$ rpki-client -vvf repo-rpki.idnic.net/repo/0a75d371-18c7-48df-8f61-1d404b646413/0/8EEE0584B224A95915512EA70FE012A4AF134C7A.mft File: 8EEE0584B224A95915512EA70FE012A4AF134C7A.mft (raw, json) Hash identifier: C/I1cfS2rU0kaM7hR09uv5UyEauyp/Xihf0iWjSjZx4= Subject key identifier: 04:CE:52:EF:84:F3:81:72:31:74:D0:29:DB:C7:BA:D5:62:FC:8B:71 Authority key identifier: 8E:EE:05:84:B2:24:A9:59:15:51:2E:A7:0F:E0:12:A4:AF:13:4C:7A Certificate issuer: /CN=8EEE0584B224A95915512EA70FE012A4AF134C7A Certificate serial: 61299718F5BDE8F11BB4DD3D9E6E0544C128E045 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8EEE0584B224A95915512EA70FE012A4AF134C7A.cer Subject info access: rsync://repo-rpki.idnic.net/repo/0a75d371-18c7-48df-8f61-1d404b646413/0/8EEE0584B224A95915512EA70FE012A4AF134C7A.mft Manifest number: 04DA Signing time: Mon 02 Jun 2025 01:02:58 +0000 Manifest this update: Mon 02 Jun 2025 00:57:58 +0000 Manifest next update: Thu 05 Jun 2025 06:17:58 +0000 Files and hashes: 1: 3130332e39352e3136302e302f32332d3234203d3e20313336313236.roa (hash: KD7T4Ue/VEXioee+nFto/OfNIEmRxJwHxyIAd7JKH2Q=) 2: 8EEE0584B224A95915512EA70FE012A4AF134C7A.crl (hash: v8QBT2ShE6WpSL8KUcWfJgJecYK2q6yqVUI1jHvRAUo=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/0a75d371-18c7-48df-8f61-1d404b646413/0/8EEE0584B224A95915512EA70FE012A4AF134C7A.crl rsync://repo-rpki.idnic.net/repo/0a75d371-18c7-48df-8f61-1d404b646413/0/8EEE0584B224A95915512EA70FE012A4AF134C7A.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8EEE0584B224A95915512EA70FE012A4AF134C7A.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 05 Jun 2025 06:17:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 61:29:97:18:f5:bd:e8:f1:1b:b4:dd:3d:9e:6e:05:44:c1:28:e0:45 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8EEE0584B224A95915512EA70FE012A4AF134C7A Validity Not Before: Jun 2 00:57:58 2025 GMT Not After : Jun 5 06:17:58 2025 GMT Subject: CN=04CE52EF84F381723174D029DBC7BAD562FC8B71 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:9c:72:72:31:b7:0c:bc:c6:4b:d9:f8:bb:35: 2b:0e:40:81:e9:ab:92:a0:4e:53:15:7c:37:4c:5a: c1:4d:67:43:04:72:f0:28:c0:5a:9f:2a:3d:1b:06: a9:8a:5a:87:1f:87:16:91:f6:29:dc:4b:f4:c0:e9: a1:e4:ca:fc:98:8a:3c:45:a4:78:f1:ae:c6:64:5f: 5d:02:b1:5b:09:98:13:a0:68:a1:72:fa:ed:3e:11: 7f:94:4e:5c:b2:ac:49:0f:b3:a3:cb:df:e6:de:d2: 20:a6:8b:0d:44:f0:75:98:70:06:99:58:5d:50:ce: 77:14:b0:e8:52:c1:5f:02:60:c0:9d:ba:12:bc:75: 87:d1:02:ce:d5:ac:dc:dc:b5:a7:10:72:a7:a7:e0: a0:18:b9:03:51:02:bf:7b:e8:7f:5c:a8:6d:8d:cf: 8a:4f:9d:99:cc:fd:8e:fd:b1:bb:c4:89:ba:98:dc: b5:bc:de:13:d2:01:d5:e4:28:da:55:0d:07:70:94: e1:fa:fe:c0:f0:24:84:e7:d7:f5:e5:c5:69:3c:45: e8:b6:6a:2b:9c:4e:f4:d9:e3:d4:94:95:dc:44:cd: ab:6b:e4:f2:e1:e0:72:f9:1e:b6:e3:63:01:12:80: a8:7c:17:4c:4f:57:ce:46:9b:ca:40:bf:c3:c5:be: e1:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 04:CE:52:EF:84:F3:81:72:31:74:D0:29:DB:C7:BA:D5:62:FC:8B:71 X509v3 Authority Key Identifier: keyid:8E:EE:05:84:B2:24:A9:59:15:51:2E:A7:0F:E0:12:A4:AF:13:4C:7A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/0a75d371-18c7-48df-8f61-1d404b646413/0/8EEE0584B224A95915512EA70FE012A4AF134C7A.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8EEE0584B224A95915512EA70FE012A4AF134C7A.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/0a75d371-18c7-48df-8f61-1d404b646413/0/8EEE0584B224A95915512EA70FE012A4AF134C7A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 25:31:5e:78:67:35:46:e9:2b:b1:42:ff:ff:c6:84:bf:50:8c: 7f:d3:6d:c6:ad:26:6a:a6:1d:21:f1:78:1e:fc:32:a2:a0:b5: 2b:f2:27:88:2a:4e:c2:98:1a:b7:b4:5b:cf:d3:a3:48:f8:05: 3d:5c:a5:95:65:65:73:fb:70:e2:d4:51:b0:49:53:c1:2a:aa: e8:1a:02:67:16:52:3e:c5:eb:74:ee:cc:d9:0a:5e:65:70:9a: c6:0b:9d:fd:a0:a2:5a:62:1a:18:8a:0b:2e:b0:32:22:b5:cd: 95:15:6d:5e:f1:49:be:64:8b:32:19:92:5d:36:08:78:1d:3e: af:31:09:17:c2:7d:e3:ab:53:9e:cc:f3:92:d3:ca:4a:27:a9: 6e:ca:6a:66:6b:4c:c8:52:fc:85:7f:56:49:16:1a:be:47:dd: 4d:da:93:7e:9b:17:f2:6b:3b:b4:32:13:95:58:33:f6:94:71: 09:31:d0:7f:6e:be:52:c8:9a:e4:69:bd:db:4a:54:3f:83:35: 12:ba:7e:e5:a2:6e:80:a9:48:40:4f:5d:98:e7:4a:85:2c:58: c7:32:45:3d:0f:1a:1c:e8:a3:b6:9f:a5:7a:8b:44:d7:75:c7: 4a:b4:68:76:ff:9f:26:fc:a4:db:57:a4:1b:65:ec:04:4b:a6: 67:a6:4e:99 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUYSmXGPW96PEbtN09nm4FRMEo4EUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEVFRTA1ODRCMjI0QTk1OTE1NTEyRUE3MEZFMDEyQTRB RjEzNEM3QTAeFw0yNTA2MDIwMDU3NThaFw0yNTA2MDUwNjE3NThaMDMxMTAvBgNV BAMTKDA0Q0U1MkVGODRGMzgxNzIzMTc0RDAyOURCQzdCQUQ1NjJGQzhCNzEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDPnHJyMbcMvMZL2fi7NSsOQIHp q5KgTlMVfDdMWsFNZ0MEcvAowFqfKj0bBqmKWocfhxaR9incS/TA6aHkyvyYijxF pHjxrsZkX10CsVsJmBOgaKFy+u0+EX+UTlyyrEkPs6PL3+be0iCmiw1E8HWYcAaZ WF1QzncUsOhSwV8CYMCduhK8dYfRAs7VrNzctacQcqen4KAYuQNRAr976H9cqG2N z4pPnZnM/Y79sbvEibqY3LW83hPSAdXkKNpVDQdwlOH6/sDwJITn1/XlxWk8Rei2 aiucTvTZ49SUldxEzatr5PLh4HL5HrbjYwESgKh8F0xPV85Gm8pAv8PFvuGXAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUBM5S74TzgXIxdNAp28e61WL8i3EwHwYDVR0j BBgwFoAUju4FhLIkqVkVUS6nD+ASpK8TTHowDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w YTc1ZDM3MS0xOGM3LTQ4ZGYtOGY2MS0xZDQwNGI2NDY0MTMvMC84RUVFMDU4NEIy MjRBOTU5MTU1MTJFQTcwRkUwMTJBNEFGMTM0QzdBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOEVFRTA1ODRCMjI0QTk1OTE1NTEyRUE3MEZFMDEyQTRBRjEz NEM3QS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMGE3NWQzNzEtMThjNy00OGRmLThm NjEtMWQ0MDRiNjQ2NDEzLzAvOEVFRTA1ODRCMjI0QTk1OTE1NTEyRUE3MEZFMDEy QTRBRjEzNEM3QS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACUxXnhnNUbpK7FC///GhL9QjH/TbcatJmqm HSHxeB78MqKgtSvyJ4gqTsKYGre0W8/To0j4BT1cpZVlZXP7cOLUUbBJU8Eqquga AmcWUj7F63TuzNkKXmVwmsYLnf2golpiGhiKCy6wMiK1zZUVbV7xSb5kizIZkl02 CHgdPq8xCRfCfeOrU57M85LTykonqW7KamZrTMhS/IV/VkkWGr5H3U3ak36bF/Jr O7QyE5VYM/aUcQkx0H9uvlLImuRpvdtKVD+DNRK6fuWiboCpSEBPXZjnSoUsWMcy RT0PGhzoo7afpXqLRNd1x0q0aHb/nyb8pNtXpBtl7ARLpmemTpk= -----END CERTIFICATE-----Generated at Tue Jun 3 23:19:27 2025 by rpki-client