$ rpki-client -vvf repo-rpki.idnic.net/repo/12307390-6ef3-4476-a6aa-d0c5783e1f37/0/8A05EBF58BEC96D946EE85F0F0F85701A0A72799.mft File: 8A05EBF58BEC96D946EE85F0F0F85701A0A72799.mft (raw, json) Hash identifier: hiubtKBtV0wxhIhi0RzMjt1DPJqYhaDC1irxKmiATBM= Subject key identifier: 33:7F:ED:CE:F8:2E:1A:0D:D2:A0:B4:32:9F:E5:39:AC:FD:DE:9D:F3 Authority key identifier: 8A:05:EB:F5:8B:EC:96:D9:46:EE:85:F0:F0:F8:57:01:A0:A7:27:99 Certificate issuer: /CN=8A05EBF58BEC96D946EE85F0F0F85701A0A72799 Certificate serial: 215D9E8DB1C373FEC6F2A9DFCDE21C3597EEBFBA Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8A05EBF58BEC96D946EE85F0F0F85701A0A72799.cer Subject info access: rsync://repo-rpki.idnic.net/repo/12307390-6ef3-4476-a6aa-d0c5783e1f37/0/8A05EBF58BEC96D946EE85F0F0F85701A0A72799.mft Manifest number: 04DD Signing time: Fri 06 Jun 2025 12:11:06 +0000 Manifest this update: Fri 06 Jun 2025 12:06:06 +0000 Manifest next update: Mon 09 Jun 2025 13:46:06 +0000 Files and hashes: 1: 8A05EBF58BEC96D946EE85F0F0F85701A0A72799.crl (hash: FWeDXaFc1jsFrCt2T+cuHvMF9RuxMaJ0skjblXusXkI=) 2: 3130332e3133392e34372e302f32342d3234203d3e203137393935.roa (hash: l/5HgKnT7J8DLMc5KXCSqh4O/akFH+dhFOMVMx/cS/M=) 3: 3130332e3133392e34362e302f32342d3234203d3e203137393935.roa (hash: aiqggAzdcdtm0B30Fkn6BPjIRWihb5Wkvu7iMkpkz24=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/12307390-6ef3-4476-a6aa-d0c5783e1f37/0/8A05EBF58BEC96D946EE85F0F0F85701A0A72799.crl rsync://repo-rpki.idnic.net/repo/12307390-6ef3-4476-a6aa-d0c5783e1f37/0/8A05EBF58BEC96D946EE85F0F0F85701A0A72799.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8A05EBF58BEC96D946EE85F0F0F85701A0A72799.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Jun 2025 13:46:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 21:5d:9e:8d:b1:c3:73:fe:c6:f2:a9:df:cd:e2:1c:35:97:ee:bf:ba Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8A05EBF58BEC96D946EE85F0F0F85701A0A72799 Validity Not Before: Jun 6 12:06:06 2025 GMT Not After : Jun 9 13:46:06 2025 GMT Subject: CN=337FEDCEF82E1A0DD2A0B4329FE539ACFDDE9DF3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:c9:55:24:87:18:fa:8b:52:83:c6:b1:f9:3c: a9:72:30:9e:ae:21:9b:da:16:4a:74:aa:fb:6a:05: a3:f0:7b:23:95:f6:0a:80:3e:de:ed:2f:3a:fe:38: 5b:a4:67:49:24:b0:91:d6:05:8e:0d:9b:33:d8:f5: 5e:10:24:c5:b4:8d:9c:1b:c7:28:f3:9f:4d:8b:cf: 9e:bb:73:2c:09:6b:84:32:02:39:2c:b8:dd:b5:1c: a7:fb:28:05:59:f8:59:de:f5:5f:3a:65:0c:c4:cc: 01:b8:c6:ba:91:ab:17:89:04:e7:bc:54:b6:a4:54: b9:ed:66:74:d8:d0:fa:c1:65:7f:51:5a:60:3a:e3: c1:fe:8c:7d:54:50:47:6a:7a:d6:a0:72:8e:f8:01: 54:89:67:c9:98:5f:3a:e0:d5:f2:26:21:d7:5b:93: 1c:fc:7b:7f:ab:36:2b:f5:75:00:76:df:72:98:27: fa:5a:76:3d:67:97:9e:5c:e6:d6:82:30:c3:13:44: 89:d8:eb:9a:f2:dc:3c:ee:72:99:3c:90:5b:c9:7b: 2d:7d:c6:63:82:a8:67:95:d5:4e:7a:0b:9b:58:65: e9:e2:83:9d:27:5c:93:5e:fe:7b:f6:8f:08:0e:8c: 7f:09:d2:10:5d:68:ae:13:e0:27:af:7e:12:26:3b: cf:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:7F:ED:CE:F8:2E:1A:0D:D2:A0:B4:32:9F:E5:39:AC:FD:DE:9D:F3 X509v3 Authority Key Identifier: keyid:8A:05:EB:F5:8B:EC:96:D9:46:EE:85:F0:F0:F8:57:01:A0:A7:27:99 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/12307390-6ef3-4476-a6aa-d0c5783e1f37/0/8A05EBF58BEC96D946EE85F0F0F85701A0A72799.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8A05EBF58BEC96D946EE85F0F0F85701A0A72799.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/12307390-6ef3-4476-a6aa-d0c5783e1f37/0/8A05EBF58BEC96D946EE85F0F0F85701A0A72799.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 29:e4:78:9c:78:65:9b:20:ea:59:29:93:7f:bf:df:18:c3:ac: 52:38:28:5a:3d:c1:c0:9e:e8:22:d8:f4:c9:d8:df:ec:14:91: 89:f6:f0:2f:c0:5f:04:3f:58:8f:b3:9e:b1:70:32:69:90:a9: 3f:bf:ff:25:58:86:24:ad:3c:82:6b:e7:69:b2:43:0d:4a:55: 18:56:86:a5:3a:1d:a6:f9:97:8c:0d:a3:d6:86:82:39:4e:0a: 80:33:4d:13:7b:42:3a:a0:06:70:07:fa:c6:c1:91:1e:58:6a: 18:34:78:5b:cb:0b:9b:bd:28:16:dc:48:97:c6:28:0b:90:f2: 08:64:b0:b9:bc:df:ad:04:ba:fc:95:5d:7f:e4:1d:96:b2:17: fc:7b:0e:77:f4:f2:58:d1:70:e5:12:6d:9f:c0:90:1f:e7:e3: e0:af:af:ac:1e:46:a3:87:11:8a:ae:2d:70:ab:bf:74:a6:5a: 5e:c6:99:61:e2:9e:22:4d:cb:b9:ee:30:61:3a:be:58:e7:16: f2:d0:a6:00:aa:92:17:29:94:61:c4:c4:b6:8c:07:df:84:90: 47:c8:d0:64:de:7e:0e:5d:45:ed:53:2e:e3:b2:12:2d:be:60: e4:7e:62:5b:c3:31:32:f3:25:b5:e4:a9:b3:f5:92:84:b6:97: d4:df:13:a7 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUIV2ejbHDc/7G8qnfzeIcNZfuv7owDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEEwNUVCRjU4QkVDOTZEOTQ2RUU4NUYwRjBGODU3MDFB MEE3Mjc5OTAeFw0yNTA2MDYxMjA2MDZaFw0yNTA2MDkxMzQ2MDZaMDMxMTAvBgNV BAMTKDMzN0ZFRENFRjgyRTFBMEREMkEwQjQzMjlGRTUzOUFDRkRERTlERjMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDWyVUkhxj6i1KDxrH5PKlyMJ6u IZvaFkp0qvtqBaPweyOV9gqAPt7tLzr+OFukZ0kksJHWBY4NmzPY9V4QJMW0jZwb xyjzn02Lz567cywJa4QyAjksuN21HKf7KAVZ+Fne9V86ZQzEzAG4xrqRqxeJBOe8 VLakVLntZnTY0PrBZX9RWmA648H+jH1UUEdqetagco74AVSJZ8mYXzrg1fImIddb kxz8e3+rNiv1dQB233KYJ/padj1nl55c5taCMMMTRInY65ry3Dzucpk8kFvJey19 xmOCqGeV1U56C5tYZenig50nXJNe/nv2jwgOjH8J0hBdaK4T4CevfhImO8+xAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUM3/tzvguGg3SoLQyn+U5rP3enfMwHwYDVR0j BBgwFoAUigXr9YvsltlG7oXw8PhXAaCnJ5kwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x MjMwNzM5MC02ZWYzLTQ0NzYtYTZhYS1kMGM1NzgzZTFmMzcvMC84QTA1RUJGNThC RUM5NkQ5NDZFRTg1RjBGMEY4NTcwMUEwQTcyNzk5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOEEwNUVCRjU4QkVDOTZEOTQ2RUU4NUYwRjBGODU3MDFBMEE3 Mjc5OS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMTIzMDczOTAtNmVmMy00NDc2LWE2 YWEtZDBjNTc4M2UxZjM3LzAvOEEwNUVCRjU4QkVDOTZEOTQ2RUU4NUYwRjBGODU3 MDFBMEE3Mjc5OS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACnkeJx4ZZsg6lkpk3+/3xjDrFI4KFo9wcCe 6CLY9MnY3+wUkYn28C/AXwQ/WI+znrFwMmmQqT+//yVYhiStPIJr52myQw1KVRhW hqU6Hab5l4wNo9aGgjlOCoAzTRN7QjqgBnAH+sbBkR5Yahg0eFvLC5u9KBbcSJfG KAuQ8ghksLm8360EuvyVXX/kHZayF/x7Dnf08ljRcOUSbZ/AkB/n4+Cvr6weRqOH EYquLXCrv3SmWl7GmWHiniJNy7nuMGE6vljnFvLQpgCqkhcplGHExLaMB9+EkEfI 0GTefg5dRe1TLuOyEi2+YOR+YlvDMTLzJbXkqbP1koS2l9TfE6c= -----END CERTIFICATE-----Generated at Sat Jun 7 05:18:10 2025 by rpki-client