$ rpki-client -vvf repo-rpki.idnic.net/repo/2c0056b4-f027-44fa-974d-4a1ed191ae56/0/8030ED8A48ED985A5DD88E9BC1C0D015F436FFDF.mft File: 8030ED8A48ED985A5DD88E9BC1C0D015F436FFDF.mft (raw, json) Hash identifier: 0zA37vOqWiCOVyCKlw/8DtaMZu2lZH66ztN09OR7Gc4= Subject key identifier: 83:38:FB:B7:CF:70:CC:56:05:DE:C4:AF:75:86:AA:A8:CE:2A:8C:50 Authority key identifier: 80:30:ED:8A:48:ED:98:5A:5D:D8:8E:9B:C1:C0:D0:15:F4:36:FF:DF Certificate issuer: /CN=8030ED8A48ED985A5DD88E9BC1C0D015F436FFDF Certificate serial: 08C3A8182F3705B2236708871F0319AF7D42A395 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8030ED8A48ED985A5DD88E9BC1C0D015F436FFDF.cer Subject info access: rsync://repo-rpki.idnic.net/repo/2c0056b4-f027-44fa-974d-4a1ed191ae56/0/8030ED8A48ED985A5DD88E9BC1C0D015F436FFDF.mft Manifest number: 01C2 Signing time: Mon 02 Jun 2025 12:31:43 +0000 Manifest this update: Mon 02 Jun 2025 12:26:43 +0000 Manifest next update: Thu 05 Jun 2025 15:01:43 +0000 Files and hashes: 1: 3130332e3138392e3235342e302f32342d3234203d3e20313439393135.roa (hash: +iE/KrKvV41CCSuLPTOsrbsN5zEw317mYQ4TBmw32TE=) 2: 8030ED8A48ED985A5DD88E9BC1C0D015F436FFDF.crl (hash: zkJlCsRWQUdQ/oN7KrADhdxssFJYz9TGHtNM7ZKma7I=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/2c0056b4-f027-44fa-974d-4a1ed191ae56/0/8030ED8A48ED985A5DD88E9BC1C0D015F436FFDF.crl rsync://repo-rpki.idnic.net/repo/2c0056b4-f027-44fa-974d-4a1ed191ae56/0/8030ED8A48ED985A5DD88E9BC1C0D015F436FFDF.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8030ED8A48ED985A5DD88E9BC1C0D015F436FFDF.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 05 Jun 2025 15:01:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 08:c3:a8:18:2f:37:05:b2:23:67:08:87:1f:03:19:af:7d:42:a3:95 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8030ED8A48ED985A5DD88E9BC1C0D015F436FFDF Validity Not Before: Jun 2 12:26:43 2025 GMT Not After : Jun 5 15:01:43 2025 GMT Subject: CN=8338FBB7CF70CC5605DEC4AF7586AAA8CE2A8C50 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:cd:69:77:79:31:9b:6e:46:00:df:9b:86:62: e6:60:e8:c9:2a:26:14:25:06:4e:6e:91:44:63:a5: d1:bf:f7:d0:61:aa:f8:52:68:b5:9f:7b:96:e6:9f: b4:ab:84:bd:07:00:66:25:a1:07:f4:4d:98:bc:4c: cc:a1:9f:ca:91:a5:a6:d6:64:98:ec:08:27:d7:54: 2b:b5:e3:e3:aa:66:1f:62:8f:51:4b:94:11:3b:7e: 6f:cd:45:ae:41:6d:53:6a:e4:9c:c7:79:b1:86:6d: 00:5a:7b:21:79:0a:63:c5:c2:c6:9e:2f:11:7c:2c: d7:ee:7c:e5:33:c1:f1:67:3a:e9:31:c0:06:2f:30: 3d:3c:99:34:79:0f:6c:fb:6b:8b:13:fa:85:1b:55: 17:1e:e2:e1:01:5f:e6:d7:2b:11:ea:9b:72:ca:86: fd:84:c1:84:d9:8f:9c:d6:ce:cb:d0:8d:64:39:ca: e1:bf:29:62:1a:3c:e7:d0:ba:a3:63:72:98:94:d7: 47:8f:08:55:be:05:39:cb:84:b8:7e:cf:08:97:20: d1:7f:46:52:45:58:b2:af:e6:bf:be:2b:56:38:4b: c0:56:55:8a:68:d1:e3:9e:6c:98:d9:db:86:5a:c7: d6:61:2d:f7:a5:4d:49:44:04:60:81:ce:4a:71:3d: c6:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 83:38:FB:B7:CF:70:CC:56:05:DE:C4:AF:75:86:AA:A8:CE:2A:8C:50 X509v3 Authority Key Identifier: keyid:80:30:ED:8A:48:ED:98:5A:5D:D8:8E:9B:C1:C0:D0:15:F4:36:FF:DF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/2c0056b4-f027-44fa-974d-4a1ed191ae56/0/8030ED8A48ED985A5DD88E9BC1C0D015F436FFDF.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8030ED8A48ED985A5DD88E9BC1C0D015F436FFDF.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/2c0056b4-f027-44fa-974d-4a1ed191ae56/0/8030ED8A48ED985A5DD88E9BC1C0D015F436FFDF.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 14:e4:7b:7f:ec:86:66:16:d3:80:8a:6d:6f:a2:65:cf:cd:23: d5:e6:a3:b1:78:2d:bb:1f:d1:cb:08:3f:6a:01:ba:3a:9c:ac: bc:c7:60:dd:09:c4:70:96:91:84:41:0f:98:a6:c1:af:2e:35: ef:39:11:4f:59:63:da:22:85:b8:31:dc:d8:c8:c8:3d:d1:e8: 28:e9:3c:68:cf:15:84:e8:08:a8:3f:2c:91:8b:60:2f:1f:34: 02:54:c0:1c:42:4c:51:02:57:b9:f9:f9:97:1e:f2:36:cd:07: 62:5b:56:26:4a:23:ff:84:9b:13:5d:b6:1b:3f:42:88:76:ad: 18:66:04:78:0f:79:11:48:b4:18:14:97:54:10:5a:c3:48:31: 33:ee:d2:6d:85:e6:72:cb:d2:f7:f9:95:60:0c:55:d7:21:cc: 40:39:41:53:27:ee:da:c4:68:26:49:ff:61:f7:e2:b3:84:c2: 6c:68:e4:bf:e1:6e:c0:7a:7a:e3:ff:c1:c2:d2:1c:47:3a:8d: a5:16:b6:21:12:2b:b6:6a:75:a5:47:62:9a:f5:2b:aa:bb:28: 73:ef:16:67:95:da:6d:32:e4:7a:58:e5:c3:a8:e0:60:85:bb: 3a:7e:ed:2c:97:5a:ea:60:0c:9f:ef:c1:55:af:34:03:10:ec: 03:5e:15:68 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUCMOoGC83BbIjZwiHHwMZr31Co5UwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODAzMEVEOEE0OEVEOTg1QTVERDg4RTlCQzFDMEQwMTVG NDM2RkZERjAeFw0yNTA2MDIxMjI2NDNaFw0yNTA2MDUxNTAxNDNaMDMxMTAvBgNV BAMTKDgzMzhGQkI3Q0Y3MENDNTYwNURFQzRBRjc1ODZBQUE4Q0UyQThDNTAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDizWl3eTGbbkYA35uGYuZg6Mkq JhQlBk5ukURjpdG/99BhqvhSaLWfe5bmn7SrhL0HAGYloQf0TZi8TMyhn8qRpabW ZJjsCCfXVCu14+OqZh9ij1FLlBE7fm/NRa5BbVNq5JzHebGGbQBaeyF5CmPFwsae LxF8LNfufOUzwfFnOukxwAYvMD08mTR5D2z7a4sT+oUbVRce4uEBX+bXKxHqm3LK hv2EwYTZj5zWzsvQjWQ5yuG/KWIaPOfQuqNjcpiU10ePCFW+BTnLhLh+zwiXINF/ RlJFWLKv5r++K1Y4S8BWVYpo0eOebJjZ24Zax9ZhLfelTUlEBGCBzkpxPcYJAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUgzj7t89wzFYF3sSvdYaqqM4qjFAwHwYDVR0j BBgwFoAUgDDtikjtmFpd2I6bwcDQFfQ2/98wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y YzAwNTZiNC1mMDI3LTQ0ZmEtOTc0ZC00YTFlZDE5MWFlNTYvMC84MDMwRUQ4QTQ4 RUQ5ODVBNUREODhFOUJDMUMwRDAxNUY0MzZGRkRGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvODAzMEVEOEE0OEVEOTg1QTVERDg4RTlCQzFDMEQwMTVGNDM2 RkZERi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMmMwMDU2YjQtZjAyNy00NGZhLTk3 NGQtNGExZWQxOTFhZTU2LzAvODAzMEVEOEE0OEVEOTg1QTVERDg4RTlCQzFDMEQw MTVGNDM2RkZERi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABTke3/shmYW04CKbW+iZc/NI9Xmo7F4Lbsf 0csIP2oBujqcrLzHYN0JxHCWkYRBD5imwa8uNe85EU9ZY9oihbgx3NjIyD3R6Cjp PGjPFYToCKg/LJGLYC8fNAJUwBxCTFECV7n5+Zce8jbNB2JbViZKI/+EmxNdths/ Qoh2rRhmBHgPeRFItBgUl1QQWsNIMTPu0m2F5nLL0vf5lWAMVdchzEA5QVMn7trE aCZJ/2H34rOEwmxo5L/hbsB6euP/wcLSHEc6jaUWtiESK7ZqdaVHYpr1K6q7KHPv FmeV2m0y5HpY5cOo4GCFuzp+7SyXWupgDJ/vwVWvNAMQ7ANeFWg= -----END CERTIFICATE-----Generated at Tue Jun 3 23:33:15 2025 by rpki-client