$ rpki-client -vvf repo-rpki.idnic.net/repo/59cc2e5b-3b91-42af-8203-5e3b91704843/0/8E5335B45EE371DC463E5C65783A244FD1846656.mft File: 8E5335B45EE371DC463E5C65783A244FD1846656.mft (raw, json) Hash identifier: rCLP0GJ37c516QUZti40z7nU/qpNf/dEFmzqBwY8/CQ= Subject key identifier: C3:E5:D5:5C:CB:7A:21:32:81:F3:49:59:52:46:19:22:C4:6C:9C:56 Authority key identifier: 8E:53:35:B4:5E:E3:71:DC:46:3E:5C:65:78:3A:24:4F:D1:84:66:56 Certificate issuer: /CN=8E5335B45EE371DC463E5C65783A244FD1846656 Certificate serial: 07790D6BBF297B027F76F0E9B39411FF713A0121 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8E5335B45EE371DC463E5C65783A244FD1846656.cer Subject info access: rsync://repo-rpki.idnic.net/repo/59cc2e5b-3b91-42af-8203-5e3b91704843/0/8E5335B45EE371DC463E5C65783A244FD1846656.mft Manifest number: BE Signing time: Sun 01 Jun 2025 22:11:27 +0000 Manifest this update: Sun 01 Jun 2025 22:06:27 +0000 Manifest next update: Thu 05 Jun 2025 04:24:27 +0000 Files and hashes: 1: 8E5335B45EE371DC463E5C65783A244FD1846656.crl (hash: lXK5ADJP9BgGYC8CF8F5Qz/2VAo1UHek3Sa6IkOARAs=) 2: 3130332e3138302e39352e302f32342d3234203d3e20313439333538.roa (hash: gZ7MIdwunPoLq27viYGE8zwAvrRl3NrvQYfYS07O7wA=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/59cc2e5b-3b91-42af-8203-5e3b91704843/0/8E5335B45EE371DC463E5C65783A244FD1846656.crl rsync://repo-rpki.idnic.net/repo/59cc2e5b-3b91-42af-8203-5e3b91704843/0/8E5335B45EE371DC463E5C65783A244FD1846656.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8E5335B45EE371DC463E5C65783A244FD1846656.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 05 Jun 2025 04:24:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 07:79:0d:6b:bf:29:7b:02:7f:76:f0:e9:b3:94:11:ff:71:3a:01:21 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8E5335B45EE371DC463E5C65783A244FD1846656 Validity Not Before: Jun 1 22:06:27 2025 GMT Not After : Jun 5 04:24:27 2025 GMT Subject: CN=C3E5D55CCB7A213281F3495952461922C46C9C56 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:dd:83:70:07:fb:48:58:36:f7:4a:2c:ff:45: d9:80:e9:56:c1:4e:10:c5:24:f9:8c:70:56:1d:ad: fe:a2:0e:06:52:5c:26:0a:21:41:95:cf:8e:25:34: 11:a0:21:40:a4:87:f9:7c:ba:45:53:50:4f:26:01: f9:f1:7a:a4:06:1c:8d:6c:1b:0b:1d:b7:a3:46:6f: e6:88:a0:51:49:e2:bc:82:0c:b1:b1:ed:61:79:9e: 9b:5c:7a:d8:a8:e2:88:a1:e7:ab:77:b5:62:46:bb: b6:d5:f0:53:08:cc:34:32:f6:79:f0:58:b4:71:f6: 8c:c5:4c:30:b4:ea:44:1d:a9:48:91:e1:20:88:42: da:ce:0f:63:08:66:5b:85:b7:47:ce:8f:0f:60:ef: aa:5f:a4:ea:0d:ab:af:44:d5:78:85:66:3d:74:20: 5a:d2:33:fc:04:41:02:2f:5d:35:9f:f5:1d:4b:33: f7:b2:06:68:09:5e:5a:b0:c7:4d:28:9d:88:72:38: a1:8b:95:08:5e:c5:b9:d6:fc:67:4f:98:ac:bb:e0: e8:88:e6:81:3f:b8:c2:92:e0:74:05:4a:fc:02:ea: 82:bc:a7:b2:37:5e:77:31:52:26:a9:a4:58:44:45: f2:8d:7e:79:89:7b:43:ab:6a:c8:ea:80:b1:82:18: a6:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C3:E5:D5:5C:CB:7A:21:32:81:F3:49:59:52:46:19:22:C4:6C:9C:56 X509v3 Authority Key Identifier: keyid:8E:53:35:B4:5E:E3:71:DC:46:3E:5C:65:78:3A:24:4F:D1:84:66:56 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/59cc2e5b-3b91-42af-8203-5e3b91704843/0/8E5335B45EE371DC463E5C65783A244FD1846656.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8E5335B45EE371DC463E5C65783A244FD1846656.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/59cc2e5b-3b91-42af-8203-5e3b91704843/0/8E5335B45EE371DC463E5C65783A244FD1846656.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9a:49:e2:92:3c:14:64:f7:42:4b:be:e6:96:44:ce:09:a5:f5: d2:9e:6c:b3:b9:e4:a6:c3:dc:dc:08:0b:d7:7b:64:3c:39:80: 78:58:e4:ed:8a:28:ec:43:dc:9f:b4:2e:a3:cd:54:c0:a3:75: ba:52:df:8a:22:a9:5e:ef:4a:4b:34:60:c4:c4:b0:ef:7a:23: c1:db:83:41:c8:6a:48:a1:ac:7d:d3:cf:8f:26:e2:7a:92:0d: d8:44:42:f7:eb:e8:3b:a3:f3:b2:5c:90:ac:e8:62:13:03:a0: a9:ce:fd:33:ce:c9:c3:1a:9e:c9:33:b0:47:37:7d:2f:f2:ef: dd:08:cc:e2:7f:db:31:33:66:d8:30:5e:21:6a:ca:91:e7:80: e3:d9:9c:83:f8:9c:01:55:8b:e4:0b:3c:d2:5a:c7:66:b2:c8: 60:02:9e:0e:5c:bf:c8:d0:2f:2c:68:f8:ab:6d:b5:92:3e:79: 15:69:83:64:20:7c:75:f7:c2:f2:d8:5e:d6:bc:a2:a5:ef:db: 33:02:ca:1e:b5:62:0f:46:81:5b:ca:48:9b:44:cd:ad:cd:91: 39:c9:22:36:0e:c7:32:70:95:b2:0f:6b:a3:0d:c6:d2:94:e1: 0e:c4:e6:0a:86:cf:8a:a6:ea:63:36:53:05:d8:a5:e7:bc:19: 59:cc:cc:f9 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUB3kNa78pewJ/dvDps5QR/3E6ASEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEU1MzM1QjQ1RUUzNzFEQzQ2M0U1QzY1NzgzQTI0NEZE MTg0NjY1NjAeFw0yNTA2MDEyMjA2MjdaFw0yNTA2MDUwNDI0MjdaMDMxMTAvBgNV BAMTKEMzRTVENTVDQ0I3QTIxMzI4MUYzNDk1OTUyNDYxOTIyQzQ2QzlDNTYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDU3YNwB/tIWDb3Siz/RdmA6VbB ThDFJPmMcFYdrf6iDgZSXCYKIUGVz44lNBGgIUCkh/l8ukVTUE8mAfnxeqQGHI1s Gwsdt6NGb+aIoFFJ4ryCDLGx7WF5nptcetio4oih56t3tWJGu7bV8FMIzDQy9nnw WLRx9ozFTDC06kQdqUiR4SCIQtrOD2MIZluFt0fOjw9g76pfpOoNq69E1XiFZj10 IFrSM/wEQQIvXTWf9R1LM/eyBmgJXlqwx00onYhyOKGLlQhexbnW/GdPmKy74OiI 5oE/uMKS4HQFSvwC6oK8p7I3XncxUiappFhERfKNfnmJe0OrasjqgLGCGKYHAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUw+XVXMt6ITKB80lZUkYZIsRsnFYwHwYDVR0j BBgwFoAUjlM1tF7jcdxGPlxleDokT9GEZlYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 OWNjMmU1Yi0zYjkxLTQyYWYtODIwMy01ZTNiOTE3MDQ4NDMvMC84RTUzMzVCNDVF RTM3MURDNDYzRTVDNjU3ODNBMjQ0RkQxODQ2NjU2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOEU1MzM1QjQ1RUUzNzFEQzQ2M0U1QzY1NzgzQTI0NEZEMTg0 NjY1Ni5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNTljYzJlNWItM2I5MS00MmFmLTgy MDMtNWUzYjkxNzA0ODQzLzAvOEU1MzM1QjQ1RUUzNzFEQzQ2M0U1QzY1NzgzQTI0 NEZEMTg0NjY1Ni5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJpJ4pI8FGT3Qku+5pZEzgml9dKebLO55KbD 3NwIC9d7ZDw5gHhY5O2KKOxD3J+0LqPNVMCjdbpS34oiqV7vSks0YMTEsO96I8Hb g0HIakihrH3Tz48m4nqSDdhEQvfr6Duj87JckKzoYhMDoKnO/TPOycManskzsEc3 fS/y790IzOJ/2zEzZtgwXiFqypHngOPZnIP4nAFVi+QLPNJax2ayyGACng5cv8jQ Lyxo+KtttZI+eRVpg2QgfHX3wvLYXta8oqXv2zMCyh61Yg9GgVvKSJtEza3NkTnJ IjYOxzJwlbIPa6MNxtKU4Q7E5gqGz4qm6mM2UwXYpee8GVnMzPk= -----END CERTIFICATE-----Generated at Tue Jun 3 23:55:34 2025 by rpki-client