net/repo/927a6f34-1b6e-4e92-b2d2-0b9301a666a5/0/8DEDABAD21AD1A6BEF27E91FCEE30465563DFE72.mft File: 8DEDABAD21AD1A6BEF27E91FCEE30465563DFE72.mft (raw, json) Hash identifier: 2qN8Go/VnqRWsOVT1KKILanxWxcnsFC7KoPUvwXjSfY= Subject key identifier: 59:28:21:F5:01:71:9F:6A:DB:3B:85:00:4C:E5:9F:7B:40:6B:09:BB Authority key identifier: 8D:ED:AB:AD:21:AD:1A:6B:EF:27:E9:1F:CE:E3:04:65:56:3D:FE:72 Certificate issuer: /CN=8DEDABAD21AD1A6BEF27E91FCEE30465563DFE72 Certificate serial: 310C69A66F28B95404FB0A4308B169D5700243D2 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8DEDABAD21AD1A6BEF27E91FCEE30465563DFE72.cer Subject info access: rsync://repo-rpki.idnic.net/repo/927a6f34-1b6e-4e92-b2d2-0b9301a666a5/0/8DEDABAD21AD1A6BEF27E91FCEE30465563DFE72.mft Manifest number: 04EE Signing time: Sun 20 Jul 2025 19:12:16 +0000 Manifest this update: Sun 20 Jul 2025 19:07:16 +0000 Manifest next update: Thu 24 Jul 2025 01:56:16 +0000 Files and hashes: 1: 3130332e3234372e31322e302f32322d3234203d3e20313331373036.roa (hash: mWjb/DW+b3X3xyLO8KMUDwzQ73HydHkJibyBar99dKU=) 2: 8DEDABAD21AD1A6BEF27E91FCEE30465563DFE72.crl (hash: AS0D52xYoWETJewbLFkmtj0O/Wy/NgUPG28TWEtglY8=) 3: 323430323a653330303a3a2f33322d3438203d3e20313331373036.roa (hash: EV88jOIELhWBAVSmJqvptwA4m5UyL3dS/vav1cA94d8=) 4: 3132312e3130312e3132382e302f32312d3234203d3e20313331373036.roa (hash: LxNIC9GUMk4NDV//CAiwhidJ9aXKaAFBBW+ysgKoUy0=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/927a6f34-1b6e-4e92-b2d2-0b9301a666a5/0/8DEDABAD21AD1A6BEF27E91FCEE30465563DFE72.crl rsync://repo-rpki.idnic.net/repo/927a6f34-1b6e-4e92-b2d2-0b9301a666a5/0/8DEDABAD21AD1A6BEF27E91FCEE30465563DFE72.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8DEDABAD21AD1A6BEF27E91FCEE30465563DFE72.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 24 Jul 2025 00:11:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 31:0c:69:a6:6f:28:b9:54:04:fb:0a:43:08:b1:69:d5:70:02:43:d2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8DEDABAD21AD1A6BEF27E91FCEE30465563DFE72 Validity Not Before: Jul 20 19:07:16 2025 GMT Not After : Jul 24 01:56:16 2025 GMT Subject: CN=592821F501719F6ADB3B85004CE59F7B406B09BB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:74:21:48:ff:40:6f:4d:80:8a:f7:86:1e:0a: 41:fc:be:92:5f:8c:f1:5f:74:64:68:5f:6f:ea:0e: 4e:ae:4a:a1:82:64:5c:0f:05:a9:3e:a6:dd:a4:22: fa:e5:00:e3:71:76:33:17:67:90:f8:83:39:14:33: b0:ce:99:d2:fa:7a:15:bb:e5:92:a0:6b:4d:8d:bb: dc:24:2a:3c:87:39:d4:e5:66:e0:fc:88:4b:39:aa: 59:ab:13:ec:20:6b:c4:2b:7f:89:41:a4:b5:ab:91: bb:2a:2d:44:3a:c2:39:67:88:fa:3b:97:f9:b3:ca: cb:e2:85:11:c9:e3:f7:cb:eb:f4:fd:ef:ff:3b:51: 23:f0:a7:4b:31:c4:d2:97:11:a6:66:e1:39:af:28: 77:d5:4c:19:4f:41:3c:c7:47:eb:63:0c:10:b7:35: 64:9d:83:63:a7:37:ff:c7:95:d5:4d:2b:d2:94:4b: 43:74:f9:c5:4c:69:d7:23:7c:8a:ad:4d:60:ce:75: 57:d6:96:70:a7:f3:8f:e3:b0:29:56:c1:7c:ea:cc: 65:94:6e:4c:62:c1:fa:03:32:21:1f:34:ec:da:2b: 87:3f:c1:f6:22:ef:c3:61:3d:a3:44:21:32:28:04: 6d:35:04:e9:6f:19:0b:0b:dc:38:f1:cb:79:6c:48: 2c:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 59:28:21:F5:01:71:9F:6A:DB:3B:85:00:4C:E5:9F:7B:40:6B:09:BB X509v3 Authority Key Identifier: keyid:8D:ED:AB:AD:21:AD:1A:6B:EF:27:E9:1F:CE:E3:04:65:56:3D:FE:72 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/927a6f34-1b6e-4e92-b2d2-0b9301a666a5/0/8DEDABAD21AD1A6BEF27E91FCEE30465563DFE72.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8DEDABAD21AD1A6BEF27E91FCEE30465563DFE72.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/927a6f34-1b6e-4e92-b2d2-0b9301a666a5/0/8DEDABAD21AD1A6BEF27E91FCEE30465563DFE72.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 97:83:ac:d6:97:9b:a4:8b:e3:4d:13:d6:49:8d:7d:05:63:05: 8b:9d:09:24:42:2f:30:b1:9e:34:cf:61:52:80:30:df:39:c3: a7:1e:7c:a8:36:9b:1c:ea:15:06:a2:9e:05:01:73:35:73:3f: d1:48:22:d0:1e:12:07:9d:f9:3f:00:26:09:75:ea:47:45:35: 9a:2e:f5:0e:28:05:5c:73:47:b4:08:8c:0d:17:94:35:65:2c: 15:28:eb:68:04:bf:df:86:36:c8:96:34:4f:b1:b0:a8:48:5d: 01:d7:4c:47:67:6f:a4:a5:b8:6b:87:f9:f6:a8:ad:53:fb:18: c8:64:d8:62:7c:1b:53:70:9c:26:f8:79:0f:12:ba:7c:84:cd: 2e:7b:68:21:90:2c:6a:7d:c6:ae:fe:83:ec:d8:20:b5:7c:7b: bf:f6:f2:5a:e0:c6:94:3e:fb:3a:4b:6d:87:59:44:2a:ee:5b: 02:a9:c7:33:68:e2:b4:7f:ac:25:b6:a0:74:77:4a:b7:9d:3d: f9:bc:83:1d:82:aa:a0:23:20:9c:3b:17:7a:c0:7a:e2:d4:6b: 7a:56:58:ed:9f:cb:96:6c:40:f0:f2:83:d3:4f:7d:1d:88:37: 10:a1:57:5d:e2:e5:07:6c:c4:97:a3:81:2f:70:5f:ba:01:88: fd:07:2b:2d -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUMQxppm8ouVQE+wpDCLFp1XACQ9IwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOERFREFCQUQyMUFEMUE2QkVGMjdFOTFGQ0VFMzA0NjU1 NjNERkU3MjAeFw0yNTA3MjAxOTA3MTZaFw0yNTA3MjQwMTU2MTZaMDMxMTAvBgNV BAMTKDU5MjgyMUY1MDE3MTlGNkFEQjNCODUwMDRDRTU5RjdCNDA2QjA5QkIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDDdCFI/0BvTYCK94YeCkH8vpJf jPFfdGRoX2/qDk6uSqGCZFwPBak+pt2kIvrlAONxdjMXZ5D4gzkUM7DOmdL6ehW7 5ZKga02Nu9wkKjyHOdTlZuD8iEs5qlmrE+wga8Qrf4lBpLWrkbsqLUQ6wjlniPo7 l/mzysvihRHJ4/fL6/T97/87USPwp0sxxNKXEaZm4TmvKHfVTBlPQTzHR+tjDBC3 NWSdg2OnN//HldVNK9KUS0N0+cVMadcjfIqtTWDOdVfWlnCn84/jsClWwXzqzGWU bkxiwfoDMiEfNOzaK4c/wfYi78NhPaNEITIoBG01BOlvGQsL3Djxy3lsSCz/AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUWSgh9QFxn2rbO4UATOWfe0BrCbswHwYDVR0j BBgwFoAUje2rrSGtGmvvJ+kfzuMEZVY9/nIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 MjdhNmYzNC0xYjZlLTRlOTItYjJkMi0wYjkzMDFhNjY2YTUvMC84REVEQUJBRDIx QUQxQTZCRUYyN0U5MUZDRUUzMDQ2NTU2M0RGRTcyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOERFREFCQUQyMUFEMUE2QkVGMjdFOTFGQ0VFMzA0NjU1NjNE RkU3Mi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOTI3YTZmMzQtMWI2ZS00ZTkyLWIy ZDItMGI5MzAxYTY2NmE1LzAvOERFREFCQUQyMUFEMUE2QkVGMjdFOTFGQ0VFMzA0 NjU1NjNERkU3Mi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJeDrNaXm6SL400T1kmNfQVjBYudCSRCLzCx njTPYVKAMN85w6cefKg2mxzqFQaingUBczVzP9FIItAeEged+T8AJgl16kdFNZou 9Q4oBVxzR7QIjA0XlDVlLBUo62gEv9+GNsiWNE+xsKhIXQHXTEdnb6SluGuH+fao rVP7GMhk2GJ8G1NwnCb4eQ8SunyEzS57aCGQLGp9xq7+g+zYILV8e7/28lrgxpQ+ +zpLbYdZRCruWwKpxzNo4rR/rCW2oHR3SredPfm8gx2CqqAjIJw7F3rAeuLUa3pW WO2fy5ZsQPDyg9NPfR2INxChV13i5QdsxJejgS9wX7oBiP0HKy0= -----END CERTIFICATE-----Generated at Mon Jul 21 00:01:30 2025 by rpki-client