$ rpki-client -vvf repo-rpki.idnic.net/repo/4288762c-3fc5-49cc-949a-594b331a13a1/0/8958EB1EA0022DEF783D17F1C5B6F0C54B0F5F1E.mft File: 8958EB1EA0022DEF783D17F1C5B6F0C54B0F5F1E.mft (raw, json) Hash identifier: Fu5RKmzzSC1qpa+u6U8H0YuYU5/lWP7zRggoyHzYj5I= Subject key identifier: CF:21:1F:7B:CD:45:2A:BD:10:10:B3:12:CE:06:04:07:38:A3:71:5A Authority key identifier: 89:58:EB:1E:A0:02:2D:EF:78:3D:17:F1:C5:B6:F0:C5:4B:0F:5F:1E Certificate issuer: /CN=8958EB1EA0022DEF783D17F1C5B6F0C54B0F5F1E Certificate serial: 6CC014B4C2BCF32C096FC4557BCF30A38730B6DD Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8958EB1EA0022DEF783D17F1C5B6F0C54B0F5F1E.cer Subject info access: rsync://repo-rpki.idnic.net/repo/4288762c-3fc5-49cc-949a-594b331a13a1/0/8958EB1EA0022DEF783D17F1C5B6F0C54B0F5F1E.mft Manifest number: DF Signing time: Sat 07 Jun 2025 12:00:03 +0000 Manifest this update: Sat 07 Jun 2025 11:55:03 +0000 Manifest next update: Tue 10 Jun 2025 13:46:03 +0000 Files and hashes: 1: 3230322e34372e3136302e302f32342d3234203d3e20313532303736.roa (hash: 7kwTbSO1puRUOTojUVn3A2nZmKPBj1Yf1FR09LrPep4=) 2: 8958EB1EA0022DEF783D17F1C5B6F0C54B0F5F1E.crl (hash: s1M8g1JxZqmuRZcLuSHT73EJXfZcRvYt3u9lG57tyhM=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/4288762c-3fc5-49cc-949a-594b331a13a1/0/8958EB1EA0022DEF783D17F1C5B6F0C54B0F5F1E.crl rsync://repo-rpki.idnic.net/repo/4288762c-3fc5-49cc-949a-594b331a13a1/0/8958EB1EA0022DEF783D17F1C5B6F0C54B0F5F1E.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8958EB1EA0022DEF783D17F1C5B6F0C54B0F5F1E.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 10 Jun 2025 13:46:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6c:c0:14:b4:c2:bc:f3:2c:09:6f:c4:55:7b:cf:30:a3:87:30:b6:dd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8958EB1EA0022DEF783D17F1C5B6F0C54B0F5F1E Validity Not Before: Jun 7 11:55:03 2025 GMT Not After : Jun 10 13:46:03 2025 GMT Subject: CN=CF211F7BCD452ABD1010B312CE06040738A3715A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:1a:08:71:5c:bc:32:8b:05:cb:78:8c:1b:07: 01:8b:57:e9:aa:37:21:5f:ca:9c:0c:64:84:6f:ed: ef:5c:57:f6:29:d9:e6:ac:84:03:1c:7e:db:91:af: ce:a9:e1:20:2a:4c:1a:7d:1c:0d:5a:cf:b9:83:51: 76:89:7e:ee:ee:72:74:90:f7:d5:d6:a6:30:bf:70: 0d:69:4b:a4:d5:a4:a1:86:d2:38:1a:d6:f4:98:eb: 7e:14:04:a5:fa:85:f3:aa:ea:91:f6:68:84:72:de: e5:20:0f:c7:4a:b1:73:a4:c1:b0:5e:e1:a1:ef:66: bd:b3:d0:0f:b1:c8:89:89:e9:0c:62:53:e0:6d:1d: dd:19:ee:71:36:06:b0:ad:51:75:5c:99:36:e7:77: b2:7c:13:24:ed:b9:f2:8b:0f:76:5a:53:28:5d:83: 54:44:bc:39:ed:e2:8e:1f:05:20:51:a9:88:36:49: e9:17:95:17:35:ac:d6:cd:b6:61:68:10:84:4c:28: 10:03:67:f1:e4:8f:51:e9:3e:a2:ea:00:39:2c:0f: 5e:13:fc:3c:25:71:21:08:0d:47:39:d9:5e:cd:b9: 6b:79:e9:bb:0d:58:75:44:51:32:cb:1a:2d:33:4f: 74:b0:a6:e8:e2:7a:d1:cf:ef:d2:1c:e8:01:bf:cc: ae:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:21:1F:7B:CD:45:2A:BD:10:10:B3:12:CE:06:04:07:38:A3:71:5A X509v3 Authority Key Identifier: keyid:89:58:EB:1E:A0:02:2D:EF:78:3D:17:F1:C5:B6:F0:C5:4B:0F:5F:1E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/4288762c-3fc5-49cc-949a-594b331a13a1/0/8958EB1EA0022DEF783D17F1C5B6F0C54B0F5F1E.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8958EB1EA0022DEF783D17F1C5B6F0C54B0F5F1E.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/4288762c-3fc5-49cc-949a-594b331a13a1/0/8958EB1EA0022DEF783D17F1C5B6F0C54B0F5F1E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 06:85:3a:50:be:24:48:b5:ff:d7:1b:da:1b:88:60:81:68:78: 18:e0:47:39:69:b3:36:6a:ff:1b:52:5c:eb:df:b3:05:0d:1f: a5:e7:b5:ff:88:7a:dd:51:f9:34:1d:e7:aa:b9:bb:4a:4e:dd: 9f:04:57:aa:be:25:b8:1c:f3:58:01:46:b7:be:e0:2a:7a:69: 2b:d1:aa:a6:7f:d6:37:1a:16:8e:40:e6:4a:7c:5a:ec:4d:9a: f2:24:85:e0:c1:f2:9f:4b:3f:77:16:e2:80:cc:68:3e:c0:c8: 7b:bd:67:ae:75:d6:9a:a8:06:b5:6a:f6:a4:15:bb:6f:58:02: 28:43:1a:65:6c:7d:e7:f4:0c:38:4e:46:4d:43:96:c8:0d:e9: 36:26:f1:86:09:81:52:27:28:b2:71:e1:eb:28:c4:d6:56:82: aa:3c:5f:8e:70:75:5d:e3:67:c0:9c:84:06:62:2d:75:1e:8f: 4f:03:eb:08:fe:62:b0:55:bc:d0:14:93:65:17:39:a9:1f:64: 5b:55:7f:f7:d7:28:15:59:48:72:ae:9b:37:ad:ad:49:c2:46: dd:78:1b:26:a9:69:6b:3e:4b:46:fb:03:92:fb:11:49:fe:00: fc:b6:b5:b7:a6:1c:09:72:f6:16:0c:c5:19:4c:50:f9:95:74: 4c:97:87:23 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUbMAUtMK88ywJb8RVe88wo4cwtt0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODk1OEVCMUVBMDAyMkRFRjc4M0QxN0YxQzVCNkYwQzU0 QjBGNUYxRTAeFw0yNTA2MDcxMTU1MDNaFw0yNTA2MTAxMzQ2MDNaMDMxMTAvBgNV BAMTKENGMjExRjdCQ0Q0NTJBQkQxMDEwQjMxMkNFMDYwNDA3MzhBMzcxNUEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDJGghxXLwyiwXLeIwbBwGLV+mq NyFfypwMZIRv7e9cV/Yp2eashAMcftuRr86p4SAqTBp9HA1az7mDUXaJfu7ucnSQ 99XWpjC/cA1pS6TVpKGG0jga1vSY634UBKX6hfOq6pH2aIRy3uUgD8dKsXOkwbBe 4aHvZr2z0A+xyImJ6QxiU+BtHd0Z7nE2BrCtUXVcmTbnd7J8EyTtufKLD3ZaUyhd g1REvDnt4o4fBSBRqYg2SekXlRc1rNbNtmFoEIRMKBADZ/Hkj1HpPqLqADksD14T /DwlcSEIDUc52V7NuWt56bsNWHVEUTLLGi0zT3SwpujietHP79Ic6AG/zK69AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUzyEfe81FKr0QELMSzgYEBzijcVowHwYDVR0j BBgwFoAUiVjrHqACLe94PRfxxbbwxUsPXx4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 Mjg4NzYyYy0zZmM1LTQ5Y2MtOTQ5YS01OTRiMzMxYTEzYTEvMC84OTU4RUIxRUEw MDIyREVGNzgzRDE3RjFDNUI2RjBDNTRCMEY1RjFFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvODk1OEVCMUVBMDAyMkRFRjc4M0QxN0YxQzVCNkYwQzU0QjBG NUYxRS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNDI4ODc2MmMtM2ZjNS00OWNjLTk0 OWEtNTk0YjMzMWExM2ExLzAvODk1OEVCMUVBMDAyMkRFRjc4M0QxN0YxQzVCNkYw QzU0QjBGNUYxRS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAaFOlC+JEi1/9cb2huIYIFoeBjgRzlpszZq /xtSXOvfswUNH6Xntf+Iet1R+TQd56q5u0pO3Z8EV6q+Jbgc81gBRre+4Cp6aSvR qqZ/1jcaFo5A5kp8WuxNmvIkheDB8p9LP3cW4oDMaD7AyHu9Z6511pqoBrVq9qQV u29YAihDGmVsfef0DDhORk1DlsgN6TYm8YYJgVInKLJx4esoxNZWgqo8X45wdV3j Z8CchAZiLXUej08D6wj+YrBVvNAUk2UXOakfZFtVf/fXKBVZSHKumzetrUnCRt14 GyapaWs+S0b7A5L7EUn+APy2tbemHAly9hYMxRlMUPmVdEyXhyM= -----END CERTIFICATE-----Generated at Mon Jun 9 06:36:42 2025 by rpki-client