$ rpki-client -vvf repo-rpki.idnic.net/repo/d44dfb5a-6e24-4a4d-8969-eb3cbe34e47e/0/8F52E72816B856335390C4F4AFBAF207C21522F6.mft File: 8F52E72816B856335390C4F4AFBAF207C21522F6.mft (raw, json) Hash identifier: cPcOM2hreM1H95QpI+P1BPERfScWY8ieXCg/SXW93ho= Subject key identifier: 67:46:A3:3F:36:F1:8E:3A:03:6B:DD:EE:69:C4:C4:3B:26:3D:E6:45 Authority key identifier: 8F:52:E7:28:16:B8:56:33:53:90:C4:F4:AF:BA:F2:07:C2:15:22:F6 Certificate issuer: /CN=8F52E72816B856335390C4F4AFBAF207C21522F6 Certificate serial: 58BC8D48CEAEE76AC0A3BFC911FC62C2F72B4F53 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8F52E72816B856335390C4F4AFBAF207C21522F6.cer Subject info access: rsync://repo-rpki.idnic.net/repo/d44dfb5a-6e24-4a4d-8969-eb3cbe34e47e/0/8F52E72816B856335390C4F4AFBAF207C21522F6.mft Manifest number: 01EF Signing time: Sun 20 Jul 2025 22:22:14 +0000 Manifest this update: Sun 20 Jul 2025 22:17:14 +0000 Manifest next update: Thu 24 Jul 2025 08:51:14 +0000 Files and hashes: 1: 8F52E72816B856335390C4F4AFBAF207C21522F6.crl (hash: eOZeZmOtWUoRprTg5QTRe+nmFFMIhmITI7eMT793vtQ=) 2: 3130332e3135382e3132362e302f32332d3234203d3e203338333230.roa (hash: sAEVe363BvIs2dOx1hxbCSZZoE73/9sHIDXoFlichKA=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/d44dfb5a-6e24-4a4d-8969-eb3cbe34e47e/0/8F52E72816B856335390C4F4AFBAF207C21522F6.crl rsync://repo-rpki.idnic.net/repo/d44dfb5a-6e24-4a4d-8969-eb3cbe34e47e/0/8F52E72816B856335390C4F4AFBAF207C21522F6.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8F52E72816B856335390C4F4AFBAF207C21522F6.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 24 Jul 2025 08:51:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 58:bc:8d:48:ce:ae:e7:6a:c0:a3:bf:c9:11:fc:62:c2:f7:2b:4f:53 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8F52E72816B856335390C4F4AFBAF207C21522F6 Validity Not Before: Jul 20 22:17:14 2025 GMT Not After : Jul 24 08:51:14 2025 GMT Subject: CN=6746A33F36F18E3A036BDDEE69C4C43B263DE645 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:e4:19:54:a4:9b:77:53:f3:21:4e:9e:f6:f6: 35:20:ae:5d:29:39:70:88:3d:69:4a:7d:4d:9c:86: 41:a8:96:9e:c9:9f:76:1b:c2:b7:1c:17:fd:da:ea: d8:7f:9d:77:53:b5:ce:79:42:97:d0:92:3a:d7:1d: 25:aa:40:22:93:4d:30:b0:9b:6f:ef:84:9c:da:7b: 1c:85:ae:f4:24:69:08:18:c1:99:7b:81:aa:d7:aa: e3:2d:2c:96:5d:c0:ea:49:e8:18:1d:84:22:e7:82: 1a:91:04:05:84:e2:23:0a:51:bc:05:61:06:0d:a9: 1c:5c:f1:ba:97:4c:d2:3c:ca:19:1b:47:80:23:c7: 74:c7:82:f6:2c:c7:1d:93:91:4b:18:3b:47:6c:0d: 31:03:15:16:34:6c:e7:8c:74:f4:62:ac:a0:ca:b4: 4b:28:73:1d:de:8c:68:4e:dd:16:a6:14:b0:a4:7a: a8:e9:b5:6a:ec:8d:84:c8:c1:48:f4:f3:73:91:cc: 71:18:ea:fe:0e:a4:03:6c:b8:55:7d:df:d8:36:77: ad:5d:97:4c:2d:f6:79:83:1c:05:6c:a0:bf:64:6d: 63:e7:25:cc:36:94:57:39:b1:d9:ef:7b:3b:78:4e: 14:0a:73:2a:e1:bc:3a:d2:e0:d7:53:1c:2f:87:70: 1e:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:46:A3:3F:36:F1:8E:3A:03:6B:DD:EE:69:C4:C4:3B:26:3D:E6:45 X509v3 Authority Key Identifier: keyid:8F:52:E7:28:16:B8:56:33:53:90:C4:F4:AF:BA:F2:07:C2:15:22:F6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/d44dfb5a-6e24-4a4d-8969-eb3cbe34e47e/0/8F52E72816B856335390C4F4AFBAF207C21522F6.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8F52E72816B856335390C4F4AFBAF207C21522F6.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d44dfb5a-6e24-4a4d-8969-eb3cbe34e47e/0/8F52E72816B856335390C4F4AFBAF207C21522F6.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 11:29:48:9e:c1:fc:b8:ff:01:64:38:29:68:a6:0e:7a:e3:f7: a6:08:79:bc:8f:16:3f:af:b2:51:63:e4:a7:4a:90:79:a9:66: b2:52:c2:15:cf:13:0e:c7:1d:c5:4d:d0:c1:24:3b:cd:74:74: c9:61:6a:84:53:ba:f7:87:76:5f:d4:91:ec:05:ea:7c:9b:1c: a0:13:93:88:78:06:c3:3d:16:6a:de:5d:ff:3e:1c:8f:4f:2b: b9:73:9b:ad:5a:2f:d9:1c:21:33:4c:63:c4:7a:64:0e:8a:5a: fe:f7:f1:ea:67:75:36:3a:18:93:33:b8:f7:42:36:fa:a0:40: 24:ac:f1:3a:cd:c8:49:09:50:24:18:6c:23:2f:3c:e9:18:97: db:cb:66:d9:6a:98:4f:6f:f0:c1:e5:1e:bb:d8:3a:a2:54:08: 02:26:ef:bb:9c:6b:f7:4a:2e:2f:5e:23:7b:eb:f5:76:2a:9f: d2:14:1b:ee:7e:88:20:a1:bc:49:68:f7:35:cf:e9:dd:ba:5a: 08:4e:8e:e2:57:d2:f4:eb:b7:79:c0:b9:db:74:8c:4b:76:13: 76:7c:bd:df:66:5e:14:e6:1a:4d:c5:f0:fa:bc:e1:bc:92:eb: fe:65:2d:7c:38:4a:c7:da:b4:94:a0:84:37:43:df:7b:d4:86: f0:84:8c:02 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUWLyNSM6u52rAo7/JEfxiwvcrT1MwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEY1MkU3MjgxNkI4NTYzMzUzOTBDNEY0QUZCQUYyMDdD MjE1MjJGNjAeFw0yNTA3MjAyMjE3MTRaFw0yNTA3MjQwODUxMTRaMDMxMTAvBgNV BAMTKDY3NDZBMzNGMzZGMThFM0EwMzZCRERFRTY5QzRDNDNCMjYzREU2NDUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDT5BlUpJt3U/MhTp729jUgrl0p OXCIPWlKfU2chkGolp7Jn3YbwrccF/3a6th/nXdTtc55QpfQkjrXHSWqQCKTTTCw m2/vhJzaexyFrvQkaQgYwZl7garXquMtLJZdwOpJ6BgdhCLnghqRBAWE4iMKUbwF YQYNqRxc8bqXTNI8yhkbR4Ajx3THgvYsxx2TkUsYO0dsDTEDFRY0bOeMdPRirKDK tEsocx3ejGhO3RamFLCkeqjptWrsjYTIwUj083ORzHEY6v4OpANsuFV939g2d61d l0wt9nmDHAVsoL9kbWPnJcw2lFc5sdnvezt4ThQKcyrhvDrS4NdTHC+HcB63AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUZ0ajPzbxjjoDa93uacTEOyY95kUwHwYDVR0j BBgwFoAUj1LnKBa4VjNTkMT0r7ryB8IVIvYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k NDRkZmI1YS02ZTI0LTRhNGQtODk2OS1lYjNjYmUzNGU0N2UvMC84RjUyRTcyODE2 Qjg1NjMzNTM5MEM0RjRBRkJBRjIwN0MyMTUyMkY2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOEY1MkU3MjgxNkI4NTYzMzUzOTBDNEY0QUZCQUYyMDdDMjE1 MjJGNi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZDQ0ZGZiNWEtNmUyNC00YTRkLTg5 NjktZWIzY2JlMzRlNDdlLzAvOEY1MkU3MjgxNkI4NTYzMzUzOTBDNEY0QUZCQUYy MDdDMjE1MjJGNi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABEpSJ7B/Lj/AWQ4KWimDnrj96YIebyPFj+v slFj5KdKkHmpZrJSwhXPEw7HHcVN0MEkO810dMlhaoRTuveHdl/UkewF6nybHKAT k4h4BsM9FmreXf8+HI9PK7lzm61aL9kcITNMY8R6ZA6KWv738epndTY6GJMzuPdC NvqgQCSs8TrNyEkJUCQYbCMvPOkYl9vLZtlqmE9v8MHlHrvYOqJUCAIm77uca/dK Li9eI3vr9XYqn9IUG+5+iCChvElo9zXP6d26WghOjuJX0vTrt3nAudt0jEt2E3Z8 vd9mXhTmGk3F8Pq84byS6/5lLXw4SsfatJSghDdD33vUhvCEjAI= -----END CERTIFICATE-----Generated at Mon Jul 21 23:23:22 2025 by rpki-client