$ rpki-client -vvf repo-rpki.idnic.net/repo/02913fa1-33ae-4e33-bbe2-81bd9f03c84b/0/8C57C5860BF938BB57E0B7ED0F890D70BFEE55A0.mft File: 8C57C5860BF938BB57E0B7ED0F890D70BFEE55A0.mft (raw, json) Hash identifier: bvfPc5G/LoPoFg4PZZTAU6Vpr2+HpDbV0bRo3D8l6lI= Subject key identifier: 2C:9A:B3:A4:75:79:98:59:EF:39:FD:0B:7E:97:C0:17:72:97:13:5A Authority key identifier: 8C:57:C5:86:0B:F9:38:BB:57:E0:B7:ED:0F:89:0D:70:BF:EE:55:A0 Certificate issuer: /CN=8C57C5860BF938BB57E0B7ED0F890D70BFEE55A0 Certificate serial: 705A32EA1C35D8059B3AAC082197F02B11E081F1 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8C57C5860BF938BB57E0B7ED0F890D70BFEE55A0.cer Subject info access: rsync://repo-rpki.idnic.net/repo/02913fa1-33ae-4e33-bbe2-81bd9f03c84b/0/8C57C5860BF938BB57E0B7ED0F890D70BFEE55A0.mft Manifest number: 0309 Signing time: Fri 06 Jun 2025 01:30:03 +0000 Manifest this update: Fri 06 Jun 2025 01:25:03 +0000 Manifest next update: Mon 09 Jun 2025 02:07:03 +0000 Files and hashes: 1: 3130332e3135392e3230322e302f32332d3234203d3e20313331313131.roa (hash: Ho5Y5TOHX49gl1fZYVO+j2M3OjYa1AKAk+KnhAmd/6M=) 2: 8C57C5860BF938BB57E0B7ED0F890D70BFEE55A0.crl (hash: WC/ik9p2uh3+feoULpKAXmmYPky4zZr7r/ykXX2Fxjk=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/02913fa1-33ae-4e33-bbe2-81bd9f03c84b/0/8C57C5860BF938BB57E0B7ED0F890D70BFEE55A0.crl rsync://repo-rpki.idnic.net/repo/02913fa1-33ae-4e33-bbe2-81bd9f03c84b/0/8C57C5860BF938BB57E0B7ED0F890D70BFEE55A0.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8C57C5860BF938BB57E0B7ED0F890D70BFEE55A0.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Jun 2025 02:07:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 70:5a:32:ea:1c:35:d8:05:9b:3a:ac:08:21:97:f0:2b:11:e0:81:f1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8C57C5860BF938BB57E0B7ED0F890D70BFEE55A0 Validity Not Before: Jun 6 01:25:03 2025 GMT Not After : Jun 9 02:07:03 2025 GMT Subject: CN=2C9AB3A475799859EF39FD0B7E97C0177297135A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:77:1b:40:b8:89:e2:2b:4a:e4:fe:04:4e:3a: de:f3:77:ab:c3:cc:88:29:db:56:22:ab:01:d4:94: cf:6f:27:63:16:39:37:c1:8d:eb:3b:0d:85:0b:e2: 25:41:e1:26:e0:0d:26:36:c4:23:18:b0:9d:bd:db: 64:f1:b5:ce:1a:05:5e:7d:de:a0:d3:20:1e:9a:20: 50:be:d9:69:b5:76:b6:b0:e1:e5:35:8c:65:28:98: c5:05:a2:5b:f8:79:63:6d:99:76:bb:98:8b:57:b4: dd:55:88:23:3f:9b:37:d8:4a:4b:60:dd:03:7d:da: e6:dd:b7:63:37:d3:2a:2b:15:2a:07:50:79:46:4d: fb:ba:c1:5a:50:f4:3e:f1:6e:cc:3f:f6:d2:1b:d3: 80:f4:1c:23:fb:d3:10:fc:b2:bd:e4:8c:46:81:25: 6b:a0:2c:eb:cd:70:0c:62:2c:e1:dc:66:cc:5f:2d: 0e:26:7e:a5:26:5a:bc:24:79:2e:23:ea:7e:43:c9: b0:05:34:24:a8:e1:f3:dd:2a:5d:9e:a4:14:93:18: 56:46:49:a1:6f:e1:d0:9f:82:e2:35:cd:00:96:3e: 5d:3a:52:55:73:81:bd:72:92:4b:27:53:db:07:6d: 08:9f:e6:ef:16:da:af:d1:a9:a2:51:2f:11:57:26: 06:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2C:9A:B3:A4:75:79:98:59:EF:39:FD:0B:7E:97:C0:17:72:97:13:5A X509v3 Authority Key Identifier: keyid:8C:57:C5:86:0B:F9:38:BB:57:E0:B7:ED:0F:89:0D:70:BF:EE:55:A0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/02913fa1-33ae-4e33-bbe2-81bd9f03c84b/0/8C57C5860BF938BB57E0B7ED0F890D70BFEE55A0.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8C57C5860BF938BB57E0B7ED0F890D70BFEE55A0.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/02913fa1-33ae-4e33-bbe2-81bd9f03c84b/0/8C57C5860BF938BB57E0B7ED0F890D70BFEE55A0.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ad:90:b6:e0:d7:cb:a3:8e:f4:db:66:17:85:34:25:2f:56:ee: 16:3a:45:df:ba:3c:21:e1:e2:df:f6:ca:ec:98:45:bb:ee:57: ba:b7:52:48:45:97:10:56:e3:5a:8c:06:20:69:74:52:79:a1: 8b:e4:0e:ac:20:96:45:48:88:45:27:32:dd:23:c8:4b:8a:55: e8:79:63:82:4e:05:af:1e:f3:2f:e8:41:be:9b:90:bc:40:d3: e9:a9:01:d0:5d:6d:99:3b:12:6c:6b:5b:91:32:26:e2:be:61: 88:b9:16:74:af:d5:26:b8:3f:79:bf:07:a1:3a:7f:63:17:db: fe:57:13:b2:a7:95:2d:3d:c8:da:c0:db:d7:5d:13:c1:de:9a: 2e:60:0a:de:43:8a:13:c3:99:db:8b:f7:28:e3:c1:4b:eb:8c: 8a:5c:38:4a:1a:c4:3b:ed:8e:df:d2:4b:c5:55:5f:cb:13:bb: f9:73:fc:67:70:c3:e3:4f:8b:c5:8b:40:d7:d2:72:e5:12:bc: 0c:24:55:0d:cf:e0:cc:9d:b1:be:7c:4c:33:d2:e8:87:2f:e9: e6:16:6b:1d:a1:6a:45:8a:fa:6f:3e:18:01:96:12:79:6c:69: dc:12:af:bd:c7:9b:b2:01:0a:8f:2b:34:1a:2f:34:5b:15:ab: fa:b2:05:89 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUcFoy6hw12AWbOqwIIZfwKxHggfEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEM1N0M1ODYwQkY5MzhCQjU3RTBCN0VEMEY4OTBENzBC RkVFNTVBMDAeFw0yNTA2MDYwMTI1MDNaFw0yNTA2MDkwMjA3MDNaMDMxMTAvBgNV BAMTKDJDOUFCM0E0NzU3OTk4NTlFRjM5RkQwQjdFOTdDMDE3NzI5NzEzNUEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCedxtAuIniK0rk/gROOt7zd6vD zIgp21YiqwHUlM9vJ2MWOTfBjes7DYUL4iVB4SbgDSY2xCMYsJ2922Txtc4aBV59 3qDTIB6aIFC+2Wm1draw4eU1jGUomMUFolv4eWNtmXa7mItXtN1ViCM/mzfYSktg 3QN92ubdt2M30yorFSoHUHlGTfu6wVpQ9D7xbsw/9tIb04D0HCP70xD8sr3kjEaB JWugLOvNcAxiLOHcZsxfLQ4mfqUmWrwkeS4j6n5DybAFNCSo4fPdKl2epBSTGFZG SaFv4dCfguI1zQCWPl06UlVzgb1ykksnU9sHbQif5u8W2q/RqaJRLxFXJgbVAgMB AAGjggI8MIICODAdBgNVHQ4EFgQULJqzpHV5mFnvOf0LfpfAF3KXE1owHwYDVR0j BBgwFoAUjFfFhgv5OLtX4LftD4kNcL/uVaAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w MjkxM2ZhMS0zM2FlLTRlMzMtYmJlMi04MWJkOWYwM2M4NGIvMC84QzU3QzU4NjBC RjkzOEJCNTdFMEI3RUQwRjg5MEQ3MEJGRUU1NUEwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOEM1N0M1ODYwQkY5MzhCQjU3RTBCN0VEMEY4OTBENzBCRkVF NTVBMC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMDI5MTNmYTEtMzNhZS00ZTMzLWJi ZTItODFiZDlmMDNjODRiLzAvOEM1N0M1ODYwQkY5MzhCQjU3RTBCN0VEMEY4OTBE NzBCRkVFNTVBMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAK2QtuDXy6OO9NtmF4U0JS9W7hY6Rd+6PCHh 4t/2yuyYRbvuV7q3UkhFlxBW41qMBiBpdFJ5oYvkDqwglkVIiEUnMt0jyEuKVeh5 Y4JOBa8e8y/oQb6bkLxA0+mpAdBdbZk7EmxrW5EyJuK+YYi5FnSv1Sa4P3m/B6E6 f2MX2/5XE7KnlS09yNrA29ddE8Hemi5gCt5DihPDmduL9yjjwUvrjIpcOEoaxDvt jt/SS8VVX8sTu/lz/Gdww+NPi8WLQNfScuUSvAwkVQ3P4Mydsb58TDPS6Icv6eYW ax2hakWK+m8+GAGWEnlsadwSr73Hm7IBCo8rNBovNFsVq/qyBYk= -----END CERTIFICATE-----Generated at Fri Jun 6 16:53:50 2025 by rpki-client