$ rpki-client -vvf repo-rpki.idnic.net/repo/5252ead3-dc8f-4d86-afcf-a140e5b87532/0/8CFB227DA1EF51DB23364BBA034D0F68A09A5F59.mft File: 8CFB227DA1EF51DB23364BBA034D0F68A09A5F59.mft (raw, json) Hash identifier: ONFlXk+iZ16U6uX+7UeZYsoeEcNH1wqsknhXd2cY08Y= Subject key identifier: 2D:D7:C0:91:C2:1F:2B:7E:8C:47:CB:D5:91:D8:FB:FE:60:6C:4D:8B Authority key identifier: 8C:FB:22:7D:A1:EF:51:DB:23:36:4B:BA:03:4D:0F:68:A0:9A:5F:59 Certificate issuer: /CN=8CFB227DA1EF51DB23364BBA034D0F68A09A5F59 Certificate serial: 239C60829E3FC7E054A48B75C946638008C6F223 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8CFB227DA1EF51DB23364BBA034D0F68A09A5F59.cer Subject info access: rsync://repo-rpki.idnic.net/repo/5252ead3-dc8f-4d86-afcf-a140e5b87532/0/8CFB227DA1EF51DB23364BBA034D0F68A09A5F59.mft Manifest number: 01F8 Signing time: Mon 02 Jun 2025 04:01:31 +0000 Manifest this update: Mon 02 Jun 2025 03:56:31 +0000 Manifest next update: Thu 05 Jun 2025 11:06:31 +0000 Files and hashes: 1: 3130332e3138362e3139342e302f32342d3234203d3e20313439373132.roa (hash: uzPIoUslKlL0kCJ3Mr8GlDHsPvFS4WU5l7ZsMhLtDsU=) 2: 3130332e3138362e3139352e302f32342d3234203d3e203438343635.roa (hash: Ki8Cc+Gx70CC0XbilduGxfIZkadNxHy55sL/nnQhaSQ=) 3: 3130332e3138362e3139342e302f32332d3234203d3e20313439373132.roa (hash: S9MFaIq/j9TJ63dOJfnzWaZP6j2QyCQRqTU45iGYFSM=) 4: 3130332e3138362e3139342e302f32332d3233203d3e20313439373132.roa (hash: swBTOVyl/nQxFd9eqJx6PzMQ7ExSAWTFjV6g64/KqU0=) 5: 8CFB227DA1EF51DB23364BBA034D0F68A09A5F59.crl (hash: nGUEV4Llld+eTDCQN5zqP25P/Ov9NqPWFyce6Tekg3k=) 6: 3130332e3138362e3139342e302f32342d3234203d3e203438343635.roa (hash: eU7I4ymKpW+jwkR3HPQwmMezqt+megmBIZ8FaA+gFVU=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/5252ead3-dc8f-4d86-afcf-a140e5b87532/0/8CFB227DA1EF51DB23364BBA034D0F68A09A5F59.crl rsync://repo-rpki.idnic.net/repo/5252ead3-dc8f-4d86-afcf-a140e5b87532/0/8CFB227DA1EF51DB23364BBA034D0F68A09A5F59.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8CFB227DA1EF51DB23364BBA034D0F68A09A5F59.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 05 Jun 2025 11:06:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 23:9c:60:82:9e:3f:c7:e0:54:a4:8b:75:c9:46:63:80:08:c6:f2:23 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8CFB227DA1EF51DB23364BBA034D0F68A09A5F59 Validity Not Before: Jun 2 03:56:31 2025 GMT Not After : Jun 5 11:06:31 2025 GMT Subject: CN=2DD7C091C21F2B7E8C47CBD591D8FBFE606C4D8B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:eb:66:70:c6:b0:e6:84:80:28:2d:9e:63:b8:d6: 85:99:d1:f6:87:ff:49:b1:47:92:ad:17:e5:e4:89: c9:5e:f7:61:10:8d:bc:4c:d0:47:9a:ce:92:5f:eb: a8:48:1a:7c:72:53:95:ba:11:cc:d2:00:2d:c1:79: 9b:57:37:89:dc:ac:3d:05:a5:a5:e7:9c:36:68:f6: 3d:0e:e7:3a:47:cd:16:e2:96:1d:fa:fb:26:0e:b1: 6c:c6:1b:e4:76:e0:83:e2:bc:35:e0:86:0e:56:1c: 7f:5d:9f:b9:84:b8:dc:4e:1e:e0:99:5f:5c:18:00: f3:4a:7c:32:dc:6f:58:7a:ef:50:80:a1:3a:59:33: f8:35:c3:1a:62:61:21:46:ea:25:66:1c:a8:76:cc: 4b:71:82:59:3a:57:14:d6:73:6b:96:d8:e4:af:be: 7e:c6:c5:f2:cc:3f:b9:5f:61:51:6e:8e:bb:6f:ba: c4:55:d6:40:51:28:20:49:df:54:7c:45:9e:56:09: 09:3e:fe:17:d4:f2:58:7f:31:af:19:ac:a7:d2:2a: da:7e:b7:9d:e3:c1:cc:cf:1c:16:c3:bc:d4:56:8b: f5:84:77:a8:ea:39:19:13:a0:0e:e3:14:a8:eb:40: 41:69:99:a8:f6:96:73:89:de:53:58:47:cb:0d:72: 12:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:D7:C0:91:C2:1F:2B:7E:8C:47:CB:D5:91:D8:FB:FE:60:6C:4D:8B X509v3 Authority Key Identifier: keyid:8C:FB:22:7D:A1:EF:51:DB:23:36:4B:BA:03:4D:0F:68:A0:9A:5F:59 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/5252ead3-dc8f-4d86-afcf-a140e5b87532/0/8CFB227DA1EF51DB23364BBA034D0F68A09A5F59.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8CFB227DA1EF51DB23364BBA034D0F68A09A5F59.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/5252ead3-dc8f-4d86-afcf-a140e5b87532/0/8CFB227DA1EF51DB23364BBA034D0F68A09A5F59.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 69:50:d3:18:2a:18:99:42:5b:f5:23:5e:13:2c:73:3b:7b:61: 3d:ea:f5:8b:bd:72:43:26:f7:20:17:ec:2f:8e:de:36:4d:3f: f5:63:06:63:00:4d:0f:cd:ba:0a:4f:47:8f:fb:0e:57:f3:f8: eb:c6:5c:2c:5e:19:29:72:9a:29:64:fc:b1:d2:7d:58:4f:dd: 6b:b7:df:01:42:ba:b9:21:bc:b9:20:df:7c:6a:07:ce:a4:f4: 19:04:17:9c:6e:2c:66:f8:e9:07:e5:71:97:ec:aa:ad:a6:0b: d0:bf:01:c7:ae:d5:5e:0f:e2:dd:8f:84:98:7d:3c:ea:39:da: e3:49:97:ed:4a:40:b7:ac:ac:3d:51:f2:0d:d5:c9:63:52:e7: c8:0a:a5:52:d0:7f:7d:4c:ee:66:f5:14:0e:7e:2e:4e:3f:ed: f0:92:4b:c7:9a:3d:7d:aa:1f:7f:f4:40:18:b5:5d:bb:95:c3: e9:f9:0b:8d:30:b4:c6:9a:d8:4b:9c:26:67:66:63:e7:8d:b2: 4a:78:b2:f3:fa:ae:b0:ff:ea:48:83:88:82:ef:c8:6a:8e:f9: ea:d9:90:86:15:0e:8a:88:cc:a6:eb:b2:8f:bb:d5:f3:58:42: 83:94:15:25:90:18:69:55:8a:a8:0b:3e:8d:14:08:7b:20:0f: 1e:f5:93:13 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUI5xggp4/x+BUpIt1yUZjgAjG8iMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOENGQjIyN0RBMUVGNTFEQjIzMzY0QkJBMDM0RDBGNjhB MDlBNUY1OTAeFw0yNTA2MDIwMzU2MzFaFw0yNTA2MDUxMTA2MzFaMDMxMTAvBgNV BAMTKDJERDdDMDkxQzIxRjJCN0U4QzQ3Q0JENTkxRDhGQkZFNjA2QzREOEIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDrZnDGsOaEgCgtnmO41oWZ0faH /0mxR5KtF+Xkicle92EQjbxM0EeazpJf66hIGnxyU5W6EczSAC3BeZtXN4ncrD0F paXnnDZo9j0O5zpHzRbilh36+yYOsWzGG+R24IPivDXghg5WHH9dn7mEuNxOHuCZ X1wYAPNKfDLcb1h671CAoTpZM/g1wxpiYSFG6iVmHKh2zEtxglk6VxTWc2uW2OSv vn7GxfLMP7lfYVFujrtvusRV1kBRKCBJ31R8RZ5WCQk+/hfU8lh/Ma8ZrKfSKtp+ t53jwczPHBbDvNRWi/WEd6jqORkToA7jFKjrQEFpmaj2lnOJ3lNYR8sNchKjAgMB AAGjggI8MIICODAdBgNVHQ4EFgQULdfAkcIfK36MR8vVkdj7/mBsTYswHwYDVR0j BBgwFoAUjPsifaHvUdsjNku6A00PaKCaX1kwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 MjUyZWFkMy1kYzhmLTRkODYtYWZjZi1hMTQwZTViODc1MzIvMC84Q0ZCMjI3REEx RUY1MURCMjMzNjRCQkEwMzREMEY2OEEwOUE1RjU5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOENGQjIyN0RBMUVGNTFEQjIzMzY0QkJBMDM0RDBGNjhBMDlB NUY1OS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNTI1MmVhZDMtZGM4Zi00ZDg2LWFm Y2YtYTE0MGU1Yjg3NTMyLzAvOENGQjIyN0RBMUVGNTFEQjIzMzY0QkJBMDM0RDBG NjhBMDlBNUY1OS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGlQ0xgqGJlCW/UjXhMsczt7YT3q9Yu9ckMm 9yAX7C+O3jZNP/VjBmMATQ/NugpPR4/7Dlfz+OvGXCxeGSlymilk/LHSfVhP3Wu3 3wFCurkhvLkg33xqB86k9BkEF5xuLGb46QflcZfsqq2mC9C/Aceu1V4P4t2PhJh9 POo52uNJl+1KQLesrD1R8g3VyWNS58gKpVLQf31M7mb1FA5+Lk4/7fCSS8eaPX2q H3/0QBi1XbuVw+n5C40wtMaa2EucJmdmY+eNskp4svP6rrD/6kiDiILvyGqO+erZ kIYVDoqIzKbrso+71fNYQoOUFSWQGGlViqgLPo0UCHsgDx71kxM= -----END CERTIFICATE-----Generated at Tue Jun 3 23:40:15 2025 by rpki-client