$ rpki-client -vvf repo-rpki.idnic.net/repo/481d54cb-57a9-4a16-a70e-c5f6024e139d/0/C08E65A250AEDC93967004D660D25DB8293AB419.mft File: C08E65A250AEDC93967004D660D25DB8293AB419.mft (raw, json) Hash identifier: 7y86Nuuzm1TLi83h2ltCnVtFSctNw4nz2e4SZiKdjZ4= Subject key identifier: 73:89:CC:4C:12:CF:E8:28:8E:7C:66:A9:FA:E3:03:FD:0F:C0:14:33 Authority key identifier: C0:8E:65:A2:50:AE:DC:93:96:70:04:D6:60:D2:5D:B8:29:3A:B4:19 Certificate issuer: /CN=C08E65A250AEDC93967004D660D25DB8293AB419 Certificate serial: 5BEF29E7547D7B4586CD15F014D470B9E886ECDB Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/C08E65A250AEDC93967004D660D25DB8293AB419.cer Subject info access: rsync://repo-rpki.idnic.net/repo/481d54cb-57a9-4a16-a70e-c5f6024e139d/0/C08E65A250AEDC93967004D660D25DB8293AB419.mft Manifest number: 66 Signing time: Thu 05 Jun 2025 22:31:13 +0000 Manifest this update: Thu 05 Jun 2025 22:26:13 +0000 Manifest next update: Mon 09 Jun 2025 08:24:13 +0000 Files and hashes: 1: C08E65A250AEDC93967004D660D25DB8293AB419.crl (hash: WZ9paB2cp4jby8O1tcifL9q58OAvWdmjcPQHLWxpYo4=) 2: 3136302e3138372e3231382e302f32342d3234203d3e20313533313332.roa (hash: acW7MmyfNG3sUp37/a67TBL3VhsulHr1Ydf1eaVxfYA=) 3: 3136302e3138372e3231382e302f32332d3233203d3e20313533313332.roa (hash: sdFf65pWHqDguzQodheeefSyOGT0g0gjcknsFa81ar4=) 4: 3136302e3138372e3231392e302f32342d3234203d3e20313533313332.roa (hash: TxTC2v3sBGuNzD/7pAwJq8+hVg6iPYD1W71+E9F+XzU=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/481d54cb-57a9-4a16-a70e-c5f6024e139d/0/C08E65A250AEDC93967004D660D25DB8293AB419.crl rsync://repo-rpki.idnic.net/repo/481d54cb-57a9-4a16-a70e-c5f6024e139d/0/C08E65A250AEDC93967004D660D25DB8293AB419.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/C08E65A250AEDC93967004D660D25DB8293AB419.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Jun 2025 01:18:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5b:ef:29:e7:54:7d:7b:45:86:cd:15:f0:14:d4:70:b9:e8:86:ec:db Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C08E65A250AEDC93967004D660D25DB8293AB419 Validity Not Before: Jun 5 22:26:13 2025 GMT Not After : Jun 9 08:24:13 2025 GMT Subject: CN=7389CC4C12CFE8288E7C66A9FAE303FD0FC01433 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:fe:fb:f6:ee:cb:c4:27:f4:ec:ed:e7:5f:86: 7e:bb:c4:96:e4:11:a3:c8:19:3c:b6:89:a6:b3:f2: c7:20:a9:38:d6:69:31:52:cb:72:93:69:dd:65:e7: a6:94:46:07:35:9f:d2:ab:1a:4f:05:17:e3:a0:43: cb:af:21:a3:54:a2:dc:ae:b1:e6:3d:2f:8d:95:4f: 13:83:b0:03:aa:26:2e:03:a9:f2:13:c9:74:38:17: e0:c7:10:41:73:cf:95:99:1e:00:05:d1:2d:64:b4: 41:cd:ba:84:7c:b8:3e:fb:9e:c3:b8:49:26:2c:ef: 01:3d:98:10:05:46:bf:d0:f9:af:a1:21:38:ca:ca: 5e:ae:43:80:21:1b:e9:49:14:3f:fa:fa:73:f5:d0: 9b:8b:22:15:b2:4c:5d:99:b4:b9:66:4d:58:a5:97: 5f:e6:0b:2c:8f:1b:47:4f:23:b3:f1:cf:e8:fc:90: a1:96:1c:bc:68:eb:75:23:c3:eb:b6:cc:be:49:0f: 58:da:e7:e2:ce:53:85:d1:4c:c4:29:3c:67:63:d7: c7:70:4f:23:e4:72:4e:52:04:02:72:98:fc:89:8b: 55:ab:cc:58:52:bf:b2:9a:48:2a:28:c3:23:6d:7b: 2c:25:8e:42:a9:5b:a4:ae:25:c8:b3:9a:37:07:59: 74:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 73:89:CC:4C:12:CF:E8:28:8E:7C:66:A9:FA:E3:03:FD:0F:C0:14:33 X509v3 Authority Key Identifier: keyid:C0:8E:65:A2:50:AE:DC:93:96:70:04:D6:60:D2:5D:B8:29:3A:B4:19 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/481d54cb-57a9-4a16-a70e-c5f6024e139d/0/C08E65A250AEDC93967004D660D25DB8293AB419.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/C08E65A250AEDC93967004D660D25DB8293AB419.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/481d54cb-57a9-4a16-a70e-c5f6024e139d/0/C08E65A250AEDC93967004D660D25DB8293AB419.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption db:be:5a:68:47:5b:6b:34:4d:17:13:ef:51:71:4c:a3:df:ea: d6:15:7f:e4:0c:6f:96:cd:2a:63:ab:f9:19:00:1e:87:f9:e4: 00:16:70:d1:cd:f3:42:a1:98:5f:43:93:70:cd:25:9c:5e:5c: b8:f1:13:32:59:3f:06:c5:b2:7a:0e:aa:0f:80:10:43:12:b0: 4b:78:de:44:bd:0d:72:c0:37:70:f2:dc:37:be:48:3e:f3:37: b8:e7:fc:13:d0:3e:2f:c8:14:a0:2f:52:7f:c9:0e:29:b4:4d: de:68:c7:ce:77:83:92:3b:1a:fb:f5:d6:e8:e7:66:ae:3a:ed: 35:d9:30:0a:4f:4f:ec:c0:12:eb:ed:21:2e:e3:a2:b2:5b:78: 69:16:64:83:83:ef:7b:8b:75:b8:57:a3:a8:03:5e:b6:3d:3a: 57:6d:d7:e6:68:90:cb:9a:56:5e:7f:f5:5c:ba:df:aa:25:8e: a2:e5:86:87:a5:d9:69:32:ff:51:05:2d:db:e5:29:b5:24:0c: 3d:f3:d8:d8:b9:47:f9:84:e9:3c:af:f1:c7:41:b0:6c:d4:95: 8d:9b:8d:83:c4:b1:71:66:fd:85:7a:1c:c8:f8:e2:3a:a5:bf: 70:60:f8:05:ec:31:9d:e0:fd:90:ff:79:d6:58:3b:7c:0a:0f: 1a:fa:bb:8c -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUW+8p51R9e0WGzRXwFNRwueiG7NswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzA4RTY1QTI1MEFFREM5Mzk2NzAwNEQ2NjBEMjVEQjgy OTNBQjQxOTAeFw0yNTA2MDUyMjI2MTNaFw0yNTA2MDkwODI0MTNaMDMxMTAvBgNV BAMTKDczODlDQzRDMTJDRkU4Mjg4RTdDNjZBOUZBRTMwM0ZEMEZDMDE0MzMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDR/vv27svEJ/Ts7edfhn67xJbk EaPIGTy2iaaz8scgqTjWaTFSy3KTad1l56aURgc1n9KrGk8FF+OgQ8uvIaNUotyu seY9L42VTxODsAOqJi4DqfITyXQ4F+DHEEFzz5WZHgAF0S1ktEHNuoR8uD77nsO4 SSYs7wE9mBAFRr/Q+a+hITjKyl6uQ4AhG+lJFD/6+nP10JuLIhWyTF2ZtLlmTVil l1/mCyyPG0dPI7Pxz+j8kKGWHLxo63Ujw+u2zL5JD1ja5+LOU4XRTMQpPGdj18dw TyPkck5SBAJymPyJi1WrzFhSv7KaSCoowyNteywljkKpW6SuJcizmjcHWXRFAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUc4nMTBLP6CiOfGap+uMD/Q/AFDMwHwYDVR0j BBgwFoAUwI5lolCu3JOWcATWYNJduCk6tBkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 ODFkNTRjYi01N2E5LTRhMTYtYTcwZS1jNWY2MDI0ZTEzOWQvMC9DMDhFNjVBMjUw QUVEQzkzOTY3MDA0RDY2MEQyNURCODI5M0FCNDE5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvQzA4RTY1QTI1MEFFREM5Mzk2NzAwNEQ2NjBEMjVEQjgyOTNB QjQxOS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNDgxZDU0Y2ItNTdhOS00YTE2LWE3 MGUtYzVmNjAyNGUxMzlkLzAvQzA4RTY1QTI1MEFFREM5Mzk2NzAwNEQ2NjBEMjVE QjgyOTNBQjQxOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBANu+WmhHW2s0TRcT71FxTKPf6tYVf+QMb5bN KmOr+RkAHof55AAWcNHN80KhmF9Dk3DNJZxeXLjxEzJZPwbFsnoOqg+AEEMSsEt4 3kS9DXLAN3Dy3De+SD7zN7jn/BPQPi/IFKAvUn/JDim0Td5ox853g5I7Gvv11ujn Zq467TXZMApPT+zAEuvtIS7jorJbeGkWZIOD73uLdbhXo6gDXrY9Oldt1+ZokMua Vl5/9Vy636oljqLlhoel2Wky/1EFLdvlKbUkDD3z2Ni5R/mE6Tyv8cdBsGzUlY2b jYPEsXFm/YV6HMj44jqlv3Bg+AXsMZ3g/ZD/edZYO3wKDxr6u4w= -----END CERTIFICATE-----Generated at Fri Jun 6 04:57:08 2025 by rpki-client